Complete procedures with a way back.

Create a private Ubuntu 24.04 LTS Compute Engine VM with Shielded VM, IAP TCP forwarding, OS Login, service-account-targeted firewall rules and a least-privilege workload identity, then prove access and recovery.

Diagnose MySQL ERROR 2002 and ERROR 2003 without guessing: separate a missing or mismatched Unix socket from a stopped service, wrong TCP port, bind-address policy, DNS, firewall, route, and certificate-verified TLS failure.

Remove anonymous and test access, restrict administration, enforce TLS where remote clients are required, audit grants, and verify exposure.

Create a default-deny host firewall with loopback, established traffic, controlled SSH, service ports, logging, validation, and rollback.