PostgreSQL DSN for password-less connection over UNIX socket?

troyanov · August 23, 2023, 11:40am

Hello!

I am wondering if anyone was able to use PostgreSQL database via UNIX socket and user without password?

It seems that existing DSN format is wrong because it doesn’t allow empty password?

temporalio/temporal/blob/e9463857e02801052355a38c452d3035086c1051/common/persistence/sql/sqlplugin/postgresql/session/session.go#L40


      
          	"strings"
          
          	"github.com/iancoleman/strcase"
          	"github.com/jmoiron/sqlx"
          
          	"go.temporal.io/server/common/config"
          	"go.temporal.io/server/common/resolver"
          )
          
          const (
          	dsnFmt     = "postgres://%v:%v@%v/%v?%v"
          	driverName = "postgres"
          )
          
          const (
          	sslMode        = "sslmode"
          	sslModeNoop    = "disable"
          	sslModeRequire = "require"
          	sslModeFull    = "verify-full"
          
          	sslHost = "host"

PostgreSQL: Documentation: 15: 34.1. Database Connection Control Functions says that
:password part should be optional:

postgresql://[userspec@][hostspec][/dbname][?paramspec]

where userspec is:

user[:password]

But maybe there is a workaround?

troyanov · August 23, 2023, 3:20pm

I was wrong. It seems that sqlx and pq allow user: (with empty password) and my issue was caused by a bit different thing.

I was able to solve UNIX socket connection by specifying @ as an endpoint::

temporal-sql-tool --plugin postgres --endpoint @ --port 5432 --user foo --database foo --ca host=/var/run/postgresql setup-schema -v 0.0