MDEV-8775 enabling encryption is too error-prone

create a "preset" file to enable all encryption options at once
MariaDB · Sep 9, 2015 · 416b811 · 416b811
1 parent 7bd2f20
commit 416b811
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 0 deletions.
diff --git a/support-files/CMakeLists.txt b/support-files/CMakeLists.txt
@@ -93,6 +93,8 @@ IF(UNIX)
               COMPONENT Client)
       INSTALL(FILES rpm/server.cnf DESTINATION ${INSTALL_SYSCONF2DIR}
               COMPONENT IniFiles)
+      INSTALL(FILES rpm/enable_encryption.preset DESTINATION ${INSTALL_SYSCONF2DIR}
+              COMPONENT IniFiles)
     ENDIF()
 
     # This is for SuSE:

diff --git a/support-files/rpm/enable_encryption.preset b/support-files/rpm/enable_encryption.preset
@@ -0,0 +1,16 @@
+#
+# !include this file into your my.cnf (or any of *.cnf files in /etc/my.cnf.d)
+# and it will enable data at rest encryption. This is a simple way to
+# ensure that everything that can be encrypted will be and your
+# data will not leak unencrypted.
+#
+# If in the future more encryption related options will be implemented,
+# this file will enable them too.
+#
+[mariadb]
+aria-encrypt-tables
+encrypt-binlog
+encrypt-tmp-disk-tables
+encrypt-tmp-files
+loose-innodb-encrypt-log
+loose-innodb-encrypt-tables