如何在Ubuntu 20.04上安装MariaDB

介绍 (Introduction)

MariaDB is an open-source relational database management system, commonly used as an alternative for MySQL as the database portion of the popular LAMP (Linux, Apache, MySQL, PHP/Python/Perl) stack. It is intended to be a drop-in replacement for MySQL.

MariaDB是一个开放源代码的关系数据库管理系统，通常用作MySQL的替代方案，作为流行的LAMP (Linux，Apache，MySQL，PHP / Python / Perl)堆栈的数据库部分。 它旨在替代MySQL。

The short version of this installation guide consists of these three steps:

本安装指南的简短版本包括以下三个步骤：

• Update your package index using apt

  使用apt更新您的软件包索引

• Install the mariadb-server package using apt. The package also pulls in related tools to interact with MariaDB

  使用apt安装mariadb-server软件包。 该软件包还引入了与MariaDB交互的相关工具

• Run the included mysql_secure_installation security script to restrict access to the server

  运行附带的mysql_secure_installation安全脚本以限制对服务器的访问

• sudo apt update
  sudo apt更新
• sudo apt install mariadb-server
  sudo apt安装mariadb-server
• sudo mysql_secure_installation
  须藤mysql_secure_installation

This tutorial will explain how to install MariaDB on an Ubuntu 20.04 server and verify that it is running and has a safe initial configuration.

本教程将说明如何在Ubuntu 20.04服务器上安装MariaDB并验证其是否正在运行并具有安全的初始配置。

先决条件 (Prerequisites)

To follow this tutorial, you will need a server running Ubuntu 20.04. This server should have a non-root administrative user and a firewall configured with UFW. Set this up by following our initial server setup guide for Ubuntu 20.04.

要遵循本教程，您将需要一台运行Ubuntu 20.04的服务器。 此服务器应具有非root用户管理权限，并应使用UFW配置防火墙。 请遵循我们针对Ubuntu 20.04的初始服务器设置指南进行设置 。

第1步-安装MariaDB (Step 1 — Installing MariaDB)

As of this writing, Ubuntu 20.04’s default APT repositories include MariaDB version 10.3.

在撰写本文时，Ubuntu 20.04的默认APT存储库包括MariaDB版本10.3 。

To install it, update the package index on your server with apt:

要安装它，请使用apt更新服务器上的软件包索引：

• sudo apt update
  sudo apt更新

Then install the package:

然后安装软件包：

• sudo apt install mariadb-server
  sudo apt安装mariadb-server

These commands will install MariaDB, but will not prompt you to set a password or make any other configuration changes. Because the default configuration leaves your installation of MariaDB insecure, we will use a script that the mariadb-server package provides to restrict access to the server and remove unused accounts.

这些命令将安装MariaDB，但不会提示您设置密码或进行任何其他配置更改。 因为默认配置使您对MariaDB的安装不安全，所以我们将使用mariadb-server软件包提供的脚本来限制对服务器的访问并删除未使用的帐户。

第2步-配置MariaDB (Step 2 — Configuring MariaDB)

For new MariaDB installations, the next step is to run the included security script. This script changes some of the less secure default options for things like remote root logins and sample users.

对于新的MariaDB安装，下一步是运行附带的安全脚本。 该脚本更改了一些不太安全的默认选项，例如远程root登录和样本用户。

Run the security script:

运行安全脚本：

• sudo mysql_secure_installation
  须藤mysql_secure_installation

This will take you through a series of prompts where you can make some changes to your MariaDB installation’s security options. The first prompt will ask you to enter the current database root password. Since you have not set one up yet, press ENTER to indicate “none”.

这将引导您完成一系列提示，您可以在其中更改MariaDB安装的安全性选项。 第一个提示将要求您输入当前的数据库根密码。 由于尚未设置，请按ENTER表示“无”。

   
   

    
    Output
   
   
NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB
      SERVERS IN PRODUCTION USE!  PLEASE READ EACH STEP CAREFULLY!

In order to log into MariaDB to secure it, we'll need the current
password for the root user.  If you've just installed MariaDB, and
you haven't set the root password yet, the password will be blank,
so you should just press enter here.

