Tracking down a Zsh history data loss bug

(michael.stapelberg.ch)

75 points | by ingve 12 hours ago

11 comments

  • mmh0000 10 hours ago
    I have nearly a decade of zsh history. Reading that article I came to the conclusion that I may have been hit by that bug in the past but I haven’t noticed.

    Then I kept reading and the author mentions accidentally exporting HISTFILE[1] and I screamed in terror and ran to my computer as I realized a mistake I’ve been making for…ever.

    I am now both happy and sad I read this article.

    [1] https://github.com/stapelberg/configfiles/commit/32dcda0f49a...

    • PyWoody 8 hours ago
      I'm always curious what people get out of their terminal history. About 98% of mine is embarrassing and made for the ether.

      Have you ever looked back on your history?

      • opan 5 hours ago
        Some things are worth an alias, or a script, some things aren't quite worth either but you still wanna run them again in the future. I think that's where history helps. Awkward niche one-liners. Also sometimes you do something for the first time, take a bit to figure it out, then 6-12 months later it's easier to check your shell history than relearn the process from scratch again. Also sometimes you may want to run something new that's very similar to an old thing you ran, like maybe you forget which rsync args you've been using lately and you wanna use the same ones but on different files. Search up your last rsync, edit paths.

        I used to start my history over with each PC, but last year when I upgraded my primary machine I decided to copy over my browser history and shell history in addition to the usual dotfiles and stuff. It's honestly been really nice and convenient. It almost feels like cheating that I can see stuff older than the machine that I did.

      • unsnap_biceps 7 hours ago
        I do to find a command that I know I ran that did something but I don't remember exactly how I did it. It's rare, but it's useful to be able to.
      • fragmede 7 hours ago
        With Atuin, I hit ctrl-r and go to directory mode, and get the commands I ran the last time I was in that directory.
        • musicmatze 1 hour ago
          Same here, atuin is such a time-saver, especially when it comes "oh dang, I ran this command on another host but I need it here now". It just works as you'd expect!
      • inkyoto 6 hours ago
        To recover the past working context, not necessarily looking up a specific command (but that, too, – on certain occasions).

        I also hold over a decade worth of zsh history and revisit it from time to time to reconstruct the full memory of what I was working on N years ago.

      • TacticalCoder 7 hours ago
        > About 98% of mine is embarrassing and made for the ether.

        Same

        > Have you ever looked back on your history?

        All the time? I search in my history, re-launch past commands, etc.

        Now it's typically recent history, usually same day.

        I know about the shortcuts etc. but I also need to at times pipe history into other commands so I've got a two letters alias:

            h?
        
        Which greps into my history. I use that h? all the time.
  • pratyahava 3 hours ago
    this is an example of overcomplicated solutions that could be avoided with the tool we already have for years - file system - why do this "heroic" effort of "cleverly" putting everything in one file from many sessions if we could just write command history of every session into a new separate file in a directory and read all history files from the dir instead of reading one file.
    • jasode 2 hours ago
      >why do this "heroic" effort of "cleverly" putting everything in one file from many sessions if we could just write command history of every session into a new separate file in a directory

      For "normal" use in the terminal, a unified single history file is easier to deal with. For example, yesterday I was doing some forensics on the existence of mystery files in my backups from years ago and it was nice just loading up a single history file in the editor ... page up and page down repeatedly to eventually reconstruct the sequence of commands that explained the mystery files. The alternate idea of separate history files is less ergonomic for that. I'd have to open each history file (potentially hundreds) one by one in the editor. Trying to treat separate history files as "virtual single file" by using grep on the whole batch wouldn't work because I didn't know ahead of time what string to grep for. It required manually eyeballing the commands to consider which ones were the culprit. (Yes, if history files were separate, I could also concatenate "cat" them all to a temp file and load that into an editor ... but a history file that's already unified means I don't have to bother with that step and delete that temp file after I'm done.)

      >HISTFILE="$HOME/zsh/$(date '+%y:%m%d:%H%M')-$$"

      However, for "not normal" usage of a shell in a coding editor, I do create separate history files with a timestamp like your suggestion. In dev environments, I tend to create lots of dirty throwaway shell commands and I don't want them polluting the "normal" shell history.

