从零开始:Ubuntu Server中MySQL 8.0的安装与Django数据库配置详解

安装Mysql8.0

sudo apt install mysql-server

检查MySQL状态

sudo systemctl status mysql

如下所示看见Active: active (running)说明mysql状态正常

mysql.service - MySQL Community Server
     Loaded: loaded (/lib/systemd/system/mysql.service; enabled; vendor preset: enabl>
     Active: active (running) since Sun 2024-01-21 14:51:23 UTC; 1min 53s ago
    Process: 2929 ExecStartPre=/usr/share/mysql/mysql-systemd-start pre (code=exited,>
   Main PID: 2937 (mysqld)
     Status: "Server is operational"
      Tasks: 37 (limit: 4557)
     Memory: 365.6M
        CPU: 1.428s
     CGroup: /system.slice/mysql.service
             └─2937 /usr/sbin/mysqld

Jan 21 14:51:19 qbc systemd[1]: Starting MySQL Community Server...
Jan 21 14:51:23 qbc systemd[1]: Started MySQL Community Server.
lines 1-14/14 (END)

运行安全性脚本

sudo mysql_secure_installation

问题1:

Securing the MySQL server deployment.

Connecting to MySQL using a blank password.

VALIDATE PASSWORD COMPONENT can be used to test passwords and improve security. It checks the strength of password and allows the users to set only those passwords which are secure enough. Would you like to setup VALIDATE PASSWORD component?

Press y|Y for Yes, any other key for No:

翻译:

当您在安装或配置MySQL服务器时,系统可能会提示您是否要启用VALIDATE PASSWORD组件。这个组件用于增强密码的安全性,它可以帮助您确保用户设置的密码足够强大。

以下是关于如何回答这个问题的建议:

如果您想启用VALIDATE PASSWORD组件以增强密码的安全性,您可以按yY键。这会强制用户设置符合一定安全要求的密码,从而增强系统的安全性。

如果您不想启用这个组件,或者不确定是否要启用它,您可以按除yY之外的任何键。

总的来说,启用VALIDATE PASSWORD组件是一个好主意,因为它可以帮助您避免使用弱密码,从而增强系统的安全性。但是,最终的决定取决于您的具体需求和安全策略。

问题2:

There are three levels of password validation policy:

LOW Length >= 8 MEDIUM Length >= 8, numeric, mixed case, and special characters STRONG Length >= 8, numeric, mixed case, special characters and dictionary file

Please enter 0 = LOW, 1 = MEDIUM and 2 = STRONG:

翻译:

为了配置MySQL的密码验证策略,您需要选择一个级别。根据提供的选项,有三个级别:

  1. LOW:密码长度应至少为8个字符。
  2. MEDIUM:密码长度应至少为8个字符,并且应包含数字、大小写字母和特殊字符。
  3. STRONG:密码长度应至少为8个字符,并且应包含数字、大小写字母、特殊字符,并且不应与字典文件中的常见密码匹配。

根据您提供的选项,您需要输入0、1或2来选择相应的策略级别。如果您想选择LOW策略,请输入0;如果您想选择MEDIUM策略,请输入1;如果您想选择STRONG策略,请输入2。

请注意,对于生产环境,强烈建议使用STRONG策略以增强密码的安全性。

问题3:

Skipping password set for root as authentication with auth_socket is used by default. If you would like to use password authentication instead, this can be done with the "ALTER_USER" command. See https://dev.mysql.com/doc/refman/8.0/en/alter-user.html#alter-user-password-management for more information.

By default, a MySQL installation has an anonymous user, allowing anyone to log into MySQL without having to have a user account created for them. This is intended only for testing, and to make the installation go a bit smoother. You should remove them before moving into a production environment.

Remove anonymous users? (Press y|Y for Yes, any other key for No) :

这段信息是MySQL在安装或配置过程中给出的提示。我会为您逐条解释:

