postgresql-17-src-meson.yml

name: postgresql-17-src-meson
on: [pull_request, workflow_dispatch]

permissions:
  contents: read

jobs:
  build:
    name: pg-17-src-meson-test
    runs-on: ubuntu-22.04
    steps:


      - name: Remove old postgres
        run: |
          sudo apt purge postgresql-client-common postgresql-common \
            postgresql postgresql*
          sudo rm -rf /var/lib/postgresql /var/log/postgresql /etc/postgresql \
           /usr/lib/postgresql /usr/include/postgresql /usr/share/postgresql \
           /etc/postgresql
          sudo rm -f /usr/bin/pg_config

      - name: Install dependencies
        run: |
          sudo apt-get update
          sudo apt-get install -y libreadline6-dev systemtap-sdt-dev \
            zlib1g-dev libssl-dev libpam0g-dev bison flex \
            libipc-run-perl -y docbook-xsl docbook-xsl libxml2 libxml2-utils \
            libxml2-dev libxslt-dev xsltproc libkrb5-dev libldap2-dev \
            libsystemd-dev gettext tcl-dev libperl-dev pkg-config clang-11 \
            llvm-11 llvm-11-dev libselinux1-dev python3-dev \
            uuid-dev liblz4-dev meson ninja-build  \
            gpg wget libcurl4-openssl-dev libhttp-server-simple-perl python3-pykmip
          sudo /usr/bin/perl -MCPAN -e 'install IPC::Run'
          sudo /usr/bin/perl -MCPAN -e 'install Text::Trim'
          wget -O- https://apt.releases.hashicorp.com/gpg | sudo gpg --dearmor -o /usr/share/keyrings/hashicorp-archive-keyring.gpg
          echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/hashicorp-archive-keyring.gpg] https://apt.releases.hashicorp.com $(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/hashicorp.list
          sudo apt update && sudo apt install -y vault

      - name: Clone postgres repository
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        with:
          repository: 'percona/postgres'
          ref: 'TDE_REL_17_STABLE'
          path: 'src'

      - name: Clone pg_tde repository
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        with:
          path: 'src/contrib/pg_tde'

      - name: Checkout libkmip submodule
        run: |
          git submodule update --init --recursive
        working-directory: src/contrib/pg_tde

      - name: Build postgres
        run: |
          meson setup build --prefix `pwd`/../inst --buildtype=debug -Dcassert=true
          cd build && ninja && ninja install
        working-directory: src

      - name: Setup kmip 1
        run: |
          wget https://raw.githubusercontent.com/OpenKMIP/PyKMIP/refs/heads/master/bin/create_certificates.py
          python3 create_certificates.py
          cat client_certificate_jane_doe.pem >> client_key_jane_doe.pem
        working-directory: /tmp

      - name: Test pg_tde
        run: |
          TV=$(mktemp)
          { exec >$TV; vault server -dev; } &
          pykmip-server -f `pwd`/../contrib/pg_tde/pykmip-server.conf -l /tmp/kmip-server.log &
          sleep 10
          export ROOT_TOKEN=$(cat $TV | grep "Root Token" | cut -d ":" -f 2 | xargs echo -n)
          echo "Root token: $ROOT_TOKEN"
          meson test --suite setup -v
          meson test --suite pg_tde -v --num-processes 1
        working-directory: src/build

      - name: Report on test fail
        uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
        if: ${{ failure() }}
        with:
          name: Regressions diff and postgresql log
          path: |
            src/build/testrun/pg_tde/
            src/contrib/pg_tde/t/results/
          retention-days: 3