      • pratyahava 1 hour ago
        for viewing all the history files at once this is one of the simplest options

          cat $HOME/zsh/*
        
        should be easy to copy-paste or pipe it to an editor.

        i mean, the problem of viewing all history files at once is much easier than writing to the same one file from multiple sessions.

        • jasode 58 minutes ago
          >cat $HOME/zsh/*

          It's still inconvenient because the .bash_history and .zsh_history files I was studying were inside of .tar.xz and .zip backup files. I wouldn't want to crack open those archives just to concatenate a hypothetical set of separate history files to single temp files. Instead, the GUI archive browser I used just highlights a single history file and loads it into the editor.

    • pratyahava 3 hours ago
      zshrc for saving history:

        mkdir -p $HOME/zsh
        HISTFILE="$HOME/zsh/$(date '+%y:%m%d:%H%M')-$$"
        echo "HISTFILE $HISTFILE"
      
      for easily accessing the history without running grep... will figure it out later :)))
  • conferza 44 minutes ago
    A very interesting investigation, thanks for sharing
  • chillpenguin 6 hours ago
    I ran into this a few years ago (or I ran into a very similar bug). I started backing up my history file regularly because it was so annoying to lose all that history. I'll keep backing it up, but this fix is appreciated!
  • nubinetwork 6 hours ago
    That's a bug? Happens to me with bash all the time, all I have to do is open 2 terminals at the same time... whichever one I close last is the one that writes its history. /shrug
    • mmh0000 6 hours ago
      This is exactly why I stopped using Bash around 2012. I was soooo tired of losing random shell history.

      If you haven't looked into ZSH, it has some really nice customizations. Notably, from my config[1]:

        # Remove dups
        setopt HIST_FIND_NO_DUPS
        setopt HIST_IGNORE_DUPS
        # Don't  log commands starting with a space
        setopt HIST_IGNORE_SPACE
        # Replcae bang-command !34 with the actual command in the history
        setopt BANG_HIST
        # Remove extraneous spaces
        setopt HIST_REDUCE_BLANKS
        # Write the history file in the ":start:elapsed;command" format
        setopt EXTENDED_HISTORY
        # Record run-time of the command
        setopt INC_APPEND_HISTORY_TIME
      
      [1] https://doc.xn0.org/.zshrc
    • praash 2 hours ago
      Running bash inside zsh continuously destroyed my history for the last 3 years until I figured that HISTFILE was exported and inherited by bash.
    • valleyer 6 hours ago
      That's what zsh's INC_APPEND_HISTORY (mentioned in TFA) avoids. Bash may have an equivalent.
  • aclindsa 10 hours ago
    Nice work! I have felt like I lost zsh history before but never looked into it.
  • myshapeprotocol 7 hours ago
    Tracking down subtle data loss edge cases in shell history internals requires absolute precision. Great debugging write-up.
  • TZubiri 10 hours ago
    Does zsh have that 2000 command limit by default?

    You can't expect much from a system that has those defaults, I'm all for traditions, but if I were to depend on a system for command history, it wouldn't be anything that reads a bash_history, a revolution is needed, not incremental optimizations

    P.s: what I do is set it to unlimited on both size and line count, but it's not a forensic grade audit trace, we'd need an OS, or ssh command logger, preferably one that writes to an external disk, but it can be to a root controlled file, definitely not to a user owned file.

    Security protects not only against attackers, but against bugs, a user's command history should not be deletable by user. Anything else is a wrong architecture that we are just carrying by inertia and laziness.

  • kevinbaiv 10 hours ago
    [dead]
  • fragmede 8 hours ago
    Are people not just using http://atuin.sh these days?
    • lap007 3 hours ago
      This bug is the very reason I started using atuin, in fact. And the reason my .zshrc ends with this line:

      [[ -n `find . -maxdepth 1 -name .zsh_history -size -10k` ]] && echo "ZSH history is empty!!!"

    • hn92726819 6 hours ago
      Absolutely not. It felt so laggy and buggy ~1 year ago. I think resizing my screen broke it at the time? And now it's loaded with AI and shortcuts overrides.

      I switched to my custom fork of stinkpot posted a few days ago here, and it's so nice. I did have to add current-for filtering, but that was easy.

    • NSPG911 6 hours ago
      i dont think i ever needed cross platform cross shell syncing of history
    • a2ff6eeb0 8 hours ago
      Nah. I don't use the shell anymore. Claude knows how to use it better than I do.