Skip to content

Commit 416b811

Browse files
committed
MDEV-8775 enabling encryption is too error-prone
create a "preset" file to enable all encryption options at once
1 parent 7bd2f20 commit 416b811

File tree

2 files changed

+18
-0
lines changed

2 files changed

+18
-0
lines changed

support-files/CMakeLists.txt

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -93,6 +93,8 @@ IF(UNIX)
9393
COMPONENT Client)
9494
INSTALL(FILES rpm/server.cnf DESTINATION ${INSTALL_SYSCONF2DIR}
9595
COMPONENT IniFiles)
96+
INSTALL(FILES rpm/enable_encryption.preset DESTINATION ${INSTALL_SYSCONF2DIR}
97+
COMPONENT IniFiles)
9698
ENDIF()
9799

98100
# This is for SuSE:
Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
#
2+
# !include this file into your my.cnf (or any of *.cnf files in /etc/my.cnf.d)
3+
# and it will enable data at rest encryption. This is a simple way to
4+
# ensure that everything that can be encrypted will be and your
5+
# data will not leak unencrypted.
6+
#
7+
# If in the future more encryption related options will be implemented,
8+
# this file will enable them too.
9+
#
10+
[mariadb]
11+
aria-encrypt-tables
12+
encrypt-binlog
13+
encrypt-tmp-disk-tables
14+
encrypt-tmp-files
15+
loose-innodb-encrypt-log
16+
loose-innodb-encrypt-tables

0 commit comments

Comments
 (0)