<feed xmlns='http://www.w3.org/2005/Atom'>
<title>postgresql.git/doc/src/sgml/runtime.sgml, branch master</title>
<subtitle>This is the main PostgreSQL git repository.</subtitle>
<id>http://git.postgresql.org/cgit/postgresql.git/atom?h=master</id>
<link rel='self' href='http://git.postgresql.org/cgit/postgresql.git/atom?h=master'/>
<link rel='alternate' type='text/html' href='http://git.postgresql.org/cgit/postgresql.git/'/>
<updated>2026-07-02T18:05:50Z</updated>
<entry>
<title>Remove pg_dump/pg_dumpall support for dumping from pre-v10 servers.</title>
<updated>2026-07-02T18:05:50Z</updated>
<author>
<name>Nathan Bossart</name>
</author>
<published>2026-07-02T18:05:50Z</published>
<link rel='alternate' type='text/html' href='http://git.postgresql.org/cgit/postgresql.git/commit/?id=3a0a30884fd08301f211f064c1433f8148e67c3a'/>
<id>urn:sha1:3a0a30884fd08301f211f064c1433f8148e67c3a</id>
<content type='text'>
Per discussion, it seems like a good time to bump the minimum
supported version for various applications.  Our current policy is
to support at least 10 previous major versions, so this bumps the
minimum to v10 for the v20 release.  For reference, the minimum was
last bumped to v9.2 in 2021 for v15 (see commits 30e7c175b8,
e469f0aaf3, cf0cab868a, and 492046fa9e).  As in previous changes of
this sort, we aren't removing pg_restore's ability to read older
archive files, though it's fair to wonder how that might be tested
nowadays.

For ease of review, and to be able to put the indentation changes
in .git-blame-ignore-revs, I did not fix the indentation in this
patch.  I'll push a separate pgindent commit after these changes
are applied.

Reviewed-by: Fujii Masao &lt;masao.fujii@gmail.com&gt;
Discussion: https://postgr.es/m/adZ4j88Dq9r8y9_9%40nathan
</content>
</entry>
<entry>
<title>doc: Clean up title case use</title>
<updated>2026-05-05T09:24:16Z</updated>
<author>
<name>Peter Eisentraut</name>
</author>
<published>2026-05-05T09:24:16Z</published>
<link rel='alternate' type='text/html' href='http://git.postgresql.org/cgit/postgresql.git/commit/?id=d0ed9ad8b07d716b1b8caae3d1eb370571a0a6f3'/>
<id>urn:sha1:d0ed9ad8b07d716b1b8caae3d1eb370571a0a6f3</id>
<content type='text'>
</content>
</entry>
<entry>
<title>doc: Add missing GUCs to SSL SNI docs</title>
<updated>2026-04-16T09:18:57Z</updated>
<author>
<name>Daniel Gustafsson</name>
</author>
<published>2026-04-16T09:18:57Z</published>
<link rel='alternate' type='text/html' href='http://git.postgresql.org/cgit/postgresql.git/commit/?id=4abcdc1bbebfaeffc072296711e8a2af8d7d7cdf'/>
<id>urn:sha1:4abcdc1bbebfaeffc072296711e8a2af8d7d7cdf</id>
<content type='text'>
The ssl_sni and hosts_file GUCs were missing from the configuration
section of the documentation, they were only described in the main
SSL SNI subsection.  This adds the GUCs to the relevant sections as
well as rewords the existing SSL SNI documentation to refer to the
settings along with a few smaller fixups.

