add backup script, modify my.cnf

config/my.cnf

@@ -1,12 +1,30 @@
 # For advice on how to change settings please see
 # http://dev.mysql.com/doc/refman/8.0/en/server-configuration-defaults.html
 #
+############################################################
+[mysqldump]
+socket=/mysql/data/mysql.sock
+
+
+[mysql]
+socket=/mysql/data/mysql.sock
+
+
 [mysqld]
 #
+############################################################
+#  Memory
+############################################################
+innodb_buffer_pool_size=2G
+innodb_log_buffer_size=64M
+tmp_table_size=64M
+max_heap_table_size=64M
+sort_buffer_size=4M
+
 
-###########################
+############################################################
 #  general
-###########################
+############################################################
 datadir=/mysql/data
 tmpdir=/tmp
 socket=/mysql/data/mysql.sock
@@ -15,35 +33,44 @@ pid-file=/var/run/mysqld/mysqld.pid
 character-set-server=utf8mb4
 collation-server=utf8mb4_general_ci
 user=mysql
+local-infile=0
 
 
-###########################
+############################################################
-#  storage
+#  storage engine
-###########################
+############################################################
 default_storage_engine=InnoDB
 innodb_file_per_table=on
 innodb_data_home_dir=/mysql/data
 innodb_log_group_home_dir=/mysql/data
-#innodb_log_files_in_group=2 #deprecated
+innodb_redo_log_capacity=4G
 innodb_undo_directory=/mysql/data
+#innodb_log_file_size=512M #deprecated
+#innodb_log_files_in_group=2 #deprecated
 #innodb_undo_tablespaces=3 #deprecated
 innodb_undo_log_truncate=on
 sync_binlog=1
 early-plugin-load=keyring_file.so
 keyring_file_data=/mysql/backup/keyring
+default_table_encryption=on
+table_encryption_privilege_check=on
+innodb_redo_log_encrypt=on
+innodb_undo_log_encrypt=on
+block_encryption_mode=aes-256-cbc
 
 
-###########################
+############################################################
 #  connection
-###########################
+############################################################
 max_connections=500
 wait_timeout=28800
 interactive_timeout=28800
 port=12138
 
-###########################
+
+############################################################
 #  logon
-###########################
+############################################################
 plugin-load-add=connection_control.so
 connection-control=FORCE_PLUS_PERMANENT
 connection-control-failed-login-attempts=FORCE_PLUS_PERMANENT
@@ -53,33 +80,42 @@ connection-control-max-connection-delay=86400000
 
 plugin-load-add=validate_password.so
 validate_password=FORCE_PLUS_PERMANENT
-validate_password.length=13
+validate_password_length=13
-validate_password.policy=1
+validate_password_policy=1
-validate_password.mixed_case_count=1
+validate_password_mixed_case_count=1
-validate_password.number_count=1
+validate_password_number_count=1
-validate_password.special_char_count=1
+validate_password_special_char_count=1
 default_password_lifetime=90
 
 
-##############################
+############################################################
+# binlog
+############################################################
+log-bin=/mysql/backup/log/mysql-bin
+log_bin_index=/mysql/backup/log/binlog.index
+binlog_format=mixed
+#expire_logs_days=7 #deprecated
+binlog_expire_logs_seconds=604800
+max_binlog_size=100M
+binlog_encryption=on
+
+
+
+############################################################
 # auditing
-##############################
+############################################################
 general_log=on
 general_log_file=/mysql/backup/log/mysql.log
-general_log=1
 log_timestamps=system
 long_query_time=10
 slow_query_log=on
-log-queries-not-using-indexes=on
 slow-query-log-file=/mysql/backup/log/slowquery.log
-log-bin=mysql-bin
+log-queries-not-using-indexes=on
-binlog_format=mixed
-server-id=1
 
 
-#############################
+############################################################
 # ssl/tls
-#############################
+############################################################
 ssl=on
 ssl-ca=/etc/mysql/certs/ca-cert.pem
 ssl-cert=/etc/mysql/certs/server-cert.pem
@@ -87,7 +123,19 @@ ssl-key=/etc/mysql/certs/server-key.pem
 #require_secure_transport=on
 
