Release Note

The latest Pigsty release is v4.5.0.

v4.5.0

Pigsty v4.5.0 adds pilot modules, replaceable data services, and orchestration based on cluster identity. It also improves observability and the software supply chain. The release adds Kafka KRaft, MySQL 8.4, and Valkey support, and makes Silo the MINIO backend. The packaged extension catalog grows from 531 to 575 extensions. Released on 2026-08-15. See the GitHub release and full source comparison at v4.4.0...v4.5.0.

Highlights

• 575 extensions: Adds 46 entries and removes 2 from the 531 entries in v4.4.0, for a net increase of 44. The catalog now contains 575 extensions across 406 non-contrib package families. It tracks RPM/DEB coverage for each platform.
• Kafka KRaft module: Adds native Pigsty orchestration for Kafka and supports multiple clusters. It includes dynamic member enrollment and retirement, SCRAM/TLS, secure credential rotation, monitoring metrics, and Grafana dashboards.
• MySQL 8.4 module: Adds standalone and three-node InnoDB Cluster deployments. It includes MySQL Router, XtraBackup, user and database provisioning, monitoring, alerting, and idempotent reconciliation.
• Valkey and Silo: REDIS adds redis_type: valkey; the final MINIO source accepts only minio_type: silo. The RustFS integration developed during this cycle was fully withdrawn before the candidate baseline.
• 51 standalone configuration templates: Adds demo/kafka, demo/mysql, and the eight-node ha/octo simulation template to the 48 standalone templates in v4.4.0. The compatibility symlink conf/app/supa.yml → ../supabase.yml remains available.
• Safer cluster-identity orchestration: PGSQL, REDIS, MINIO, KAFKA, and MYSQL initialization playbooks skip unrelated hosts by explicit cluster identity. Their removal playbooks do the same, except mysql-rm.yml. That playbook stops with an error for any incorrectly selected host. etcd delegation and DBSU key exchange now use actual cluster members.
• Observability and supply chain: Re-exports Grafana dashboards to Dashboard API v2 and moves MinIO/Silo collection to Metrics V3. Generates local repositories atomically with SOW and removes synthetic ModuleMD metadata.
• Kernel and toolchain updates: Completes pgBackRest support for PostgreSQL 19 beta2 and enables cluster mode for Percona PostgreSQL TDE. Fixes IvorySQL initialization and WAL compression. Updates extension package maps, exporters, and build tooling.

New Modules and Data Services

• The Kafka module uses node state as the source of truth for dynamic KRaft orchestration. It manages one or more clusters in one inventory. It supports a kafka.yml run without a limit and rejects partial --limit selections. The destructive kafka-rm.yml requires a non-empty -l/--limit. Before partial retirement can stop services, it validates a safe absolute data path and surviving broker/controller anchors. Nodes retain authoritative manifests and secrets. Supported operations include dynamic controller joins, broker admission, member retirement, and three-step dead-node replacement. The module supports SCRAM-SHA-512/TLS, credential and certificate rotation, and self-tested partition health checks.
• The MySQL pilot module uses a fixed MySQL 8.4 LTS platform. It accepts a standalone node or a three-node InnoDB Cluster. It includes MySQL Shell and Router, scheduled full XtraBackup backups, TLS, and account and database provisioning. It also includes primary-key policy checks, conservative member removal, and idempotent reconciliation.
• The REDIS module retains redis as its default engine and supports Valkey through redis_type: valkey. Service units now use Type=notify with a 1,800-second startup timeout. This release also improves topology validation, password handling, tag-scoped removal behavior, and rebuild protection.
• The MINIO module now deploys only Silo. minio_type remains an extension point, but this release accepts only silo. At startup, the module checks the systemd Invocation ID and ActiveState=active for the current restart. It waits about 600 seconds by default, then runs the Silo cluster health check. Infra packages add silo and mcli. They preserve the S3/Admin APIs, /minio/* routes, MINIO_* environment variables, and disk format.
• minio_cluster groups the object-storage topology. Its inventory group name can differ, and one inventory can contain multiple object-storage clusters. Use distinct minio_alias, minio_domain, and minio_endpoint values for each cluster. This prevents shared client aliases on INFRA nodes from being overwritten. demo/minio now selects Silo explicitly and limits its local repository to the infra,node modules.
• The standalone FERRET module is replaced by PostgreSQL Mongo mode and the FerretDB Docker APP. PostgreSQL provides the DocumentDB data layer, while Docker Compose provides the FerretDB protocol layer.

Orchestration, Security, and Tooling

• deploy.yml, slim.yml, and PGSQL, REDIS, MINIO, KAFKA, and MYSQL initialization playbooks now skip unrelated hosts by their *_cluster identity. PGSQL, REDIS, MINIO, and KAFKA removal playbooks do the same. mysql-rm.yml does not skip hosts without identity. It stops with an error in mysql_rm_check. Every host that enters a role still receives an internal identity check.
• PGSQL configuration, PITR, and removal workflows delegate only if the canonical etcd group exists and has at least one member. They no longer silently fall back to localhost when no etcd target exists. DBSU SSH key exchange uses the actual pg_cluster_members. This supports topologies that cross inventory groups, such as Citus.
• PGSQL PITR and removal now delete only the etcd subtree bounded by /<cluster>/. This protects adjacent clusters whose names share a prefix. Pigsty writes the initial pgBackRest marker /etc/pgbackrest/initial.done only after the backup command succeeds.
• HAProxy uses the fixed /etc/haproxy/haproxy.cfg and /etc/haproxy/conf.d layout, upstream master-worker mode, a master socket, and Type=notify. dnsmasq now binds dynamically, answers private reverse lookups locally, and handles node addresses added after INFRA initialization.
• Pigsty places its rendered systemd units under /etc/systemd/system. This release further restricts permissions on sensitive configuration and privileged files. Removal workflows stop services before data cleanup.
• REPO and CACHE now use sow create --pigsty to generate RPM/APT metadata and the SHA-256 repo_complete marker atomically. They no longer generate synthetic ModuleMD metadata. pg_id also compares cluster size as an explicit integer for older Ansible releases.
• RPM exporter package names move from underscores to hyphens, for example node_exporter → node-exporter. Debian repository naming and PGDG YUM extension package mappings are corrected as well.
• Tuned profiles use /etc/tuned/profiles on EL 10, Debian 13, and Ubuntu 26. They use /etc/tuned on EL 8/9, Debian 12, and Ubuntu 22/24. Debian/Ubuntu package installation also prevents premature starts of Silo, Redis/Valkey, and legacy log services.
• This release updates China-region repository routing. OS, Docker, Grafana, Percona, supported MongoDB APT, and uv/PyPI paths prefer Tencent Cloud. EL and Docker entries retain Huawei Cloud and Aliyun fallbacks where appropriate. MySQL and Kubernetes use USTC mirrors, and ClickHouse uses Huawei Cloud. MongoDB RPM no longer advertises an unavailable China-region alternative. roles/node_id/vars/<os>.<arch>.yml defines the final choices for each platform.
• The Docker image moves to Debian 13.6 and Pigsty v4.5.0. Vagrant enforces a 32 GiB root disk, accepts pinned box versions, and adds the eight-node ha/octo lab. docker/Makefile fixes its data directory at ./data, and make purge deletes that directory directly.
• GitHub Actions for checkout, CodeQL, Docker build/login, and Cosign are upgraded in one batch. Release, bootstrap, install, and validation scripts also tighten file and argument handling. Release archives now derive top-level pigsty.yml from conf/meta.yml, include the Kafka/MySQL playbooks, and drop the legacy Mongo playbook.
• Run the release-signing workflow from main. It signs only the pigsty-<tag>.tgz source archive and excludes multi-gigabyte offline bundles. The package-build bootstrap matrix now matches conf/build/oss.yml: EL 9/10, Debian 12/13, and Ubuntu 22/24/26.

Observability

• Re-exports the dashboard set through the Pig/Grafana tooling to Dashboard API v2. Adds four Kafka and five MySQL dashboards, and refreshes links, variables, and layouts across Node, PostgreSQL, Redis, and Infra dashboards.
• Migrates the MinIO/Silo Overview and Instance dashboards to Metrics V3. Victoria scrapes the /minio/metrics/v3 root endpoint and drops high-cardinality samples carrying a non-empty bucket label.
• Updates the pg_exporter configuration to 1.4.0. Fixes duplicate time series from the 1.4.1 pg_subrel query. PG19 gains pg_sub_19, pg_recovery_state, pg_wal_19, pg_lock_stat, and pg_vacuum_score. PG10+ gains the pg_xact_age transaction-age histogram. The update also covers replication-slot idle_timeout and WAL Receiver connecting state encoding. Kafka JMX/protocol exporters and the MySQL exporter join the standard target and alert pipelines.

PostgreSQL Kernels and Extension Packages

• PostgreSQL 19 beta3 templates now include pgBackRest packages and backup support.

• All four standard Patroni templates add the PostgreSQL 18.6 logical-decoding allowlist output_plugin_libraries: 'pgoutput, test_decoding, wal2json'. Patroni filters it on older PostgreSQL versions that do not support this setting.

• Percona PostgreSQL 18 TDE now uses cluster mode and retains Pigsty-prefixed packages to avoid conflicts with native PostgreSQL packages.

• IvorySQL now initializes its default database correctly and enables compatible WAL compression in workload templates.

• Updates the PostgreSQL fact loader, per-platform package_map, and default extension groups. These changes fill package gaps and correct PGDG/YUM naming. Compared with the v4.4.0 PIG v1.5.1 catalog, the current catalog adds 46 names and removes 2:

  • 32 new primary extensions: argm, cat_tools, cron_utils, fbsql, oidc_validator, online_advisor, pg_cjk_parser, pg_column_tetris, pg_describe, pg_disorder, pg_fts, pg_jieba, pg_kpart, pg_lake, pg_local_cache, pg_mentat, pg_oidc_validator, pg_policy, pg_roast, pg_tiktoken_c, pg_turbovec, pg_vault_tde, pgcontext, pgfr_record, pgmemento, pgmonitor, pgsqlmock, pgwasm, plruby, plx, postbis, and qdgc.
  • 13 child extensions from those package families: hstore_plruby, jsonb_plruby, ltree_plruby, pg_extension_base, pg_extension_updater, pg_lake_copy, pg_lake_engine, pg_lake_iceberg, pg_lake_table, pg_map, pgcontext_pgvector, pgfr_analyze, and qdgc_postgis.
  • One new PGDG extension, pg_statviz. Its package is hidden from the default install group, but the extension remains in the online catalog.
  • Two catalog removals: pg_analytics and spat. The total therefore rises from 531 to 575, a net gain of 44.

• Cumulative notable upgrades include citus 14.2.0, pg_search 0.25.2, timescaledb 2.29.1, vector 0.8.6, documentdb 0.114, pg_partman 5.5.0, pgmnemo 0.16.1, plpgsql_check 2.10.4, provsql 1.12.0, and pgbson 2.1.0, plus a broad pgrx 0.19.1 rebuild.

• The merged table below and the original RPM changelog and DEB changelog give full build records and platform differences. New catalog entries include pg_local_cache and pg_policy. Changelog dates identify package batches. They do not necessarily match the current CSV mtime for each entry.

• pg_statviz is excluded only from the default install group in db/reload.sql; its detail page, platform coverage, and package-name differences remain in the online catalog.

Extension Package Update Log

The table below merges the RPM changelog and DEB changelog after v4.4.0. It has 231 rows aligned by batch and extension name. Identical RPM and DEB records share a row. Version or note differences appear separately. An unchanged version still indicates a rebuild, package-name change, license-metadata change, or platform-coverage change.

The first extension batch after July 10 is July 24. The original batch covers July 7–24 without dates for individual items. The full batch appears here to retain post-release pgrx rebuilds and package-matrix fixes. “RPM only” or “DEB only” means the other changelog has no row for that extension in the same batch.

Infrastructure Package Update Log

The following table contains all 144 Infra log records after v4.4.0, from 2026-07-16 through the latest batch on 2026-08-12. It also includes the ferretdb2 rebuild and RPM exporter package-name migration from the changelog prose. Consecutive upgrades of the same package remain separate batch entries.

Build, download, and verification status uses the original log wording. It does not confirm repository indexing, signing, synchronization, or offline-bundle acceptance. For full context, see the Infra changelog.

Compatibility Changes and Upgrade Notes

• Existing FERRET deployments should remove the legacy ferretdb systemd service. Redeploy the protocol layer with docker.yml and app.yml. This release removes the old mongo.yml playbook, mongo_* parameters, scrape job, and dedicated dashboard.
• Pigsty no longer renders /etc/default/haproxy for the HAProxy unit. The unit can still read this file when present. Use only EXTRAOPTS for process arguments, not OPTIONS. Any EXTRAOPTS override must retain -S /run/haproxy-master.sock and must not include -f.
• New module playbooks require each target host to define its pg_cluster, redis_cluster, minio_cluster, kafka_cluster, or mysql_cluster explicitly. If a custom inventory uses fixed group names without these identity variables, add the variables first.
• The MINIO role accepts only minio_type: silo. Values minio and rustfs fail identity validation. Silo retains MinIO protocol and disk-format compatibility, but package, binary, and systemd service names change. Back up existing object storage before upgrading. Validate in-place compatibility and rollback before upgrading. Package replacement alone does not establish migration acceptance.
• Valkey remains optional. redis_type: valkey installs valkey-server and valkey-cli. Configuration paths, service names, monitoring jobs, and other module interfaces remain under redis for compatibility.
• Pigsty core REPO/CACHE roles require SOW. They use sow create --pigsty to generate local repositories. Older offline bundles or local repositories without SOW 0.3.0 must first install or update it from the Pigsty INFRA repository. pig repo create is a separate CLI operation. Its fallback behavior depends on the CLI version.
• MySQL mysql_databases entries accept only name, encoding, and collate. Pigsty creates databases with DEFAULT ENCRYPTION='N'. mysql_parameters cannot bypass protection for platform-owned, replication, or TLS options through loose_, skip_, disable_, or enable_ prefixes.
• Custom RPM repositories and external automation must replace underscore package names with hyphenated names. For example, replace node_exporter and redis_exporter with node-exporter and redis-exporter.
• docker/Makefile no longer accepts DATA to redirect the cleanup target. make purge immediately deletes repository-local ./data, without a countdown. Preserve required data first.
• KAFKA and MYSQL remain pilot modules. Kafka clients must resolve and reach each broker directly. Do not put the data plane behind HAProxy, a VIP, or an L4 load balancer. MySQL currently accepts exactly one or three members.

