环境:

操作系统:CentOS 6.8 x86_64(关闭SELinux、iptables)

Nginx:1.10.1

PHP: 7.0.10

MySQL:5.7.13

Zabbix:3.0.4


一.安装MySQL

1.安装依赖

yum -y install gcc gcc-devel gcc-c++ gcc-c++-devel libaio-devel boost boost-devel autoconf* automake* zlib* libxml* ncurses-devel ncurses libgcrypt* libtool* cmake openssl openssl-devel bison bison-devel unzip numactl-devel net-snmp-devel net-snmp-utils

2.卸载mysql-libs,否则下面安装mysql的时候会报错

rpm -e --nodeps mysql-libs

3.下载解压及安装

wget tar xf mysql-5.7.13-1.el6.x86_64.rpm-bundle.tar
rpm -ivh `ls |grep mysql-community|grep -v test`

4.由于mysql 5.7跟之前的5.6安全性有很大提升,有很多地方是不一样的

先重置密码

#修改默认字符集
sed -i '/\[mysqld\]/a\character-set-server=utf8' my.cnf
#启动mysqld,并进行初始化
/etc/init.d/mysqld start
#停止mysqld,以便进行无密码启动
/etc/init.d/mysqld stop
#无密码启动mysql
mysqld_safe --skip-grant-tables &
mysql
#注意新版的mysql 5.7在mysql.user表下已经没有password字段了
mysql> update mysql.user set authentication_string=password('123456.abcd') where user='root' and Host = 'localhost';
ERROR 1819 (HY000): Your password does not satisfy the current policy requirements
#会被告知你的密码不符合当前策略
#修改对应的密码策略,但是密码也至少为9位
mysql> set global validate_password_policy=0;
mysql> update mysql.user set authentication_string=password('123456.abcd') where user='root' and Host = 'localhost';
service mysqld restart

二.编译安装PHP 7.0.10

1.安装EPEL源及安装对应的依赖包

rpm -ivh http://mirrors.ustc.edu.cn/fedora/epel/6/x86_64/epel-release-6-8.noarch.rpm
yum -y install libmcrypt-devel mcrypt mhash gd-devel ncurses-devel libxml2-devel bzip2-devel libcurl-devel curl-devel libjpeg-devel libpng-devel freetype-devel net-snmp-devel openssl-devel

2.安装libiconv

wget http://ftp.gnu.org/pub/gnu/libiconv/libiconv-1.14.tar.gz
tar zxf libiconv-1.14.tar.gz
cd libiconv-1.14
./configure --prefix=/usr/local/libiconv1.14
make && make install
cd ..

3.下载及编译php

wget http://cn2.php.net/get/php-7.0.10.tar.gz/from/this/mirror
tar zxf mirror
cd php-7.0.10/
./configure --prefix=/usr/local/php7.0.10 --with-config-file-path=/usr/local/php7.0.10/etc --enable-mysqlnd --with-mysqli=mysqlnd --with-pdo-mysql=mysqlnd --with-iconv-dir=/usr/local/libiconv1.14 --with-pcre-regex --with-zlib --with-bz2 --enable-calendar --with-curl --enable-dba --with-libxml-dir --enable-ftp --with-gd --with-jpeg-dir --with-png-dir --with-zlib-dir --with-freetype-dir --enable-gd-native-ttf --with-mhash --enable-mbstring --with-mcrypt --enable-pcntl --enable-xml --disable-rpath --enable-shmop --enable-sockets --enable-zip --enable-bcmath --with-snmp --disable-ipv6 --with-gettext  --enable-fpm --with-fpm-user=www  --with-fpm-group=www --with-openssl
#注意不能有--enable-gd-jis-conv参数,否则后面图形乱码
make && make install

4.修改相应参数

cp sapi/fpm/init.d.php-fpm /etc/init.d/php-fpm
chmod +x /etc/init.d/php-fpm
cp /usr/local/php7.1.0/etc/php-fpm.conf.default /usr/local/php7.1.0/etc/php-fpm.conf
cp php.ini-production /usr/local/php7.0.10/etc/php.ini
#修改时区
sed -i 's#;date.timezone =#date.timezone = PRC#g' /usr/local/php7.0.10/etc/php.ini
#隐藏PHP版本
sed -i 's#expose_php = On#expose_php = Off#g' /usr/local/php7.0.10/etc/php.ini

cp /usr/local/php7.0.10/etc/php-fpm.d/www.conf.default /usr/local/php7.0.10/etc/php-fpm.d/www.conf
sed -i 's#;rlimit_files = 1024#rlimit_files = 65535#g' /usr/local/php7.0.10/etc/php-fpm.d/www.conf
sed -i 's#;listen.owner = www#listen.owner = www#g' /usr/local/php7.0.10/etc/php-fpm.d/www.conf
sed -i 's#;listen.group = www#listen.group = www#g' /usr/local/php7.0.10/etc/php-fpm.d/www.conf
sed -i 's#;listen.mode = 0660#listen.mode = 0660#g' /usr/local/php7.0.10/etc/php-fpm.d/www.conf
sed -i 's#listen = 127.0.0.1:9000#;listen = 127.0.0.1:9000#g' /usr/local/php7.0.10/etc/php-fpm.d/www.conf
sed -i '/;listen = 127.0.0.1:9000/a\listen = /tmp/php-fpm.sock'  /usr/local/php7.0.10/etc/php-fpm.d/www.conf

