elevarq/pgagroal repository overview

⁠Elevarq pgAgroal

Production-grade container image for pgagroal⁠ — a high-performance PostgreSQL connection pooler. Built from source, signed, SBOM-attested, multi-arch. (Elevarq pgAgroal is the product; pgagroal is the upstream pooler it bundles.)

⁠Why this image

• Reproducible builds from pinned source (pgagroal 2.1.0, Debian bookworm).
• Multi-arch manifests: linux/amd64 and linux/arm64.
• Signed with cosign (keyless, GitHub OIDC) on every release.
• SBOM + SLSA provenance attached as OCI attestations.
• Hardened runtime: non-root (UID 1000), all capabilities dropped, read-only root filesystem, seccomp RuntimeDefault.
• Configuration via environment variables — no config files to mount.
• Aligned with SOC 2 / ISO 27001 engineering practices.

⁠Quick start

docker pull elevarq/pgagroal:1.4.5

docker run -d --name pgagroal \
  -p 6432:6432 \
  -e PG_BACKEND_HOST=your-postgres-host \
  -e PG_BACKEND_PORT=5432 \
  elevarq/pgagroal:1.4.5

psql -h localhost -p 6432 -U youruser -d yourdb -c 'SELECT 1;'

⁠Verify

cosign verify elevarq/pgagroal:1.4.5 \
  --certificate-identity-regexp "https://github.com/Elevarq/pgAgroal/.*" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

⁠Required ports

⁠Minimal configuration

All configuration is via environment variables. Defaults are production-safe.

⁠Metrics

pgagroal ships a built-in Prometheus exporter. Enable it by exposing port 9187 and scraping /metrics. In the Helm chart this is metrics.enabled=true.

⁠Versioning and tags

Tags follow the project version in VERSION⁠, not the upstream pgagroal version.

Only CI publishes tags. latest is a multi-arch manifest updated on every release.

⁠Helm chart

The Helm chart is published as an OCI artifact to GHCR alongside each release, so it installs by reference (the chart version matches the image tag):

helm install pgagroal oci://ghcr.io/elevarq/charts/pgagroal --version 1.3.0

The chart is cosign-signed with the same keyless GitHub OIDC identity as the image.

⁠Documentation

• Product documentation: elevarq.com/docs/pgagroal-container⁠
• Source, full README, operations guide, Helm chart, and deployment examples: github.com/Elevarq/pgAgroal⁠

⁠Source and issues

• Source: github.com/Elevarq/pgAgroal⁠
• Bugs and feature requests: GitHub Issues⁠
• Security: see SECURITY.md⁠

Licensed under BSD-3-Clause. Contains unmodified pgagroal from pgagroal/pgagroal⁠.