Mariadb on David P. Discher

SysAdmin Notes: Enabling SSL Cluster replication – Let’s Encrypt – FreeBSD, MariaDB 10.2, and Galera Cluster

Tue, 06 Mar 2018 23:24:03 +0000

From acme.sh, you’ll get :

 ca.cer db2.cer db2.conf db2.csr db2.csr.conf db2.key fullchain.cer 

FreeBSD layout – copy these to /etc/ssl (well, where you want).

concatenate the ca.cer with symlink of cert.pem from the package “security/ca_root_nss”.

 sudo sh -c 'cat ca.cer cert.pem > cert2.pem' 

Galera Cluster doesn’t like chained certificates, and does both a client and server Certificate verification – so wsrep_provider_options look like this :

SysAdmin Notes: FreeBSD, MariaDB 10.2, and Galera Cluster

Mon, 06 Nov 2017 23:08:46 +0000

Intro

Installing and getting MariaDB 10.2, and Galera Cluster going on FreeBSD (from ports/packages) was not straight forward. The getting started were all geared for linux packages which seem to have different helpers. I couldn’t find any how to’s for freebsd.

These are more notes, not a how-to. Please, someone write up a better how-to or add in helper scripts to ports.

Packages / Ports

As things do and always change from version to version, custom poudriere builds, however all default options.
 galera-25.3.21_2 mariadb102-client-10.2.9_1 mariadb102-server-10.2.9_1 