Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-38255

mariadb-backup fail when set aria_encrypt_tables=ON

    XMLWordPrintable

Details

    • Bug
    • Status: Closed (View Workflow)
    • Critical
    • Resolution: Duplicate
    • 10.11.15
    • N/A
    • Backup
    • None
    • Ubuntu 24.04.3 LTS
    • Not for Release Notes

    Description

      Recently, we tried to upgrade our major version of MariaDB, from 10.6 to 10.11. Before upgrade, we made some evaluation on 10.11, since 10.11.15 is latest release of 10.11, we tried this version.

      We noticed that if MariaDB enabled data-at-rest encryption with Aria table encryption, mariadb-backup would fail to backup, full backup log was:

      [00] 2025-11-25 05:03:59 Connecting to MariaDB server host: localhost, user: mjchang, password: not set, port: not set, socket: /mariadb/tarball_datadir/data101115/mysqld.sock
      [00] 2025-11-25 05:03:59 Using server version 10.11.15-MariaDB-log
      /mariadb/base/mariadb101115/bin/mariadb-backup based on MariaDB server 10.11.15-MariaDB linux-systemd (x86_64)
      [00] 2025-11-25 05:03:59 uses posix_fadvise().
      [00] 2025-11-25 05:03:59 cd to /mariadb/tarball_datadir/data101115/
      [00] 2025-11-25 05:03:59 Loading encryption plugin
      [00] 2025-11-25 05:03:59 	 Encryption plugin parameter :  '--file_key_management_encryption_algorithm=aes_cbc'
      [00] 2025-11-25 05:03:59 	 Encryption plugin parameter :  '--file_key_management_filekey=FILE:/mariadb/test_keys/key1/password'
      [00] 2025-11-25 05:03:59 	 Encryption plugin parameter :  '--file_key_management_filename=/mariadb/test_keys/key1/keys.enc'
      [00] 2025-11-25 05:03:59 open files limit requested 0, set to 1024
      [00] 2025-11-25 05:03:59 mariabackup: using the following InnoDB configuration:
      [00] 2025-11-25 05:03:59 innodb_data_home_dir = 
      [00] 2025-11-25 05:03:59 innodb_data_file_path = ibdata1:12M:autoextend
      [00] 2025-11-25 05:03:59 innodb_log_group_home_dir = ./
      2025-11-25  5:03:59 0 [Note] InnoDB: Number of transaction pools: 1
      2025-11-25  5:03:59 0 [Note] InnoDB: Using Linux native AIO
      2025-11-25  5:03:59 0 [Note] InnoDB: Buffered log writes (block size=512 bytes)
      [00] 2025-11-25 05:03:59 mariabackup: Generating a list of tablespaces
      [00] 2025-11-25 05:03:59 DDL tracking : create 5 "./mj_101115/tab1.ibd"
      [00] 2025-11-25 05:03:59 DDL tracking : create 6 "./mj_101115/tab2.ibd"
      [00] 2025-11-25 05:03:59 Connecting to MariaDB server host: localhost, user: mjchang, password: not set, port: not set, socket: /mariadb/tarball_datadir/data101115/mysqld.sock
      [00] 2025-11-25 05:03:59 Connecting to MariaDB server host: localhost, user: mjchang, password: not set, port: not set, socket: /mariadb/tarball_datadir/data101115/mysqld.sock
      [00] 2025-11-25 05:03:59 Starting BACKUP STAGE START
      [00] 2025-11-25 05:03:59 Acquiring BACKUP LOCKS...
      [00] 2025-11-25 05:03:59 Acquired locks for BACKUP STAGE START
      [00] 2025-11-25 05:03:59 Copying /mariadb/tarball_datadir/data101115//aria_log_control to /mariadb/tarball_backup/101115_dare_backup_folder/aria_log_control
      [00] 2025-11-25 05:03:59         ...done
      [00] 2025-11-25 05:03:59 Loading aria_log_control.
      [00] 2025-11-25 05:03:59 aria_log_control: last_log_number: 1
      [00] 2025-11-25 05:03:59 Start scanning aria tables.
      [00] 2025-11-25 05:03:59 Start scanning aria log files.
      [00] 2025-11-25 05:03:59 Found 1 aria log files, minimum log number 1, maximum log number 1
      [00] 2025-11-25 05:03:59 Stop scanning aria tables.
      [00] 2025-11-25 05:03:59 Copying ./mysql/innodb_table_stats.ibd to /mariadb/tarball_backup/101115_dare_backup_folder/mysql/innodb_table_stats.ibd
      [00] 2025-11-25 05:03:59         ...done
      [00] 2025-11-25 05:03:59 Copying ./mysql/innodb_index_stats.ibd to /mariadb/tarball_backup/101115_dare_backup_folder/mysql/innodb_index_stats.ibd
      [00] 2025-11-25 05:03:59         ...done
      [00] 2025-11-25 05:03:59 Copying ./mysql/transaction_registry.ibd to /mariadb/tarball_backup/101115_dare_backup_folder/mysql/transaction_registry.ibd
      [00] 2025-11-25 05:03:59         ...done
      [00] 2025-11-25 05:03:59 Copying ./mysql/gtid_slave_pos.ibd to /mariadb/tarball_backup/101115_dare_backup_folder/mysql/gtid_slave_pos.ibd
      [00] 2025-11-25 05:03:59         ...done
      [00] 2025-11-25 05:03:59 Copying ibdata1 to /mariadb/tarball_backup/101115_dare_backup_folder/ibdata1
      [00] 2025-11-25 05:03:59         ...done
      [00] 2025-11-25 05:04:00 error: aria_read index failed:  176
      [00] 2025-11-25 05:04:00 Skip copying 1 aria log file due to error
      [00] 2025-11-25 05:04:00 Aria data files backup process is finished with error
      mariabackup: Stopping log copying thread.
      

      But if we did not enable aria_encrypt_tables=ON, that is, set aria_encrypt_tables=OFF, backup worked normally.
      The same config worked normally on 10.11.14.

      Our config was:

      # Data-at-rest encryption
      plugin_load_add = file_key_management
      loose-file_key_management = ON
      loose-file_key_management_filename = /mariadb/test_keys/key1/keys.enc
      loose-file_key_management_filekey  = FILE:/mariadb/test_keys/key1/password
      loose-file_key_management_encryption_algorithm = AES_CBC
      loose-default_encryption_key_id = 1
      loose-innodb_encrypt_tables = 1
      loose-innodb_encrypt_temporary_tables = 1
      loose-innodb_encrypt_log
      loose-inondb_encryption_threads = 4
      loose-aria-encrypt_tables = 1
      loose-encrypt_tmp_disk_tabkes = 1
      loose-encrypt_tmp_files = 1
      loose-encrypt_binlog = 1
      

      As mentioned above, if we did not enable Aria table encryption (loose-aria-encrypt_tables = 0), mariadb-backup worked normally. If we did not enable data-at-rest encryption plugin, mariadb-backup worked normally, too.

      Please checked if this is bug or not, many thanks.

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              mjchangk Min-Jen Chang
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.