{"id":1836,"date":"2018-02-18T18:52:17","date_gmt":"2018-02-18T09:52:17","guid":{"rendered":"http:\/\/matoken.org\/blog\/?p=1836"},"modified":"2018-02-18T18:52:17","modified_gmt":"2018-02-18T09:52:17","slug":"i-changed-mysqls-datadir-and-it-got-scolded-by-apparmor-and-it-not-start","status":"publish","type":"post","link":"https:\/\/matoken.org\/blog\/2018\/02\/18\/i-changed-mysqls-datadir-and-it-got-scolded-by-apparmor-and-it-not-start\/","title":{"rendered":"mysql\u306edatadir\u3092\u5909\u66f4\u3057\u305f\u3089apparmor\u306b\u6012\u3089\u308c\u3066\u8d77\u52d5\u3057\u306a\u304f\u306a\u3063\u305f"},"content":{"rendered":"

\u30c7\u30a3\u30b9\u30af\u306e\u90fd\u5408\u3067mysql\u306e\u30c7\u30fc\u30bf\u306e\u7f6e\u304d\u5834\u6240\u3092\u5909\u66f4\u3057\u307e\u3057\u305f\uff0e
\nmysqld\u3092\u505c\u6b62\u3057\u3066\uff0c\u30c7\u30fc\u30bf\u3092\u79fb\u52d5\u3057\u3066\uff0c\u30b7\u30f3\u30dc\u30ea\u30c3\u30af\u30ea\u30f3\u30af\u3082\u4e00\u5fdc\u8cbc\u3063\u3066\u304a\u304f\uff0e
\n\/etc\/mysql\/mysql.conf.d\/mysqld.cnf<\/code>\u3067datadir\u3092\u5909\u66f4\uff0e<\/p>\n

\n
<\/span>[mysqld]<\/span>\r\ndatadir<\/span>         =<\/span> \/export\/data\/var\/lib\/mysql<\/span>\r\n<\/pre>\n<\/div>\n
\u3053\u306e\u72b6\u614b\u3067mysql\u3092\u8d77\u52d5\u3059\u308b\u3068\u3053\u3093\u306a\u611f\u3058\u306e\u30a8\u30e9\u30fc\u3067\u8d77\u52d5\u3057\u306a\u304f\u306a\u3063\u3066\u3057\u307e\u3044\u307e\u3057\u305f\uff0e<\/p>\n
\n
<\/span>2018-02-17T16:12:54.184655Z 0 [ERROR] InnoDB: The innodb_system data file 'ibdata1' must be writable\r\n2018-02-17T16:12:54.184718Z 0 [ERROR] InnoDB: The innodb_system data file 'ibdata1' must be writable\r\n2018-02-17T16:12:54.184734Z 0 [ERROR] InnoDB: Plugin initialization aborted with error Generic error\r\n2018-02-17T16:12:54.785643Z 0 [ERROR] Plugin 'InnoDB' init function returned error.\r\n2018-02-17T16:12:54.786151Z 0 [ERROR] Plugin 'InnoDB' registration as a STORAGE ENGINE failed.\r\n2018-02-17T16:12:54.786272Z 0 [ERROR] Failed to initialize builtin plugins.\r\n2018-02-17T16:12:54.786415Z 0 [ERROR] Aborting\r\n<\/pre>\n<\/div>\n
\u8a72\u5f53\u30d5\u30a1\u30a4\u30eb\u306f\u4e00\u898b\u554f\u984c\u7121\u3055\u305d\u3046\u306b\u898b\u3048\u307e\u3059\uff0e<\/p>\n
\n
<\/span>$ sudo ls -la \/export\/data\/var\/lib\/mysql\/ibdata1\r\n-rw-rw---- 1<\/span> mysql mysql 102760448<\/span>  2\u6708 18<\/span> 05<\/span>:15 \/export\/data\/var\/lib\/mysql\/ibdata1\r\n$ sudo -u mysql dd if<\/span>=<\/span>\/export\/data\/var\/lib\/mysql\/ibdata1 bs<\/span>=<\/span>10<\/span> count<\/span>=<\/span>1<\/span>|<\/span>od -xc\r\n1<\/span>+0 \u30ec\u30b3\u30fc\u30c9\u5165\u529b\r\n1<\/span>+0 \u30ec\u30b3\u30fc\u30c9\u51fa\u529b\r\n10<\/span> bytes copied, 9<\/span>.8366e-05 s, 102<\/span> kB\/s\r\n0000000<\/span>    2214<\/span>    405b    0000<\/span>    0000<\/span>    0000<\/span>\r\n        024<\/span>   "   [   @  \\0  \\0  \\0  \\0  \\0  \\0<\/span>\r\n0000012<\/span>\r\n<\/pre>\n<\/div>\n
