Debian安装配置MariaDB

安装

复制代码
#更新软件包
apt update
#查找可安装的MariaDB
apt search mariadb-server
Sorting... Done
Full Text Search... Done
mariadb-server/stable 1:10.11.6-0+deb12u1 amd64
  MariaDB database server binaries

mariadb-server-10.5/stable 1:10.11.6-0+deb12u1 amd64
  MariaDB database server binaries

mariadb-server-core/stable 1:10.11.6-0+deb12u1 amd64
  MariaDB database core server files
#安装MariaDB,遇到选项选Y即可
apt install mariadb-server
#安装后会自动运行,查看MariaDB状态
systemctl status mariadb

授权

复制代码
#执行提高安全性的脚本
root@iZuf67owyzd0wopzvdfgsyZ:/# mysql_secure_installation

NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB
      SERVERS IN PRODUCTION USE!  PLEASE READ EACH STEP CAREFULLY!

In order to log into MariaDB to secure it, we'll need the current
password for the root user. If you've just installed MariaDB, and
haven't set the root password yet, you should just press enter here.
#此处需记住密码
Enter current password for root (enter for none):
OK, successfully used password, moving on...

Setting the root password or using the unix_socket ensures that nobody
can log into the MariaDB root user without the proper authorisation.

You already have your root account protected, so you can safely answer 'n'.
#socket认证
Switch to unix_socket authentication [Y/n] Y
Enabled successfully!
Reloading privilege tables..
 ... Success!


You already have your root account protected, so you can safely answer 'n'.
#是否改变密码
Change the root password? [Y/n] n
 ... skipping.

By default, a MariaDB installation has an anonymous user, allowing anyone
to log into MariaDB without having to have a user account created for
them.  This is intended only for testing, and to make the installation
go a bit smoother.  You should remove them before moving into a
production environment.
#是否移除匿名用户
Remove anonymous users? [Y/n] y
 ... Success!

Normally, root should only be allowed to connect from 'localhost'.  This
ensures that someone cannot guess at the root password from the network.
#是否不允许远程登录
Disallow root login remotely? [Y/n] y
 ... Success!

By default, MariaDB comes with a database named 'test' that anyone can
access.  This is also intended only for testing, and should be removed
before moving into a production environment.
#移除测试数据库
Remove test database and access to it? [Y/n] y
 - Dropping test database...
 ... Success!
 - Removing privileges on test database...
 ... Success!

Reloading the privilege tables will ensure that all changes made so far
will take effect immediately.
#重新加载权限表
Reload privilege tables now? [Y/n] y
 ... Success!

Cleaning up...

All done!  If you've completed all of the above steps, your MariaDB
installation should now be secure.

Thanks for using MariaDB!

我设置了root用户不允许远程登录,需要新建一个用户用来远程登录

复制代码
root@iZuf67owyzd0wopzvdfgsyZ:/# mysql -uroot -p
Enter password:
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 40
Server version: 10.11.6-MariaDB-0+deb12u1 Debian 12

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
#创建用户,cus是用户名,%是可访问ip,如果用%表示所有ip,可自行指定,password是密码
MariaDB [(none)]> CREATE USER 'cus'@'%' IDENTIFIED BY 'password';
Query OK, 0 rows affected (0.001 sec)
#查看权限


MariaDB [(none)]> SHOW GRANTS FOR 'cus'@'%';
+----------------------------------------------------------------------------------------------------+
| Grants for cus@%                                                                                   |
+----------------------------------------------------------------------------------------------------+
| GRANT USAGE ON *.* TO `cus`@`%` IDENTIFIED BY PASSWORD '*F29DBAD471E0FF1EFA1BE48B07005CC9DC18B301' |
+----------------------------------------------------------------------------------------------------+
1 row in set (0.000 sec)
#授权
MariaDB [(none)]> GRANT ALL PRIVILEGES ON *.* TO 'cus'@'%' IDENTIFIED BY 'cus';
Query OK, 0 rows affected (0.001 sec)
#刷新权限
MariaDB [(none)]> FLUSH PRIVILEGES;
Query OK, 0 rows affected (0.001 sec)

配置

MariaDB默认是运行在3306端口的,但是此时如果我们用数据库连接工具测试连接或者服务器上指定ip连接,是连接不上的,需要做一些配置

复制代码
#编辑配置文件
vim /etc/mysql/mariadb.conf.d/50-server.cnf

配置文件修改项

  • 修改port(非必须,默认3306,不太推荐用默认的)
  • 修改bind-address为0.0.0.0,所有ip可访问
  • 保存后重启MariaDB
    systemctl start mariadb
  • navicat测试连接

卸载

如需卸载,可执行以下命令
sudo apt-get purge --auto-remove mariadb-server

相关推荐
江华森23 分钟前
Ansible 自动化运维:从入门到实战
运维·自动化·ansible
宋浮檀s2 小时前
应急响应——Web漏洞:命令执行+SSRF+弱口令
运维·数据库·sql·网络安全·oracle·应急响应
日取其半万世不竭3 小时前
iftop、nethogs 和 nload:Linux 服务器网络流量实时监控工具介绍
linux·运维·服务器
mounter6253 小时前
Linux 内核资源管理:控制组(cgroup)的演进与“策略组”新提案
linux·运维·服务器·cgroup·kernel
bksczm3 小时前
文件在磁盘中的存储方式
linux·运维·服务器
Wpa.wk3 小时前
win环境本地文件上传远程服务器(scp/远程连接工具)
运维·服务器
Soari4 小时前
SSH 主机密钥冲突
运维·网络·ssh
黑泽明Coding4 小时前
使用密钥登录ssh
运维·ssh
着迷不白5 小时前
五、文本处理工具+正则表达式
linux·运维·服务器
Elastic 中国社区官方博客5 小时前
每次操作一个 API 调用:Elastic Cloud Hosted 如何让大规模部署管理变得可行
大数据·运维·数据库·elasticsearch·搜索引擎·serverless