LNMP实战

翻译

Jaygan 2020-06-20 23:34:33 博主文章分类：安装类

文章标签 LNMP 文章分类 Nginx 服务器

实战环境 LNMP项目实战： L：Linux（centos 7.6） http://mirrors.cqu.edu.cn/CentOS/7.6.1810/isos/x86_64/ N：Nginx（1.12.2） https://nginx.org/en/download.html M：MySQL（5.6.48） https://dev.mysql.com/downloads/mysql/5.6.html#downloads P：PHP（7.2.15） http://php.net/downloads.php Worldpress（5.0.3）：https://cn.wordpress.org/download/

主机信息：部署规划： 172.24.77.241(sr1.dj.com)：Nginx php-fpm 运行web服务 172.24.77.242(sr2.dj.com)：运行MySQL数据库 172.24.77.243(sr3.dj.com)：NFS存储服务器，存储上传的图片 1-部署数据库: 1.1二进制部署MySQL数据库安装依赖包 #yum install vim gcc gcc-c++ wget autoconf net-tools lrzsz iotop lsofiotop bash-completion curl policycoreutils openssh-server openssh-clients postfix –y 提示如下 Updated: curl.x86_64 0:7.29.0-57.el7 openssh-clients.x86_64 0:7.4p1-21.el7 openssh-server.x86_64 0:7.4p1-21.el7 postfix.x86_64 2:2. Dependency Updated: libcurl.x86_64 0:7.29.0-57.el7 libssh2.x86_64 0:1.8.0-3.el7 openssh.x86_64 0:7.4p1-21.el7
Complete! 下载安装包（略）切换至下载目录 #cd /usr/local/src/ 解压安装包

#tar xvf mysql-5.6.48-linux-glibc2.12-x86_64.tar.gz 创建快捷方式 #ln -sv /usr/local/src/mysql-5.6.48-linux-glibc2.12-x86_64 /usr/local/mysql 新增启动用户 #useradd mysql -s /sbin/nologin 创建存放mysql文件及日志的目录 #mkdir -pv /data/mysql /var/lib/mysql 修改文件夹权限 #chown -R mysql.mysql /data /var/lib/mysql –R 设置开始启动 #cp /usr/local/mysql/support-files/mysql.server /etc/init.d/mysqld 初始化MySQL #/usr/local/mysql/scripts/mysql_install_db --user=mysql --datadir=/data/mysql --basedir=/usr/local/mysql OK To start mysqld at boot time you have to copy support-files/mysql.server to the right place for your system PLEASE REMEMBER TO SET A PASSWORD FOR THE MySQL root USER ! To do so, start the server, then issue the following commands: /usr/local/mysql/bin/mysqladmin -u root password 'new-password' /usr/local/mysql/bin/mysqladmin -u root -h sr2.dj.com password 'new-password' Alternatively you can run: /usr/local/mysql/bin/mysql_secure_installation which will also give you the option of removing the test databases and anonymous user created by default. This is strongly recommended for production servers. See the manual for more instructions. You can start the MySQL daemon with: cd . ; /usr/local/mysql/bin/mysqld_safe & You can test the MySQL daemon with mysql-test-run.pl cd mysql-test ; perl mysql-test-run.pl Please report any problems at http://bugs.mysql.com/ The latest information about MySQL is available on the web at http://www.mysql.com Support MySQL by buying support/licenses at http://shop.mysql.com New default config file was created as /usr/local/mysql/my.cnf and will be used by default by the server when you start it. You may edit this file to change server settings WARNING: Default config file /etc/my.cnf exists on the system This file will be read by default by the MySQL server If you do not want to use this, either remove it, or use the --defaults-file argument to mysqld_safe when starting the server 添加执行权限 #chmod a+x /etc/init.d/mysqld 备份并修改my.cnf配置文件 #cp /etc/my.cnf /etc/my.cnf.bak #cp /etc/my.cnf /etc/my.cnf.bak [mysqld] socket=/data/mysql/mysql.sock user=mysql symbolic-links=0 datadir=/data/mysql innodb_file_per_table=1 max_connections=10000 [client] port=3306 socket=/var/lib/mysql/mysql.sock [mysqld_safe] log-error=/var/log/mysqld.log pid-file=/tmp/mysql.sock 1.2创建数据库并授权启动mysql并创建数据库 #/etc/init.d/mysqld start Starting MySQL..................... SUCCESS! #ln -sv /data/mysql/mysql.sock /var/lib/mysql/mysql.sock 登录数据库 #/usr/local/mysql/bin/mysql 创建数据库 #CREATE DATABASE wordpress; #GRANT ALL PRIVILEGES ON wordpress.* TO "wordpress"@"172.24.77.%" IDENTIFIED BY "123456"; #FLUSH PRIVILEGES; #show databases; 1.3验证MySQL账户权限在WordPress服务器使用授权的MySQL账户远程登录测试权限Server1 安装mysql客户端 #yum install -y mysql #mysql -uwordpress -h172.24.77.242 -p123456 #show databases;

