12:59:12 GMT <Terabyte> is it (in any way) possible to combine rename-command "" (to disable certain commands) with multiple requirepass entries to make it so that one client connecting with one password can perform read operations whereas another client connecting with a different password can perform write operations? Or are renamed commands global, and only ever 1 password via requirepass?
13:01:12 GMT <minus> yeah, it's all global
13:01:32 GMT <minus> if you need permission filtering you need some kind of proxy probably
13:05:23 GMT <Terabyte> hmm
13:05:44 GMT <Terabyte> so there no way (for security purposes) to partition clients into readers and writers and keep them that way?
13:06:29 GMT <Terabyte> scenario we were thinking was if a webserver which interacts with redis gets compromised, at least it will only have read access which isn't so bad.
13:14:51 GMT <minus> the redis protocol is simple; you could write a proxy that makes redis read-only. other than that i don't see any option except for a master/slave setup (only slave is accessible from web server, slave is readonly and other commands are renamed)
13:25:11 GMT <byoungb> Does anyone know if evictions are done per databases for volatile-LRU? because I have 2 dbs. The first with 56 keys (with short expires) and the second with 9 million (with longer expires).
13:25:32 GMT <byoungb> When evictions run it is evicting a lot of keys from the first db even though they have been much more recently used then pretty much everything in the second db
13:57:10 GMT <minus> Probably globally, best try yourself
14:25:11 GMT <lifted> Hello. I have a server running Redis 2.8.4 that keeps getting hacked (the 'dir' config setting keeps changing to var/spool/cron and the dbfilename config setting keeps changing to root. After googling, it's obviously hacked. How do I patch 2.8.4 to secure this without having to do a major upgrade?
14:29:38 GMT <p1rate> isn't it your server itself that is hacked and not redis ?
14:39:51 GMT <Terabyte> can you have a master slave setup where master and slave have different passwords? (requirepass entries in their respective configs)
15:05:05 GMT <minus> lifted: don't expose redis to the internet and/or set a password
15:05:17 GMT <lifted> minus: i see this now in the docs lol
15:05:59 GMT <minus> Terabyte: afaik yes, requirepass for access to the instance, masterauth for the password used to connect to the master from the slave
15:39:39 GMT <Terabyte> cool thanks minus
15:52:28 GMT <redis442> what is a simple and good guide for deplying redis cache to use with php API applications?
15:59:54 GMT <minus> https://www.youtube.com/watch?v=VjGSMUep6_4
15:59:59 GMT <minus> oh wait, wrong software
16:36:46 GMT <shodan45> what's the maximum size of a hash key's value?
16:36:57 GMT <JS__> Hi Guys, i am pretty new to Redis, Planning to write an application that interacts with Redis DB in go. I have a few questions regarding the same.
16:37:17 GMT <shodan45> or does it depend on the other data in the hash?
16:37:34 GMT <JS__> I want to categorize my redis cache into 4 instances and store the data correspondingly. The way I can do is using HSET and HGET is it?
16:38:18 GMT <JS__> Do I need to take care of having mutexs and locks to avoid race condition or does redis db provide any capabilities as such?
16:38:32 GMT <JS__> can some one please guide
17:08:28 GMT <minus> shodan45: takes literally one google (or DDG in this case) search to find out: https://groups.google.com/forum/#!topic/redis-db/HH4z-8mHNLM
17:19:52 GMT <shodan45> minus: cool, thanks!
17:20:44 GMT <shodan45> minus: I did google it, but didn't find it
17:57:20 GMT <pdpol> hi guys, i'm trying to run redis-benchmark to specifically test SADD, HMGET, HMSET, ZINCRBY, and ZCARD commands but it doesn't seem like there's a way to run those through the tool, anyone know if there's some way i can test these commands through that tool?
17:57:36 GMT <pdpol> to clarify, SADD works find, it's the others that don't
18:30:15 GMT <kaushal> Hi
18:30:31 GMT <kaushal> I am running Redis server v=3.2.4 sha=00000000:0 malloc=jemalloc-3.6.0 bits=64 build=c59eef38a7e0479a
18:30:42 GMT <kaushal> on CentOS 6.8
18:31:25 GMT <kaushal> I see this error in /var/log/redis/redis.log 3042:M 03 Nov 23:59:59.151 # Background saving error
18:31:29 GMT <kaushal> Any clue?
18:31:46 GMT <kaushal> I can share the /etc/redis.conf file for reference
18:32:09 GMT <kaushal> I am seeing lot of that error in /var/log/redis/redis.log
18:32:35 GMT <kaushal> Any help will be highly appreciable
18:35:58 GMT <minus> permission errors? disk full? SELinux?
