/usr/bin/mysql_upgrade

/usr/bin/mysql_upgrade  Ver 2.1 Distrib 10.11.19-MariaDB, for Linux (x86_64)
Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

MariaDB utility for upgrading databases to new MariaDB versions.

Default options are read from the following files in the given order:
/etc/my.cnf /etc/mysql/my.cnf ~/.my.cnf
The following groups are read: client mysql_upgrade mariadb-upgrade client-server client-mariadb
The following options may be given as the first argument:
--print-defaults          Print the program argument list and exit.
--no-defaults             Don't read default options from any option file.
The following specify which files/extra groups are read (specified before remaining options):
--defaults-file=#         Only read default options from the given file #.
--defaults-extra-file=#   Read this file after the global files are read.
--defaults-group-suffix=# Additionally read default groups with # appended as a suffix.

  -?, --help          Display this help message and exit.
  -b, --basedir=name  Not used by mysql_upgrade. Only for backward
                      compatibility.
  --character-sets-dir=name
                      Not used by mysql_upgrade. Only for backward
                      compatibility.
  --compress          Not used by mysql_upgrade. Only for backward
                      compatibility.
  -d, --datadir=name  Not used by mysql_upgrade. Only for backward
                      compatibility.
  -#, --debug[=#]     This is a non-debug version. Catch this and exit.
  --debug-check       Check memory and open file usage at exit.
  -T, --debug-info    Print some debug info at exit.
  --default-character-set=name
                      Not used by mysql_upgrade. Only for backward
                      compatibility.
  --default-auth=name Default authentication client-side plugin to use.
  --check-if-upgrade-is-needed
                      Exits with status 0 if an upgrades is required, 1
                      otherwise.
  -f, --force         Force execution of mysqlcheck even if mysql_upgrade has
                      already been executed for the current version of MariaDB.
  -h, --host=name     Connect to host.
  -p, --password[=name]
                      Password to use when connecting to server. If password is
                      not given, it's solicited on the tty.
  --plugin-dir=name   Directory for client-side plugins.
  -P, --port=name     Port number to use for connection or 0 for default to, in
                      order of preference, my.cnf, $MYSQL_TCP_PORT,
                      /etc/services, built-in default (3306).
  --protocol=name     The protocol to use for connection (tcp, socket, pipe).
  --silent            Print less information
  -S, --socket=name   The socket file to use for connection.
  --ssl               Enable SSL for connection (automatically enabled with
                      other flags).
                      (Defaults to on; use --skip-ssl to disable.)
  --ssl-ca=name       CA file in PEM format (check OpenSSL docs, implies
                      --ssl).
  --ssl-capath=name   CA directory (check OpenSSL docs, implies --ssl).
  --ssl-cert=name     X509 cert in PEM format (implies --ssl).
  --ssl-cipher=name   SSL cipher to use (implies --ssl).
  --ssl-key=name      X509 key in PEM format (implies --ssl).
  --ssl-crl=name      Certificate revocation list (implies --ssl).
  --ssl-crlpath=name  Certificate revocation list path (implies --ssl).
  --tls-version=name  TLS protocol version for secure connection.
  --ssl-verify-server-cert
                      Verify server's certificate to prevent man-in-the-middle
                      attacks
  -t, --tmpdir=name   Directory for temporary files.
  -s, --upgrade-system-tables
                      Only upgrade the system tables in the mysql database.
                      Tables in other databases are not checked or touched.
  -u, --user=name     User for login.
  -v, --verbose       Display more output about the process; Using it twice
                      will print connection argument;Using it 3 times will
                      print out all CHECK, RENAME and ALTER TABLE during the
                      check phase;Using it 4 times (added in MariaDB 10.0.14)
                      will also write out all mariadb-check commands used;Using
                      it 5 times will print all the mariadb commands used and
                      their results while running mysql_fix_privilege_tables
                      script.
                      (Defaults to on; use --skip-verbose to disable.)
  -V, --version       Output version information and exit.
  -k, --version-check Run this program only if its 'server version' matches the
                      version of the server to which it's connecting. Note: the
                      'server version' of the program is the version of the
                      MariaDB server with which it was built/distributed.
                      (Defaults to on; use --skip-version-check to disable.)
  --write-binlog      All commands including those issued by mysqlcheck are
                      written to the binary log.

Variables (--variable-name=value)
and boolean options {FALSE|TRUE}  Value (after reading options)
--------------------------------- ----------------------------------------
compress                          FALSE
debug-check                       FALSE
debug-info                        FALSE
default-auth                      (No default value)
check-if-upgrade-is-needed        FALSE
force                             TRUE
password                          (No default value)
plugin-dir                        (No default value)
silent                            FALSE
ssl                               TRUE
ssl-ca                            (No default value)
ssl-capath                        (No default value)
ssl-cert                          (No default value)
ssl-cipher                        (No default value)
ssl-key                           (No default value)
ssl-crl                           (No default value)
ssl-crlpath                       (No default value)
tls-version                       (No default value)
ssl-verify-server-cert            FALSE
upgrade-system-tables             FALSE
user                              root
verbose                           TRUE
version-check                     TRUE
write-binlog                      FALSE