installMySQL.sh

#!/bin/bash - 
#
# Copyright (C) 2017  Tetras Libre <admin@tetras-libre.fr>
# Author: Curt, Sebastien <sebastien.curt@tetras-libre.fr>
#
# This program is free software: you can redistribute it and/or modify # it
# under the terms of the GNU General Public License as published by # the Free
# Software Foundation, either version 3 of the License, or # (at your option)
# any later version.
#
# This program is distributed in the hope that it will be useful, # but WITHOUT
# ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or
# FITNESS FOR A PARTICULAR PURPOSE.  See the # GNU General Public License for
# more details.
#
# You should have received a copy of the GNU General Public License # along
# with this program.  If not, see <http://www.gnu.org/licenses/>.

set -o nounset                              # Treat unset variables as an error


###########################################################################
# 1. Install MySql
# 2. Save root password to file /root/.my.cnf
# 3. Configure MySql with mysql_secure_installation
# 4. Start mysql service
###########################################################################

# If mysql not installed then install it
DEBIAN_FRONTEND='noninteractive' apt-get -qq install mysql-server \
    apg expect

MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD:-$(apg -q -a 0 -n 1 -m 21 -M NCL)}

# Save in Root home directory connection configuration
if [ ! -e "${HOME}/.my.cnf" ]
then
    {
    echo "[client]"
    echo "user=root"
    echo "password=${MYSQL_ROOT_PASSWORD}"
    echo ""
    echo "[mysqldump]"
    echo "user=root"
    echo "password=${MYSQL_ROOT_PASSWORD}"
    } | tee '/root/.my.cnf' > "${HOME}/.my.cnf";
    chmod 400 '/root/.my.cnf' "${HOME}/.my.cnf";
else
    echo "MySQL already configured" >&2
    exit
fi

service mysql start


configureMySQLFile="/root/configureMySQL.sh"
# build expected script to run
{
echo "spawn $(which mysql_secure_installation)"

echo "expect \"Enter current password for root (enter for none):\""
echo "send \"\r\""

echo "expect -re \"Set root password\?.*\""
echo "send \"y\r\""

echo "expect -re \"New password:.*\""
echo "send \"${MYSQL_ROOT_PASSWORD}\r\""

echo "expect \"Re-enter new password:\""
echo "send \"${MYSQL_ROOT_PASSWORD}\r\""

echo "expect -re \"Remove anonymous users\?.*\""
echo "send \"y\r\""

echo "expect -re \"Disallow root login remotely\?.*\""
echo "send \"n\r\""

echo "expect -re \"Remove test database and access to it\?.*\""
echo "send \"y\r\""

echo "expect -re \"Reload privilege tables now\?.*\""
echo "send \"y\r\""
} > ${configureMySQLFile}

# Run Expect script.
# This runs the "mysql_secure_installation" script which removes insecure
# defaults.
expect  ${configureMySQLFile}

# allow PHP to access to mysql
mysql -e "
GRANT ALL PRIVILEGES on *.* to 'root'@'localhost' IDENTIFIED BY 
'${MYSQL_ROOT_PASSWORD}';
GRANT ALL PRIVILEGES on *.* to 'root'@'127.0.0.1' IDENTIFIED BY
'${MYSQL_ROOT_PASSWORD}';
FLUSH PRIVILEGES;"

# Cleanup
rm -v ${configureMySQLFile} # Remove the generated Expect script

unset configureMySQLFile
unset MYSQL_ROOT_PASSWORD

echo "MySQL setup completed. Insecure defaults are gone. Please remove"
echo " this script manually when you are done with it (or at least "
echo "remove the MySQL root password that you put inside it."