keel apply: converge a TCP socket unit that starts mariadb.service (listen drift) #110

New issue

Open

opened 2026-10-08 21:34:28 -03:00 by marcos-mendez · 0 comments

marcos-mendez commented

2026-10-08 21:34:28 -03:00

(Migrated from github.com)

Proposal: apply masks mariadb.socket and mariadb-extra.socket in the restart it already does, the replica before the primary on a pair. keel diff names the socket unit as the cause, not observed *.

From keel-mariadb#29/#30. keel/system/dbmariadb.py writes bind-address and restarts the server, but it does not check socket activation. When mariadb.socket is active (ListenStream=3306 = [::]:3306), bind-address has no effect and `database.server.listen` stays in drift. Machines made from an older image stay exposed until someone rebuilds them. Proposal: apply masks mariadb.socket and mariadb-extra.socket in the restart it already does, the replica before the primary on a pair. `keel diff` names the socket unit as the cause, not `observed *`.