Skip to content

Updates to Debian9 changed to Debian 12 and other updated information for passwords. #7309

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 5 commits into
base: develop
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion .vscode/settings.json
Original file line number Diff line number Diff line change
@@ -1,3 +1,4 @@
{
"git.autorefresh": false
"git.autorefresh": false,
"powershell.pester.codeLens": false
}
Original file line number Diff line number Diff line change
@@ -1,16 +1,16 @@
---
slug: how-to-install-mariadb-on-debian-9
title: "Installing MariaDB on Debian 9"
title_meta: "How to Install MariaDB on Debian 9"
description: "This guide shows how to install and configure the MariaDB server on Debian 9."
og_description: "MariaDB is a robust, scalable and reliable SQL Server that can serve as a drop-in replacement for MySQL. This guide shows how to install and configure it on Debian 9."
slug: how-to-install-mariadb-on-debian-12
title: "Installing MariaDB on Debian 12"
title_meta: "How to Install MariaDB on Debian 12"
description: "This guide shows how to install and configure the MariaDB server on Debian 12."
og_description: "MariaDB is a robust, scalable and reliable SQL Server that can serve as a drop-in replacement for MySQL. This guide shows how to install and configure it on Debian 12 (Bookworm)."
authors: ["Ryan Syracuse"]
contributors: ["Ryan Syracuse"]
published: 2020-01-31
keywords: ["mariadb", "Debian 9", "debian", "database", "mysql"]
published: 2020-01-30
keywords: ["mariadb", "Debian 12", "debian", "bookworm", "database", "mysql"]
license: '[CC BY-ND 4.0](https://creativecommons.org/licenses/by-nd/4.0)'
aliases: ['/databases/mariadb/how-to-install-mariadb-on-debian-9/','/databases/mariadb/mariadb-setup-debian/']
image: Installing_MariaDB_on_Debian9.png
aliases: ['/databases/mariadb/how-to-install-mariadb-on-debian-12/','/databases/mariadb/mariadb-setup-debian/']
image: Installing_MariaDB_on_Debian12.png
external_resources:
- '[MariaDB Knowledge Base](https://mariadb.com/kb/en)'
- '[MariaDB FAQ](https://mariadb.com/kb/en/mariadb-mariadb-faq/)'
Expand All @@ -19,22 +19,21 @@ relations:
platform:
key: how-to-install-mariadb
keywords:
- distribution: Debian 9
- distribution: Debian 12
tags: ["debian","mariadb","database"]
deprecated: true
deprecated: false
---

MariaDB is a fork of the popular cross-platform MySQL database management system and is considered a full [drop-in replacement](https://mariadb.com/kb/en/mariadb/mariadb-vs-mysql-features/) for MySQL. MariaDB was created by one of MySQL's original developers in 2009 after MySQL was acquired by Oracle during the Sun Microsystems merger. Today MariaDB is maintained and developed by the [MariaDB Foundation](https://mariadb.org/en/foundation/) and community contributors with the intention of it remaining GNU GPL software.
MariaDB is a fork of the popular cross-platform MySQL database management system and is considered a full [drop-in replacement](https://mariadb.com/kb/en/mariadb/mariadb-vs-mysql-features/) for MySQL. MariaDB was created by one of MySQL's original developers in 2009 after MySQL was acquired by Oracle during the Sun Microsystems merger. Today MariaDB is maintained and developed by the [MariaDB Foundation](https://mariadb.org/en/foundation/) and community contributors with the intention that it remain GNU GPL software.

{{< note >}}
**Note:**
This guide is written for a non-root user. Commands that require elevated privileges are prefixed with `sudo`. If you're not familiar with the `sudo` command, you can check our [Users and Groups](/docs/guides/linux-users-and-groups/) guide.
{{< /note >}}

## Before You Begin

1. If you have not already done so, create a Linode account and Compute Instance. See our [Getting Started with Linode](/docs/products/platform/get-started/) and [Creating a Compute Instance](/docs/products/compute/compute-instances/guides/create/) guides.
1. If you have not already done so, create a Linode account and Compute Instance. See our [Get Started](/docs/products/platform/get-started/) with Linode and [Creating a Linode (Compute Instance)](/docs/products/compute/compute-instances/guides/create/) guides.