\u4f55\u3067\u3060?\u3068\u601d\u3063\u305f\u3089kernel log\u306b\u3053\u3093\u306a\u30ed\u30b0\u304c\uff0eapparmor\u3067\u5f15\u3063\u304b\u304b\u3063\u3066\u3044\u308b\u3088\u3046\u3067\u3059\uff0e<\/p>\n
\n
<\/span>Feb 18 00:35:26 micro kernel: [ 3569.631324] audit: type=1400 audit(1518881726.300:24): apparmor="DENIED" operation="open" prof\r\nile="\/usr\/sbin\/mysqld" name="\/proc\/18795\/status" pid=18795 comm="mysqld" requested_mask="r" denied_mask="r" fsuid=114 ouid=114\r\n<\/pre>\n<\/div>\n
\/etc\/apparmor.d\/usr.sbin.mysqld<\/code>\u3067\u30d1\u30b9\u3092\u5909\u66f4\u3057\u307e\u3059\uff0e<\/p>\n
\n
<\/span>diff --git a\/apparmor.d\/usr.sbin.mysqld b\/apparmor.d\/usr.sbin.mysqld<\/span>\r\nindex 2619e7d..adb8259 100644<\/span>\r\n--- a\/apparmor.d\/usr.sbin.mysqld   <\/span>\r\n+++ b\/apparmor.d\/usr.sbin.mysqld<\/span>\r\n@@ -46,16 +46,16 @@<\/span>\r\n   \/usr\/share\/mysql\/** r,  \r\n\r\n # Allow data dir access   \r\n-  \/var\/lib\/mysql\/ r,<\/span>\r\n-  \/var\/lib\/mysql\/** rwk,  <\/span>\r\n+  \/export\/data\/var\/lib\/mysql\/ r,  <\/span>\r\n+  \/export\/data\/var\/lib\/mysql\/** rwk,<\/span>\r\n\r\n # Allow data files dir access\r\n-  \/var\/lib\/mysql-files\/ r,<\/span>\r\n-  \/var\/lib\/mysql-files\/** rwk,<\/span>\r\n+  \/export\/data\/var\/lib\/mysql-files\/ r,<\/span>\r\n+  \/export\/data\/var\/lib\/mysql-files\/** rwk,<\/span>\r\n\r\n # Allow keyring dir access\r\n-  \/var\/lib\/mysql-keyring\/ r,<\/span>\r\n-  \/var\/lib\/mysql-keyring\/** rwk, <\/span>\r\n+  \/export\/data\/var\/lib\/mysql-keyring\/ r,<\/span>\r\n+  \/export\/data\/var\/lib\/mysql-keyring\/** rwk,<\/span>\r\n\r\n # Allow log file access \r\n   \/var\/log\/mysql.err rw,\r\n<\/pre>\n<\/div>\n
\u3053\u306e\u72b6\u614b\u3067apparmor\u3092\u518d\u8d77\u52d5\u3057\u3066\u8a2d\u5b9a\u3092\u53cd\u6620\u3057\u3066\u304b\u3089mysql\u3092\u8d77\u52d5\u3067OK\u3067\u3057\u305f\uff0e<\/p>\n
\n
<\/span>$ sudo service apparmor restart\r\n$ sudo service mysql start\r\n<\/pre>\n<\/div>\n
\u3053\u306e\u5f8ciostat -x<\/code>\u3092\u773a\u3081\u3066\u5927\u4e08\u592b\u305d\u3046\u304b\u306a\u30fc\u3063\u3066\u601d\u3063\u305f\u306e\u3067\u3059\u304c\u30c7\u30a3\u30b9\u30af\u30a2\u30af\u30bb\u30b9\u97f3\u304c\u5927\u304d\u304f\u306a\u3063\u305f\u306e\u3067\u307e\u305f\u5225\u306e\u5834\u6240\u306b\u79fb\u52d5\u3059\u308b\u304b\u3082\u2026\u2026\uff0e<\/p>\n
\u74b0\u5883<\/h2>\n
\n
<\/span>$ dpkg-query -W mysql-server\r\nmysql-server    5<\/span>.7.21-0ubuntu0.16.04.1\r\n$ lsb_release -a\r\nDistributor ID: Ubuntu\r\nDescription:    Ubuntu 16<\/span>.04.3 LTS\r\nRelease:        16<\/span>.04\r\nCodename:       xenial\r\n$ uname -m\r\nx86_64\r\n<\/pre>\n<\/div>\n