GitHub publishes all 14 validated offline artifacts for this release, one per recommended OS version and architecture. A checksums manifest accompanies them. Each file has a detached PGP signature (.asc).

Checksums

e042059379bdfae8f774022b89e8d1e3  pigsty-pkg-v4.5.0.el9.aarch64.tgz
997e812a433a6b969b976fad2c023a1f  pigsty-pkg-v4.5.0.el9.x86_64.tgz
1e1045db965282d564680534bd7d72e2  pigsty-pkg-v4.5.0.el10.aarch64.tgz
9a53f1e85cbb2d4f85969a6112ae4b05  pigsty-pkg-v4.5.0.el10.x86_64.tgz
b7501783c90311176f21bdd35390c746  pigsty-pkg-v4.5.0.d12.aarch64.tgz
f3ecaa449a0bf8e0f01907f83831e74a  pigsty-pkg-v4.5.0.d12.x86_64.tgz
863165dba76b044ed8615d6743710005  pigsty-pkg-v4.5.0.d13.aarch64.tgz
d86655361ccad7aa95a345a82bb37d10  pigsty-pkg-v4.5.0.d13.x86_64.tgz
017f2d7931eb644d2d0fa2f71930134e  pigsty-pkg-v4.5.0.u26.aarch64.tgz
61451ee610134423ff08f1a69dfced33  pigsty-pkg-v4.5.0.u26.x86_64.tgz
5d9cfc52a25545b56e73e94ab5b5e175  pigsty-pkg-v4.5.0.u24.aarch64.tgz
dba0eef49899509d1524b3a1c37d0ddc  pigsty-pkg-v4.5.0.u24.x86_64.tgz
5564841c7c099489708cd1fe49ffa1b9  pigsty-pkg-v4.5.0.u22.aarch64.tgz
dc52b6cee50cf6226e23b065e5aa8395  pigsty-pkg-v4.5.0.u22.x86_64.tgz
afb5cd77903613cb945bd519e4059c76  pigsty-v4.5.0.tgz

v4.4.0

Pigsty v4.4.0 is a maintenance release with PostgreSQL 18.4 and PostgreSQL 19 beta support. It includes 531 extensions, updated kernel variants, and broader platform coverage.

Released on 2026-07-10. See the GitHub release and all changes since v4.3.0.

Highlights

• PostgreSQL 18.4 / 19 beta: PostgreSQL 18.4 is now the production default, with a minimal PostgreSQL 19 beta template for evaluation.
• 531 extensions and refreshed kernels: The catalog adds 21 extensions and updates major PostgreSQL variants across the supported platform matrix.
• Safer operations with Pig 1.5.1: Adds clone, fork, and PITR workflows. Also adds automatic VIP discovery, Zstandard pgBackRest compression, and dedicated Patroni log collection.
• Security, applications, and tooling: Improves secret handling and repository automation. Adds app templates, a redesigned portal, and optional Codex support.
• Platform validation: All 14 offline deployment tests pass across seven OS baselines on both x86_64 and aarch64.
• Offline artifacts: The Community Edition publishes six dual-architecture offline packages for Debian 13, EL 10, and Ubuntu 24.04 on GitHub. Prebuilt packages for the other validated baselines are available with the Professional Edition.

Upgrade Notes

• Generated pgBackRest configurations now use compress-type=zst. Before rendering them again, preserve any intentional local overrides. #744
• Patroni logs now use /pg/log/patroni and job=patroni. Update custom log queries and alert rules that use the old syslog selector.
• VIP interfaces now default to auto. dnsmasq records move to /etc/dnsmasq.d/pigsty, and Pigsty manages /etc/default/haproxy. Preserve explicit network overrides where needed.
• The default etcd backend quota drops from 16 GiB to 8 GiB. Check existing backend usage before applying the new configuration.
• pig automation must use -y/--yes for destructive commands. pig pb restore and pig pitr require one explicit recovery target. See the pig v1.5 notes.
• Supabase analytics moves to the _supabase database and _analytics schema. Existing deployments should create them before switching stacks.

Security and Operations

• The pg-pitr wrapper adds safer target selection, timelines, dry runs, and stronger checks against unsafe recovery targets.
• Ansible output hides application secrets. Generated .env files use mode 0600. Grafana no longer prints the administrator password.
• The dbsu sudo policy adds controlled journal access. The repository adds a security policy, CodeQL, Dependabot, pinned actions, and release-signing automation.

Applications and Tooling

• Added Immich, Maybe, and JumpServer templates; refreshed Supabase, Dify, InsForge, Registry, Jupyter, Kong, Odoo, Teable, Mattermost, and related launch helpers.
• Rebuilt the bilingual infrastructure portal. Added optional Codex CLI support to the experimental VIBE module. Claude Code remains its default managed coding agent.
• Removed the legacy FerretDB Compose template; the FERRET module remains available.

Bug Fixes

• Fixed EL10 PostgreSQL/libpq provider conflicts, EPEL path handling, and PGDG minor-version repository rules. #752
• Reused an existing /www directory during bootstrap and fixed Redis Sentinel HA password rendering. #753 #748
• Corrected RPM naming and package groups for pg_http, pg_gzip, apache-age, and odbc_fdw. #750
• Prevented unexpected service starts during Debian and Ubuntu package installation, and improved EL9 aarch64 Patroni package handling.
• Fixed VirtualBox private-network routing and default NIC selection.
• Fixed shell portability and Vector log lifecycle issues, along with PG19 io_workers, Teable HBA, and application runtime defaults.

PostgreSQL and Extension Package Changes

The release adds 21 extensions and updates the PostgreSQL 18.4 package graph. It introduces a PostgreSQL 19 beta template and updates major kernel variants. The versions below were verified against final repository metadata and the v4.4.0 artifacts where bundled. PG major ranges describe catalog and repository coverage.

PostgreSQL RPM changes · PostgreSQL DEB changes · Infrastructure package changes

Infrastructure Package Changes

The MD5 list below covers all 14 validated artifacts. GitHub publishes six Community Edition artifacts. The Professional Edition provides the remaining eight. GitHub records SHA-256 digests for the uploaded Community Edition artifacts.

