···

       
826
       
 
       


     

       
827
       
 
       
          ExecStart = "${cfg.finalPackage}/bin/postgres";

     

       
828
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
829
       
 
       
          # Hardening

     

       
830
       
 
       
          CapabilityBoundingSet = [ "" ];

     

       
831
       
 
       
          DevicePolicy = "closed";

     
···

       
877
       
 
       
        })

     

       
878
       
 
       
      ];

     

       
879
       
 
       


     

       
880
       
-
       
      unitConfig.RequiresMountsFor = "${cfg.dataDir}";

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
881
       
 
       
    };

     

       
882
       
 
       


     

       
883
       
 
       
    systemd.services.postgresql-setup = {

     

···

       
826
       
 
       


     

       
827
       
 
       
          ExecStart = "${cfg.finalPackage}/bin/postgres";

     

       
828
       
 
       


     

       
829
       
+
       
          Restart = "always";

     

       
830
       
+
       


     

       
831
       
 
       
          # Hardening

     

       
832
       
 
       
          CapabilityBoundingSet = [ "" ];

     

       
833
       
 
       
          DevicePolicy = "closed";

     
···

       
879
       
 
       
        })

     

       
880
       
 
       
      ];

     

       
881
       
 
       


     

       
882
       
+
       
      unitConfig =

     

       
883
       
+
       
        let

     

       
884
       
+
       
          inherit (config.systemd.services.postgresql.serviceConfig) TimeoutSec;

     

       
885
       
+
       
          maxTries = 5;

     

       
886
       
+
       
          bufferSec = 5;

     

       
887
       
+
       
        in

     

       
888
       
+
       
        {

     

       
889
       
+
       
          RequiresMountsFor = "${cfg.dataDir}";

     

       
890
       
+
       


     

       
891
       
+
       
          # The max. time needed to perform `maxTries` start attempts of systemd

     

       
892
       
+
       
          # plus a bit of buffer time (bufferSec) on top.

     

       
893
       
+
       
          StartLimitIntervalSec = TimeoutSec * maxTries + bufferSec;

     

       
894
       
+
       
          StartLimitBurst = maxTries;

     

       
895
       
+
       
        };

     

       
896
       
 
       
    };

     

       
897
       
 
       


     

       
898
       
 
       
    systemd.services.postgresql-setup = {

     

···

       
101
       
 
       
          machine.fail(check_count("SELECT * FROM sth;", 4))

     

       
102
       
 
       
          machine.succeed(check_count("SELECT xpath('/test/text()', doc) FROM xmltest;", 1))

     

       
103
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
104
       
 
       
          with subtest("Backup service works"):

     

       
105
       
 
       
              machine.succeed(

     

       
106
       
 
       
                  "systemctl start ${backupService}.service",

     

···

       
101
       
 
       
          machine.fail(check_count("SELECT * FROM sth;", 4))

     

       
102
       
 
       
          machine.succeed(check_count("SELECT xpath('/test/text()', doc) FROM xmltest;", 1))

     

       
103
       
 
       


     

       
104
       
+
       
          with subtest("killing postgres process should trigger an automatic restart"):

     

       
105
       
+
       
              machine.succeed("systemctl kill -s KILL postgresql")

     

       
106
       
+
       


     

       
107
       
+
       
              machine.wait_until_succeeds("systemctl is-active postgresql.service")

     

       
108
       
+
       
              machine.wait_until_succeeds("systemctl is-active postgresql.target")

     

       
109
       
+
       


     

       
110
       
 
       
          with subtest("Backup service works"):

     

       
111
       
 
       
              machine.succeed(

     

       
112
       
 
       
                  "systemctl start ${backupService}.service",