已有旧的主，建立新从

在主节点实现
1
vim /etc/my.cnf
server_id=1
log_bin
innodb_file_per_table

systemctl restart mariadb
2 mysql>grant replication slave on *.* to repluser@'192.168.30.%' identified by 'magedu';

3 mysqldump -A -F --single-transaction --master-data=1 > /backup/all.sql
scp /backup/all.sql 从节点：/backup

在从节点实现

4 vim /etc/my.cnf
server_id=2
systemctl restart mariadb

5 vim /backup/all.sql
CHANGE MASTER TO MASTER_HOST='192.168.30.17',
MASTER_USER='repluser',MASTER_PASSWORD='centos',MASTER_PORT=3306,
MASTER_LOG_FILE='master-bin.000002', MASTER_LOG_POS=245;
.....

6 mysql < /backup/all.sql

7 mysql > start slave
mysql> show slave status\G

实战：实现主从SSL加密复制
三个主机CA，master,slave
1 在CA执行
openssl genrsa 2048 > cakey.pem
openssl req -new -x509 -key cakey.pem -out cacert.pem -days 3650

给master 生成key和证书
openssl req -newkey rsa:2048 -days 365 -nodes -keyout master.key > master.csr
openssl x509 -req -in master.csr -CA cacert.pem -CAkey cakey.pem -set_serial 01 > master.crt

给slave 生成key和证书
openssl req -newkey rsa:2048 -days 365 -nodes -keyout slave.key > slave.csr
openssl x509 -req -in slave.csr -CA cacert.pem -CAkey cakey.pem -set_serial 02 > slave.crt

验证：
openssl verify -CAfile cacert.pem master.crt slave.crt