---

[bobrov_s@vm242 ~]$ sudo systemctl cat mysqld
# /lib/systemd/system/mysqld.service
[Unit]
Description=MySQL database server
After=network.target

[Service]
Environment=CHSET=utf8
EnvironmentFile=-/etc/sysconfig/mysqld
LimitNOFILE=5000

ExecStartPre=/bin/sh -c 'if [ ! -d /var/lib/mysql/db/mysql ]; then /usr/sbin/my>
ExecStartPre=/etc/chroot.d/mysql.all
ExecStart=/usr/sbin/mysqld -C $CHSET $OPT

TimeoutSec=300
Restart=on-failure
RestartSec=5s
RestartPreventExitStatus=1

PrivateTmp=true
# Prevent writes to /usr, /boot, and /etc
ProtectSystem=full
# Doesn't yet work properly with SELinux enabled
NoNewPrivileges=true

PrivateDevices=true
ProtectHome=yes

KillMode=process
KillSignal=SIGTERM
SendSIGKILL=no


[Install]
WantedBy=multi-user.target

# /etc/systemd/system/mysqld.service.d/user.conf
[Service]
# Uncomment the following lines for run mysqld as mysql user for non-chroot
#User=mysql
#Group=mysql
#PermissionsStartOnly=true
# To allow memlock to be used as non-root user if set in configuration
#CapabilityBoundingSet=CAP_IPC_LOCK
[bobrov_s@vm242 ~]$ sudo cat /etc/systemd/system/mysqld.service.d/user.conf
[Service]
# Uncomment the following lines for run mysqld as mysql user for non-chroot
#User=mysql
#Group=mysql
#PermissionsStartOnly=true
# To allow memlock to be used as non-root user if set in configuration
#CapabilityBoundingSet=CAP_IPC_LOCK
[bobrov_s@vm242 ~]$ sudo cat /etc/chroot.d/mysql.all
#!/bin/sh -e

/etc/chroot.d/mysql.lib "$@"
/etc/chroot.d/mysql.conf "$@"
[bobrov_s@vm242 ~]$ sudo find /var/lib/mysql /var/run /run -maxdepth 3 \
>   \( -name 'mysql.sock*' -o -name 'mysqld.sock*' \) \
>   -ls 2>/dev/null
   262259      0 srwxrwxrwx   1 root     mysql           0 сен 23 09:38 /var/lib/mysql/mysql.sock
   262160      4 -rw-------   1 root     mysql           5 сен 23 09:38 /var/lib/mysql/mysql.sock.lock
[bobrov_s@vm242 ~]$ sudo ls -lah /var/lib/mysql
итого 48K
drwxrws--t 10 root  mysql 4,0K сен 25 02:18 .
drwxr-xr-x 29 root  root  4,0K сен 28 04:02 ..
drwxrws--T  8 mysql mysql 4,0K сен 25 02:18 db
drwxr-sr-x  2 root  root  4,0K июл 28 09:54 dev
drwx--x---  2 root  mysql 4,0K июл 28 09:54 etc
drwx--x---  2 root  mysql 4,0K июл 28 09:54 lib64
drwxrws--T  2 root  mysql 4,0K сен 24 04:02 log
-rw-r-----  1 mysql mysql    5 сен 23 09:38 mysqld.pid
srwxrwxrwx  1 root  mysql    0 сен 23 09:38 mysql.sock
-rw-------  1 root  mysql    5 сен 23 09:38 mysql.sock.lock
drwxrws--T  2 root  mysql 4,0K фев  5  2025 tmp
drwxr-xr-x  4 root  root  4,0K июл 28 09:54 usr
drwx--x---  4 root  mysql 4,0K июл 28 09:54 var
[bobrov_s@vm242 ~]