WSREP: Failed to read 'ready <addr>' from: wsrep_sst_mariabackup

[Henri Gehrt]

I wanted to activate encrypted SST using mariabackup. SST was working fine without encryption. I switched it on with the following config changes:

encrypt=3 (i also tried encrypt 4)
tkey=/var/lib/mysql/pki/sst/privkey.pem
tcert=/var/lib/mysql/pki/sst/fullchain.pem

syslog contains "Both the certificate file and the key file must be readable"

I think they are :

-rwxr-x--- 1 mysql mysql 2338 Feb 25 15:43 fullchain.pem
-rwxr-x--- 1 mysql mysql 3243 Feb 25 15:43 privkey.key

Errors are found in the mysql error log:

 WSREP: Failed to read 'ready <addr>' from: wsrep_sst_mariabackup --role 'joiner' --address '20.0.0.40' --datadir '/var/lib/mysql/' --parent '123214' --mysqld-args --wsrep_start_position=e3ae9a28-94bb-11ec-ad06-471ad9aca501:110

 WSREP: Process completed with error: wsrep_sst_mariabackup --role 'joiner' --address '20.0.0.40' --datadir '/var/lib/mysql/' --parent '123214' --mysqld-args --wsrep_start_position=e3ae9a28-94bb-11ec-ad06-471ad9aca501:110: 22 (Invalid argument)

[li...@ptld.com]

> syslog contains "Both the certificate file and the key file must be readable"
> I think they are :
> -rwxr-x--- 1 mysql mysql 2338 Feb 25 15:43 fullchain.pem
> -rwxr-x--- 1 mysql mysql 3243 Feb 25 15:43 privkey.key

Not sure if this is your problem, but check...

Even if the files give read permission to user mysql,
if the directory the files are sitting in does not also give
read access, then mysql can't get to the files.

[Henri Gehrt]

I just checked. Permission for the directorys are the same.

Maybe the problem is that the files are inside the data-dir (in subfolders). I will move them somewhere else for testing

[li...@ptld.com]

> On 02-27-2022 6:09 am, Henri Gehrt wrote:
> I just checked. Permission for the directorys are the same.
> Maybe the problem is that the files are inside the data-dir (in
> subfolders). I will move them somewhere else for testing

Another issue people run into is they are running something in chroot.

[Henri Gehrt]

there is no chroot, just a vanilla ubuntu server installation. I just installed mariadb, socat, mariabackup and qemu guest-agent