Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-39521

Galera nodes still fail on IST/SST in SELinux enforcing mode if mysql-selinux is installed

    XMLWordPrintable

Details

    • Bug
    • Status: Open (View Workflow)
    • Critical
    • Resolution: Unresolved
    • 10.6.25, 10.11.16, 11.4.10, 11.8.6, 12.2.2
    • None
    • None
    • None

    Description

      With MDEV-38297 out of the way restarting a node is now blocked by SELinux:

      [...]
      May 04 10:48:08 node-3 mariadbd[20522]: WSREP_SST: [INFO] mariabackup SST started on joiner (20260504 10:48:08.959)
      May 04 10:48:08 node-3 mariadbd[20522]: WSREP_SST: [INFO] SSL configuration: CA='', CAPATH='', CERT='', KEY='', MODE='DISABLED', encrypt='0' (20260504 10:48:08.987)
      May 04 10:48:09 node-3 mariadbd[20522]: WSREP_SST: [INFO] Streaming with mbstream (20260504 10:48:09.073)
      May 04 10:48:09 node-3 mariadbd[20522]: WSREP_SST: [INFO] Using socat as streamer (20260504 10:48:09.074)
      May 04 10:48:09 node-3 mariadbd[20522]: WSREP_SST: [INFO] Moving '/var/lib/mysql/mariabackup.prepare.log' to '/tmp/sst_log_archive/mariabackup.prepare.log.2026.05.04-10.48.09.077609268' (20260504 10:>
      May 04 10:48:09 node-3 mariadbd[20522]: WSREP_SST: [INFO] Moving '/var/lib/mysql/mariabackup.move.log' to '/tmp/sst_log_archive/mariabackup.move.log.2026.05.04-10.48.09.077609268' (20260504 10:48:09.>
      May 04 10:48:09 node-3 mariadbd[20522]: WSREP_SST: [INFO] 'ss' is selected as a socket information utility. (20260504 10:48:09.102)
      May 04 10:48:09 node-3 mariadbd[20522]: WSREP_SST: [INFO] Evaluating timeout -k 310 300 socat -u TCP-LISTEN:4444,reuseaddr stdio | '/usr//bin/mbstream' -x; RC=( ${PIPESTATUS[@]} ) (20260504 10:48:09.>
      May 04 10:48:09 node-3 mariadbd[20766]: 2026/05/04 10:48:09 socat[20766] E bind(6, {AF=2 0.0.0.0:4444}, 16): Permission denied
      

      Attachments

        Issue Links

          Activity

            People

              ralf.gebhardt Ralf Gebhardt
              hholzgra Hartmut Holzgraefe
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.