Author: Daniel Gustafsson &lt;daniel@yesql.se&gt;
Reported-by: Fujii Masao &lt;masao.fujii@gmail.com&gt;
Reviewed-by: Fujii Masao &lt;masao.fujii@gmail.com&gt;
Discussion: https://postgr.es/m/CAHGQGwESD2Pty+J1kP3mXmWwMKZ5uJmknZdJsSGrMSRR6CQBmw@mail.gmail.com
</content>
</entry>
<entry>
<title>Doc: minor improvements to SNI documentation.</title>
<updated>2026-03-23T19:33:51Z</updated>
<author>
<name>Tom Lane</name>
</author>
<published>2026-03-23T19:33:51Z</published>
<link rel='alternate' type='text/html' href='http://git.postgresql.org/cgit/postgresql.git/commit/?id=7c08a7e809721212b0c2b694cd19bd4379b8974f'/>
<id>urn:sha1:7c08a7e809721212b0c2b694cd19bd4379b8974f</id>
<content type='text'>
My attention was drawn to this new documentation by overlength-line
complaints in the PDF docs builds: the synopsis for hostname lines was
too wide.  I initially thought of shortening the parameter names to
fit, but it turns out that adding &lt;optional&gt; markup is enough to
persuade DocBook to break the line, and that seems more helpful
anyway.

While here, I couldn't resist some copy-editing, mostly being
consistent about whether to use Oxford commas or not.  The biggest
change was to re-order the entries in the hostname-values table to
match the running text.
</content>
</entry>
<entry>
<title>ssl: Serverside SNI support for libpq</title>
<updated>2026-03-18T11:37:11Z</updated>
<author>
<name>Daniel Gustafsson</name>
</author>
<published>2026-03-18T11:37:11Z</published>
<link rel='alternate' type='text/html' href='http://git.postgresql.org/cgit/postgresql.git/commit/?id=4f433025f666fa4a6209f0e847715767fb1c7ace'/>
<id>urn:sha1:4f433025f666fa4a6209f0e847715767fb1c7ace</id>
<content type='text'>
Support for SNI was added to clientside libpq in 5c55dc8b4733 with the
sslsni parameter, but there was no support for utilizing it serverside.
This adds support for serverside SNI such that certificate/key handling
is available per host.  A new config file, $datadir/pg_hosts.conf, is
used for configuring which certificate and key should be used for which
hostname.  In order to use SNI the ssl_sni GUC must be set to on, when
it is off the ssl configuration works just like before.  If ssl_sni is
enabled and pg_hosts.conf is non-empty it will take precedence over
the regular SSL GUCs, if it is empty or missing the regular GUCs will
be used just as before this commit with no hostname specific handling.
The TLS init hook is not compatible with ssl_sni since it operates on
a single TLS configuration and SNI break that assumption.  If the init
hook and ssl_sni are both enabled, a WARNING will be issued.

Host configuration can either be for a literal hostname to match, non-
SNI connections using the no_sni keyword or a default fallback matching
all connections.  By omitting no_sni and the fallback a strict mode
can be achieved where only connections using sslsni=1 and a specified
hostname are allowed.

CRL file(s) are applied from postgresql.conf to all configured hostnames.

Serverside SNI requires OpenSSL, currently LibreSSL does not support
the required infrastructure to update the SSL context during the TLS
handshake.

Author: Daniel Gustafsson &lt;daniel@yesql.se&gt;
Co-authored-by: Jacob Champion &lt;jacob.champion@enterprisedb.com&gt;
Reviewed-by: Jacob Champion &lt;jacob.champion@enterprisedb.com&gt;
Reviewed-by: Zsolt Parragi &lt;zsolt.parragi@percona.com&gt;
Reviewed-by: Chao Li &lt;li.evan.chao@gmail.com&gt;
Reviewed-by: Dewei Dai &lt;daidewei1970@163.com&gt;
Reviewed-by: Cary Huang &lt;cary.huang@highgo.ca&gt;
Reviewed-by: Heikki Linnakangas &lt;hlinnaka@iki.fi&gt;
Discussion: https://postgr.es/m/1C81CD0D-407E-44F9-833A-DD0331C202E5@yesql.se
</content>
</entry>
<entry>
<title>Switch the semaphore API on Solaris to unnamed POSIX.</title>
<updated>2026-03-14T18:10:32Z</updated>
<author>
<name>Tom Lane</name>
</author>
<published>2026-03-14T18:10:32Z</published>
<link rel='alternate' type='text/html' href='http://git.postgresql.org/cgit/postgresql.git/commit/?id=0123ce131fca454009439dfa3b2266d1d40737d7'/>
<id>urn:sha1:0123ce131fca454009439dfa3b2266d1d40737d7</id>
<content type='text'>
Solaris descendants (Illumos, OpenIndiana, OmniOS, etc.) hit System V
semaphore limits ("No space left on device" from semget) when running
many parallel test scripts under default system settings.  We could
tell people to raise those settings, but there's a better answer.
Unnamed POSIX semaphores have been available on Solaris for decades
and work well, so prefer them, as was recently done for AIX.