2-部署PHP 2.1编译安装php 7.2.15 安装依赖包 #yum -y install wget vim pcre pcre-devel openssl openssl-devel libicudevel gcc gcc-c++ autoconf libjpeg libjpeg-devel libpng libpng-devel freetype freetype-devel libxml2 libxml2-devel zlib zlib-devel glibc glibc-devel glib2 glib2- devel ncurses ncurses-devel curl curl-devel krb5-devel libidn libidn-devel openldap openldap-devel nss_ldap jemalloc-devel cmake boost-devel bison automake libevent libevent-devel gd gd-devel libtool* libmcrypt libmcrypt-devel mcrypt mhash libxslt libxslt-devel readline readline-devel gmp gmp-devel libcurl libcurl-devel openjpegdevel 下载安装包（略） #/usr/local/src #tar xf php-7.2.31.tar.gz #cd php-7.2.31 #./configure --prefix=/apps/php --enable-fpm --with-fpm-user=www --with-fpm-group=www --with-pear --with-curl --with-png-dir –with-freetype-dir --with-iconv --with-mhash --with-zlib --with-xmlrpc --with-xsl -- with-openssl --with-mysqli --with-pdo-mysql --disable-debug --enable-zip –enable-sockets --enable-soap --enable-inline-optimization --enable-xml --enable-ftp -- enable-exif --enable-wddx --enable-bcmath --enable-calendar --enable-shmop -- enable-dba --enable-sysvsem --enable-sysvshm --enable-sysvmsg 安装成功提示如下： Thank you for using PHP. config.status: creating php7.spec config.status: creating main/build-defs.h config.status: creating scripts/phpize config.status: creating scripts/man1/phpize.1 config.status: creating scripts/php-config config.status: creating scripts/man1/php-config.1 config.status: creating sapi/cli/php.1 config.status: creating sapi/fpm/php-fpm.conf config.status: creating sapi/fpm/www.conf config.status: creating sapi/fpm/init.d.php-fpm config.status: creating sapi/fpm/php-fpm.service config.status: creating sapi/fpm/php-fpm.8 config.status: creating sapi/fpm/status.html config.status: creating sapi/phpdbg/phpdbg.1 config.status: creating sapi/cgi/php-cgi.1 config.status: creating ext/phar/phar.1 config.status: creating ext/phar/phar.phar.1 config.status: creating main/php_config.h config.status: executing default commands #make –j 2 Generating phar.phar PEAR package PHP_Archive not installed: generated phar will require PHP's phar extension be enabled. directorygraphiterator.inc clicommand.inc directorytreeiterator.inc invertedregexiterator.inc pharcommand.inc phar.inc Build complete. Don't forget to run 'make test'. #make install warning: pear/PEAR dependency package "pear/Archive_Tar" installed version 1.4.9 is not the recommended version 1.4.4 [PEAR] PEAR - installed: 1.10.12 Wrote PEAR system config file at: /apps/php/etc/pear.conf You may want to add: /apps/php/lib/php to your php.ini include_path /usr/local/src/php-7.2.31/build/shtool install -c ext/phar/phar.phar /apps/php/bin ln -s -f phar.phar /apps/php/bin/phar Installing PDO headers: /apps/php/include/php/ext/pdo/ 2.2准备PHP配置文件生成配置文件 #cd /apps/php/etc/php-fpm.d/ 备份配置文件 #cp www.conf.default www.conf 备份初始化文件 #cp /usr/local/src/php-7.2.31/php.ini-production /apps/php/etc/php.ini 添加启动用户 #useradd www -s /sbin/nologin -u 1001 修改配置文件 [www] user = www group = www listen = 127.0.0.1:9000 新增以下行 listen.allowed_clients = 127.0.0.1 pm = dynamic pm.max_children = 50 pm.start_servers =30 pm.min_spare_servers = 30 pm.max_spare_servers = 35 以下行去注释 ping.path = /ping access.log = log/$pool.access.log slowlog = log/$pool.log.slow grep -v ";" www.conf | grep -v "^$" 创建日志目录 #mkdir /apps/php/log/ 备份fpm文件 #cd /apps/php/etc/ #cp php-fpm.conf.default php-fpm.conf 启动并验证php-fpm #/apps/php/sbin/php-fpm –t [19-Jun-2020 11:55:06] NOTICE: configuration file /apps/php/etc/php-fpm.conf test is successful 验证php-fpm #/apps/php/sbin/php-fpm -c /apps/php/etc/php.ini #ps -ef |grep php-fpm root 14081 1 0 11:56 ? 00:00:00 php-fpm: master process (/apps/php/etc/php-fpm.conf) www 14082 14081 0 11:56 ? 00:00:00 php-fpm: pool www www 14083 14081 0 11:56 ? 00:00:00 php-fpm: pool www #yum install net-tools –y #netstat -tanlp | grep php-fpm tcp 0 0 127.0.0.1:9000 0.0.0.0:* LISTEN 14081/php-fpm: mast

