my.cloudron.tld is not accessible (mysql down but apps are online)

[james]

Hello @hpz24
Do you have access to your latest Cloudron backups?

[hpz24]

Sure, I have backups.
Should I follow the instructions in https://docs.cloudron.io/troubleshooting/#mysql?

What is, if I need a backup which is idk, 2-3 weeks old ... could that cause other problems?

[james]

Hello @hpz24
Let's try something else first.

Make sure the MySQL service is stopped (I know it is not even starting, but just to make sure).
Create a full backup of the MySQL data with the following command:

rsync -avrlP /var/lib/mysql /root/mysql_backup_$(date +%Y%m%d-%H%M%S)

Edit the file /etc/mysql/my.cnf and under [mysqld] add this line:

innodb_force_recovery = 1

Try to start the service again with:

systemctl start mysql.service

If the start is still failing, edit the same file again and increase innodb_force_recovery to 2 and repeat when failing up to 6.
Details on innodb_force_recovery and what 1 to 6 does https://dev.mysql.com/doc/refman/8.4/en/forcing-innodb-recovery.html
Warning! Do not jump straight to 6. Values ≥4 disable background page-cleaning and make the server effectively read-only; they are last-resort and risky

This is also documented here: https://docs.cloudron.io/guides/community/mysql-recovery/ but missing the backup first step, I will update this community guide later.

---

If this is still not resulting in a solution we can proceed to https://docs.cloudron.io/troubleshooting/#mysql

[hpz24]

So, the forced recovery did not help, still an error when I tried to start the mysql daemon.

Now I wanted to try out the restore function and ran into another problem.

I do have backups (as I pompously wrote above), but the password for decryption doesn't work (for whatever reason).

Is there a way to read the password in the file system of the running Cloudron instance?
Or:
Can the database be regenerated? Basically, everything is working, except the dashboard won't load...

[james]

Hello @hpz24

@hpz24 said in my.cloudron.tld is not accessible (mysql down but apps are online):

Is there a way to read the password in the file system of the running Cloudron instance?

Reading the encryption/decryption password from a running Cloudron is not possible and would be a major security flaw.

@hpz24 said in my.cloudron.tld is not accessible (mysql down but apps are online):

but the password for decryption doesn't work (for whatever reason)

Where does the password not work?
Are you trying to restore the full Cloudron or trying to decrypt a single backup with the cloudron cli?

[hpz24]

I tried it with

$ cloudron backup decrypt --password=passphrase backupid.tar.gz.enc backupid.tar.gz

My password contains special characters, so i tried with ' but I get

Error: Could not decrypt: Invalid password or tampered file (mac mismatch)

The backup itself is only 55mb, i`m afraid, there is not everthing in it ...

app_forum.xxx.yy_v2.22.0.tar.gz.enc

[james]

Hello @hpz24
For some reason, either the decryption password being incorrect or some other reason caused by the cloudron cli you are unable to decrypt the backup.
Now we run into the risk of data loss.

Before we continue with anything, please create a full server backup.
Since you are using netcup, see the following guide for creating an offline snapshot https://helpcenter.netcup.com/en/wiki/server/media/#create-and-export-snapshot

After that, please write a mail to support@cloudron.io, explain the issue and link this topic.

[hpz24]

thanks, done!

[msbt]

@hpz24 I have one machine that has quite a lot of special characters in the encryption password. What I do is this:

cloudron backup decrypt --password="123\$123" ...

So the backslash is not part of the password and is required to escape the $ sign, if that's something that you're using.

[joseph]

The mysql db was corrupt beyond repair. I reimported from a back up and things are good.