mysql-8版本容器安装审计插件

241 阅读1分钟

阿里云mysql测试服务器:8.140.253.200 帐号 :ceshi/qingxi123456.

  1. 查看当前容器已安装的插件

docker exec -it mysql-2 mysql -uroot -p -e "SHOW PLUGINS;"

mysql> SELECT * FROM information_schema.PLUGINS WHERE PLUGIN_NAME LIKE '%audit%';
Empty set
  1. 下载Percona Server for MySQL,

地址为 Install with binary tarballs - Percona Server for MySQL

mkdir -p /home/mysql-plugin
cd /home/mysql-plugin
# 下载mini版就可以
wget https://downloads.percona.com/downloads/Percona-Server-8.0/Percona-Server-8.0.32-24/binary/tarball/Percona-Server-8.0.32-24-Linux.x86_64.glibc2.17-minimal.tar.gz

tar -xvf Percona-Server-8.0.32-24-Linux.x86_64.glibc2.17-minimal.tar.gz/lib/plugin

docker cp audit_log.so mysql:/usr/lib64/mysql/plugin/
docker cp audit_log.so mysql-1:/usr/lib64/mysql/plugin/
docker cp audit_log.so mysql-2:/usr/lib64/mysql/plugin/
  1. 安装插件

INSTALL PLUGIN audit_log SONAME 'audit_log.so';
  1. 添加配置,在my.cnf中[mysqld]里面添加

# 审计插件
plugin-load = audit_log.so
audit_log_file = /var/log/mysql/audit.log
audit_log_format = JSON
audit_log_policy = ALL 
audit_log_handler = FILE
audit_log_rotate_on_size = 1048576

重启MySQL容器

查询路径:/home/mysql/log下的audit.log