first commit

ahze · ahze · commit ec3d6148fee5 · 2026-01-03T06:20:31.000-05:00
diff --git a/.daemonless.yml b/.daemonless.yml
@@ -0,0 +1 @@
+icon: ':material-database:'
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -0,0 +1,21 @@
+name: Build PostgreSQL Container
+
+on:
+  push:
+    branches: [main]
+    paths-ignore: ['*.md', 'LICENSE', '.gitignore']
+  pull_request:
+    branches: [main]
+  workflow_dispatch:
+
+jobs:
+  build:
+    strategy:
+      matrix:
+        pg_version: [14, 17]
+    uses: daemonless/daemonless/.github/workflows/build-app.yml@main
+    with:
+      image_name: postgres
+      image_tag: ${{ matrix.pg_version }}
+      build_args: PG_VERSION=${{ matrix.pg_version }}
+    secrets: inherit
diff --git a/.woodpecker.yml b/.woodpecker.yml
@@ -0,0 +1,54 @@
+# Woodpecker CI configuration for PostgreSQL
+
+steps:
+  - name: build-14
+    image: /bin/sh
+    environment:
+      GITHUB_TOKEN:
+        from_secret: GITHUB_TOKEN
+      GITHUB_ACTOR:
+        from_secret: GITHUB_USER
+    commands:
+      - |
+        mkdir -p scripts
+        fetch -qo scripts/build.sh \
+          "https://raw.githubusercontent.com/daemonless/daemonless/build-v1.2.0/scripts/build.sh"
+        chmod +x scripts/build.sh
+        ./scripts/build.sh \
+          --doas \
+          --registry ghcr.io \
+          --image ghcr.io/daemonless/postgres \
+          --tag 14 \
+          --build-arg PG_VERSION=14 \
+          --skip-wip \
+          --login --push
+
+  - name: build-17
+    image: /bin/sh
+    environment:
+      GITHUB_TOKEN:
+        from_secret: GITHUB_TOKEN
+      GITHUB_ACTOR:
+        from_secret: GITHUB_USER
+    commands:
+      - |
+        mkdir -p scripts
+        fetch -qo scripts/build.sh \
+          "https://raw.githubusercontent.com/daemonless/daemonless/build-v1.2.0/scripts/build.sh"
+        chmod +x scripts/build.sh
+        ./scripts/build.sh \
+          --doas \
+          --registry ghcr.io \
+          --image ghcr.io/daemonless/postgres \
+          --tag 17 \
+          --tag latest \
+          --build-arg PG_VERSION=17 \
+          --skip-wip \
+          --login --push
+
+when:
+  - event: push
+    branch: main
+    path:
+      exclude: ["*.md", "docs/**", "LICENSE", ".gitignore"]
+  - event: manual
diff --git a/Containerfile b/Containerfile
@@ -0,0 +1,53 @@
+ARG BASE_VERSION=15
+ARG PG_VERSION=17
+FROM ghcr.io/daemonless/base:${BASE_VERSION}
+ARG PG_VERSION
+
+ARG FREEBSD_ARCH=amd64
+ARG PACKAGES="postgresql${PG_VERSION}-server postgresql${PG_VERSION}-client"
+ARG UPSTREAM_URL="https://www.postgresql.org/docs/release/"
+ARG HEALTHCHECK_ENDPOINT="pg_isready -q"
+
+LABEL org.opencontainers.image.title="PostgreSQL ${PG_VERSION}" \
+    org.opencontainers.image.description="PostgreSQL ${PG_VERSION} on FreeBSD" \
+    org.opencontainers.image.source="https://github.com/daemonless/postgres" \
+    org.opencontainers.image.url="https://www.postgresql.org/" \
+    org.opencontainers.image.documentation="https://www.postgresql.org/docs/${PG_VERSION}/" \
+    org.opencontainers.image.licenses="PostgreSQL" \
+    org.opencontainers.image.vendor="daemonless" \
+    org.opencontainers.image.authors="daemonless" \
+    io.daemonless.port="5432" \
+    io.daemonless.arch="${FREEBSD_ARCH}" \
+    io.daemonless.category="Databases" \
+    io.daemonless.upstream-url="${UPSTREAM_URL}" \
+    io.daemonless.packages="${PACKAGES}"
+
+# Install PostgreSQL
+RUN pkg update && \
+    pkg install -y ${PACKAGES} && \
+    pkg clean -ay && \
+    rm -rf /var/cache/pkg/* /var/db/pkg/repos/*
+
+# Create directories
+RUN mkdir -p /var/db/postgres/data${PG_VERSION} /var/run/postgresql /run/secrets /docker-entrypoint-initdb.d && \
+    chown -R bsd:bsd /var/db/postgres /var/run/postgresql /run/secrets /docker-entrypoint-initdb.d
+
+# Copy service definitions and init scripts
+COPY root/ /
+
+# Make scripts executable
+RUN chmod +x /etc/services.d/*/run /etc/cont-init.d/* 2>/dev/null || true
+
+# Store PG version for scripts
+RUN echo "${PG_VERSION}" > /var/db/postgres/pg_version
+
+ENV PGDATA="/var/db/postgres/data${PG_VERSION}" \
+    PG_VERSION="${PG_VERSION}" \
+    POSTGRES_USER="postgres" \
+    POSTGRES_PASSWORD="" \
+    POSTGRES_DB="postgres" \
+    POSTGRES_INITDB_ARGS="" \
+    POSTGRES_HOST_AUTH_METHOD="scram-sha-256"
+
+EXPOSE 5432
+VOLUME /var/db/postgres
diff --git a/README.md b/README.md
@@ -0,0 +1,96 @@
+# PostgreSQL
+
+PostgreSQL database server on FreeBSD.
