Changes between Version 84 and Version 85 of ServerIntro

Timestamp:

Apr 15, 2015, 11:59:31 AM (9 years ago)

Author:

davea

Comment:

--

ServerIntro

@@ -150 +150 @@
 
 === MySQL notes === #MySQL-notes
- * After installing and running the server,
-   grant permissions for the 'db_user' account (usually boincadm).
-   The 'db_name' is usually the short name of the project.
-   The credentials (db_user, db_name, db_passwd) are stored in the project's [ProjectOptions#db config.xml].
-   All MySQL accounts should be password protected, especially `root`.
-{{{
-mysql -u root
-CREATE USER 'db_user'@'localhost' IDENTIFIED BY 'db_passwd';
-GRANT CREATE,DROP ON *.* TO 'db_user'@'localhost'
-GRANT SELECT,INSERT,UPDATE,DELETE,CREATE,REFERENCES,INDEX,ALTER,CREATE TEMPORARY TABLES, LOCK TABLES ON  `db_name`.* TO 'db_user'@'localhost';
-}}}
-Existing projects should change the permissions accordingly by first revoking 
-all rights and grant with the above example. The user 'nobody' means the 
-account under which Apache runs (may be different on your machine) which does 
-not need access anymore.
-{{{
-mysql -u root
-REVOKE ALL PRIVILEGES ON  *.* FROM  'db_user'@'localhost';
-REVOKE ALL PRIVILEGES ON  *.* FROM  'db_user';
-REVOKE ALL PRIVILEGES ON  *.* FROM  'nobody'@'localhost';
-REVOKE ALL PRIVILEGES ON  *.* FROM  'nobody';
-}}}
-After creating a project you should also revoke the global DROP and CREATE 
-permission for your 'db_user' like this:
-{{{
-REVOKE ALL PRIVILEGES ON *.* FROM 'db_user'@'localhost';
-REVOKE GRANT OPTION ON * . * FROM 'db_user'@'localhost';
-GRANT USAGE ON *.* TO 'db_user'@'localhost';
-}}}
- * Set your `PATH` environment variable to include MySQL programs
-   (typically `/usr/local/mysql` and `/usr/local/mysql/bin`).
- * You'll need to back up your database.
-   Generally this requires stopping the project,
-   making a copy or snapshot, and restarting.
-   An example is [//mysql_backup.txt here].
+Instructions for setting up MySQL are here:
+https://dev.mysql.com/doc/refman/5.6/en/linux-installation-yum-repo.html
+
+After setting up MySQL,
+create a MySQL account for the project owner.
+We'll use the name '''boincadm''', same as the Unix account.
+All MySQL accounts should be password protected;
+we'll use "foobar" (use something different).
+{{{
+mysql -u root -p
+CREATE USER 'boincadm'@'localhost' IDENTIFIED BY 'foobar';
+GRANT ALL ON *.* TO 'boincadm'@'localhost';
+}}}
+This gives boincadm access to all MySQL databases on the host;
+if you use MySQL for other purposes on the host,
+set permissions more restrictively.
+
+Other notes:
+ * Set boincadm's `PATH` environment variable to include MySQL programs
+  (typically `/usr/local/mysql` and `/usr/local/mysql/bin`).
+ * You'll want to back up your database periodically.
+  Generally this requires stopping the project,
+  making a copy or snapshot, and restarting.
+  An example is [//mysql_backup.txt here].
  * BOINC gets MySQL compiler and linker flags from a program called
    `mysql_config` which comes with your MySQL distribution.
@@ -353 +342 @@
 phpmyadmin
 python
-python-mysqldb
+python-mysqldb (or MySQL-python)
 libssl-dev
 libcurl4-openssl-dev
@@ -397 +386 @@
 
 === Create a new BOINC user account === #cookbook-useraccount
-The best way to create the boinc user is during installation when you are asked for name and password of the main user. Enter 'boincadm', or a name of your choice, as login name. In this cookbook I will refer to this useraccount as 'boincadm'.
-
-When installation is finished please login as the user created during installation. If you have installed a graphical desktop manager please open a text console (Konsole or xterm).
+The best way to create the boinc user is during installation
+when you are asked for name and password of the main user.
+Enter 'boincadm', or a name of your choice, as login name.
+In this cookbook I will refer to this useraccount as 'boincadm'.
+
+When installation is finished please login as the user created during installation.
+If you have installed a graphical desktop manager please open a text console (Konsole or xterm).
 
 Next step is to add the 'www-data' user (apache webserver) to the group of the newly created user: