[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
David, the trouble is most of the comments here are for various different local configuration changes. You'd be best served by filing a new bug. If you have DENIED lines from AppArmor, make sure your logs include them. Thanks -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
After all that, my mysqld is still broken. I see no "valid" ticket for this bug linked here, if this one is invalid. Where is the bug report for the root cause? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
Let's tone it down a bit Gary. He's both right and wrong. He wants people to discuss the same root issue and this thread is mixed up with several "me too" comments that may or may not be the same issue. In my case it was simple as editing mysql.cnf and start getting AppArmor DENIED errors. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
Basak. You were wrong at the beginning and your still wrong. The bug is mysql and apparmor dont work together. Period. I havent had any problems at all no matter what configuration i had as soon as I uninstalled mysql and loaded another database. Please quit telling people there is nothing wrong with mysql. On Feb 9, 2018 9:05 AM, "Zach Appelbaum" <1610...@bugs.launchpad.net> wrote: > Where should we post it then? AppArmor bug tracker? It's pretty annoying > to change 1 setting on mysql.cnf and then be denied restarting the MySQL > server because of that. Are my distro settings too tight? is it > apparmor? is it mysql? > > -- > You received this bug notification because you are subscribed to the bug > report. > https://bugs.launchpad.net/bugs/1610765 > > Title: > Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it > to fail to start > > Status in mysql-5.7 package in Ubuntu: > Invalid > > Bug description: > [Triage Notes] > > This bug tracks reports of the following AppArmor denial: > > Aug 7 18:22:17 c505 kernel: [ 1485.490459] audit: type=1400 > audit(1470619337.926:98): apparmor="DENIED" operation="open" > profile="/usr/sbin/mysqld" name="/etc/mysql/my.cnf.migrated" pid=11219 > comm="mysqld" requested_mask="r" denied_mask="r" fsuid=109 ouid=0 > > If you are seeing a denial of /etc/mysql/my.cnf.migrated in this > manner, then the underlying issue may affect you too. > > If you are seeing a denial of some other file, then you have some > other AppArmor-related problem that is *not* the issue tracked in this > bug. If you believe that your failure is a bug in Ubuntu, please look > for other bugs and file a new bug if there isn't a matching one that > tracks your different issue. > > [Original Desription] > > SYMPTOM > mysql fails to start > > IMPACT > no sql for you > > DIAGNOSE: > service mysql start > Job for mysql.service failed because the control process exited with > error code. See "systemctl status mysql.service" and "journalctl -xe" for > details. > > - systemd has all sort of craziness going on so stop that > service mysql stop > > - look at what apparmor is up to > tail -F /var/log/syslog | grep -i apparmor > > - then start again > service mysql start > > output is: > - mysql cannot read /etc/mysql > Aug 7 18:22:17 c505 kernel: [ 1485.490459] audit: type=1400 > audit(1470619337.926:98): apparmor="DENIED" operation="open" > profile="/usr/sbin/mysqld" name="/etc/mysql/my.cnf.migrated" pid=11219 > comm="mysqld" requested_mask="r" denied_mask="r" fsuid=109 ouid=0 > > GET_AROUND: > sudo nano /etc/apparmor.d/usr.sbin.mysqld > line 25 after: > # Allow config access > /etc/mysql/** r, > -add line: > /etc/mysql/* r, > > systemctl restart apparmor.service > > service mysql stop > service mysql start > > - problem is gone > > ProblemType: Bug > DistroRelease: Ubuntu 16.04 > Package: mysql-server-5.7 5.7.13-0ubuntu0.16.04.2 > ProcVersionSignature: Ubuntu 4.4.0-31.50-generic 4.4.13 > Uname: Linux 4.4.0-31-generic x86_64 > ApportVersion: 2.20.1-0ubuntu2.1 > Architecture: amd64 > Date: Sun Aug 7 18:31:32 2016 > Logs.var.log.daemon.log: > > MySQLConf.etc.mysql.conf.d.mysql.cnf: [mysql] > MySQLConf.etc.mysql.conf.d.mysqld_safe_syslog.cnf: >[mysqld_safe] >syslog > MySQLConf.etc.mysql.conf.d.mysqldump.cnf: >[mysqldump] >quick >quote-names >max_allowed_packet = 16M > MySQLConf.etc.mysql.mysql.conf.d.mysqld_safe_syslog.cnf: >[mysqld_safe] >syslog > MySQLVarLibDirListing: ['debian-5.0.flag', 'ib_buffer_pool', 'test', > 'ib_logfile1', 'xpc21.err', 'auto.cnf', 'mysql_upgrade_info', 'bugzilla', > 'zabbix', 'debian-5.5.flag', 'debian-5.1.flag', 'redmine_default', > 'roundcube', 'ib_logfile0', 'ibtmp1', 'sys', 'mysql', 'ibdata1', 'bugs', > 'debian-5.7.flag', 'owncloud', 'performance_schema'] > ProcEnviron: >SHELL=/bin/bash >TERM=xterm >PATH=(custom, user) >LANG=en_US.UTF-8 >LANGUAGE=en_US.UTF-8 > SourcePackage: mysql-5.7 > UpgradeStatus: Upgraded to xenial on 2016-06-13 (56 days ago) > modified.conffile..etc.apparmor.d.usr.sbin.mysqld: [modified] > mtime.conffile..etc.apparmor.d.usr.sbin.mysqld: > 2016-08-07T18:24:24.264357 > > To manage notifications about this bug go to: > https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/ > 1610765/+subscriptions > -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
Where should we post it then? AppArmor bug tracker? It's pretty annoying to change 1 setting on mysql.cnf and then be denied restarting the MySQL server because of that. Are my distro settings too tight? is it apparmor? is it mysql? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
My position is still the same. It seems that everyone piling on to this bug report with a "me too" is not affected by the same root cause as the original reporter, who had a problem with a locally customised AppArmor profile that ended up incorrect and which we identified was not a bug. The status set against this bug is only one status and cannot track the status of each of your separate issues. If you have a different AppArmor MySQL related problem, this is not the bug for you. Please read my triage notes at the top of the bug description. It does not help to add comments for your unrelated issues. Few developers will read about them here. Please file separate bug reports as instructed. ** Changed in: mysql-5.7 (Ubuntu) Status: Confirmed => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
I don't know if it's the case here, but I've seen *new* apparmor profiles not being applied because the apparmor cache file had, for some reason, a more recent timestamp. That made the system use the cache file instead of the correct changed config file. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
So, I have become very good at checking the MySQL setup, and in my case (I recently restarted my server) I had AppArmor properly setup but it still would not work My previous actions, as pointed out, disabled AppArmor why it after that started working @seth-arnold Seth Arnold pointed out the correct solution in #6 The proper solution is: systemctl reload apparmor.service - which applies the current and extensively checked settings, this apply which apparently had not been done, and this keeps AppArmor active and MySQL working The question might be why are the settings not applied even on a server reboot? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
The DENIED of /proc//status is tracked in bug #1658239 The DENIED of /sys/devices/system/node/ is tracked in bug bug #1658233 @cripperz I think the above cover the changes you had to made to your profile. Let's track these issues over there and keep this bug for apparmor errors regarding the /etc/mysql/my.cnf.migrated file specifically. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
@andreas Just a description how this happened again. Usually it would happen after the server lost power and reboot this error would come back. Or the VM abruptly off without a proper shutdown then i will hit into this issue. root@ns3:/etc/mysql#apparmor_parser -r -T -W -v /etc/apparmor.d/usr.sbin.mysqld Replacement succeeded for "/usr/sbin/mysqld". root@ns3:/etc/mysql# For testing sake, i added below in the /etc/apparmor.d/usr.sbin.mysqld /sys/devices/system/node/* r, /sys/devices/system/node/ r, /sys/devices/system/node/node0/meminfo r, /proc/** rk, /proc/* rk, then i get Aug 19 09:32:34 ns3 kernel: [ 9028.392694] audit: type=1400 audit(1503106354.767:603): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/sbin/mysqld" pid=6139 comm="apparmor_parser" -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
Where is the output of "sudo apparmor_parser -r -T -W -v /etc/apparmor.d/usr.sbin.mysqld"? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
Aug 18 20:07:53 ns3 audit[7045]: AVC apparmor="DENIED" operation="open" profile="/usr/sbin/mysqld" name="/proc/7045/status" pid=7045 comm="mysqld" requested_mask="r" denied_mask="r" fsuid=111 ouid=111 I just stumbled again into the problem. took the chance to try your suggest @andreas below error Aug 18 20:07:53 ns3 kernel: audit: type=1400 audit(1503058073.118:64): apparmor="DENIED" operation="open" profile="/usr/sbin/mysqld" name="/proc/7045/status" pid=7045 comm="mysqld" requested_mask="r" denied_mask="r" fsuid=111 ouid=111 Aug 18 20:07:53 ns3 audit[7045]: AVC apparmor="DENIED" operation="open" profile="/usr/sbin/mysqld" name="/sys/devices/system/node/" pid=7045 comm="mysqld" requested_mask="r" denied_mask="r" fsuid=111 ouid=0 Aug 18 20:07:53 ns3 audit[7045]: AVC apparmor="DENIED" operation="open" profile="/usr/sbin/mysqld" name="/proc/7045/status" pid=7045 comm="mysqld" requested_mask="r" denied_mask="r" fsuid=111 ouid=111 Aug 18 20:07:53 ns3 kernel: audit: type=1400 audit(1503058073.122:65): apparmor="DENIED" operation="open" profile="/usr/sbin/mysqld" name="/sys/devices/system/node/" pid=7045 comm="mysqld" requested_mask="r" denied_mask="r" fsuid=111 ouid=0 Aug 18 20:07:53 ns3 kernel: audit: type=1400 audit(1503058073.122:66): apparmor="DENIED" operation="open" profile="/usr/sbin/mysqld" name="/proc/7045/status" pid=7045 comm="mysqld" requested_mask="r" denied_mask="r" fsuid=111 ouid=111 Aug 18 20:07:54 ns3 systemd[1]: mysql.service: Main process exited, code=exited, status=1/FAILURE -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
@cripperz, can you please try regenerating the apparmor cache and reloading it, via this command: sudo apparmor_parser -r -T -W -v /etc/apparmor.d/usr.sbin.mysqld Then restart mysql: sudo service mysql restart -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
Just bumped into this error with my Ubuntu 16.04 LTS Server with mysql-5.7 -- Unit mysql.service has begun starting up. Aug 09 19:49:46 ns3 audit[3405]: AVC apparmor="DENIED" operation="open" profile="/usr/sbin/mysqld" name="/proc/3405/status" pid=340 Aug 09 19:49:46 ns3 audit[3405]: AVC apparmor="DENIED" operation="open" profile="/usr/sbin/mysqld" name="/sys/devices/system/node/" Aug 09 19:49:46 ns3 audit[3405]: AVC apparmor="DENIED" operation="open" profile="/usr/sbin/mysqld" name="/proc/3405/status" pid=340 Aug 09 19:49:46 ns3 kernel: audit: type=1400 audit(1502279386.154:69): apparmor="DENIED" operation="open" profile="/usr/sbin/mysqld Aug 09 19:49:46 ns3 kernel: audit: type=1400 audit(1502279386.154:70): apparmor="DENIED" operation="open" profile="/usr/sbin/mysqld Aug 09 19:49:46 ns3 kernel: audit: type=1400 audit(1502279386.154:71): apparmor="DENIED" operation="open" profile="/usr/sbin/mysqld Aug 09 19:49:47 ns3 systemd[1]: mysql.service: Main process exited, code=exited, status=1/FAILURE -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
** Changed in: mysql-5.7 (Ubuntu) Status: Invalid => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
MySQL started to throw apparmor errors after enabling slow-query-logs. I haven't used this log option for quite some time. So it probably sat for a few years (and several migrations) uncommented in my my.cnf. It turned out that the variable name had changes. The entry used to be "log_slow_queries = /var/..." now it needs to be "slow-query-log-file = /var/..." -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
Sorry Robie but you are still wrong. It is a bug but mostly because mysql is more the problem and not Ubuntu. Changing databases does fix the bug. Changing ubuntu doesn't make the bug go away. Gary On Apr 21, 2017 6:39 AM, "Robie Basak" <1610...@bugs.launchpad.net> wrote: > I think it's time to mark this bug Invalid. We have had a bunch of "me > too" comments that are clearly and incorrectly describing bugs other > than the one described here. > > Conversely the only credible explanation of the problem reported > (failure to start due to AppArmor denial of /etc/mysql/my.cnf.migrated) > is reported to have gone away by itself and we haven't had any reports > of anyone having independently reproduced or even just experienced the > same problem. > > Unfortunately the misguided comments are making it impossible to follow > this bug. If it turns out that the bug is real, then I suggest filing a > separate and full report (referring to this bug) to get a developer's > attention, since I'll be unsubscribing from this bug as I've seen no > signal amongst the noise except from the original reporter. > > ** Changed in: mysql-5.7 (Ubuntu) >Status: Incomplete => Invalid > > -- > You received this bug notification because you are subscribed to the bug > report. > https://bugs.launchpad.net/bugs/1610765 > > Title: > Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it > to fail to start > > Status in mysql-5.7 package in Ubuntu: > Invalid > > Bug description: > [Triage Notes] > > This bug tracks reports of the following AppArmor denial: > > Aug 7 18:22:17 c505 kernel: [ 1485.490459] audit: type=1400 > audit(1470619337.926:98): apparmor="DENIED" operation="open" > profile="/usr/sbin/mysqld" name="/etc/mysql/my.cnf.migrated" pid=11219 > comm="mysqld" requested_mask="r" denied_mask="r" fsuid=109 ouid=0 > > If you are seeing a denial of /etc/mysql/my.cnf.migrated in this > manner, then the underlying issue may affect you too. > > If you are seeing a denial of some other file, then you have some > other AppArmor-related problem that is *not* the issue tracked in this > bug. If you believe that your failure is a bug in Ubuntu, please look > for other bugs and file a new bug if there isn't a matching one that > tracks your different issue. > > [Original Desription] > > SYMPTOM > mysql fails to start > > IMPACT > no sql for you > > DIAGNOSE: > service mysql start > Job for mysql.service failed because the control process exited with > error code. See "systemctl status mysql.service" and "journalctl -xe" for > details. > > - systemd has all sort of craziness going on so stop that > service mysql stop > > - look at what apparmor is up to > tail -F /var/log/syslog | grep -i apparmor > > - then start again > service mysql start > > output is: > - mysql cannot read /etc/mysql > Aug 7 18:22:17 c505 kernel: [ 1485.490459] audit: type=1400 > audit(1470619337.926:98): apparmor="DENIED" operation="open" > profile="/usr/sbin/mysqld" name="/etc/mysql/my.cnf.migrated" pid=11219 > comm="mysqld" requested_mask="r" denied_mask="r" fsuid=109 ouid=0 > > GET_AROUND: > sudo nano /etc/apparmor.d/usr.sbin.mysqld > line 25 after: > # Allow config access > /etc/mysql/** r, > -add line: > /etc/mysql/* r, > > systemctl restart apparmor.service > > service mysql stop > service mysql start > > - problem is gone > > ProblemType: Bug > DistroRelease: Ubuntu 16.04 > Package: mysql-server-5.7 5.7.13-0ubuntu0.16.04.2 > ProcVersionSignature: Ubuntu 4.4.0-31.50-generic 4.4.13 > Uname: Linux 4.4.0-31-generic x86_64 > ApportVersion: 2.20.1-0ubuntu2.1 > Architecture: amd64 > Date: Sun Aug 7 18:31:32 2016 > Logs.var.log.daemon.log: > > MySQLConf.etc.mysql.conf.d.mysql.cnf: [mysql] > MySQLConf.etc.mysql.conf.d.mysqld_safe_syslog.cnf: >[mysqld_safe] >syslog > MySQLConf.etc.mysql.conf.d.mysqldump.cnf: >[mysqldump] >quick >quote-names >max_allowed_packet = 16M > MySQLConf.etc.mysql.mysql.conf.d.mysqld_safe_syslog.cnf: >[mysqld_safe] >syslog > MySQLVarLibDirListing: ['debian-5.0.flag', 'ib_buffer_pool', 'test', > 'ib_logfile1', 'xpc21.err', 'auto.cnf', 'mysql_upgrade_info', 'bugzilla', > 'zabbix', 'debian-5.5.flag', 'debian-5.1.flag', 'redmine_default', > 'roundcube', 'ib_logfile0', 'ibtmp1', 'sys', 'mysql', 'ibdata1', 'bugs', > 'debian-5.7.flag', 'owncloud', 'performance_schema'] > ProcEnviron: >SHELL=/bin/bash >TERM=xterm >PATH=(custom, user) >LANG=en_US.UTF-8 >LANGUAGE=en_US.UTF-8 > SourcePackage: mysql-5.7 > UpgradeStatus: Upgraded to xenial on 2016-06-13 (56 days ago) > modified.conffile..etc.apparmor.d.usr.sbin.mysqld: [modified] > mtime.conffile..etc.apparmor.d.usr.sbin.mysqld: > 2016-08-07T18:24:24.264357 > > To manage notifications about this bug go to: > https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/ > 1610765/+subscriptions > -- You rec
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
How are they incorrect? It's pretty simple. Change a my.cnf setting once or twice and restart. Then AppArmor comes in and messes everything up. If you said that this should be reported to AppArmor then say that instead. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
I think it's time to mark this bug Invalid. We have had a bunch of "me too" comments that are clearly and incorrectly describing bugs other than the one described here. Conversely the only credible explanation of the problem reported (failure to start due to AppArmor denial of /etc/mysql/my.cnf.migrated) is reported to have gone away by itself and we haven't had any reports of anyone having independently reproduced or even just experienced the same problem. Unfortunately the misguided comments are making it impossible to follow this bug. If it turns out that the bug is real, then I suggest filing a separate and full report (referring to this bug) to get a developer's attention, since I'll be unsubscribing from this bug as I've seen no signal amongst the noise except from the original reporter. ** Changed in: mysql-5.7 (Ubuntu) Status: Incomplete => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
Actually I got similar problem, when tuning setting I added table_cache= 256 into /etc/mysql/mysql.conf.d/mysqld.cnf file -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
