Myanon
Myanon is a MySQL dump anonymizer, reading a dump from stdin, and producing an anonymized version to stdout.
Anonymization is done through a deterministic hmac processing based on sha-256. When used on fields acting as foreign keys, constraints are kept.
A configuration file is used to store the hmac secret and to select which fields need to be anonymized. A self-commented sample is provided (main/myanon-sample.conf)
This tool is in alpha stage. Please report any issue.
Simple use case
Example to create both a real crypted (sensitive) backup and an anonymized (non-sentitive) backup from a single mysqldump command:
mysqldump mydb | tee >(myanon -f myanon.cfg | gzip > mydb_anon.sql.gz) | gpg -e -r [email protected] > mydb.sql.gz.gpg
Installation from sources
Build Requirements
- autoconf
- automake
- make
- a C compiler (gcc or clang)
- flex
- bison
Example on a Fedora system:
$ sudo dnf install autoconf automake gcc make flex bison
[...]Example on a Debian/Ubuntu system:
$sudo apt-get install autoconf automake flex bison build-essential
[...]On macOS, you need to install Xcode and homebrew, and then:
$ brew install autoconf automake flex bison
[...](Please ensure binaries installed by brew are in your $PATH)
Build/Install
./autogen.sh
./configure
make
make install
Compilation/link flags
Flags are controlled by using CFLAGS/LDFLAGS when invoking make. To create a debug build:
make CFLAGS="-O0 -g"
To create a static build on Linux:
make LDFLAGS="-static"
Run/Tests
main/myanon -f tests/test1.conf < tests/test1.sql
zcat tests/test2.sql.gz | main/myanon -f tests/test2.conf
Installation from packages (Ubuntu)
A PPA is available at: https://launchpad.net/~pierrepomes/+archive/ubuntu/myanon