In this tutorial, I’ll show you how you can install MariaDB database server on Debian 10 (Buster) / Debian 11 (Bullseye). MariaDB is a relational database management system forked from MySQL. MariaDB is fully open source and is released under the General Public License version 2.
There is no additional repository need for the installation of MariaDB database server on Debian 10 Buster. You just need to update system APT repositories and you’re set to go.
For Galera Cluster, use the guide on Setup MariaDB Galera Cluster on Debian
Step 1: Update Debian 10 / Debian 11 System
Run the following commands in your terminal to update system packages and repository content on your server.
sudo apt update && sudo apt -y upgradeStep 2: Install MariaDB on Debian 10 / Debian 11
Next is to install MariaDB database server on Debian 10 Buster.
sudo apt -y install mariadb-server mariadb-clientWhen prompted to set the root password, provide the password and confirm.
The version of MariaDB installed as default is 10.x. This can be confirmed with:
$ apt policy mariadb-server
mariadb-server:
Installed: 1:10.3.38-0+deb10u1
Candidate: 1:10.3.38-0+deb10u1
Version table:
*** 1:10.3.38-0+deb10u1 500
500 http://security.debian.org buster/updates/main amd64 Packages
500 http://mirror.hetzner.com/debian/security buster/updates/main amd64 Packages
100 /var/lib/dpkg/status
1:10.3.34-0+deb10u1 500
500 http://deb.debian.org/debian buster/main amd64 Packages
500 http://mirror.hetzner.com/debian/packages buster/main amd64 Packages
...
The service name for MariaDB Database server is mysql or mariadb.
$ systemctl status mariadb
● mariadb.service - MariaDB 10.3.38 database server
Loaded: loaded (/lib/systemd/system/mariadb.service; enabled; vendor preset: enabled)
Active: active (running) since Tue 2023-04-04 14:31:02 UTC; 1h 8min ago
Docs: man:mysqld(8)
https://mariadb.com/kb/en/library/systemd/
Main PID: 2060 (mysqld)
Status: "Taking your SQL requests now..."
Tasks: 30 (limit: 4580)
Memory: 72.8M
CGroup: /system.slice/mariadb.service
└─2060 /usr/sbin/mysqld
Apr 04 14:31:01 debian10 systemd[1]: Starting MariaDB 10.3.38 database server...
Apr 04 14:31:02 debian10 systemd[1]: Started MariaDB 10.3.38 database server.
Apr 04 14:31:02 debian10 /etc/mysql/debian-start[2098]: /usr/bin/mysql_upgrade: the '--basedir' option is always ignored
Apr 04 14:31:02 debian10 /etc/mysql/debian-start[2098]: Looking for 'mysql' as: /usr/bin/mysql
Apr 04 14:31:02 debian10 /etc/mysql/debian-start[2098]: Looking for 'mysqlcheck' as: /usr/bin/mysqlcheck
Apr 04 14:31:02 debian10 /etc/mysql/debian-start[2098]: This installation of MariaDB is already upgraded to 10.3.38-MariaDB.
Apr 04 14:31:02 debian10 /etc/mysql/debian-start[2098]: There is no need to run mysql_upgrade again for 10.3.38-MariaDB.
Apr 04 14:31:02 debian10 /etc/mysql/debian-start[2098]: You can use --force if you still want to run mysql_upgrade
Apr 04 14:31:02 debian10 /etc/mysql/debian-start[2108]: Checking for insecure root accounts.
Apr 04 14:31:02 debian10 /etc/mysql/debian-start[2112]: Triggering myisam-recover for all MyISAM tables and aria-recover for all Aria tables
Step 3: Secure MariaDB Database Server
The last step is securing the database server. This includes:
- Setting strong root password
- Removing anonymous users
- Disabling remote login for root user.
- Removing test database and access to it
Run the command below to secure your database server.
$ sudo mysql_secure_installation
NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB
SERVERS IN PRODUCTION USE! PLEASE READ EACH STEP CAREFULLY!
In order to log into MariaDB to secure it, we'll need the current
password for the root user. If you've just installed MariaDB, and
you haven't set the root password yet, the password will be blank,
so you should just press enter here.
Enter current password for root (enter for none):
OK, successfully used password, moving on…
Setting the root password ensures that nobody can log into the MariaDB
root user without the proper authorisation.
Set root password? [Y/n] Y
New password:
Re-enter new password:
Password updated successfully!
Reloading privilege tables..
… Success!
By default, a MariaDB installation has an anonymous user, allowing anyone
to log into MariaDB without having to have a user account created for
them. This is intended only for testing, and to make the installation
go a bit smoother. You should remove them before moving into a
production environment.
Remove anonymous users? [Y/n] Y
… Success!
Normally, root should only be allowed to connect from 'localhost'. This
ensures that someone cannot guess at the root password from the network.
Disallow root login remotely? [Y/n] Y
… Success!
By default, MariaDB comes with a database named 'test' that anyone can
access. This is also intended only for testing, and should be removed
before moving into a production environment.
Remove test database and access to it? [Y/n] Y
Dropping test database…
… Success!
Removing privileges on test database…
… Success!
Reloading the privilege tables will ensure that all changes made so far
will take effect immediately.
Reload privilege tables now? [Y/n] Y
… Success!
Cleaning up…
All done! If you've completed all of the above steps, your MariaDB
installation should now be secure.
Thanks for using MariaDB!Update authentication plugin to allow root password authentication as normal user.
$ sudo mysql -u root
UPDATE mysql.user SET plugin = 'mysql_native_password' WHERE User = 'root';
FLUSH PRIVILEGES;
QUIT;
Test MariaDB database installation.
$ mysql -u root -p
Enter password:
Welcome to the MariaDB monitor. Commands end with ; or \g.
Your MariaDB connection id is 67
Server version: 10.3.38-MariaDB-0+deb10u1 Debian 10
Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.Confirm version from MySQL CLI:
MariaDB [(none)]> SELECT VERSION();
+---------------------------+
| VERSION() |
+---------------------------+
| 10.3.38-MariaDB-0+deb10u1 |
+---------------------------+
1 row in set (0.000 sec)
MariaDB [(none)]> QUIT
That’s all. Enjoy running the MariaDB Database server on Debian 10 (Buster).
Similar articles are:
