Change mysql password in Docker container

Question

How could I change root password in docker container since the container stop automatically once I stop the mysql service.

Should I stop the mysql container and deploy

Answer 1

You could change it from a running container, using a docker exec session, as described in "Connecting to MySQL Server from within the Container"

Once the server is ready, you can run the mysql client within the MySQL Server container you just started and connect it to the MySQL Server.
Use the docker exec -it command to start a mysql client inside the Docker container you have started, like this:

docker exec -it mysql1 mysql -uroot -p

When asked, enter the generated root password (see the instructions above on how to find it). Because the MYSQL_ONETIME_PASSWORD option is true by default, after you started the server container with the sample command above and connected a mysql client to the server, you must reset the server root password by issuing this statement for MySQL 5.7 and above :

mysql> update user set authentication_string=password('new_password') where user='root';

or alternatively run,

mysql> SET PASSWORD FOR 'root' = PASSWORD('new_password');

For MySQL 5.7 and older versions, run,

mysql> ALTER USER 'root'@'localhost' IDENTIFIED BY 'newpassword';

Substitute newpassword with the password of your choice. Once the password is reset, the server is ready for use.

Note that the above command will only change the password for 'root' connecting from 'localhost' host. You can verify this by using the command:

select * from mysql.user;

To alter the password for 'root' from all hosts, use:

ALTER USER 'root'@'%' IDENTIFIED BY 'newpassword';

Then, as described in "hub.docker.com/mysql", dont forget docker secrets:

As an alternative to passing sensitive information via environment variables, _FILE may be appended to the previously listed environment variables, causing the initialization script to load the values for those variables from files present in the container.
In particular, this can be used to load passwords from Docker secrets stored in /run/secrets/ files.
For example:

$ docker run --name some-mysql -e MYSQL_ROOT_PASSWORD_FILE=/run/secrets/mysql-root -d mysql:tag