Category: SEC

• 1: passwordcheck_cracklib
• 2: supautils
• 3: pgsodium
• 4: supabase_vault
• 5: pg_session_jwt
• 6: anon
• 7: pg_tde
• 8: pgsmcrypto
• 9: pgaudit
• 10: pgauditlogtofile
• 11: pg_auth_mon
• 12: credcheck
• 13: pgcryptokey
• 14: pg_jobmon
• 15: logerrors
• 16: login_hook
• 17: set_user
• 18: pg_snakeoil
• 19: pgextwlist
• 20: pg_auditor
• 21: sslutils
• 22: noset
• 23: sepgsql
• 24: auth_delay
• 25: pgcrypto
• 26: passwordcheck

1 - passwordcheck_cracklib

Overview

MIXED 3rd Party Extension: passwordcheck : Strengthen PostgreSQL user password checks with cracklib

Information

• Extension ID: 7000
• Extension Name: passwordcheck_cracklib
• Package Name: passwordcheck
• Category: SEC
• License: LGPLv2
• Website: https://github.com/devrimgunduz/passwordcheck_cracklib
• Language: C
• Extra Tags: N/A
• Comment: N/A

Metadata

• Latest Version: 3.0.0
• Postgres Support: 17,16,15,14,13
• Need Load: Explicit Loading Required
• Need DDL: Dd not need CREATE EXTENSION DDL
• Relocatable: Unknown
• Trusted: Untrusted, Require Superuser to Create
• Schemas: N/A
• Requires: N/A

RPM / DEB

• RPM Repo: PGDG
• RPM Name: passwordcheck_cracklib_$v*
• RPM Ver : 3.0.0
• RPM Deps: N/A
• DEB Repo: PIGSTY
• DEB Name: postgresql-$v-passwordcheck-cracklib
• DEB Ver : 3.0.0
• DEB Deps: N/A

Packages

Installation

Install passwordcheck_cracklib via the pig CLI tool:

pig ext install passwordcheck; # Extension Namepig ext install passwordcheck_cracklib; # normalized package name

Install passwordcheck via Pigsty playbook:

./pgsql.yml -t pg_extension -e '{"pg_extensions": ["passwordcheck"]}' # -l <cls>

Install passwordcheck RPM from YUM repo directly:

dnf install passwordcheck_cracklib_17*;
dnf install passwordcheck_cracklib_16*;
dnf install passwordcheck_cracklib_15*;
dnf install passwordcheck_cracklib_14*;
dnf install passwordcheck_cracklib_13*;

Install passwordcheck DEB from APT repo directly:

apt install postgresql-17-passwordcheck-cracklib;
apt install postgresql-16-passwordcheck-cracklib;
apt install postgresql-15-passwordcheck-cracklib;
apt install postgresql-14-passwordcheck-cracklib;
apt install postgresql-13-passwordcheck-cracklib;

Extension passwordcheck_cracklib has to be added to shared_preload_libraries

shared_preload_libraries = 'passwordcheck_cracklib'; # add to pg cluster config

Extension %s does not need CREATE EXTENSION command

2 - supautils

Overview

PIGSTY 3rd Party Extension: supautils : Extension that secures a cluster on a cloud environment

Information

• Extension ID: 7010
• Extension Name: supautils
• Package Name: supautils
• Category: SEC
• License: Apache-2.0
• Website: https://github.com/supabase/supautils
• Language: C
• Extra Tags: supabase
• Comment: N/A

Metadata

• Latest Version: 2.6.0
• Postgres Support: 17,16,15,14,13
• Need Load: Explicit Loading Required
• Need DDL: Dd not need CREATE EXTENSION DDL
• Relocatable: Unknown
• Trusted: Untrusted, Require Superuser to Create
• Schemas: N/A
• Requires: N/A

RPM / DEB

• RPM Repo: PIGSTY
• RPM Name: supautils_$v*
• RPM Ver : 2.6.0
• RPM Deps: N/A
• DEB Repo: PIGSTY
• DEB Name: postgresql-$v-supautils
• DEB Ver : 2.6.0
• DEB Deps: N/A

Packages

Installation

Install supautils via the pig CLI tool:

pig ext install supautils

Install supautils via Pigsty playbook:

./pgsql.yml -t pg_extension -e '{"pg_extensions": ["supautils"]}' # -l <cls>

Install supautils RPM from YUM repo directly:

dnf install supautils_17*;
dnf install supautils_16*;
dnf install supautils_15*;
dnf install supautils_14*;
dnf install supautils_13*;

Install supautils DEB from APT repo directly:

apt install postgresql-17-supautils;
apt install postgresql-16-supautils;
apt install postgresql-15-supautils;
apt install postgresql-14-supautils;
apt install postgresql-13-supautils;

Extension supautils has to be added to shared_preload_libraries

shared_preload_libraries = 'supautils'; # add to pg cluster config

Extension %s does not need CREATE EXTENSION command

3 - pgsodium

Overview

PIGSTY 3rd Party Extension: pgsodium : Postgres extension for libsodium functions

Information

• Extension ID: 7020
• Extension Name: pgsodium
• Package Name: pgsodium
• Category: SEC
• License: BSD 3
• Website: https://github.com/michelp/pgsodium
• Language: C
• Extra Tags: supabase
• Comment:

Metadata

• Latest Version: 3.1.9
• Postgres Support: 17,16,15,14,13
• Need Load: Explicit Loading Required
• Need DDL: Need CREATE EXTENSION DDL
• Relocatable: Can be installed into other schemas
• Trusted: Untrusted, Require Superuser to Create
• Schemas: pgsodium
• Requires: N/A

RPM / DEB

• RPM Repo: PIGSTY
• RPM Name: pgsodium_$v*
• RPM Ver : 3.1.9
• RPM Deps: N/A
• DEB Repo: PIGSTY
• DEB Name: postgresql-$v-pgsodium
• DEB Ver : 3.1.9
• DEB Deps: N/A

Packages

Installation

Install pgsodium via the pig CLI tool:

pig ext install pgsodium

Install pgsodium via Pigsty playbook:

./pgsql.yml -t pg_extension -e '{"pg_extensions": ["pgsodium"]}' # -l <cls>

Install pgsodium RPM from YUM repo directly:

dnf install pgsodium_17*;
dnf install pgsodium_16*;
dnf install pgsodium_15*;
dnf install pgsodium_14*;
dnf install pgsodium_13*;

Install pgsodium DEB from APT repo directly:

apt install postgresql-17-pgsodium;
apt install postgresql-16-pgsodium;
apt install postgresql-15-pgsodium;
apt install postgresql-14-pgsodium;
apt install postgresql-13-pgsodium;

Extension pgsodium has to be added to shared_preload_libraries

shared_preload_libraries = 'pgsodium'; # add to pg cluster config

Enable pgsodium extension on PostgreSQL cluster：

CREATE EXTENSION pgsodium;

4 - supabase_vault

Overview

PIGSTY 3rd Party Extension: pg_vault : Supabase Vault Extension

Information

• Extension ID: 7030
• Extension Name: supabase_vault
• Package Name: pg_vault
• Category: SEC
• License: Apache-2.0
• Website: https://github.com/supabase/vault
• Language: C
• Extra Tags: supabase
• Comment: N/A

Metadata

• Latest Version: 0.2.8
• Postgres Support: 17,16,15,14,13
• Need Load: Shared library do not need explicit loading
• Need DDL: Need CREATE EXTENSION DDL
• Relocatable: Can be installed into other schemas
• Trusted: Untrusted, Require Superuser to Create
• Schemas: vault
• Requires: pgsodium

RPM / DEB

• RPM Repo: PIGSTY
• RPM Name: vault_$v*
• RPM Ver : 0.2.8
• RPM Deps: N/A
• DEB Repo: PIGSTY
• DEB Name: postgresql-$v-vault
• DEB Ver : 0.2.8
• DEB Deps: N/A

Packages

Installation

Install supabase_vault via the pig CLI tool:

pig ext install pg_vault; # Extension Namepig ext install supabase_vault; # normalized package name

Install pg_vault via Pigsty playbook:

./pgsql.yml -t pg_extension -e '{"pg_extensions": ["pg_vault"]}' # -l <cls>

Install pg_vault RPM from YUM repo directly:

dnf install vault_17*;
dnf install vault_16*;
dnf install vault_15*;
dnf install vault_14*;
dnf install vault_13*;

Install pg_vault DEB from APT repo directly:

apt install postgresql-17-vault;
apt install postgresql-16-vault;
apt install postgresql-15-vault;
apt install postgresql-14-vault;
apt install postgresql-13-vault;

Enable supabase_vault extension on PostgreSQL cluster：

CREATE EXTENSION supabase_vault CASCADE;

5 - pg_session_jwt

Overview

PIGSTY 3rd Party Extension: pg_session_jwt : Manage authentication sessions using JWTs

Information

• Extension ID: 7040
• Extension Name: pg_session_jwt
• Package Name: pg_session_jwt
• Category: SEC
• License: Apache-2.0
• Website: https://github.com/neondatabase/pg_session_jwt
• Language: Rust
• Extra Tags: neon
• Comment: N/A

Metadata

• Latest Version: 0.1.2
• Postgres Support: 17,16,15,14
• Need Load: Shared library do not need explicit loading
• Need DDL: Need CREATE EXTENSION DDL
• Relocatable: Can be installed into other schemas
• Trusted: Trusted, Can be created by user with CREATE Privilege
• Schemas: auth
• Requires: N/A

RPM / DEB

• RPM Repo: PIGSTY
• RPM Name: pg_session_jwt_$v
• RPM Ver : 0.1.2
• RPM Deps: N/A
• DEB Repo: PIGSTY
• DEB Name: postgresql-$v-pg-session-jwt
• DEB Ver : 0.1.2
• DEB Deps: N/A

Packages

Installation

Install pg_session_jwt via the pig CLI tool:

pig ext install pg_session_jwt

Install pg_session_jwt via Pigsty playbook:

./pgsql.yml -t pg_extension -e '{"pg_extensions": ["pg_session_jwt"]}' # -l <cls>

Install pg_session_jwt RPM from YUM repo directly:

dnf install pg_session_jwt_17;
dnf install pg_session_jwt_16;
dnf install pg_session_jwt_15;
dnf install pg_session_jwt_14;

Install pg_session_jwt DEB from APT repo directly:

apt install postgresql-17-pg-session-jwt;
apt install postgresql-16-pg-session-jwt;
apt install postgresql-15-pg-session-jwt;
apt install postgresql-14-pg-session-jwt;

Enable pg_session_jwt extension on PostgreSQL cluster：

CREATE EXTENSION pg_session_jwt;

6 - anon

Overview

PIGSTY 3rd Party Extension: pg_anon : PostgreSQL Anonymizer (anon) extension

Information

• Extension ID: 7050
• Extension Name: anon
• Package Name: pg_anon
• Category: SEC
• License: PostgreSQL
• Website: https://gitlab.com/dalibo/postgresql_anonymizer/
• Language: Rust
• Extra Tags: N/A
• Comment: N/A

Metadata

• Latest Version: 2.0.0
• Postgres Support: 17,16,15,14,13
• Need Load: Explicit Loading Required
• Need DDL: Need CREATE EXTENSION DDL
• Relocatable: Can be installed into other schemas
• Trusted: Untrusted, Require Superuser to Create
• Schemas: anon
• Requires: N/A

RPM / DEB

• RPM Repo: PIGSTY
• RPM Name: pg_anon_$v
• RPM Ver : 2.0.0
• RPM Deps: N/A
• DEB Repo: PIGSTY
• DEB Name: postgresql-$v-pg-anon
• DEB Ver : 2.0.0
• DEB Deps: N/A

Packages

Installation

Install anon via the pig CLI tool:

pig ext install pg_anon; # Extension Namepig ext install anon; # normalized package name

Install pg_anon via Pigsty playbook:

./pgsql.yml -t pg_extension -e '{"pg_extensions": ["pg_anon"]}' # -l <cls>

Install pg_anon RPM from YUM repo directly:

dnf install pg_anon_17;
dnf install pg_anon_16;
dnf install pg_anon_15;
dnf install pg_anon_14;
dnf install pg_anon_13;

Install pg_anon DEB from APT repo directly:

apt install postgresql-17-pg-anon;
apt install postgresql-16-pg-anon;
apt install postgresql-15-pg-anon;
apt install postgresql-14-pg-anon;
apt install postgresql-13-pg-anon;

Extension anon has to be added to shared_preload_libraries

shared_preload_libraries = 'anon'; # add to pg cluster config

Enable anon extension on PostgreSQL cluster：

CREATE EXTENSION anon;

7 - pg_tde

Overview

PIGSTY 3rd Party Extension: pg_tde : pg_tde access method

Information

• Extension ID: 7060
• Extension Name: pg_tde
• Package Name: pg_tde
• Category: SEC
• License: MIT
• Website: https://github.com/Percona-Lab/pg_tde
• Language: C
• Extra Tags: beta
• Comment: N/A

Metadata

• Latest Version: 1.0
• Postgres Support: 16
• Need Load: Explicit Loading Required
• Need DDL: Need CREATE EXTENSION DDL
• Relocatable: Can not install to arbitrary schema
• Trusted: Untrusted, Require Superuser to Create
• Schemas: N/A
• Requires: N/A

RPM / DEB

• RPM Repo: PIGSTY
• RPM Name: pg_tde_$v*
• RPM Ver : 1.0
• RPM Deps: N/A
• DEB Repo: PIGSTY
• DEB Name: postgresql-$v-pg-tde
• DEB Ver : 1.0
• DEB Deps: N/A

Packages

Installation

Install pg_tde via the pig CLI tool:

pig ext install pg_tde

Install pg_tde via Pigsty playbook:

./pgsql.yml -t pg_extension -e '{"pg_extensions": ["pg_tde"]}' # -l <cls>

Install pg_tde RPM from YUM repo directly:

dnf install pg_tde_16*;

Install pg_tde DEB from APT repo directly:

apt install postgresql-16-pg-tde;

Extension pg_tde has to be added to shared_preload_libraries

shared_preload_libraries = 'pg_tde'; # add to pg cluster config

Enable pg_tde extension on PostgreSQL cluster：

CREATE EXTENSION pg_tde;

8 - pgsmcrypto

Overview

PIGSTY 3rd Party Extension: pgsmcrypto : PostgreSQL SM Algorithm Extension

Information

• Extension ID: 7070
• Extension Name: pgsmcrypto
• Package Name: pgsmcrypto
• Category: SEC
• License: MIT
• Website: https://github.com/zhuobie/pgsmcrypto
• Language: Rust
• Extra Tags: pgrx
• Comment:

Metadata

• Latest Version: 0.1.0
• Postgres Support: 17,16,15,14,13
• Need Load: Shared library do not need explicit loading
• Need DDL: Need CREATE EXTENSION DDL
• Relocatable: Can be installed into other schemas
• Trusted: Untrusted, Require Superuser to Create
• Schemas: N/A
• Requires: N/A

RPM / DEB

• RPM Repo: PIGSTY
• RPM Name: pgsmcrypto_$v
• RPM Ver : 0.1.0
• RPM Deps: N/A
• DEB Repo: PIGSTY
• DEB Name: postgresql-$v-pgsmcrypto
• DEB Ver : 0.1.0
• DEB Deps: N/A

Packages

Installation

Install pgsmcrypto via the pig CLI tool:

pig ext install pgsmcrypto

Install pgsmcrypto via Pigsty playbook:

./pgsql.yml -t pg_extension -e '{"pg_extensions": ["pgsmcrypto"]}' # -l <cls>

Install pgsmcrypto RPM from YUM repo directly:

dnf install pgsmcrypto_17;
dnf install pgsmcrypto_16;
dnf install pgsmcrypto_15;
dnf install pgsmcrypto_14;
dnf install pgsmcrypto_13;