1. Follow our [Setting Up and Securing a Compute Instance](/docs/products/compute/compute-instances/guides/set-up-and-secure/) guide to update your system and configure your hostname. You may also wish to set the timezone, create a limited user account, and harden SSH access.
1. Follow our [Setting Up and Securing a Compute Instance](/docs/products/compute/compute-instances/guides/set-up-and-secure/) guide to update your system and configure your hostname. You can also to set the timezone, create a limited user account, and harden SSH access.

To check your hostname run:

Expand All @@ -49,31 +48,32 @@ Install MariaDB using the package manager.

sudo apt install mariadb-server

MariaDB will bind to localhost (127.0.0.1) by default. For information on connecting to a remote database using SSH, see our [MySQL remote access guide](/docs/guides/create-an-ssh-tunnel-for-mysql-remote-access/), which also applies to MariaDB.
MariaDB will bind to localhost (127.0.0.1) by default. For information on connecting to a remote database using SSH, see our [MySQL remote access](/docs/guides/create-an-ssh-tunnel-for-mysql-remote-access/) guide, which also applies to MariaDB.

{{< note >}}
Allowing unrestricted access to MariaDB on a public IP not advised but you may change the address it listens on by modifying the `bind-address` parameter in `/etc/my.cnf`. If you decide to bind MariaDB to your public IP, you should implement firewall rules that only allow connections from specific IP addresses.
{{< /note >}}
**Note:**
Allowing unrestricted access to MariaDB on a public IP is not advised. However, you can change the address it listens on by modifying the `bind-address` parameter in `/etc/mysql/mariadb.conf.d/50-server.cnf`. If you decide to bind MariaDB to your public IP address, you should implement firewall rules that restrict access to specific IP addresses.

### MariaDB Client

The standard tool for interacting with MariaDB is the `mariadb` client, which installs with the `mariadb-server` package. The MariaDB client is used through a terminal using the `mysql` command.
The standard tool for interacting with MariaDB is the `mariadb` client, which is installed alongside the `mariadb-server` package. You can access the MariaDB client in the terminal using the `mysql` command.

### Root Login

1. Log into MariaDB as the root user:
Log into MariaDB as the root user:

sudo mysql -u root -p

1. When prompted for login credentials, hit enter. By default MariaDB will authenticate you via the **unix_socket plugin** and credentials are not required.

**Note:**
On Debian 12, MariaDB uses the `unix_socket` plugin by default. This means that if you're logged into the system as a user with root privileges, you can press **Enter** at the password prompt and still gain access--no password is required.

You'll then be presented with a welcome header and the MariaDB prompt as shown below:

{{< output >}}
MariaDB [(none)]>
{{</ output >}}

1. To generate a list of commands for the MariaDB prompt, enter `\h`. You'll then see:
To view a list of available commands, type `\h` at the prompt. You then see:

{{< output >}}
General information about MariaDB can be found at
Expand Down Expand Up @@ -113,25 +113,33 @@ MariaDB [(none)]>

### Securing the Installation

1. After accessing MariaDB as the root user of your database, enable the **mysql_native_password**
plugin to enable root password authentication:
After accessing MariaDB as the root user, you can switch from socket-based authentication to password-based authentication by enabling the `mysql_native_password` plugin:

USE mysql;
UPDATE user SET plugin='mysql_native_password' WHERE user='root';
FLUSH PRIVILEGES;
exit;

1. Run the `mysql_secure_installation` script to address several security concerns in a default MariaDB installation:
**New in MariaDB 10.11 on Debian 12:**
The `mysql_secure_installation` script now offers the option to *set a root password,** which automatically switches the authentication method from `unix_socket` to `mysql_native_password`. This is a change from earlier versions, where socket-based authentication was the default and required manual reconfiguration.

