mysql_secure_installation can not set root password and ends up with loop

[Joseph Chris]

[Impact]

Running mysql_secure_installation on a default install of mysql currently leads to an infinite loop such that the script can not be completed. This is due to the script attempting to set a root password, which fails since mysql users are authenticated with auth_socket by default.

The fix for this issue should be added to stable releases to allow mysql_secure_installation to work without blocking the user. This especially helps given that running this script is a common part of setting up mysql on a system.

This issue is fixed by removing the portion of the script that sets a root password.

[Test Plan]

# lxc launch images:ubuntu/jammy test-mysql
# lxc exec test-mysql bash
# apt update && apt dist-upgrade -y
# apt install mysql-server -y
# mysql_secure_installation

> Before the fix the script will show the following, being stuck in an infinite loop:
...
Please set the password for root here.

New password:

Re-enter new password:
 ... Failed! Error: SET PASSWORD has no significance for user 'root'@'localhost' as the authentication method used doesn't store authentication data in the MySQL server. Please consider using ALTER USER instead if you want to change authentication parameters.

New password:
...

> After the fix it will show the following:
...
Skipping password set for %s as authentication with auth_socket is used by default.
If you would like to use password authentication instead, this can be done with the "ALTER_USER" command.
See https://dev.mysql.com/doc/refman/8.0/en/alter-user.html#alter-user-password-management for more information.
...

[Where problems could occur]

With this change, problems could occour in the future if a root password is assumed to exist after mysql_secure_installation has been run. This could also lead to issues if users assume that a root password exists after running this script.

[Original Description]
When I am trying to use mysql_secure_installation after I installed MySQL server, it ends up with loop asking me the new root password.

To reproduce the bug:
apt install mysql-server
mysql_secure_installation

Version:
Ubuntu Server 20.04.4
mysql-server (8.0.29-0ubuntu0.20.04.3)

Logs:
root@server# mysql_secure_installation

Securing the MySQL server deployment.

Connecting to MySQL using a blank password.

VALIDATE PASSWORD COMPONENT can be used to test passwords
and improve security. It checks the strength of password
and allows the users to set only those passwords which are
secure enough. Would you like to setup VALIDATE PASSWORD component?

Press y|Y for Yes, any other key for No: n
Please set the password for root here.

New password:

Re-enter new password:
 ... Failed! Error: SET PASSWORD has no significance for user 'root'@'localhost' as the authentication method used doesn't store authentication data in the MySQL server. Please consider using ALTER USER instead if you want to change authentication parameters.

New password:

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[cybernet (cybernet2u)]

any news ? or workarounds until a new patch is released

[Michał Małoszewski (michal-maloszewski99)]

Hi,

I think here is the workaround for it.
The reason for that issue is that this script will attempt to set a password for the installation's root MySQL account, but by default on Ubuntu installations, this account is not configured to connect using a password.
To avoid that problem, you will need to adjust how your root MySQL user authenticates.
Try:
# sudo mysql
then:
mysql> ALTER USER 'root'@'localhost' IDENTIFIED WITH mysql_native_password by 'newpassword';
mysql> exit

Now you will be able to run 'mysql_secure_installation' without any further issues.
But remember to reopen MySQL and change the root user's authentication method back to the default, auth_socket.
Run:
$ mysql -u root -p
Then:
mysql> ALTER USER 'root'@'localhost' IDENTIFIED WITH auth_socket;

You can once again connect to MySQL as root using sudo mysql.

[cybernet (cybernet2u)]

thanks a lot, it worked !
I was planning to write a SQL script to change root password rather than using the mysql_secure_installation

[Paride Legovini (paride)]

By reading this I was wonder if we should just stop shipping mysql_secure_installation in Ubuntu, and MySQL should be configured in a sensible way by the maintainer scripts. Robie also mentioned this possibility commenting on Michał's triage summary email [1].

I am marking this bug report for further discussion.

[1] https://lists.ubuntu.com/archives/ubuntu-server/2022-September/009433.html

[Joseph Chris (josephcz)]

Instead of using mysql_native_password, personally I recommend caching_sha2_password as the password plugin. It is a newer password algorithm.

I think this caused by ubuntu using auth_socket plugin by default for root user. Since this, mysql_secure_installation might be unnecessary on ubuntu. However, may third-parity documents motions that mysql_secure_installation as a necessary step of installing mysql server.

Personally I have 2 solutions:
Solution 1 - remove the mysql_secure_installation command
Solution 2 - patch the mysql code, if auth_socket plugin is enabled by root, than skip changing root password

[Jeffrey Walton (noloader)]

Mee too.

The bug is still present in 20.04.6.

[Jeffrey Walton (noloader)]

> By reading this I was wonder if we should just stop shipping
> mysql_secure_installation in Ubuntu...

That's going to create two additional problems.

First, there's a bunch of web tutorials that say the first thing someone should do is, "run mysql_secure_installation to harden the MySQL installation."

Second, if mysql_secure_installation disappears, then you are going to get bug reports for the missing script.

About the best you can do is replace the mysql_secure_installation script with a new script (and same name) that says something like "mysql_secure_installation is obsolete. Ubuntu does X, Y and Z nowadays, so mysql_secure_installation is not needed."

-----

And in my particular case, I'm here because Ubuntu does not provide a Java JDBC driver for SQLite. If Ubuntu provided one, then I'd be using SQLite instead of putzing around with MySQL. So Ubuntu could reduce affected users by providing a Java JDBC driver for SQLite.

[Steve Langasek (vorlon)]

Hello Joseph, or anyone else affected,

Accepted mysql-8.0 into lunar-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.32-0ubuntu5 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-lunar to verification-done-lunar. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-lunar. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

[Lena Voytek (lvoytek)]

Unfortunately the security release of 8.0.33 overrides this one for lunar, so it'll have to be resubmitted there. Marking as verification failed for now and will get a new release out soon once mantic is updated.

[Launchpad Janitor (janitor)]

This bug was fixed in the package mysql-8.0 - 8.0.33-2

---------------
mysql-8.0 (8.0.33-2) unstable; urgency=medium

  * d/t/upstream: Ignore upstream tests due to s390x failure (Closes: 1036803)
    Due to slight variation in the optimization of join statements on s390x, a
    few upstream tests fail as they show a cost slightly higher than expected.
    The tests include main.subquery_sj_all_bka_nobnl and
    main.subquery_sj_mat_bka_nobnl

 -- Lena Voytek <email address hidden> Thu, 25 May 2023 10:20:02 -0700

[Timo Aaltonen (tjaalton)]

Hello Joseph, or anyone else affected,

Accepted mysql-8.0 into lunar-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.33-0ubuntu0.23.04.3 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-lunar to verification-done-lunar. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-lunar. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

[Steve Langasek (vorlon)]

Hello Joseph, or anyone else affected,

Accepted mysql-8.0 into kinetic-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.33-0ubuntu0.22.10.3 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-kinetic to verification-done-kinetic. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-kinetic. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

[Steve Langasek (vorlon)]

Hello Joseph, or anyone else affected,

Accepted mysql-8.0 into jammy-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.33-0ubuntu0.22.04.3 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-jammy to verification-done-jammy. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-jammy. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

[Steve Langasek (vorlon)]

Hello Joseph, or anyone else affected,

Accepted mysql-8.0 into focal-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.33-0ubuntu0.20.04.3 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-focal to verification-done-focal. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-focal. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

[Ubuntu SRU Bot (ubuntu-sru-bot)]

All autopkgtests for the newly accepted mysql-8.0 (8.0.33-0ubuntu0.23.04.3) for lunar have finished running.
The following regressions have been reported in tests triggered by the package:

mysql-8.0/8.0.33-0ubuntu0.23.04.3 (s390x)
slurm-wlm/22.05.8-3 (armhf)

Please visit the excuses page listed below and investigate the failures, proceeding afterwards as per the StableReleaseUpdates policy regarding autopkgtest regressions [1].

https://people.canonical.com/~ubuntu-archive/proposed-migration/lunar/update_excuses.html#mysql-8.0

[1] https://wiki.ubuntu.com/StableReleaseUpdates#Autopkgtest_Regressions

Thank you!

