devxy/build-cran-binaries
Watch
1
0
Fork
You've already forked build-cran-binaries
 0
Code Issues 12 Pull requests Releases Activity

fix(ci): give the index writers the metadata database password #201

Merged
pat-s merged 1 commit from fix/pgpass-for-index-writers into main 2026-09-04 19:26:55 +00:00
Conversation 0 Commits 1 Files changed 2 +14
2 changed files with 14 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files
Showing only changes of commit d582024e1a - Show all commits

fix(ci): give the index writers the metadata database password

Prev Next 
bincraft's index build reads the ABI classifier cache to decide which packages
may be carried from the flat slot into a per-minor one. reindex.yaml and
weekly-rebuild-reindex.yaml never passed PGPASS, so that query fails:

  Error: connection to server at "r-binaries.devxy.io" ...
  fe_sendauth: no password supplied

It fails soft by design, so the run still reports success while quietly using an
empty cache-derived risky set. That is the exact state the cache was introduced
to fix, and it logs one connection error per slot while doing it.

build-all-versions.yaml already passes PGPASS, which is why the classification
looked correct there and not here.
Patrick Schratz 2026-09-04 19:22:39 +00:00
commit d582024e1a
No known key found for this signature in database
GPG key ID: 62050D5BC68AB6DC

7
.crow/reindex.yaml
View file

@ -142,6 +142,13 @@ steps:
from_secret: B2_S3_ACCESS_KEY
B2_S3_SECRET_KEY:
from_secret: B2_S3_SECRET_KEY
# The index build reads the ABI classifier cache to decide which packages
# may be carried from the flat slot into a per-minor one. Without the
# password that query fails, and it fails soft, so the run still succeeds
# while quietly using an empty risky set: exactly the state the cache was
# added to fix. It logs one connection error per slot.
PGPASS:
from_secret: PGPASS
REPO_RO_TOKEN:
from_secret: REPO_RO_TOKEN
GIT_USER: pat-s

7
.crow/weekly-rebuild-reindex.yaml
View file

@ -145,6 +145,13 @@ steps:
from_secret: B2_S3_ACCESS_KEY
B2_S3_SECRET_KEY:
from_secret: B2_S3_SECRET_KEY
# The index build reads the ABI classifier cache to decide which packages
# may be carried from the flat slot into a per-minor one. Without the
# password that query fails, and it fails soft, so the run still succeeds
# while quietly using an empty risky set: exactly the state the cache was
# added to fix. It logs one connection error per slot.
PGPASS:
from_secret: PGPASS
REPO_RO_TOKEN:
from_secret: REPO_RO_TOKEN
GIT_USER: pat-s