Skip to content
Percona Software for PostgreSQL Documentation

Rate this page
☆ ☆ ☆ ☆ ☆
Thanks for your feedback
Thank you! The feedback has been submitted.

Get free database assistance or contact our experts for personalized support.

Get help from Percona

pg_tde 2.2.1 (2026-07-06)

The pg_tde extension, provided by Percona, adds Transparent Data Encryption (TDE) to PostgreSQL and helps protect sensitive data at rest.

Get Started

Release Highlights

pg_tde 2.2.1 focuses on stability and compatibility improvements. This release improves pg_rewind reliability. For more details, see the Changelog.

Warning

pg_tde 2.2.1 is not compatible with Percona Distribution for PostgreSQL older than 17.10.2 or 18.4.2.

Known issues

  • The default mlock limit on Rocky Linux 8 for ARM64-based architectures equals the memory page size and is 64 Kb. This results in the child process with pg_tde failing to allocate another memory page because the max memory limit is reached by the parent process.

    To prevent this, you can change the mlock limit to be at least twice the memory page size:

    • temporarily for the current session using the ulimit -l <value> command.
    • set a new hard limit in the /etc/security/limits.conf file. To do so, you require the superuser privileges.

    Adjust the limits with caution since it affects other processes running in your system.

Changelog

Changes introduced in pg_tde 2.2.1:

New Features

Bug Fixes

  • PG-2407 - Fixed multiple issues affecting pg_rewind for pg_tde clusters, improving reliability during rewind and recovery operations.
  • PG-2258 - Fixed “could not find server principal key” error from pg_tde_basebackup

Changes

  • Remove support for building pg_tde with make, now it can only be built with Meson