Enable CI testing

'PROFILE=SYSTEM' after installation, while still keeping the default as
it was before: 'HIGH:MEDIUM:+3DES:!aNULL'

Related: RHEL-144930

.fmf/version

@@ -0,0 +1 @@
+1

.gitignore

@@ -21,3 +21,8 @@
 /postgresql-16.10.tar.bz2
 /postgresql-17.6.tar.bz2.sha256
 /postgresql-16.10.tar.bz2.sha256
+/postgresql-17.9.tar.bz2
+/postgresql-16.13.tar.bz2
+/postgresql-17.9.tar.bz2.sha256
+/postgresql-16.13.tar.bz2.sha256
+/postgresql-setup-8.12.tar.gz

README.packit

@@ -1,3 +1,3 @@
 This repository is maintained by packit.
 https://packit.dev/
-The file was generated using packit 1.11.0.
+The file was generated using packit 1.15.0.post1.dev2+g8f2adf816.

ci.fmf

@@ -1,10 +0,0 @@
-/test:
-    summary:
-        Basic set of quick tests for postgresql.
-    discover:
-      - name: fedora
-        how: fmf
-        url: "https://src.fedoraproject.org/tests/postgresql.git"
-        ref: main
-    execute:
-        how: tmt

gating.yaml

@@ -0,0 +1,17 @@
+# Branched Fedora (non-Rawhide)
+--- !Policy
+product_versions:
+  - fedora-*
+decision_context: bodhi_update_push_testing
+subject_type: koji_build
+rules:
+  - !PassingTestCaseRule {test_case_name: fedora-ci.koji-build./plans/tier1-public.functional}
+ 
+# Rawhide Fedora
+--- !Policy
+product_versions:
+  - fedora-*
+decision_context: bodhi_update_push_stable
+subject_type: koji_build
+rules:
+  - !PassingTestCaseRule {test_case_name: fedora-ci.koji-build./plans/tier1-public.functional}

plans/tier1-public.fmf

@@ -0,0 +1,4 @@
+plan:
+  import:
+    url: https://gitlab.com/redhat/centos-stream/tests/postgresql
+    name: /plans/versioned/postgresql17

postgresql-default-ssl-config.patch

@@ -0,0 +1,12 @@
+diff -Naur postgresql-17.9/src/backend/utils/misc/postgresql.conf.sample postgresql-17.9_patched/src/backend/utils/misc/postgresql.conf.sample
+--- postgresql-17.9/src/backend/utils/misc/postgresql.conf.sample	2026-02-23 22:58:47.000000000 +0100
++++ postgresql-17.9_patched/src/backend/utils/misc/postgresql.conf.sample	2026-05-12 11:35:30.531633102 +0200
+@@ -110,7 +110,7 @@
+ #ssl_crl_file = ''
+ #ssl_crl_dir = ''
+ #ssl_key_file = 'server.key'
+-#ssl_ciphers = 'HIGH:MEDIUM:+3DES:!aNULL'	# allowed SSL ciphers
++ssl_ciphers = 'PROFILE=SYSTEM'	# allowed SSL ciphers, default: 'HIGH:MEDIUM:+3DES:!aNULL'
+ #ssl_prefer_server_ciphers = on
+ #ssl_ecdh_curve = 'prime256v1'
+ #ssl_min_protocol_version = 'TLSv1.2'

postgresql17.spec

@@ -47,8 +47,8 @@
 
 Summary: PostgreSQL client programs
 Name: %{majorname}%{majorversion}
-Version: %{majorversion}.6
-Release: 2%{?dist}
+Version: %{majorversion}.9
+Release: 9%{?dist}
 
 # The PostgreSQL license is very similar to other MIT licenses, but the OSI
 # recognizes it as an independent license, so we do as well.
@@ -60,11 +60,11 @@ Url: http://www.postgresql.org/
 # that this be kept up with the latest minor release of the previous series;
 # but update when bugs affecting pg_dump output are fixed.
 %global prevmajorversion 16
-%global prevversion %{prevmajorversion}.10
+%global prevversion %{prevmajorversion}.13
 %global prev_prefix %{_libdir}/pgsql/postgresql-%{prevmajorversion}
 %global precise_version %{?epoch:%epoch:}%version-%release
 
-%global setup_version 8.9
+%global setup_version 8.12
 
 %global service_name postgresql.service
 
@@ -95,6 +95,7 @@ Patch9: postgresql-server-pg_config.patch
 # rhbz#1940964
 Patch10: postgresql-datalayout-mismatch-on-s390.patch
 Patch12: postgresql-no-libecpg.patch
+Patch13: postgresql-default-ssl-config.patch
 
