Skip to content
Open
Show file tree
Hide file tree
Changes from 18 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
@@ -1,15 +1,15 @@
---
slug: how-to-install-mariadb-on-debian-9
title: "Installing MariaDB on Debian 9"
title_meta: "How to Install MariaDB on Debian 9"
description: "This guide shows how to install and configure the MariaDB server on Debian 9."
og_description: "MariaDB is a robust, scalable and reliable SQL Server that can serve as a drop-in replacement for MySQL. This guide shows how to install and configure it on Debian 9."
slug: how-to-install-mariadb-on-debian-12
title: "Installing MariaDB on Debian 12"
title_meta: "How to Install MariaDB on Debian 12"
description: "This guide shows how to install and configure the MariaDB server on Debian 12."
og_description: "MariaDB is a robust, scalable and reliable SQL Server that can serve as a drop-in replacement for MySQL. This guide shows how to install and configure it on Debian 12 (Bookworm)."
authors: ["Ryan Syracuse"]
contributors: ["Ryan Syracuse"]
published: 2020-01-31
keywords: ["mariadb", "Debian 9", "debian", "database", "mysql"]
keywords: ["mariadb", "Debian 12", "debian", "database", "bookworm", "mysql"]
license: '[CC BY-ND 4.0](https://creativecommons.org/licenses/by-nd/4.0)'
aliases: ['/databases/mariadb/how-to-install-mariadb-on-debian-9/','/databases/mariadb/mariadb-setup-debian/']
aliases: ['/databases/mariadb/how-to-install-mariadb-on-debian-12/','/databases/mariadb/mariadb-setup-debian/']
image: Installing_MariaDB_on_Debian9.png
external_resources:
- '[MariaDB Knowledge Base](https://mariadb.com/kb/en)'
Expand All @@ -19,22 +19,22 @@ relations:
platform:
key: how-to-install-mariadb
keywords:
- distribution: Debian 9
- distribution: Debian 12
tags: ["debian","mariadb","database"]
deprecated: true
deprecated: false
---

MariaDB is a fork of the popular cross-platform MySQL database management system and is considered a full [drop-in replacement](https://mariadb.com/kb/en/mariadb/mariadb-vs-mysql-features/) for MySQL. MariaDB was created by one of MySQL's original developers in 2009 after MySQL was acquired by Oracle during the Sun Microsystems merger. Today MariaDB is maintained and developed by the [MariaDB Foundation](https://mariadb.org/en/foundation/) and community contributors with the intention of it remaining GNU GPL software.
MariaDB is a fork of the popular cross-platform MySQL database management system and is considered a full [drop-in replacement](https://mariadb.com/kb/en/mariadb/mariadb-vs-mysql-features/) for MySQL. MariaDB was created by one of MySQL's original developers in 2009 after MySQL was acquired by Oracle during the Sun Microsystems merger. Today MariaDB is maintained and developed by the [MariaDB Foundation](https://mariadb.org/en/foundation/) and community contributors with that it remain GNU GPL software.

{{< note >}}
This guide is written for a non-root user. Commands that require elevated privileges are prefixed with `sudo`. If you're not familiar with the `sudo` command, you can check our [Users and Groups](/docs/guides/linux-users-and-groups/) guide.
{{< /note >}}

## Before You Begin

1. If you have not already done so, create a Linode account and Compute Instance. See our [Getting Started with Linode](/docs/products/platform/get-started/) and [Creating a Compute Instance](/docs/products/compute/compute-instances/guides/create/) guides.
1. If you have not already done so, create a Linode account and Compute Instance. See our [Get Started](/docs/products/platform/get-started/) with Linode and [Creating a Linode (Compute Instance)](/docs/products/compute/compute-instances/guides/create/) guides.

1. Follow our [Setting Up and Securing a Compute Instance](/docs/products/compute/compute-instances/guides/set-up-and-secure/) guide to update your system and configure your hostname. You may also wish to set the timezone, create a limited user account, and harden SSH access.
1. Follow our [Setting Up and Securing a Compute Instance](/docs/products/compute/compute-instances/guides/set-up-and-secure/) guide to update your system and configure your hostname. You can also set the timezone, create a limited user account, and harden SSH access.

To check your hostname run:

Expand All @@ -49,33 +49,41 @@ Install MariaDB using the package manager.

sudo apt install mariadb-server

MariaDB will bind to localhost (127.0.0.1) by default. For information on connecting to a remote database using SSH, see our [MySQL remote access guide](/docs/guides/create-an-ssh-tunnel-for-mysql-remote-access/), which also applies to MariaDB.
MariaDB will bind to localhost (127.0.0.1) by default. For information on connecting to a remote database using SSH, see our [MySQL remote access](/docs/guides/create-an-ssh-tunnel-for-mysql-remote-access/) guide, which also applies to MariaDB.

{{< note >}}
Allowing unrestricted access to MariaDB on a public IP not advised but you may change the address it listens on by modifying the `bind-address` parameter in `/etc/my.cnf`. If you decide to bind MariaDB to your public IP, you should implement firewall rules that only allow connections from specific IP addresses.
Allowing unrestricted access to MariaDB on a public IP not advised but you may change the address it listens on by modifying the `bind-address` parameter in `/etc/mysql/mariadb.conf.d/50-server.cnf`. If you decide to bind MariaDB to your public IP, you should implement firewall rules that restrict access to specific IP addresses.
{{< /note >}}

### MariaDB Client

The standard tool for interacting with MariaDB is the `mariadb` client, which installs with the `mariadb-server` package. The MariaDB client is used through a terminal using the `mysql` command.
The standard tool for interacting with MariaDB is the `mariadb` client, which is installed alongside the `mariadb-server` package. You can access the MariaDB client in the terminal using the `mysql` command.

### Root Login

1. Log into MariaDB as the root user:

sudo mysql -u root -p

1. When prompted for login credentials, hit enter. By default MariaDB will authenticate you via the **unix_socket plugin** and credentials are not required.
{{< note >}}
On Debian 12, MariaDB uses the `unix_socket` plugin by default. This means that if you're logged into the system as a user with root privileges, you can press **Enter* at the password prompt and still gain access--no password is required.
{{< /note >}}

You'll then be presented with a welcome header and the MariaDB prompt as shown below:
You'll then be presented with a welcome header and the MariaDB prompt as shown below:

{{< output >}}
MariaDB [(none)]>
{{</ output >}}
```output
Welcome to the MariaDB monitor. Commands end with ; or \g.
Your MariaDB connection id is 31
Server version: 10.11.11-MariaDB-0+deb12u1 Debian 12

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

1. To generate a list of commands for the MariaDB prompt, enter `\h`. You'll then see:
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
```

{{< output >}}
To view a list of available commands, type '\h' at the prompt. You then see:

```output
General information about MariaDB can be found at
http://mariadb.org

Expand Down Expand Up @@ -107,31 +115,38 @@ warnings (\W) Show warnings after every statement.
nowarning (\w) Don't show warnings after every statement.

For server side help, type 'help contents'

MariaDB [(none)]>
{{</ output >}}
```

### Securing the Installation

1. After accessing MariaDB as the root user of your database, enable the **mysql_native_password**
plugin to enable root password authentication:
1. After accessing MariaDB as the root user, you can switch from socket-based authentication to password-based authentication by enabling the `mysql_native_password`
plugin:

USE mysql;
UPDATE user SET plugin='mysql_native_password' WHERE user='root';
FLUSH PRIVILEGES;
exit;
**New in MariaDB 10.11 on Debian 12**
The `mysql_secure_installation` script now offers the option to *set a root password,* which automatically switches the authentication method from `unix_socket` to `mysql_native_password`. This is a change from earlier versions, where socket-based authentication was the default and required manual reconfiguration.

1. Run the `mysql_secure_installation` script to address several security concerns in a default MariaDB installation:
Next, run the `mysql_secure_installation` script to address several security concerns in a default MariaDB installation.

sudo mysql_secure_installation

You will be given the choice to change the MariaDB root password, remove anonymous user accounts, disable root logins outside of localhost, and remove test databases. It is recommended that you answer `yes` to these options. You can read more about the script in the [MariaDB Knowledge Base](https://mariadb.com/kb/en/mariadb/mysql_secure_installation/).
This script will guide you through several options, including:
- Setting a root password (if you haven't already).
- Removing anonymous user accounts.
- Disabling remote root logins.
- Removing the test database.

