At some point in your software development lifecycle (SDLC), you’ll need to work with a database, whether that’s in a development environment, a production environment, or both. Databases are a core part of most applications, and it’s important to host them close to your backend service to reduce latency and improve performance. It's also important to access them securely, both during development and after your application goes live.

In this guide, I’ll walk you through everything you need to get MySQL installed and secured on a Linux virtual machine (VM), and also set it up for remote access.

To get MySQL up and running on your Linux VM, follow the steps below:

## 1. Update VM and Install MySQL

Before anything else, the first thing to do is to update your VM to have the latest security fixes, patches, and features.

```bash
sudo apt update
sudo apt upgrade -y
```

Next, install the MySQL server:

```bash
sudo apt install mysql-server -y
```

## 2. Secure the MySQL Database

Even on a virtual machine, where the attack surface is relatively smaller, you shouldn't leave your database exposed. It's important to secure your installation from day one and reduce potential vulnerabilities by tightening access and applying security measures. To secure your database, run the command below:

```bash
sudo mysql_secure_installation
```

This script will prompt you to configure several security-related settings, like setting a root password, removing anonymous users, disallowing root login remotely, and dropping the test database.

## 3. Create a Database User

Since root login is disabled, you'll need to create a new user with the right permissions to access the database. Depending on your use case, the permissions can be limited to a specific database or granted at a super-user level with access to all available privileges. To do this, follow the steps below:

**Step 1: Access MySQL Shell and Log In**

```bash
sudo mysql -u root -p
```

**Step 2: Create a New User and Grant Permission**

```bash
CREATE USER 'remote_user'@'%' IDENTIFIED BY 'your_secure_password';
GRANT ALL PRIVILEGES ON *.* TO 'remote_user'@'%' WITH GRANT OPTION;
```

> Note that the `%` **wildcard** allows connections from any host. For stronger security, you can replace `%` with a specific IP address or a range. You can also adjust the **privileges** to apply only to a specific database or limit them to certain operations, depending on what the user needs access to.

**Step 3: Apply the Changes and Exit**

```bash
FLUSH PRIVILEGES;
EXIT;
```

## 4. Allow Remote Access to your Database

By default, MySQL only listens on the local network. That setup works fine if everything happens within the VM, but in most cases, you’ll be connecting through a workbench or a backend service. To allow remote access, follow the steps below:

**Step 1: Locate and Open the MySQL Config File**

```bash
sudo nano /etc/mysql/mysql.conf.d/mysqld.cnf
```

**Step 2: Bind Address**

Look for the line that says:

```bash
bind-address = 127.0.0.1
```

Change it to:

```bash
bind-address = 0.0.0.0
```

> Use **Ctrl O,** hit **Enter** to save, and **Ctrl X** to exit.

## 5. Configure Firewall for MySQL Access

By default, your VM will only allow traffic through ports that you've explicitly opened. Since MySQL uses port `3306`, you'll need to open this port so remote clients can connect to your database over the network.

```bash
sudo ufw allow 3306/tcp
sudo ufw reload
```

## 6. Connect to MySQL Remotely

With your MySQL server configured and the firewall set up, you can now connect to it remotely using any database client of your choice. To do this, do the following:

1. **Open a database client like MySQL Workbench on your local machine.**
2. **Create a New Connection:**
    - **Connection Name:** Give it a friendly name.
    - **Hostname:** Use your Linux VM’s public IP address. You can get it by running the command `hostname -I`.
    - **Port:** Ensure the port is set to 3306.
    - **Username:** Enter `remote_user` (or your chosen username).
    - **Password:** Click "Store in Vault" or similar, and input your secure password.
3. **Test the Connection:**
   Click the “Test Connection” button to make sure everything is working.

## Wrapping Up

This guide walks you through setting up a MySQL database on a Linux VM. Each step helps get your server up and running while keeping your data secure and accessible when you need it. Whether you're working on a simple project or deploying a production-ready database, following these best practices will help you use MySQL with confidence and efficiency.

If you're new to working with Linux VMs, you might find this [beginner’s guide on setting up a Linux virtual machine](https://fullstackwriter.dev/post/now-that-you-ve-installed-linux-vm-what-s-next?category=Linux) helpful before diving deeper into server and database management.


A step-by-step guide to installing MySQL on a Linux VM, securing it, and setting up remote access using a database client.

#MySQL

How to Install and Connect to MySQL on your Linux VM