The {[project]} Releases detail each version of the software and lists the changes made in each version. release numbers consist of two parts, major and minor. A major release may break compatibility with the prior major release, but v2 releases are fully compatible with v1 repositories and will accept all v1 options. Minor releases can include bug fixes and features but do not change the repository format and strive to avoid changing options and naming. Documentation for the v1 release can be found here. The notes for a release may also contain Additional Notes but changes in this section are only to documentation or the test suite and have no direct impact the on the codebase.

11 Beta 1 support.

Move cryptographic hash functions to C using OpenSSL.

Split log levels into separate header file. Many modules that use debug.h do not need to do logging so this reduces dependencies for those modules.

Auto-generate Makefile with dependencies.

Rename cipher module to the more general crypto.

Update Debian package to add debug symbols to executable.

Build containers from scratch for more accurate testing. Use a prebuilt s3 server container.

Document generator improvements. Allow parameters to be passed when a container is created. Allow /etc/hosts update to be skipped (for containers without bash). Allow environment load to be skipped. Allow bash wrapping to be skipped. Allow forcing a command to run as a user without sudo. Allow an entire execute list to be hidden.

Update primary test environment (Vagrant and Docker) to Ubuntu 18.04.

Improve efficiency of C library builds now that they are used only for testing.

Remove RHEL package patch since it has been committed upstream.

Fix potential buffer overrun in error message handling.

Fix archive write lock being taken for the synchronous archive-get command.

Embed exported C functions and Perl modules directly into the executable.

Use time_t instead of __time_t for better portability.

Print total runtime in milliseconds at command end.

Add stack trace macros to all functions. Low-level functions only include stack trace in test builds while higher-level functions ship with stack trace built-in. Stack traces include all parameters passed to the function but production builds only create the parameter list when the log level is set high enough, i.e. debug or trace depending on the function.

Build libc using links rather than referencing the C files in src directly. The C library builds with different options which should not be reused for the C binary or vice versa.

Test harness improvements. Allow more than one test to provide coverage for the same module. Add option to disable valgrind. Add option to disabled coverage. Add option to disable debug build. Add option to disable compiler optimization. Add --dev-test mode.

Update SSL error message test on CentOS 7.

Set log-timestamp=n for integration tests. This means less filtering of logs needs to be done and new timestamps can be added without adding new filters.

Fix directory syncs running recursively when only the specified directory should be synced.

Fix archive-copy throwing path not found error for incr/diff backups.

Fix failure in manifest build when two or more files in PGDATA are linked to the same directory.

Fix delta restore failing when a linked file is missing.

Fix rendering of key/value and list options in help.

Add asynchronous, parallel archive-get. This feature maintains a queue of WAL segments to help reduce latency when requests a WAL segment with restore_command.

Add support for additional configuration files in the directory specified by the --config-include-path option. Add --config-path option for overriding the default base path of the --config and --config-include-path option.

Add repo-s3-token option to allow temporary credentials tokens to be configured. currently has no way to request new credentials so the entire command (e.g. backup, restore) must complete before the credentials expire.

Update the archive-push-queue-max, manifest-save-threshold, and buffer-size options to accept values in KB, MB, GB, TB, or PB where the multiplier is a power of 1024.

Make backup/restore path sync more efficient. Scanning the entire directory can be very expensive if there are a lot of small tables. The backup manifest contains the path list so use it to perform syncs instead of scanning the backup/restore path.

Show command parameters as well as command options in initial info log message.

Rename archive-queue-max option to archive-push-queue-max to avoid confusion with the new archive-get-queue-max option. The old option name will continue to be accepted.

Make backup.history sync more efficient. Only the backup.history/[year] directory was being synced, so check if the backup.history is newly created and sync it as well.

Move async forking and more error handling to C. The Perl process was exiting directly when called but that interfered with proper locking for the forked async process. Now Perl returns results to the C process which handles all errors, including signals.

Improved lock implementation written in C. Now only two types of locks can be taken: archive and backup. Most commands use one or the other but the stanza-* commands acquire both locks. This provides better protection than the old command-based locking scheme.

Storage object improvements. Convert all functions to variadic functions. Enforce read-only storage. Add storageLocalWrite() helper function. Add storageCopy(), storageExists(), storageMove(), storageNewRead()/storageNewWrite(), storagePathCreate(), storagePathRemove(), storagePathSync(), and storageRemove(). Add StorageFileRead and StorageFileWrite objects. Abstract Posix driver code into a separate module. Call storagePathRemove() from the Perl Posix driver.

Improve String and StringList objects. Add strUpper(), strLower(), strLstExists(), strLstExistsZ(), strChr(), strSub(), strSubN(), and strTrunc().

Improve Buffer object. Add bufNewC(), bufEq() and bufCat(). Only reallocate buffer when the size has changed.

Add pgControlInfo() to read pg_control and determine the version.

Add walSegmentNext() and walSegmentRange().

Error handling improvments. Add THROWP_* macro variants for error handling. These macros allow an ErrorType pointer to be passed and are required for functions that may return different errors based on a parameter. Add _FMT variants for all THROW macros so format types are checked by the compiler.

Split cfgLoad() into multiple functions to make testing easier. Mainly this helps with unit tests that need to do log expect testing.

Allow MemContext objects to be copied to a new parent. This makes it easier to create objects and then copy them to another context when they are complete without having to worry about freeing them on error. Update List, StringList, and Buffer to allow moves. Update Ini and Storage to take advantage of moves.

Full branch coverage in C code.

Refactor usec to msec in common/time.c. The implementation provides usec resolution but this is not needed in practice and it makes the interface more complicated due to the extra zeros.

Replace THROW_ON_SYS_ERROR() with THROW_SYS_ERROR(). The former macro was hiding missing branch coverage for critical error handling.

Start work on C handle io object and use it to output help.

Don't copy CFGDEF_NAME_ALT or CFGDEF_INHERIT when processing config option inheritance.

Split debug and assert code into separate headers. Assert can be used earlier because it only depends on the error-handler and not logging. Add ASSERT() macro which is preserved in production builds.

Cleanup C types. Remove typec.h. Order all typdefs above local includes.

Fix header exclusion defines that do not match the general pattern.

Update docs with 32-bit support and caveats. 32-bit support was added in v1.26.

Add monitoring examples using and jq.

Add example of command section usage to archiving configuration.

Remove documentation describing info --output=json as experimental.

Update out-of-date description for the spool-path option.

Add logic to find the real oid of the test1 database during restore testing.

Document build improvements. Perform apt-get update to ensure packages are up to date before installing. Add -p to the repository mkdir so it won't fail if the directory already exists, handy for testing packages.

Use lcov for C unit test coverage reporting. Switch from Devel::Cover because it would not report on branch coverage for reports converted from gcov. Incomplete branch coverage for a module now generates an error. Coverage of unit tests is not displayed in the report unless they are incomplete for either statement or branch coverage.

Move test definitions to test/define.yaml. The location is better because it is no longer buried in the Perl test libs. Also, the data can be easily accessed from C.

Move help/version integration tests to mock/all. Help and version are covered by unit tests, so we really just to need to make sure there is output when called from the command line.

Move archive-stop and expire tests to the mock module. These are mock integration tests so they should be grouped with the other mock integration tests.

Add harnessCfgLoad() test function, which allows a new config to be loaded for unit testing without resetting log functions, opening a log file, or taking locks.

Add HARNESS_FORK macros for tests that require fork(). A standard pattern for tests makes fork() easier to use and should help prevent some common mistakes.

Add TEST_ERROR_FMT macro to simplify testing of formatted error messages.

Generate code counts for all source files. The source files are also classified by type and purpose.

Include VM type in gcov path to avoid conflicts between VMs with different architectures.

Improve logic for smart builds to include version changes. Skip version checks when testing in --dev mode.

Use pip 9.03 in test VMs. pip 10 drops support for Python 2.6 which is still used by the older test VMs.

Allow -DDEBUG_UNIT to be suppressed to test how debug macros behave.

Rename Perl tests so they don't conflict with their C counterparts.

Divide tests into three types (unit, integration, performance). Many options that were set per test can instead be inferred from the types, i.e. container, c, expect, and individual.

Try tweaking time sync settings to prevent clock drift rather than restarting VBoxService on every test run.

Fix --target-action and --recovery-option options being reported as invalid when restoring with --type=immediate.

Immediately error when a secure option (e.g. repo1-s3-key) is passed on the command line. Since would not pass secure options on to sub-processes an obscure error was thrown. The new error is much clearer and provides hints about how to fix the problem. Update command documentation to omit secure options that cannot be specified on the command-line.