+
+## Quick Start
+
+```bash
+podman run -d --name postgres \
+  -p 5432:5432 \
+  -e POSTGRES_PASSWORD=mysecretpassword \
+  -v /path/to/data:/var/db/postgres \
+  --annotation 'org.freebsd.jail.allow.sysvipc=true' \
+  ghcr.io/daemonless/postgres:17
+```
+
+## podman-compose
+
+```yaml
+services:
+  postgres:
+    image: ghcr.io/daemonless/postgres:17
+    container_name: postgres
+    environment:
+      - POSTGRES_USER=postgres
+      - POSTGRES_PASSWORD=mysecretpassword
+      - POSTGRES_DB=mydb
+    volumes:
+      - /data/postgres:/var/db/postgres
+    ports:
+      - 5432:5432
+    annotations:
+      org.freebsd.jail.allow.sysvipc: "true"
+    restart: unless-stopped
+```
+
+## Tags
+
+| Tag | Description |
+|-----|-------------|
+| `:17` | PostgreSQL 17 (latest) |
+| `:14` | PostgreSQL 14 |
+| `:latest` | Alias for `:17` |
+
+## Environment Variables
+
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `POSTGRES_USER` | `postgres` | Database superuser name |
+| `POSTGRES_PASSWORD` | (empty) | Superuser password |
+| `POSTGRES_DB` | `postgres` | Default database name |
+| `PGDATA` | `/var/db/postgres/dataXX` | Data directory (XX = version) |
+| `POSTGRES_INITDB_ARGS` | (empty) | Extra args for initdb (e.g., `--data-checksums`) |
+| `POSTGRES_HOST_AUTH_METHOD` | `scram-sha-256` | Auth method (`scram-sha-256`, `md5`, `trust`) |
+
+### Docker Secrets
+
+Secrets can be passed via `*_FILE` environment variables:
+
+| Variable | Description |
+|----------|-------------|
+| `POSTGRES_PASSWORD_FILE` | Path to file containing password |
+
+## Initialization Scripts
+
+Place scripts in `/docker-entrypoint-initdb.d/` to run on first startup:
+
+| Extension | Behavior |
+|-----------|----------|
+| `*.sh` | Executed if executable, sourced otherwise |
+| `*.sql` | Run via psql against `$POSTGRES_DB` |
+| `*.sql.gz` | Decompressed and run via psql |
+
+Scripts run in sorted filename order after database creation.
+
+## Volumes
+
+| Path | Description |
+|------|-------------|
+| `/var/db/postgres` | PostgreSQL data directory |
+
+## Ports
+
+| Port | Description |
+|------|-------------|
+| 5432 | PostgreSQL |
+
+## Notes
+
+- **User:** `bsd` (UID/GID 1000)
+- **SysV IPC:** Requires `--annotation 'org.freebsd.jail.allow.sysvipc=true'`
+
+## Links
+
+- [PostgreSQL Website](https://www.postgresql.org/)
+- [FreshPorts postgresql17-server](https://www.freshports.org/databases/postgresql17-server/)
+- [FreshPorts postgresql14-server](https://www.freshports.org/databases/postgresql14-server/)
diff --git a/root/etc/cont-init.d/10-postgres-config b/root/etc/cont-init.d/10-postgres-config
@@ -0,0 +1,28 @@
+#!/bin/sh
+# PostgreSQL configuration setup
+
+# Load secrets from *_FILE environment variables (Docker secrets pattern)
+for var in $(env | grep '_FILE=' | cut -d= -f1); do
+    base_var="${var%_FILE}"
+    file_path="$(eval echo \"\$$var\")"
+    if [ -f "$file_path" ]; then
+        value="$(cat "$file_path")"
+        export "$base_var"="$value"
+        echo "Loaded secret for $base_var from $file_path"
+    else
+        echo "Warning: Secret file $file_path not found for $var"
+    fi
+done
+
+PG_VERSION=$(cat /var/db/postgres/pg_version 2>/dev/null || echo "17")
+PGDATA="/var/db/postgres/data${PG_VERSION}"
+
+echo "Setting up PostgreSQL ${PG_VERSION}..."
