Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-17787

Unable to backup using mariabackup , if the MariaDB server is using AWS key management service plugin

    XMLWordPrintable

Details

    Description

      Hi ,

      My MariaDB server is configured to use AWS key management service encryption plugin. Since xtrabackup is not supported with MariaDB 10.3, I am using mariabackup to take the backup, but it fails with below error. However without encryption mariabackup goes fine. Please can you let me know if any additional options passed to mariabackup will resolve the issue?

      [root@mongotest2lin bin]# /usr/bin/mariabackup --defaults-file=/etc/my.cnf -p'mysql' --user=root --backup --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --parallel=4 --extra-lsndir="/clone" --databases "testenc" --stream=xbstream >/dev/null
      181121 12:34:35 Connecting to MySQL server host: localhost, user: root, password: set, port: not set, socket: /var/lib/mysql/mysql.sock
      Using server version 10.3.11-MariaDB
      /usr/bin/mariabackup based on MariaDB server 10.3.11-MariaDB Linux (x86_64)
      mariabackup: uses posix_fadvise().
      mariabackup: cd to /var/lib/mysql/
      Loading encryption plugin
      Encryption plugin parameter : '--aws_key_management_key_spec=AES_128'
      Encryption plugin parameter : '--aws_key_management_log_level=Off'
      Encryption plugin parameter : '--aws_key_management_master_key_id=alias/mariadbEncryption'
      Encryption plugin parameter : '--aws_key_management_region=us-east-2'
      Encryption plugin parameter : '--aws_key_management_request_timeout=0'
      Encryption plugin parameter : '--aws_key_management_rotate_key=0'
      mariabackup: open files limit requested 0, set to 1024
      mariabackup: using the following InnoDB configuration:
      mariabackup: innodb_data_home_dir =
      mariabackup: innodb_data_file_path = ibdata1:12M:autoextend
      mariabackup: innodb_log_group_home_dir = ./
      2018-11-21 12:34:35 0x7f4638c78880 InnoDB: Using Linux native AIO
      2018-11-21 12:34:35 0 [Note] InnoDB: Number of pools: 1
      /usr/bin/mariabackup: AWS KMS plugin : KMS Client API 'Decrypt' failed : MissingAuthenticationTokenException - Missing Authentication Token
      /usr/bin/mariabackup: AWS KMS plugin: key 1, version 1 could not be decrypted
      2018-11-21 12:34:40 0 [ERROR] InnoDB: Obtaining redo log encryption key version 1 failed (4294967295). Maybe the key or the required encryption key management plugin was not found.
      2018-11-21 12:34:40 0 [ERROR] InnoDB: Reading checkpoint encryption info failed.
      2018-11-21 12:34:40 0 [ERROR] InnoDB: Obtaining redo log encryption key version 1 failed (4294967295). Maybe the key or the required encryption key management plugin was not found.
      2018-11-21 12:34:40 0 [ERROR] InnoDB: Reading checkpoint encryption info failed.
      2018-11-21 12:34:40 0 [ERROR] InnoDB: No valid checkpoint found (corrupted redo log). You can try --innodb-force-recovery=6 as a last resort.

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              Akshaya Akshaya Srinivasan
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.