We are using Percona XtraDB Cluster 8.0.44 and Percona XtraBackup 8.0.35 via the Percona Operator 1.19.0. Our setup uses keyring_file with both default_table_encryption=ON and binlog_encryption=ON.
We use the --transition-key option for our backups. We have confirmed that for the base data restore, the transition key works as expected: we do not need the original INNODBKey from the source keyring to restore the tablespaces.
We wanted to ask about the behavior for encrypted binary logs included in the backup?
Does XtraBackup re-encrypt the binlogs using the --transition-key (similar to how it handles tablespaces)?
Or do the binlogs remain encrypted using the original MySQLReplicationKey IDs?
For Cross-site Disaster Recovery/PITR, we need to know if the transition key is sufficient to apply binlogs on a new site with an empty keyring, or if we are strictly required to also backup and provide the original source keyring_file specifically for mysqlbinlog to function. @Ege_Gunes
I see that xtrabackup keys also encrypts Binlog’s DEK and we should not require the original master keys while restoring since only having the transition key should be enough according to
But when I try to restore after removing old master keys present in vault using the transistion key, the restore job is successful but the prepare job fails with Binlog has bad magic number; It’s not a binary log file that can be used by this version of MySQL. logs:
2026-02-11T11:25:19.289025Z 1 [Note] [MY-000000] [WSREP] Server status change connected → joiner
2026-02-11T11:25:19.289041Z 1 [Note] [MY-000000] [WSREP] wsrep_notify_cmd is not defined, skipping notification.
2026-02-11T11:25:19.289064Z 1 [Note] [MY-000000] [WSREP] Server status change joiner → initializing
2026-02-11T11:25:19.289072Z 1 [Note] [MY-000000] [WSREP] wsrep_notify_cmd is not defined, skipping notification.
2026-02-11T11:25:19.289150Z 0 [Warning] [MY-013712] [Server] No suitable ‘keyring_load’ service implementation found to fulfill the request.
2026-02-11T11:25:19.295403Z 0 [Warning] [MY-011197] [Server] Plugin keyring_vault reported: ‘Probing mysql-keyring for being a mount point unsuccessful - skipped.’
2026-02-11T11:25:19.368047Z 0 [Warning] [MY-010075] [Server] No existing UUID has been found, so we assume that this is the first time that this server has been started. Generating a new UUID: 58c11fb1-073c-11f1-87a0-eafd9286b3b4.
2026-02-11T11:25:19.370930Z 3 [System] [MY-013576] [InnoDB] InnoDB initialization has started.
2026-02-11T11:25:19.493475Z 3 [System] [MY-013577] [InnoDB] InnoDB initialization has ended.
2026-02-11T11:25:19.582371Z 3 [Note] [MY-000000] [WSREP] wsrep_init_schema_and_SR (nil)
2026-02-11T11:25:19.597026Z 3 [System] [MY-000000] [WSREP] PXC upgrade completed successfully
2026-02-11T11:25:19.628169Z 0 [ERROR] [MY-010958] [Server] Binlog has bad magic number; It’s not a binary log file that can be used by this version of MySQL.
2026-02-11T11:25:19.628201Z 0 [ERROR] [MY-010041] [Server] Can’t init tc log
2026-02-11T11:25:19.628208Z 0 [ERROR] [MY-010119] [Server] Aborting
2026-02-11T11:25:19.628212Z 0 [Note] [MY-000000] [WSREP] Initiating SST cancellation
2026-02-11T11:25:21.628340Z 0 [Note] [MY-000000] [WSREP] Server status change initializing → disconnecting
2026-02-11T11:25:21.628356Z 2 [Note] [MY-000000] [WSREP] rollbacker thread exiting 2
2026-02-11T11:25:21.628399Z 0 [Note] [MY-000000] [WSREP] wsrep_notify_cmd is not defined, skipping notification.
2026-02-11T11:25:21.628439Z 0 [Note] [MY-000000] [Galera] Closing send monitor…
2026-02-11T11:25:21.628446Z 0 [Note] [MY-000000] [Galera] Closed send monitor.
2026-02-11T11:25:21.628455Z 0 [Note] [MY-000000] [Galera] gcomm: terminating thread
2026-02-11T11:25:21.628467Z 0 [Note] [MY-000000] [Galera] gcomm: joining thread
2026-02-11T11:25:21.628999Z 0 [Note] [MY-000000] [Galera] gcomm: closing backend
2026-02-11T11:25:21.629040Z 0 [Note] [MY-000000] [Galera] PC protocol downgrade 1 → 0
2026-02-11T11:25:21.629047Z 0 [Note] [MY-000000] [Galera] Current view of cluster as seen by this node
view ((empty))
2026-02-11T11:25:21.629202Z 1 [ERROR] [MY-000000] [Galera] Exception: State wait was interrupted
2026-02-11T11:25:21.629280Z 1 [ERROR] [MY-000000] [Galera] View callback failed. This is unrecoverable, restart required. (FATAL)
at ../../../../percona-xtradb-cluster-galera/galera/src/replicator_smm.cpp:submit_view_info():2633
2026-02-11T11:25:21.629300Z 1 [Note] [MY-000000] [Galera] ReplicatorSMM::abort()
2026-02-11T11:25:21.629321Z 1 [Note] [MY-000000] [Galera] mysqld: Terminated.
/var/lib/mysql/prepare_restored_cluster.sh: line 38: 13 Aborted mysqld --skip-grant-tables --skip-networking
ERROR 2002 (HY000): Can’t connect to local MySQL server through socket ‘/tmp/mysql.sock’ (2)