Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[securedrop-log] Evaluate redis alternatives #1719

Open
legoktm opened this issue Nov 17, 2023 · 2 comments
Open

[securedrop-log] Evaluate redis alternatives #1719

legoktm opened this issue Nov 17, 2023 · 2 comments

Comments

@legoktm
Copy link
Member

legoktm commented Nov 17, 2023

redis is currently used to buffer logs received over qrexec and then a service reads from redis and writes to the appropriate log files. It would be nice if we could use existing log aggregators for this purpose, e.g. systemd-journald or rsyslog.

So the flow would look like:

VM log entry --qrexec--> {something} --> rsyslog/journald --> log files

Where "{something}" pushes the log entry into rsyslog/journald. Maybe something exists off the shelf or we write a small thing for it. It will need to be fast or non-blocking to avoid the log sender waiting over the qrexec channel.

@legoktm
Copy link
Member Author

legoktm commented Nov 21, 2023

Ro pointed me to the docs for qrexec socket services, which I think fit exactly what we need here. Instead of using redis to aggregate and queue messages, we could have a simple async service read messages off the socket and write to log files. So then the flow is:

VM log entry --qrexec--> sd-logger --> log files

@zenmonkeykstop zenmonkeykstop changed the title Evaluate redis alternatives [securedrop-log] Evaluate redis alternatives Dec 13, 2023
@zenmonkeykstop zenmonkeykstop transferred this issue from freedomofpress/securedrop-log Dec 13, 2023
@cfm
Copy link
Member

cfm commented Sep 30, 2024

See also: QubesOS/qubes-issues#830.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants