lp:debian/redis
- Get this branch:
- bzr branch lp:debian/redis
Branch information
- Owner:
- Ubuntu branches
- Status:
- Development
Recent revisions
- 93. By lamby
-
Use `ProtectSystem=
true` over `ProtectSystem= full` in
redis-sentinel.service so that it can write its own configuration file
under /etc. Thanks to Pete Hicks <email address hidden> for the report and fix.
(Closes: #799696) - 92. By lamby
-
Change the default (and commented-out) value for "unixsocket" from
/tmp/redis.sock -> /var/run/redis/redis. sock so that it will work even
under systemd's PrivateTmp=True. Thanks to
Chris <email address hidden> (Closes: #801464) - 91. By lamby
-
Allow redis-sentinel to actually write to its own directory;
ReadWriteDirectories cannot take a filename as I previously thought.
Thanks to Bernd Zeimetz <email address hidden> for the prompt report.
(Closes: #799696) - 90. By lamby
-
* Don't install /etc/redis/
{redis, sentinel} .conf world-readable as they may
contain passwords, additionally setting the ownership to ensure they can
read their own configuration. (Closes: #800435)
* Disable CAP_SYS_PTRACE in systemd service files
* Add Documentation= header to systemd service files.
* Add a "redis" systemd unit alias. - 89. By lamby
-
Make the parallel change in 2:30.4-3 to redis-server's initscript, not just
redis-sentinel's. - 88. By lamby
-
Specific `-s /bin/sh` in su's call to start run-parts as the redis's user's
shell of /bin/false was preventing it from starting under sysvinit. Thanks to
Michal Humpula <email address hidden>. (Closes: #798951) - 87. By lamby
-
* Add PIDFile= to systemd service files.
* Run /etc/redis/redis-server. post-up. d (etc.) under the 'redis' user, not
root in initscript.
- Document this in 00_example files.
* Execute run-parts files under systemd, not just under sysvinit.
(Closes: #798771)
* Add rudimentary hardening under systemd. (Closes: #798770) - 86. By lamby
-
* New upstream release.
- Sync debian/redis.conf.
* Put --system further on to avoid issues with lintian false-positive (and to
match the manpage). - 85. By lamby
-
Replace ExecStop in systemd configuration with TimeoutStopSpec. Calls to
`redis-cli shutdown` were not reliable if the port/UNIX socket had changed
from the defaults (or is not accessible due to firewalling, permissions,
etc.)Note that we cannot simply remove ExecStop (hence TimeoutStopSpec) as we
must wait for the server to fully shutdownit may not have finished
writing the dump file to disk and thus we would be risking silent data loss
if it is SIGKILL'd.Thanks to Chris Kuehl <email address hidden>. (Closes: #794437)
Branch metadata
- Branch format:
- Branch format 7
- Repository format:
- Bazaar repository format 2a (needs bzr 1.16 or later)
- Stacked on:
- lp:debian/squeeze/redis