etc/sv/mysql/configure.sh

   1 rule apt_get_install mysql-server-5.5
   2 rule insserv_remove  mysql
   3
   4 eval "home=~$sv"
   5
   6 rule adduser mysql \
   7  --disabled-login \
   8  --disabled-password \
   9  --group \
  10  --home "$home" \
  11  --shell /bin/false \
  12  --system
  13 rule adduser mysql-data \
  14  --disabled-login \
  15  --disabled-password \
  16  --group \
  17  --home "$home"/data \
  18  --no-create-home \
  19  --shell /bin/false \
  20  --system
  21 sudo usermod --home "$home" mysql
  22 sudo adduser mysql mysql-data
  23 sudo install -d -m 755 -o mysql -g mysql \
  24  "$home" \
  25  "$home"/bin
  26 sudo rm -rf /etc/mysql
  27 sudo install -d -m 750 -o mysql -g mysql-data \
  28  /etc/mysql \
  29  /etc/mysql/conf.d \
  30  "$home"/etc
  31 sudo ln -fns \
  32             /etc/mysql \
  33  "$home"/etc/mysql
  34 sudo install -m 644 -o mysql -g mysql \
  35  "$tool"/etc/mysql/my.cnf \
  36         /etc/mysql/my.cnf
  37 if sudo test ! -d "$home"/data
  38  then
  39         sudo install -d -m 750 -o mysql -g mysql-data \
  40          "$home"/data
  41         sudo -u mysql mysql_install_db \
  42          --datadir="$home"/data \
  43          --no-defaults
  44  fi
  45
  46 sudo find "$tool"/etc/mysql/bin/ -type f -perm /+x -exec \
  47         install -m 755 -o root -g root \
  48          -t /home/mysql/bin/ {} +
  49
  50 sudo ln -fns \
  51         ../sv/"$sv" \
  52  /etc/service/"$sv"
  53 rule runit_sv_start "$sv"
  54 while ! sudo -u mysql mysql -u mysql </dev/null
  55 do sleep 1; done
  56
  57 # NOTE:
  58 # - ajoute l'accès par socket Unix à mysql
  59 # - ajoute les droits de super-utilisateur à mysql
  60 # - supprime l'accès par mot-de-passe à root
  61 # - supprime les bases de données de l'utilisateurice anonyme
  62 # - supprime l'utilisateurice anonyme
  63 # NOTE: mémo :
  64 #   GRANT USAGE ON *.* TO 'root'@'*' IDENTIFIED WITH auth_socket;
  65 #   CREATE USER 'root'@'localhost' IDENTIFIED WITH auth_socket;
  66 #   UPDATE mysql.user SET Password='' WHERE user='root';
  67 #   DELETE FROM mysql.user WHERE user = 'root' AND host NOT IN ('localhost', '127.0.0.1', '::1');
  68 sudo mysql -u root --batch --verbose <<-EOF
  69         DELETE FROM mysql.user WHERE user = 'root' and plugin = '';
  70         DROP PROCEDURE IF EXISTS mysql.create_user_mysql;
  71         DELIMITER //
  72         CREATE PROCEDURE mysql.create_user_mysql ()
  73                         BEGIN
  74                                 IF NOT (EXISTS (SELECT User
  75                                         FROM mysql.user
  76                                         WHERE User='mysql'
  77                                         AND Host='localhost'
  78                                         LIMIT 1))
  79                                  THEN GRANT ALL PRIVILEGES ON *.* TO 'mysql'@'localhost' IDENTIFIED WITH auth_socket;
  80                                  END IF;
  81                          END;
  82          //
  83         CALL mysql.create_user_mysql();
  84         DROP PROCEDURE mysql.create_user_mysql;
  85         UPDATE mysql.user SET grant_priv='Y',super_priv='Y' WHERE user='mysql';
  86         DELETE FROM mysql.db   WHERE user = '';
  87         DELETE FROM mysql.user WHERE user = '';
  88         DROP PROCEDURE IF EXISTS mysql.create_user;
  89         CREATE PROCEDURE mysql.create_user (username VARCHAR(16), hostname VARCHAR(60))
  90                         BEGIN
  91                                 IF NOT (EXISTS (SELECT User
  92                                         FROM mysql.user
  93                                         WHERE User = username
  94                                         AND Host = hostname
  95                                         LIMIT 1))
  96                                  THEN
  97                                         SET @QUERY = CONCAT("CREATE USER ", username, "@", hostname, " IDENTIFIED WITH auth_socket");
  98                                         PREPARE stmt FROM @QUERY;
  99                                         EXECUTE stmt;
 100                                  END IF;
 101                          END;
 102          //
 103         FLUSH PRIVILEGES;
 104         EOF