Applicable to:
- Plesk Obsidian for Linux
- Plesk Onyx for Linux
Question
How to chroot MySQL client for users in Plesk?
Answer
Warning: It is not recommended to give access to MySQL in the chrooted environment as it is designed to isolate a system user from any system services. Proceed with the following steps at your own risk.
-
Connect to the server via SSH;
-
Download and unzip the update-chroot script:
# wget https://raw.githubusercontent.com/plesk/kb-scripts/master/update-chroot/update-chroot.sh && chmod +x update-chroot.sh
-
Add the mysql command and all the required files to the chrooted environment and apply it to all domain:
# ./update-chroot.sh --add mysql
# ./update-chroot.sh --apply all-
Afterwards, it should be possible to use the mysql command as follows:
# mysql -u db_user -p -h127.0.0.1 db_name
-
In order to access the database without the
-h127.0.0.1option, create the/var/www/vhosts/example.com/.my.cnffile with the following content:# cat /var/www/vhosts/example.com/.my.cnf
[mysql]
host=127.0.0.1
-
-
Mount a MySQL socket under the domain's chrooted shell:
Do not recommend mounting it via /etc/fstab for the following reason:
When the customer decides to remove the domain, by doing so its vhost will be deleted.
That means the corresponding fstab entry must be removed too, otherwise, the next reboot will bring you to the emergency mode, and the default target (multi-user.target) will not come up.
During the boot procedure, systemd tries to mount everything under the /etc/fstab file - if one single typo exists or one or more mount point fails, the server becomes unbootable until you fix that via an attached console.
-
Create the following directory for the corresponding domain:
# mkdir -p /var/www/vhosts/example.com/var/lib/mysql
-
Bind the MySQL socket to the chrooted directory:
# mount -o bind,ro /var/lib/mysql /var/www/vhosts/example.com/var/lib/mysql
-
Create the following directory for the corresponding domain:
# mkdir -p /var/www/vhosts/example.com/var/run/mysqld
-
Bind the MySQL socket to the chrooted directory:
# mount -o bind,ro /var/run/mysqld /var/www/vhosts/example.com/var/run/mysqld
Additional Information
How to add programs to a chrooted shell environment template in Plesk
Comments
10 comments
That's not a good idea. Logged-in users can delete the file, which terminates the entire MySQL server.
better: mount -o bind,ro /var/run/mysqld /var/www/vhosts/example.com/var/run/mysqld
In general, however, the mount causes Plesk to delete the file and the MySQL server is no longer working. For example, if you delete the client, then all files will be deleted and also the mysqld.sock file.
Is this workaround only for Plesk 12.5?
@Rico This workaround is applicable for all currently supported Plesk versions for Linux
looks complicated
Hello @iamkingsleyf,
Please, let me know which questions do you have when applying the solution from this article?
you guys said its not recommended.
@iamkingsleyf, indeed, such actions are performed at your own risk.
Hello Plesk Team,
Trying to add mysql to a chrooted user on Plesk Obsidian but I'm getting a 404 on the update_chroot tool download.
Can you please update the URL ?
Thanks !
Hi Fabien, updated.
In step 2 you are doing a wget of the file update-chroot.sh but in the rest of the command after chmod you mentioning update_chroot.sh as also in step 3 (I think this was the old name).
Hello @Webservicesmgmt-lisa
Thank you for noticing that, commands are corrected.
Please sign in to leave a comment.