[Ubuntu SRU Bot (ubuntu-sru-bot)]

All autopkgtests for the newly accepted mysql-8.0 (8.0.33-0ubuntu0.22.04.3) for jammy have finished running.
The following regressions have been reported in tests triggered by the package:

cinder/2:20.2.0-0ubuntu1 (amd64)
mysql-8.0/8.0.33-0ubuntu0.22.04.3 (s390x)

Please visit the excuses page listed below and investigate the failures, proceeding afterwards as per the StableReleaseUpdates policy regarding autopkgtest regressions [1].

https://people.canonical.com/~ubuntu-archive/proposed-migration/jammy/update_excuses.html#mysql-8.0

[1] https://wiki.ubuntu.com/StableReleaseUpdates#Autopkgtest_Regressions

Thank you!

[Ubuntu SRU Bot (ubuntu-sru-bot)]

All autopkgtests for the newly accepted mysql-8.0 (8.0.33-0ubuntu0.22.10.3) for kinetic have finished running.
The following regressions have been reported in tests triggered by the package:

mysql-8.0/8.0.33-0ubuntu0.22.10.3 (s390x)
senlin/1:14.0.0-0ubuntu1 (s390x)

Please visit the excuses page listed below and investigate the failures, proceeding afterwards as per the StableReleaseUpdates policy regarding autopkgtest regressions [1].

https://people.canonical.com/~ubuntu-archive/proposed-migration/kinetic/update_excuses.html#mysql-8.0

[1] https://wiki.ubuntu.com/StableReleaseUpdates#Autopkgtest_Regressions

Thank you!

[Ubuntu SRU Bot (ubuntu-sru-bot)]

All autopkgtests for the newly accepted mysql-8.0 (8.0.33-0ubuntu0.20.04.3) for focal have finished running.
The following regressions have been reported in tests triggered by the package:

cinder/2:16.4.2-0ubuntu2.4 (amd64)
diaspora-installer/0.7.6.1+debian1 (arm64, s390x)

Please visit the excuses page listed below and investigate the failures, proceeding afterwards as per the StableReleaseUpdates policy regarding autopkgtest regressions [1].

https://people.canonical.com/~ubuntu-archive/proposed-migration/focal/update_excuses.html#mysql-8.0

[1] https://wiki.ubuntu.com/StableReleaseUpdates#Autopkgtest_Regressions

Thank you!

[Lena Voytek (lvoytek)]

Verified for lunar, kinetic, jammy, and focal

# lxc launch images:ubuntu/lunar test-mysql-lunar
# lxc exec test-mysql-lunar bash

# cat <<EOF >/etc/apt/sources.list.d/ubuntu-$(lsb_release -cs)-proposed.list
# Enable Ubuntu proposed archive
deb http://archive.ubuntu.com/ubuntu/ $(lsb_release -cs)-proposed restricted main multiverse universe
EOF

# apt update && apt dist-upgrade -y
# apt install mysql-server -y
# mysql_secure_installation
...
Skipping password set for %s as authentication with auth_socket is used by default.
If you would like to use password authentication instead, this can be done with the "ALTER_USER" command.
See https://dev.mysql.com/doc/refman/8.0/en/alter-user.html#alter-user-password-management for more information.
...

# lxc launch images:ubuntu/kinetic test-mysql-kinetic
# lxc exec test-mysql-kinetic bash

# cat <<EOF >/etc/apt/sources.list.d/ubuntu-$(lsb_release -cs)-proposed.list
# Enable Ubuntu proposed archive
deb http://archive.ubuntu.com/ubuntu/ $(lsb_release -cs)-proposed restricted main multiverse universe
EOF

# apt update && apt dist-upgrade -y
# apt install mysql-server -y
# mysql_secure_installation
...
Skipping password set for %s as authentication with auth_socket is used by default.
If you would like to use password authentication instead, this can be done with the "ALTER_USER" command.
See https://dev.mysql.com/doc/refman/8.0/en/alter-user.html#alter-user-password-management for more information.
...

# lxc launch images:ubuntu/jammy test-mysql-jammy
# lxc exec test-mysql-jammy bash

# cat <<EOF >/etc/apt/sources.list.d/ubuntu-$(lsb_release -cs)-proposed.list
# Enable Ubuntu proposed archive
deb http://archive.ubuntu.com/ubuntu/ $(lsb_release -cs)-proposed restricted main multiverse universe
EOF

# apt update && apt dist-upgrade -y
# apt install mysql-server -y
# mysql_secure_installation
...
Skipping password set for %s as authentication with auth_socket is used by default.
If you would like to use password authentication instead, this can be done with the "ALTER_USER" command.
See https://dev.mysql.com/doc/refman/8.0/en/alter-user.html#alter-user-password-management for more information.
...

