Uploaded image for project: 'Percona Server'
  1. Percona Server
  2. PS-5153

Ensure InnoDB session temporary tablespaces are covered by innodb_temp_tablespace_encrypt

    Details

      Description

      Our innodb_temp_tablespace_encrypt feature should handle session temporary tablespaces as introduced in 8.0.13 by WL#11613.

      Upstream commits:
      d53d652e0a1 WL#11613 InnoDB: Reclaim disk space occupied by temporary tables online
      0f05c2706b7 WL#11613: InnoDB: Reclaim disk space occupied by temporary tables online

      New rules:

      New rules for CREATE TEMPORARY:

      1. encryption attribute(ENCRYPTION="Y"/"N") disallowed
      2. tablespace attribute (TABLESPACE=innodb_temporary) disallowed

      innodb_temp_tablespace_encrypt = OFF (startup)

      1. ibtmp1 unencrypted (only undo logs go to ibtmp1)
      2. temp table and intrinsic temp tables go to unencrypted session temporary tablespace
      3. innodb_encrypt_tables = ON/FORCE, tables go to encrypted session temporary tablespace

      innodb_temp_tablespace_encrypt=ON (startup)

      1. ibtmp1 encrypted (only undo logs go to ibtmp1)
      2. temp table and intrinsic temp tables go to encrypted session temp
      3. innodb_encrypt_tables = ON/FORCE, tables go to encrypted session temporary tablespace

       
      Changing innodb_temp_tablespace_encrypt from ON to OFF dynamically doesn't unencrypt existing data. Similarly chaning innodb_temp_tablespace_encrypt OFF to ON doesn't encrypt existing data. The variable at runtime is only about future writes. See https://jira.percona.com/browse/PS-3821 for more details

        Smart Checklist

          Attachments

            Issue Links

              Activity

                People

                • Assignee:
                  satya.bodapati Satya Bodapati
                  Reporter:
                  laurynas.biveinis Laurynas Biveinis
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  2 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved:

                    Time Tracking

                    Estimated:
                    Original Estimate - Not Specified
                    Not Specified
                    Remaining:
                    Remaining Estimate - Not Specified
                    Not Specified
                    Logged:
                    Time Spent - 1 hour, 34 minutes
                    1h 34m