MDEV-37726 wsrep-new-cluster and wsrep-start-position in wrong directory with wrong selinux permissions #4316
Conversation
…ory with wrong selinux permissions After moving the systemd service to using environment files instead of `systemctl set-environment` in 11.6 (MDEV-19210), they (wsrep-new-cluster and wsrep-start-position) are located in /var/lib/mysql along with the socket file in Fedora/RHEL-based distros. This causes them to have incorrect selinux permissions and therefore be not readable by systemd. A solution is to generate these files in the run directory, instead, which already has correct selinux label mysqld_var_run_t mysql-selinux-1.0.12. Dissociating these files and the socket in CMake configs can also prove useful for other things. This also corrects some of the duplicate code in the build scripts and made INSTALL_RUNDATADIR into a proper location and used this for the tmpfiles where the temporary files are created. Moved Debian's location from the /run/mysqld/ (previously based on INSTALL_UNIX_ADDRDIR), to /run/mariadb as its a temporary location controlled by tmpfiles.
grooverdan
added
the
MariaDB Foundation
|
@eworm-de happy with the variant of your original contribution? |
|
In Arch Linux we have Happy with this, please go ahead! Thanks! |
|
Scratch builds in fedora rawhide succeed and after starting/connecting to/using galera locally, it seems to work as expected. |
|
moving this over to #4329 as others wanted a 10.11 fix of the original env file based galera bootstrap. |
|
Oh! So this will make its way into 11.4 branch (11.4.9) as well? |
If the reviewers are happy, yes. |
|
because #4329 superseeds this putting this to draft. |
3 participants
Description
After moving the systemd service to using environment files instead of
systemctl set-environmentin 11.6 (MDEV-19210), they (wsrep-new-cluster and wsrep-start-position) are located in /var/lib/mysql along with the socket file inFedora/RHEL-based distros. This causes them to have incorrect selinux permissions and therefore be not readable by systemd.
A solution is to generate these files in the run directory, instead, which already has correct selinux label mysqld_var_run_t mysql-selinux-1.0.12. Dissociating these files and the socket in CMake configs can also prove useful for other things.
This also corrects some of the duplicate code in the build scripts and made INSTALL_RUNDATADIR into a proper location and used this for the tmpfiles where the temporary files are created.
Moved Debian's location from the /run/mysqld/ (previously based on INSTALL_UNIX_ADDRDIR), to /run/mariadb as its a temporary location controlled by tmpfiles.
Release Notes
per JIRA entry
How can this PR be tested?
Run galera_new_cluster on Selinux enabled Fedora/RHEL.
Basing the PR against the correct MariaDB version
mainbranch.PR quality check