DPE-2223 DPE-1685 All packages installed from trusted canonical sources - Githubissues

canonical / charmed-mysql-snap

SNAP for Charmed MySQL charm.

https://snapcraft.io/charmed-mysql

Apache License 2.0

0 stars 4 forks source link

DPE-2223 DPE-1685 All packages installed from trusted canonical sources #35

Closed shayancanonical closed 1 year ago

shayancanonical commented 1 year ago

Issues

We now have PPAs for xtrabackup, mysql-exporter and mysqlrouter-exporter. However, we are still installing them from upstream.
We are pinning v8.0.32 of mysql, but we install v8.0.33 from the security.ubuntu.com repo
We are enabling mysqld-exporter by default when the snap starts, which should not happen as the snap will also be used in the mysqlrouter charm

Solutions

Use the PPAs to install xtrabackup, mysql-exporter and mysqlrouter-exporter instead of upstream sources
Pin v8.0.33
Disable mysqld-exporter upon startup