MariaDB 10.2 Encrypted at rest log files not being written
-
09-10-2020 - |
Pregunta
We're running MariaDB 10.2 with InnoDB tables that are encrypted at rest. I've also specified that the log files be encrypted at rest but they remain empty files. The tables seem to be encrypted just fine.
I'm hoping to get this database set up for replication with encrypted at rest log files.
Permissions all seem fine - can anyone think of a reason as to why the log files wont write?
Thanks in advance!
Here is my my.cnf
user=mysql
bind-address = 210.5.55.92
local-infile=0
max_connections=2000
max_allowed_packet=100M
skip-name-resolve
query_cache_type=0
query_cache_size = 128M
query_cache_limit = 1M
query_cache_min_res_unit=512
key_buffer_size = 1G
sort_buffer_size=16M
read_buffer_size=16M
read_rnd_buffer_size=16M
thread_concurrency=0
default-storage-engine = InnoDB
innodb_file_per_table
innodb_flush_log_at_trx_commit=2
innodb_buffer_pool_size = 64G
innodb_buffer_pool_instances = 2
innodb_flush_method=O_DIRECT
innodb_log_file_size=1G
innodb_data_file_path=ibdata1:10M:autoextend
thread_cache_size = 4
myisam_use_mmap=1
tmp_table_size = 512M
max_heap_table_size = 512M
symbolic-links=0
key_buffer_size=128M
sort_buffer_size=8M
expire-logs-days = 5
max-binlog-size = 100M
open_files_limit=50000
table_open_cache=4096
table_definition_cache=4096
log-error=/var/log/mysql/error.log
general-log
general-log-file=/var/log/mysql/mysqld_queries.log
log-output=file
slow_query_log = 1
slow_query_log_file = /var/log/mysql/log-slow-queries.log
long_query_time = 5
log_queries_not_using_indexes = 1
plugin-load-add=file_key_management.so
file-key-management
file-key-management-filename = /var/lib/mysql/keys
innodb-encrypt-tables
innodb-encrypt-log
innodb-encryption-threads=4
Solución
Ok after a bit of trial and error I've got all logs writing! I think the problem must have had to do with permissions as even though the log files were chown to mysql in the separate folder I planned to use - removing file designation from the config allowed logs to get written in the default folders. Sigh - thanks for your help!