MySQL实现自动化部署脚本的详细教程

#!/bin/bash

# 配置区（用户可修改）
MYSQL_VERSION="8.0"          # 支持5.7/8.0
ROOT_PASSWORD="Sec@Pass123!" # 自定义root密码
APP_DB_NAME="webapp_db"      # 创建数据库名
APP_DB_USER="webapp_user"    # 应用用户名
APP_DB_PASS="App@Pass123!"   # 应用用户密码
LISTEN_ADDR="0.0.0.0"        # 监听地址

# 颜色定义
RED='\033[0;31m'
GREEN='\033[0;32m'
NC='\033[0m'

# 异常处理
trap 'echo -e "${RED}\n脚本被中断！正在清理...${NC}"; exit 1' INT TERM

check_command() {
    if ! command -v $1 &> /dev/null; then
        echo -e "${RED}错误：未找到 $1 命令${NC}"
        exit 1
    fi
}

# 环境检测
os_check() {
    if [ -f /etc/redhat-release ]; then
        OS="centos"
    elif [ -f /etc/lsb-release ]; then
        OS="ubuntu"
    else
        echo -e "${RED}不支持的操作系统${NC}"
        exit 1
    fi
}

install_mysql() {
    case $OS in
        centos)
            rpm --import https://repo.mysql.com/RPM-GPG-KEY-mysql-2022
            yum install -y https://dev.mysql.com/get/mysql80-community-release-el7-6.noarch.rpm
            dnf config-manager --disable mysql*
            dnf config-manager --enable mysql${MYSQL_VERSION//./}-community
            dnf install -y mysql-community-server
            ;;
        ubuntu)
            wget -O /tmp/mysql.deb https://dev.mysql.com/get/mysql-apt-config_0.8.24-1_all.deb
            DEBIAN_FRONTEND=noninteractive dpkg -i /tmp/mysql.deb
            apt-get update
            apt-get install -y mysql-server
            ;;
    esac
}

configure_mysql() {
    cat > /etc/mysql/conf.d/custom.cnf <<EOF
[mysqld]
bind-address = $LISTEN_ADDR
default_authentication_plugin=mysql_native_password
transaction_isolation = READ-COMMITTED
character-set-server = utf8mb4
collation-server = utf8mb4_unicode_ci
max_connections = 2000
innodb_buffer_pool_size = 1G
EOF

    systemctl restart mysqld
    systemctl enable mysqld
}

secure_installation() {
    if [ "$MYSQL_VERSION" == "8.0" ]; then
        temp_pass=$(grep 'temporary password' /var/log/mysqld.log | awk '{print $NF}')
        mysql -uroot -p"$temp_pass" --connect-expired-password -e \
          "ALTER USER 'root'@'localhost' IDENTIFIED BY '$ROOT_PASSWORD'; FLUSH PRIVILEGES;"
    else
        mysql_secure_installation <<EOF
y
$ROOT_PASSWORD
$ROOT_PASSWORD
y
y
y
y
EOF
    fi

    mysql -uroot -p"$ROOT_PASSWORD" -e \
      "CREATE DATABASE $APP_DB_NAME;
       CREATE USER '$APP_DB_USER'@'%' IDENTIFIED BY '$APP_DB_PASS';
       GRANT ALL PRIVILEGES ON $APP_DB_NAME.* TO '$APP_DB_USER'@'%';
       FLUSH PRIVILEGES;"
}

# 主执行流程
main() {
    check_command wget
    os_check
    install_mysql
    configure_mysql
    secure_installation
    echo -e "${GREEN}安装完成！"
    echo -e "Root密码：$ROOT_PASSWORD"
    echo -e "应用数据库：$APP_DB_NAME"
    echo -e "应用用户：$APP_DB_USER / $APP_DB_PASS${NC}"
}

main

chmod +x mysql_auto_install.sh

sudo ./mysql_auto_install.sh

# 连接测试
mysql -u root -p"Sec@Pass123!" -e "SHOW DATABASES;"

# 查看用户权限
mysql -u root -p"Sec@Pass123!" -e "SELECT user,host FROM mysql.user;"

[mysqld]
innodb_buffer_pool_size = 1G       # 缓存池大小
max_connections = 2000             # 最大连接数
thread_cache_size = 100            # 线程缓存
query_cache_type = 1               # 查询缓存
slow_query_log = 1                 # 开启慢查询日志

# 添加mysqld_exporter监控
wget https://github.com/prometheus/mysqld_exporter/releases/download/v0.14.0/mysqld_exporter-0.14.0.linux-amd64.tar.gz
tar xvf mysqld_exporter-*.tar.gz
cp mysqld_exporter /usr/local/bin/

# 每日凌晨全量备份
0 2 * * * /usr/bin/mysqldump -uroot -pPASSWORD --all-databases | gzip > /backup/mysql_$(date +\%F).sql.gz

# 检查防火墙规则
iptables -L -n | grep 3306

# 验证用户权限
SHOW GRANTS FOR 'webapp_user'@'%';