$ the-wire · showcase
SUPABASE POSTGRES HARDENS NIX BUILDS FOR ROLLING INSTANCE UPDATES
By RepoJournal · Filed · About Supabase · Composed from the cited sources · methodology
1 person shipped this
Supabase shipped a foundational infrastructure update that packages PostgreSQL environments for safer, zero-downtime deployments across its fleet.
The postgres team merged a Nix configuration overhaul [1] that publishes site-profile packages for rolling instance updates, fixing PSQL-1406 and establishing the machinery for atomic system deployments. The change introduces three new buildEnv derivations: site-env-15 (supautils only), site-env-17, and site-env-orioledb-17, each bundling either supautils or both supautils and gatekeeper's pam_jit_pg.so for production use [2]. These packages land under legacyPackages so CI automatically builds and caches them on both Linux architectures, getting gatekeeper into the CI pipeline for the first time. The refactor also renames flake outputs from site-env-* to site-profile-* to match the actual /nix/var/nix/profiles/site profile they populate, fixing a subtle Nix bug where lib.optional was wrapping conditionals in nested lists that buildEnv silently dropped.
Action items
- → Review Nix profile outputs if you maintain Supabase instance deployments supabase/postgres [plan]
- → Monitor gatekeeper builds in CI for the first time supabase/postgres [monitor]
References
- [1] feat(nix): add site-env packages for rolling instance updates (#2283) ↗ supabase/postgres
- [2] feat(nix): add site-env packages for rolling instance updates ↗ supabase/postgres
