| 步驟 | 關鍵選項 | 建議 |
|---|---|---|
| Type & Networking | Config Type: Development / Server / Dedicated Port: 3306 Open Firewall | 生產選 Dedicated,開放防火牆 |
| Accounts & Roles | Root Password (強密碼) Root Host: localhost / % Add User | 生產禁用 root@%,建立專用應用賬號 |
| Windows Service | Service Name: MySQL55 Start at Boot Run as: Standard System Account / Custom User | 服務名區分版本,建議自定義低權限帳號運行 |
| Logging | Error Log, Slow Query Log, General Log, Binlog | 生產必開 Slow Log (長查詢 > 1s) 與 Binlog (ROW 格式) |
| Advanced Options | Custom my.cnf 路徑 | 可指定外部配置檔便於版控 |
Installer 內建角色模板,對應權限組合如下:
| 角色 | 核心權限 | 適用場景 |
|---|---|---|
| Backup Admin | EVENT, LOCK TABLES, SELECT, SHOW DATABASES | 備份腳本/工具 (mysqldump, XtraBackup) |
| DB Admin | ALL PRIVILEGES | DBA 管理帳號,極少授予 |
| DB Designer | ALTER, ALTER ROUTINE, CREATE, CREATE ROUTINE, CREATE VIEW, INDEX, SHOW DATABASES, SHOW VIEW, TRIGGER | 架構設計師、遷移腳本 |
| DB Manager | Backup Admin + DB Designer + CREATE TEMPORARY TABLES, DELETE, DROP, GRANT OPTION, INSERT, UPDATE | 應用核心賬號 (需評估 GRANT OPTION 風險) |
| Instance Manager | EVENT, SHOW DATABASES, SHUTDOWN, RELOAD, SUPER | 運維自動化、監控採集 |
| Monitor Manager | PROCESS | 監控系統 (Prometheus Exporter 等) |
| Process Admin | RELOAD, SUPER | 殺緩慢查詢、刷新權限 |
| Replication Admin | REPLICATION CLIENT, REPLICATION SLAVE, SUPER | 從庫複寫帳號 |
| Security Admin | User Admin + GRANT OPTION, SHOW DATABASES | 安全團隊、權限審計 |
| User Admin | CREATE USER, RELOAD | 帳號生命週期管理 |
# 連接測試
mysql -u root -p -P 3306 -h 127.0.0.1
# 檢查版本與配置
SELECT VERSION(); SHOW VARIABLES LIKE 'port'; SHOW VARIABLES LIKE 'datadir';
# 測試角色 (8.0+)
CREATE USER 'backup_user'@'%' IDENTIFIED BY 'pwd';
GRANT 'Backup Admin' TO 'backup_user'@'%';
SET DEFAULT ROLE 'Backup Admin' TO 'backup_user'@'%';
MySQL Installer 提供圖形化全流程管理,關鍵在於:預裝依賴、自定義選版本、區分 Port/服務名/資料目錄、最小權限原則配置角色帳號、啟用關鍵日誌。生產環境建議配合配置管理工具 (Ansible/Puppet) 實現基礎設施即代碼。