I just realized some strange behaviour with my mysqld Ver 5.7.17-0ubuntu0.16.04.1 for Linux on x86_64 ((Ubuntu)) this my.cmf parameter "default-character-set=utf8" in /etc/mysql/mysql.conf.d/mysqld.cnf caused this dmesg output: audit: type=1400 audit(1491639131.263:200): apparmor="DENIED" operation="open" profile="/usr/sbin/mysqld" name="/proc/8039/status" pid=8039 comm="mysqld" requested_mask="r" denied_mask="r" fsuid=107 ouid=107 btw: /etc/mysql contains a link, I'm not whether this is allowed by apparmor setting: drwxr-xr-x 2 root root 4096 Apr 7 20:07 conf.d/ -rw--- 1 root root 317 Feb 21 20:47 debian.cnf -rwxr-xr-x 1 root root 120 Jan 18 22:46 debian-start* lrwxrwxrwx 1 root root24 Feb 21 20:43 my.cnf -> /etc/alternatives/my.cnf -rw-r--r-- 1 root root 839 Apr 20 2016 my.cnf.fallback -rw-r--r-- 1 root root 682 Apr 20 2016 mysql.cnf drwxr-xr-x 2 root root 4096 Apr 8 10:14 mysql.conf.d/ but /etc/apparmor.d/usr.sbin.mysqld only specifies an "r" NOT "lr" for its config-dir. # Allow config access /etc/mysql/** r, (but I'm no apparmor expert) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
Zach, this bug appears to be growing to encompass too many things. I suggest filing a new bug report if you think you've got an issue, and if you think it's AppArmor related, please be sure to include any DENIED lines from dmesg or audit logs. Thanks -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
Happened to me on a fresh DO droplet. Ubuntu 16.04.2 LTS mysql Ver 14.14 Distrib 5.7.17 (x86_64) After two or three days of normal functioning. We had to start optimizing MyISAM. So the first thing we changed log_slow_queries = /var/log/mysql/mysql-slow.log long_query_time = 3 log-queries-not-using-indexes service mysql restart started failing from there. Side note. We changed key_buffer_size to key_buffer_size = 768M And restarted without problems the first day. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
(This might be best put in a separate report, but adding it here for now) The behavior was added for 5.7 with this change https://github.com/mysql/mysql-server/commit/1bba7015030a1cdd9eba21d48e7fdd1bad16ebef It is there to prevent one server process from setting the same socket file as another, so if you have two server processes running and they are set to use the same socket file, shutting down one can remove the socket file for the other (making it appear to have died). -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
I see this now on a plain, fresh install of MySQL 5.7: [Fri Mar 31 12:50:59 2017] audit: type=1400 audit(1490957460.075:78): apparmor="DENIED" operation="open" profile="/usr/sbin/mysqld" name="/proc/4988/status" pid=4988 comm="mysqld" requested_mask="r" denied_mask="r" fsuid=112 ouid=112 As Robie notes, it's from bug 1658239. However, this error has no noticeable effect on the running of the server. It comes up as it should, including after a service restart or a system reboot, so I don't think it's really related to this bug report. It might be causing problems that aren't trivial to reproduce, but if so it should be fixed with the fix to apparmor upstream. For those of you seeing issues that don't include errors when reading files in /etc/mysql, do you see anything in the journal log or MySQL error log? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
@RN > I just ran into Robie's problem at my site. No, you didn't. You didn't get the message with name="/etc/mysql/my.cnf.migrated" so you are not affected by this bug. You are hitting a different bug - perhaps bug 1658239. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
On Tue, Mar 28, 2017 at 04:26:52PM -, Paul Payne wrote: > Actually, I'm getting a further apparmor error: > AVC apparmor="STATUS" operation="profile_replace" profile="unconfined" > name="/usr/sbin/mysqld" This is not an error message. This is a status message that reports a new AppArmor policy has been loaded. Thanks -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
Hello all. I have been trying to figure out just what is going on like all of you. The problem is that Oracle has messed with mysql to the point that it no longer works like it should. The fix is Mariadb, or any other database program. I'm not into conspiracies but Oracle has a vested interest in killing mySql. Reminds me of the Digital Research and Microsoft wars from long ago. Either way, when i installed mariadb i got no hits from apparmor. Two different machines with exactly the same results before and after, one a server and one a desktop. You can try to figure out what piece of code in mySql needs to be fixed or just get mariadb and get back to other more important things. Good Luck everyone. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