# lxc launch images:ubuntu/focal test-mysql-focal
# lxc exec test-mysql-focal bash

# cat <<EOF >/etc/apt/sources.list.d/ubuntu-$(lsb_release -cs)-proposed.list
# Enable Ubuntu proposed archive
deb http://archive.ubuntu.com/ubuntu/ $(lsb_release -cs)-proposed restricted main multiverse universe
EOF

# apt update && apt dist-upgrade -y
# apt install mysql-server -y
# mysql_secure_installation
...
Skipping password set for %s as authentication with auth_socket is used by default.
If you would like to use password authentication instead, this can be done with the "ALTER_USER" command.
See https://dev.mysql.com/doc/refman/8.0/en/alter-user.html#alter-user-password-management for more information.
...

[Steve Langasek (vorlon)]

Hello Joseph, or anyone else affected,

Accepted mysql-8.0 into lunar-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.33-0ubuntu0.23.04.4 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-lunar to verification-done-lunar. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-lunar. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

[Steve Langasek (vorlon)]

Hello Joseph, or anyone else affected,

Accepted mysql-8.0 into kinetic-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.33-0ubuntu0.22.10.4 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-kinetic to verification-done-kinetic. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-kinetic. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

[Ubuntu SRU Bot (ubuntu-sru-bot)]

All autopkgtests for the newly accepted mysql-8.0 (8.0.33-0ubuntu0.23.04.3) for lunar have finished running.
The following regressions have been reported in tests triggered by the package:

mysql-8.0/8.0.33-0ubuntu0.23.04.3 (s390x)
slurm-wlm/22.05.8-3 (armhf)

Please visit the excuses page listed below and investigate the failures, proceeding afterwards as per the StableReleaseUpdates policy regarding autopkgtest regressions [1].

https://people.canonical.com/~ubuntu-archive/proposed-migration/lunar/update_excuses.html#mysql-8.0

[1] https://wiki.ubuntu.com/StableReleaseUpdates#Autopkgtest_Regressions

Thank you!

[Ubuntu SRU Bot (ubuntu-sru-bot)]

All autopkgtests for the newly accepted mysql-8.0 (8.0.33-0ubuntu0.22.10.3) for kinetic have finished running.
The following regressions have been reported in tests triggered by the package:

mysql-8.0/8.0.33-0ubuntu0.22.10.3 (s390x)

Please visit the excuses page listed below and investigate the failures, proceeding afterwards as per the StableReleaseUpdates policy regarding autopkgtest regressions [1].

https://people.canonical.com/~ubuntu-archive/proposed-migration/kinetic/update_excuses.html#mysql-8.0

[1] https://wiki.ubuntu.com/StableReleaseUpdates#Autopkgtest_Regressions

Thank you!

[Ubuntu SRU Bot (ubuntu-sru-bot)]

All autopkgtests for the newly accepted mysql-8.0 (8.0.33-0ubuntu0.23.04.4) for lunar have finished running.
The following regressions have been reported in tests triggered by the package:

libreoffice/4:7.5.3-0ubuntu0.23.04.1 (armhf)
slurm-wlm/22.05.8-3 (armhf)

Please visit the excuses page listed below and investigate the failures, proceeding afterwards as per the StableReleaseUpdates policy regarding autopkgtest regressions [1].

https://people.canonical.com/~ubuntu-archive/proposed-migration/lunar/update_excuses.html#mysql-8.0

[1] https://wiki.ubuntu.com/StableReleaseUpdates#Autopkgtest_Regressions

Thank you!

[Ubuntu SRU Bot (ubuntu-sru-bot)]

All autopkgtests for the newly accepted mysql-8.0 (8.0.33-0ubuntu0.22.10.4) for kinetic have finished running.
The following regressions have been reported in tests triggered by the package:

senlin/1:14.0.0-0ubuntu1 (s390x)
sysbench/1.0.20+ds-5 (s390x)

Please visit the excuses page listed below and investigate the failures, proceeding afterwards as per the StableReleaseUpdates policy regarding autopkgtest regressions [1].

https://people.canonical.com/~ubuntu-archive/proposed-migration/kinetic/update_excuses.html#mysql-8.0

[1] https://wiki.ubuntu.com/StableReleaseUpdates#Autopkgtest_Regressions

Thank you!

