☰

systemd redis.service 不允许 unix 套接字连接？

tag-icon • tag-icon ubuntu systemd redis
systemd redis.service 不允许 unix 套接字连接？

我在 ubuntu 16.04 上安装了 redis-server，并尝试通过 unix 套接字连接到它。我已注释掉redis.conf 中的bind和指令，并取消注释指令，因此我有：portunixsocket

# Accept connections on the specified port, default is 6379.
# If port 0 is specified Redis will not listen on a TCP socket.
# port 6379

# TCP listen() backlog.
#
# In high requests-per-second environments you need an high backlog in order
# to avoid slow clients connections issues. Note that the Linux kernel
# will silently truncate it to the value of /proc/sys/net/core/somaxconn so
# make sure to raise both the value of somaxconn and tcp_max_syn_backlog
# in order to get the desired effect.
tcp-backlog 511

# By default Redis listens for connections from all the network interfaces
# available on the server. It is possible to listen to just one or multiple
# interfaces using the "bind" configuration directive, followed by one or
# more IP addresses.
#
# Examples:
#
# bind 192.168.1.100 10.0.0.1
# bind 127.0.0.1

# Specify the path for the Unix socket that will be used to listen for
# incoming connections. There is no default, so Redis will not listen
# on a unix socket when not specified.
#
unixsocket /var/run/redis/redis.sock
unixsocketperm 770

我已将本地用户添加到 redis 组，并重新启动了 redis 服务，sudo systemctl restart redis.serivce因此/var/run/redis/文件夹如下所示：

drwxrwsr-x  2 redis redis   80 Apr 27 17:39 .
drwxr-xr-x 34 root  root  1160 Apr 27 16:40 ..
-rw-r--r--  1 redis redis    6 Apr 27 17:38 redis-server.pid
srwxrwx---  1 redis redis    0 Apr 27 17:38 redis.sock

我希望现在能够使用以下方式连接到套接字

$ redis-cli -s /var/run/redis/redis.sock

但是我得到：

Could not connect to Redis at /var/run/redis/redis.sock: Permission denied
not connected>

奇怪的是，运行后我得到了应该不受约束的$ redis-cli默认值？127.0.0.1:6379>

如果我看一下 redis 进程：

redis    18108  0.0  0.0  40136  6652 ?        Ssl  17:45   0:00 /usr/bin/redis-server *:6379

在我看来，它甚至没有使用正确的 conf 文件并绑定到 *:6379。该/etc/systemd/system/redis.service文件有

ExecStart=/usr/bin/redis-server /etc/redis/redis.conf

所以我很困惑为什么这不是正在运行的进程，或者为什么权限不允许我连接。

答案1

在将本地用户添加到 redis 组后，您是否注销并重新登录？您需要这样做才能应用更改。

相关内容