18:37:54 GMT <kaushal> minus: let me pastebin the ls -l of /var/lib/redis
18:39:12 GMT <kaushal> minus: https://paste.fedoraproject.org/469781/47819834/
18:39:20 GMT <kaushal> SELinux is disabled
18:39:28 GMT <kaushal> There is enough diskspace
18:40:07 GMT <kaushal> minus: please do let me know if you want /etc/redis.conf
18:40:30 GMT <minus> try running it by hand (sudo to the correct user and with the correct config) with strace maybe
18:40:42 GMT <kaushal> minus: ok
18:40:48 GMT <kaushal> minus: any example?
18:41:14 GMT <minus> sudo -Hu redis strace redis-server /etc/redis.conf
18:41:20 GMT <kaushal> ok
18:41:30 GMT <kaushal> what does -H stand for?
18:41:31 GMT <minus> strace -e open maybe
18:41:44 GMT <minus> set home directory, probably not necessary
18:41:58 GMT <kaushal> ok
18:42:04 GMT <kaushal> strace -e open?
18:42:53 GMT <minus> to only show fopen syscalls, might be spammy otherwise
18:43:45 GMT <kaushal> so the command would be sudo -Hu redis strace -e open redis-server /etc/redis.conf?
18:45:10 GMT <minus> mhm
18:48:07 GMT <kaushal> minus: http://sprunge.us/ZFiB
18:53:33 GMT <minus> trigger a background save using BGSAVE on redis-cli
18:53:52 GMT <kaushal> ok
18:54:38 GMT <kaushal> minus: https://paste.fedoraproject.org/469791/14781992/
18:56:13 GMT <minus> (and then look if there's any errors shown by strace)
18:57:15 GMT <kaushal> minus: nope
18:59:10 GMT <kaushal> minus: https://paste.fedoraproject.org/469793/81995431/
19:02:00 GMT <minus> oh, sorry for assuming you had actually read the error message gave you
19:02:04 GMT <minus> >Failed opening the RDB file test (in server root dir /bin) for saving: Permission denied
19:02:24 GMT <minus> says it tries to write the dump to /bin/test which it obviously has no permission to
19:02:25 GMT <kaushal> minus: ok
19:02:54 GMT <kaushal> minus: ll /bin/test
19:02:55 GMT <kaushal> ls: cannot access /bin/test: No such file or directory
19:03:11 GMT <kaushal> minus: i am not sure if i understand that error
19:03:23 GMT <kaushal> write the dump to /bin/test which it obviously has no permission to
19:03:32 GMT <minus> set the dir config option to some dir you can write to (not to /bin) or give the save config directive an absolute path (not sure that works)
19:09:00 GMT <kaushal> minus: http://sprunge.us/dHXU?%3Clang%3E
19:09:34 GMT <kaushal> minus: line number 247 -> dir /var/lib/redis/
19:14:07 GMT <kaushal> minus: Any suggestions regarding /etc/redis.conf?
19:14:43 GMT <minus> oh, it might not use the `dir` value but rather try saving in the current working dir
19:15:06 GMT <minus> so launch it from there
19:15:39 GMT <kaushal> minus: i am not sure if i understand
19:16:09 GMT <minus> cd into /var/lib/redis before you run redis-server
19:16:14 GMT <kaushal> minus: i usually start the redis service using /etc/init.d/redis start
19:16:57 GMT <kaushal> minus: so do i need to run always sudo -Hu redis strace -e open redis-server /etc/redis.conf?
19:17:19 GMT <kaushal> I mean cd /var/lib/redis && sudo -Hu redis strace -e open redis-server /etc/redis.conf?
19:17:50 GMT <minus> nvm, `dir` sets the working directory
19:18:23 GMT <minus> if dir is correct then i have no idea whats's wrong
19:18:23 GMT <kaushal> minus: did you had a chance to look at my /etc/redis.conf file?
19:18:32 GMT <kaushal> as per http://sprunge.us/dHXU?%3Clang%3E
19:18:55 GMT <kaushal> minus: ok
19:19:06 GMT <minus> yeah, it looks correct
19:19:19 GMT <kaushal> minus: Any specific issue you suspect?
19:19:45 GMT <minus> is it a newly set up redis? if so i suggest uninstalling (+ purge) and reinstalling
19:20:30 GMT <kaushal> ok
19:22:11 GMT <kaushal> minus: (+ purge)?
19:22:36 GMT <kaushal> meaning remove /var/lib/redis/dump.rdb?