openstack
/
kolla
Code Issues Proposed changes

Disable networking during bootstrapping 

There is no reason to have networking active while bootstrapping the
initial mysql folder structure. It is an additional attack vector that
serves no purpose.

Change-Id: Ia636ba9f563dbfb969dbfb613198c98748ee8a3c
This commit is contained in:
Sam Yaple 2016-12-30 21:15:27 +00:00
parent b18653d98f
commit ae8df40b03
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
docker/mariadb/extend_start.sh
View File

@ -1,7 +1,7 @@
#!/bin/bash
function bootstrap_db {
mysqld_safe --wsrep-new-cluster &
mysqld_safe --wsrep-new-cluster --skip-networking --wsrep-on=OFF &
# Wait for the mariadb server to be "Ready" before starting the security reset with a max timeout
# NOTE(huikang): the location of mysql's socket file varies depending on the OS distributions.
# Querying the cluster status has to be executed after the existence of mysql.sock and mariadb.pid.