It's recommended that you answer `yes` to these prompts for a more secure setup (to harden your MariaDB installation against unauthorized access). You can read more about the script in the [MariaDB Knowledge Base](https://mariadb.com/kb/en/mariadb/mysql_secure_installation/).

## Using MariaDB

### Create a New MariaDB User and Database

1. Login to the database again. This time, if you set a password above, enter it at the prompt.
1. Log in to the database again. When your're prompted to log in to MariaDB again, you should enter the password only if you previously set one during an earlier step.

sudo mysql -u root -p

Expand Down Expand Up @@ -169,14 +184,14 @@ You will be given the choice to change the MariaDB root password, remove anonymo

SHOW TABLES;

{{< output >}}
+------------------+
| Tables_in_testdb |
+------------------+
| customers |
+------------------+
1 row in set (0.00 sec)
{{</ output >}}
```output
+------------------+
| Tables_in_testdb |
+------------------+
| customers |
+------------------+
1 row in set (0.00 sec)
```

1. Add some data:

Expand All @@ -186,14 +201,14 @@ You will be given the choice to change the MariaDB root password, remove anonymo

SELECT * FROM customers;

{{< output >}}
+-------------+------------+-----------+
| customer_id | first_name | last_name |
+-------------+------------+-----------+
| 1 | John | Doe |
+-------------+------------+-----------+
1 row in set (0.00 sec)
{{</ output >}}
```output
+-------------+------------+-----------+
| customer_id | first_name | last_name |
+-------------+------------+-----------+
| 1 | John | Doe |
+-------------+------------+-----------+
1 row in set (0.00 sec)
```

1. Then exit MariaDB:

Expand All @@ -207,22 +222,26 @@ If you forget your root MariaDB password, it can be reset.

sudo systemctl stop mariadb

1. Then execute the following command which will allow the database to start without loading the grant tables or networking.
1. Then execute the following command which allows the database to start without loading the grant tables or networking.

sudo systemctl set-environment MYSQLD_OPTS="--skip-grant-tables --skip-networking"

{{< note>}}
This method disables grant tables and networking. While it still works in Debian 12, it is temporary and insecure--use only in emergency recovery situations.
{{< /note >}}

1. Restart MariaDB:

sudo systemctl start mariadb

1. Login to the MariaDB server with the root account, this time without supplying a password:
1. Log in to the MariaDB server with the root account, this time without supplying a password:

sudo mysql -u root

1. Use the following commands to reset root's password. Replace `password` with a strong password:

FLUSH PRIVILEGES;
UPDATE mysql.user SET password = PASSWORD('password') WHERE user = 'root';
ALTER USER'root'@'localhost' IDENTIFIED BY 'your_new_password';
exit;

1. Revert the environment settings to allow the database to start with grant tables and networking:
Expand All @@ -235,4 +254,4 @@ If you forget your root MariaDB password, it can be reset.

1. You should now be able to log into the database with your new root password:

sudo mysql -u root -p
sudo mysql -u root -p
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ This guide provides the commands you can use to list tables in MySQL and MariaDB

1. Follow our [Setting Up and Securing a Compute Instance](/docs/products/compute/compute-instances/guides/set-up-and-secure/) guide to update your system. You may also wish to set the timezone, configure your hostname, create a limited user account, and harden SSH access.

1. Install MySQL or MariaDB on your server. You can follow our guide on [How to Install MySQL](/docs/guides/how-to-install-mysql-on-debian-8/) or on [How to Install MariaDB](/docs/guides/how-to-install-mariadb-on-debian-9/). Use the **Distribution** drop down at the top of each guide to select the Linux distribution you want to install on.
1. Install MySQL or MariaDB on your server. You can follow our guide on [How to Install MySQL](/docs/guides/how-to-install-mysql-on-debian-8/) or on [How to Install MariaDB](/docs/guides/how-to-install-mariadb-on-debian-12/). Use the **Distribution** drop down at the top of each guide to select the Linux distribution you want to install on.

{{< note >}}
The steps in this guide are written for non-root users. Commands that require elevated privileges are prefixed with `sudo`. If you’re not familiar with the `sudo` command, see the [Linux Users and Groups](/docs/guides/linux-users-and-groups/) guide.
Expand Down
Empty file.