آموزش نصب و راه‌اندازی رپلیکیشن MariaDB در اوبونتو و دبیان

هر دو میزبان تازه؛ Bash با حساب مدیریتی موجود.

(
set -euo pipefail
. /etc/os-release
printf '%s %s\n' "$ID" "$VERSION_ID"
dpkg --print-architecture
ip -br address
timedatectl status
df -h / /var
installed=$(dpkg-query -W -f='${binary:Package} ${db:Status-Status}\n')
if printf '%s\n' "$installed" | grep -E '^(mariadb-server|mysql-server)([-:][^ ]*)? installed$' >/dev/null; then
  echo 'Existing database server: STOP' >&2; exit 1
fi
for path in /var/lib/mariadb /var/lib/mysql /etc/mysql/mariadb.conf.d /etc/mariadb/mariadb.conf.d; do
  if sudo test -e "$path"; then echo "Existing state: $path; STOP" >&2; exit 1; fi
done
)

سرور اصلی

(
set -euo pipefail
state=$(sudo env LC_ALL=C ufw status verbose)
printf '%s\n' "$state"
printf '%s\n' "$state" | grep -E '^Status: active$' >/dev/null
printf '%s\n' "$state" | grep -F 'Default: deny (incoming)' >/dev/null
sudo ufw allow in on ens18 from 10.20.0.11 to 10.20.0.10 port 3306 proto tcp
sudo ufw status numbered
)

هر دو میزبان تازه؛ Bash با حساب مدیریتی موجود.

(
set -euo pipefail
sudo apt-get update
apt-cache policy mariadb-server mariadb-client
sudo apt-get install -y mariadb-server mariadb-client openssl ca-certificates nano
dpkg-query -W -f='${Package} ${Version}\n' mariadb-server mariadb-client
sudo systemctl enable --now mariadb
sudo mariadb -NBe 'SELECT VERSION();'
sudo ss -lntp 'sport = :3306'
)

سرور اصلی

(
set -euo pipefail
sudo install -d -o root -g mysql -m 0750 /etc/mariadb/tls
sudo install -o root -g mysql -m 0640 /root/academy-pki/ca.pem /etc/mariadb/tls/ca.pem
sudo install -o root -g mysql -m 0640 /root/academy-pki/primary-fullchain.pem /etc/mariadb/tls/server.pem
sudo install -o root -g mysql -m 0640 /root/academy-pki/primary-key.pem /etc/mariadb/tls/server.key
sudo openssl x509 -in /etc/mariadb/tls/server.pem -noout -subject -issuer -dates -ext subjectAltName
sudo openssl x509 -in /etc/mariadb/tls/server.pem -checkend 86400 -noout
sudo openssl x509 -in /etc/mariadb/tls/server.pem -pubkey -noout | openssl sha256
sudo openssl pkey -in /etc/mariadb/tls/server.key -pubout | openssl sha256
sudo -u mysql test -r /etc/mariadb/tls/server.key
)

سرور اصلی

sudo nano /etc/mariadb/mariadb.conf.d/90-academy-replication.cnf

محتوای فایل؛ در فایل مشخص‌شده ذخیره شود، نه در پوسته.

[mariadb]
server_id=101
bind_address=10.20.0.10
log_bin=/var/lib/mariadb/primary-bin
binlog_format=ROW
gtid_domain_id=0
gtid_strict_mode=ON
log_slave_updates=ON
sync_binlog=1
innodb_flush_log_at_trx_commit=1
binlog_expire_logs_seconds=604800
read_only=OFF
ssl_ca=/etc/mariadb/tls/ca.pem
ssl_cert=/etc/mariadb/tls/server.pem
ssl_key=/etc/mariadb/tls/server.key

سرور اصلی

(
set -euo pipefail
sudo mariadbd --verbose --help >/dev/null
sudo systemctl restart mariadb
systemctl is-active mariadb
sudo mariadb -e "SHOW VARIABLES WHERE Variable_name IN ('server_id','log_bin','binlog_format','gtid_domain_id','gtid_strict_mode','read_only','have_ssl','sync_binlog','innodb_flush_log_at_trx_commit','binlog_expire_logs_seconds');"
sudo ss -lntp 'sport = :3306'
)
sudo mariadb -e "SELECT @@datadir;"

رپلیکا

(
set -euo pipefail
sudo install -d -o root -g mysql -m 0750 /etc/mariadb/tls
sudo install -o root -g mysql -m 0640 /root/academy-pki/ca.pem /etc/mariadb/tls/ca.pem
sudo -u mysql test -r /etc/mariadb/tls/ca.pem
getent ahostsv4 db-primary.example.internal
)