Install pgsmcrypto DEB from APT repo directly:

apt install postgresql-17-pgsmcrypto;
apt install postgresql-16-pgsmcrypto;
apt install postgresql-15-pgsmcrypto;
apt install postgresql-14-pgsmcrypto;
apt install postgresql-13-pgsmcrypto;

Enable pgsmcrypto extension on PostgreSQL cluster：

CREATE EXTENSION pgsmcrypto;

9 - pgaudit

Overview

PGDG 1st Party Extension: pgaudit : provides auditing functionality

Information

• Extension ID: 7080
• Extension Name: pgaudit
• Package Name: pgaudit
• Category: SEC
• License: PostgreSQL
• Website: https://github.com/pgaudit/pgaudit
• Language: C
• Extra Tags: N/A
• Comment:

Metadata

• Latest Version: 17.0
• Postgres Support: 17,16,15,14,13
• Need Load: Explicit Loading Required
• Need DDL: Need CREATE EXTENSION DDL
• Relocatable: Can not install to arbitrary schema
• Trusted: Untrusted, Require Superuser to Create
• Schemas: N/A
• Requires: N/A

RPM / DEB

• RPM Repo: PGDG
• RPM Name: pgaudit_$v*
• RPM Ver : 17.0
• RPM Deps: N/A
• DEB Repo: PGDG
• DEB Name: postgresql-$v-pgaudit
• DEB Ver : 17.0
• DEB Deps: N/A

Packages

Installation

Install pgaudit via the pig CLI tool:

pig ext install pgaudit

./pgsql.yml -t pg_extension -e '{"pg_extensions": ["pgaudit"]}'   # common case
./pgsql.yml -t pg_extension -e '{"pg_extensions": ["pgaudit17"]}' # pg15 @ el
./pgsql.yml -t pg_extension -e '{"pg_extensions": ["pgaudit16"]}' # pg14 @ el
./pgsql.yml -t pg_extension -e '{"pg_extensions": ["pgaudit15"]}' # pg13 @ el

Install pgaudit RPM from YUM repo directly:

dnf install pgaudit_17*;
dnf install pgaudit_16*;
dnf install pgaudit_15*;
dnf install pgaudit_14*;
dnf install pgaudit_13*;

Install pgaudit DEB from APT repo directly:

apt install postgresql-17-pgaudit;
apt install postgresql-16-pgaudit;
apt install postgresql-15-pgaudit;
apt install postgresql-14-pgaudit;
apt install postgresql-13-pgaudit;

Extension pgaudit has to be added to shared_preload_libraries

shared_preload_libraries = 'pgaudit'; # add to pg cluster config

Enable pgaudit extension on PostgreSQL cluster：

CREATE EXTENSION pgaudit;

10 - pgauditlogtofile

Overview

PGDG 1st Party Extension: pgauditlogtofile : pgAudit addon to redirect audit log to an independent file

Information

• Extension ID: 7090
• Extension Name: pgauditlogtofile
• Package Name: pgauditlogtofile
• Category: SEC
• License: PostgreSQL
• Website: https://github.com/fmbiete/pgauditlogtofile
• Language: C
• Extra Tags: N/A
• Comment: N/A

Metadata

• Latest Version: 1.6
• Postgres Support: 17,16,15,14,13
• Need Load: Shared library do not need explicit loading
• Need DDL: Need CREATE EXTENSION DDL
• Relocatable: Can not install to arbitrary schema
• Trusted: Untrusted, Require Superuser to Create
• Schemas: N/A
• Requires: N/A

RPM / DEB

• RPM Repo: PGDG
• RPM Name: pgauditlogtofile_$v*
• RPM Ver : 1.6
• RPM Deps: N/A
• DEB Repo: PGDG
• DEB Name: postgresql-$v-pgauditlogtofile
• DEB Ver : 1.6
• DEB Deps: N/A

Packages

Installation

Install pgauditlogtofile via the pig CLI tool:

pig ext install pgauditlogtofile

Install pgauditlogtofile via Pigsty playbook:

./pgsql.yml -t pg_extension -e '{"pg_extensions": ["pgauditlogtofile"]}' # -l <cls>

Install pgauditlogtofile RPM from YUM repo directly:

dnf install pgauditlogtofile_17*;
dnf install pgauditlogtofile_16*;
dnf install pgauditlogtofile_15*;
dnf install pgauditlogtofile_14*;
dnf install pgauditlogtofile_13*;

Install pgauditlogtofile DEB from APT repo directly:

apt install postgresql-17-pgauditlogtofile;
apt install postgresql-16-pgauditlogtofile;
apt install postgresql-15-pgauditlogtofile;
apt install postgresql-14-pgauditlogtofile;
apt install postgresql-13-pgauditlogtofile;

Enable pgauditlogtofile extension on PostgreSQL cluster：

CREATE EXTENSION pgauditlogtofile;

11 - pg_auth_mon

Overview

MIXED 3rd Party Extension: pg_auth_mon : monitor connection attempts per user

Information

• Extension ID: 7100
• Extension Name: pg_auth_mon
• Package Name: pg_auth_mon
• Category: SEC
• License: MIT
• Website: https://github.com/RafiaSabih/pg_auth_mon
• Language: C
• Extra Tags: N/A
• Comment: N/A

Metadata

• Latest Version: 1.1
• Postgres Support: 17,16,15,14,13
• Need Load: Shared library do not need explicit loading
• Need DDL: Need CREATE EXTENSION DDL
• Relocatable: Can not install to arbitrary schema
• Trusted: Untrusted, Require Superuser to Create
• Schemas: N/A
• Requires: N/A

RPM / DEB

• RPM Repo: PGDG
• RPM Name: pg_auth_mon_$v*
• RPM Ver : 1.1
• RPM Deps: N/A
• DEB Repo: PIGSTY
• DEB Name: postgresql-$v-pg-auth-mon
• DEB Ver : 1.1
• DEB Deps: N/A

Packages

Installation

Install pg_auth_mon via the pig CLI tool:

pig ext install pg_auth_mon

Install pg_auth_mon via Pigsty playbook:

./pgsql.yml -t pg_extension -e '{"pg_extensions": ["pg_auth_mon"]}' # -l <cls>

Install pg_auth_mon RPM from YUM repo directly:

dnf install pg_auth_mon_17*;
dnf install pg_auth_mon_16*;
dnf install pg_auth_mon_15*;
dnf install pg_auth_mon_14*;
dnf install pg_auth_mon_13*;

Install pg_auth_mon DEB from APT repo directly:

apt install postgresql-17-pg-auth-mon;
apt install postgresql-16-pg-auth-mon;
apt install postgresql-15-pg-auth-mon;
apt install postgresql-14-pg-auth-mon;
apt install postgresql-13-pg-auth-mon;

Enable pg_auth_mon extension on PostgreSQL cluster：

CREATE EXTENSION pg_auth_mon;

12 - credcheck

Overview

PGDG 1st Party Extension: credcheck : credcheck - postgresql plain text credential checker

Information

• Extension ID: 7110
• Extension Name: credcheck
• Package Name: credcheck
• Category: SEC
• License: MIT
• Website: https://github.com/MigOpsRepos/credcheck
• Language: C
• Extra Tags: N/A
• Comment: N/A

Metadata

• Latest Version: 3.0.0
• Postgres Support: 17,16,15,14,13
• Need Load: Shared library do not need explicit loading
• Need DDL: Need CREATE EXTENSION DDL
• Relocatable: Can be installed into other schemas
• Trusted: Untrusted, Require Superuser to Create
• Schemas: N/A
• Requires: N/A

RPM / DEB

• RPM Repo: PGDG
• RPM Name: credcheck_$v*
• RPM Ver : 3.0.0
• RPM Deps: N/A
• DEB Repo: PGDG
• DEB Name: postgresql-$v-credcheck
• DEB Ver : 3.0.0
• DEB Deps: N/A

Packages