Fix issue passing --no-config to embedded Perl.

Fix issue where specifying log-level-stderr > warn would cause a local/remote process to error on exit due to output found on stderr when none was expected. The max value for a local/remote process is now error since there is no reason for these processes to emit warnings.

Fix manifest test in the check command when tablespaces are present.

Error when multiple arguments are set in the config file for an option that does not accept multiple arguments.

Remove extraneous sudo commands from src/Makefile.

Improve Perl configuration. Set config before Main::main() call to avoid secrets being exposed in a stack trace. Move logic for setting defaults to C.

Improve logging. Move command begin to C except when it must be called after another command in Perl (e.g. expire after backup). Command begin logs correctly for complex data types like hash and list. Specify which commands will log to file immediately and set the default log level for log messages that are common to all commands. File logging is initiated from C.

Port most of Config::Config::configLoad() from Perl to C.

Fix incorrect enum types in config.c that throw warnings under clang.

Enable -Wswitch-enum, -Wconversion, -Wformat=2, -Wformat-nonliteral, and -Wformat-signedness and silence new warnings.

Improve code documentation in config module.

Improve debugging. Add ASSERT_DEBUG() macro for debugging and replace all current assert() calls except in tests that can't use the debug code. Replace remaining NDEBUG blocks with the more granular DEBUG_UNIT. Remove some debug memset() calls in MemContext since valgrind is more useful for these checks.

Add cfgOptionTest() and update cfgOption() calls that are better implemented as cfgOptionTest().

Build with -DNDEBUG by default but disable for testing.

Check int size in common/type.h. This ensures that integers are at least 32-bits without having to run the test suite.

Improve conversion of C exceptions to Exception objects. Colons in the message would prevent all of the message from being loaded into the Exception object.

Show index in examples for indexed options, i.e. repo-*, pg-*.

Simplify table of contents on command page by only listing commands.

Remove references to the C library being optional.

Add CentOS/RHEL package builds.

Use clang for static code analysis. Nothing found initially except for some functions that should have been marked __noreturn__.

Buld performance improvements. Improve bin and libc build performance. Improve code generation performance.

Config test code writes secure options to a file instead of passing on the command-line.

Disable console display of coverage for C files since Devel::Cover does not handle it well.

Add new test for Common::Io::Process to show that output on stderr will raise an exception on close() even if the exit code is 0.

Update pip before installing awscli.

Remove --smart from --expect tests. This ensures that new binaries are built before running the tests.

Remove Debian package patch now that it has been merged upstream.

The archive-push command is now partially coded in C which allows the archive_command to run significantly faster when processing status messages from the asynchronous archive process.

Improve check command to verify that the backup manifest can be built.

Improve performance of HTTPS client. Buffering now takes the pending bytes on the socket into account (when present) rather than relying entirely on select(). In some instances the final bytes would not be flushed until the connection was closed.

Improve S3 delete performance. The constant S3_BATCH_MAX had been replaced with a hard-coded value of 2, probably during testing.

Allow any non-command-line option to be reset to default on the command-line. This allows options in pgbackrest.conf to be reset to default which reduces the need to write new configuration files for specific needs.

The C library is now required. This eliminates conditional loading and eases development of new library features.

The {[project-exe]} executable is now a C binary instead of Perl. This allows certain time-critical commands (like async archive-push) to run more quickly.

Rename db-* options to pg-* and backup-* options to repo-* to improve consistency. repo-* options are now indexed although currently only one is allowed.

Implement help command in C.

Implement version command in C.

Config parsing implemented in C and passed to Perl as JSON.

Add Buffer, Ini, KeyValue, List, RegExp, Storage, String, StringList, Variant, VariantList, and Wait objects.

Add command, exit, log, and time modules.

Remove deprecated archive-max-mb option.

Improve MemContext module. Add temporary context blocks and refactor allocation arrays to include allocation size.

Improve error module. Add functions to convert error codes to C errors and handle system errors.

Create a master list of errors in build/error.yaml. The C and Perl errors lists are created automatically by Build.pm so they stay up to date.

Move lock release later in exitSafe() to reduce the chance of a new process starting and acquiring a lock before the old process has exited.

Add 30 second wait loop to lockAcquire() when fail on no lock enabled. This should help prevent processes that are shutting down from interfering with processes that are starting up.

Replace cfgCommandTotal()/cfgOptionTotal() functions with constants. The constants are applicable in more cases and allow the compiler to optimize certain loops more efficiently.

Cleanup usage of internal options. Apply internal to options that need to be read to determine locality but should not appear in the help.

Refactor code to make valgrind happy.

Fix non-compliant formatting for function declarations.

All clusters in the documentation are initialized with checksums.

List deprecated option names in documentation and command-line help.

Clarify that S3 buckets must be created by the user.

Add coding standards document.

Improve section source feature to not require a title or content. The title will be pulled from the source document.

Allow code blocks to have a type. Currently this is only rendered in Markdown.

Add table render for Markdown format.

PDF rendering improvements. Check both doc-path and bin-path for logo. Allow PDF to be output to a location other than the output directory. Use PDF-specific version variable for more flexible formatting. Allow sections to be excluded from table of contents. More flexible replacements for titles and footers. Fill is now the default for table columns. Column width is specified as a percentage rather that using latex-specific notation. Fix missing variable replace for code-block title.

Add id param for hosts created with host-add. The host-*-ip variable is created from the id param so the name param can be changed without affecting the host-*-ip variable. If id is not specified then it is copied from name.

Deploy historical documentation to prior rather than the root directory.

Run valgrind on all C unit tests.

Only build C binary/library for Perl unit/integration tests or C unit tests that require Perl.

Improve speed of C unit tests. Preserve object files between tests and use a Makefile to avoid rebuilding object files.

Report coverage errors via the console. This helps with debugging coverage issues on remote services like Travis.

No longer run master branch through CI. The integration branch will be run through CI and then pushed to master with github status checks.

Rename Perl tests so they don't conflict with their C counterparts.

Update URL for Debian package repository.

Fixed inability to restore a single database contained in a tablespace using --db-include.

Ensure latest db-id is selected on when matching archive.info to backup.info. This provides correct matching in the event there are system-id and db-version duplicates (e.g. after reverting a pg_upgrade).

Fixed overly chatty error message when reporting an invalid command.

Add stanza-delete command to cleanup unused stanzas.

Improve stanza-create command so that it does not error when the stanza already exists.

Minor changes to Manifest module, mostly for test reproducibility.

Fix non-compliant formatting for function declarations.

Update stanza-create --force documentation to urge caution when using.

Add unit tests for the Manifest module.

Fixed an issue that suppressed locality errors for backup and restore. When a backup host is present, backups should only be allowed on the backup host and restores should only be allowed on the database host unless an alternate configuration is created that ignores the remote host.

Fixed an issue where WAL was not expired on 10. This was caused by a faulty regex that expected all major versions to be X.X.

Fixed an issue where the --no-config option was not passed to child processes. This meant the child processes would still read the local config file and possibly cause unexpected behaviors.

Fixed info command to eliminate "db (prior)" output if no backups or archives exist for a prior version of the cluster.

Add memGrowRaw() to memory context module.

Document the relationship between the archive-copy and archive-check options.

Improve archive-copy reference documentation.

Relax permissions set by release.pl.

Split refactor sections into improvements and development in the release notes. Many development notes are not relevant to users and simply clutter the release notes, so they are no longer shown on the website.

Allow internal options that do not show up in the documentation. Used for test options initially but other use cases are on the horizon.

Update CI branches to release/1 and release/1-integration.

No longer run release/1 branch through CI. The release/1-integration branch will be run through CI and then pushed to release/1 with github status checks.

Move restore test infrastructure to HostBackup.pm. Required to test restores on the backup server, a fairly common scenario. Improve the restore function to accept optional parameters rather than a long list of parameters. In passing, clean up extraneous use of strType and strComment variables.

Sync time to prevent build failures when running on VirtualBox.

Fixed an issue that could cause copying large manifests to fail during restore.

Fixed incorrect WAL offset for 32-bit architectures.

Fixed an issue retrieving WAL for old database versions. After a stanza-upgrade it should still be possible to restore backups from the previous version and perform recovery with archive-get. However, archive-get only checked the most recent db version/id and failed. Also clean up some issues when the same db version/id appears multiple times in the history.

Fixed an issue with invalid backup groups being set correctly on restore. If the backup cannot map a group to a name it stores the group in the manifest as false then uses either the owner of $PGDATA to set the group during restore or failing that the group of the current user. This logic was not working correctly because the selected group was overwriting the user on restore leaving the group undefined and the user incorrectly set to the group.

