diff options
| author | Sam Yaple <sam@yaple.net> | 2016-12-30 21:15:27 +0000 |
|---|---|---|
| committer | Sam Yaple <sam@yaple.net> | 2016-12-31 21:17:16 +0000 |
| commit | ae8df40b03a13914445e794675fad42d68ec834f (patch) | |
| tree | 1569a3769b3e480ff719bff2912ea456a47a4268 | |
| parent | b18653d98f19a4df8448934a729757389a341e79 (diff) | |
| download | kolla-ae8df40b03a13914445e794675fad42d68ec834f.tar.gz kolla-ae8df40b03a13914445e794675fad42d68ec834f.zip | |
Disable networking during bootstrapping
There is no reason to have networking active while bootstrapping the
initial mysql folder structure. It is an additional attack vector that
serves no purpose.
Change-Id: Ia636ba9f563dbfb969dbfb613198c98748ee8a3c
| -rw-r--r-- | docker/mariadb/extend_start.sh | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/docker/mariadb/extend_start.sh b/docker/mariadb/extend_start.sh index 8e6be1a1e..955c35b88 100644 --- a/docker/mariadb/extend_start.sh +++ b/docker/mariadb/extend_start.sh @@ -1,7 +1,7 @@ #!/bin/bash function bootstrap_db { - mysqld_safe --wsrep-new-cluster & + mysqld_safe --wsrep-new-cluster --skip-networking --wsrep-on=OFF & # Wait for the mariadb server to be "Ready" before starting the security reset with a max timeout # NOTE(huikang): the location of mysql's socket file varies depending on the OS distributions. # Querying the cluster status has to be executed after the existence of mysql.sock and mariadb.pid. |