Details
-
Task
-
Status: Closed (View Workflow)
-
Minor
-
Resolution: Fixed
-
10.1.7-1, 10.1.7-2, 10.1.8-1, 10.1.8-3
Description
Supporting socket activation would make each of the following possible for admins:
- Cleaner restarts (the listener socket stays open persistently)
- Network namespace isolation, disallowing any network access beyond the inherited listener port (and connections accepted from it).
- Lazy startup for densely hosted instances. (It's also possible with socket activation to start it eagerly, as usual.)
- Running MariaDB on privileged ports without having to start it initially as root
- Non-racy startup for services (like a PHP site) that depend on connecting to MariaDB. Because systemd opens listener sockets early in boot, they're available even while MariaDB is starting
- Deeper integration into coming network support in future systemd releases
Some examples in C are here:
http://0pointer.de/blog/projects/socket-activation.html
I am willing to sponsor development of this feature.
Attachments
Issue Links
- includes
-
-
- Closed
-
- is blocked by
-
-
- Closed
-
- relates to
-
-
- Closed
-
-
-
- Open
-
-
-
- Stalled
-
-
-
- Closed
-
-
MDEV-6536 make --bind=hostname to listen on both IPv6 and IPv4 addresses
-
- Closed
-
- links to
(2 relates to, 2 links to)
Activity
| Description |
Supporting socket activation would make each of the following possible for admins: * Cleaner restarts (the listener socket stays open persistently) * Network namespace isolation, disallowing any network access beyond the inherited listener port (and connections accepted from it). * Lazy startup for densely hosted instances. (It's also possible with socket activation to start it eagerly, as usual.) * Running MariaDB on privileged ports without having to start it initially as root * Non-racy startup for services (like a PHP site) that depend on connecting to MariaDB. Because systemd opens listener sockets early in boot, they're available even while MariaDB is starting * Deeper integration into coming network support in future systemd releases Some examples in C are here: http://0pointer.de/blog/projects/socket-activation.html |
Supporting socket activation would make each of the following possible for admins: * Cleaner restarts (the listener socket stays open persistently) * Network namespace isolation, disallowing any network access beyond the inherited listener port (and connections accepted from it). * Lazy startup for densely hosted instances. (It's also possible with socket activation to start it eagerly, as usual.) * Running MariaDB on privileged ports without having to start it initially as root * Non-racy startup for services (like a PHP site) that depend on connecting to MariaDB. Because systemd opens listener sockets early in boot, they're available even while MariaDB is starting * Deeper integration into coming network support in future systemd releases Some examples in C are here: http://0pointer.de/blog/projects/socket-activation.html I am willing to sponsor development of this feature. |
| Remote Link | This issue links to "Bug 714426 - Provide a native mysql systemd service (incl. socket activation patches) (Web Link)" [ 14500 ] |
| Workflow | defaullt [ 33656 ] | MariaDB v2 [ 43122 ] |
| Attachment | mdev5536.patch [ 36625 ] |
| Fix Version/s | 10.1 [ 16100 ] |
| Attachment | systemd.patch [ 36629 ] |
| Attachment | mdev5536.patch [ 36625 ] |
| Remote Link | This issue links to "MySQL Bug #61948 mysql / systemd socket activation (Web Link)" [ 21913 ] |
| Attachment | systemd.patch [ 36630 ] |
| Attachment | systemd.patch [ 36629 ] |
| Attachment | systemd.patch [ 36631 ] |
| Attachment | systemd_full.patch [ 36705 ] |
| Attachment | systemd.patch [ 36631 ] |
| Attachment | systemd.patch [ 36630 ] |
| Attachment | systemd_full.patch [ 36706 ] |
| Attachment | systemd_full.patch [ 36705 ] |
| Attachment | systemd_full.patch [ 36711 ] |
| Attachment | systemd_full.patch [ 36706 ] |
| Assignee | Sergei Golubchik [ serg ] |
| Priority | Major [ 3 ] | Critical [ 2 ] |
| Fix Version/s | 10.0 [ 16000 ] | |
| Fix Version/s | 10.1 [ 16100 ] |
| Labels | systemd |
| Workflow | MariaDB v2 [ 43122 ] | MariaDB v3 [ 64460 ] |
| Sprint | 10.0.20 [ 5 ] |
| Rank | Ranked higher |
| Status | Open [ 1 ] | In Progress [ 3 ] |
| Status | In Progress [ 3 ] | In Review [ 10002 ] |
| Sprint | 10.0.20 [ 5 ] |
| Fix Version/s | 10.1 [ 16100 ] | |
| Fix Version/s | 10.0 [ 16000 ] |
| Sprint | 10.1.7-1 [ 10 ] |
| Rank | Ranked lower |
| Rank | Ranked higher |
| Sprint | 10.1.7-1 [ 10 ] | 10.1.7-1, 10.1.7-2 [ 10, 12 ] |
| Rank | Ranked higher |
| Rank | Ranked higher |
| Assignee | Sergei Golubchik [ serg ] | Sergey Vojtovich [ svoj ] |
| Sprint | 10.1.7-1, 10.1.7-2 [ 10, 12 ] | 10.1.7-1, 10.1.7-2, 10.1.8-1 [ 10, 12, 13 ] |
| Sprint | 10.1.7-1, 10.1.7-2, 10.1.8-1 [ 10, 12, 13 ] | 10.1.7-1, 10.1.7-2, 10.1.8-1, 10.1.8-2 [ 10, 12, 13, 14 ] |
| Rank | Ranked higher |
| Sprint | 10.1.7-1, 10.1.7-2, 10.1.8-1, 10.1.8-2 [ 10, 12, 13, 14 ] | 10.1.7-1, 10.1.7-2, 10.1.8-1, 10.1.8-3 [ 10, 12, 13, 15 ] |
| Rank | Ranked lower |
| Rank | Ranked higher |
| Status | In Review [ 10002 ] | Stalled [ 10000 ] |
| Priority | Critical [ 2 ] | Minor [ 4 ] |
| Fix Version/s | 10.4 [ 22408 ] | |
| Fix Version/s | 10.1 [ 16100 ] |
| Assignee | Sergey Vojtovich [ svoj ] | Daniel Black [ danblack ] |
| Fix Version/s | 10.6 [ 24028 ] | |
| Fix Version/s | 10.4 [ 22408 ] |
| Assignee | Daniel Black [ danblack ] | Vicențiu Ciorbaru [ cvicentiu ] |
| Status | Stalled [ 10000 ] | In Review [ 10002 ] |
| Link | This issue relates to MDEV-25233 [ MDEV-25233 ] |
| Component/s | Server [ 13907 ] | |
| Fix Version/s | 10.6.0 [ 24431 ] | |
| Fix Version/s | 10.6 [ 24028 ] | |
| Assignee | Vicențiu Ciorbaru [ cvicentiu ] | Daniel Black [ danblack ] |
| Resolution | Fixed [ 1 ] | |
| Status | In Review [ 10002 ] | Closed [ 6 ] |
| Link | This issue relates to MDEV-25282 [ MDEV-25282 ] |
| Workflow | MariaDB v3 [ 64460 ] | MariaDB v4 [ 132252 ] |