summaryrefslogtreecommitdiff
path: root/debian/additions
diff options
context:
space:
mode:
authorVicențiu Ciorbaru <vicentiu@mariadb.org>2017-05-08 12:26:23 +0300
committerVicențiu Ciorbaru <vicentiu@mariadb.org>2017-05-08 21:42:41 +0300
commit844a5759462d11d5e4ae83d951b796647621e2d0 (patch)
treec06ac58f4a06821da0eeaf184a1206c572877c23 /debian/additions
parentd049a560bc9916f3af6711b8931bba187fd3fca5 (diff)
downloadmariadb-git-844a5759462d11d5e4ae83d951b796647621e2d0.tar.gz
MDEV-12449: Debian Packaging AWS key management plugin
* Update debian control file to include AWS key management plugin. * Update dependencies in control file to include uuid. * Include enable_encryption.preset with the aws-key-management plugin.
Diffstat (limited to 'debian/additions')
-rw-r--r--debian/additions/enable_encryption.preset20
1 files changed, 20 insertions, 0 deletions
diff --git a/debian/additions/enable_encryption.preset b/debian/additions/enable_encryption.preset
new file mode 100644
index 00000000000..287bc03413a
--- /dev/null
+++ b/debian/additions/enable_encryption.preset
@@ -0,0 +1,20 @@
+#
+# !include this file into your my.cnf (or any of *.cnf files in /etc/mysql/conf.d)
+# and it will enable data at rest encryption. This is a simple way to
+# ensure that everything that can be encrypted will be and your
+# data will not leak unencrypted.
+#
+# DO NOT EDIT THIS FILE! On MariaDB upgrades it might be replaced with a
+# newer version and your edits will be lost. Instead, add your edits
+# to the .cnf file after the !include directive.
+#
+# NOTE that you also need to install an encryption plugin for the encryption
+# to work. See https://mariadb.com/kb/en/mariadb/data-at-rest-encryption/#encryption-key-management
+#
+[mariadb]
+aria-encrypt-tables
+encrypt-binlog
+encrypt-tmp-disk-tables
+encrypt-tmp-files
+loose-innodb-encrypt-log
+loose-innodb-encrypt-tables