centos7 安装mysql并且限制登陆ip

查看系统版本

cat /etc/redhat-release

1.官网下载安装mysql-server

wget http://dev.mysql.com/get/mysql-community-release-el7-5.noarch.rpm
rpm -ivh mysql-community-release-el7-5.noarch.rpm
yum install mysql-community-server

安装成功后重启mysql服务

service mysqld restart

设置开机自启动

systemctl enable mysqld.service

初次安装mysql，root账户没有密码。

mysql -u root 
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 3
Server version: 5.6.26 MySQL Community Server (GPL)

Copyright (c) 2000, 2015, Oracle and/or its affiliates. All rights reserved.

Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

mysql> show databases;
+--------------------+
| Database           |
+--------------------+
| information_schema |
| mysql              |
| performance_schema |
| test               |
+--------------------+
rows in set (0.01 sec)

mysql>

设置密码

mysql> set password for 'root'@'localhost' =password('password');
Query OK, 0 rows affected (0.00 sec)

mysql> 

不需要重启数据库即可生效。

在mysql安装过程中如下内容：

Installed:
  mysql-community-client.x86_64 0:5.6.26-2.el7                mysql-community-devel.x86_64 0:5.6.26-2.el7                
  mysql-community-libs.x86_64 0:5.6.26-2.el7                  mysql-community-server.x86_64 0:5.6.26-2.el7               

Dependency Installed:
  mysql-community-common.x86_64 0:5.6.26-2.el7                                                                            

Replaced:
  mariadb.x86_64 1:5.5.41-2.el7_0          mariadb-devel.x86_64 1:5.5.41-2.el7_0   mariadb-libs.x86_64 1:5.5.41-2.el7_0  
  mariadb-server.x86_64 1:5.5.41-2.el7_0  

所以安装完以后mariadb自动就被替换了，将不再生效。

rpm -qa |grep mariadb

2.配置mysql

1、编码

vim /etc/my.cnf

default-character-set =utf8

2、远程连接设置
把在所有数据库的所有表的所有权限赋值给位于所有IP地址的root用户。

mysql> grant all privileges on *.* to root@'%'identified by 'password';

如果是新用户而不是root，则要先新建用户

mysql>create user 'username'@'%' identified by 'password';  

此时就可以进行远程连接了。

非原创 转载出处：http://www.cnblogs.com/starof/p/4680083.html 作者：starof

3.限制登陆IP

use ip: 192.168.0.1

grant all on *.* to username@192.168.0.1 identified by 'password'

授权全部的ip地址可以连接

GRANT ALL PRIVILEGES ON *.* TO 'username'@'%' identified by 'password' WITH GRANT OPTION;
#刷新
FLUSH PRIVILEGES

如果服务器在云上，需要在对应的云控制平台添加安全组规则（端口3306），进行端口放行。