| Age | Commit message (Collapse) | Author |
|---|
|
|
|
|
|
Conflicts:
manifests/server/cron/backup.pp
|
|
* Manage /etc/mysql/mysql.conf.d
* Account security ensures
* Check mysql_exists before realizing ressources
These last two points partially revert commit
e1649647f326abeb256a73e4cb1060840f846f24
|
|
|
|
Currently, if you have the bad idea of setting backup_cron or
optimize_cron to true in the main class and later to change it back to
false, the associated cronjob will stay in place even though you don't
want it.
To make this option more consistant, let's remove cron jobs (and backup
helper scripts) when the appropriate option is set to false.
Signed-off-by: Gabriel Filion <gabster@lelutin.ca>
|
|
Conflicts:
files/scripts/optimize_tables.rb
manifests/server/base.pp
|
|
* EL7 uses mariadb & systemd -> adjust setpasswd script to that
* move the security ensurance to the setpassword script, as it's
easier to ensure that there
|
|
|
|
|
|
|
|
|
|
|
|
By default, time will be between midnight and 7:00 any day of the week.
The values are currently hard-coded. This can have serious I/O
repercussions on a server with multiple VMs that run mysql since they
will all run their optimizations simultaneously.
|
|
|
|
To workaround a limitation of the exec provider within puppet, we
do the unless check no within the script itself and ensure that
we use the password there.
https://labs.riseup.net/code/issues/6638
|
|
this should make it easier to override values from my.cnf, or to set
other values that aren't in the main config file.
|
|
|
|
|
|
|
|
http://bugs.mysql.com/bug.php?id=68376
|
|
|
|
|
|
|
|
Conflicts:
files/config/my.cnf.Debian
manifests/server/base.pp
manifests/server/munin/default.pp
manifests/server/nagios.pp
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Up to now we used an empty backup location... :/
|
|
Conflicts:
manifests/server/cron/backup.pp
|
|
|
|
|
|
Conflicts:
files/munin/mysql_connections
manifests/server/base.pp
manifests/server/munin/default.pp
|
|
Conflicts:
manifests/server/base.pp
|
|
check_hostname is not defined. We need to use check_host instead
|
|
|
|
|
|
|
|
|
|
The current procedure of setting the root MySQL password leaks the root
password by giving it to the setmysqlpass.sh script on the command line.
This means that during the couple of seconds that the script is
executing, the password is visible in the process list!
Since we're already writing the password in the /root/.my.cnf file, make
the setmysqlpass.sh script parse this file to retrieve the password
instead of receiving it from a command line argument.
Also, in some shells the 'echo' command might appear in the process
list. Use a heredoc notation to create the output without using a
command.
Signed-off-by: Gabriel Filion <lelutin@gmail.com>
|
|
The current procedure of setting the root MySQL password leaks the root
password by giving it to the setmysqlpass.sh script on the command line.
This means that during the couple of seconds that the script is
executing, the password is visible in the process list!
Since we're already writing the password in the /root/.my.cnf file, make
the setmysqlpass.sh script parse this file to retrieve the password
instead of receiving it from a command line argument.
Also, in some shells the 'echo' command might appear in the process
list. Use a heredoc notation to create the output without using a
command.
Signed-off-by: Gabriel Filion <lelutin@gmail.com>
|
|
location of where they are
|
|
Parameter unless failed: 'mysqladmin -uroot status > /dev/null' is both unqualifed and specified no search path at /etc/puppet/modules/mysql/manifests/server/base.pp:62
unless you have set globally:
Exec { path => "/usr/bin:/usr/sbin/:/bin:/sbin:/usr/local/bin:/usr/local/sbin" }
|