Fixed an issue passing parameters to remotes. When more than one db was specified the path, port, and socket path would for db1 were passed no matter which db was actually being addressed.

Repository encryption support.

Disable gzip filter when --compress-level-network=0. The filter was used with compress level set to 0 which added overhead without any benefit.

Inflate performance improvement for gzip filter.

Refactor protocol param generation into a new function. This allows the code to be tested more precisely and doesn't require executing a remote process.

Add list type for options. The hash type was being used for lists with an additional flag (`value-hash`) to indicate that it was not really a hash.

Remove configurable option hints. db-path was the only option with a hint so the feature seemed wasteful. All missing stanza options now output the same hint without needing configuration.

Convert configuration definitions from auto-generated functions to auto-generated data structures.

Add eof to S3 file driver (required for encryption support).

Enable additional warnings for C builds.

Simplify try..catch..finally names. Also wrap in a do...while loop to make sure that no random else is attached to the main if block.

Improve base64 implementation. Different encoded strings could be generated based on compiler optimizations. Even though decoding was still successful the encoded strings did not match the standard.

Disable -Wclobber compiler warning because it is mostly useless but keep the rest of of -Wextra.

Add template to improve initial information gathered for issue submissions.

Clarify usage of the archive-timeout option and describe how it is distinct from the archive_timeout setting.

Update release.pl to push data to site repository.

Automated tests for 32-bit i386/i686 architecture.

Update Debian/Ubuntu containers to download latest version of pip.

Full unit test coverage for gzip filter.

Only check expect logs on CentOS 7. Variations in distros cause false negatives in tests but don't add much value.

Fix flapping protocol timeout test. It only matters that the correct error code is returned, so disable logging to prevent message ordering from failing the expect test.

Designate a single distro (Ubuntu 16.04) for coverage testing. Running coverage testing on multiple distros takes time but doesn't add significant value. Also ensure that the distro designated to run coverage tests is one of the default test distros. For C tests, enable optimizations on the distros that don't do coverage testing.

Automate generation of WAL and pg_control test files. The existing static files would not work with 32-bit or big-endian systems so create functions to generate these files dynamically rather than creating a bunch of new static files.

Refactor C unit test macros so they compile with -Wstrict-aliasing.

Refactor C page checksum unit test to compile with -Wstrict-aliasing.

Fix custom settings for compress-level option being ignored.

Remove error when overlapping timelines are detected. Overlapping timelines are valid in many Point-in-Time-Recovery (PITR) scenarios.

Fix instances where database-id was not rendered as an integer in JSON info output.

Improve performance of list requests on S3. Any beginning literal portion of a filter expression is used to generate a search prefix which often helps keep the request small enough to avoid rate limiting.

Improve protocol error handling. In particular, stop errors are no longer reported as unexpected.

Allow functions with sensitive options to be logged at debug level with redactions. Previously, functions with sensitive options had to be logged at trace level to avoid exposing them. Trace level logging may still expose secrets so use with caution.

Replace dynamically built class hierarchies in I/O layer with fixed parent() calls.

Improve labeling for errors in helper processes.

Update C naming conventions.

Use int datatype wherever possible.

Better separation of C source from Perl interface.

Add LibC.template.pm to simplify LibC module generation.

Add C error handler.

Perl error handler recognizes errors thrown from the C library.

Page checksum module uses new C error handler.

Add C memory contexts.

Add base64 encode/decode.

Add I/O performance tests.

Add C unit test infrastructure.

Add test macros for C results and errors.

Warnings in C builds treated as errors.

Run all tests on tempfs rather than local disk.

Improve performance of test code. Wait when all tests have been assigned to reduce CPU load.

Remove Debian test repo after PostgreSQL 10 release.

Convert config and page checksum tests into C unit tests.

Add versions to Debian VMs for testing.

Fixed an issue where warnings were being emitted in place of lower priority log messages during backup from standby initialization.

Fixed an issue where some db-* options (e.g. db-port) were not being passed to remotes.

Exclude contents of pg_snapshots, pg_serial, pg_notify, and pg_dynshmem from backup since they are rebuilt on startup.

Exclude pg_internal.init files from backup since they are rebuilt on startup.

Open log file after async process is completely separated from the main process to prevent the main process from also logging to the file.

Dynamically generate list of files for C library build.

Break up LibC.xs into separate module files.

Add trusted SSH configuration.

Rename master to primary in documentation to align with convention.

Add full installation where required and remove doc containers that included parts of the installation.

Improve C library smart build by ignoring changes outside of /lib/pgBackRest/Config.

Fixed an issue that could cause compression to abort on growing files.

Fixed an issue with keep-alives not being sent to the remote from the local process.

Up to seven standbys can be configured for backup from standby.

10 support.

Allow content-length (in addition to chunked encoding) when reading XML data to improve compatibility with third-party S3 gateways.

Increase HTTP timeout for S3.

Add HTTP retries to harden against transient S3 network errors.

Configuration definitions are now pulled from the C library when present.

Fixed document generation to include section summaries on the Configuration page.

Move contributor list to the end of release.xml for convenience.

Change log test order to ignore unimportant log errors while shutting down .

Drain stderr during test process execution as well as termination to prevent lockups if there is a lot of output.

Update Docker build in Vagrantfile.

Update containers to support C library builds in the documentation.

Simplify smart logic for C Library and package builds.

Fixed authentication issue in S3 retry.

The archive_status directory is now recreated on restore to support 8.3 which does not recreate it automatically like more recent versions do.

Fixed an issue that could cause the empty archive directory for an old version to be left behind after a stanza-upgrade.

Modified the info command (both text and JSON output) to display the archive ID and minimum/maximum WAL currently present in the archive for the current and prior, if any, database cluster version.

Added --backup-ssh-port and --db-ssh-port options to support non-default SSH ports.

Retry when S3 returns an internal error (500).

Add bIgnoreMissing parameter to Local->manifest().

Fix description of --online based on the command context.

Add creation of /etc/pgbackrest.conf to manual installation instructions.

Move repository options into a separate section in command/command-line help.

Reduce log verbosity when building documentation by only logging sections that contain an execute list directly or in a child section.

Debian/Ubuntu documentation now builds on Ubuntu 16.

Remove vestigial repository options from backup command.

Fix log checking after shuts down to include FATAL messages and disallow immediate shutdowns which can throw FATAL errors in the log.

Use Google DNS in test environment for consistency.

Use new Travis Trusty image.

Generate global fake cert in containers for testing.

Consolidate stanza-create and stanza-upgrade tests into new stanza test.

IMPORTANT NOTE: 8.3 and 8.4 installations utilizing tablespaces should upgrade immediately from any v1 release and run a full backup. A bug prevented tablespaces from being backed up on these versions only. ≥ 9.0 is not affected.

Fixed an issue that prevented tablespaces from being backed up on ≤ 8.4.

Fixed missing flag in C library build that resulted in a mismatched binary on 32-bit systems.

Add s3-repo-ca-path and s3-repo-ca-file options to accommodate systems where CAs are not automatically found by IO::Socket::SSL, i.e. RHEL7, or to load custom CAs.

Harden protocol handshake to handle race conditions.

Fixed misleading error message when a file was opened for write in a missing directory.

Change log level of hardlink logging to detail.

Cast size in S3 manifest to integer.

Rename Archive modules to remove redundancy.

Improve S3 error reporting.

Minor optimizations to package loads and ordering for archive-get and archive-push commands.

Remove exhaustive version list from Stable Releases TOC.

Improve S3 server implementation in documentation.

Update CentOS 6 documentation to build on 9.5.

Remove mount from host cache-key because it can vary by system.

Add documentation builds to CI.

Fix timeouts in ExecuteTest to speed multi-process testing.

Remove patch directory before Debian package builds.

Combine hardlink and non/compressed in synthetic tests to reduce test time and improve coverage.

Split full module into mock and real to allow better test combinations and save time in CI.

Consolidate archive-push and archive-get tests into new archive test.

Eliminate redundancy in real tests.

Install sudo in base containers rather than on demand.

More optimized container suite that greatly improves build time.

Added static Debian packages for Devel::Cover to reduce build time.

Add deprecated state for containers. Deprecated containers may only be used to build packages.

Remove Debian 8 from CI because it does not provide additional coverage over Ubuntu 12.04, 14.04, 16.04.

Add Debian 9 to test suite.

Remove process-max option. Parallelism is now tested in a more targeted manner and the high level option is no longer needed.

Balance database versions between VMs to minimize test duration.

Automatically check that all supported versions are being tested on a single default VM.

Add performance module and basic performance test for archive-push.

Fixed the info command so the WAL archive min/max displayed is for the current database version.

