Debian Stretch 9

Yes, this is intentional. Unfortunately we cannot distribute aws_key_management plugin — the fact that we did before was a mistake.

This plugin uses (and is linked with) AWS C++ SDK, which is available under the Apache 2.0 license. And this license it not compatible with GPLv2.

You can build this plugin yourself by using the cmake option -DNOT_FOR_DISTRIBUTION=1, the plugin wil be built and you'll get a warning that the result is not GPL and cannot be distributed.

If we'll find a replacement for AWS C++ SDK that uses a GPLv2 compatible license, we will be able to switch to it and distribute the plugin again.

Sorry for this.

Thanks for the quick reply.

I see, that's unfortunate.

Is it possible to just build the aws_key_management plugin, or do I have to build the entire mariadb source?

I was able to put together the pieces to compile the aws_key_management plugin from source. I now have it working!

install build dependencies

yum-builddep -y mariadb-server

yum install -y git \

    gcc \

    gcc-c++ \

    bison \

    libxml2-devel \

    libevent-devel \

    rpm-build

download MariaDB source

cd /usr/local/src

git clone --branch 10.3 https://github.com/MariaDB/server.git

run CMake to read MariaDB for the build

mkdir /usr/local/src/build-mariadb

cd /usr/local/src/build-mariadb

cmake -DRPM=centos7 \

      -DPLUGIN_AWS_KEY_MANAGEMENT=DYNAMIC \

      -DAWS_SDK_EXTERNAL_PROJECT=1 \

      -DNOT_FOR_DISTRIBUTION=1 \

      ../server

CMake Warning at CMakeLists.txt:505 (MESSAGE):

You have linked MariaDB with GPLv3 libraries! You may not distribute the

resulting binary. If you do, you will put yourself into a legal problem

with the Free Software Foundation.

build MariaDB

make aws_key_management

copy aws_key_management plugin

cp ./plugin/aws_key_management/aws_key_management.so \

   /usr/lib64/mysql/plugin/aws_key_management.so

For those of you that use Docker, I created a Docker image that builds the AWS Key Management Plugin from source. The resulting aws_key_management.so is compatible with the Docker official images for MariaDB.

To make aws_key_management.so, do the following:

docker run --name aws_key_management_build creemama/mariadb-aws_key_management-plugin-build:latest

docker cp aws_key_management_build:/usr/local/src/build-mariadb/plugin/aws_key_management/aws_key_management.so .

Examine the Dockerfile for the steps used to build the plugin.