+
+# Create required directories
+mkdir -p "$PGDATA" /var/run/postgresql
+
+# Set ownership (bsd:bsd is UID/GID 1000:1000)
+chown -R bsd:bsd /var/db/postgres /var/run/postgresql
+
+echo "PostgreSQL configuration complete"
diff --git a/root/etc/services.d/postgresql/run b/root/etc/services.d/postgresql/run
@@ -0,0 +1,73 @@
+#!/bin/sh
+# PostgreSQL s6 service
+
+PG_VERSION=$(cat /var/db/postgres/pg_version 2>/dev/null || echo "17")
+PGDATA="/var/db/postgres/data${PG_VERSION}"
+
+# Initialize database if needed
+if [ ! -f "$PGDATA/PG_VERSION" ]; then
+    echo "Initializing PostgreSQL ${PG_VERSION} database..."
+
+    # Build initdb command with optional args
+    INITDB_CMD="/usr/local/bin/initdb -D $PGDATA -E UTF8 --locale=C"
+    if [ -n "$POSTGRES_INITDB_ARGS" ]; then
+        INITDB_CMD="$INITDB_CMD $POSTGRES_INITDB_ARGS"
+    fi
+    /usr/local/bin/s6-setuidgid bsd sh -c "$INITDB_CMD"
+
+    # Configure authentication method (default: scram-sha-256)
+    AUTH_METHOD="${POSTGRES_HOST_AUTH_METHOD:-scram-sha-256}"
+    echo "host all all 0.0.0.0/0 $AUTH_METHOD" >> "$PGDATA/pg_hba.conf"
+    echo "host all all ::/0 $AUTH_METHOD" >> "$PGDATA/pg_hba.conf"
+    echo "local all all trust" >> "$PGDATA/pg_hba.conf"
+
+    # Listen on all interfaces
+    echo "listen_addresses = '*'" >> "$PGDATA/postgresql.conf"
+
+    # Start temporarily to create user/database and run init scripts
+    /usr/local/bin/s6-setuidgid bsd /usr/local/bin/pg_ctl -D "$PGDATA" -w start
+
+    # Create user and database if specified
+    if [ -n "$POSTGRES_PASSWORD" ]; then
+        /usr/local/bin/s6-setuidgid bsd /usr/local/bin/psql -c "ALTER USER $POSTGRES_USER PASSWORD '$POSTGRES_PASSWORD'" 2>/dev/null
+    fi
+
+    if [ -n "$POSTGRES_DB" ] && [ "$POSTGRES_DB" != "postgres" ]; then
+        /usr/local/bin/s6-setuidgid bsd /usr/local/bin/createdb "$POSTGRES_DB" 2>/dev/null
+    fi
+
+    # Run init scripts from /docker-entrypoint-initdb.d/
+    if [ -d /docker-entrypoint-initdb.d ]; then
+        for f in /docker-entrypoint-initdb.d/*; do
+            [ -e "$f" ] || continue
+            case "$f" in
+                *.sh)
+                    if [ -x "$f" ]; then
+                        echo "Running $f"
+                        "$f"
+                    else
+                        echo "Sourcing $f"
+                        . "$f"
+                    fi
+                    ;;
+                *.sql)
+                    echo "Running $f"
+                    /usr/local/bin/s6-setuidgid bsd /usr/local/bin/psql -d "${POSTGRES_DB:-postgres}" -f "$f"
+                    ;;
+                *.sql.gz)
+                    echo "Running $f"
+                    gunzip -c "$f" | /usr/local/bin/s6-setuidgid bsd /usr/local/bin/psql -d "${POSTGRES_DB:-postgres}"
+                    ;;
+                *)
+                    echo "Ignoring $f"
+                    ;;
+            esac
+        done
+    fi
+
+    # Stop PostgreSQL (s6 will start it properly)
+    /usr/local/bin/s6-setuidgid bsd /usr/local/bin/pg_ctl -D "$PGDATA" -w stop
+fi
+
+echo "Starting PostgreSQL ${PG_VERSION}..."
+exec /usr/local/bin/s6-setuidgid bsd /usr/local/bin/postgres -D "$PGDATA"
