Details
-
Bug
-
Status: Closed (View Workflow)
-
Major
-
Resolution: Not a Bug
-
10.3.11
-
centos7
Description
Hi ,
My MariaDB server is configured to use AWS key management service encryption plugin. Since xtrabackup is not supported with MariaDB 10.3, I am using mariabackup to take the backup, but it fails with below error. However without encryption mariabackup goes fine. Please can you let me know if any additional options passed to mariabackup will resolve the issue?
[root@mongotest2lin bin]# /usr/bin/mariabackup --defaults-file=/etc/my.cnf -p'mysql' --user=root --backup --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --parallel=4 --extra-lsndir="/clone" --databases "testenc" --stream=xbstream >/dev/null
181121 12:34:35 Connecting to MySQL server host: localhost, user: root, password: set, port: not set, socket: /var/lib/mysql/mysql.sock
Using server version 10.3.11-MariaDB
/usr/bin/mariabackup based on MariaDB server 10.3.11-MariaDB Linux (x86_64)
mariabackup: uses posix_fadvise().
mariabackup: cd to /var/lib/mysql/
Loading encryption plugin
Encryption plugin parameter : '--aws_key_management_key_spec=AES_128'
Encryption plugin parameter : '--aws_key_management_log_level=Off'
Encryption plugin parameter : '--aws_key_management_master_key_id=alias/mariadbEncryption'
Encryption plugin parameter : '--aws_key_management_region=us-east-2'
Encryption plugin parameter : '--aws_key_management_request_timeout=0'
Encryption plugin parameter : '--aws_key_management_rotate_key=0'
mariabackup: open files limit requested 0, set to 1024
mariabackup: using the following InnoDB configuration:
mariabackup: innodb_data_home_dir =
mariabackup: innodb_data_file_path = ibdata1:12M:autoextend
mariabackup: innodb_log_group_home_dir = ./
2018-11-21 12:34:35 0x7f4638c78880 InnoDB: Using Linux native AIO
2018-11-21 12:34:35 0 [Note] InnoDB: Number of pools: 1
/usr/bin/mariabackup: AWS KMS plugin : KMS Client API 'Decrypt' failed : MissingAuthenticationTokenException - Missing Authentication Token
/usr/bin/mariabackup: AWS KMS plugin: key 1, version 1 could not be decrypted
2018-11-21 12:34:40 0 [ERROR] InnoDB: Obtaining redo log encryption key version 1 failed (4294967295). Maybe the key or the required encryption key management plugin was not found.
2018-11-21 12:34:40 0 [ERROR] InnoDB: Reading checkpoint encryption info failed.
2018-11-21 12:34:40 0 [ERROR] InnoDB: Obtaining redo log encryption key version 1 failed (4294967295). Maybe the key or the required encryption key management plugin was not found.
2018-11-21 12:34:40 0 [ERROR] InnoDB: Reading checkpoint encryption info failed.
2018-11-21 12:34:40 0 [ERROR] InnoDB: No valid checkpoint found (corrupted redo log). You can try --innodb-force-recovery=6 as a last resort.
Attachments
Issue Links
- relates to
-
MDEV-18607 MariaDB Galera Cluster SST fails while using encryption
- Open