This feature is available in v8.6 and later.
Traditional packaging requires users to maintain a reference database, but often this is expensive and cumbersome to manage. Using an Oracle Ephemeral Database eliminates the need to manage an additional database on the pipeline. You simply configure Liquibase to create a temporary copy of a database in the pipeline to be used in place of the Reference Database. Once the copy is made, you will ensure that all of your changes work on the copy, implement them on your original database’s changelog, and then destroy the database copy. Follow this guide to learn how to implement this workflow.
Pre-requisites
Requires Liquibase Enterprise 8.6 and higher
Ephemeral database connection is based on Oracle multi-tenant PDB technology
Ephemeral database connection requires a user on ORCLCDB with SYSOPER privileges and the ability to create pluggable databases
Limitations
Ephemeral database feature works ONLY for PDB databases
Ephemeral database feature works ONLY for Oracle 19c and 21c
Ephemeral database feature does not work for Oracle RDS
You cannot place the temporary copied database in a pipeline or run a status on it because technically it does not exist in the pipeline.
Usage
Using an Oracle Ephemeral Database eliminates the need to manage an additional database on the pipeline. The ephemeral packaging feature creates a pluggable PDB copy when the packager runs, then packages all the changes on it, and drops the PDB copy after it. If the final deploy is not skipped - it will deploy newly packaged changes on the desired database (this is the DEV database in most cases).
It’s important to note that the copied database should always be the first database in the pipeline.
Backup and Restore Package Methods
In order to implement an Ephemeral Database, the databaseBackupRestoreMethod package method on the deployPackager.properties needs to be configured.
Two new package methods are supported. You can use an internal or external container depending on your needs. If your internal container is secured and permissions do not allow you to make changes within it, the external package method is recommended.
Package Method Name | Description |
---|---|
BackupRestoreOracleEphemeralInternalPdb | This is the same container that holds the dbDef to be copied. Eg. if I want to use the DEV database, the cloned db will be created on the same container as the DEV database. BackupRestoreOracleEphemeralInternalPdb is the faster and more reliable option. Usually it is 2.5 times faster, but it is important to take into account that BackupRestoreOracleEphemeralExternalPdb depends on the internet speed. BackupRestoreOracleEphemeralInternalPdb can be even faster if your internet speed becomes a bottle neck for BackupRestoreOracleEphemeralExternalPdb),We strongly recommend this option. |
BackupRestoreOracleEphemeralExternalPdb | This container is different and separate from the cloned dbDef. If you are using OMF mode it should be same on both databases when the copy is made. |
See: Use the Required deployPackager.properties File
1. Create ORCLCDB SYSOPER User
First you must decide if you are using the internal or external Ephemeral method. Once that is decided, you will create a user.
For both BackupRestoreOracleEphemeralInternalPdb AND BackupRestoreOracleEphemeralExternalPdb you must create a new user on oracle CDB with the following privileges to create an ephemeral copy.
Internal user privileges:
CREATE USER c##liquibase_ephemeral_user IDENTIFIED BY password; GRANT CREATE SESSION TO c##liquibase_ephemeral_user CONTAINER=all; GRANT CREATE PLUGGABLE DATABASE TO c##liquibase_ephemeral_user CONTAINER=all; GRANT SYSOPER TO c##liquibase_ephemeral_user CONTAINER=all;
External user privileges:
On the external database we will create a new user on oracle CDB with the following privileges. This allows us to create an ephemeral copy and additionally create a link with the source database.
CREATE USER c##liquibase_ephemeral_source IDENTIFIED BY password; GRANT CREATE SESSION TO c##liquibase_ephemeral_source CONTAINER=all; GRANT SYSOPER TO c##liquibase_ephemeral_source CONTAINER=all;
The user name must start with c##
to be a correct user type.
c##liquibase_ephemeral_user
is just an example value, you can specify any name you would like. This is the user that connects to the ephemeral dbDef.
Also there is a possibility to use TNS name during link creation, e.g.
CREATE DATABASE LINK liquibase_db_link CONNECT TO c##liquibase_ephemeral_user_a IDENTIFIED BY password USING TNS_NAME;
To check if database link has been created correctly please run query below, if you don’t get errors - database link is correct.
SELECT * FROM dual@liquibase_db_link;
If you would like to use another name for database link - please use oracleEphemeralDatabaseLinkName
packager property.
Optional: Only for TNSNAMES/LDAP Users
Use TNSNAMES/LDAP with Oracle Ephemeral Database
This section is necessary for TNSNAMES/LDAP users.
Learn more about traditional LDAP connections here: LDAP Connection to an Oracle Database
If you use TNS names in your dbDef, then you should prepare a TNS name with _eph
postfix for the ephemeral copy because we are not able to modify TNS files in most cases.
If this is what your dbDefs look like:
<dbDefs xsi:type="dbproject:OracleDbDef" name="DEV" hostname="localhost" driver="oracle.jdbc.OracleDriver" tnsName="dev" /> <dbDefs xsi:type="dbproject:OracleDbDef" name="DEV_EPHEMERAL" driver="oracle.jdbc.OracleDriver" tnsName="admin_sysoper" />
Then you should add a dev_eph
entry in your TNS configuration that points to a PDB. To determine the service name or SID for the PDB which this TNS will point to, use one of the following methods depending on your situation:
If you provided a value for
oracleEphemeralCopyName
, then this value will be what you add to your TNS configuration.
Example: If oracleEphemeralCopyName
is bucket_01_eph
, then your value will be bucket_01_eph
If you didn’t provide a value for
oracleEphemeralCopyName
, but provided it fororacleEphemeralSourceName
- it will be theoracleEphemeralCopyName
value +_eph
postfix.
Example: If oracleEphemeralSourceName
is bucket_01
, then your value will be bucket_01_eph
If you didn’t provide any of these values, add
_eph
postfix to your source PDB name.If your source PDB name is
bucket_01
, then your value will bebucket_01_eph
Then you will create the tnsnames.ora file that contains a dev
alias for DEV
DbDef, dev_eph
alias, and admin_sysoper
alias for DEV_EPHEMERAL
DbDef.
If you have a dev entry in your TNS file, then you should create an alias for the dev_eph
entry which points to the ephemeral copy.
Example tnsnames.ora file:
dev = (DESCRIPTION = (ADDRESS = (PROTOCOL = TCP) (HOST = 172.17.0.3) (PORT = 1521) ) (CONNECT_DATA = (SERVER = DEDICATED) (SERVICE_NAME = bucket_01) ) ) dev_eph = (DESCRIPTION = (ADDRESS = (PROTOCOL = TCP) (HOST = 172.17.0.3) (PORT = 1521) ) (CONNECT_DATA = (SERVER = DEDICATED) (SID = bucket_01_eph) ) ) admin_sysoper = (DESCRIPTION = (ADDRESS = (PROTOCOL = TCP) (HOST = 172.17.0.3) (PORT = 1521) ) (CONNECT_DATA = (SERVER = DEDICATED) (SID = ORCLCDB) ) )
Liquibase recommends creating a dbDef definition in the datical.project but not including this dbDef on any Liquibase pipelines/plans.
2. Methods for creating the Ephemeral dbDef
An ephemeral dbDef must be created in the datical.project file to instruct Liquibase which database should be cloned for the ephemeral copy and to set the connection string information. Because this database is transient by definition and only exists during the Deploy Packager operation, you are not able to run Status against it.
In order to create a dbDef without including the dbDef on an existing pipeline Liquibase recommends using ONE of the following methods:
Method 1: Create the dbDef using the Liquibase Enterprise GUI and then delete the dbDef from the pipeline.
Method 2: Include the ephemeral dbDef on the Project Creation Script but do not include the dbDef on any pipelines.
Method 3: Manually copy the dbDef from an existing dbDef in the pipeline.
Follow the instructions below based on the desired method.
Important note for external methods: If the source dbDef does NOT use TNS, then the ephemeral dbDef should also NOT use TNS. When we create a PDB copy in another database we need to retrieve the host and port to connect to it. If the ephemeral database uses TNS, then we don’t know where to connect to. If the source dbDef uses TNS, then the ephemeral dbDef can use anything. You also need to create a TNS entry with _eph
postfix to be able to connect to it.
Method 1: Create the dbDef with the Liquibase Enterprise GUI
Create the dbDef using instructions from Creating a Liquibase Enterprise project Using the Liquibase Enterprise GUI
Ensure the Name of the database is <dbDef_to_be_cloned>_EPHEMERAL. This can be DEV, QA, STAGE, or PROD.
Enter your Connection Settings.
If you are using a TNSNAMES/LDAP connection, see the section above Use TNSNAMES/LDAP with Oracle Ephemeral Database.
If you are using a BASIC connection, the Service Name is ORCLCDB or the name of the container that houses the ephemeral copy. (See Backup and Restore Package Methods section before for more information.)
