…1630)

Bumps Auth to v2.175.0

Co-authored-by: Chris Stockton <chris.stockton@supabase.io>

* feat: allow checkout of fork repository on workflow approval

Based on #1635

* Do not use secrets if they are not available

In the forks, secrets are not available.

* Use nix-fast-build to build all checks

CI build the required nix packages defined in flake checks. We use the
`nix-fast-build` tool to speed up the evaluation and build process.

We now use the same GitHub action to install nix.

We upload the build results to the cache using a post build hook.

* Run nix-fast-build from the GH Actions workflow

No need to run an extra shell script to run nix-fast-build.

* Upgrade the runners

* Fix issue with simultaneous pg build on darwin

Make sure each build use different port per version.
Make sure they use different pgsodium directories.

…ow to succeed (#1652)

* ci: use larger runner for the test and testinfra-ami-build workflows

* ci: wait for the nix workflow to succeed before running the test and testinfra-ami-build workflow

* ci: use larger runner for other workflows

* chore: be less verbose when building postgresql dev setup

* ci: build and cache more packages in the Nix CI workflow

* ci: run nix copy

* ci: do not run nix as root

* ci: revert change to qemu image build workflow

The workflow requires KVM on ARM. This is not available on the large
GitHub Actions runners. We revert the change to the workflow.

* ci: fix missing step to login to AWS after switching runner

Since the runner was switched to a Github-hosted runner, we need to
add a step to log in to AWS.

We want to run test.yaml and testinfra-ami-build.yaml after
nix-build.yaml. We start using reusable workflow instead of relying on
workflow_run which doesn't work well with pull requests.

* chore: fix nix devshell (`nix develop`)

* chore: add a `nix flake check` for the devShell

* fix: pin version of libpq to the major version installed

* fix: the variable is postgresql_major_version

* fix: using the correct var

* fix: default to postgres 15 major version

* fix: default to 15

* fix: supposedly main contains all releases for libpq5

* fix: syntax

* fix: different syntax

* fix: rely on ppa

* fix: ppa removal

* fix: change to trigger workflow

* fix: adding a test to see postgres version

* fix: testing for failure related to libpq5 version issue

* test: include read-only test for postgrest

* test: reduce log access time

* test: make sure to fail if version wrong

* chore: bump vars

Said artifact is no longer being used. If needed in the future, it can
be trivially reintroduced, but in the meantime there's no reason to
expend resources on them.

The QEMU artifact is not running with a filesystem that supports the
inotify API, resulting in spurious error messages, and broken config
reloading.

Also upgrades to Alpine 3.22.

* feat: Install gandalf, salt-wrapper for infra

* chore: version bumps

* bumping oriole build also

* fix: create the Gandalf group

* fix: implicitly create the gandalf group

* fix: correct gandalf archive path

* fix: unpack gandalf build correctly

* fix: reorganise order for gandalf installs

* fix: point to the correct path

* chore: bump vars due to conflicts

* fix: pin version of libpq to 17.x (#1649)

* fix: pin version of libpq to the major version installed

* fix: the variable is postgresql_major_version

* fix: using the correct var

* fix: default to postgres 15 major version

* fix: default to 15

* fix: supposedly main contains all releases for libpq5

* fix: syntax

* fix: different syntax

* fix: rely on ppa

* fix: ppa removal

* fix: change to trigger workflow

* fix: adding a test to see postgres version

* fix: testing for failure related to libpq5 version issue

* test: include read-only test for postgrest

* test: reduce log access time

* test: make sure to fail if version wrong

* chore: bump vars

* ci: no longer build Oriole QEMU artifact

Said artifact is no longer being used. If needed in the future, it can
be trivially reintroduced, but in the meantime there's no reason to
expend resources on them.

* chore: disable auth config reloading within qemu artifact

The QEMU artifact is not running with a filesystem that supports the
inotify API, resulting in spurious error messages, and broken config
reloading.

* chore: strip out unnecessary dependencies from QEMU builds

Also upgrades to Alpine 3.22.

* chore: version bumps

* tests: update user and group test adding gandalf

* chore: add gandalf user to user list

---------

Co-authored-by: Crispy1975 <12525875+Crispy1975@users.noreply.github.com>
Co-authored-by: samrose <samuel@supabase.io>
Co-authored-by: Div Arora <root@darora.com>

Should use `-` instead of `_`

* Revert "fix: gandalf path name"

This reverts commit 00cb0aa.

* Revert "feat: Install gandalf, salt-wrapper for infra (#1657)"

This reverts commit e321760.

* chore: bump versions

* fix: allow postgres to grant storage privs to other roles

Temporary fix until STORAGE-211 is completed

* chore: bump AMI versions

* chore: bump AMI versions

* test: tests on various docs pages for supabase docs

* tests: more docs tests

* tests: the rest of the postgres supabase docs tests`