 # This macro is used for package names in the files section
 %if %?postgresql_default
@@ -520,6 +521,7 @@ goal of accelerating analytics queries.
 %endif
 %patch 9 -p1
 %patch 10 -p1
+%patch 13 -p1
 
 
 %if ! %external_libpq
@@ -1354,6 +1356,34 @@ make -C postgresql-setup-%{setup_version} check
 
 
 %changelog
+* Fri Jul 24 2026 Python Maint <python-maint@redhat.com> - 17.9-9
+- Rebuilt for Python 3.15.0b4 ABI change
+
+* Thu Jul 23 2026 Jitka Plesnikova <jplesnik@redhat.com> - 17.9-8
+- Perl 5.44 rebuild
+
+* Wed Jul 22 2026 Python Maint <python-maint@redhat.com> - 17.9-7
+- Rebuilt for Python 3.15.0b4 ABI change
+
+* Thu Jul 16 2026 Fedora Release Engineering <releng@fedoraproject.org> - 17.9-6
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
+
+* Mon Jun 08 2026 František Zatloukal <fzatlouk@redhat.com> - 17.9-5
+- Rebuilt for icu 78.3
+
+* Wed Jun 03 2026 Python Maint <python-maint@redhat.com> - 17.9-4
+- Rebuilt for Python 3.15
+
+* Tue May 12 2026 Pavol Sloboda <psloboda@redhat.com> - 17.9-3
+- Release bump
+
+* Fri Apr 24 2026 Petr Khartskhaev <pkhartsk@redhat.com> - 17.9-2
+- Update postgresql-setup to 8.12
+
+* Thu Feb 26 2026 Packit <hello@packit.dev> - 17.9-1
+- Update to version 17.9
+- Resolves: rhbz#2414833
+
 * Tue Jan 20 2026 Fedora Release Engineering <releng@fedoraproject.org> - 17.6-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
 

sources

@@ -1,5 +1,5 @@
-SHA512 (postgresql-17.6.tar.bz2) = d377ed208b3fd1bf9611f148f4286e8c655374218cc3b12cd766917063001750f7dede140065874b7c8bdc2f2b3ecaf15c18cc6cd341929b2c3a574a7797a67e
-SHA512 (postgresql-16.10.tar.bz2) = b6de80d522f863b0d9dd8c2bf4f71bea309bd07586859e309a9821e7f6fd5839557dc396351e7b61aebf492bf8c8a053a324f059a1dee621ac1a6d5e8eccea22
-SHA512 (postgresql-setup-8.9.tar.gz) = 118e9ebf858722a38b0e90324bc1b49fc7058cda601ca0a7e78c94e7b95e89d6dbbc46f377626364b068614ced3cde3cb4733973ad2d71bf17892ad773657ef7
-SHA512 (postgresql-17.6.tar.bz2.sha256) = b727c9dac05f69992bb41f18ca48083147ba50f64aee9b638e081d64aa98c5901c5aaa3958f5d9a28e933fbbbdd83e7d43c5c429b0c3d4be0a840e90cfb44098
-SHA512 (postgresql-16.10.tar.bz2.sha256) = 2489a4a2074c7be5c352153ab899681f0761db5dfce8fe315be19783d91613c033570a2f5f85145e5608550e1636231abbeb96aacaa8a94f463caf0c02af48a1
+SHA512 (postgresql-17.9.tar.bz2) = 2b9c9ca9d765704895ec4af4107accead2ba3f3ce8bc87eed29fd020cf97b53a49a7d3eb9fa1242a7c430fe2f7e1be726f1ad67557ded2fe8b31b9d8fe659fbf
+SHA512 (postgresql-16.13.tar.bz2) = 3ea11b81ce55be5c3c169f0c94ddfa9debae6b3cbe7407086ba3a602fad7668900c2838d4d4488c671b2ccc670a9cd288ece90e42ecf8de953df6b4e103d286d
+SHA512 (postgresql-setup-8.12.tar.gz) = 9a921e8806e87891f6573d009d41800b4bde8b64e78813cdfcdb15cc7ca9b4f21cd2681becf82e881c7e99590a4d17dfe04aa868b7dd6d134feff719a2806344
+SHA512 (postgresql-17.9.tar.bz2.sha256) = 49f14982c807ae48fac40aa4a8cb0b04f7ba8fb7546fbf922992f3a38026cde53db33f4932d7e76c4105c8c04d438db43da31ddda844e56c26f0d6be80701cb4
+SHA512 (postgresql-16.13.tar.bz2.sha256) = 0be6cc3fc1f0d358b63288f0f8029932ad90c1fc8d98867cc07e9d832c14228835d66f747c2105db7a7455976f5654a8592bb0b1de3baf91163fa108d8325ea6