zypper dup installed mariadb on a server

[jpluimers]

My Tumbleweed install consists of a "Minimal server selection (text mode)" plus extra dependencies: https://github.com/jpluimers/OpenSuS...ter/README.rst

How do I check why a dependency got pulled into a `zypper dup`?

The massive GCC5 update suddenly installed mariadb (which advertises itself MySQL which it isn't, it's a MySQL replacement):

Message from package mariadb:</code>

You just installed MySQL server for the first time.


You can start it using:
rcmysql start


During first start empty database will be created for your automatically.


PLEASE REMEMBER TO SET A PASSWORD FOR THE MariaDB root USER !
To do so, start the server, then issue the following commands:


'/usr/bin/mysqladmin' -u root password 'new-password'
'/usr/bin/mysqladmin' -u root -h misibook password 'new-password'


Alternatively you can run:
'/usr/bin/mysql_secure_installation'


which will also give you the option of removing the test
databases and anonymous user created by default. This is
strongly recommended for production servers.

[arvidjaar]

Quick and dirty test is to try "zypper rm mariadb" and see what it suggests to remove additionally.

[Miuku]

rpm -q --whatrequires mariadb ?

[wolfi323]

rpm -q --whatrequires mariadb ?

Or rather "rpm -q --whatrequires mysql".

Packages do not require mariadb explicitely, they require mysql which is provided by mysql-community-server _and_ mariadb.

[Miuku]

Good point!

[jpluimers]

Quick and dirty test is to try "zypper rm mariadb" and see what it suggests to remove additionally.

Thanks a lot. Seems there is no dependency (see below).

But this got me thinking: could this be the "Web and LAMP Server" pattern got extended? It wasn't a replacement of mysql with mariadb (see the zypper dup log further below).

revue:/etc # zypper rm mariadbLoading repository data...
Reading installed packages...
Resolving package dependencies...


The following package is going to be REMOVED:
  mariadb 


1 package to remove.
After the operation, 78.7 MiB will be freed.
Continue? [y/n/? shows all options] (y): y
(1/1) Removing mariadb-10.0.17-1.3 .....................................................................................................................................................................................................[done]

Found back the log of the original update: see this gist https://gist.github.com/jpluimers/4de28600df3fdf4a2ce8

[Miuku]

MariaDB has been the default in the LAMP server pattern for years now (since 12.3, if I'm not mistaken)

[jpluimers]

MariaDB has been the default in the LAMP server pattern for years now (since 12.3, if I'm not mistaken)

You are right. But it also leads to new questions.

I went through my original log of installation screenshots. It indeed installed mariadb, *but* it did not give any message about manual security modifications needed.

So: since when is that required? and why?
Would the big GCC5 update have caused this?

[wolfi323]

I went through my original log of installation screenshots. It indeed installed mariadb, *but* it did not give any message about manual security modifications needed.

This message is printed on installation or update of the package if no database tables exist.

It should have been printed during the original installation too.

The question is whether this makes sense on updates...

So: since when is that required? and why?

It is not really required.
It is just recommended for security reasons. The default is to allow the mysql root user root to connect without a password (but from localhost only, as listening on the network is turned off by default), obviously you wouldn't want that on a mysql server in your network or the Internet...

But even with the default settings it might be problematic, as _every_ local user can connect (with full powers) by specifying "root" as username, no password needed.

Would the big GCC5 update have caused this?

No. Definitely not.

[arvidjaar]

rpm -q --whatrequires mariadb ?

bor@opensuse:~/src/llvm/tools/clang> rpm -q --whatrequires glibc
liblockdev1-1.0.3_git201003141408-27.2.1.x86_64
valgrind-3.10.0-1.1.x86_64
valgrind-3.10.0-1.1.x86_64
nscd-2.19-16.15.1.x86_64
glibc-locale-2.19-16.15.1.x86_64
glibc-extra-2.19-16.15.1.x86_64
glibc-devel-2.19-16.15.1.x86_64
bor@opensuse:~/src/llvm/tools/clang>

I doubt all other of 4115 installed packages do not really need glibc ... you will need to loop through what mariadb provides if you want to go this route. Mandrake urpmq was excellent in giving recursive dependency information.