[MDEV-21934] MariaDB 10.3 galera cluster do not start on Ubuntu 20.04 Created: 2020-03-13  Updated: 2020-10-27  Resolved: 2020-10-27

Status: Closed
Project: MariaDB Server
Component/s: Galera
Affects Version/s: 10.3.22
Fix Version/s: 10.3.25

Type: Bug Priority: Minor
Reporter: Volodymyr Litovka Assignee: Otto Kekäläinen
Resolution: Fixed Votes: 4
Labels: None
Environment:

Ubuntu 20.04

Issue Links:
Relates
relates to MDEV-21140 galera_recovery script is incompatibl... Closed

 Description   

Hi,

Ubuntu 20.04 will come with systemd 244 which by default set fs.protected_regular = 1 which prevents to start MariaDB 10.3 Galera cluster, which, on the other hand, is selected for Ubuntu 20.04. As a workaround, it can be possible to set fs.protected_regular to 0, but this is a system-wide security feature.

The fix for MariaDB 10.4 and 10.5 is available - https://jira.mariadb.org/browse/MDEV-21140

In order to make MariaDB 10.3 compatible with default security settings of Ubuntu 20, the MDEV-21140 need to be ported to 10.3.

Thank you.

 Comments   
Comment by Otto Kekäläinen [ 2020-08-28 ]

This issue is kind of a duplicate of https://jira.mariadb.org/browse/MDEV-21140

However vital information in this bug report that is missing what version of MariaDB were you running? Now it was left in the air if there is a version out there that needs to be upgraded for the https://jira.mariadb.org/browse/MDEV-21140 to be delivered.

What does `dpkg -l | grep mariadb` print on your system?

Comment by Otto Kekäläinen [ 2020-08-28 ]

Looking at https://github.com/mariadb/server/commit/241ac3f4873007cced7b547837f311da5c1261ce the fix was applied on all MariaDB Server branches with Galera. Next (week) I need to check which version shipped to what distro and release.

Comment by Otto Kekäläinen [ 2020-08-28 ]

Assigned to myself since Jan had not done anything about this since March and I was anyway involved in debugging and landing the fix in upstream (due to https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=945051)

Comment by Volodymyr Litovka [ 2020-08-28 ]

Hi Otto,

at the moment, I don't have Ubuntu 20 v/ Galera, so can't show "dpkg -l". But when I was filling the issue, there was a clean installation of Ubuntu 20 and MariaDB from Ubuntu's repositories and it was 10.3.

> This issue is kind of a duplicate of https://jira.mariadb.org/browse/MDEV-21140

Yes, I just want to note that fix for 21140 need to be backported to 10.3, because 10.3 will be in use next five years with Ubuntu 20.

Thank you.

Comment by Pieter Verhaeghe [ 2020-08-28 ]

I can confirm this bug. This is my output of `dpkg -l | grep mariadb`:

ii mariadb-client-10.3 1:10.3.22-1ubuntu1 amd64 MariaDB database client binaries
ii mariadb-client-core-10.3 1:10.3.22-1ubuntu1 amd64 MariaDB database core client binaries
ii mariadb-common 1:10.3.22-1ubuntu1 all MariaDB common metapackage
ii mariadb-server 1:10.3.22-1ubuntu1 all MariaDB database server (metapackage depending on the latest version)
ii mariadb-server-10.3 1:10.3.22-1ubuntu1 amd64 MariaDB database server binaries
ii mariadb-server-core-10.3 1:10.3.22-1ubuntu1 amd64 MariaDB database core server files

Comment by Otto Kekäläinen [ 2020-09-01 ]

Reported and tracker in Launchpad at https://bugs.launchpad.net/ubuntu/+source/mariadb-10.3/+bug/1884780

Comment by Otto Kekäläinen [ 2020-10-27 ]

https://launchpad.net/ubuntu/+source/mariadb-10.3/1:10.3.25-0ubuntu0.20.04.1

This bug was fixed in the package mariadb-10.3 - 1:10.3.25-0ubuntu0.20.04.1
 
 
 
---------------
 
mariadb-10.3 (1:10.3.25-0ubuntu0.20.04.1) focal-security; urgency=medium
 
 
 
  * SECURITY UPDATE: New upstream version 10.3.25 includes fixes for the
 
    following security vulnerabilities (LP: #1899500):
 
    - CVE-2020-15180
 
  * Includes previous upstream version 10.3.23 which has the fixes for
 
    the following security vulnerabilities:
 
    - CVE-2020-13249
 
    - CVE-2020-2814
 
    - CVE-2020-2812
 
    - CVE-2020-2760
 
    - CVE-2020-2752
 
  * Includes subquery optimizer fix done in upstream MDEV-21614 (LP: #1894855)
 
  * Includes Galera startup fix done in upstream MDEV-21140 (LP: #1884780)
 
  * Adapt mariadb.pc location to upstream change
 
  * Update libmariadb symbols for upstream release 3.1.8
 
  * Remove salsa-ci.yml, does not work for Ubuntu quality assurance
 
 
 
 -- Otto Kekäläinen <otto@debian.org> Mon, 12 Oct 2020 20:14:50 +0300

Generated at Thu Feb 08 09:10:56 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.