I don't know what the deal is. I can now start the mysqld with `sudo systemctl start mysql`. However, when I interact with apt, e.g. `sudo apt-get autoremove`, it attempts to complete the mysql configuration step: Setting up mysql-server-5.7 (5.7.17-0ubuntu0.16.04.2) ... mysql_upgrade: Got error: 2002: Can't connect to local MySQL server through socket '/var/run/mysqld/mysqld.sock' (2) while connecting to the MySQL server Upgrade process encountered error and will not continue. mysql_upgrade failed with exit status 11 When looking at syslog, it appears mysql is being shut down before this part of the upgrade. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
Actually, I'm getting a further apparmor error: AVC apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/sbin/mysqld" -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
Same problem here. mike-something's solution fixed the issue for me. I believe rnickle-hccoll's description is correct. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
I ran into this problem when I upgraded my VM from 14.04 to 16.04. mysql server no longer started, and after a re-install with sudo apt purge mysql-server mysql-server-5.7 mysql-server-core-5.7 sudo apt install mysql-server showed the errors stated I shut them up with: sudo nano /etc/apparmor.d/usr.sbin.mysqld editing the system resource access section to: # Allow system resource access /sys/devices/system/cpu/ r, /sys/devices/system/node/ r, /sys/devices/system/node/** r, /proc/** r, Now it starts with no more app-armor blocks -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
I just ran into Robie's problem at my site. I have a 16.04 server setup in a VM running mysql 5.7.17 Community Edition. About two weeks ago, we started having the mysqld throw apparmor errors and die every day at a random time. What appears to be happening is the daily apt update is trying to update mysql. The random time is a consequence of it being run by the systemd timer for cron.daily. For some reason, part of that update involves a configuration change to mysqld. /etc$ sudo apt-get upgrade --simulate | grep -i sql Conf mysql-server-5.7 (5.7.17-0ubuntu0.16.04.1 Ubuntu:16.04/xenial-updates, Ubuntu:16.04/xenial-security [amd64]) At that time, either during shutdown or reload, mysqld is trying to check the status of itself (or the previous instance?) and is being rejected by apparmor: Mar 22 11:57:45 SERVERNAME kernel: [16429106.693912] audit: type=1400 audit(1490198265.911:133): apparmor="DENIED" operation="open" profile="/usr/sbin/mysqld" name="/proc/7135/status" pid=7135 comm="mysqld" requested_mask="r" denied_mask="r" fsuid=111 ouid=111 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
I am not sure this will help anyone but i got this problem to go away via: (I cannot cut and paste my logs so you may have to fill in the middle sections) I got the apparmor utilities and put mysql into complain only mode. ::aa-complain mysql While this did help mysql run it didnt get much farther so i tried ::mysql_safe which told me that /var/run/mysql directory did not exist. ::mkdir /var/run/mysql ::systemctl stop mysql (as it said it was running ... *shrugs* ... moving on) ::systemctl start mysql it started with out any problems -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1610765] Re: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start
Importance -> Low since we appear to have had only three reports in six months, and it's coming up to a year since 16.04 was released. Therefore I think it's reasonable to assume that this only affects unusual end- user configurations, since typically when a bug affecting more MySQL users appears we receive orders of magnitude more reports. Richard, Michelle or Gary: if any you can work out steps to reproduce the problem (perhaps tweaking timing as needed if it's a race), then I'd be happy to look into it further. Once you have commented with further information about how to reproduce the bug, please change the bug status to Confirmed. Otherwise, feel free to use continue using this bug as a communication point for others affected but please leave it marked Incomplete. ** Changed in: mysql-5.7 (Ubuntu) Importance: Undecided => Low -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1610765 Title: Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail to start To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
