@Gary

Look, I want to help. Please see "How to Report Bugs Effectively" at
http://www.chiark.greenend.org.uk/~sgtatham/bugs.html for an excellent
explanation as to why I cannot help right now.

> You can now consider the original post an official bug report.

Unfortunately the bug status will have to be marked Incomplete until we
have steps to reproduce the problem. I want it to be clear that
developers do not have enough information to help with this right now,
as they don't know how to reproduce the problem and nobody has any hunch
as to what is really happening. Thus we also don't know if it is a bug
in Ubuntu's mysql-5.7 packaging (or in Ubuntu at all) or not, since we
don't know if it is something about how you set up the system which
results in this problem.

You mentioned webmin, which is not part of Ubuntu. Is it possible that
you and Richard both have webmin in common, and that it is the use of
webmin that results in the problem (perhaps a race?) rather than a bug
in Ubuntu?

@Paul
@haliphax

It seems that you both have a different error message. Though it is
related to AppArmor, the root cause for your problem is likely to be
different. It looks more likely to me that you are affected by bug
1658239 rather than this one.

** Summary changed:

- mysql server fails to start due to faulty apparmor profile
+ Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it to fail 
to start

** Description changed:

+ [Triage Notes]
+ 
+ This bug tracks reports of the following AppArmor denial:
+ 
+ Aug  7 18:22:17 c505 kernel: [ 1485.490459] audit: type=1400
+ audit(1470619337.926:98): apparmor="DENIED" operation="open"
+ profile="/usr/sbin/mysqld" name="/etc/mysql/my.cnf.migrated" pid=11219
+ comm="mysqld" requested_mask="r" denied_mask="r" fsuid=109 ouid=0
+ 
+ If you are seeing a denial of /etc/mysql/my.cnf.migrated in this manner,
+ then the underlying issue may affect you too.
+ 
+ If you are seeing a denial of some other file, then you have some other
+ AppArmor-related problem that is *not* the issue tracked in this bug. If
+ you believe that your failure is a bug in Ubuntu, please look for other
+ bugs and file a new bug if there isn't a matching one that tracks your
+ different issue.
+ 
+ [Original Desription]
+ 
  SYMPTOM
  mysql fails to start
  
- 
  IMPACT
  no sql for you
- 
  
  DIAGNOSE:
  service mysql start
  Job for mysql.service failed because the control process exited with error 
code. See "systemctl status mysql.service" and "journalctl -xe" for details.
  
  - systemd has all sort of craziness going on so stop that
  service mysql stop
  
  - look at what apparmor is up to
  tail -F /var/log/syslog | grep -i apparmor
  
  - then start again
  service mysql start
  
  output is:
  - mysql cannot read /etc/mysql
  Aug  7 18:22:17 c505 kernel: [ 1485.490459] audit: type=1400 
audit(1470619337.926:98): apparmor="DENIED" operation="open" 
profile="/usr/sbin/mysqld" name="/etc/mysql/my.cnf.migrated" pid=11219 
comm="mysqld" requested_mask="r" denied_mask="r" fsuid=109 ouid=0
  
- 
  GET_AROUND:
  sudo nano /etc/apparmor.d/usr.sbin.mysqld
  line 25 after:
  # Allow config access
-   /etc/mysql/** r,
+   /etc/mysql/** r,
  -add line:
-   /etc/mysql/* r,
+   /etc/mysql/* r,
  
  systemctl restart apparmor.service
  
  service mysql stop
  service mysql start
  
  - problem is gone
  
  ProblemType: Bug
  DistroRelease: Ubuntu 16.04
  Package: mysql-server-5.7 5.7.13-0ubuntu0.16.04.2
  ProcVersionSignature: Ubuntu 4.4.0-31.50-generic 4.4.13
  Uname: Linux 4.4.0-31-generic x86_64
  ApportVersion: 2.20.1-0ubuntu2.1
  Architecture: amd64
  Date: Sun Aug  7 18:31:32 2016
  Logs.var.log.daemon.log:
-  
+ 
  MySQLConf.etc.mysql.conf.d.mysql.cnf: [mysql]
  MySQLConf.etc.mysql.conf.d.mysqld_safe_syslog.cnf:
-  [mysqld_safe]
-  syslog
+  [mysqld_safe]
+  syslog
  MySQLConf.etc.mysql.conf.d.mysqldump.cnf:
-  [mysqldump]
-  quick
-  quote-names
-  max_allowed_packet   = 16M
+  [mysqldump]
+  quick
+  quote-names
+  max_allowed_packet   = 16M
  MySQLConf.etc.mysql.mysql.conf.d.mysqld_safe_syslog.cnf:
-  [mysqld_safe]
-  syslog
+  [mysqld_safe]
+  syslog
  MySQLVarLibDirListing: ['debian-5.0.flag', 'ib_buffer_pool', 'test', 
'ib_logfile1', 'xpc21.err', 'auto.cnf', 'mysql_upgrade_info', 'bugzilla', 
'zabbix', 'debian-5.5.flag', 'debian-5.1.flag', 'redmine_default', 'roundcube', 
'ib_logfile0', 'ibtmp1', 'sys', 'mysql', 'ibdata1', 'bugs', 'debian-5.7.flag', 
'owncloud', 'performance_schema']
  ProcEnviron:
-  SHELL=/bin/bash
-  TERM=xterm
-  PATH=(custom, user)
-  LANG=en_US.UTF-8
-  LANGUAGE=en_US.UTF-8
+  SHELL=/bin/bash
+  TERM=xterm
+  PATH=(custom, user)
+  LANG=en_US.UTF-8
+  LANGUAGE=en_US.UTF-8
  SourcePackage: mysql-5.7
  UpgradeStatus: Upgraded to xenial on 2016-06-13 (56 days ago)
  modified.conffile..etc.apparmor.d.usr.sbin.mysqld: [modified]
  mtime.conffile..etc.apparmor.d.usr.sbin.mysqld: 2016-08-07T18:24:24.264357

** Changed in: mysql-5.7 (Ubuntu)
       Status: Confirmed => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1610765

Title:
  Apparmor refuses mysqld open on /etc/mysql/my.cnf.migrated causing it
  to fail to start

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1610765/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to