Fixed the backup command so the backup-standby option is reset (and the backup proceeds on the primary) if the standby is not configured and/or reachable.

Fixed config warnings raised from a remote process causing errors in the master process.

Amazon S3 repository support.

Refactor storage layer to allow for new repository filesystems using drivers.

Refactor IO layer to allow for new compression formats, checksum types, and other capabilities using filters.

Move modules in Protocol directory in subdirectories.

Move backup modules into Backup directory.

Changed invalid max-archive-mb option in configuration reference to archive-queue-max.

Fixed missing sudo in installation section.

Fixed an undefined variable when a module had no uncoverable code exceptions.

Fixed issue with --dry-run requiring --vm-out to work properly.

Moved test and env modules to new directories to avoid namespace conflicts with common tests.

Set --vm-max=2 for CI.

Remove flapping protocol timeout test that will be replaced in the upcoming storage patch.

Fixed an issue where read-only operations that used local worker processes (i.e. restore) were creating write locks that could interfere with parallel archive-push.

Added the stanza-upgrade command to provide a mechanism for upgrading a stanza after upgrading to a new major version of .

Added validation of pgbackrest.conf to display warnings if options are not valid or are not in the correct section.

Simplify locking scheme. Now, only the master process will hold write locks (for archive-push and backup commands) and not all local and remote worker processes as before.

Do not set timestamps of files in the backup directories to match timestamps in the cluster directory. This was originally done to enable backup resume, but that process is now implemented with checksums.

Improved error message when the restore command detects the presence of postmaster.pid.

Renumber return codes between 25 and 125 to avoid PostgreSQL interpreting some as fatal signal exceptions.

Refactor Ini.pm to facilitate testing.

The backup and restore commands no longer copy via temp files. In both cases the files are checksummed on resume so there's no danger of partial copies.

Allow functions to accept optional parameters as a hash.

Refactor File->list() and fileList() to accept optional parameters.

Refactor backupLabel() and add unit tests.

Silence some perl critic warnings.

Update wording for release note sections.

Ignore clock skew in container libc/package builds using make. It is common for containers to have clock skew so the build process takes care of this issue independently.

Complete statement/branch coverage for Ini.pm.

Improved functions used to test/munge manifest and info files.

Coverage testing always enabled on Debian-based containers.

Require description in every call to testResult().

Make iWaitSeconds an optional parameter for testResult().

Updated vagrant to new version and image.

Fixed flapping archive stop tests.

Added ability to test warning messages.

Fixed an issue where newly initialized (but unused) pages would cause page checksum warnings.

Fixed an issue where tables over 1GB would report page checksum warnings after the first segment.

Fixed an issue where databases created with a non-default tablespace would raise bogus warnings about pg_filenode.map and pg_internal.init not being page aligned.

Improved the code and tests for fileManifest() to prevent a possible race condition when files are removed by the database while the manifest is being built.

Container executions now load the user's environment.

Continuous integration using travis-ci.

Automated builds of Debian packages for all supported distributions.

Added --dev option to aggregate commonly used dev options.

Added --retry option.

Added --no-package option to skip package builds.

C library and packages are built by default, added -smart option to rebuild only when file changes are detected.

The --libc-only option has been changed to --build-only now that packages builds have been added.

Improved formatting of testResult() output.

Improved truncation when outputting errors logs in the ExecuteTest module.

Fixed flapping archive-stop test with testResult() retries.

Added final test of archive contents to archive-push test.

Temporarily disable flapping keep-alive test.

Fixed a regression introduced in v1.13 that could cause backups to fail if files were removed (e.g. tables dropped) while the manifest was being built.

Refactor FileCommon::fileManifest() and FileCommon::fileStat to be more modular to allow complete branch/statement level coverage testing.

Complete branch/statement level coverage testing for FileCommon::fileManifest() and FileCommon::fileStat functions and helper functions.

Fixed an issue where an archive-push error would not be retried and would instead return errors to indefinitely (unless the .error file was manually deleted).

Fixed a race condition in parallel archiving where creation of new paths generated an error when multiple processes attempted to do so at the same time.

Improved performance of wal archive min/max provided by the info command.

Updated async archiving documentation to more accurately describe how the new method works and how it differs from the old method.

Documentation can now be built with reusable blocks to reduce duplication.

Improved support for --require option and section depends now default to the previous section.

Added ability to pass options to containers within the documentation.

Add proper tag to slightly emphasize proper nouns.

IMPORTANT NOTE: The new implementation of asynchronous archiving no longer copies WAL to a separate queue. If there is any WAL left over in the old queue after upgrading to 1.13, it will be abandoned and not pushed to the repository. To prevent this outcome, stop archiving by setting archive_command = false. Next, drain the async queue by running pgbackrest --stanza=[stanza-name] archive-push and wait for the process to complete. Check that the queue in [spool-path]/archive/[stanza-name]/out is empty. Finally, install 1.13 and restore the original archive_command. IMPORTANT NOTE: The stanza-create command is not longer optional and must be executed before backup or archiving can be performed on a new stanza. Pre-existing stanzas do not require stanza-create to be executed.

Fixed const assignment giving compiler warning in C library.

Fixed a few directory syncs that were missed for the --repo-sync option.

Fixed an issue where a missing user/group on restore could cause an uninitialized value error in File->owner().

Fixed an issue where protocol mismatch errors did not output the expected value.

Fixed a spurious archive-get log message that indicated an exit code of 1 was an abnormal termination.

Improved, multi-process implementation of asynchronous archiving.

Improved stanza-create command so that it can repair broken repositories in most cases and is robust enough to be made mandatory.

Improved check command to run on a standby, though only basic checks are done because pg_switch_xlog() cannot be executed on a replica.

Added archive and backup WAL ranges to the info command.

Added warning to update pg_tablespace.spclocation when remapping tablespaces in < 9.2.

Remove remote lock requirements for the archive-get, restore, info, and check commands since they are read-only operations.

Log file banner is not output until the first log entry is written.

Reduced the likelihood of torn pages causing a false positive in page checksums by filtering on start backup LSN.

Remove Intel-specific optimization from C library build flags.

Remove --lock option. This option was introduced before the lock directory could be located outside the repository and is now obsolete.

Added --log-timestamp option to allow timestamps to be suppressed in logging. This is primarily used to avoid filters in the automated documentation.

Return proper error code when unable to convert a relative path to an absolute path.

Refactor File and BackupCommon modules to improve test coverage.

Moved File->manifest() into the FileCommon.pm module.

Moved the Archive modules to the Archive directory and split the archive-get and archive-push commands into separate modules.

Split the check command out of the Archive.pm module.

Allow logging to be suppressed via logDisable() and logEnable().

Allow for locks to be taken more than once in the same process without error.

Lock directories can be created when more than one directory level is required.

Clean up optionValid()/optionTest() logic in Lock.pm.

Added Exception::exceptionCode() and Exception::exceptionMessage() to simplify error handling logic.

Represent .gz extension with a constant.

Allow empty files to be created with FileCommon::fileStringWrite() and use temp files to avoid partial reads.

Refactor process IO and process master/minion code out from the common protocol code.

Fixed alignment issues with multiline logging.

Added documentation to the User Guide for the process-max option.

Update LICENSE.txt for 2017.

Fixed --no-online tests to suppress expected errors.

Added integration for testing coverage with Devel::Cover.

Added unit tests for low-level functions in the File and BackupCommon modules.

C Library builds only run when C library has actually changed.

Added more flexibility in initializing and cleaning up after modules and tests.

testResult() suppresses logging and reports exceptions.

testException() allows messages to be matched with regular expressions.

Split test modules into separate files to make the code more maintainable. Tests are dynamically loaded by name rather than requiring an if-else block.

Allow multiple --module, --test, and --run options to be used for test.pl.

Added expect log expression to replace year subdirectories in backup.history.

Refactor name/locations of common modules that setup test environments.

IMPORTANT NOTE: In prior releases it was possible to specify options on the command-line that were invalid for the current command without getting an error. An error will now be generated for invalid options so it is important to carefully check command-line options in your environment to prevent disruption.

Fixed an issue where options that were invalid for the specified command could be provided on the command-line without generating an error. The options were ignored and did not cause any change in behavior, but it did lead to some confusion. Invalid options will now generate an error.

Fixed an issue where internal symlinks were not being created for tablespaces in the repository. This issue was only apparent when trying to bring up clusters in-place manually using filesystem snapshots and did not affect normal backup and restore.

Fixed an issue that prevented errors from being output to the console before the logging system was initialized, i.e. while parsing options. Error codes were still being returned accurately so this would not have made a process look like it succeeded when it did not.

Fixed an issue where the db-port option specified on the backup server would not be properly passed to the remote unless it was from the first configured database.

Added the --checksum-page option to allow pgBackRest to validate page checksums in data files when checksums are enabled on >= 9.3. Note that this functionality requires a C library which may not initially be available in OS packages. The option will automatically be enabled when the library is present and checksums are enabled on the cluster.

Added the --repo-link option to allow internal symlinks to be suppressed when the repository is located on a filesystem that does not support symlinks. This does not affect any functionality, but the convenience link latest will not be created and neither will internal tablespace symlinks, which will affect the ability to bring up clusters in-place manually using filesystem snapshots.

Added the --repo-sync option to allow directory syncs in the repository to be disabled for file systems that do not support them, e.g. NTFS.

Added a predictable log entry to signal that a command has completed successfully. For example a backup ends successfully with: INFO: backup command end: completed successfully.

For simplicity, the pg_control file is now copied with the rest of the files instead of by itself of at the end of the process. The backup command does not require this behavior and the restore copies to a temporary file which is renamed at the end of the restore.

Abstracted code to determine which database cluster is the primary and which are standbys.

Improved consistency and flexibility of the protocol layer by using JSON for all messages.

File copy protocol now accepts a function that can do additional processing on the copy buffers and return a result to the calling process.

Improved IO->bufferRead to always return requested number of bytes until EOF.

Simplified the result hash of File->manifest(), Db->tablespaceMapGet(), and Db->databaseMapGet().

Improved errors returned from child processes by removing redundant error level and code.

Code cleanup in preparation for improved stanza-create command.

Improved parameter/result logging in debug/trace functions.

Fixed an issue that suppressed exceptions in PDF builds.

Fixed regression in section links introduced in v1.10.

Added Retention to QuickStart section.

Allow a source to be included as a section so large documents can be broken up.

Added section link support to Markdown output.

Added list support to PDF output.

Added include option to explicitly build sources (complements the exclude option though both cannot be used in the same invocation).

Added keyword-add option to add keywords without overriding the default keyword.

Added debug option to doc.pl to easily add the debug keyword to documentation builds.

Added pre option to doc.pl to easily add the pre keyword to documentation builds.

Builds in release.pl now remove all docker containers to get consistent IP address assignments.

Improvements to markdown rendering.

Remove code dependency on project variable, instead use title param.

Removed erroneous --no-config option in help test module.

Update control and WAL test files to 9.4 with matching system identifiers.

Improved exception handling in file unit tests.

Changed the --no-fork test option to --fork with negation to match all other boolean parameters.

Various improvements to validation of backup and restore.

Add more realistic data files to synthetic backup and restore tests.

Fixed an issue where asynchronous archiving was transferring one file per execution instead of transferring files in batches. This regression was introduced in v1.09 and affected efficiency only, all WAL segments were correctly archived in asynchronous mode.

Fixed an issue where a backup could error if no changes were made to a database between backups and only pg_control changed.

Fixed an issue where tablespace paths with the same prefix would cause an invalid link error.

Added the stanza-create command to formalize creation of stanzas in the repository.

Removed extraneous use lib directives from Perl modules.

Fixed missing variable replacements.

Removed hard-coded host names from configuration file paths.

Allow command-line length to be configured using cmd-line-len param.

Added compact param to allow CSS to be embedded in HTML file.

Added pretty param to produce HTML with proper indenting.

Only generate HTML menu when required and don't require index page.

Assign numbers to sections by default.

VM mount points are now optional.

Fixed the check command to prevent an error message from being logged if the backup directory does not exist.

Fixed error message to properly display the archive command when an invalid archive command is detected.

Fixed an issue where the async archiver would not be started if archive-push did not have enough space to queue a new WAL segment. This meant that the queue would never be cleared without manual intervention (such as calling archive-push directly). now receives errors when there is not enough space to store new WAL segments but the async process will still be started so that space is eventually freed.

Fixed a remote timeout that occurred when a local process generated checksums (during resume or restore) but did not copy files, allowing the remote to go idle.

Non-exclusive backups will automatically be used on 9.6.

Added the cmd-ssh option to allow the ssh client to be specified.

Added the log-level-stderr option to control whether console log messages are sent to stderr or stdout. By default this is set to warn which represents a change in behavior from previous versions, even though it may be more intuitive. Setting log-level-stderr=off will preserve the old behavior.

Set application_name to "pgBackRest [command]" for database connections.

Check that archive_mode is enabled when archive-check option enabled.

Clarified error message when unable to acquire advisory lock to make it clear that it is not a backup lock.

version number included in command start INFO log output.

Process ID logged for local process start/stop INFO log output.

Added archive-timeout option documentation to the user guide.

Added dev option to doc.pl to easily add the dev keyword to documentation builds.

Update CentOS/Debian package definitions.

Fixed missing expect output for help module.

Fixed broken vm-max option in test.pl.

Regression tests can now be run as any properly-configured user, not just vagrant.

Miminize TeXLive package list to save time during VM builds.

Fixed an issue where local processes were not disconnecting when complete and could later timeout.

Fixed an issue where the protocol layer could timeout while waiting for WAL segments to arrive in the archive.

Cache file log output until the file is created to create a more complete log.

Show Process ID in output instead of filtering it out with the timestamp.

Suppress dpkg-reconfigure: unable to re-open stdin: No file or directory warning in Vagrant VM build.

Show Process ID in expect logs instead of filtering it out with the timestamp.

Fixed an issue where tablespaces were copied from the primary during standby backup.

Fixed the check command so backup info is checked remotely and not just locally.

Fixed an issue where retention-archive was not automatically being set when retention-archive-type=diff, resulting in a less aggressive than intended expiration of archive.

Converted Perl threads to processes to improve compatibility and performance.

Exclude contents of $PGDATA/pg_replslot directory so that replication slots on the primary do not become part of the backup.

The archive-start and archive-stop settings are now filled in backup.manifest even when archive-check=n.

Additional warnings when archive retention settings may not have the intended effect or would allow indefinite retention.

Experimental support for non-exclusive backups in 9.6 rc1. Changes to the control/catalog/WAL versions in subsequent release candidates may break compatibility but will be updated with each release to keep pace.

Refactor of protocol minions in preparation for the new local minion.

Remove obsolete thread index variable from File() module.

Changed temporary file names to consistently use the .pgbackrest.tmp extension even if the destination file is compressed or has an appended checksum.

Improve ASSERT error handling, safely check eval blocks, and convert $@ to $EVAL_ERROR.

Fixed minor documentation reproducibility issues related to binary paths.

Documentation for archive retention.

Suppress TOC for unsupported versions of .

New vagrant base box and make uid/gid selection for containers dynamic.

Fixed an issue where a tablespace link that referenced another link would not produce an error, but instead skip the tablespace entirely.

Fixed an issue where options that should not allow multiple values could be specified multiple times in pgbackrest.conf without an error being raised.

Fixed an issue where the protocol-timeout option was not automatically increased when the db-timeout option was increased.

Backup from a standby cluster. A connection to the primary cluster is still required to start/stop the backup and copy files that are not replicated, but the vast majority of files are copied from the standby in order to reduce load on the primary.

More flexible configuration for databases. Master and standby can both be configured on the backup server and will automatically determine which is the primary. This means no configuration changes for backup are required after failing over from a primary to standby when a separate backup server is used.

Exclude directories during backup that are cleaned, recreated, or zeroed by at startup. These include pgsql_tmp and pg_stat_tmp. The postgresql.auto.conf.tmp file is now excluded in addition to files that were already excluded: backup_label.old, postmaster.opts, postmaster.pid, recovery.conf, recovery.done.

Experimental support for non-exclusive backups in 9.6 beta4. Changes to the control/catalog/WAL versions in subsequent betas may break compatibility but will be updated with each release to keep pace.

Improve error message for links that reference links in manifest build.

Added hints to error message when relative paths are detected in archive-push or archive-get.

Improve backup log messages to indicate which host the files are being copied from.

Simplify protocol creation and identifying which host is local/remote.

Removed all OP_* function constants that were used only for debugging, not in the protocol, and replaced with __PACKAGE__.

Improvements in Db module: separated out connect() function, allow executeSql() calls that do not return data, and improve error handling.

Improve host tag rendering.

Refactor db version constants into a separate module.

Update synthetic backup tests to 9.4.

Fixed an issue where tablespace paths that had $PGDATA as a substring would be identified as a subdirectories of $PGDATA even when they were not. Also hardened relative path checking a bit.

Added documentation for scheduling backups with cron.

Moved the backlog from the website to the GitHub repository wiki.