This patch also updates the documentation to remove now-unnecessary
advice about raising project.max-sem-ids and project.max-msg-ids.

Author: Tom Lane &lt;tgl@sss.pgh.pa.us&gt;
Reviewed-by: Greg Burd &lt;greg@burd.me&gt;
Discussion: https://postgr.es/m/470305.1772417108@sss.pgh.pa.us
</content>
</entry>
<entry>
<title>doc: Add restart on failure to example systemd file</title>
<updated>2026-03-03T12:18:53Z</updated>
<author>
<name>Peter Eisentraut</name>
</author>
<published>2026-03-03T12:13:45Z</published>
<link rel='alternate' type='text/html' href='http://git.postgresql.org/cgit/postgresql.git/commit/?id=b30656ce0071806ce649f2b69a4d06018d5c01a4'/>
<id>urn:sha1:b30656ce0071806ce649f2b69a4d06018d5c01a4</id>
<content type='text'>
The documentation previously had a systemd unit file that would not
attempt to recover from process failures such as OOM's, segfaults,
etc.  This commit adds "Restart=on-failure",` which tells systemd to
attempt to restart the process after failure.  This is the recommended
configuration per the systemd documentation: "Setting this to
on-failure is the recommended choice for long-running services".  Many
PostgreSQL users will simply copy/paste what the PostgreSQL
documentation recommends and will probably do their own research and
change the service file to restart on failure, so might as well set
this as the default in the PostgreSQL documentation.

Author: Andrew Jackson &lt;andrewjackson947@gmail.com&gt;
Discussion: https://www.postgresql.org/message-id/flat/CAKK5BkFfMpAQnv8CLs%3Di%3DrZwurtCV_gmfRb0uZi-V%2Bd6wcryqg%40mail.gmail.com
</content>
</entry>
<entry>
<title>Restore AIX support.</title>
<updated>2026-02-23T18:34:22Z</updated>
<author>
<name>Tom Lane</name>
</author>
<published>2026-02-23T18:34:22Z</published>
<link rel='alternate' type='text/html' href='http://git.postgresql.org/cgit/postgresql.git/commit/?id=4a1b05caa55dc14a1f936af78d8d19c843bfd8b9'/>
<id>urn:sha1:4a1b05caa55dc14a1f936af78d8d19c843bfd8b9</id>
<content type='text'>
The concerns that led us to remove AIX support in commit 0b16bb877
have now been alleviated:

1. IBM has stepped forward to provide support, including buildfarm
animal(s).
2. AIX 7.2 and later seem to be fine with large pg_attribute_aligned
requirements.  Since 7.1 is now EOL anyway, we can just cease to
support it.
3. Tossing xlc support overboard seems okay as well.  It's a bit
sad to drop one of the few remaining non-gcc-alike compilers, but
working around xlc's bugs and idiosyncrasies doesn't seem justified
by the theoretical portability benefits.
4. Likewise, we can stop supporting 32-bit AIX builds.  This is
not so much about whether we could build such executables as that
they're too much of a pain to manage in the field, due to limited
address space available for dynamic library loading.
5. We hit on a way to manage catalog column alignment that doesn't
require continuing developer effort (see commit ecae09725).

Hence, this commit reverts 0b16bb877 and some follow-on commits
such as e6bb491bf, except for not putting back XLC support nor
the changes related to catalog column alignment.