  1. Skipping password set for root as authentication with auth_socket is used by default.
  2. 这意味着MySQL默认使用auth_socket作为root用户的身份验证方法,而不是设置密码。因此,它跳过了为root用户设置密码的步骤。
  3. If you would like to use password authentication instead, this can be done with the "ALTER_USER" command.
  4. 如果你想使用密码验证而不是默认的身份验证方法,你可以使用ALTER USER命令来为root用户设置密码。
  5. See https://dev.mysql.com/doc/refman/8.0/en/alter-user.html#alter-user-password-management for more information.
  6. 这是一个指向MySQL官方文档的链接,提供了关于如何使用ALTER USER命令的更多信息和指导。
  7. By default, a MySQL installation has an anonymous user, allowing anyone to log into MySQL without having to have a user account created for them.
  8. 默认情况下,MySQL安装中有一个匿名用户,允许任何人无需创建用户账户即可登录到MySQL。
  9. This is intended only for testing, and to make the installation go a bit smoother.
  10. 这是为了方便测试和使安装过程更顺畅而设置的。
  11. You should remove them before moving into a production environment.
  12. 在将环境切换到生产环境之前,您应该删除这些匿名用户。
  13. Remove anonymous users? (Press y|Y for Yes, any other key for No) :
  14. 系统询问您是否要删除匿名用户。按yY键表示“是”,按除yY之外的任何键表示“否”。

简而言之,这段信息是关于MySQL安装过程中的一些安全和配置选项的提示。根据您的需求和环境,您可能需要采取特定的行动,例如为root用户设置密码或删除匿名用户。

问题4:

Normally, root should only be allowed to connect from 'localhost'. This ensures that someone cannot guess at the root password from the network.

Disallow root login remotely? (Press y|Y for Yes, any other key for No) :

这段信息是关于MySQL安全性的提示,它询问您是否要禁止root用户从远程进行登录。

如果您选择禁止root用户从远程登录,那么只有从本地主机(例如:localhost)才能使用root用户进行登录。这样可以增加安全性,因为这意味着即使有人尝试通过网络猜测root密码,也无法成功。

您可以根据以下提示进行选择:

  • yY键表示“是”,禁止root用户远程登录。
  • 按除yY之外的任何键表示“否”,允许root用户远程登录。

在大多数情况下,为了增强安全性,建议选择禁止root用户远程登录。

问题5:

By default, MySQL comes with a database named 'test' that anyone can access. This is also intended only for testing, and should be removed before moving into a production environment.

Remove test database and access to it? (Press y|Y for Yes, any other key for No) :

这段信息是关于MySQL中的“test”数据库的提示。默认情况下,MySQL安装时会有一个名为“test”的数据库,任何人都可以访问。这也是为了方便测试而设置的,在将环境切换到生产环境之前,您应该删除这个数据库及其访问权限。

您可以根据以下提示进行选择:

  • yY键表示“是”,删除“test”数据库及其访问权限。
  • 按除yY之外的任何键表示“否”,保留“test”数据库及其访问权限。

为了增强安全性,建议选择删除“test”数据库及其访问权限。

问题6:

Reloading the privilege tables will ensure that all changes made so far will take effect immediately.

Reload privilege tables now? (Press y|Y for Yes, any other key for No) :

这段信息是关于MySQL权限表的重新加载的提示。MySQL的权限系统使用所谓的“权限表”来存储和管理用户权限。当您对权限进行更改时(例如,通过GRANTREVOKE命令),这些更改不会立即生效。为了使这些更改生效,您需要重新加载权限表。

该提示询问您是否现在要重新加载权限表。重新加载权限表将使迄今为止所做的所有权限更改立即生效。

您可以根据以下提示进行选择:

  • yY键表示“是”,重新加载权限表。
  • 按除yY之外的任何键表示“否”,不重新加载权限表。

为了确保所做的权限更改立即生效,建议选择重新加载权限表。

登入Mysql

sudo mysql -u root -p

如果你登录服务器用户不是root超管,那么这里会第一次提示你输入登录服务器的密码!

第二次输入密码提示才是数据库root用户的密码,默认root用户的密码为空,回车即可登录!

image-20240121232152274.png

设置root用户密码

ALTER USER 'root'@'localhost' IDENTIFIED BY 'P@ssw0rd!';

提示:Query OK, 0 rows affected (0.00 sec) 代表修改成功!可退出重新登录重试!

创建MySQL数据库新用户

CREATE USER 'bayke'@'localhost' IDENTIFIED BY 'Abc123!..';

为创建的新用户授权,以下命令将为用户授予所有数据库的所有权限:

GRANT ALL PRIVILEGES ON *.* TO 'bayke'@'localhost';

在授予权限后,你需要刷新权限以使更改生效:

FLUSH PRIVILEGES;

之后即可退出Mysql数据库终端,记住root用户和新用户(bayke)的密码!

django配置Mysql数据库

settings配置

django项目配置文件settings.py中替换默认的sqlite3数据库为Mysql!

