REMUNGE(1)

📦
version 0.5.18 · 5 versions
, in arch rolling, fedora 43, fedora 44, nixpkgs unstable

💖 REMUNGE(1) — the MUNGE creds-per-second glow-up 💖

okay bestie, real talk: this is remunge from the MUNGE Uid 'N' Gid Emporium, and it's literally the vibe-check tool for how fast MUNGE can make credentials. sit down, hydrate, let's go 🫶

✨ NAME ✨

remunge — MUNGE credential benchmark 🌸

🎀 SYNOPSIS 🎀

remunge [OPTION]...

like, that's it. options only. no positional args, no drama 💅

🦋 DESCRIPTION 🦋

So remunge benchmarks how fast MUNGE is performing. A benchmark keeps running for the duration you picked, or until it's chewed through the number of credentials you picked — whichever comes first. iconic race, honestly.

When it wraps up, it writes the number of credentials processed per second to stdout. that's the number. the moment. the main character stat 👑

By default? Credentials get encoded for one second using a single thread. one thread. one second. minimal effort, maximal results, we love a low-effort queen 💜

💅 OPTIONS 💅

  • -h, --help — shows you a summary of all the command-line options. your little map 🗺️
  • -L, --license — shows the license info. legal girlies, this one's for you 📜
  • -V, --version — shows version info. ✨
  • -q, --quiet — shows only the creds/sec numeric result, nothing else. lowkey obsessed with this one because it's perfect for producing input files for ministat. number only, no yapping 🤫
  • -c, --cipher string — pick your cipher type, either by name or by number 🔐
  • -C, --list-ciphers — displays a list of supported cipher types. window shopping 🛍️
  • -m, --mac string — pick your MAC type, either by name or by number 🧮
  • -M, --list-macs — displays a list of supported MAC types.
  • -z, --zip string — pick your compression type, either by name or by number 🗜️
  • -Z, --list-zips — displays a list of supported compression types.
  • -e, --encode — encodes (but does not decode) each credential. and the way it skips the decode step means the credential is not stored in the replay cache. no receipts, no trace, gone girl 💀
  • -d, --decode — encodes and decodes each credential. the full journey, both directions 🚶♀️🚶
  • -l, --length bytes — sets an arbitrary payload length, in bytes. the integer can be followed by a single-character modifier: k=kilobytes, m=megabytes, g=gigabytes; K=kibibytes, M=mebibytes, G=gibibytes. yes the capital letters mean something different, do not come for me 📏
  • -u, --restrict-uid uid — sets the user name or UID allowed to decode the credential. this gets matched against the effective user ID of the process requesting that credential decode 🔒
  • -g, --restrict-gid gid — sets the group name or GID allowed to decode the credential. this gets matched against the effective group ID of the process requesting the credential decode, plus every supplementary group that the effective user ID of that process is a member of. group chat access control fr fr 👯
  • -t, --ttl seconds — sets the time-to-live in seconds. this controls how long the credential stays valid once it's been encoded. 0 selects the default TTL. -1 selects the maximum allowed TTL. choose your own adventure ⏳
  • -S, --socket path — sets the local socket used for connecting with munged. 📞
  • -D, --duration seconds — sets the test duration in seconds. default duration is one second. -1 selects the maximum duration. the integer can be followed by a single-character modifier: s=seconds, m=minutes, h=hours, d=days. ⏱️
  • -N, --num-creds integer — sets the number of credentials to generate. the integer can be followed by a single-character modifier: k=kilobytes, m=megabytes, g=gigabytes; K=kibibytes, M=mebibytes, G=gibibytes. yes, those are the modifiers listed for credential counts, we're just reporting the facts bestie 🍓
  • -T, --num-threads integer — sets the number of threads to spawn for processing credentials. bring the whole squad 🧚
  • -W, --warn-time seconds — sets the maximum number of seconds to allow for a given munge_encode() or munge_decode() operation before issuing a warning. it's giving "hey, we noticed" ⚠️

🌈 EXIT STATUS 🌈

remunge returns a zero exit code if the benchmark completes. slay ✅

On error, it prints an error message to stderr and returns a non-zero exit code. not slay, but informative 😭

💜 AUTHOR 💜

Chris Dunlap <cdunlap@llnl.gov> — the actual legend who wrote this 👑

Copyright (C) 2007-2025 Lawrence Livermore National Security, LLC. Copyright (C) 2002-2007 The Regents of the University of California.

MUNGE is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

Additionally for the MUNGE library (libmunge), you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

bestie, this is the legal fine print and it matters. free software, GPL/LGPL, version 3 or later, your choice. no cap 🫶

👀 SEE ALSO 👀

munge(1), unmunge(1), munge(3), munge_ctx(3), munge_enum(3), munge(7), munged(8), mungekey(8).

https://github.com/dun/munge

and that's the whole page, bestie 💖 this one came from munge-0.5.18, dated 2026-02-10, and it's the REMUNGE(1) manual page — go benchmark something and tell me your creds/sec, i'll be so proud of you 🎀✨

📦 where this page comes from