Enter current password for root (enter for none): 

The next prompt asks you whether you’d like to set up a database root password. On Ubuntu, the root account for MariaDB is tied closely to automated system maintenance, so we should not change the configured authentication methods for that account. Doing so would make it possible for a package update to break the database system by removing access to the administrative account. Type N and then press ENTER.

下一个提示询问您是否要设置数据库根密码。 在Ubuntu上，MariaDB的根帐户与自动系统维护紧密相关，因此我们不应更改该帐户的已配置身份验证方法。 这样做将使软件包更新有可能通过删除对管理帐户的访问来破坏数据库系统。 键入N ，然后按ENTER 。

   
   

    
    Output
   
   
. . .
OK, successfully used password, moving on...

Setting the root password ensures that nobody can log into the MariaDB
root user without the proper authorisation.

Set root password? [Y/n] N

Later, we will cover how to set up an additional administrative account for password access if socket authentication is not appropriate for your use case.

稍后，我们将介绍如何在套接字验证不适用于您的用例的情况下如何设置其他管理帐户来访问密码。

From there, you can press Y and then ENTER to accept the defaults for all the subsequent questions. This will remove some anonymous users and the test database, disable remote root logins, and load these new rules so that MariaDB immediately implements the changes you have made.

在此处，您可以按Y ，然后按ENTER以接受所有后续问题的默认设置。 这将删除一些匿名用户和测试数据库，禁用远程root登录，并加载这些新规则，以便MariaDB立即实施您所做的更改。

With that, you’ve finished MariaDB’s initial security configuration. The next step is an optional one, though you should follow it if you prefer to authenticate to your MariaDB server with a password.

这样，您就完成了MariaDB的初始安全配置。 下一步是可选步骤，但是如果您希望使用密码向您的MariaDB服务器进行身份验证，则应遵循该步骤。

步骤3 —(可选)创建使用密码身份验证的管理用户 (Step 3 — (Optional) Creating an Administrative User that Employs Password Authentication)

On Ubuntu systems running MariaDB 10.3, the root MariaDB user is set to authenticate using the unix_socket plugin by default rather than with a password. This allows for some greater security and usability in many cases, but it can also complicate things when you need to allow an external program (e.g., phpMyAdmin) administrative rights.

在运行MariaDB 10.3的Ubuntu系统上，默认情况下，将root MariaDB用户设置为使用unix_socket插件而不是使用密码进行身份验证。 在许多情况下，这可以提高安全性和可用性，但是当您需要允许外部程序(例如phpMyAdmin)的管理权限时，也会使事情变得复杂。

Because the server uses the root account for tasks like log rotation and starting and stopping the server, it is best not to change the root account’s authentication details. Changing credentials in the /etc/mysql/debian.cnf configuration file may work initially, but package updates could potentially overwrite those changes. Instead of modifying the root account, the package maintainers recommend creating a separate administrative account for password-based access.

由于服务器使用root帐户执行日志轮换以及启动和停止服务器等任务，因此最好不要更改root帐户的身份验证详细信息。 最初可能会在/etc/mysql/debian.cnf配置文件中更改凭据，但软件包更新可能会覆盖这些更改。 软件包维护者建议不要创建根帐户，而要修改根帐户，而要修改基于密码的访问权限。

To this end, we will create a new account called admin with the same capabilities as the root account, but configured for password authentication. Open up the MariaDB prompt from your terminal:

为此，我们将创建一个名为admin的新帐户，该帐户具有与根帐户相同的功能，但已配置为进行密码身份验证。 从终端打开MariaDB提示：

• sudo mariadb
  苏多·玛丽亚德

Then create a new user with root privileges and password-based access. Be sure to change the username and password to match your preferences:

然后创建一个具有root用户特权和基于密码的访问权限的新用户。 确保更改用户名和密码以匹配您的首选项：

• GRANT ALL ON *.* TO 'admin'@'localhost' IDENTIFIED BY 'password' WITH GRANT OPTION;

  授予所有权限*。*至' admin '@'localhost'由' password '标识，并带有GRANT选项；

Flush the privileges to ensure that they are saved and available in the current session:

刷新特权以确保它们已保存并在当前会话中可用：

• FLUSH PRIVILEGES;
  冲洗特权;

Following this, exit the MariaDB shell:

之后，退出MariaDB shell：

• exit
  出口

Finally, let’s test the MariaDB installation.