Improved rendering of spaces in code blocks.

Fixed an issue an where an extraneous remote was created causing threaded backup/restore to possibly timeout and/or throw a lock conflict.

Fixed an issue where db-path was not required for the check command so an assert was raised when it was missing rather than a polite error message.

Fixed check command to throw an error when database version/id does not match that of the archive.

Fixed an issue where a remote could try to start its own remote when the backup-host option was not present in pgbackrest.conf on the database server.

Fixed an issue where the contents of pg_xlog were being backed up if the directory was symlinked. This didn't cause any issues during restore but was a waste of space.

Fixed an invalid log() call in lock routines.

Experimental support for non-exclusive backups in 9.6 beta3. Changes to the control/catalog/WAL versions in subsequent betas may break compatibility but will be updated with each release to keep pace.

Suppress banners on SSH protocol connections.

Improved remote error messages to identify the host where the error was raised.

All remote types now take locks. The exceptions date to when the test harness and were running in the same VM and no longer apply.

Enhancements to the protocol layer for improved reliability and error handling.

Exceptions are now passed back from threads as messages when possible rather than raised directly.

Temp files created during backup are now placed in the same directory as the target file.

Output lock file name when a lock cannot be acquired to aid in debugging.

Reduce calls to protocolGet() in backup/restore.

Added clarification on why the default for the backrest-user option is backrest.

Updated information about package availability on supported platforms.

Added release.pl to make releases reproducible. For now this only includes building and deploying documentation.

HTML footer dates are statically created in English in order to be reproducible.

Fixed a version checking issue in test.pl.

Fixed an issue where multi-threaded tests were not being run when requested.

Reduce the frequency that certain tests are run to save time in regression.

Disable control master for older OS versions where it is less stable.

Fixed an issue where keep-alives could be starved out by lots of small files during multi-threaded backup. They were also completely absent from single/multi-threaded backup resume and restore checksumming.

Fixed an issue where the expire command would refuse to run when explicitly called from the command line if the db-host option was set. This was not an issue when expire was run automatically after a backup

Fixed an issue where validation was being running on archive_command even when the archive-check option was disabled.

Added check command to validate that is configured correctly for archiving and backups.

Added the protocol-timeout option. Previously protocol-timeout was set as db-timeout + 30 seconds.

Failure to shutdown remotes at the end of the backup no longer throws an exception. Instead a warning is generated that recommends a higher protocol-timeout.

Experimental support for non-exclusive backups in 9.6 beta2. Changes to the control/catalog/WAL versions in subsequent betas may break compatibility but will be updated with each release to keep pace.

Improved handling of users/groups captured during backup that do not exist on the restore host. Also explicitly handle the case where user/group is not mapped to a name.

Option handling is now far more strict. Previously it was possible for a command to use an option that was not explicitly assigned to it. This was especially true for the backup-host and db-host options which are used to determine locality.

The pg_xlogfile_name() function is no longer used to construct WAL filenames from LSNs. While this function is convenient it is not available on a standby. Instead, the archive is searched for the LSN in order to find the timeline. If due to some misadventure the LSN appears on multiple timelines then an error will be thrown, whereas before this condition would have passed unnoticed.

Changed version variable to a constant. It had originally been designed to play nice with a specific packaging tool but that tool was never used.

Allow a static date to be used for documentation to generate reproducible builds.

Added documentation for asynchronous archiving to the user guide.

Recommended install location for modules is now /usr/share/perl5 since /usr/lib/perl5 has been removed from the search path in newer versions of Perl.

Added instructions for removing prior versions of .

Fixed DTD search path that did not work properly when --doc-path was used.

Fixed -specific xml that was loaded for non- projects.

Fixed section names being repeated in the info output when multiple --require options depended on the same sections.

Fixed config sections being blank in the output when not loaded from cache.

Allow hidden options to be added to a command. This allows certain commands (like apt-get) to be forced during the build without making that a part of the documentation.

Allow command summaries to be inserted anywhere in the documentation to avoid duplication.

Update TeX Live to 2016 version.

New, consolidated implementation for link rendering.

version is now a variable to allow multi-version documentation.

Obsolete containers are removed by the --vm-force option.

Major refactor of the test suite to make it more modular and object-oriented. Multiple Docker containers can now be created for a single test to simulate more realistic environments. Tests paths have been renamed for clarity.

Greatly reduced the quantity of Docker containers built by default. Containers are only built for versions specified in db-minimal and those required to build documentation. Additional containers can be built with --db-version=all or by specifying a version, e.g. --db-version=9.4.

Fix usage of sprintf() due to new constraints in Perl 5.22. Parameters not referenced in the format string are no longer allowed.

Log directory create and file open now using FileCommon functions which produce more detailed error messages on failure.

Fixed syntax that was not compatible with Perl 5.2X.

Fixed absolute paths that were used for the PDF logo.

Release notes are now broken into sections so that bugs, features, and refactors are clearly delineated. An Additional Notes section has been added for changes to documentation and the test suite that do not affect the core code.

Added man page generation.

The change log was the last piece of documentation to be rendered in Markdown only. Wrote a converter so the document can be output by the standard renderers. The change log will now be located on the website and has been renamed to Releases.

Added an execution cache so that documentation can be generated without setting up the full container environment. This is useful for packaging, keeps the documentation consistent for a release, and speeds up generation when no changes are made in the execution list.

Remove function constants and pass strings directly to logDebugParam(). The function names were only used once so creating constants for them was wasteful.

Lists can now be used outside of p and text tags for more flexible document structuring.

Replaced overzealous perl -cW check which failed on Perl 5.22 with perl -cw.

Added Ubuntu 16.04 (Xenial) and Debian 8 (Jessie) to the regression suite.

Upgraded doc/test VM to Ubuntu 16.04. This will help catch Perl errors in the doc code since it is not run across multiple distributions like the core and test code. It is also to be hoped that a newer kernel will make Docker more stable.

Test release version against the executable using change-log.xml instead of CHANGELOG.md.

Enhanced text output of info command to include timestamps, sizes, and the reference list for all backups.

Allow selective restore of databases from a cluster backup. This feature can result in major space and time savings when only specific databases are restored. Unrestored databases will not be accessible but must be manually dropped before they will be removed from the shared catalogue.

Experimental support for non-exclusive backups in 9.6 beta1. Changes to the control/catalog/WAL versions in subsequent betas may break compatibility but will be updated with each release to keep pace.

IMPORTANT NOTE: This flag day release breaks compatibility with older versions of . The manifest format, on-disk structure, configuration scheme, and the exe/path names have all changed. You must create a new repository to hold backups for this version of and keep your older repository for a time in case you need to do a restore. Restores from the prior repository will require the prior version of but because of name changes it is possible to have 1.00 and a prior version of installed at the same time. See the notes below for more detailed information on what has changed.

Implemented a new configuration scheme which should be far simpler to use. See the User Guide and Configuration Reference for details but for a simple configuration all options can now be placed in the stanza section. Options that are shared between stanzas can be placed in the [global] section. More complex configurations can still make use of command sections though this should be a rare use case.

The repo-path option now always refers to the repository where backups and archive are stored, whether local or remote, so the repo-remote-path option has been removed. The new spool-path option can be used to define a location for queueing WAL segments when archiving asynchronously. A local repository is no longer required.

The default configuration filename is now pgbackrest.conf instead of pg_backrest.conf. This was done for consistency with other naming changes but also to prevent old config files from being loaded accidentally when migrating to 1.00.

The default repository name was changed from /var/lib/backup to /var/lib/pgbackrest.

Lock files are now stored in /tmp/pgbackrest by default. These days /run/pgbackrest is the preferred location but that would require init scripts which are not part of this release. The lock-path option can be used to configure the lock directory.

Log files are now stored in /var/log/pgbackrest by default and no longer have the date appended so they can be managed with logrotate. The log-path option can be used to configure the lock directory.

Executable filename changed from pg_backrest to pgbackrest.

All files and directories linked from PGDATA are now included in the backup. By default links will be restored directly into PGDATA as files or directories. The {[dash]}-link-all option can be used to restore all links to their original locations. The {[dash]}-link-map option can be used to remap a link to a new location.

Removed {[dash]}-tablespace option and replaced with {[dash]}-tablespace-map-all option which should more clearly indicate its function.

Added detail log level which will output more information than info without being as verbose as debug.

Fixed an issue where the master process was passing {[dash]}-repo-remote-path instead of {[dash]}-repo-path to the remote and causing the lock files to be created in the default repository directory (/var/lib/backup), generally ending in failure. This was only an issue when {[dash]}-repo-remote-path was defined on the command line rather than in pg_backrest.conf.

