UNMUNGE(1)

📦
version 0.5.18 · 5 versions
, in arch rolling, fedora 43, fedora 44, nixpkgs unstable

💖 UNMUNGE — the MUNGE credential decoder 💖

okay bestie, so this is unmunge, and it lives in the MUNGE Uid 'N' Gid Emporium family — it's literally the reverse-uno card of the munge crew. 🎀

✨ SYNOPSIS ✨

unmunge [OPTION]...

🦋 DESCRIPTION 🦋

So like, the unmunge program validates a MUNGE credential — think of a credential like one that was made by the munge program. She's the decoder. She takes the sparkly sealed envelope and opens it up. 💌

By default? The credential is read from stdin, and the metadata and the payload get written to stdout. And when the metadata and payload land on the same stream, they're separated by a blank line. Cute, right? A lil breathing room between them. 🫶

👑 OPTIONS 👑

  • -h, --help — shows you a summary of all the command-line options, iykyk.
  • -L, --license — displays the license info. Legal slay.
  • -V, --version — displays version info. 💅
  • -i, --input path — pull the credential in from the file you specify.
  • -n, --no-output — discard all output, both metadata and payload. Nothing to see here, moving on. 🙈
  • -m, --metadata path — write the metadata out to the file you specify.
  • -o, --output path — write the payload out to the file you specify.
  • -k, --keys string — pick a subset of metadata keys to output. The keys are case-insensitive and delimited by whitespace, commas, semicolons, or periods — just as long as the shell treats the whole string as a single argument (e.g., wrap it in quotes, bestie). Invalid keys get ignored, no drama. And if you don't specify a subset at all? All available keys are selected by default. ✨
  • -K, --list-keys — displays a list of all the metadata keys. Window shopping, basically.
  • -N, --numeric — display metadata values numerically. This skips the conversions from IP addresses to hostnames, seconds to date and time strings, UIDs to user names, GIDs to group names, and cipher/mac/zip type lookups. Raw numbers only, no glow-up.
  • -S, --socket path — specify the local socket for connecting with munged.
  • --ignore-ttl — ignore expired, rewound, and replayed errors. Living in denial, but make it valid.
  • --ignore-replay — ignore replayed errors. Just that one. 🍓

🌸 METADATA KEYS 🌸

These are the metadata keys she supports, bestie:

  • STATUS — the status of the credential decode operation.
  • ENCODE_HOST — the address of the host on which the credential was encoded.
  • ENCODE_TIME — the time at which the credential was encoded (according to the local clock of the host that encoded it).
  • DECODE_TIME — the time at which the credential was decoded (according to the local clock of the host that decoded it).
  • TTL — the time-to-live value (in seconds) placed within the credential.
  • CIPHER — the cipher type used to encode the credential.
  • MAC — the MAC type used to encode the credential.
  • ZIP — the compression type used to encode the credential.
  • UID — the user ID of the process that encoded the credential.
  • GID — the group ID of the process that encoded the credential.
  • UID_RESTRICTION — the user ID restriction placed within the credential.
  • GID_RESTRICTION — the group ID restriction placed within the credential.
  • LENGTH — the length (in bytes) of the payload.

💀 EXIT STATUS 💀

The unmunge program returns an exit code that corresponds to the return code of munge_decode(). On success, she returns a zero exit code, which means the credential is valid — periodt. ✅ On error, she prints an error message to stderr and returns a non-zero exit code. 😭

🧚 AUTHOR 🧚

Chris Dunlap <cdunlap@llnl.gov>

Copyright (C) 2007-2025 Lawrence Livermore National Security, LLC. Copyright (C) 2002-2007 The Regents of the University of California.

MUNGE is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

Additionally for the MUNGE library (libmunge), you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

🌈 SEE ALSO 🌈

https://github.com/dun/munge

muah 💋 that's the whole page, bestie. This was munge-0.5.18 from 2026-02-10 — go decode something iconic. 🦋✨👑

📦 where this page comes from