pg_savior

阻止不带条件的全表更新以避免意外事故

概览

扩展包名版本分类许可证语言
pg_savior0.0.1ADMINApache-2.0C
ID扩展名BinLibLoadCreateTrustReloc模式
5810pg_savior-
相关扩展pg_upless safeupdate pg_drop_events pg_cheat_funcs table_log pg_snakeoil pg_auditor temporal_tables

-tuplestore_donestoring , breaks on pg18 @ el

版本

类型仓库版本PG 大版本包名依赖
EXTPIGSTY0.0.11817161514pg_savior-
RPMPIGSTY0.0.11817161514pg_savior_$v-
DEBPIGSTY0.0.11817161514postgresql-$v-pg-savior-
OS / PGPG18PG17PG16PG15PG14
el8.x86_64
el8.aarch64
el9.x86_64
el9.aarch64
el10.x86_64
el10.aarch64
d12.x86_64
d12.aarch64
d13.x86_64
PIGSTY 0.0.1
PIGSTY 0.0.1
PIGSTY 0.0.1
PIGSTY 0.0.1
PIGSTY 0.0.1
d13.aarch64
PIGSTY 0.0.1
PIGSTY 0.0.1
PIGSTY 0.0.1
PIGSTY 0.0.1
PIGSTY 0.0.1
u22.x86_64
PIGSTY 0.0.1
PIGSTY 0.0.1
PIGSTY 0.0.1
PIGSTY 0.0.1
PIGSTY 0.0.1
u22.aarch64
PIGSTY 0.0.1
PIGSTY 0.0.1
PIGSTY 0.0.1
PIGSTY 0.0.1
PIGSTY 0.0.1
u24.x86_64
PIGSTY 0.0.1
PIGSTY 0.0.1
PIGSTY 0.0.1
PIGSTY 0.0.1
PIGSTY 0.0.1
u24.aarch64
PIGSTY 0.0.1
PIGSTY 0.0.1
PIGSTY 0.0.1
PIGSTY 0.0.1
PIGSTY 0.0.1

构建

您可以使用 pig build 命令构建 pg_savior 扩展的 RPM / DEB 包:

pig build pkg pg_savior         # 构建 RPM / DEB 包

安装

您可以直接安装 pg_savior 扩展包的预置二进制包,首先确保 PGDGPIGSTY 仓库已经添加并启用:

pig repo add pgsql -u          # 添加仓库并更新缓存

使用 pig 或者是 apt/yum/dnf 安装扩展:

pig install pg_savior;          # 当前活跃 PG 版本安装
pig ext install -y pg_savior -v 18  # PG 18
pig ext install -y pg_savior -v 17  # PG 17
pig ext install -y pg_savior -v 16  # PG 16
pig ext install -y pg_savior -v 15  # PG 15
pig ext install -y pg_savior -v 14  # PG 14
dnf install -y pg_savior_18       # PG 18
dnf install -y pg_savior_17       # PG 17
dnf install -y pg_savior_16       # PG 16
dnf install -y pg_savior_15       # PG 15
dnf install -y pg_savior_14       # PG 14
apt install -y postgresql-18-pg-savior   # PG 18
apt install -y postgresql-17-pg-savior   # PG 17
apt install -y postgresql-16-pg-savior   # PG 16
apt install -y postgresql-15-pg-savior   # PG 15
apt install -y postgresql-14-pg-savior   # PG 14

创建扩展

CREATE EXTENSION pg_savior;

用法

pg_savior: 防止误操作的 Postgres 扩展

pg_savior 扩展拦截查询执行以防止意外的数据删除。它通过钩入执行器来检测危险的 DELETE 操作并阻止它们。

工作原理

当处理 DELETE 语句时,pg_savior 检查:

  • DELETE 命令中缺失 WHERE 子句
  • DELETE 查询计划中的索引扫描操作
  • DELETE 操作中涉及 CTE 和子查询的复杂查询

当检测到有风险的 DELETE 时,扩展会阻止执行并返回一条信息消息,影响行数为零。

示例

CREATE EXTENSION pg_savior;

-- 尝试不带 WHERE 子句的 DELETE
DELETE FROM emp;
-- INFO:  pg_savior: DELETE statement detected
-- INFO:  pg_savior: WHERE clause is mandatory for a DELETE statement
-- DELETE 0  (无行受影响,数据已保留)

-- 带 WHERE 子句的正常 DELETE 按预期工作
DELETE FROM emp WHERE id = 42;
-- DELETE 1

注意事项

  • 该扩展通过 PostgreSQL 执行器钩子运行,无需更改应用程序代码
  • 当前仅拦截 DELETE 语句;UPDATE 操作不受影响
  • 计划中的功能包括阻止不带 CONCURRENTLYCREATE INDEX 和阻止 DROP DATABASE

最后修改 2026-03-14: update extension metadata (953cbd0)