IMPORTANT BUG FIX FOR TABLESPACES: A change to the repository format was accidentally introduced in 0.90 which means the on-disk backup was no longer a valid cluster when the backup contained tablespaces. This only affected users who directly copied the backups to restore clusters rather than using the restore command. However, the fix breaks compatibility with older backups that contain tablespaces no matter how they are being restored ( will throw errors and refuse to restore). New full backups should be taken immediately after installing version 0.91 for any clusters that contain tablespaces. If older backups need to be restored then use a version of that matches the backup version.

Fixed repository incompatibility introduced in 0.90.

Copy global/pg_control last during backups.

Write .info and .manifest files to temp before moving them to their final locations and fsync'ing.

Rename {[dash]}-no-start-stop option to {[dash]}-no-online.

Static source analysis using Perl-Critic, currently passes on gentle.

Fixed an issue where specifying {[dash]}-no-archive-check would throw a configuration error.

Fixed an issue where a temp WAL file left over after a well-timed system crash could cause the next archive-push to fail.

The retention-archive option can now be be safely set to less than backup retention (retention-full or retention-diff) without also specifying archive-copy=n. The WAL required to make the backups that fall outside of archive retention consistent will be preserved in the archive. However, in this case PITR will not be possible for the backups that fall outside of archive retention.

When backing up and restoring tablespaces only operates on the subdirectory created for the version of being run against. Since multiple versions can live in a tablespace (especially during a binary upgrade) this prevents too many files from being copied during a backup and other versions possibly being wiped out during a restore. This only applies to >= 9.0 — prior versions of could not share a tablespace directory.

Generate an error when archive-check=y but archive_command does not execute pg_backrest.

Improved error message when repo-path or repo-remote-path does not exist.

Added checks for {[dash]}-delta and {[dash]}-force restore options to ensure that the destination is a valid $PGDATA directory. will check for the presence of PG_VERSION or backup.manifest (left over from an aborted restore). If neither file is found then {[dash]}-delta and {[dash]}-force will be disabled but the restore will proceed unless there are files in the $PGDATA directory (or any tablespace directories) in which case the operation will be aborted.

When restore {[dash]}-set=latest (the default) the actual backup restored will be output to the log.

Support for 9.5 partial WAL segments and recovery_target_action setting. The archive_mode = 'always' setting is not yet supported.

Support for recovery_target = 'immediate' recovery setting introduced in 9.4.

The following tablespace checks have been added: paths or files in pg_tblspc, relative links in pg_tblspc, tablespaces in $PGDATA. All three will generate errors.

Fixed an issue where document generation failed because some OSs are not tolerant of having multiple installed versions of . A separate VM is now created for each version. Also added a sleep after database starts during document generation to ensure the database is running before the next command runs.

Fixed an issue where longer-running backups/restores would timeout when remote and threaded. Keepalives are now used to make sure the remote for the main process does not timeout while the thread remotes do all the work. The error message for timeouts was also improved to make debugging easier.

Allow restores to be performed on a read-only repository by using {[dash]}-no-lock and {[dash]}-log-level-file=off. The {[dash]}-no-lock option can only be used with restores.

Minor styling changes, clarifications and rewording in the user guide.

The dev branch has been renamed to master and for the time being the master branch has renamed to release, though it will probably be removed at some point {[dash]}- thus ends the gitflow experiment for . It is recommended that any forks get re-forked and clones get re-cloned.

Fixed an issue where the start/stop commands required the {[dash]}-config option.

Fixed an issue where log files were being overwritten instead of appended.

Fixed an issue where backup-user was not optional.

Symlinks are no longer created in backup directories in the repository. These symlinks could point virtually anywhere and potentially be dangerous. Symlinks are still recreated during a restore.

Added better messaging for backup expiration. Full and differential backup expirations are logged on a single line along with a list of all dependent backups expired.

Archive retention is automatically set to full backup retention if not explicitly configured.

Added documentation in the user guide for delta restores, expiration, dedicated backup hosts, starting and stopping , and replication.

The backup_label.old and recovery.done files are now excluded from backups.

Added a new user guide that covers basics and some advanced topics including PITR. Much more to come, but it's a start.

The website, markdown, and command-line help are now all generated from the same XML source.

Fixed an issue where an error could be returned after a backup or restore completely successfully.

Fixed an issue where a resume would fail if temp files were left in the root backup directory when the backup failed. This scenario was likely if the backup process got terminated during the copy phase.

Added stop and start commands to prevent processes from running on a system where is shutdown or the system needs to be quiesced for some other reason.

Experimental support for 9.5 beta1. This may break when the control version or WAL magic changes in future versions but will be updated in each release to keep pace. All regression tests pass except for {[dash]}-target-resume tests (this functionality has changed in 9.5) and there is no testing yet for .partial WAL segments.

Removed dependency on IO::String module.

Fixed an issue where resumed compressed backups were not preserving existing files.

Fixed an issue where resume and incr/diff would not ensure that the prior backup had the same compression and hardlink settings.

Fixed an issue where a cold backup using {[dash]}-no-start-stop could be started on a running cluster without {[dash]}-force specified.

Fixed an issue where a thread could be started even when none were requested.

Fixed an issue where the version number was not being updated in backup.info and archive.info after an upgrade/downgrade.

Fixed an issue where the info command was throwing an exception when the repository contained no stanzas.

Fixed an issue where the pg_stop_backup() NOTICEs were being output to stderr.

Experimental support for 9.5 alpha2. This may break when the control version or WAL magic changes in future versions but will be updated in each release to keep pace. All regression tests pass except for {[dash]}-target-resume tests (this functionality has changed in 9.5) and there is no testing yet for .partial WAL segments.

Renamed recovery-setting option and section to recovery-option to be more consistent with naming conventions.

Added dynamic module loading to speed up commands, especially asynchronous archiving.

Code cleanup and refactoring to standardize on patterns that have evolved over time.

Command-line help is now extracted from the same XML source that is used for the other documentation and includes much more detail.

Expiration tests are now synthetic rather than based on actual backups. This will allow development of more advanced expiration features.

Fixed an issue that caused the formatted timestamp for both the oldest and newest backups to be reported as the current time by the info command. Only text output was affected {[dash]}- json output reported the correct epoch values.

Fixed protocol issue that was preventing ssh errors (especially on connection) from being logged.

The repository is now created and updated with consistent directory and file modes. By default umask is set to 0000 but this can be disabled with the neutral-umask setting.

Added the stop-auto option to allow failed backups to automatically be stopped when a new backup starts.

Added the db-timeout option to limit the amount of time will wait for pg_start_backup() and pg_stop_backup() to return.

Remove pg_control file at the beginning of the restore and copy it back at the very end. This prevents the possibility that a partial restore can be started by .

Added checks to be sure the db-path setting is consistent with db-port by comparing the data_directory as reported by the cluster against the db-path setting and the version as reported by the cluster against the value read from pg_control. The db-socket-path setting is checked to be sure it is an absolute path.

Experimental support for 9.5 alpha1. This may break when the control version or WAL magic changes in future versions but will be updated in each release to keep pace. All regression tests pass except for {[dash]}-target-resume tests (this functionality has changed in 9.5) and there is no testing yet for .partial WAL segments.

Now using Perl DBI and DBD::Pg for connections to rather than psql. The cmd-psql and cmd-psql-option settings have been removed and replaced with db-port and db-socket-path. Follow the instructions in the Installation Guide to install DBD::Pg on your operating system.

Major refactoring of the protocol layer to support future development.

Split most of README.md out into USERGUIDE.md and CHANGELOG.md because it was becoming unwieldy. Changed most references to database in the user guide to database cluster for clarity.

Changed most references to database in the user guide to database cluster for clarity.

Added vagrant test configurations for Ubuntu 14.04 and CentOS 7.

Removed dependency on CPAN packages for multi-threaded operation. While it might not be a bad idea to update the threads and Thread::Queue packages, it is no longer necessary.

Modified wait backoff to use a Fibonacci rather than geometric sequence. This will make wait time grow less aggressively while still giving reasonable values.

Added vagrant test configurations for Ubuntu 12.04 and CentOS 6.

More options for regression tests and improved code to run in a variety of environments.

Added file and directory syncs to the File object for additional safety during backup/restore and archiving.

Added support for Perl 5.10.1 and OpenSSH 5.3 which are default for CentOS/RHEL 6.

Improved error message when backup is run without archive_command set and without {[dash]}-no-archive-check specified.

Removed pg_backrest_remote and added the functionality to pg_backrest as the remote command.

Moved version number out of the VERSION file to Version.pm to better support packaging.

