wsrep_sst_xtrabackup password and config issue

Bug #1078847 reported by Mike EKlund
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Percona XtraDB Cluster moved to https://jira.percona.com/projects/PXC
Expired
Undecided
Unassigned

Bug Description

1) wsrep_sst_xtrabackup does not pass the cnf file to innobackupex, this causes issues when running the sock file is in a different place.

2) wsrep_sst_xtrabackup and innobackupex do not support the idea of extra default files, so passwords must be embedded in your server's cnf file, since we use puppet to maintain our configs this can be a security concern.

Attached is a patch of what I have done to work around these issues.

Revision history for this message
Mike EKlund (meklund-launchpad) wrote :
Revision history for this message
Raghavendra D Prabhu (raghavendra-prabhu) wrote :

@Mike,

innobackupex already supports --defaults-extra-file but with a
caveat of being able to only pass either --defaults-extra-file or
--defaults-file but not both. You can look at lp:740489 for
details.

The !include directive may help if you intend to use same
connection parameters as that of your mysql client. The included file is
processed with the privileges of client opening it. So, in case
you are innobackupex as a different user, there is a way where
you can !include a file which can be read only by the
innobackupex user but not by mysql user.

Changed in percona-xtradb-cluster:
status: New → Incomplete
Revision history for this message
Launchpad Janitor (janitor) wrote :

[Expired for Percona XtraDB Cluster because there has been no activity for 60 days.]

Changed in percona-xtradb-cluster:
status: Incomplete → Expired
Revision history for this message
Shahriyar Rzayev (rzayev-sehriyar) wrote :

Percona now uses JIRA for bug reports so this bug report is migrated to: https://jira.percona.com/browse/PXC-1253

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.