MySQL

MySQL 8.0 with optional primary-replica replication, automated backups, and slow query logging.

Configuration

services:
  db:
    package: mysql
    config:
      root_password: "${MYSQL_ROOT_PASSWORD}"
      replication_password: "${MYSQL_REPL_PASSWORD}"

To add read replicas:

services:
  db:
    package: mysql
    replicas: 2
    config:
      root_password: "${MYSQL_ROOT_PASSWORD}"
      replication_password: "${MYSQL_REPL_PASSWORD}"

Parameters

Parameter	Required	Default	Description
root_password	Yes		Root password for the MySQL server
replication_password	Yes		Password for the replication user
replicas	No	0	Number of read replicas
dedicated_server	No	true	Let MySQL auto-tune memory and I/O for the full server (innodb_dedicated_server)
max_connections	No	151	Maximum concurrent connections
slow_query_log	No	true	Enable the slow query log
long_query_time	No	5	Queries slower than this (seconds) are logged
log_queries_not_using_indexes	No	true	Log queries that don't use indexes
keep_daily_backups	No	5	Number of daily full backups to retain
keep_weekly_backups	No	1	Number of weekly backups to retain
keep_monthly_backups	No	1	Number of monthly backups to retain

Replication

When replicas is set, managed creates a primary-replica topology:

• Primary, handles all writes, streams binary logs to replicas
• Replicas, read-only copies that follow the primary via GTID-based replication over TLS

Replication uses caching_sha2_password authentication and requires SSL. The primary's auto-generated CA certificate is shared with replicas through managed state.

Checking replication health

managed service db check-replication

Promoting a replica

If the primary fails, you can promote a replica:

managed service db promote

Backups

Full backups run every 6 hours via mysqldump with --single-transaction, compressed with gzip and uploaded to object storage. Binary log backups run every 15 minutes for point-in-time recovery.

Retention policy

Backups follow a daily/weekly/monthly retention scheme:

• Daily: keep the most recent backup per calendar day (default: 5 days)
• Weekly: keep the oldest daily per ISO week (default: 1 week)
• Monthly: keep the oldest daily per calendar month (default: 1 month)

Binary log backups older than the oldest retained full backup are automatically cleaned up.

Manual backup

managed service db backup

List backups

managed service db backup-list

Restore from backup

managed service db restore --arg confirm=yes

Commands

Command	Description
managed service <name> check-replication	Check replication health and lag
managed service <name> backup	Create a full backup now
managed service <name> backup-list	List available backups in storage
managed service <name> restore	Restore from the latest (or specified) backup
managed service <name> promote	Promote a replica to primary

Connection

MySQL listens on port 3306, open to public by default. The easiest way in:

managed repl <service-name>

It opens the mysql client with the password passed through the environment — never on a command line. To connect manually, -p (with no value) makes the client prompt for the password; don't type it into the command itself:

mysql -u root -p -h <server-ip> -P 3306

How it works

The service installs MySQL 8.0 from the default Ubuntu repositories. The primary is configured with:

• Binary logging (ROW format) and GTID for replication
• skip-name-resolve and local-infile = 0 for security
• innodb_dedicated_server = ON by default (auto-sizes buffer pool, redo log, flush method based on available RAM)
• Slow query log with configurable thresholds
• Log rotation for error and slow query logs

Where the data lives

MySQL keeps all its data in /var/lib/mysql on the server. managed installs MySQL onto whatever disk and RAID layout the server already has, it never repartitions or sets up RAID for you.

On a cloud server that's taken care of automatically. On an OVH bare-metal server you set the disk layout up yourself, once, before the first install, so your data lands on a redundant array with room to grow. Follow Storage & RAID on OVH bare metal before you run managed apply on one of those boxes.