MEMSQL-UPDATE-ROOT-PASSWORD

On this page

Available since MemSQL Ops version 4.0.31.

Update the root password for a SingleStore node.

Usage

usage: memsql-ops memsql-update-root-password [--settings-file SETTINGS_FILE]
                                              [--async] [--no-prompt]
                                              [-p [PASSWORD]]
                                              [--no-confirmation] [--force]
                                              [memsql_id]

Update the root password for a SingleStore node.

positional arguments:
  memsql_id             The ID of the SingleStore node.

optional arguments:
  --settings-file SETTINGS_FILE
                        A path to a MemSQL Ops settings.conf file. If not set,
                        we will use the file in the same directory as the
                        MemSQL Ops binary.
  --async               If this option is true, we will exit without waiting
                        for MemSQL Ops to finish updating the root password.
  --no-prompt           Skip interactive prompts if ID is not provided. This
                        should be used for non-interactive scripts and
                        automation.
  -p [PASSWORD], --password [PASSWORD]
                        The password to use for the root user on the SingleStore
                        node. Leave blank to read the MEMSQL_PASSWORD
                        environment variable, or have a password prompt if
                        MEMSQL_PASSWORD is not set. Note: empty string value
                        clears the password for root.
  --no-confirmation     If this option is specified, we will update the root
                        password without prompting for confirmation.
  --force               If this is true, we will set the password in MemSQL
                        Ops even if we cannot currently connect to SingleStore.

Notes

  • To configure the password on all nodes in a SingleStore cluster, run:

    memsql-ops memsql-list -q | xargs -n 1 memsql-ops memsql-update-root-password --no-confirmation -p <password>
  • When using MemSQL 6.7 and MemSQL Ops 6.0.11 or later, changing the root password is an online operation for both aggregators and leaves; otherwise, it should be considered an offline operation. See [Configuring the root password]({{< relref /v6.7/guides/security/general/securing-memsql.md#configuring-the-root-password >}}) for more information.

  • If you are running MemSQL Ops 6.0.10 or older and/or MemSQL 6.0 or older, see the [previous version]({{< relref /v6.0/reference/memsql-ops-cli-reference/memsql-node-and-cluster-management/memsql-update-root-password.md >}}) of this topic for additional instructions when running memsql-update-root-password.

Last modified: April 25, 2023

Was this article helpful?

Verification instructions

Note: You must install cosign to verify the authenticity of the SingleStore file.

Use the following steps to verify the authenticity of singlestoredb-server, singlestoredb-toolbox, singlestoredb-studio, and singlestore-client SingleStore files that have been downloaded.

You may perform the following steps on any computer that can run cosign, such as the main deployment host of the cluster.

  1. (Optional) Run the following command to view the associated signature files.

    curl undefined
  2. Download the signature file from the SingleStore release server.

    • Option 1: Click the Download Signature button next to the SingleStore file.

    • Option 2: Copy and paste the following URL into the address bar of your browser and save the signature file.

    • Option 3: Run the following command to download the signature file.

      curl -O undefined
  3. After the signature file has been downloaded, run the following command to verify the authenticity of the SingleStore file.

    echo -n undefined |
    cosign verify-blob --certificate-oidc-issuer https://oidc.eks.us-east-1.amazonaws.com/id/CCDCDBA1379A5596AB5B2E46DCA385BC \
    --certificate-identity https://kubernetes.io/namespaces/freya-production/serviceaccounts/job-worker \
    --bundle undefined \
    --new-bundle-format -
    Verified OK