From 4a75d7c5337cb17ca1dcc38ed4f2eed7bbc6cdf3 Mon Sep 17 00:00:00 2001
From: bjoernv <bjoernv@users.noreply.github.com>
Date: Mon, 30 Jun 2025 13:56:38 +0200
Subject: [PATCH] Add "IDENTIFIED BY password" for "CREATE USER root"

---
 root-common/usr/share/container-scripts/mysql/common.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/root-common/usr/share/container-scripts/mysql/common.sh b/root-common/usr/share/container-scripts/mysql/common.sh
index 918d36cc..85f76b1c 100644
--- a/root-common/usr/share/container-scripts/mysql/common.sh
+++ b/root-common/usr/share/container-scripts/mysql/common.sh
@@ -163,8 +163,9 @@ EOSQL
   if [ -v MYSQL_ROOT_PASSWORD ]; then
     log_info "Setting password for MySQL root user ..."
     if [ "$MYSQL_VERSION" \> "10.0" ] ; then
+    # use a password here, because otherwise a password policy can reject the creation of the root user
 mysql $mysql_flags <<EOSQL
-      CREATE USER IF NOT EXISTS 'root'@'%';
+      CREATE USER IF NOT EXISTS 'root'@'%' IDENTIFIED BY '${MYSQL_ROOT_PASSWORD}';
 EOSQL
     fi
 mysql $mysql_flags <<EOSQL