Deploy the MySQL/MariaDB database template with OpenTofu

Stand up MariaDB on a private subnet with a dedicated Cinder data volume using the validated OpenTofu template mysql-database. The database listens on a private address only; cloud-init formats the data volume at /var/lib/mysql and installs a scheduled mysqldump backup script.

Prerequisites#

You need:

• A Quake AI account with application credentials
• OpenTofu 1.6.0 or later (installation guide)
• OpenStack credentials sourced into the shell (source openrc.sh). See the OpenStack CLI guide.
• An SSH key pair already uploaded to the project. See Add an SSH key.
• A copy of the mysql-database template from the template reference page
• Enough project quota for one m2a.large instance and one 50 GB block volume (defaults)
• A host that routes to the private subnet for SSH after apply (bastion, VPN, or another instance on the same network). See SSH bastion access into a private subnet.

Step 1: Configure variables#

Copy terraform.tfvars.example to terraform.tfvars and set:

key_name      = "YOUR_KEY_NAME"
allowed_cidrs = ["192.168.50.0/24"]
db_password   = "CHOOSE_A_STRONG_PASSWORD"

Defaults for flavor, volume size, engine package, and network CIDR are documented on the MySQL/MariaDB Database reference page.

Step 2: Apply the template#

From the template directory, run:

tofu init
tofu plan
tofu apply

Type yes when prompted. Provisioning takes several minutes while Nova builds the boot volume, Cinder provisions the data volume, and cloud-init formats /dev/sdb and installs MariaDB.

When the run finishes, note private_ip from the outputs.

Step 3: Verify MySQL/MariaDB and the data volume#

Cloud-init can take a few more minutes after tofu apply returns. SSH to the instance private IP from a host that routes to the subnet:

PRIVATE=$(tofu output -raw private_ip)
ssh -i ~/.ssh/YOUR_KEY ubuntu@${PRIVATE}

On the instance, confirm the data volume is mounted and MariaDB is running:

df -h /var/lib/mysql
sudo systemctl is-active mariadb
sudo mysql -e "SHOW DATABASES;" | grep appdb

Connect as the application user and run a test query:

mysql -h 127.0.0.1 -u appuser -p'CHOOSE_A_STRONG_PASSWORD' appdb -e "CREATE TABLE deploy_check (id INT); INSERT INTO deploy_check VALUES (1); SELECT * FROM deploy_check;"

The query returns one row, which confirms the database stores data on the attached volume.

Optional: confirm the backup cron:

ls -l /usr/local/bin/mysql-backup.sh /etc/cron.d/mysql-backup

Next steps#

• MySQL/MariaDB Database template
• Three-Tier Application template
• WordPress + MySQL template
• Self-hosting the vibecoding stack

Clean up#

Run tofu destroy from the project directory when finished. Type yes to confirm. Verify in the Console that the instance and data volume are gone.