#安全配置,禁用相关函数,注意不能包含scandir和fsockopen,zabbix需要使用到这2个函数
sed -i 's#^;cgi.fix_pathinfo=1#cgi.fix_pathinfo=0#g' /usr/local/php7.0.10/etc/php.ini
sed -i 's#disable_functions =#disable_functions =exec,system,eval,passthru,chroot,chgrp,chown,shell_exec,proc_open,proc_get_status,ini_alter,ini_alter,ini_restore,dl,pfsockopen,fsocket,openlog,syslog,readlink,symlink,popepassthru,stream_socket_server#g' /usr/local/php7.0.10/etc/php.ini
#限制执行目录,我的WEB目录都在/var/www/html下
sed -i 's#;open_basedir =#open_basedir = "/var/www/html/:/tmp/"#g' /usr/local/php7.0.10/etc/php.ini

#修改PHP相关参数以保证zabbix最低要求
sed -i 's#max_execution_time = 30#max_execution_time = 300#g' /usr/local/php7.0.10/etc/php.ini
sed -i 's#max_input_time = 60#max_input_time = 300#g' /usr/local/php7.0.10/etc/php.ini
sed -i 's#post_max_size = 8M#post_max_size = 24M#g' /usr/local/php7.0.10/etc/php.ini
sed -i 's#upload_max_filesize = 2M#upload_max_filesize = 4M#g' /usr/local/php7.0.10/etc/php.ini

#修改php连接mysql
sed -i 's#pdo_mysql.default_socket=#pdo_mysql.default_socket= /var/lib/mysql/mysql.sock#g' /usr/local/php7.0.10/etc/php.ini
sed -i 's#mysqli.default_socket =#mysqli.default_socket = /var/lib/mysql/mysql.sock#g' /usr/local/php7.0.10/etc/php.ini

增加PHP执行用户
groupadd -g 10080 www
useradd -g www -u 10080 -s /sbin/nologin -d /dev/null www


三.安装Nginx

1.下载及安装nginx

wget http://nginx.org/download/nginx-1.10.1.tar.gz
tar zxf nginx-1.10.1.tar.gz
cd nginx-1.10.1
#隐藏Nginx版本
sed -i 's#1.10.1#2.2.14.0#g' src/core/nginx.h
sed -i 's#"nginx/"#"Apache/"#g' src/core/nginx.h
sed -i 's#"Server: nginx"#"Server: Apache"#g' src/http/ngx_http_header_filter_module.c
sed -i 's#<center>nginx</center>#<center>Apache</center>#g' src/http/ngx_http_special_response.c

./configure --prefix=/usr/local/nginx1.10.1 --user=www --group=www --with-http_stub_status_module --with-http_gzip_static_module --with-http_ssl_module
make && make install
sed -i 's#nginx/$nginx_version;#Apache/$nginx_version;#g' /usr/local/nginx1.10.1/conf/fastcgi.conf

2.配置Nginx

vim /usr/local/nginx1.10.1/conf/nginx.conf

user  www www;
worker_processes  4;

error_log  logs/error.log;

pid        logs/nginx.pid;

worker_rlimit_nofile 65535;
events {
    use epoll;
    worker_connections  65535;
}

http {
    include       mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  logs/access.log  main;

  server_names_hash_bucket_size 128;
  client_header_buffer_size 32k;
  large_client_header_buffers 4 32k;
  client_max_body_size 8m;

  fastcgi_connect_timeout 300;
  fastcgi_send_timeout 300;
  fastcgi_read_timeout 300;
  fastcgi_buffer_size 64k;
  fastcgi_buffers 4 64k;
  fastcgi_busy_buffers_size 128k;
  fastcgi_temp_file_write_size 128k;
  fastcgi_param HTTP_PROXY "";
  #隐藏后端服务器的相关参数
  proxy_hide_header X-Powered-By;
  proxy_hide_header X-Forwarded-For;
  proxy_hide_header X-AspNet-Version;
  proxy_hide_header X-AspNetMvc-Version;
  proxy_hide_header Via;
  proxy_hide_header X-Varnish;
  proxy_hide_header Server;

  gzip on;
  gzip_min_length  1k;
  gzip_buffers     4 16k;
  gzip_http_version 1.1;
  gzip_comp_level 5;
  gzip_disable "MSIE [1-6]\.";
  gzip_types text/plain text/css text/xml application/javascript application/x-javascript;
  gzip_vary on;

  include host/*.conf;
}

3.配置站点

mkdir /usr/local/nginx1.10.1/conf/host
vim /usr/local/nginx1.10.1/conf/host/zabbix.conf
    server {
        listen       80;
        server_name  localhost zabbix;
        location / {
            root   /var/www/html;
            index  index.html index.htm index.php;