Replaced IPC::System::Simple and Net::OpenSSH with IPC::Open3 to eliminate CPAN dependency for multiple operating systems.

IMPORTANT NOTE: This flag day release breaks compatibility with older versions of . The manifest format, on-disk structure, and the binary names have all changed. You must create a new repository to hold backups for this version of and keep your older repository for a time in case you need to do a restore. The pg_backrest.conf file has not changed but you'll need to change any references to pg_backrest.pl in cron (or elsewhere) to pg_backrest (without the .pl extension).

Added the info command.

Logging now uses unbuffered output. This should make log files that are being written by multiple threads less chaotic.

Experimental support for 9.5. This may break when the control version or WAL magic changes but will be updated in each release.

More efficient file ordering for backup. Files are copied in descending size order so a single thread does not end up copying a large file at the end. This had already been implemented for restore.

Fixed an issue where archive-copy would fail on an incr/diff backup when hardlink=n. In this case the pg_xlog path does not already exist and must be created.

Fixed an issue in async archiving where archive-push was not properly returning 0 when archive-max-mb was reached and moved the async check after transfer to avoid having to remove the stop file twice. Also added unit tests for this case and improved error messages to make it clearer to the user what went wrong.

Fixed a locking issue that could allow multiple operations of the same type against a single stanza. This appeared to be benign in terms of data integrity but caused spurious errors while archiving and could lead to errors in backup/restore.

Allow duplicate WAL segments to be archived when the checksum matches. This is necessary for some recovery scenarios.

Allow comments/disabling in pg_backrest.conf using the # character. Only # characters in the forst character of the line are honored.

Better logging before pg_start_backup() to make it clear when the backup is waiting on a checkpoint.

Various command behavior and logging fixes.

Replaced JSON module with JSON::PP which ships with core Perl.

Various help fixes.

Fixed an issue where an absolute path was not written into recovery.conf when the restore was run with a relative path.

Better resume support. Resumed files are checked to be sure they have not been modified and the manifest is saved more often to preserve checksums as the backup progresses. More unit tests to verify each resume case.

Resume is now optional. Use the resume setting or {[dash]}-no-resume from the command line to disable.

More info messages during restore. Previously, most of the restore messages were debug level so not a lot was output in the log.

Added tablespace setting to allow tablespaces to be restored into the pg_tblspc path. This produces compact restores that are convenient for development, staging, etc. Currently these restores cannot be backed up as expects only links in the pg_tblspc path.

Fixed a buffering error that could occur on large, highly-compressible files when copying to an uncompressed remote destination. The error was detected in the decompression code and resulted in a failed backup rather than corruption so it should not affect successful backups made with previous versions.

Pushing duplicate WAL now generates an error. This worked before only if checksums were disabled.

Database System IDs are used to make sure that all WAL in an archive matches up. This should help prevent misconfigurations that send WAL from multiple clusters to the same archive.

Improved threading model by starting threads early and terminating them late.

Regression tests working back to 8.3.

Fixed broken checksums and now they work with normal and resumed backups. Finally realized that checksums and checksum deltas should be functionally separated and this simplified a number of things. Issue #28 has been created for checksum deltas.

Fixed an issue where a backup could be resumed from an aborted backup that didn't have the same type and prior backup.

Added restore functionality.

All options can now be set on the command-line making pg_backrest.conf optional.

De/compression is now performed without threads and checksum/size is calculated in stream. That means file checksums are no longer optional.

Added option {[dash]}-no-start-stop to allow backups when Postgres is shut down. If postmaster.pid is present then {[dash]}-force is required to make the backup run (though if Postgres is running an inconsistent backup will likely be created). This option was added primarily for the purpose of unit testing, but there may be applications in the real world as well.

Checksum for backup.manifest to detect a corrupted/modified manifest.

Link latest always points to the last backup. This has been added for convenience and to make restores simpler.

Removed dependency on Moose. It wasn't being used extensively and makes for longer startup times.

More comprehensive unit tests in all areas.

Complete rewrite of BackRest::File module to use a custom protocol for remote operations and Perl native GZIP and SHA operations. Compression is performed in threads rather than forked processes.

Removed dependency on Storable and replaced with a custom ini file implementation.

Numerous other changes that can only be identified with a diff.

Added much needed documentation

Fairly comprehensive unit tests for all the basic operations. More work to be done here for sure, but then there is always more work to be done on unit tests.

Found and squashed a nasty bug where file_copy() was defaulted to ignore errors. There was also an issue in file_exists() that was causing the test to fail when the file actually did exist. Together they could have resulted in a corrupt backup with no errors, though it is very unlikely.

Worked on improving error handling in the File object. This is not complete, but works well enough to find a few errors that have been causing us problems (notably, find is occasionally failing building the archive async manifest when system is under load).

The archive-get command now returns a 1 when the archive file is missing to differentiate from hard errors (ssh connection failure, file copy error, etc.) This lets know that that the archive stream has terminated normally. However, this does not take into account possible holes in the archive stream.

If an archive directory which should be empty could not be deleted backrest was throwing an error. There's a good fix for that coming, but for the time being it has been changed to a warning so processing can continue. This was impacting backups as sometimes the final archive file would not get pushed if the first archive file had been in a different directory (plus some bad luck).

Added RequestTTY=yes to ssh sessions. Hoping this will prevent random lockups.

Added archive-get functionality to aid in restores.

Added option to force a checkpoint when starting the backup, start-fast=y.

Removed master_stderr_discard option on database SSH connections. There have been occasional lockups and they could be related to issues originally seen in the file code.

Changed lock file conflicts on backup and expire commands to ERROR. They were set to DEBUG due to a copy-and-paste from the archive locks.

No restore functionality, but the backup directories are consistent data directories. You'll need to either uncompress the files or turn off compression in the backup. Uncompressed backups on a ZFS (or similar) filesystem are a good option because backups can be restored locally via a snapshot to create logical backups or do spot data recovery.

Archiving is single-threaded. This has not posed an issue on our multi-terabyte databases with heavy write volume. Recommend a large WAL volume or to use the async option with a large volume nearby.

Backups are multi-threaded, but the Net::OpenSSH library does not appear to be 100% thread-safe so it will very occasionally lock up on a thread. There is an overall process timeout that resolves this issue by killing the process. Yes, very ugly.

Checksums are lost on any resumed backup. Only the final backup will record checksum on multiple resumes. Checksums from previous backups are correctly recorded and a full backup will reset everything.

The backup.manifest is being written as Storable because Config::IniFile does not seem to handle large files well. Would definitely like to save these as human-readable text.

Absolutely no documentation (outside the code). Well, excepting these release notes.

David Steele

dwsteele

Clinton Adams

clad

Leonardo GG Avellar

L30Bola

Chris Barber

gamerscomplete

Evan Benoit

evanbenoit

Christoph Berg

ChristophBerg

Sascha Biberhofer

sbiberhofer

Adam Brusselback

Tostino

Christophe Courtois

Krysztophe

William Cox

mydimension

Dmitry Didovicher

anarazel

Brian Faherty

scrummyin

Keith Fiske

keithf4

Thomas Flatley

seadba

Nick Floersch

seinick

Chris Fort

the1forte

Scott Frazer

sfrazer

Andres Freund

anarazel

Stephen Frost

sfrost

Victor Gdalevich

ntrvic

Navid Golpayegani

golpa

Devrim Gündüz

devrimgunduz

Magnus Hagander

mhagander

John Harvey

crunchyjohn

Douglas J Hunley

hunleyd

Craig A. James

cjames53

Vitaliy Kukharik

vitabaks

Nikhilchandra Kulkarni

nikhilchandra-kulkarni

Ibrahim Edib Kokdemir

Edib

Lardière Sébastien

slardiere

blogh

Lætitia

LaetitiaLoxo

Jeff McCormick

jmccormick2001

Brad Nicholson

bradnicholson

Markus Nullmeier

mnullmei

Jason O'Donnell

Dwaligon

Janice Parkinson

jpabt

Michael Renner

terrorobe

Eric Radman

eradman

Chiranjeevi Ravilla

Aleksandr Rogozin

arogozin

Cynthia Shang

cmwshang

Yogesh Sharma

sharmay

Mihail Shvein

M1hacka

Greg Smith

gregscds

Jesper St John

Underhunden

Adam K. Sumner

Flamacue

Viorel Tabara

Uspen

uspen

Todd Vernick

gintoddic

Michael Vitale

MichaelDBA

Adrian Vondendriesch

disco-stu

Jan Wieck

wieck

Jens Wilke

Javier Wilson

javierwilson

David Youatt

youattd

yummyliu