NES for PostgreSQL 14 (Minimal)
Install and configuration guide for the minimal build of NES for PostgreSQL 14.
The minimal build of NES for PostgreSQL 14 is a reduced-dependency build of PostgreSQL 14. It carries the same PostgreSQL core and the same bundled OpenSSL FIPS provider as the standard build, with optional libraries removed to shrink the dependency surface.
Use the minimal build when you want a smaller footprint and fewer third-party libraries, for example in embedded or air-gapped deployments.
What is different from the standard build
The minimal build turns off every optional dependency. Compared to the standard build, it omits:
- zlib compression
- XML support (libxml2 and libxslt)
- ICU collation
- National language support (NLS)
- PAM authentication
- LZ4 compression
- readline (psql line editing)
- The PL/Perl, PL/Python, and PL/Tcl procedural languages
It keeps the PostgreSQL 14 core, UUID support, and the bundled OpenSSL (OpenSSL 3.5.7 with the OpenSSL 3.1.2 FIPS provider, CMVP cert #4985).
Supported platforms
| Platform | Architecture |
|---|---|
| RHEL / UBI 7, 8, 9, 10 | x86_64 |
| Oracle Linux 7, 8, 9, 10 | x86_64 |
| SLES 12 SP5, 15 SP3 | x86_64 |
| Windows Server 2019, 2022, 2025 | x86_64 |
| AIX 7.2 TL5 | ppc64 |
| Solaris 11.4 | x86_64, SPARC64 |
Access
NES for PostgreSQL 14 is distributed through the NES registry at registry.nes.herodevs.com and requires a HeroDevs access token. If you do not have an access token, contact support@herodevs.com. For more information see Access Tokens.
Installation
The minimal build installs the same way as the standard build. Each supported platform ships a binary tarball that contains the PostgreSQL 14 binaries, the bundled OpenSSL FIPS provider, and a FIPS attestation.
Confirm the exact asset filename for your platform and the access-token auth scheme with support@herodevs.com.
Download the minimal build for your platform
curl -fSL -u "<your-contact-email>:<your-nes-access-token>" \
-o nes-postgresql-14.23-minimal.tar.gz \
"https://registry.nes.herodevs.com/bin/nes/postgres-minimal/14.23/<filename>"
Verify and extract
sha256sum -c nes-postgresql-14.23-minimal.tar.gz.sha256
tar -xzf nes-postgresql-14.23-minimal.tar.gz -C /opt/nes
Enable the FIPS provider
Configure the postmaster to load the bundled FIPS provider at startup. Sample configuration files ship in the tarball.
Building from source
The source distribution is a separate product with its own access. See Source distribution.