Skip to content

Update omnibus submodule: remove EOL PostgreSQL 9.6 binaries#4208

Open
jashaik wants to merge 1 commit into
mainfrom
shahid/fix-remove-pg96-eol-binaries
Open

Update omnibus submodule: remove EOL PostgreSQL 9.6 binaries#4208
jashaik wants to merge 1 commit into
mainfrom
shahid/fix-remove-pg96-eol-binaries

Conversation

@jashaik

@jashaik jashaik commented Jun 9, 2026

Copy link
Copy Markdown
Contributor

Points omnibus submodule to chef-server-omnibus-config@b56dc8a (branch: fix/remove-pg96-eol-binaries).

PostgreSQL 9.6 reached End-of-Life on 2021-11-11. The pg96-bin package is bundled only for the 9.6->13 pg_upgrade migration path.

Changes in the submodule:

  • postgres_upgrade_cleanup.rb: adds a guarded ruby_block that removes /opt/opscode/embedded/postgresql/9.6 once PG 13 is confirmed active and no 9.6 data directory remains (safe for fresh installs and post-upgrade installs alike)
  • postgresql.rb: invokes postgres_upgrade_cleanup recipe immediately after pg_upgrade so every chef-server-ctl reconfigure self-heals

Security: eliminates unpatched EOL binaries, resolving compliance failures on CIS/SOC2/FedRAMP scans.

Description

[Please describe what this change achieves]

Issues Resolved

[List any existing issues this PR resolves, or any Discourse or
StackOverflow discussions that are relevant]

Check List

Points omnibus submodule to chef-server-omnibus-config@b56dc8a
(branch: fix/remove-pg96-eol-binaries).

PostgreSQL 9.6 reached End-of-Life on 2021-11-11. The pg96-bin
package is bundled only for the 9.6->13 pg_upgrade migration path.

Changes in the submodule:
- postgres_upgrade_cleanup.rb: adds a guarded ruby_block that removes
  /opt/opscode/embedded/postgresql/9.6 once PG 13 is confirmed active
  and no 9.6 data directory remains (safe for fresh installs and
  post-upgrade installs alike)
- postgresql.rb: invokes postgres_upgrade_cleanup recipe immediately
  after pg_upgrade so every chef-server-ctl reconfigure self-heals

Security: eliminates unpatched EOL binaries, resolving compliance
failures on CIS/SOC2/FedRAMP scans.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@jashaik jashaik requested review from a team as code owners June 9, 2026 05:59
@netlify

netlify Bot commented Jun 9, 2026

Copy link
Copy Markdown

👷 Deploy Preview for chef-server processing.

Name Link
🔨 Latest commit 158f667
🔍 Latest deploy log https://app.netlify.com/projects/chef-server/deploys/6a27ababa9428d0008b75616

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant