Merge pull request #160 from linuxserver/add-logrotate

Add logrotate

Author: quietsy

Dockerfile

@@ -21,6 +21,7 @@ RUN \
   fi && \
   apk add --no-cache \
     gnupg \
+    logrotate \
     mariadb==${MARIADB_VERSION} \
     mariadb-backup==${MARIADB_VERSION} \
     mariadb-client==${MARIADB_VERSION} \

Dockerfile.aarch64

@@ -21,6 +21,7 @@ RUN \
   fi && \
   apk add --no-cache \
     gnupg \
+    logrotate \
     mariadb==${MARIADB_VERSION} \
     mariadb-backup==${MARIADB_VERSION} \
     mariadb-client==${MARIADB_VERSION} \

README.md

@@ -366,6 +366,7 @@ Once registered you can define the dockerfile to use with `-f Dockerfile.aarch64
 
 ## Versions
 
+* **11.01.25:** - Add log rotation, follow the instructions in the container log.
 * **06.01.25:** - Rebase to Alpine 3.21.
 * **31.05.24:** - Rebase to Alpine 3.20.
 * **23.12.23:** - Rebase to Alpine 3.19.

readme-vars.yml

@@ -142,6 +142,7 @@ init_diagram: |
   "mariadb:latest" <- Base Images
 # changelog
 changelogs:
+  - {date: "11.01.25:", desc: "Add log rotation, follow the instructions in the container log."}
   - {date: "06.01.25:", desc: "Rebase to Alpine 3.21."}
   - {date: "31.05.24:", desc: "Rebase to Alpine 3.20."}
   - {date: "23.12.23:", desc: "Rebase to Alpine 3.19."}

root/defaults/custom.cnf

@@ -102,7 +102,7 @@ console                 = 1
 #
 log_warnings            = 2
 # Error logging goes to syslog due to /etc/mysql/conf.d/mysqld_safe_syslog.cnf
-#log_error               = /config/log/mysql/mysql.log
+log_error               = /config/log/mysql/mariadb-error.log
 #
 # Enable the slow query log to see queries with especially long duration
 slow_query_log          = 1

root/etc/logrotate.d/mariadb

@@ -0,0 +1,23 @@
+/config/log/mysql/*.log {
+    firstaction
+        /usr/bin/mariadb-admin -uroot --local version >/dev/null 2>&1
+    endscript
+    su abc abc
+    missingok
+    create 660 abc abc
+    notifempty
+    daily
+    minsize 1M
+    maxsize 100M
+    rotate 30
+    dateext
+    dateformat .%Y-%m-%d-%H-%M-%S
+    compress
+    delaycompress
+    sharedscripts 
+    olddir archive/
+    createolddir 770 abc abc
+    postrotate
+        /usr/bin/mariadb-admin -uroot --local flush-error-log flush-engine-log flush-general-log flush-slow-log
+    endscript
+}

root/etc/s6-overlay/s6-rc.d/init-mariadb-initdb/run

@@ -30,7 +30,7 @@ if [[ ! -d "${DATADIR}/mysql" ]]; then
 
     # set basic sql command
     cat >"${tempSqlFile}" <<-EOSQL
-DELETE FROM mysql.user WHERE user <> 'mariadb.sys';
+DELETE FROM mysql.user WHERE user <> 'mariadb.sys' AND user <> 'root';
 EOSQL
 
     if [[ "${#MYSQL_ROOT_PASSWORD}" -lt "4" ]]; then

root/etc/s6-overlay/s6-rc.d/init-mariadb-upgrade/dependencies.d/svc-mariadb renamed to root/etc/s6-overlay/s6-rc.d/init-mariadb-poststart/dependencies.d/svc-mariadb

@@ -0,0 +1,60 @@
+#!/usr/bin/with-contenv bash
+# shellcheck shell=bash
+
+# check logrotate permissions
+if mariadb-admin -uroot --local version >/dev/null 2>&1; then
+    echo "Logrotate is enabled"
+else
+    cat <<-EOFPASS
+
+
+
+#####################################################################################
+#                                                                                   #
+#                             Logrotate Instructions                                #
+#                                                                                   #
+#               Add the following to /config/custom.cnf under [mysqld]:             #
+#                  log_error = /config/log/mysql/mariadb-error.log                  #
+#                                                                                   #
+#                 Login to the SQL shell inside the container using:                #
+#                           mariadb -uroot -p<PASSWORD>                             #
+#                          And run the following command:                           #
+# GRANT ALL ON *.* TO root@localhost IDENTIFIED VIA unix_socket WITH GRANT OPTION ; #
+#                                                                                   #
+#                     Restart the container to apply the changes.                   #
+#                                                                                   #
+#              You can read more about root@localhost permissions here:             #
+#             https://mariadb.com/kb/en/authentication-from-mariadb-10-4/           #
+#                                                                                   #
+#####################################################################################
+
+
+
+EOFPASS
+fi
+
+# check for upgrades
+if [[ "${#MYSQL_ROOT_PASSWORD}" -gt "3" ]]; then
+    # display a message about upgrading database if needed
+    if mariadb-upgrade -u root -p"${MYSQL_ROOT_PASSWORD}" --check-if-upgrade-is-needed >/dev/null 2>&1; then
+        cat <<-EOF
+
+
+
+#################################################################
+#                                                               #
+#           An upgrade is required on your databases.           #
+#                                                               #
+#         Stop any services that are accessing databases        #
+#          in this container, and then run the command          #
+#                                                               #
+#                   mariadb-upgrade -u root                     #
+#                                                               #
+#################################################################
+
+
+
+EOF
+        sleep 5s
+    fi
+fi