linuxserver/mariadb no longer requires a password according to upstream behavior, if you didn't set a root password for remote access during the initial start follow the instructions in the container log.
NOTE changing any of the MYSQL_ variables after the container has set up the initial databases has no effect, use the mysqladmin tool or cli to make changes.
NOTE if you want to use (MYSQL_DATABASE MYSQL_USER MYSQL_PASSWORD) all three of these variables need to be set you cannot pick and choose.
Unraid users, it is advisable to edit the template/webui after setup and remove reference to this variable.
Find custom.cnf in /config for config changes (restart container for them to take effect) , the databases in /config/databases and the log in /config/log/myqsl
The MYSQL_ROOT_PASSWORD MYSQL_DATABASE MYSQL_USER MYSQL_PASSWORD REMOTE_SQL env values can be set in a file:
path/config/env
Using the following format:
envMYSQL_ROOT_PASSWORD="ROOT_ACCESS_PASSWORD" MYSQL_DATABASE="USER_DB_NAME" MYSQL_USER="MYSQL_USER" MYSQL_PASSWORD="DATABASE_PASSWORD" REMOTE_SQL="[***]"
These settings can be mixed and matched with Docker ENV settings as you require, but the settings in the file will always take precedence.
We support a one time run of custom sql files on init. In order to use this place *.sql files in:
path/config/initdb.d/
This will have the same effect as setting the REMOTE_SQL environment variable. The sql will only be run on the containers first boot and setup.
If user databases are not in a healthy state (sometimes caused by a failed upgrade), it may be remedied by running:
shellmariadb-check -c -A # check all databases for errors mariadb-check -r -A # repair all databases mariadb-check -a -A # analyze all databases mariadb-check -o -A # optimize all databases
After running the above commands, you may need to run the upgrade command again.
When this container initializes, if MYSQL_ROOT_PASSWORD is set an upgrade check will run. If an upgrade is required the log will indicate the need stop any services that are accessing databases in this container, and then run the command:
shellmariadb-upgrade
This image can be run with a read-only container filesystem. For details please read the docs.
/tmp must be mounted to tmpfsThis image can be run with a non-root user. For details please read the docs.
To help you get started creating a container from this image you can either use docker-compose or the docker cli.
[!NOTE] Unless a parameter is flaged as 'optional', it is mandatory and a value must be provided.
yaml--- services: mariadb: image: lscr.io/linuxserver/mariadb:latest container_name: mariadb environment: - PUID=1000 - PGID=1000 - TZ=Etc/UTC - MYSQL_ROOT_PASSWORD=ROOT_ACCESS_PASSWORD - MYSQL_DATABASE=USER_DB_NAME #optional - MYSQL_USER=MYSQL_USER #optional - MYSQL_PASSWORD=DATABASE_PASSWORD #optional - REMOTE_SQL=[***] #optional volumes: - /path/to/mariadb/config:/config ports: - 3306:3306 restart: unless-stopped
bashdocker run -d \ --name=mariadb \ -e PUID=1000 \ -e PGID=1000 \ -e TZ=Etc/UTC \ -e MYSQL_ROOT_PASSWORD=ROOT_ACCESS_PASSWORD \ -e MYSQL_DATABASE=USER_DB_NAME `#optional` \ -e MYSQL_USER=MYSQL_USER `#optional` \ -e MYSQL_PASSWORD=DATABASE_PASSWORD `#optional` \ -e REMOTE_SQL=[***] `#optional` \ -p 3306:3306 \ -v /path/to/mariadb/config:/config \ --restart unless-stopped \ lscr.io/linuxserver/mariadb:latest
Containers are configured using parameters passed at runtime (such as those above). These parameters are separated by a colon and indicate <external>:<internal> respectively. For example, -p 8080:80 would expose port 80 from inside the container to be accessible from the host's IP on port 8080 outside the container.
| Parameter | Function |
|---|---|
-p 3306:3306 | MariaDB listens on this port. |
-e PUID=1000 | for UserID - see below for explanation |
-e PGID=1000 | for GroupID - see below for explanation |
-e TZ=Etc/UTC | specify a timezone to use, see this list. |
-e MYSQL_ROOT_PASSWORD=ROOT_ACCESS_PASSWORD | Set this to root password for installation (minimum 4 characters & non-alphanumeric passwords must be properly escaped). (valid only for first run) |
-e MYSQL_DATABASE=USER_DB_NAME | Specify the name of a database to be created. (valid only for first run) |
-e MYSQL_USER=MYSQL_USER | This user will have superuser access to the database specified by MYSQL_DATABASE (do not use root here). (valid only for first run) |
-e MYSQL_PASSWORD=DATABASE_PASSWORD | Set this to the password you want to use for you MYSQL_USER (minimum 4 characters & non-alphanumeric passwords must be properly escaped). (valid only for first run) |
-e REMOTE_SQL=[***] | Set this to ingest sql files from an http/https endpoint (comma seperated array). |
-v /config | Persistent config files |
--read-only=true | Run container with a read-only filesystem. Please read the docs. |
--user=1000:1000 | Run container with a non-root user. Please read the docs. |
You can set any environment variable from a file by using a special prepend FILE__.