# Mysql数据库配置
DATABASES = {
    'default': {
        'ENGINE': 'django.db.backends.mysql',
        'OPTIONS': {
            # 若开启mysql数据库,请在项目根目录创建一个mysql.cnf文件,内容如下:
            # [client]
            # database = baykeshop
            # user = root
            # password = root
            # host = 127.0.0.1
            # port = 3306
            # default-character-set = utf8
            'read_default_file': f"{BASE_DIR}/mysql.cnf",
            'charset': 'utf8mb4',
        },
    }
}

虚拟环境创建

创建Python虚拟环境并激活虚拟环境

# 创建虚拟环境
python3 -m venv venv

# 激活虚拟环境
source venv/bin/activate

激活虚拟环境之后,根据你的项目使用pip install [包名称]命令安装项目所有的依赖包!

安装mysqlclient

安装Mysql和Python的驱动包mysqlclient

pip install mysqlclient

出现如下错误所示:

 Getting requirements to build wheel ... error
  error: subprocess-exited-with-error

  × Getting requirements to build wheel did not run successfully.
  │ exit code: 1
  ╰─> [27 lines of output]
      /bin/sh: 1: pkg-config: not found
      /bin/sh: 1: pkg-config: not found
      /bin/sh: 1: pkg-config: not found
      Trying pkg-config --exists mysqlclient
      Command 'pkg-config --exists mysqlclient' returned non-zero exit status 127.
      Trying pkg-config --exists mariadb
      Command 'pkg-config --exists mariadb' returned non-zero exit status 127.
      Trying pkg-config --exists libmariadb
      Command 'pkg-config --exists libmariadb' returned non-zero exit status 127.
      Traceback (most recent call last):
        File "/home/qbc/web/venv/lib/python3.10/site-packages/pip/_vendor/pep517/in_process/_in_process.py", line 363, in <module>
          main()
        File "/home/qbc/web/venv/lib/python3.10/site-packages/pip/_vendor/pep517/in_process/_in_process.py", line 345, in main
          json_out['return_val'] = hook(**hook_input['kwargs'])
        File "/home/qbc/web/venv/lib/python3.10/site-packages/pip/_vendor/pep517/in_process/_in_process.py", line 130, in get_requires_for_build_wheel
          return hook(config_settings)
        File "/tmp/pip-build-env-nlhvc8rs/overlay/lib/python3.10/site-packages/setuptools/build_meta.py", line 325, in get_requires_for_build_wheel
          return self._get_build_requires(config_settings, requirements=['wheel'])
        File "/tmp/pip-build-env-nlhvc8rs/overlay/lib/python3.10/site-packages/setuptools/build_meta.py", line 295, in _get_build_requires
          self.run_setup()
        File "/tmp/pip-build-env-nlhvc8rs/overlay/lib/python3.10/site-packages/setuptools/build_meta.py", line 311, in run_setup
          exec(code, locals())
        File "<string>", line 155, in <module>
        File "<string>", line 49, in get_config_posix
        File "<string>", line 28, in find_package_name
      Exception: Can not find valid pkg-config name.
      Specify MYSQLCLIENT_CFLAGS and MYSQLCLIENT_LDFLAGS env vars manually
      [end of output]

  note: This error originates from a subprocess, and is likely not a problem with pip.
error: subprocess-exited-with-error

× Getting requirements to build wheel did not run successfully.
│ exit code: 1
╰─> See above for output.

note: This error originates from a subprocess, and is likely not a problem with pip.

这里的报错的意思是编译时pkg-config找不见mariadb和libmariadb两个包,安装即可!

sudo apt-get install pkg-config libmariadb-dev-compat libmariadb-dev 

重新运行pip install mysqlclient 此时,将不出意外会安装成功!

迁移数据

运行django的迁移数据库命令makemigrations和migrate

python manage.py makemigrations

出现如下所示错误,则代表我们配置的baykeshop数据库未创建,不存在!

image-20240122000429570.png

1、使用新创建的用户登录mysql数据库终端

mysql -u bayke -p

image-20240122000743865.png

2、创建名为baykeshop的数据库

create database baykeshop;

image-20240122001125027.png

3、继续运行django迁移数据库命令makemigrations和migrate

(venv) qbc@qbc:~/web/code$ python manage.py makemigrations
No changes detected

(venv) qbc@qbc:~/web/code$ python manage.py migrate
Operations to perform:
  Apply all migrations: account, admin, article, auth, contenttypes, sessions, shop, system
Running migrations:
  Applying contenttypes.0001_initial... OK
  Applying auth.0001_initial... OK
  ...

image-20240122001414819.png

迁移成功,配置完成!