Checksums

7de8b932412f1863fd9c033a7be355d7  pigsty-pkg-v4.4.0.d12.aarch64.tgz
2e5006a8d35eb1c087dc0ed11cf14d14  pigsty-pkg-v4.4.0.d12.x86_64.tgz
955308c00d3890f6e82a6a83bc624760  pigsty-pkg-v4.4.0.d13.aarch64.tgz
350f31c66de0aafff3bd91c2c9d740a0  pigsty-pkg-v4.4.0.d13.x86_64.tgz
0b4817a8edbab0bdf37ecee730fb0412  pigsty-pkg-v4.4.0.el10.aarch64.tgz
4584a61e4456749e68d86e4817cfe526  pigsty-pkg-v4.4.0.el10.x86_64.tgz
21621daf510a532829c36464d48f9198  pigsty-pkg-v4.4.0.el9.aarch64.tgz
504afd5030e2738a25e1b4c570d0e654  pigsty-pkg-v4.4.0.el9.x86_64.tgz
461c999424dee587ca33fe1a63df40d7  pigsty-pkg-v4.4.0.u22.aarch64.tgz
20ccc5ab8f9f4648b05bcd304f9fb5fc  pigsty-pkg-v4.4.0.u22.x86_64.tgz
d092c48ee55116ed5e2c99a3d909ccdd  pigsty-pkg-v4.4.0.u24.aarch64.tgz
24fa5399d8421305961fcaf91325b382  pigsty-pkg-v4.4.0.u24.x86_64.tgz
36f69b699d8b3041d35384970e157631  pigsty-pkg-v4.4.0.u26.aarch64.tgz
330047d117b20f04317dce506edd5d9a  pigsty-pkg-v4.4.0.u26.x86_64.tgz
3077203c0c656ec99abc32b227f6566b  pigsty-v4.4.0.tgz

v4.3.0

Highlights

• Added about 50 PostgreSQL extensions, bringing the total available extension count to 510.
• Added Ubuntu 26.04 x86_64/arm64 support and deprecated Ubuntu 20.04 support. Updated OS minor versions to Debian 13.4 / Ubuntu 24.04.4.
• Kernel updates: Supabase is updated to the latest version, pgEdge to PG 18, and PolarDB to PG 17.
• Grafana is updated to 13.0.1, and MinIO now uses the pgsty branch with CVE fixes.
• Vagrant templates now consistently use cloud-image series images.

Bug Fixes

• Relaxed PostgreSQL username validation to allow @.- in usernames.
• Fixed IPv6 nameserver parsing so DNS configuration is not limited to legacy IPv4 DNS server extraction.
• Changed the VictoriaTraces Grafana datasource path to /select/jaeger.
• Made Vagrant disk probing more robust and added bin/el-fix, a guest-network fix script for EL Vagrant images.

PostgreSQL and Extension Package Changes

Infrastructure Package Updates

Checksums

58a914fce7bc521b65e167f66e7961a3  pigsty-v4.3.0.tgz
9ce070efb0420057a83c632b2856d1b3  pigsty-pkg-v4.3.0.d12.aarch64.tgz
bf21c36d3aff94a1a6353130597ffa85  pigsty-pkg-v4.3.0.d12.x86_64.tgz
81b4790c4e5567cee9d1beadd06e48e6  pigsty-pkg-v4.3.0.d13.aarch64.tgz
06baab9341ab683eaeea2e066b28a0f4  pigsty-pkg-v4.3.0.d13.x86_64.tgz
fb4bf751df5e09f547c49b8ab7cac9a0  pigsty-pkg-v4.3.0.el10.aarch64.tgz
a3e752c8148122d1eaea74a6d8d8df0d  pigsty-pkg-v4.3.0.el10.x86_64.tgz
cb2a9af36615513e66fd5ac3e9f4d797  pigsty-pkg-v4.3.0.el9.aarch64.tgz
e24641a879dec7a8eea74dab42f85920  pigsty-pkg-v4.3.0.el9.x86_64.tgz
6b675fd8d9e039193481f0838aa4b92c  pigsty-pkg-v4.3.0.u22.aarch64.tgz
c0e344ccb9d190a619591e5d46116424  pigsty-pkg-v4.3.0.u22.x86_64.tgz
3e0ec9534cf595201ec79eb1fc6549d8  pigsty-pkg-v4.3.0.u24.aarch64.tgz
0a3d19513eca9615bdd66a4b2bf66f1d  pigsty-pkg-v4.3.0.u24.x86_64.tgz
683a10ff8fd993358d6befa9f4e02913  pigsty-pkg-v4.3.0.u26.aarch64.tgz
fd1ea5cd5554bfe91fadd51ad80860e3  pigsty-pkg-v4.3.0.u26.x86_64.tgz

v4.2.2

Highlights

• Insforge 2.0.1 self-hosted template
• Batch infra package updates, MinIO/MCLI updated to 20260321
• New infra packages: tigerfs, pgstream, sql-studio, rainfog, crush
• New PG tools: data recovery pdu, connection pooler pgdog
• Update PG extensions: pg_search, pgsentinel, pg_track_optimizer, pgcollection, pg_ttl_index, pg_clickhouse
• Update PG Kernel: ivorysql 5.1 -> 5.3

PostgreSQL Package Updates

Infrastructure Package Updates

Checksums

0d9f907ff626203578c687d1418b38ba  pigsty-pkg-v4.2.2.d12.aarch64.tgz
4129baf773c3005f4d697cf452f927a0  pigsty-pkg-v4.2.2.d12.x86_64.tgz
40d5a0d9c2a97615bf0421bae42458ae  pigsty-pkg-v4.2.2.d13.aarch64.tgz
cf91113a2296ad11fff79802ac9b1483  pigsty-pkg-v4.2.2.d13.x86_64.tgz
dbccfeb3978ffb928bd0b501c3c0d42d  pigsty-pkg-v4.2.2.el10.aarch64.tgz
8c848a4e3fa93c2455285fbcad5ddd78  pigsty-pkg-v4.2.2.el10.x86_64.tgz
7c15c9a36f7d2dd740019c20e8c75a4b  pigsty-pkg-v4.2.2.el9.aarch64.tgz
7d6e9e529236a0db2382f42660790ed9  pigsty-pkg-v4.2.2.el9.x86_64.tgz
8f64bb14885ce330603172b186062671  pigsty-pkg-v4.2.2.u22.aarch64.tgz
16d4c36c9e1ff848848c34a257b1025c  pigsty-pkg-v4.2.2.u22.x86_64.tgz
401230741af5b04f163ffc8e688315ab  pigsty-pkg-v4.2.2.u24.aarch64.tgz
5312aa0841694fc560778b9377a32c89  pigsty-pkg-v4.2.2.u24.x86_64.tgz
cabeeb898b56b26c0855f33d5e60411a  pigsty-v4.2.2.tgz

v4.2.1

This maintenance release adds 3 extensions.

Major Changes

• New Extensions: Added pg_eviltransform to the GIS package group, pg_pinyin to FTS, and pg_qos to admin. All three support PG 14–18.
• PG13 Removed: Removed all pgdg13 and pgdg13-nonfree repository entries and PG13 package aliases (pg13-*). This affects every platform variant: EL7/8/9/10, Debian 12/13, and Ubuntu 22/24/26, on both x86_64 and aarch64.
• Config templates (fat.yml, pro.yml, dev.yml, el.yml, debian.yml) no longer reference PG13 packages or repos. Extension version comments are updated to reflect PG 14–18 coverage only.
• Percona Repo: Origin URL updated from ppg-18.1 to ppg-18.3 to track the latest Percona PostgreSQL distribution.
• Nginx Repo: Module tag for the Nginx upstream APT repo corrected from infra to nginx on Debian/Ubuntu platforms.
• UV Venv Fix: roles/node/tasks/pkg.yml checks for an existing virtualenv before running uv venv. This prevents unnecessary re-creation and potential errors during repeat provisioning.
• Docker Image: less is added to the Pigsty Docker image base packages.
• Demo Config: Default firewall rules in el.yml and debian.yml demo configs now include port 5432 for direct PostgreSQL access.

Compatibility Notes

PostgreSQL 13 reached its end of life on 2025-11-13. The PGDG YUM repository has archived and removed the pg13 / pg12 directories. If you install Pigsty on EL systems (even without using PG 13), repo access failures may cause installation or update errors.

Upgrade directly to Pigsty v4.2.1, or remove the pg13 repository line manually. To remove it, edit repo_upstream_default in the file for your OS under roles/node_id/vars/.

EL8 remains a compatible Pigsty OS. Starting with this release, Pigsty no longer publishes offline packages for EL8.

This release has no other breaking API or configuration changes.

7 commits, 84 files changed, +4,925 / -5,351 lines (v4.2.0..v4.2.1, 2026-03-04 ~ 2026-03-06)

PostgreSQL Package Updates

Infrastructure Package Updates

Checksums

262b7671424a38b208872582fe835ef8  pigsty-v4.2.1.tgz
62edcca1d1e572a247be018e1c26eda8  pigsty-pkg-v4.2.1.d12.aarch64.tgz
1d55367e2fd9106e6f18b7ee112be736  pigsty-pkg-v4.2.1.d12.x86_64.tgz
f122b1e5ba8a7ae8e3dc6e6dd53eba65  pigsty-pkg-v4.2.1.d13.aarch64.tgz
617a76bfc8df8766e78abf24339152eb  pigsty-pkg-v4.2.1.d13.x86_64.tgz
908509b350403ad1a4a27a88795fee06  pigsty-pkg-v4.2.1.el10.aarch64.tgz
70cb4afd90ed7aea6ab43a264f8eb4a8  pigsty-pkg-v4.2.1.el10.x86_64.tgz
98fbd67334f5c674b12e6af81ef76923  pigsty-pkg-v4.2.1.el9.aarch64.tgz
687fa741ccd9dcf611a2aa964bcf1de8  pigsty-pkg-v4.2.1.el9.x86_64.tgz
a2a30f4b1146b3e79be91d5be57615b6  pigsty-pkg-v4.2.1.u22.aarch64.tgz
7a1f571bd8526106775c175ba728eee1  pigsty-pkg-v4.2.1.u22.x86_64.tgz
a5574071bac1955798265f71ad73c3d4  pigsty-pkg-v4.2.1.u24.aarch64.tgz
59a7632c650a3c034f1fe6cd589d7ab5  pigsty-pkg-v4.2.1.u24.x86_64.tgz

v4.2.0

Highlights

• Aligned with PostgreSQL out-of-band minor updates: 18.3, 17.9, 16.13, 15.17, 14.22.
• Total PostgreSQL extension coverage reaches 461 packages.
• Kernel updates across Babelfish, AgensGraph, pgEdge, OriolePG, OpenHalo, and Cloudberry.
• Babelfish template now uses a Pigsty-maintained PG17-compatible build, with no WiltonDB repo dependency.
• Supabase images and self-hosted templates are refreshed to the latest stack, using Pigsty-maintained pgsty/minio.

Major Changes

• mssql now defaults to Babelfish PG17 (pg_version: 17, pg_packages: [babelfish, pgsql-common, sqlcmd]) and no longer requires an extra mssql repo.
• Kernel install paths are normalized in pg_home_map: mssql -> /usr/babelfish-$v/, gpsql -> /usr/local/cloudberry.
• package_map adds a dedicated cloudberry mapping and fixes babelfish* aliases to versioned RPM/DEB package names.
• The Redis data root default changes from /data to /data/redis. Deployment blocks legacy defaults, but redis_remove retains backward-compatible cleanup.
• configure supports absolute -o output paths and creates parent directories automatically. It adds tri-state region detection (CN/global/offline fallback) and fixes behind_gfw() hangs.
• Debian/Ubuntu default repo URL mappings (updates/backports/security) and China mirror components are corrected to prevent bootstrap package failures.
• Supabase stack is updated (including PostgREST 14.5 and Vector 0.53.0) and now includes missing S3 protocol credential variables.
• Rich/Sample templates explicitly define dbuser_meta defaults. This release also simplifies node.sh systemd completion.
• pgbackrest stanza initialization now retries (2 attempts, 5-second interval) to reduce lock contention with archive-push.
• Vibe template now ships @anthropic-ai/claude-code, @openai/codex, and happy-coder, and includes age in the default example.

PG Software Updates

• PostgreSQL 18.3, 17.9, 16.13, 15.17, 14.22
• RPM Changelog 2026-02-27
• DEB Changelog 2026-02-27
• Core upgrades: timescaledb 2.25.0 -> 2.25.1, citus 14.0.0-3 -> 14.0.0-4, pg_search -> 0.21.9
• New/rebuilt: pgedge 17.9, spock 5.0.5, lolor 1.2.2, snowflake 2.4, babelfish 5.5.0, cloudberry 2.0.0
• Kernel-side updates: oriolepg 17.11 -> 17.16, orioledb beta12 -> beta14, openhalo 14.10 -> 1.0(14.18)

Infrastructure Software Updates

API Changes

• pg_mode now includes agens and pgedge.
• mssql defaults are updated to pg_version: 17 and pg_packages: [babelfish, pgsql-common, sqlcmd].
• Kernel/package alias mappings are updated in pg_home_map and package_map (Babelfish, OpenHalo, IvorySQL, Cloudberry, pgEdge family).
• redis_fs_main now defaults to /data/redis, with deployment guardrails and backward-compatible cleanup behavior.
• configure output path handling and region detection logic are updated, with offline fallback warnings and unified SSH probe timeouts.
• grafana.ini.j2 is updated for Grafana 12.4 config changes and deprecations.

Compatibility Notes

• If existing Redis configs still use redis_fs_main: /data, migrate to /data/redis before deployment.
• Grafana 12.4 changes how it merges data links. This release moves key links into field overrides. Review custom dashboards for these changes.

26 commits, 122 files changed, +2,116 / -2,215 lines (v4.1.0..v4.2.0, 2026-02-15 ~ 2026-02-28)

Checksums

24a90427a7e7351ca1a43a7d53289970  pigsty-v4.2.0.tgz
d980edf5eeb0419d4f1aa7feb0100e14  pigsty-pkg-v4.2.0.d12.aarch64.tgz
24bc237d841457fbdcc899e1d0a3f87e  pigsty-pkg-v4.2.0.d12.x86_64.tgz
e395b38685e2ecbe9c3a2850876d9b7b  pigsty-pkg-v4.2.0.d13.aarch64.tgz
c5c8776f9bead9f29528b26058801f83  pigsty-pkg-v4.2.0.d13.x86_64.tgz
28ea40434bd06135fc8adc0df1c8407d  pigsty-pkg-v4.2.0.el10.aarch64.tgz
58ad715ac20dc1717d1687daecfcf625  pigsty-pkg-v4.2.0.el10.x86_64.tgz
008f955439ea311581dd0ebcf5b8bd34  pigsty-pkg-v4.2.0.el8.aarch64.tgz
2acfd127a517b09f07540f808fe9547a  pigsty-pkg-v4.2.0.el8.x86_64.tgz
58e62a92f35291a40e3f05839a1b6bc4  pigsty-pkg-v4.2.0.el9.aarch64.tgz
d311bfdf5d5f60df5fe6cb3d4ced4f9c  pigsty-pkg-v4.2.0.el9.x86_64.tgz
c98972fe9226657ac1faa7b72a22498b  pigsty-pkg-v4.2.0.u22.aarch64.tgz
44a174ee9ba030ac1ea386cf0b85f6e7  pigsty-pkg-v4.2.0.u22.x86_64.tgz
143e404f4681c7d0bbd78ef7982cd652  pigsty-pkg-v4.2.0.u24.aarch64.tgz
00dfa86f477f3adff984906211ab3190  pigsty-pkg-v4.2.0.u24.x86_64.tgz

v4.1.0

curl https://pigsty.io/get | bash -s v4.1.0

72 commits, 252 files changed, +5,744 / -5,015 lines (v4.0.0..v4.1.0, 2026-02-02 ~ 2026-02-13)

Highlights

• PostgreSQL minor update: 18.2, 17.8, 16.12, 15.16, 14.21.
• Default EL minors updated to 9.7 / 10.1, Debian minors updated to 12.13 / 13.3.
• Added 7 new extensions, bringing total support to 451 extensions.
• pig moved from a traditional script interface to an Agent-Native CLI (1.0.0 -> 1.1.0), with explicit context and JSON/YAML output.
• pig now provides unified major/minor upgrade workflows for PostgreSQL and OS lifecycle updates.
• pg_exporter upgraded to v1.2.0 (1.1.2 -> 1.2.0), with PG17/18 metric pipeline and unit fixes.
• Updated the default firewall security policy. node_firewall_mode defaults to zone. The node_firewall_public_port default changes from [22,80,443,5432] to [22,80,443].
• Focused PGSQL/PGCAT Grafana usability fixes: dynamic datasource $dsn, schema-level drilldown, age metrics, link mapping consistency.
• Added one-click Mattermost application template, including database/storage/portal and optional PGFS/JuiceFS options.
• Refactored infra-rm uninstall flow with segmented deregister cleanup for Victoria targets, Grafana datasources, and Vector logs.
• Optimized default PostgreSQL autovacuum thresholds to reduce excessive vacuum/analyze on small tables.
• Fixed FD limit chain: added fs.nr_open=8M and unified LimitNOFILE=8M to avoid startup failures from systemd/setrlimit.
• Updated VIBE defaults: Jupyter disabled by default; Claude Code managed via npm package.

Version Updates

• Pigsty version: v4.0.0 -> v4.1.0
• pig CLI: 1.0.0 -> 1.1.0 (Agent-Native + major/minor upgrade support)
• pg_exporter: 1.1.2 -> 1.2.0
• Default EL minors: 9.6/10.0 -> 9.7/10.1
• Default Debian minors: 12.12/13.1 -> 12.13/13.3

Extension Updates

• RPM Changelog 2026-02-12
• DEB Changelog 2026-02-12
• timescaledb 2.24.0 -> 2.25.0
• pg_search 0.21.4 -> 0.21.7
• pgmq 1.9.0 -> 1.10.0
• pg_textsearch 0.4.0 -> 0.5.0
• pljs 1.0.4 -> 1.0.5
• pg_track_optimizer 0.9.1 (new)
• nominatim_fdw 1.1.0 (new)
• pg_utl_smtp 1.0.0 (new)
• pg_strict 1.0.2 (new)
• pgmb 1.0.0 (new)
• pg_pwhash (new support)
• informix_fdw (new support)

INFRA Component Versions

Infra Changelog 2026-02-12

API Changes

• Corrected template guard for io_method / io_workers from pg_version >= 17 to pg_version >= 18.
• Fixed PG18 guards for idle_replication_slot_timeout / initdb --no-data-checksums.
• Broadened maintenance_io_concurrency effective range to PG13+.
• Raised autovacuum_vacuum_threshold: oltp/crit/tiny from 50 to 500, olap to 1000.
• Raised autovacuum_analyze_threshold: oltp/crit/tiny from 50 to 250, olap to 500.
• Increased default checkpoint_completion_target from 0.90 to 0.95.
• Added fs.nr_open=8388608 in node tuned templates and aligned fs.file-max / fs.nr_open / LimitNOFILE.
• Changed postgres/patroni/minio systemd LimitNOFILE from 16777216 to 8388608.
• Added fs.nr_open: 8388608 into default node_sysctl_params.
• Changed the node_firewall_mode default from none to zone. The firewall is enabled by default and trusts the intranet. It exposes only node_firewall_public_port to public networks. For a fully self-managed firewall, set none.
• Changed the node_firewall_public_port default from [22,80,443,5432] to [22,80,443]. Add 5432 explicitly only when public database access is required. Firewall rules only add permissions. On existing nodes that already expose 5432, remove that rule manually. Single-node trial templates, such as meta / vibe, explicitly retain 5432 for remote use.
• Added bin/validate checks for pg_databases[*].parameters and pg_hba_rules[*].order. Fixed HBA validation that did not return failure correctly.
• Added segmented tags in infra-rm.yml: deregister, config, env, etc.
• Updated VIBE defaults: jupyter_enabled=false, npm_packages include @anthropic-ai/claude-code and happy-coder, plus CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS=1.
• PgBouncer alias cleanup: pool_size_reserve -> pool_reserve, pool_max_db_conn -> pool_connlimit.

Compatibility Fixes (Deduplicated)

• Note: repeated regressions/re-fixes of the same issue are counted once and merged by problem domain below.
• Fixed Redis replicaof empty-guard logic and systemd stop behavior.
• Fixed schema/table/sequence qualification, identifier quoting, and logging format safety in pg_migration.
• Fixed restart targets and variable usage in pgsql role handlers.
• Fixed blackbox config filename cleanup item and pgAdmin pgpass file format.
• Made pg_exporter startup non-blocking to avoid slowing main flow when exporter fails.
• Simplified VIP CIDR parsing: default mask 24 when omitted.
• Increased MinIO health-check retries from 3 to 5.
• Switched node hostname setup to Ansible hostname module instead of shell calls.
• Fixed .env format for app/electric and app/pg_exporter to standard KEY=VALUE.
• Fixed pg_crontab syntax error in pigsty.yml.
• Updated ETCD docs to clarify default TLS vs optional mTLS semantics.
• Fixed repo-add argument passing, Debian CN mirror component compatibility, and bin/psql.py Python 3 compatibility.
• Hardened redis-exporter credential file permissions.
• pgsql-user.yml now masks credential logs (no_log) on sensitive steps.
• Fixed gate conditions when pg_monitor registers Victoria targets.
• Changed pg_remove backup cleanup to cluster-level directory to avoid deleting other cluster backups.

