From ae8df40b03a13914445e794675fad42d68ec834f Mon Sep 17 00:00:00 2001 From: Sam Yaple Date: Fri, 30 Dec 2016 21:15:27 +0000 Subject: Disable networking during bootstrapping There is no reason to have networking active while bootstrapping the initial mysql folder structure. It is an additional attack vector that serves no purpose. Change-Id: Ia636ba9f563dbfb969dbfb613198c98748ee8a3c --- docker/mariadb/extend_start.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'docker') diff --git a/docker/mariadb/extend_start.sh b/docker/mariadb/extend_start.sh index 8e6be1a1e..955c35b88 100644 --- a/docker/mariadb/extend_start.sh +++ b/docker/mariadb/extend_start.sh @@ -1,7 +1,7 @@ #!/bin/bash function bootstrap_db { - mysqld_safe --wsrep-new-cluster & + mysqld_safe --wsrep-new-cluster --skip-networking --wsrep-on=OFF & # Wait for the mariadb server to be "Ready" before starting the security reset with a max timeout # NOTE(huikang): the location of mysql's socket file varies depending on the OS distributions. # Querying the cluster status has to be executed after the existence of mysql.sock and mariadb.pid. -- cgit v1.2.3