Manually deploy a MySQL database on an ECS instance that runs Alibaba Cloud Linux

Step 1. Prepare the environment

Connect to your ECS instance. For more information, see Connect to a Linux instance by using an SSH key pair or Connect to a Linux instance by using a username and password.

Step 2: Install MySQL

1. Run the following command to update the YUM repository:

   rpm -Uvh  http://dev.mysql.com/get/mysql57-community-release-el7-9.noarch.rpm

2. Run the following command to install MySQL:

   yum -y install mysql-community-server

3. Run the following command to check the MySQL version:

   mysql -V

   The following command output indicates that MySQL is installed:

   mysql  Ver 14.14 Distrib 5.7.31, for Linux (x86_64) using  EditLine wrapper

Step 3. Configure MySQL

1. Run the following command to start MySQL:

   systemctl start mysqld

2. Run the following command to enable MySQL to start upon system startup:

   systemctl enable mysqld

3. Run the following command to check the /var/log/mysqld.log file, and obtain and record the initial password of the root user:

   grep 'temporary password' /var/log/mysqld.log

   A command output similar to the following one is displayed:

   2020-04-08T08:12:07.893939Z 1 [Note] A temporary password is generated for root@localhost: xvlo1lZs7>uI

   Note The initial password is used in the subsequent security configurations for MySQL.
4. Run the following command to make security configurations for MySQL:

   mysql_secure_installation

   1. Reset the password of the root user.

      Enter password for user root: #Enter the initial password that you obtained in the previous step.
      The 'validate_password' plugin is installed on the server.
      The subsequent steps will run with the existing configuration of the plugin.
      Using existing password for root.
      Estimated strength of the password: 100 
      Change the password for root ? (Press y|Y for Yes, any other key for No) : Y #Enter Y to change the password of the root user.
      New password: #Enter a new password that is 8 to 30 characters in length. The password must contain uppercase letters, lowercase letters, digits, and special characters. Special characters include ()` ~ ! @ # $ % ^ & * - + = | {} [] : ; ' <> , . ? /
      Re-enter new password: #Enter the new password again for confirmation.
      Estimated strength of the password: 100 
      Do you wish to continue with the password provided?( (Press y|Y for Yes, any other key for No) : Y #Enter Y to continue.

   2. Delete anonymous users.

      By default, a MySQL installation has an anonymous user, allowing anyone to log into MySQL without having to have a user account created for them. This is intended only for testing, and to make the installation go a bit smoother. You should remove them before moving into a production environment.
      Remove anonymous users? (Press y|Y for Yes, any other key for No) : Y #Enter Y to delete anonymous users.
      Success.

   3. Deny remote access from the root user.

      Disallow root login remotely? (Press y|Y for Yes, any other key for No) : Y #Enter Y to deny remote access from the root user.
      Success.

   4. Delete the test database and access permissions on this database.

      Remove test database and access to it? (Press y|Y for Yes, any other key for No) : Y #Enter Y to delete the test database and access permissions on this database.
      - Dropping test database...
      Success.

   5. Reload privilege tables.

      Reload privilege tables now? (Press y|Y for Yes, any other key for No) : Y #Enter Y to reload privilege tables.
      Success.
      All done!

   For more information about the security configurations for MySQL, see MySQL documentation.

Step 4. Remotely access the MySQL database

You can use a database client or Data Management Service (DMS) provided by Alibaba Cloud to remotely access the MySQL database. In this topic, DMS is used to show how to remotely access the MySQL database.

1. On the ECS instance, create an account for remote logon to the MySQL database.
   1. Run the following command and enter the password of the root user to log on to the MySQL database:

       mysql -uroot -p

   2. Run the following commands in sequence to create an account for remote logon to MySQL. In this example, the account is dms and the password is 123456.

      mysql> grant all on *.* to 'dms'@'%'IDENTIFIED BY '123456'; #Replace dms with root to enable remote logon with the root account.
      mysql> flush privileges;

      Note

      • We recommend that you use an account other than root to remotely log on to the MySQL database.
      • When you create an account, you must replace password 123456 with a password that meets the complexity requirements. The password must be 8 to 30 characters in length, and must contain uppercase letters, lowercase letters, digits, and special characters. Special characters include

        ()` ~! @ # $ % ^ & * - + = | {} [] : ; ' <> , . ? /

2. Log on to the DMS console.
3. In the left-side navigation pane, click User-Created Database (ECS, Internet).
4. Click Add Database.
5. Add the database that you have created. For more information, see Manage user-created databases on ECS instances.
6. Click Log On.
   After you are logged on, you can use the menu bar of DMS to create objects such as databases, tables, and functions.