-
Incident report
-
Resolution: Fixed
-
Trivial
-
None
-
5.0.3
-
None
-
Docker version 19.03.12, build 48a66213fe
docker-compose version 1.26.2, build eefe0d31
Linux 5.6.16-200.fc31.x86_64 #1 SMP Thu Jun 4 18:07:41 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
Steps to reproduce:
- Using docker-compose to manage docker stack
- Previously using zabbix/zabbix-server-mysql:ubuntu-5.0.2 docker image with SSL connection to DB
- Create new container from from zabbix/zabbix-server-mysql:ubuntu-5.0.3
- Start new container and note the server does not start
- Revert back to the 5.0.2 image and the server will start
- The docker-compose config set up to use SSL to the MariaDB server was with the same between runs:
- ZBX_DBTLSCONNECT=required
- ZBX_DBTLSCAFILE=<CA file>
- ZBX_DBTLSCERTFILE=<Cert File>
- ZBX_DBTLSKEYFILE=<Key File>
Observations:
With the 5.0.2 image, the server log had many "WARNING: --ssl is deprecated and will be removed in a future version. Use --ssl-mode instead."
With the 5.0.3 image, the message changed to "mysqladmin: [ERROR] unknown option '–ssl'." and the server would not start.
From inside the 5.0.2 container:
zabbix@9dfc8c196651:/var/lib/zabbix$ zabbix_server -V zabbix_server (Zabbix) 5.0.2 Revision 352ca05 13 July 2020, compilation time: Jul 13 2020 11:44:01Copyright (C) 2020 Zabbix SIA License GPLv2+: GNU GPL version 2 or later <http://gnu.org/licenses/gpl.html>. This is free software: you are free to change and redistribute it according to the license. There is NO WARRANTY, to the extent permitted by law.This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/).Compiled with OpenSSL 1.1.1 11 Sep 2018 Running with OpenSSL 1.1.1 11 Sep 2018 zabbix@9dfc8c196651:/var/lib/zabbix$ mysql -V mysql Ver 14.14 Distrib 5.7.30, for Linux (x86_64) using EditLine wrapper zabbix@9dfc8c196651:/var/lib/zabbix$ mysql --ssl WARNING: --ssl is deprecated and will be removed in a future version. Use --ssl-mode instead.
From inside the 5.0.3 container:
zabbix@f1b81f065ba7:/var/lib/zabbix$ zabbix_server --version zabbix_server (Zabbix) 5.0.3 Revision 146855b 24 August 2020, compilation time: Aug 24 2020 12:37:33Copyright (C) 2020 Zabbix SIA License GPLv2+: GNU GPL version 2 or later <http://gnu.org/licenses/gpl.html>. This is free software: you are free to change and redistribute it according to the license. There is NO WARRANTY, to the extent permitted by law.This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/).Compiled with OpenSSL 1.1.1f 31 Mar 2020 Running with OpenSSL 1.1.1f 31 Mar 2020 zabbix@f1b81f065ba7:/var/lib/zabbix$ mysql -V mysql Ver 8.0.21-0ubuntu0.20.04.4 for Linux on x86_64 ((Ubuntu)) zabbix@f1b81f065ba7:/var/lib/zabbix$ mysql --ssl mysql: [ERROR] unknown option '--ssl'.
It looks like the SQL server/library used inside the container changed, thus what was deprecated before is no longer available. I haven't tried building my own container, but I suspect that just building the container with the older SQL release would be a quick fix.