Next, run the `mysql_secure_installation` script to address several security concerns in a default MariaDB installation:

sudo mysql_secure_installation

You will be given the choice to change the MariaDB root password, remove anonymous user accounts, disable root logins outside of localhost, and remove test databases. It is recommended that you answer `yes` to these options. You can read more about the script in the [MariaDB Knowledge Base](https://mariadb.com/kb/en/mariadb/mysql_secure_installation/).
This script will guide you through several options, including:
- Setting a root password (if you haven't already).
- Removing anonymous user accounts.
- Disabling remote root logins
- Removing the test database

It's recommended that you answer `yes` to these prompts for a more secure setup (to harden your MariaDB installation against unauthorized access). You can read more about the script in the [MariaDB Knowledge Base](https://mariadb.com/kb/en/mariadb/mysql_secure_installation/).

## Using MariaDB

### Create a New MariaDB User and Database

1. Login to the database again. This time, if you set a password above, enter it at the prompt.
1. Log in to the database again. When you're prompted to log in to MariaDB again, you should enter the password only if you previously set one during an earlier step.

sudo mysql -u root -p

Expand Down Expand Up @@ -166,7 +174,6 @@ You will be given the choice to change the MariaDB root password, remove anonymo
- Two other fields are created, `first_name` and `last_name` for storing the customer's name.

1. View the new table:

SHOW TABLES;

{{< output >}}
Expand Down Expand Up @@ -207,22 +214,25 @@ If you forget your root MariaDB password, it can be reset.

sudo systemctl stop mariadb

1. Then execute the following command which will allow the database to start without loading the grant tables or networking.
1. Then execute the following command which allows the database to start without loading the grant tables or networking.

sudo systemctl set-environment MYSQLD_OPTS="--skip-grant-tables --skip-networking"

**Note:**
This method disables grant tables and networking. While it still works in Debian 12, it is temporary and insecure--use only in emergency recovery situations.

1. Restart MariaDB:

sudo systemctl start mariadb

1. Login to the MariaDB server with the root account, this time without supplying a password:
1. Log in to the MariaDB server with the root account, this time without supplying a password:

sudo mysql -u root

1. Use the following commands to reset root's password. Replace `password` with a strong password:

FLUSH PRIVILEGES;
UPDATE mysql.user SET password = PASSWORD('password') WHERE user = 'root';
ALTER USER 'root'@'localhost' IDENTIFIED BY 'your_new_password';
exit;

1. Revert the environment settings to allow the database to start with grant tables and networking:
Expand All @@ -235,4 +245,4 @@ If you forget your root MariaDB password, it can be reset.

1. You should now be able to log into the database with your new root password:

sudo mysql -u root -p
sudo mysql -u root -p
3 changes: 3 additions & 0 deletions terraform_my_demo/.gitignore
Original file line number Diff line number Diff line change
@@ -0,0 +1,3 @@
*.tfstate
*.tfvars
.terraform/
24 changes: 24 additions & 0 deletions terraform_my_demo/.terraform.lock.hcl

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

22 changes: 22 additions & 0 deletions terraform_my_demo/linode-terraform-web.tf
Original file line number Diff line number Diff line change
@@ -0,0 +1,22 @@
terraform {
required_providers {
linode = {
source = "linode/linode"
version = "3.0.0"
}
}
}

provider "linode" {
token = "191ad570c7a19f0ba4cb67edadb9d897208ea3f77ce1803848330aa7e54ec057"
}

resource "linode_instance" "terraform-web" {
image = "linode/ubuntu24.04"
label = "Terraform-Web-Example"
group = "Terraform"
region = "us-east"
type = "g6-standard-1"
authorized_keys = [ "YOUR_PUBLIC_SSH_KEY" ]
root_pass = "YOUR_ROOT_PASSWORD"
}
Loading