Bug#1042454: AW: [debian-mysql] Bug#1042454: mariadb-server ignores bind-address

[zanyfac...@t-online.de]

I have found the problem: /etc/mysql/ was only accessible by root. On Bullseye 
that wasn't a problem because I had SysV Init and apparently mariadb was 
started as root initially. The upgrade to Bookworm enforced systemd and now 
mariadb is started as mysql directly.

Unfortunately, mariadb didn't complain about missing permissions in any way.


Bug#1042454: AW: [debian-mysql] Bug#1042454: mariadb-server ignores bind-address

[zanyfac...@t-online.de]

# grep -r bind-address /etc/mysql/
/etc/mysql/my.cnf.migrated:# bind-address   = 127.0.0.1
/etc/mysql/mariadb.conf.d/60-galera.cnf:#bind-address = 0.0.0.0
/etc/mysql/mariadb.conf.d/50-server.cnf:bind-address= 127.0.0.1


You can see that the other two are commented out.

I also noticed that skip-networking is ignored.


Bug#1042454: mariadb-server ignores bind-address

[zanyfac...@t-online.de]

Package: mariadb-server
Version: 1:10.11.3-1
Severity: normal

Dear Maintainer,

after upgrading from Bullseye to Bookworm, MariaDB seems to ignore the
bind-address config option.

In /etc/mysql/mariadb.conf.d/50-server.cnf I have

bind-address= 127.0.0.1

in the [mysqld] section and apparently mariadbd accepted this option:

# mariadbd --help --verbose | grep ^bind
bind-address 127.0.0.1

Nevertheless it actually listens on 0.0.0.0:

# netstat -tlnp | grep mariadb
tcp0  0 0.0.0.0:33060.0.0.0:* LISTEN  4299/mariadbd
tcp6   0  0 :::3306 :::*  LISTEN  4299/mariadbd


I tried MYSQLD_OPTS="--bind-address=127.0.0.1" in /etc/default/mysql to no 
avail.


-- System Information:
Debian Release: 12.1
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.1.0-10-amd64 (SMP w/6 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages mariadb-server depends on:
ii  adduser3.134
ii  debconf [debconf-2.0]  1.5.82
ii  galera-4   26.4.13-1
ii  gawk   1:5.2.1-2
ii  iproute2   6.1.0-3
ii  libc6  2.36-9+deb12u1
ii  libdbi-perl1.643-4
ii  libpam0g   1.5.2-6
ii  libssl33.0.9-1
ii  libstdc++6 12.2.0-14
ii  lsof   4.95.0-1
ii  mariadb-client 1:10.11.3-1
ii  mariadb-common 1:10.11.3-1
ii  mariadb-server-core1:10.11.3-1
ii  passwd 1:4.13+dfsg1-1+b1
ii  perl   5.36.0-7
ii  procps 2:4.0.2-3
ii  psmisc 23.6-1
ii  rsync  3.2.7-1
ii  socat  1.7.4.4-2
ii  zlib1g 1:1.2.13.dfsg-1

Versions of packages mariadb-server recommends:
ii  libhtml-template-perl   2.97-2
ii  mariadb-plugin-provider-bzip2   1:10.11.3-1
ii  mariadb-plugin-provider-lz4 1:10.11.3-1
ii  mariadb-plugin-provider-lzma1:10.11.3-1
ii  mariadb-plugin-provider-lzo 1:10.11.3-1
ii  mariadb-plugin-provider-snappy  1:10.11.3-1
ii  pv  1.6.20-1

Versions of packages mariadb-server suggests:
ii  bsd-mailx [mailx]  8.1.2-0.20220412cvs-1
pn  mariadb-test   
pn  netcat-openbsd 

-- Configuration Files:
/etc/mysql/mariadb.conf.d/50-server.cnf changed:
[server]
[mysqld]
user= mysql
pid-file= /run/mysqld/mysqld.pid
basedir = /usr
datadir = /var/lib/mysql
tmpdir  = /tmp
lc-messages-dir = /usr/share/mysql
lc-messages = en_US
skip-external-locking
bind-address= 127.0.0.1
log_error = /var/log/mysql/error.log
expire_logs_days= 10
character-set-server  = utf8mb4
collation-server  = utf8mb4_general_ci
[embedded]
[mariadb]
plugin_load_add = auth_ed25519
[mariadb-10.11]


-- debconf information:
  mariadb-server/old_data_directory_saved:
  mariadb-server/nis_warning:
  mariadb-server/postrm_remove_databases: false
Thank you for using reportbug