Enter your container name in the Hostname text box. This entry depends on if you are using an internal or external backup and restore method. (See Backup and Restore Package Methods section before for more information.)
The username and password are the ORCLCDB user created in step 1. Create ORCLCDB SYSOPER User above.
Contexts and Labels
Contexts are left blank or set to the same context as the dbDef to be cloned.
Set your Labels to either of these:
To the name of the pipeline that houses the dbDef to be cloned
Or use the same pattern that is in use for the dbDef to be cloned
After creating the dbDef, remove the Step from the Pipeline by selecting Remove Step.
Do not select the box to delete the Deployment Step from the Deployment Plan
Method 2: Create the dbDef with the Project Creation Script
Create the project using the instructions from Creating a Liquibase Enterprise Using the Project Creation Script (project_creator.groovy)
Include the ephemeral database on the ProjectNameOracle.dbdefs.tsv.txt.
Use name: <dbDef_to_be_cloned>_EPHEMERAL
Do not reference the ephemeral database as part of any pipeline on ProjectNameOracle.pipelines.tsv.txt
Method 3: Manually create the dbDef by copying from the existing dbDef in datical.project
If you are manually copying the dbDef in the datical.project file from the dbDef to be cloned:
If the password is present in the file, please note this value is Base64 encoded. If modifying this value, the new value will also need to be Base64 encoded.
Clear out the dbDefsId for the new _EPHEMERAL dbDef.
<dbDefs xsi:type="dbproject:OracleDbDef" name="DEV_EPHEMERAL" driver="oracle.jdbc.OracleDriver" hostname="cs-oracledb.liquibase.net" port="1521" username="c##liquibase_ephemeral_user" password="bGlxdWliYXNlX3VzZXI=" labels="current" dbDefsId="" serviceName="ORCLCDB" enableCompression="false" rowsPerBatch="10000"/>
Do a Test Connection to another database in the pipeline to populate the dbDefsId field before checking it into source control.
Optional Step: Associated deployPackager.properties
These are packaging properties available specifically for the ephemeral database packaging method. They are optional if you would like to override the default values.
Property Name | Description |
---|---|
oracleEphemeralSourceName | [Optional] Defines a source name for an Oracle source PDB in the event Liquibase has not been granted the necessary permissions to query for this name. Necessary permissions are included below. If these grants are not present, oracleEphemeralSourceName will be required.
Property Validation: Source name should up to 30 characters long, contain no spaces [ ], slashes [/] and semicolons [;] and cannot begin with a number. |
oracleEphemeralCopyName | [Optional] Defines a name for an Oracle copy PDB in the event the default name is not desired. Default name for the ephemeral copy will be source PDB name with Property Validation: Copy name should be up to 30 characters long, contain no spaces [ ], slashes [/] and semicolons [;] and cannot begin with a number. |
oracleEphemeralDatabaseLinkName | [Optional] Defines a name for a database link which is used with PackageMethod Default link name will be Property Validation: Database link name should up to 128 characters long, contain no spaces [ ], slashes [/] and semicolons [;] and cannot begin with a number. |
oracleEphemeralCopyWithData | [Optional] By default Liquibase will copy databases without data. (*) If you would like to copy both the structure and data, use this boolean property. (*) There is one exception in that the data from the Property Validation: true/false |
oracleEphemeralSkipFinalDeploy | [Optional] The default value for this setting is false. Any changes being packaged are deployed to the first database in the pipeline during the Deploy Packager operation. Setting this value to true allows changes to be packaged and changesets to be created and stored in the changelog.xml, but the deployment to the first database in the pipeline does not occur. Property Validation: true/false |
See: Use the Required deployPackager.properties File
Troubleshooting:
Potential grants issues
If
oracleEphemeralSourceName
packager property is not specified we try to get the PDB name from 3 tables on the DB (v$pdbs
anddba_data_files, or v$parameter
). If you already gave the user required grants according to Multi-Schema Projects - Oracle Roles and Permissions , everything should work because bothGRANT SELECT ANY DICTIONARY TO DATICAL_ROLE;
andGRANT IMP_FULL_DATABASE TO DATICAL_PACKAGER_ROLE;
already give us enough permission to query the tables. If you haven’t given such permission to us and want to use the ephemeraldatabaseBackupRestoreMethod
- permissions to queryv$pdbs
anddba_data_files
is available.
Use Oracle Managed Files (OMF) with Oracle Ephemeral Database
If you are using OMF with BackupRestoreOracleEphemeralExternalPdb, then OMF mode should be the same on both instances of the Oracle database.