1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110

class mysql {
	$dbpassword = "password"

	define seed_package($ensure = latest) {
		$seedpath = "/tmp"
		file { "$seedpath/$name.seed":
			source => "puppet:///mysql/$name.seed",
			mode => 0600,
			owner => root,
			group => root
		}
		package { $name:
			ensure => $ensure,
			responsefile => "$seedpath/$name.seed",
			require => File["$seedpath/$name.seed"],
		}
	}

	package { "mysql-client": ensure => installed }
	seed_package { "mysql-server": ensure => installed }

	exec { "Set MySQL server root password":
		subscribe => [Package["mysql-server"], Package["mysql-client"]],
		refreshonly => true,
		unless => "mysqladmin -uroot -p$dbpassword status",
		path => "/bin:/usr/bin:/usr/sbin",
		command => "mysqladmin -uroot password $dbpassword",
		require => Package["mysql-server"],
	}

	service { apparmor:
		ensure => "running",
		enable => true,
	}

	file { "/etc/apparmor.d/usr.sbin.mysqld":
		owner   => "root",
		group   => "root",
		mode    => "0644",
		replace => true,
		source  => "puppet:///mysql/usr.sbin.mysqld",
		notify  => Service[apparmor],
		require => Package["mysql-server"],
	}
 
	file { "/etc/mysql/conf.d/myconfig.cnf":
		owner   => "root",
		group   => "root",
		mode    => "0644",
		replace => true,
		content => template("mysql/myconfig.cnf.erb"),
		require => Package["mysql-server"],
	}

	file { "/root/.my.cnf":
		owner   => "root",
		group   => "root",
		mode    => "0400",
		replace => true,
		content => template("mysql/root.my.cnf.erb"),
		require => Package["mysql-server"],
	}

	file { "/etc/mysql/my.cnf":
		owner   => "root",
		group   => "root",
		mode    => "0644",
		replace => true,
		source  => "puppet:///mysql/my.cnf",
	}

	file { "/srv/mysql":
		owner   => "mysql",
		group   => "mysql",
		mode    => "0755",
		ensure  => directory,
		require => Package["mysql-server"],
	}
	
	file { "/srv/mysql/lib":
		owner   => "mysql",
		group   => "mysql",
		mode    => "0755",
		ensure  => directory,
		require => Package["mysql-server"],
	}

	file { "/srv/mysql/lib/mysql":
		ensure  => "/var/lib/mysql/mysql",
		require => Package["mysql-server"],
	}

	service { mysql:
		enable  => "true",
		ensure  => "running",
		require => File["/etc/mysql/conf.d/myconfig.cnf"],
		require => File["/etc/mysql/my.cnf"],
	}

	# Replication slave user
	mysql_user { "myuser@%.mydomain":
		password_hash => "passwordhere",
		ensure => present,
		require => Service[mysql],
	}
	mysql_grant { "myuser@%.mydomain":
		privileges => ["repl_slave_priv"],
		require => Service[mysql],
	}
}