Re: extension_control_path

From: Dimitri Fontaine <dimitri(at)2ndQuadrant(dot)fr>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: PostgreSQL Hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: extension_control_path
Date: 2014-01-14 18:10:04
Message-ID: m28uuiv3ib.fsf@2ndQuadrant.fr
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> writes:

> Dimitri Fontaine <dimitri(at)2ndQuadrant(dot)fr> writes:
>> Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> writes:
>>> Why is that a good idea? It's certainly not going to simplify DBAs'
>>> lives, more the reverse. ("This dump won't reload." "Uh, where did
>>> you get that extension from?" "Ummm...")
>
>> The latest users for the feature are the Red Hat team working on Open
>> Shift where they want to have co-existing per-user PostgreSQL clusters
>> on a machine, each with its own set of extensions.
>
> Um ... "own set of installed extensions" doesn't need to mean "own set of
> available extensions", any more than those clusters need to have their
> own Postgres executables. If the clusters *do* have their own
> executables, eg because they're different PG versions, then they can
> certainly also have their own $SHAREDIR trees too. So this example
> is totally without value for your case.

They have several clusters as in `initdb` running standard packaged
binaries, each user having its own set of processes running with only
his privileges.

So when applying your idea (well, my understanding of it), they would be
happy with a $SHAREDIR per initdb.

>> Having extension_control_path also allows to install extension files in
>> a place not owned by root.
>
> As far as the control files go, there's nothing saying that
> $SHAREDIR/extension has to be root-owned. If there are .so's involved,
> I do not believe the Red Hat crew is asking you to support loading .so's
> from non-root-owned dirs, because that'd be against their own corporate
> security policies. (But in any case, where we find the control and SQL
> files need not have anything to do with where the .so's are.)

But you can have a single $SHAREDIR per set of executables, right?

Please read the following email to know what they asked for and how they
do operate OpenShift:

http://www.postgresql.org/message-id/341087492.2585530.1376776393038.JavaMail.root@redhat.com

Regards,
--
Dimitri Fontaine
http://2ndQuadrant.fr PostgreSQL : Expertise, Formation et Support

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Jeff Janes 2014-01-14 18:14:14 Re: [Lsf-pc] Linux kernel impact on PostgreSQL performance
Previous Message Robert Haas 2014-01-14 18:03:57 Re: shared memory message queues