RPM Repository

This page helps you configure the CYBERTEC PostgreSQL Enterprise Edition (PGEE) RPM repository.

Several repositories are hosted here:

PostgreSQL Enterprise Edition (PGEE) full version
PostgreSQL Enterprise Edition (PGEE) free public demo version
Legacy TDE repository: PostgreSQL Transparent Data Encryption (TDE) full version

PGEE includes TDE and more features.

Available Packages

PGEE packages:

PostgreSQL 17 Enterprise Edition: postgresql17-ee-server
PostgreSQL 16 Enterprise Edition: postgresql16-ee-server
PostgreSQL 15 Enterprise Edition: postgresql15-ee-server
PostgreSQL 14 Enterprise Edition: postgresql14-ee-server
PostgreSQL 13 Enterprise Edition: postgresql13-ee-server

Legacy TDE packages:

PostgreSQL 15 Transparent Data Encryption: postgresql15-tde-server
PostgreSQL 14 Transparent Data Encryption: postgresql14-tde-server
PostgreSQL 13 Transparent Data Encryption: postgresql13-tde-server
PostgreSQL 12 Transparent Data Encryption: postgresql12-tde-server

Supported Distributions

RedHat RHEL 9 and derivatives
RedHat RHEL 8 and derivatives
SUSE SLES 15
No longer supported: RedHat RHEL 7 and derivatives

Repository Configuration

Disable Built-In Modules

On RedHat 8 and later, disable the built-in postgresql module:

sudo dnf module disable -y postgresql

Public PGEE Demo Version Repository

Free to use, limited to 1 GB per table

version=17 # available: 13 14 15 16 17

# RedHat/CentOS
sudo tee /etc/yum.repos.d/cybertec-pg$version.repo <<EOF
[cybertec_pg$version]
name=CYBERTEC PostgreSQL $version for RHEL/CentOS \$releasever - \$basearch
baseurl=https://repository.cybertec.at/public/$version/redhat/\$releasever/\$basearch
gpgkey=https://repository.cybertec.at/assets/cybertec-rpm.asc
enabled=1
EOF

# SUSE SLES
sudo tee /etc/zypp/repos.d/cybertec-pg$version.repo <<EOF
[cybertec_pg$version]
name=CYBERTEC PostgreSQL $version for SLES \$releasever_major - \$basearch
baseurl=https://repository.cybertec.at/public/$version/sles/\$releasever_major/\$basearch
gpgkey=https://repository.cybertec.at/assets/cybertec-rpm.asc
enabled=1
EOF

Full PGEE Version Repository

Unlimited version - contact CYBERTEC for a quote

version=17 # available: 13 14 15 16 17
username="YOUR_LOGIN"
password="YOUR_PASSWORD"

# RedHat/CentOS
sudo tee /etc/yum.repos.d/cybertec-pg$version.repo <<EOF
[cybertec_pg$version]
name=CYBERTEC PostgreSQL $version for RHEL/CentOS \$releasever - \$basearch
baseurl=https://repository.cybertec.at/pgee/$version/redhat/\$releasever/\$basearch
gpgkey=https://repository.cybertec.at/assets/cybertec-rpm.asc
username=$username
password=$password
enabled=1
EOF

# SUSE SLES
sudo tee /etc/zypp/repos.d/cybertec-pg$version.repo <<EOF
[cybertec_pg$version]
name=CYBERTEC PostgreSQL $version for SLES \$releasever_major - \$basearch
baseurl=https://$username:$password@repository.cybertec.at/pgee/$version/sles/\$releasever_major/\$basearch
gpgkey=https://repository.cybertec.at/assets/cybertec-rpm.asc
enabled=1
EOF

Legacy TDE Repository

Unlimited version - contact CYBERTEC for a quote

Note: We are phasing out the TDE packages; existing customers are encouraged to switch to PGEE. See below for migration instructions.

version=15 # available: 12 13 14 15
username="YOUR_LOGIN"
password="YOUR_PASSWORD"

sudo tee /etc/yum.repos.d/cybertec-pg$version.repo <<EOF
[cybertec_pg$version]
name=CYBERTEC PostgreSQL $version for RHEL/CentOS \$releasever - \$basearch
baseurl=https://repository.cybertec.at/non-public/$version/redhat/\$releasever/\$basearch
username=$username
password=$password
enabled=1
gpgcheck=0
EOF

Install Packages

sudo yum install -y postgresql17-ee-server # adjust for version

sudo yum install -y postgresql15-tde-server # legacy TDE package

Create Encrypted Cluster

To create an encrypted cluster, set up an encryption key, and create a new cluster:

version=16 # adjust for version
PATH=/usr/pgsql-$version-tde/bin:/usr/pgsql-$version/bin:$PATH
KEY=$(dd if=/dev/random bs=1k count=1 | md5sum - | cut -d ' ' -f 1)

initdb -D /var/lib/pgsql/$version/data -k -K "echo $KEY"
pg_ctl -D /var/lib/pgsql/$version/data start
psql

psql (17.2 EE 1.4.0)
 ____   ____ _____ _____
|  _ \ / ___| ____| ____|
| |_) | |  _|  _| |  _|
|  __/| |_| | |___| |___
|_|    \____|_____|_____|
PostgreSQL EE by CYBERTEC
Type "help" for help.

postgres=# show data_encryption;
 data_encryption
-----------------
 on
(1 row)

postgres=#

Note: The cluster created here uses an encryption key that is stored inside postgresql.conf. Other more secure key retrieval methods can be configured; talk to CYBERTEC about which method fits your security requirements best.

Migrate from TDE to PGEE

To migrate from the TDE packages to the PGEE packages, use pg_upgrade.

For example, when starting with 13 TDE moving to 17 EE, install 17 EE as above, then:

initdb -D /var/lib/pgsql/17/data -k -K "echo $KEY" # same key
/usr/pgsql-17/bin/pg_upgrade -b /usr/pgsql-13-tde/bin/ \
    -d /var/lib/pgsql/13/data -D /var/lib/pgsql/17/data