Mac mini（M4）配置及使用（2026）

#!/usr/bin/env bash
set -euo pipefail

# =========================
# 参数区（只改这里）
# =========================
# [可改] 安装包：auto / mysql / mysql@8.0
MYSQL_FORMULA="${MYSQL_FORMULA:-auto}"

# [可改] 业务库配置（通用示例，不含项目标识）
DB_NAME="${DB_NAME:-app_meta}"
DB_USER="${DB_USER:-app_user}"
DB_HOST="${DB_HOST:-127.0.0.1}"
DB_PORT="${DB_PORT:-3306}"

# [敏感] 业务库密码：建议通过环境变量传入；留空则自动生成强密码
DB_PASSWORD="${DB_PASSWORD:-}"

# [可改] 输出配置文件路径（权限会设置为 600）
ENV_OUTPUT_FILE="${ENV_OUTPUT_FILE:-./db.mysql.local.env}"

# [可改] 是否修改 MySQL root 密码：0=否（默认），1=是
SET_ROOT_PASSWORD="${SET_ROOT_PASSWORD:-0}"
MYSQL_ROOT_OLD_PASSWORD="${MYSQL_ROOT_OLD_PASSWORD:-}"
MYSQL_ROOT_NEW_PASSWORD="${MYSQL_ROOT_NEW_PASSWORD:-}"

require_cmd() {
  command -v "$1" >/dev/null 2>&1 || { echo "[ERROR] 缺少命令: $1"; exit 1; }
}

validate_name() {
  local value="$1" label="$2"
  [[ "$value" =~ ^[A-Za-z0-9_]+$ ]] || { echo "[ERROR] ${label} 仅允许字母/数字/下划线"; exit 1; }
}

sql_escape() { printf "%s" "$1" | sed "s/'/''/g"; }
shell_escape_single_quote() { printf "%s" "$1" | sed "s/'/'\"'\"'/g"; }

generate_password() {
  if command -v openssl >/dev/null 2>&1; then
    openssl rand -base64 24 | tr -d '\n'
  else
    python3 - <<'PY'
import secrets, string
chars = string.ascii_letters + string.digits + "!@#$%^&*()-_=+"
print("".join(secrets.choice(chars) for _ in range(28)))
PY
  fi
}

prompt_secret_once() {
  local var="$1" tip="$2" v=""
  read -r -s -p "${tip}: " v; echo
  [[ -n "$v" ]] || { echo "[ERROR] 输入不能为空"; exit 1; }
  printf -v "$var" '%s' "$v"
}

prompt_secret_twice() {
  local var="$1" tip="$2" a="" b=""
  while true; do
    read -r -s -p "${tip}: " a; echo
    read -r -s -p "再次输入${tip}: " b; echo
    [[ -n "$a" ]] || { echo "[WARN] 不能为空"; continue; }
    [[ "$a" == "$b" ]] && break
    echo "[WARN] 两次输入不一致，请重试"
  done
  printf -v "$var" '%s' "$a"
}

pick_formula() {
  if [[ "$MYSQL_FORMULA" != "auto" ]]; then
    echo "$MYSQL_FORMULA"
    return
  fi
  if brew info --formula mysql@8.0 >/dev/null 2>&1; then
    echo "mysql@8.0"
  else
    echo "mysql"
  fi
}

wait_mysql_ready() {
  local mysqladmin_bin="$1"
  for _ in {1..60}; do
    "$mysqladmin_bin" ping --silent >/dev/null 2>&1 && return 0
    sleep 1
  done
  return 1
}

main() {
  require_cmd brew
  require_cmd sed
  require_cmd mktemp

  validate_name "$DB_NAME" "DB_NAME"
  validate_name "$DB_USER" "DB_USER"

  local auto_password=0
  if [[ -z "$DB_PASSWORD" ]]; then
    DB_PASSWORD="$(generate_password)"
    auto_password=1
  fi

  [[ "$SET_ROOT_PASSWORD" == "0" || "$SET_ROOT_PASSWORD" == "1" ]] || { echo "[ERROR] SET_ROOT_PASSWORD 只能是 0 或 1"; exit 1; }

  local formula
  formula="$(pick_formula)"

  brew list --versions "$formula" >/dev/null 2>&1 || brew install "$formula"
  brew services start "$formula" >/dev/null

  local prefix mysql_bin mysqladmin_bin
  prefix="$(brew --prefix "$formula")"
  mysql_bin="${prefix}/bin/mysql"
  mysqladmin_bin="${prefix}/bin/mysqladmin"

  wait_mysql_ready "$mysqladmin_bin" || { echo "[ERROR] MySQL 启动超时，请执行 brew services list 排查"; exit 1; }

  local root_login_file="" app_login_file=""
  cleanup() {
    [[ -n "$root_login_file" && -f "$root_login_file" ]] && rm -f "$root_login_file"
    [[ -n "$app_login_file" && -f "$app_login_file" ]] && rm -f "$app_login_file"
  }
  trap cleanup EXIT