[Robie Basak (racb)]

Hello Joseph, or anyone else affected,

Accepted mysql-8.0 into focal-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.33-0ubuntu0.20.04.4 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-focal to verification-done-focal. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-focal. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

[Robie Basak (racb)]

Hello Joseph, or anyone else affected,

Accepted mysql-8.0 into jammy-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.33-0ubuntu0.22.04.4 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-jammy to verification-done-jammy. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-jammy. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

[Ubuntu SRU Bot (ubuntu-sru-bot)]

All autopkgtests for the newly accepted mysql-8.0 (8.0.33-0ubuntu0.20.04.4) for focal have finished running.
The following regressions have been reported in tests triggered by the package:

cinder/2:16.4.2-0ubuntu2.4 (amd64)
diaspora-installer/0.7.6.1+debian1 (s390x)

Please visit the excuses page listed below and investigate the failures, proceeding afterwards as per the StableReleaseUpdates policy regarding autopkgtest regressions [1].

https://people.canonical.com/~ubuntu-archive/proposed-migration/focal/update_excuses.html#mysql-8.0

[1] https://wiki.ubuntu.com/StableReleaseUpdates#Autopkgtest_Regressions

Thank you!

[Lena Voytek (lvoytek)]

Reverified for lunar, kinetic, jammy, and focal

# lxc launch images:ubuntu/lunar test-mysql-lunar
# lxc exec test-mysql-lunar bash

# cat <<EOF >/etc/apt/sources.list.d/ubuntu-$(lsb_release -cs)-proposed.list
# Enable Ubuntu proposed archive
deb http://archive.ubuntu.com/ubuntu/ $(lsb_release -cs)-proposed restricted main multiverse universe
EOF

# apt update && apt dist-upgrade -y
# apt install mysql-server -y
# mysql_secure_installation
...
Skipping password set for root as authentication with auth_socket is used by default.
If you would like to use password authentication instead, this can be done with the "ALTER_USER" command.
See https://dev.mysql.com/doc/refman/8.0/en/alter-user.html#alter-user-password-management for more information.
...

# lxc launch images:ubuntu/kinetic test-mysql-kinetic
# lxc exec test-mysql-kinetic bash

# cat <<EOF >/etc/apt/sources.list.d/ubuntu-$(lsb_release -cs)-proposed.list
# Enable Ubuntu proposed archive
deb http://archive.ubuntu.com/ubuntu/ $(lsb_release -cs)-proposed restricted main multiverse universe
EOF

# apt update && apt dist-upgrade -y
# apt install mysql-server -y
# mysql_secure_installation
...
Skipping password set for root as authentication with auth_socket is used by default.
If you would like to use password authentication instead, this can be done with the "ALTER_USER" command.
See https://dev.mysql.com/doc/refman/8.0/en/alter-user.html#alter-user-password-management for more information.
...

# lxc launch images:ubuntu/jammy test-mysql-jammy
# lxc exec test-mysql-jammy bash

# cat <<EOF >/etc/apt/sources.list.d/ubuntu-$(lsb_release -cs)-proposed.list
# Enable Ubuntu proposed archive
deb http://archive.ubuntu.com/ubuntu/ $(lsb_release -cs)-proposed restricted main multiverse universe
EOF

# apt update && apt dist-upgrade -y
# apt install mysql-server -y
# mysql_secure_installation
...
Skipping password set for root as authentication with auth_socket is used by default.
If you would like to use password authentication instead, this can be done with the "ALTER_USER" command.
See https://dev.mysql.com/doc/refman/8.0/en/alter-user.html#alter-user-password-management for more information.
...

# lxc launch images:ubuntu/focal test-mysql-focal
# lxc exec test-mysql-focal bash

# cat <<EOF >/etc/apt/sources.list.d/ubuntu-$(lsb_release -cs)-proposed.list
# Enable Ubuntu proposed archive
deb http://archive.ubuntu.com/ubuntu/ $(lsb_release -cs)-proposed restricted main multiverse universe
EOF

# apt update && apt dist-upgrade -y
# apt install mysql-server -y
# mysql_secure_installation
...
Skipping password set for root as authentication with auth_socket is used by default.
If you would like to use password authentication instead, this can be done with the "ALTER_USER" command.
See https://dev.mysql.com/doc/refman/8.0/en/alter-user.html#alter-user-password-management for more information.
...