        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }

        location ~ \.php$ {
            fastcgi_pass   unix:/tmp/php-fpm.sock;
            fastcgi_index  index.php;
            fastcgi_param HTTP_PROXY "";
            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
            include        fastcgi_params;
        }
        }
    }


四.安装Zabbix

1.下载及安装zabbix

yum -y install OpenIPMI-devel
wget http://120.52.73.47/nchc.dl.sourceforge.net/project/zabbix/ZABBIX%20Latest%20Stable/3.0.4/zabbix-3.0.4.tar.gz
tar -zxvf zabbix-3.0.4.tar.gz
cd zabbix-3.0.4
./configure --prefix=/usr/local/zabbix3.0.4 --enable-server --with-mysql --with-net-snmp --with-libxml2 --with-libcurl --with-openipmi  --enable-agent
make && make installl

2.配置zabbix

cp misc/init.d/fedora/core5/zabbix_server /etc/init.d/
cp misc/init.d/fedora/core5/zabbix_agentd /etc/init.d/
sed -i 's#/usr/local/sbin/zabbix_server#/usr/local/zabbix3.0.4/sbin/zabbix_server#g' /etc/init.d/zabbix_server
sed -i 's#/usr/local/sbin/zabbix_agentd#/usr/local/zabbix3.0.4/sbin/zabbix_agentd#g' /etc/init.d/zabbix_agentd

3.复制WEB站点

mkdir /var/www/html/zabbix
cp -rf frontends/php/* /var/www/html/zabbix

4.zabbix乱码图形处理

将Windows操作系统的C:\Windows\Fonts\simkai.ttf字体文件上传至/var/www/html/zabbix/font。防止出现乱码情况

sed -i 's#DejaVuSans#simkai#g' /var/www/html/zabbix/include/defines.inc.php

5.使用MySQL创建zabbix数据库并授权

mysql -uroot -p
mysql> create database zabbix character set utf8;
mysql> grant all on zabbix.* to 'zabbix'@'localhost' identified by 'zabbix.localhost';

6.导入数据库

进入zabbix-3.0.4源码文件目录
mysql -uroot -p zabbix < database/mysql/schema.sql
mysql -uroot -p zabbix < database/mysql/data.sql
mysql -uroot -p zabbix < database/mysql/p_w_picpaths.sql

7.修改zabbix_server配置文件,以下是我的配置文件

egrep -v '^:|^#' /usr/local/zabbix3.0.4/etc/zabbix_server.conf|awk 'NF>0'
LogFile=/tmp/zabbix_server.log
DBName=zabbix
DBUser=zabbix
DBPassword=zabbix.localhost
StartPollers=10
StartPingers=4
StartDiscoverers=4
JavaGateway=127.0.0.1
JavaGatewayPort=10052
StartJavaPollers=5
StartVMwareCollectors=5
VMwareFrequency=60
VMwareCacheSize=8M

8.再修改zabbix web目录下的配置文件

vim /var/www/html/zabbix3.0.4/conf/zabbix.conf.php
<?php
// Zabbix GUI configuration file.
global $DB;

$DB['TYPE']     = 'MYSQL';
$DB['SERVER']   = 'localhost';
$DB['PORT']     = '0';
$DB['DATABASE'] = 'zabbix';
$DB['USER']     = 'zabbix';
$DB['PASSWORD'] = 'zabbix.localhost';

// Schema name. Used for IBM DB2 and PostgreSQL.
$DB['SCHEMA'] = '';

$ZBX_SERVER      = 'localhost';
$ZBX_SERVER_PORT = '10051';
$ZBX_SERVER_NAME = '';

$IMAGE_FORMAT_DEFAULT = IMAGE_FORMAT_PNG;



QA:

1.zabbix乱码问题

a.数据库字符集问题,创建数据库时指定字符集

create database zabbix character set utf8;


b.未上传中文字体,或者未修改include/define.inc.php文件


c.编译PHP时携带有--enable-gd-jis-conv参数,如果带有这个参数,画图的时候出现

wKiom1fM4SmBRJkcAAJOxtHJDII525.png


2.php7安装memcache问题

git clone 
cd pecl-memcache
/usr/local/php7.0.10/bin/phpize
./configure --with-php-config=/usr/local/php7.0.10/bin/php-config
make && make install
echo 'extension = "memcache.so"'>>/usr/local/php7.0.10/etc/php.ini
#检查php是否加载memcache模块
/usr/local/php7.0.10/bin/php -m |grep memcache
#重启php-fpm服务以加载memcache模块
/etc/init.d/php-fpm restart