Commit List (v4.0.0..v4.1.0, 72 commits, 2026-02-02 ~ 2026-02-13)

7410de401 v4.1.0 release
fa31213ce conf(node): default firewall to zone with single-node 5432 override
bb8382c58 update default extension list to 451
770d01959 hide user credential in pgsql-user playbook
7219a896c pg_monitor: fix victoria registration gate conditions
084c98432 remove one cluster in backup dir during pg_remove
7005617f1 pgsql: drop legacy pgbouncer pool parameter aliases
f8165a886 docs(roles): fix typos and align juice role documentation
06a589218 chore(meta): normalize platform versions for current lint schema
e0a208248 fix(roles): harden redis exporter file permissions
fd0469881 terraform/vagrant: parameterize aliyun region/zone, fix vagrant scripts
74c59aabe grafana: fix dashboard links, descriptions, and overrides
443e58724 conf: clean legacy params and fix template references
536c4b39d adjust grafana dashboard dead links
f3b9866ce grafana(pgsql): fix panel typos and title consistency
bcb69be11 grafana(pgsql): fix drilldown links and variable mappings
1ce4374a1 grafana: fill pglog panel titles and normalize wording
2d127f9f4 grafana: fix minio traffic metrics and pigsty dashboard links
9d3ca0118 grafana: align victoria instance dashboards with query scope
55bc61622 grafana: fix infra dashboard copy, links, and table semantics
607b75535 grafana(node): fix panel drilldown links and clean dashboard metadata
1321de532 grafana(redis): fix dashboard links and blocked-clients panel semantics
91e0c8437 fix(grafana): correct Redis alert drill-down dashboard links
0fde78c02 fix(tooling): improve Python3 compatibility and enforce vagrant scale lower bound
fa3454a52 fix(bootstrap): use Debian-compatible components for CN apt mirror
36c95c749 fix(cli): restore repo-add execution and HBA validation failure propagation
797385929 add macbook local vagrant image override
f9c928e32 fix(grafana): restore reverted dashboard bugfixes
c11af8b6a Bump version to v4.1.0
307a236ba update extension list
f17024807 override el9/u24 vagrant box for convient testing
c2ada1283 terraform: bump Aliyun Debian images to 12.13/13.3
25bd8210f fix(node): add daemon_reload to systemd tasks for keepalived, chronyd, and cron
6f2576fd0 fix(node): set default fs.nr_open via node_sysctl_params
43a71245e add pg_bgwriter_buffers_backend for pg 17-
da832a47b fix(monitor): keep checkpointer metrics for checkpoint stats
90434ca8a fix(monitor): add pg_bgwriter fallback for checkpointer metrics
e2d75e787 fix(monitor): use pg_checkpointer metrics for checkpoint stats
a0b7474f8 fix grafana dashboard metrics and lengend
27ddacbc6 vagrant: refresh box selector and OS shortcuts
26e108788 fix(monitor): correct unit for time metrics scaled by pg_exporter
ee90044b5 fix(pgsql): correct min_parallel scan size params in oltp/crit templates
d439464b2 pgsql: fix pg_version guards for PG18-only settings
26320f120 docs: recommend RockyLinux 10.1
1e9b9f33a terraform: bump Aliyun Rocky images to 9.7/10.1
d6e9c7122 monitor: optimize table/index bloat estimators
42d45d32e fix(grafana): align panel semantics across node/infra/redis
3972d2c45 fix(grafana/pgsql): align dashboard semantics for query monitoring
cb52375ac bump checkpoint_completion_target from 0.90 to 0.95
13115a95d fix legend in pgsql-persist checkpoint panel
102cd2edb fix(pg_migration): make template logging format-safe
c402f0e6d fix: correct io_method/io_workers version guard from PG17 to PG18
3bf676546 vibe: disable jupyter by default and install claude-code via npm_packages
613c4efa9 fix: set fs.nr_open in tuned profiles and reduce LimitNOFILE to 8M
07e499d4d new app conf template matter most
4cc68ed61 Refine infra removal playbook
7cfb98f69 fix: app docker .env file format
9b36b1875 Fix config templates and validation
318d85e6e Simplify VIP parsing and make pg_exporter non-blocking
571cd9e70 Use hostname module for nodename
de98f073c Fix blackbox config filename and pgpass format
4bff01100 Fix redis replicaof guard and systemd stop
38445b68d minio: increase health check retries
c99854969 docs(etcd): clarify TLS vs mTLS
41229124a fix pgsql roles typo
e575d17c6 fix pg_migration scripts to use fully qualified identifiers
ec4207202 fix pgsql-schema broken links
a237e6c99 tune autovacuum threshold to reduce small table vacuum frequency
e80754760 fix pgcat-database links to pgcat-table https://github.com/pgsty/pigsty/issues/690
0060f5346 fix pgsql-database / pgsql-databases age metric fix https://github.com/pgsty/pigsty/issues/695
43cdf72bc fix pigsty.yml typo
0d9db7b08 fix: update datasource to $dsn - fix https://github.com/pgsty/pigsty/issues/692#issuecomment-3835461620

Thanks

• Thanks to @l2dy for many valuable suggestions and issues.

Checksums

8bc75e8df0e3830931f2ddab71b89630  pigsty-v4.1.0.tgz
da10de99d819421630f430d01bc9de62  pigsty-pkg-v4.1.0.d12.aarch64.tgz
e1f2ed2da0d6b8c360f9fa2faaa7e175  pigsty-pkg-v4.1.0.d12.x86_64.tgz
382bb38a81c138b1b3e7c194211c2138  pigsty-pkg-v4.1.0.d13.aarch64.tgz
13ceaa728901cc4202687f03d25f1479  pigsty-pkg-v4.1.0.d13.x86_64.tgz
92d061de4d495d05d42f91e4283e7502  pigsty-pkg-v4.1.0.el10.aarch64.tgz
be629ea91adf86bbd7e1c59b659d0069  pigsty-pkg-v4.1.0.el10.x86_64.tgz
c14be706119ba33dd06c71dda6c02298  pigsty-pkg-v4.1.0.el8.aarch64.tgz
0c8b6952ffc00e3b169896129ea39184  pigsty-pkg-v4.1.0.el8.x86_64.tgz
cfcc63b9ecc525165674f58f9365aa19  pigsty-pkg-v4.1.0.el9.aarch64.tgz
34f733080bfa9c8515d1573c35f3e870  pigsty-pkg-v4.1.0.el9.x86_64.tgz
ad52ce9bf25e4d834e55873b3f9ada51  pigsty-pkg-v4.1.0.u22.aarch64.tgz
300b2185c61a03ea7733248e526f3342  pigsty-pkg-v4.1.0.u22.x86_64.tgz
2e561e6ae9abb14796872059d2f694a8  pigsty-pkg-v4.1.0.u24.aarch64.tgz
c462bb4cb2359e771ffcad006888fbd4  pigsty-pkg-v4.1.0.u24.x86_64.tgz

