MariaDB sur Raspberry PI

Je me suis servi de la page : https://raspberrytips.fr/installer-mysql-raspberry-pi-mariadb/ pour écrire cette page.

Installation

On reste dans le classique :

sudo apt update
sudo apt upgrade
sudo apt install mariadb-server

Et c'est fait! En revanche si on tente d'utiliser la base:

mariadb
ERROR 1698 (28000): Access denied for user 'admin'@'localhost'

Aucun utilisateur n'existe donc... on ne peut pas l'utiliser. On remarque qu'en tant que root, ça marche :

sudo mariadb
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 32
Server version: 10.11.11-MariaDB-0+deb12u1 Debian 12

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]>

Ca marche mais c'est pas comme ça que ça devrait être pour avoir une sécurité correcte!

Configuration

On lance la sécurisation par :

sudo mysql_secure_installation

et un se laisse guider:

NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB
      SERVERS IN PRODUCTION USE!  PLEASE READ EACH STEP CAREFULLY!

In order to log into MariaDB to secure it, we'll need the current
password for the root user. If you've just installed MariaDB, and
haven't set the root password yet, you should just press enter here.

Enter current password for root (enter for none):

On ne veut pas de mot de passe root, on réponds par <Enter>

OK, successfully used password, moving on...

Setting the root password or using the unix_socket ensures that nobody
can log into the MariaDB root user without the proper authorisation.

You already have your root account protected, so you can safely answer 'n'.

Switch to unix_socket authentication [Y/n]

Répondre 'Y' pour restreindre l'authentification pas les "socket unix".

Enabled successfully!
Reloading privilege tables..
 ... Success!


You already have your root account protected, so you can safely answer 'n'.

Change the root password? [Y/n]

Répondre oui 'Y' pour mettre un mot de passe root.

New password:
Re-enter new password:
Password updated successfully!
Reloading privilege tables..
 ... Success!


By default, a MariaDB installation has an anonymous user, allowing anyone
to log into MariaDB without having to have a user account created for
them.  This is intended only for testing, and to make the installation
go a bit smoother.  You should remove them before moving into a
production environment.

Remove anonymous users? [Y/n]

Oui bien sur il ne faut pas autoriser les accès anonymes. ('Y')

 ... Success!

Normally, root should only be allowed to connect from 'localhost'.  This
ensures that someone cannot guess at the root password from the network.

Disallow root login remotely? [Y/n]

Encore une fois c'est OUI on ne veut pas autoriser l'accès root distant.

 ... Success!

By default, MariaDB comes with a database named 'test' that anyone can
access.  This is also intended only for testing, and should be removed
before moving into a production environment.

Remove test database and access to it? [Y/n]

Oui bien sûr on ne veut pas de la base de test. Elle ne nous servira à rien. ('Y')

 - Dropping test database...
 ... Success!
 - Removing privileges on test database...
 ... Success!

Reloading the privilege tables will ensure that all changes made so far
will take effect immediately.

Reload privilege tables now? [Y/n]

Effectivement il est tant de recharger la table des privilèges pour rendre nos modifications effectives. ('Y')

 ... Success!

Cleaning up...

All done!  If you've completed all of the above steps, your MariaDB
installation should now be secure.

Thanks for using MariaDB!
$

C'est terminé.

Connexion

mysql -uroot -p

Mysql (mariadb) va nous demander le mot de passe entré plus haut.

Enter password:
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 44
Server version: 10.11.11-MariaDB-0+deb12u1 Debian 12

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]>

Pour le reste, une page parle de l'utilisation.