TLS support?

[tomasaschan]

I'm trying to use this image to connect to a managed Redis instance on Azure, but I keep getting Error: Server closed the connection whatever I try to do. Could the problem be that there is a TLS mismatch?

> docker run --rm --name redis-cli -it goodsmileduck/redis-cli redis-cli -h <redacted>.redis.cache.windows.net -p 6380 -a <redacted> ping
Error: Server closed the connection

If I don't run a command at the docker incantation it seems to connect, but I get the same errors when trying to execute any commands:

> docker run --rm --name redis-cli -it goodsmileduck/redis-cli redis-cli -h <redacted>.redis.cache.windows.net -p 6380 -a <redacted>
<redacted>.redis.cache.windows.net:6380> ping
Error: Server closed the connection
(0.88s)
<redacted>.redis.cache.windows.net:6380> ping foo
Error: Server closed the connection
(5.77s)
<redacted>.redis.cache.windows.net:6380> KEYS
Error: Server closed the connection
(23.13s)
<redacted>.redis.cache.windows.net:6380> SCAN 0 COUNT 1000
Error: Server closed the connection
(3.24s)

I understand that the CLI iself does not support TLS, but the recommendation is to use something like stunnel (more info here). Would it be feasible to install something like that in this docker image?

[werty1st]

Try this. For me its working.

FROM alpine
MAINTAINER Stanislav Serebrennikov <goodsmileduck@gmail.com>

ARG REDIS_VERSION="6.0.4"
ARG REDIS_DOWNLOAD_URL="http://download.redis.io/releases/redis-${REDIS_VERSION}.tar.gz"

RUN apk update && apk upgrade \
    && apk add --update --no-cache --virtual build-deps gcc make linux-headers musl-dev tar tcl-tls openssl-dev ca-certificates\
    && wget -O redis.tar.gz "$REDIS_DOWNLOAD_URL" \
    && mkdir -p /usr/src/redis \
    && tar -xzf redis.tar.gz -C /usr/src/redis --strip-components=1 \
    && rm redis.tar.gz \
    && BUILD_TLS=yes make -C /usr/src/redis install redis-cli /usr/bin \
    && rm -r /usr/src/redis \
    && apk del build-deps gcc make linux-headers musl-dev tar tcl-tls openssl-dev \
    && rm -rf /var/cache/apk/*

CMD  ["redis-cli"]

[arcsector]

@werty1st FYI that if you do this today this will result in an error from wget: Bad wget URL. To fix this, simply make http -> https in the REDIS_DOWNLOAD_URL arg, and you'll be good! Also I'd recommend moving the RUN commands to separate steps for caching when the REDIS_VERSION changes, otherwise the install takes a long time to redo when you change simple things. Cheers!