apparmor mysql_16.04 MySQL无法启动，因为 AppArmor？

问题

我尝试在Kubuntu 16.04上安装mysql-server-5.7，但麻烦来了。

sudo apt install mysql-server 提供以下输出。Setting up mysql-server-5.7 (5.7.18-0ubuntu0.16.04.1) ...

Renaming removed key_buffer and myisam-recover options (if present)

Job for mysql.service failed because the control process exited with error code. See"systemctl status mysql.service" and"journalctl -xe" for details.

invoke-rc.d: initscript mysql, action"start" failed.

● mysql.service - MySQL Community Server

Loaded: loaded (/lib/systemd/system/mysql.service; enabled; vendor preset: enabled)

Active: activating (auto-restart) (Result: exit-code) since ons 2017-05-17 09:48:39 CEST; 10ms ago

Process: 13622 ExecStartPost=/usr/share/mysql/mysql-systemd-start post (code=exited, status=0/SUCCESS)

Process: 13621 ExecStart=/usr/sbin/mysqld (code=exited, status=2)

Process: 13612 ExecStartPre=/usr/share/mysql/mysql-systemd-start pre (code=exited, status=0/SUCCESS)

Main PID: 13621 (code=exited, status=2)

maj 17 09:48:39 anis systemd[1]: Failed to start MySQL Community Server.

maj 17 09:48:39 anis systemd[1]: mysql.service: Unit entered failed state.

maj 17 09:48:39 anis systemd[1]: mysql.service: Failed with result 'exit-code'.

dpkg: error processing package mysql-server-5.7 (--configure):

subprocess installed post-installation script returned error exit status 1

dpkg: dependency problems prevent configuration of mysql-server:

mysql-server depends on mysql-server-5.7; however:

Package mysql-server-5.7 is not configured yet.

dpkg: error processing package mysql-server (--configure):

dependency problems - leaving unconfigured

Errors were encountered while processing:

mysql-server-5.7

mysql-server

E: Sub-process /usr/bin/dpkg returned an error code (1)

尝试运行journalctl -xe排除故障时，得到如下所示的输出，这表示AppArmor给我带来麻烦。maj 17 09:53:14 anis systemd[1]: Starting MySQL Community Server...

-- Subject: Unit mysql.service has begun start-up

-- Defined-By: systemd

-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel

--

-- Unit mysql.service has begun starting up.

maj 17 09:53:14 anis audit[14767]: AVC apparmor="DENIED" operation="open" profile="/usr/sbin/mysqld" name="/proc/14767/status" pid=14767 comm="mysqld" requested_mask="r" denied_mask="r" fsuid=124 ouid=124

maj 17 09:53:14 anis audit[14767]: AVC apparmor="DENIED" operation="open" profile="/usr/sbin/mysqld" name="/sys/devices/system/node/" pid=14767 comm="mysqld" requested_mask="r" denied_mask="r" fsuid=124 ouid=0

maj 17 09:53:14 anis kernel: audit: type=1400 audit(1495007594.314:240): apparmor="DENIED" operation="open" profile="/usr/sbin/mysqld" name="/proc/14767/status" pid=14767 comm="mysqld" requested_mask="r" denied_mask="r" fsuid=124 ouid=124

maj 17 09:53:14 anis kernel: audit: type=1400 audit(1495007594.314:241): apparmor="DENIED" operation="open" profile="/usr/sbin/mysqld" name="/sys/devices/system/node/" pid=14767 comm="mysqld" requested_mask="r" denied_mask="r" fsuid=124 ouid=0

maj 17 09:53:14 anis kernel: audit: type=1400 audit(1495007594.314:242): apparmor="DENIED" operation="open" profile="/usr/sbin/mysqld" name="/proc/14767/status" pid=14767 comm="mysqld" requested_mask="r" denied_mask="r" fsuid=124 ouid=124

maj 17 09:53:14 anis audit[14767]: AVC apparmor="DENIED" operation="open" profile="/usr/sbin/mysqld" name="/proc/14767/status" pid=14767 comm="mysqld" requested_mask="r" denied_mask="r" fsuid=124 ouid=124

maj 17 09:53:14 anis audit[14767]: AVC apparmor="DENIED" operation="open" profile="/usr/sbin/mysqld" name="/proc/14767/task/14767/mem" pid=14767 comm="mysqld" requested_mask="r" denied_mask="r" fsuid=124 ouid=124

maj 17 09:53:14 anis kernel: audit: type=1400 audit(1495007594.658:243): apparmor="DENIED" operation="open" profile="/usr/sbin/mysqld" name="/proc/14767/task/14767/mem" pid=14767 comm="mysqld" requested_mask="r" denied_mask="r" fsuid=124 ouid=124

maj 17 09:53:14 anis systemd[1]: mysql.service: Main process exited, code=exited, status=2/INVALIDARGUMENT

如何解决这个问题？

答案1

你需要编辑apparmor配置，让MySQL可以访问这些文件，日志消息告诉你/usr/sbin/mysqld需要读取(r )访问以打开/proc/14767/status，要编辑的文件是/etc/apparmor.d/usr.sbin.mysqld。

在例子中，我通过添加这些行解决了这个问题：/proc/*/status r,

/sys/devices/system/node/ r,

/sys/devices/system/node/node0/meminfo r,

注意第二行的尾斜杠。

完成后，尝试启动MySQL，如果你得到更多的错误，添加这些到文件，然后再试一次。

答案2echo"exit 0" >> /etc/init.d/mysql

dpkg --configure -a

如果它没有帮助，使用：sudo apt-get purge mysql-server mysql-client mysql-common mysql-server-5.5

sudo apt-get install mysql-server

答案3

我解决了这个问题；

编辑/etc/apparmor.d/local/usr.sbin.mysqld

添加这些行；/data/ r,

/data/** rwk,

重新加载apparmor服务#sudo service apparmor reload

答案4运行sudo apt install mysql-server

检查错误

重新启动

运行sudo apt install mysql-server 再次继续安装

安装完成。

答案5stop mysql-server

rm /var/lib/mysql/ib_logfile*

restart mysql

相关文章