Docker Flyway MySQL 8：客户端不支持服务器请求的身份验证协议。考虑升级MariaDB客户端

Question

我正在docker容器中运行我的应用程序，其中flyway迁移工具在连接到MySQL DB(8.0.11)时出错：下面是完整的错误：

Unable to obtain connection from database (jdbc:mysql://docker-mysql:3306) for user 'deepti': 
Client does not support authentication protocol requested by server. 
Consider upgrading MariaDB client. plugin was = caching_sha2_password

这是我的docker-compose.yml：

version: '3'

services: 
  docker-mysql:
    image: mysql:8.0.11
    environment:
      - MYSQL_ROOT_PASSWORD=...
      - MYSQL_DATABASE=test1
      - MYSQL_USER=...
      - MYSQL_PASSWORD=...

  flyway-service-i:
    image: boxfuse/flyway
    command: -url=jdbc:mysql://docker-mysql:3306 -schemas=test1 -user=... -password=... migrate
    volumes:
     - "../resources/db/migration:/flyway/sql"
    depends_on:
     - docker-mysql 

  spring-boot-jpa-docker-webapp:
    image: deepti/spring-boot-docker
    depends_on:
      - docker-mysql
    ports:
      - 8080:8080
    environment:
      - DATABASE_HOST=docker-mysql
      - DATABASE_USER=...
      - DATABASE_PASSWORD=...
      - DATABASE_NAME=test1 
      - DATABASE_PORT=3306
   

有谁能帮我一下。谢谢

Answer 1

MySQL中的默认身份验证方法在8.0.4版本中更改为caching_sha2_password。看起来MariaDB连接器不支持它。

您可以通过添加下面显示的命令将默认身份验证插件还原到旧版本：

version: '3'

services: 
  docker-mysql:
    image: mysql:8.0.11
    command: --default-authentication-plugin=mysql_native_password
    environment:
...

对于db中已经使用caching_sha2_password身份验证方法创建的任何现有用户，您可以将用户更改为使用mysql_native_password:

ALTER USER 'username'@'ip_address' IDENTIFIED WITH mysql_native_password BY 'password';

或者只使用docker-compose rm删除现有容器。

我在这个存储库中创建了一个工作示例。以下是成功的输出：

Flyway Community Edition 5.1.4 by Boxfuse

Database: jdbc:mysql://docker-mysql:3306/test1 (MySQL 8.0)
WARNING: You are connected to a MySQL database using the MariaDB driver. This is known to cause issues. An upgrade to Oracle's MySQL JDBC driver is highly recommended.
Successfully validated 1 migration (execution time 00:00.010s)
Creating Schema History table: `test1`.`flyway_schema_history`
Current version of schema `test1`: << Empty Schema >>
Migrating schema `test1` to version 1.0 - init
Successfully applied 1 migration to schema `test1` (execution time 00:00.290s)

正如您所看到的，虽然它可以工作，但是有一个关于在MySQL中使用MariaDB驱动程序的问题的警告。

另一个选择是下载正式的MySQL JDBC驱动程序，将其添加到./drivers目录中，并将其挂载到Flyway容器中：

  flyway-service-i:
    image: boxfuse/flyway
    command: ...
    volumes:
     - "./sql:/flyway/sql"
     - "./drivers:/flyway/drivers"

这也起了作用：

Flyway Community Edition 5.1.4 by Boxfuse

Database: jdbc:mysql://docker-mysql:3306/test1 (MySQL 8.0)
Successfully validated 1 migration (execution time 00:00.011s)
Creating Schema History table: `test1`.`flyway_schema_history`
Current version of schema `test1`: << Empty Schema >>
Migrating schema `test1` to version 1.0 - init
Successfully applied 1 migration to schema `test1` (execution time 00:00.229s)

但要摆脱以下警告：

WARN: Establishing SSL connection without server's identity verification is not recommended. According to MySQL 5.5.45+, 5.6.26+ and 5.7.6+ requirements SSL connection must be established by default if explicit option isn't set. For compliance with existing applications not using SSL the verifyServerCertificate property is set to 'false'. You need either to explicitly disable SSL by setting useSSL=false, or set useSSL=true and provide truststore for server certificate verification.

我确实需要将verifyservercertificate=false和usessl=true添加到jdbc URL：

jdbc:mysql://docker-mysql:3306/test1?verifyServerCertificate=false&useSSL=true