 
-[client]
+############################################################
-socket=/mysql/data/mysql.sock
+# replication
+# comment this block if replication is not used.
+# Caution: 
+#       server_id should differ between source and replica
+#       read-only should be set dynamically and persistently
+############################################################
+server_id=1
+relay-log=/mysql/backup/log/mysql-relay
+max_binlog_size=500M
+#read-only=0
+
+
+############################################################
 
 

script/backup_database.py

@@ -0,0 +1,103 @@
+# coding=UTF-8
+############################################################################################
+#
+# Author：     Wenguan Ding
+# Date:        2025/03/07
+# Description: This script is developed to run logical hot backup for mysql database(s)
+#
+############################################################################################
+import os
+import subprocess
+import time
+import gzip
+import argparse
+
+# 解析命令行参数
+parser = argparse.ArgumentParser(description="MySQL热物理备份脚本")
+parser.add_argument("-d", "--database", help="要备份的数据库名称（输入'all'备份所有数据库）", required=True)
+parser.add_argument("-p", "--path", help="备份文件存储路径", required=True)
+args = parser.parse_args()
+
+# 配置信息
+MYSQL_USER = "root"  # MySQL用户名
+MYSQL_PASSWORD = "Lysxbk713!"  # MySQL密码
+MYSQL_HOST = "localhost"  # MySQL主机
+MYSQL_PORT = "12138"  # MySQL端口
+
+# 创建备份目录（如果不存在）
+if not os.path.exists(args.path):
+    os.makedirs(args.path)
+
+def backup_database(db_name, backup_dir):
+    """备份单个数据库"""
+    timestamp = time.strftime("%Y%m%d_%H%M%S")
+    backup_file = os.path.join(backup_dir, "{0}_backup_{1}.sql".format(db_name, timestamp))
+    compressed_backup_file = backup_file + ".gz"
+
+    try:
+        print("开始备份数据库: {0}".format(db_name))
+        with open(backup_file, "w") as f:
+            subprocess.check_call(
+                [
+                    "mysqldump",
+                    "--user={0}".format(MYSQL_USER),
+                    "--password={0}".format(MYSQL_PASSWORD),
+                    "--host={0}".format(MYSQL_HOST),
+                    "--port={0}".format(MYSQL_PORT),
+                    "--single-transaction",  # 确保热备份
+                    "--routines",  # 备份存储过程和函数
+                    "--triggers",  # 备份触发器
+                    "--events",  # 备份事件
+                    db_name,
+                ],
+                stdout=f,
+            )
+        print("数据库备份成功，文件保存到: {0}".format(backup_file))
+
+        # 压缩备份文件
+        with open(backup_file, "rb") as f_in:
+            with gzip.open(compressed_backup_file, "wb") as f_out:
+                f_out.writelines(f_in)
+        print("备份文件已压缩: {0}".format(compressed_backup_file))
+
+        # 删除未压缩的备份文件
+        os.remove(backup_file)
+        print("已删除未压缩的备份文件: {0}".format(backup_file))
+
+    except subprocess.CalledProcessError as e:
+        print("备份失败: {0}".format(e))
+    except Exception as e:
+        print("发生错误: {0}".format(e))
+
+def get_all_databases():
+    """获取所有数据库名称"""
+    try:
+        output = subprocess.check_output(
+            [
+                "mysql",
+                "--user={0}".format(MYSQL_USER),
+                "--password={0}".format(MYSQL_PASSWORD),
+                "--host={0}".format(MYSQL_HOST),
+                "--port={0}".format(MYSQL_PORT),
+                "-e",
+                "SHOW DATABASES;",
+            ]
+        )
+        databases = output.splitlines()[1:]  # 跳过第一行标题
+        return databases
+    except subprocess.CalledProcessError as e:
+        print("获取数据库列表失败: {0}".format(e))
+        return []
+
+# 执行备份
+if args.database.lower() == "all":
+    databases = get_all_databases()
+    if databases:
+        print("开始备份所有数据库: {0}".format(databases))
+        for db in databases:
+            if db not in ["information_schema", "performance_schema", "mysql", "sys"]:  # 跳过系统数据库
+                backup_database(db, args.path)
+    else:
+        print("未找到可备份的数据库")
+else:
+    backup_database(args.database, args.path)