无法在 CentOS 7 主机上的 MariaDB 10.3 中使用 Ansible 数据库模块创建根用户

Question

我正在编写一个简单的剧本，用于使用来自 Ubuntu 18.04 的 Ansible 安装 MariaDB 10.3 到我在 CentOS 7 上的虚拟机运行，我收到以下错误，我'即使在在线论坛上阅读了大量解决方案后，我也无法修复。任何帮助将不胜感激。这是错误信息

PLAY [myvm] *************************************************************************************************************

TASK [Gathering Facts] **************************************************************************************************
ok: [myvm]

TASK [MariaDB_10.3 official repository] *********************************************************************************
ok: [myvm]

TASK [Installation of mariadb and packages] *****************************************************************************
ok: [myvm]

TASK [Starting and enabling the service] ********************************************************************************
ok: [myvm]

TASK [Setting up root credentials] **************************************************************************************
[WARNING]: Module did not set no_log for update_password
fatal: [myvm]: FAILED! => {"changed": false, "msg": "unable to connect to database, check login_user and login_password are correct or /root/.my.cnf has the credentials. Exception message: (1045, u\"Access denied for user 'root'@'localhost' (using password: NO)\")"}

PLAY RECAP **************************************************************************************************************
myvm                       : ok=4    changed=0    unreachable=0    failed=1    skipped=0    rescued=0    ignored=0

这是我完整的 Ansible 剧本

---

- hosts: myvm 
  become: yes
  vars: 
        mysql_root_password: "somerandom"
        wp_user_pass: "anotherrandom"

  tasks:
      - name: MariaDB_10.3 official repository
        yum_repository:
           name: MariaDB
           description: MariaDB_10.3
           baseurl: http://yum.mariadb.org/10.3/centos7-amd64
           gpgkey: https://yum.mariadb.org/RPM-GPG-KEY-MariaDB
           gpgcheck: yes

      - name: Installation of mariadb and packages
        yum: 
           name: 
              - mariadb-server
              - MySQL-python
           state: present

      - name: Starting and enabling the service
        service:
           name: mariadb
           state: started
           enabled: yes

      - name: Setting up root credentials
        mysql_user:
           name: root
           password: "{{ mysql_root_password }}"
           host: localhost
           login_unix_socket: /var/lib/mysql/mysql.sock
           priv: '*.*:ALL,GRANT'
           check_implicit_admin: true 
           state: present

      - name: Creating a new database for wordpress
        mysql_db:
           name: wp_db
           login_user: wp_user
           login_password: "{{ wp_user_pass }}"
           login_host: localhost
           login_port: 3306
           state: present

      - name: Creating a user for wordpress
        mysql_user:
           name: wp_user
           password: "{{ wp_user_pass }}"
           host: localhost
           priv: 'wp_db.*:ALL'
           state: present

      - name: Removing test database
        mysql_db:
           name: test
           login_user: root
           login_password: "{{ mysql_root_password }}"
           state: absent```

Answer 1

您的错误信息提供了线索：

"msg": "unable to connect to database, check login_user and login_password are correct or /root/.my.cnf

试试这个：

- name: Setting up root credentials
  mysql_user:
    name: root
    password: "{{ mysql_root_password }}"
    login_user: root
    login_password: "{{mysql_root_password}}"
    host: localhost
    login_unix_socket: /var/lib/mysql/mysql.sock
    priv: '*.*:ALL,GRANT'
    check_implicit_admin: true 
    state: present

下面的 URL 有几个很好的例子，特别是处理 v5.7 及更高版本中新的过期密码功能。

尤其是从这部分开始...

- name: Detect and properly set root password
  stat:
    path: /root/.my.cnf
  register: r

- mysql_user:
    name: root
    password: "{{ mysql_root_password }}"
when: r.stat.exists==True

- name: Set new password from temporary password
  shell: 'mysql -e "SET PASSWORD = PASSWORD(''{{ mysql_root_password }}'');" --connect-expired-password -uroot -p"{{ tmp_root_password.stdout }}"'
  when: r.stat.exists==False

# Now that the root password is set to the specified, make it default for the client.
- name: Copy my.cnf
  template:
    src: root_my.cnf.j2
    dest: /root/.my.cnf
    force: yes

在此处查看完整源代码：Handle mysql_secure_installation in Ansible

无法在 CentOS 7 主机上的 MariaDB 10.3 中使用 Ansible 数据库模块创建根用户

Unable to create root user using Ansible Database module in MariaDB 10.3 on CentOS 7 host

access-denied

mariadb

ansible

centos7