mirror of
https://github.com/aljazceru/addons.git
synced 2025-12-18 13:44:20 +01:00
bd438e7570
* mariadb: Pin add-on to Alpine 3.11 * mariadb: Redirect MariaDB error log to add-on logs * mariadb: Remove grant and host options * mariadb: Add support for the mysql service * mariadb: Use a more secure default on install * mariadb: Skip DNS name resolving * mariadb: Improve integrity checks and recovery * mariadb: Small tweaks to shell scripts * mariadb: Tune MariaDB for lower memory usage * mariadb: Update documentation to match changes * mariadb: Update changelog, bump version 2.0 * mariadb: Fix log ouput redirect for non-local builds * Close port to world * mariadb: Fix issue with user permissions * mariadb: Ensure we are using a proper collation set * mariadb: Add upgrade process for internal mariadb system tables * mariadb: Change default username from hass to homeassistant * mariadb: Update changelog * mariadb: Update readme Co-authored-by: Pascal Vizeli <pascal.vizeli@syshack.ch>
125 lines
4.2 KiB
Bash
Executable File
125 lines
4.2 KiB
Bash
Executable File
#!/usr/bin/env bashio
|
|
set -e
|
|
|
|
MARIADB_DATA=/data/databases
|
|
NEW_INSTALL=false
|
|
|
|
# Init mariadb
|
|
if ! bashio::fs.directory_exists "${MARIADB_DATA}"; then
|
|
bashio::log.info "Create a new mariadb initial system"
|
|
mysql_install_db --user=root --datadir="${MARIADB_DATA}" --skip-name-resolve --skip-test-db > /dev/null
|
|
NEW_INSTALL=true
|
|
else
|
|
bashio::log.info "Using existing mariadb initial system"
|
|
fi
|
|
|
|
# Redirect log output
|
|
rm -f /data/databases/mariadb.err
|
|
ln -s /proc/1/fd/1 /data/databases/mariadb.err
|
|
|
|
# Start mariadb
|
|
bashio::log.info "Starting MariaDB"
|
|
mysqld_safe --datadir="${MARIADB_DATA}" --user=root < /dev/null &
|
|
MARIADB_PID=$!
|
|
|
|
# Wait until DB is running
|
|
while ! mysql -e "" 2> /dev/null; do
|
|
sleep 1
|
|
done
|
|
|
|
bashio::log.info "Check data integrity and fix corruptions"
|
|
mysqlcheck --no-defaults --databases mysql --fix-db-names --fix-table-names || true
|
|
mysqlcheck --no-defaults --databases mysql --check --check-upgrade --auto-repair || true
|
|
mysqlcheck --no-defaults --all-databases --skip-database=mysql --fix-db-names --fix-table-names || true
|
|
mysqlcheck --no-defaults --all-databases --skip-database=mysql --check --check-upgrade --auto-repair || true
|
|
|
|
bashio::log.info "Ensuring internal database upgrades are performed"
|
|
mysql_upgrade --silent
|
|
|
|
# Set default secure values after inital setup
|
|
if bashio::var.true "${NEW_INSTALL}"; then
|
|
# Secure the installation.
|
|
mysql <<-EOSQL
|
|
SET @@SESSION.SQL_LOG_BIN=0;
|
|
DELETE FROM
|
|
mysql.user
|
|
WHERE
|
|
user NOT IN ('mysql.sys', 'mysqlxsys', 'root', 'mysql', 'proxies_priv')
|
|
OR host NOT IN ('localhost');
|
|
DELETE FROM
|
|
mysql.proxies_priv
|
|
WHERE
|
|
user NOT IN ('mysql.sys', 'mysqlxsys', 'root', 'mysql', 'proxies_priv')
|
|
OR host NOT IN ('localhost');
|
|
DROP DATABASE IF EXISTS test;
|
|
FLUSH PRIVILEGES;
|
|
EOSQL
|
|
fi
|
|
|
|
# Init databases
|
|
bashio::log.info "Ensure databases exists"
|
|
for database in $(bashio::config "databases"); do
|
|
bashio::log.info "Create database ${database}"
|
|
mysql -e "CREATE DATABASE ${database};" 2> /dev/null || true
|
|
done
|
|
|
|
# Init logins
|
|
bashio::log.info "Ensure users exists and are updated"
|
|
for login in $(bashio::config "logins|keys"); do
|
|
USERNAME=$(bashio::config "logins[${login}].username")
|
|
PASSWORD=$(bashio::config "logins[${login}].password")
|
|
|
|
if mysql -e "SET PASSWORD FOR '${USERNAME}'@'%' = PASSWORD('${PASSWORD}');" 2> /dev/null; then
|
|
bashio::log.info "Update user ${USERNAME}"
|
|
else
|
|
bashio::log.info "Create user ${USERNAME}"
|
|
mysql -e "CREATE USER '${USERNAME}'@'%' IDENTIFIED BY '${PASSWORD}';" 2> /dev/null || true
|
|
fi
|
|
done
|
|
|
|
# Init rights
|
|
bashio::log.info "Init/Update rights"
|
|
for right in $(bashio::config "rights|keys"); do
|
|
USERNAME=$(bashio::config "rights[${right}].username")
|
|
DATABASE=$(bashio::config "rights[${right}].database")
|
|
|
|
bashio::log.info "Alter rights for ${USERNAME} to ${DATABASE}"
|
|
mysql -e "GRANT ALL PRIVILEGES ON ${DATABASE}.* TO '${USERNAME}'@'%';" 2> /dev/null || true
|
|
done
|
|
|
|
# Generate service user
|
|
if ! bashio::fs.file_exists "/data/secret"; then
|
|
pwgen 64 1 > /data/secret
|
|
fi
|
|
SECRET=$(</data/secret)
|
|
mysql -e "CREATE USER 'service'@'172.30.32.%' IDENTIFIED BY '${SECRET}';" 2> /dev/null || true
|
|
mysql -e "CREATE USER 'service'@'172.30.33.%' IDENTIFIED BY '${SECRET}';" 2> /dev/null || true
|
|
mysql -e "GRANT ALL PRIVILEGES ON *.* TO 'service'@'172.30.32.%' WITH GRANT OPTION;" 2> /dev/null || true
|
|
mysql -e "GRANT ALL PRIVILEGES ON *.* TO 'service'@'172.30.33.%' WITH GRANT OPTION;" 2> /dev/null || true
|
|
|
|
# Flush privileges
|
|
mysql -e "FLUSH PRIVILEGES;" 2> /dev/null || true
|
|
|
|
# Send service information to the Supervisor
|
|
PAYLOAD=$(\
|
|
bashio::var.json \
|
|
host "$(hostname)" \
|
|
port "^3306" \
|
|
username "service" \
|
|
password "${SECRET}"
|
|
)
|
|
if bashio::services.publish "mysql" "${PAYLOAD}"; then
|
|
bashio::log.info "Successfully send service information to Home Assistant."
|
|
else
|
|
bashio::log.warning "Service message to Home Assistant failed!"
|
|
fi
|
|
|
|
# Register stop
|
|
function stop_mariadb() {
|
|
bashio::services.delete "mysql"
|
|
mysqladmin shutdown
|
|
}
|
|
trap "stop_mariadb" SIGTERM SIGHUP
|
|
|
|
wait "${MARIADB_PID}"
|