v4.0.0

curl https://pigsty.io/get | bash -s v4.0.0

318 commits, 604 files changed, +118,655 / -327,552 lines

Highlights

• Observability Revolution: Prometheus → VictoriaMetrics (10x perf), Loki+Promtail → VictoriaLogs+Vector
• Security Hardening: Auto-generated passwords, etcd RBAC, firewall/SELinux modes, permission tightening, Nginx Basic Auth
• Docker Support: Run Pigsty in Docker containers with full systemd support (macOS & Linux)
• New Module: JUICE - Mount PostgreSQL as filesystem with PITR recovery capability
• New Module: VIBE - AI coding sandbox with Claude Code, JupyterLab, VS Code Server, Node.js
• Database Management: pg_databases state (create/absent/recreate), instant clone with strategy
• PITR & Fork: /pg/bin/pg-fork for instant CoW cloning, enhanced pg-pitr with pre-backup
• HA Enhancement: pg_rto_plan with 4 RTO presets (fast/norm/safe/wide), pg_crontab scheduled tasks
• Multi-Cloud Terraform: AWS, Azure, GCP, Hetzner, DigitalOcean, Linode, Vultr, TencentCloud templates
• License Change: AGPL-3.0 → Apache-2.0

Infra Software Versions - MinIO now uses pgsty/minio fork RPM/DEB.

New Modules

• JUICE Module: Uses PostgreSQL as the metadata engine for the JuiceFS distributed filesystem. Supports filesystem PITR, multiple storage backends (PG large objects, MinIO, S3), and multi-instance deployment with Prometheus metrics. Adds the node-juice dashboard.
• VIBE Module: Provides an AI coding sandbox with Code-Server (VS Code in a browser), JupyterLab (interactive computing), and Node.js (JavaScript runtime). It also includes Claude Code, an AI coding assistant with OpenTelemetry observability. Adds the claude-code dashboard for usage monitoring.

PostgreSQL Extension Updates

Major extensions add PG 18 support: age, citus, documentdb, pg_search, timescaledb, pg_bulkload, rum, etc.

New: pg_textsearch 0.4.0, pg_clickhouse 0.1.3, pg_ai_query 0.1.1, etcd_fdw, pg_ttl_index 0.1.0, pljs 1.0.4, pg_retry 1.0.0, pg_weighted_statistics 1.0.0, pg_enigma 0.5.0, pglinter 1.0.1, documentdb_extended_rum 0.109, mobilitydb_datagen 1.3.0

Updated: timescaledb 2.24.0, pg_search 0.21.4, citus 14.0.0, documentdb 0.109, age 1.7.0, pg_duckdb 1.1.1, vchord 1.0.0, vchord_bm25 0.3.0, pg_biscuit 2.2.2, pg_anon 2.5.1, wrappers 0.5.7, pg_vectorize 0.26.0, pg_session_jwt 0.4.0, pg_partman 5.4.0, pgmq 1.9.0, pg_bulkload 3.1.23, pg_timeseries 0.2.0, pg_convert 0.1.0, pgBackRest 2.58

Breaking Changes

Observability

• VictoriaMetrics replaces Prometheus. It provides several times the performance with a fraction of the resources.
• VictoriaLogs + Vector replaces Promtail + Loki for log collection
• Unified the log format for all components. PG logs use UTC timestamps (log_timezone).
• PostgreSQL log rotation changed to weekly truncated rotation mode
• Added Vector parsing configs for Nginx/Syslog/PG CSV/Pgbackrest/Grafana/Redis/etcd/MinIO logs
• Datasource registration now runs on all Infra nodes. Grafana automatically registers Victoria datasources.
• New grafana_pgurl parameter for using PG as Grafana backend storage
• New grafana_view_password parameter for Grafana Meta datasource password
• pg_exporter updated to 1.1.2 with new pg_timeline collector and numerous fixes
• New dashboards: node-vector, node-juice, claude-code

Interface Improvements

• Renamed the install.yml playbook to deploy.yml. Added the vibe.yml playbook for the VIBE module.
• pg_databases: added state field (create/absent/recreate), strategy for cloning, newer locale params support
• pg_users: added admin parameter with ADMIN OPTION, set and inherit options
• pg_hba: support order field for priority, IPv6 localhost access
• New node_crontab auto-restores original crontab on node-rm

Parameter Optimization

• pg_io_method: auto, sync, worker, io_uring options, default worker
• pg_rto_plan: RTO presets (fast/norm/safe/wide) integrating Patroni & HAProxy config
• pg_crontab: scheduled tasks for postgres dbsu
• idle_replication_slot_timeout: default 7d, crit template 3d
• file_copy_method: set to clone for PG18 instant database cloning
• Crit template enables Patroni strict sync mode
• PITR default archive_mode changed to preserve

Architecture Improvements

• Fixed /infra symlink pointing to /data/infra on Infra nodes
• Local repo at /data/nginx/pigsty, /www symlinks to /data/nginx
• New scripts: /pg/bin/pg-fork (CoW cloning), /pg/bin/pg-drop-role, bin/pgsql-ext
• Enhanced /pg/bin/pg-pitr for instance-level PITR with pre-backup
• UV Python manager moved from infra to node module with node_uv_env parameter
• Terraform templates: AWS, Azure, GCP, Hetzner, DigitalOcean, Linode, Vultr, TencentCloud
• Reduced the Simu template from 36 to 20 nodes. Added 10-node and Citus templates.

Security Improvements

• configure -g auto-generates strong random passwords
• Replaced node_disable_firewall with node_firewall_mode (off/none/zone)
• Replaced node_disable_selinux with node_selinux_mode (disabled/permissive/enforcing)
• Nginx Basic Auth support for optional HTTP authentication
• Enabled etcd RBAC. Each cluster can manage only its own PG cluster.
• etcd root password stored in /etc/etcd/etcd.pass, admin-readable only
• New node_admin_sudo parameter for admin sudo mode (all/nopass)
• Fixed ownca certificate validity for Chrome recognition

Bug Fixes

• Fixed ownca certificate validity for Chrome compatibility
• Fixed Vector 0.52 syslog_raw parsing issue
• Fixed pg_pitr multiple replica clonefrom timing issues
• Fixed Ansible SELinux race condition in dnsmasq
• Fixed EL9 aarch64 patroni & llvmjit issues
• Fixed pgbouncer pid path (/run/postgresql)
• Fixed HAProxy service template variable path
• Fixed MinIO reload handler ineffective
• Fixed vmetrics_port default value to 8428
• Fixed pg-failover-callback for all Patroni callback events