[Łukasz Zemczak (sil2100)]

There still seems to be a single autopkgtest regression for this upload (https://bugs.launchpad.net/ubuntu/+source/mysql-8.0/+bug/1980466/comments/25). Can you take a look?

[Lena Voytek (lvoytek)]

I've been looking into the regression and can confirm slurm does not interact with the mysql_secure_installation script or mysql autopkgtest in any way. However migration-reference/0 consistently passes with mysql-8.0 version 8.0.33-0ubuntu0.23.04.2. Still looking into other reasons this might be failing

[Lena Voytek (lvoytek)]

When testing the slurm autopkgtest locally on an armhf lxd container I get the failure both before and after adding the proposed mysql package. This failure seems to be due to a lack of resources provided to the autopkgtest vm.

The failing test - sbatch - also does not use mysql as a dependency. It requires the following packages to run:

libhwloc15 2.9.0-1
liblua5.1-0 5.1.5-9
libmunge2 0.5.15-2
munge 0.5.15-2
slurm-client 22.05.8-3
slurm-wlm-basic-plugins 22.05.8-3
slurmctld 22.05.8-3
slurmd 22.05.8-3

[Brian Murray (brian-murray)]

The verification of the Stable Release Update for mysql-8.0 has completed successfully and the package is now being released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

[Launchpad Janitor (janitor)]

This bug was fixed in the package mysql-8.0 - 8.0.33-0ubuntu0.23.04.4

---------------
mysql-8.0 (8.0.33-0ubuntu0.23.04.4) lunar; urgency=medium

  * d/t/upstream: Ignore upstream tests due to s390x failure (LP: #2020910)
    Due to slight variation in the optimization of join statements on s390x, a
    few upstream tests fail as they show a cost slightly higher than expected.
    The tests include main.subquery_sj_all_bka_nobnl and
    main.subquery_sj_mat_bka_nobnl

mysql-8.0 (8.0.33-0ubuntu0.23.04.3) lunar; urgency=medium

  * d/p/mysql_secure_installation-remove-root-pw-creation.patch: Fix
    mysql_secure_installation by removing root password creation (LP: #1980466)

 -- Lena Voytek <email address hidden> Wed, 14 Jun 2023 12:37:12 -0700

[Launchpad Janitor (janitor)]

This bug was fixed in the package mysql-8.0 - 8.0.33-0ubuntu0.22.04.4

---------------
mysql-8.0 (8.0.33-0ubuntu0.22.04.4) jammy; urgency=medium

  * d/t/upstream: Ignore upstream tests due to s390x failure (LP: #2020910)
    Due to slight variation in the optimization of join statements on s390x, a
    few upstream tests fail as they show a cost slightly higher than expected.
    The tests include main.subquery_sj_all_bka_nobnl and
    main.subquery_sj_mat_bka_nobnl

mysql-8.0 (8.0.33-0ubuntu0.22.04.3) jammy; urgency=medium

  * d/p/mysql_secure_installation-remove-root-pw-creation.patch: Fix
    mysql_secure_installation by removing root password creation (LP: #1980466)

 -- Lena Voytek <email address hidden> Wed, 14 Jun 2023 12:43:34 -0700

[Launchpad Janitor (janitor)]

This bug was fixed in the package mysql-8.0 - 8.0.33-0ubuntu0.20.04.4

---------------
mysql-8.0 (8.0.33-0ubuntu0.20.04.4) focal; urgency=medium

  * d/t/upstream: Ignore upstream tests due to s390x failure (LP: #2020910)
    Due to slight variation in the optimization of join statements on s390x, a
    few upstream tests fail as they show a cost slightly higher than expected.
    The tests include main.subquery_sj_all_bka_nobnl and
    main.subquery_sj_mat_bka_nobnl

mysql-8.0 (8.0.33-0ubuntu0.20.04.3) focal; urgency=medium

  * d/p/mysql_secure_installation-remove-root-pw-creation.patch: Fix
    mysql_secure_installation by removing root password creation (LP: #1980466)

 -- Lena Voytek <email address hidden> Wed, 14 Jun 2023 12:45:13 -0700

[Lena Voytek (lvoytek)]

Marked kinetic as wont-fix as it was not released in time for its eol