nexarch/scripts/ci-pg-cluster.sh

#!/usr/bin/env bash
# Startet/stoppt einen Wegwerf-Postgres fuer CI-DB-Tests (kein Secret, keine feste DB).
set -euo pipefail

PGBIN=${PGBIN:-/usr/lib/postgresql/17/bin}
PREFIX=/tmp/nexarch-ci-pg.

case "${1:-}" in
start)
  dir=$(mktemp -d "${PREFIX}XXXXXX")
  chown postgres:postgres "$dir"
  port=$((55000 + RANDOM % 1000))
  while ss -ltn | grep -q ":$port "; do port=$((55000 + RANDOM % 1000)); done
  runuser -u postgres -- "$PGBIN/initdb" -D "$dir/data" -A trust -U postgres >/dev/null
  runuser -u postgres -- "$PGBIN/pg_ctl" -D "$dir/data" -l "$dir/log" -w \
    -o "-p $port -c listen_addresses=127.0.0.1 -c unix_socket_directories=$dir" start >/dev/null
  for db in tenant_a tenant_b; do
    "$PGBIN/psql" -h 127.0.0.1 -p "$port" -U postgres -qc "create database $db"
  done
  base="postgres://postgres@127.0.0.1:$port"
  {
    echo "NEXARCH_CI_PGDIR=$dir"
    echo "TEST_ADMIN_DSN=$base/postgres?sslmode=disable"
    echo "TEST_TENANT_DSN=$base/tenant_a?sslmode=disable"
    echo "TEST_TENANT_DSN_B=$base/tenant_b?sslmode=disable"
    echo "REQUIRE_DB=1"
  } >> "${GITHUB_ENV:-/dev/stdout}"
  ;;
stop)
  dir=${NEXARCH_CI_PGDIR:-}
  case "$dir" in "$PREFIX"*) ;; *) echo "kein CI-Cluster zu stoppen" ; exit 0 ;; esac
  runuser -u postgres -- "$PGBIN/pg_ctl" -D "$dir/data" -m fast stop >/dev/null || true
  rm -rf "$dir"
  ;;
*)
  echo "Aufruf: $0 start|stop" >&2
  exit 2
  ;;
esac