  local -a root_cmd=("$mysql_bin" "-uroot")
  if ! "${root_cmd[@]}" -e "SELECT 1;" >/dev/null 2>&1; then
    if [[ -z "$MYSQL_ROOT_OLD_PASSWORD" ]]; then
      [[ -t 0 ]] || { echo "[ERROR] root 需要密码，请设置 MYSQL_ROOT_OLD_PASSWORD"; exit 1; }
      prompt_secret_once MYSQL_ROOT_OLD_PASSWORD "请输入当前 MySQL root 密码"
    fi

    root_login_file="$(mktemp)"
    chmod 600 "$root_login_file"
    cat > "$root_login_file" <<EOF
[client]
user=root
password=${MYSQL_ROOT_OLD_PASSWORD}
EOF
    root_cmd=("$mysql_bin" "--defaults-extra-file=${root_login_file}")
  fi

  "${root_cmd[@]}" -e "SELECT 1;" >/dev/null 2>&1 || { echo "[ERROR] root 登录失败"; exit 1; }

  if [[ "$SET_ROOT_PASSWORD" == "1" && -z "$MYSQL_ROOT_NEW_PASSWORD" ]]; then
    [[ -t 0 ]] || { echo "[ERROR] SET_ROOT_PASSWORD=1 时必须提供 MYSQL_ROOT_NEW_PASSWORD"; exit 1; }
    prompt_secret_twice MYSQL_ROOT_NEW_PASSWORD "请输入新的 MySQL root 密码"
  fi

  local sql_root_stmt=""
  if [[ "$SET_ROOT_PASSWORD" == "1" ]]; then
    sql_root_stmt="ALTER USER 'root'@'localhost' IDENTIFIED BY '$(sql_escape "$MYSQL_ROOT_NEW_PASSWORD")';"
  fi

  "${root_cmd[@]}" <<SQL
${sql_root_stmt}
CREATE DATABASE IF NOT EXISTS \`${DB_NAME}\` CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
CREATE USER IF NOT EXISTS '$(sql_escape "$DB_USER")'@'127.0.0.1' IDENTIFIED BY '$(sql_escape "$DB_PASSWORD")';
CREATE USER IF NOT EXISTS '$(sql_escape "$DB_USER")'@'localhost' IDENTIFIED BY '$(sql_escape "$DB_PASSWORD")';
ALTER USER '$(sql_escape "$DB_USER")'@'127.0.0.1' IDENTIFIED BY '$(sql_escape "$DB_PASSWORD")';
ALTER USER '$(sql_escape "$DB_USER")'@'localhost' IDENTIFIED BY '$(sql_escape "$DB_PASSWORD")';
GRANT ALL PRIVILEGES ON \`${DB_NAME}\`.* TO '$(sql_escape "$DB_USER")'@'127.0.0.1';
GRANT ALL PRIVILEGES ON \`${DB_NAME}\`.* TO '$(sql_escape "$DB_USER")'@'localhost';
FLUSH PRIVILEGES;
SQL

  local escaped_pass
  escaped_pass="$(shell_escape_single_quote "$DB_PASSWORD")"
  cat > "$ENV_OUTPUT_FILE" <<EOF
# 自动生成（建议加入 .gitignore）
DB_ENGINE=mysql
DB_NAME=${DB_NAME}
DB_USER=${DB_USER}
DB_PASSWORD='${escaped_pass}'
DB_HOST=${DB_HOST}
DB_PORT=${DB_PORT}
EOF
  chmod 600 "$ENV_OUTPUT_FILE"

  app_login_file="$(mktemp)"
  chmod 600 "$app_login_file"
  cat > "$app_login_file" <<EOF
[client]
user=${DB_USER}
password=${DB_PASSWORD}
host=${DB_HOST}
port=${DB_PORT}
protocol=tcp
EOF
  "$mysql_bin" "--defaults-extra-file=${app_login_file}" -e "USE \`${DB_NAME}\`; SELECT 1;" >/dev/null

  echo "[OK] MySQL 已安装并初始化完成"
  echo "[OK] DB: ${DB_NAME}"
  echo "[OK] USER: ${DB_USER} (@localhost, @127.0.0.1)"
  echo "[OK] ENV: ${ENV_OUTPUT_FILE} (权限 600)"
  if [[ "$auto_password" == "1" ]]; then
    echo "[INFO] DB_PASSWORD 未显式传入，已自动生成并写入 ENV 文件"
  fi
  echo "[ACTION] 请将 ${ENV_OUTPUT_FILE} 加入 .gitignore"
}

main "$@"

chmod +x setup_mysql_mac.sh
DB_PASSWORD='请替换为强密码' ./setup_mysql_mac.sh