As an example:
bash-e FILE__MYVAR=/run/secrets/mysecretvariable
Will set the environment variable MYVAR based on the contents of the /run/secrets/mysecretvariable file.
For all of our images we provide the ability to override the default umask settings for services started within the containers using the optional -e UMASK=022 setting.
Keep in mind umask is not chmod it subtracts from permissions based on it's value it does not add. Please read up here before asking for support.
When using volumes (-v flags), permissions issues can arise between the host OS and the container, we avoid this issue by allowing you to specify the user PUID and group PGID.
Ensure any volume directories on the host are owned by the same user you specify and any permissions issues will vanish like magic.
In this instance PUID=1000 and PGID=1000, to find yours use id your_user as below:
bashid your_user
Example output:
textuid=1000(your_user) gid=1000(your_user) groups=1000(your_user)
We publish various Docker Mods to enable additional functionality within the containers. The list of Mods available for this image (if any) as well as universal mods that can be applied to any one of our images can be accessed via the dynamic badges above.
Shell access whilst the container is running:
bashdocker exec -it mariadb /bin/bash
To monitor the logs of the container in realtime:
bashdocker logs -f mariadb
Container version number:
bashdocker inspect -f '{{ index .Config.Labels "build_version" }}' mariadb
Image version number:
bashdocker inspect -f '{{ index .Config.Labels "build_version" }}' lscr.io/linuxserver/mariadb:latest
Most of our images are static, versioned, and require an image update and container recreation to update the app inside. With some exceptions (noted in the relevant readme.md), we do not recommend or support updating apps inside the container. Please consult the Application Setup section above to see if it is recommended for the image.
Below are the instructions for updating containers:
Update images:
All images:
bashdocker-compose pull
Single image:
bashdocker-compose pull mariadb
Update containers:
All containers:
bashdocker-compose up -d
Single container:
bashdocker-compose up -d mariadb
You can also remove the old dangling images:
bashdocker image prune
Update the image:
bashdocker pull lscr.io/linuxserver/mariadb:latest
Stop the running container:
bashdocker stop mariadb
Delete the container:
bashdocker rm mariadb
Recreate a new container with the same docker run parameters as instructed above (if mapped correctly to a host folder, your /config folder and settings will be preserved)
You can also remove the old dangling images:
bashdocker image prune
[!TIP] We recommend Diun for update notifications. Other tools that automatically update containers unattended are not recommended or supported.
If you want to make local modifications to these images for development purposes or just to customize the logic:
bashgit clone [***] cd docker-mariadb docker build \ --no-cache \ --pull \ -t lscr.io/linuxserver/mariadb:latest .
The ARM variants can be built on x86_64 hardware and vice versa using lscr.io/linuxserver/qemu-static
bashdocker run --rm --privileged lscr.io/linuxserver/qemu-static --reset
Once registered you can define the dockerfile to use with -f Dockerfile.aarch64.

探索更多轩辕镜像的使用方法,找到最适合您系统的配置方式
通过 Docker 登录认证访问私有仓库
在 Linux 系统配置镜像服务
在 Docker Desktop 配置镜像
Docker Compose 项目配置
Kubernetes 集群配置 Containerd
K3s 轻量级 Kubernetes 镜像加速
在宝塔面板一键配置镜像
Synology 群晖 NAS 配置
飞牛 fnOS 系统配置镜像
极空间 NAS 系统配置服务
爱快 iKuai 路由系统配置
绿联 NAS 系统配置镜像
QNAP 威联通 NAS 配置
Podman 容器引擎配置
HPC 科学计算容器配置
ghcr、Quay、nvcr 等镜像仓库
无需登录使用专属域名
需要其他帮助?请查看我们的 常见问题Docker 镜像访问常见问题解答 或 提交工单
免费版仅支持 Docker Hub 访问,不承诺可用性和速度;专业版支持更多镜像源,保证可用性和稳定速度,提供优先客服响应。
专业版支持 docker.io、gcr.io、ghcr.io、registry.k8s.io、nvcr.io、quay.io、mcr.microsoft.com、docker.elastic.co 等;免费版仅支持 docker.io。
当返回 402 Payment Required 错误时,表示流量已耗尽,需要充值流量包以恢复服务。
通常由 Docker 版本过低导致,需要升级到 20.x 或更高版本以支持 V2 协议。
先检查 Docker 版本,版本过低则升级;版本正常则验证镜像信息是否正确。
使用 docker tag 命令为镜像打上新标签,去掉域名前缀,使镜像名称更简洁。
来自真实用户的反馈,见证轩辕镜像的优质服务