最后，让我们测试一下MariaDB安装。

步骤4 —测试MariaDB (Step 4 — Testing MariaDB)

When installed from the default repositories, MariaDB will start running automatically. To test this, check its status.

从默认存储库安装后，MariaDB将自动开始运行。 要对此进行测试，请检查其状态。

• sudo systemctl status mariadb
  sudo systemctl状态mariadb

You’ll receive output that is similar to the following:

您将收到类似于以下内容的输出：

   
   

    
    Output
   
   
● mariadb.service - MariaDB 10.3.22 database server
     Loaded: loaded (/lib/systemd/system/mariadb.service; enabled; vendor preset: enabled)
     Active: active (running) since Tue 2020-05-12 13:38:18 UTC; 3min 55s ago
       Docs: man:mysqld(8)
             https://mariadb.com/kb/en/library/systemd/
   Main PID: 25914 (mysqld)
     Status: "Taking your SQL requests now..."
      Tasks: 31 (limit: 2345)
     Memory: 65.6M
     CGroup: /system.slice/mariadb.service
             └─25914 /usr/sbin/mysqld
. . .

If MariaDB isn’t running, you can start it with the command sudo systemctl start mariadb.

如果MariaDB未运行，则可以使用命令sudo systemctl start mariadb启动它。

For an additional check, you can try connecting to the database using the mysqladmin tool, which is a client that lets you run administrative commands. For example, this command says to connect to MariaDB as root using the Unix socket and return the version:

要进行其他检查，可以尝试使用mysqladmin工具连接到数据库，该工具是允许您运行管理命令的客户端。 例如，此命令说要使用Unix套接字以root用户身份连接到MariaDB并返回版本：

• sudo mysqladmin version
  sudo mysqladmin版本

You will receive output similar to this:

您将收到类似于以下的输出：

   
   

    
    Output
   
   
mysqladmin  Ver 9.1 Distrib 10.3.22-MariaDB, for debian-linux-gnu on x86_64
Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Server version      10.3.22-MariaDB-1ubuntu1
Protocol version    10
Connection      Localhost via UNIX socket
UNIX socket     /var/run/mysqld/mysqld.sock
Uptime:         4 min 49 sec

Threads: 7  Questions: 467  Slow queries: 0  Opens: 177  Flush tables: 1  Open tables: 31  Queries per second avg: 1.615

If you configured a separate administrative user with password authentication, you could perform the same operation by typing:

如果使用密码身份验证配置了单独的管理用户，则可以通过键入以下命令执行相同的操作：

• mysqladmin -u admin -p version

  mysqladmin -u admin -p版本

This means that MariaDB is up and running and that your user is able to authenticate successfully.

这意味着MariaDB已启动并正在运行，并且您的用户能够成功进行身份验证。

结论 (Conclusion)

In this guide you installed the MariaDB relational database management system, and secured it using the mysql_secure_installation script that it came installed with. You also had the option to create a new administrative user that uses password authentication before testing the MariaDB server’s functionality.

在本指南中，您安装了MariaDB关系数据库管理系统，并使用安装时附带的mysql_secure_installation脚本对其进行了保护。 您还可以选择创建一个使用密码身份验证的新管理用户，然后再测试MariaDB服务器的功能。

Now that you have a running and secure MariaDB server, here some examples of next steps that you can take to work with the server:

既然您已经有一个运行中且安全的MariaDB服务器，那么下面是您可以使用该服务器的一些后续步骤示例：

• Learn how to import and export databases

  了解如何导入和导出数据库

• Practice running SQL queries

  练习运行SQL查询

• Incorporate MariaDB into a larger application stack

  将MariaDB集成到更大的应用程序堆栈中

翻译自: https://www.digitalocean.com/community/tutorials/how-to-install-mariadb-on-ubuntu-20-04