Some other notable changes from the way things were in v16:

Prefer unnamed POSIX semaphores on AIX, rather than the default
choice of SysV semaphores.

Include /opt/freeware/lib in -Wl,-blibpath, even when it is not
mentioned anywhere in LDFLAGS.

Remove platform-specific adjustment of MEMSET_LOOP_LIMIT; maybe
that's still the right thing, but it really ought to be re-tested.

Silence compiler warnings related to getpeereid(), wcstombs_l(),
and PAM conversation procs.

Accept "libpythonXXX.a" as an okay name for the Python shared
library (but only on AIX!).

Author: Aditya Kamath &lt;Aditya.Kamath1@ibm.com&gt;
Author: Srirama Kucherlapati &lt;sriram.rk@in.ibm.com&gt;
Co-authored-by: Peter Eisentraut &lt;peter@eisentraut.org&gt;
Reviewed-by: Tom Lane &lt;tgl@sss.pgh.pa.us&gt;
Discussion: https://postgr.es/m/CY5PR11MB63928CC05906F27FB10D74D0FD322@CY5PR11MB6392.namprd11.prod.outlook.com
</content>
</entry>
<entry>
<title>Give up on running with NetBSD/OpenBSD's default semaphore settings.</title>
<updated>2025-04-29T21:27:52Z</updated>
<author>
<name>Tom Lane</name>
</author>
<published>2025-04-29T21:27:52Z</published>
<link rel='alternate' type='text/html' href='http://git.postgresql.org/cgit/postgresql.git/commit/?id=810a8b1c8051d4e8822967a96f133692698386de'/>
<id>urn:sha1:810a8b1c8051d4e8822967a96f133692698386de</id>
<content type='text'>
This reverts commit 38da053463bef32adf563ddee5277d16d2b6c5af, which
attempted to preserve our ability to start with only 60 semaphores.

Subsequent changes (particularly 55b454d0e) have put that idea pretty
much permanently out of reach: people wishing to use Postgres v18 on
OpenBSD or NetBSD will have no choice but to increase those platforms'
default values of SEMMNI and SEMMNS.

Hence, revert 38da05346's changes in SEMAS_PER_SET and the minimum
tested value of max_connections.  Adjust a comment from the subsequent
patch 6d0154196, and tweak the wording in runtime.sgml to make it
clear that changing SEMMNI/SEMMNS is no longer even a little bit
optional on these platforms.

Although 38da05346 was later back-patched into v17, leave that branch
alone: it's still capable of starting with 60 semaphores, and there's
no reason to break that.

Author: Tom Lane &lt;tgl@sss.pgh.pa.us&gt;
Reviewed-by: Nathan Bossart &lt;nathandbossart@gmail.com&gt;
Discussion: https://postgr.es/m/E1tuZNv-0037Gs-34@gemulon.postgresql.org
Discussion: https://postgr.es/m/1052019.1745947915@sss.pgh.pa.us
</content>
</entry>
<entry>
<title>doc: Clarify the system value for sslrootcert</title>
<updated>2025-04-04T07:47:36Z</updated>
<author>
<name>Daniel Gustafsson</name>
</author>
<published>2025-04-04T07:47:36Z</published>
<link rel='alternate' type='text/html' href='http://git.postgresql.org/cgit/postgresql.git/commit/?id=daa16893faa96246d758eb2cc27e2f75c5308296'/>
<id>urn:sha1:daa16893faa96246d758eb2cc27e2f75c5308296</id>
<content type='text'>
The documentation for the special value "system" for sslrootcert could
be misinterpreted to mean the default operating system CA store, which
it may be, but it's defined to be the default CA store of the SSL lib
used.

Backpatch down to v16 where support for the system value was added.

Author: Daniel Gustafsson &lt;daniel@yesql.se&gt;
Reviewed-by: George MacKerron &lt;george@mackerron.co.uk&gt;
Discussion: https://postgr.es/m/B3CBBAA3-6EA3-4AB7-8619-4BBFAB93DDB4@yesql.se
Backpatch-through: 16
</content>
</entry>
</feed>
