Regression in recovery mode (Re: postgresql-9.1 updated to version 9.1.16-1.pgdg+1) - Mailing list pgsql-pkg-debian

From Christoph Berg
Subject Regression in recovery mode (Re: postgresql-9.1 updated to version 9.1.16-1.pgdg+1)
Date
Msg-id 20150523204435.GC28106@msg.df7cb.de
Whole thread Raw
In response to postgresql-9.1 updated to version 9.1.16-1.pgdg+1  (apt.postgresql.org repository <myon@debian.org>)
List pgsql-pkg-debian
Re: To PostgreSQL in Debian 2015-05-22 <E1YvmXn-0000PK-5b@atalia.postgresql.org>
> The package postgresql-9.1 was updated on apt.postgresql.org:
>
> New version 9.1.16-1.pgdg+1:

Hi,

we do have a problem in recovery mode now:

http://www.postgresql.org/message-id/20150523172627.GA24277@msg.df7cb.de

In versions 9.1 and earlier, by default symlinks
/var/lib/postgresql/*/*/server.crt and .key to /etc/ssl/ are created.
The symlink targets are owned by root and only readable for the
postgres user. These cause server recovery with the new versions to
fail.

Possible workarounds are:

* Replace the symlinks by the files pointed to and make them writable
  for postgres
* Make the files in /etc/ssl/ writable for postgres (NOT RECOMMENDED)
* Disable SSL and remove the symlinks (not the best idea either)
* Downgrade

Versions 9.2 and later are also affected (any file not writable by the
postgres user is bad), but the default disk layout does not contain
these problematic symlinks.

We are looking into providing fixed packages ASAP.

Christoph
--
cb@df7cb.de | http://www.df7cb.de/

Attachment

pgsql-pkg-debian by date:

Previous
From: apt.postgresql.org repository
Date:
Subject: postgresql-common updated to version 168.pgdg+1
Next
From: Christoph Berg
Date:
Subject: Re: pgtap in our apt repo