Appliance category: 

MySQL

Relational Database Management System

MySQL is a relational database management system (RDBMS) which has more than 11 million installations, and is owned by Oracle. MySQL is a fast, stable, robust, easy to use, and true multi-user, multi-threaded SQL database server.

Strictly speaking, this appliance actually provides MariaDB. MariaDB is generally considered a drop-in replacement for MySQL. However, it does have some features that don't directly map to MySQL. As a general rule, it is possible to migrate from MySQL to MariaDB, but often not possible to go back again.

This appliance includes all the standard features in TurnKey Core, and on top of that:

  • MariaDB (drop-in MySQL replacement)
  • Web Control Panel, including "quick start" docs, noting info about SSL MySQL connections.
  • Adminer administration frontend for MySQL (listening on port 12322 - uses SSL).
  • MySQL webmin module (compatible with MariaDB).
  • MySQLTuner - Perl script to review and tweak a MySQL/MariaDB installation.
  • Dedicated remote MySQL/MariaDB user; 'remote'.
  • Local 'root' user authenticates via socket, so no password required.
  • MariaDB/MySQL configured to listen on port 3306 TCP on all interfaces by default - now with SSL enabled (and required) by default.
  • For convenience MySQL is configured to accept connections from all hosts by default. In a production environment it is recommended to limit incoming connections to specific hosts:
    UPDATE `mysql`.`user` SET `Host` = 'hostname'
    WHERE CONVERT( `user`.`Host` USING utf8 ) = '%' AND
    CONVERT( `user`.`User` USING utf8 ) = 'remote' LIMIT 1 ;
    

Note: MariaDB can be further tweaked to optimize performance.

Usage details & Logging in for Administration

No default passwords: For security reasons there are no default passwords. All passwords are set at system initialization time.

Ignore SSL browser warning: browsers don't like self-signed SSL certificates, but this is the only kind that can be generated automatically. If you have a domain configured, then via Confconsole Advanced menu, you can generate free Let's Encypt SSL/TLS certificates.

Web - point your browser at either:

  1. http://12.34.56.789/ - not encrypted so no browser warning
  2. https://12.34.56.789/ - encrypted with self-signed SSL certificate

Note: some appliances auto direct http to https.

Username for database administration:

  1. Adminer; login as MySQL username adminer:

    https://12.34.56.789:12322/ - Adminer database management web app

  2. MySQL command line tool; log in as root (no password required):
    $ mysql --user root
    Welcome to the MySQL monitor.  Commands end with ; or \g.
    Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
    
    mariadb>
    
  3. Remote connection via port 3306; log in as username remote. Use the certificates/keys found in /etc/mariadb/certificates - as noted in the docs and/or the "quick start" notes from the landing page.

Username for OS system administration:

Login as root except on AWS marketplace which uses username admin.

  1. Point your browser to:
  2. Login with SSH client:
    ssh root@12.34.56.789
    

    Special case for AWS marketplace:

    ssh admin@12.34.56.789
    

* Replace 12.34.56.789 with a valid IP or hostname.