NES for PostgreSQL 14 (Standard)
Install and configuration guide for the standard build of NES for PostgreSQL 14.
The standard build of NES for PostgreSQL 14 is a drop-in replacement for community PostgreSQL 14. It provides full feature parity with the community and PGDG PostgreSQL 14 packages.
What is included
The standard build is compiled with the same feature set as the community and PGDG packages:
- XML support (libxml2 and libxslt)
- ICU collation
- National language support (NLS)
- PAM authentication
- LZ4 and zlib compression
- Perl procedural language (PL/Perl)
- A bundled OpenSSL (OpenSSL 3.5.7 with the OpenSSL 3.1.2 FIPS provider, CMVP cert #4985)
If you need a smaller dependency surface, see the minimal build.
Supported platforms
| Platform | Architecture |
|---|---|
| RHEL / UBI 7, 8, 9, 10 | x86_64 |
| Oracle Linux 7, 8, 9, 10 | x86_64 |
| SLES 12 SP5, 15 SP3 | x86_64 |
| Windows Server 2019, 2022, 2025 | x86_64 |
| AIX 7.2 TL5 | ppc64 |
| Solaris 11.4 | x86_64, SPARC64 |
For the FIPS operational-environment posture on each platform, see the Support Policy.
Access
NES for PostgreSQL 14 is distributed through the NES registry at registry.nes.herodevs.com and requires a HeroDevs access token. If you do not have an access token, contact support@herodevs.com. For more information see Access Tokens.
Installation
Each supported platform ships a binary tarball that contains the PostgreSQL 14 binaries, the bundled OpenSSL FIPS provider, and a FIPS attestation.
Download the build for your platform
Download the tarball for your operating system and architecture from the NES registry using your access token.
Confirm the exact asset filename for your platform and the access-token auth scheme with support@herodevs.com.
# Example: download the build for your platform
curl -fSL -u "<your-contact-email>:<your-nes-access-token>" \
-o nes-postgresql-14.23.tar.gz \
"https://registry.nes.herodevs.com/bin/nes/postgres/14.23/<filename>"
Verify and extract
Verify the tarball against its published .sha256 sidecar, then extract it to your install prefix.
sha256sum -c nes-postgresql-14.23.tar.gz.sha256
tar -xzf nes-postgresql-14.23.tar.gz -C /opt/nes
Enable the FIPS provider
The build runs openssl fipsinstall -verify at install time to confirm the FIPS boundary HMAC matches. Configure the postmaster to load the provider at startup using the bundled openssl.cnf. Sample configuration files (postgresql.conf.fips.sample, pg_hba.conf.fips.sample) ship in the tarball.
Building from source
The source distribution is a separate product with its own access. See Source distribution.