3-部署Nginx：要求自定义显示返回给客户端的server信息并隐藏nginx 版本安装依赖包 #yum install -y vim lrzsz tree screen psmisc lsof tcpdump wget ntpdate gcc gcc-c++ glibc glibc-devel pcre pcre-devel openssl openssl-devel systemd-devel net-tools iotop bc zip unzip zlib-devel bash-completion nfs-utils automake libxml2 libxml2-devel libxslt libxslt-devel perl perl-ExtUtils-Embed 下载安装包 #cd /usr/local/src/ #wget https://nginx.org/download/nginx-1.12.2.tar.gz 解压安装包 #tar xf nginx-1.12.2.tar.gz 编译安装包 #cd nginx-1.12.2 自定义server信息 #vim src/core/nginx.h define nginx_version 1012002 define NGINX_VERSION "1.12" define NGINX_VER "magesrv/" NGINX_VERSION #vim src/http/ngx_http_header_filter_module.c static u_char ngx_http_server_string[] = "Server: magenginx" CRLF; 编译安装Nginx #./configure --prefix=/apps/nginx
--user=www
--group=www
--with-http_ssl_module
--with-http_v2_module
--with-http_realip_module
--with-http_stub_status_module
--with-http_gzip_static_module
--with-pcre
--with-stream
--with-stream_ssl_module
--with-stream_realip_module #make #make install 准备php测试页 #mkdir /data/nginx/wordpress –p #vim /data/nginx/wordpress/index.php <?php phpinfo(); ?> 配置Nginx #cp /apps/nginx/conf/nginx.conf /apps/nginx/conf/nginx.conf.bak #vim /apps/nginx/conf/nginx.conf 查看配置结果 #grep -v "#" /apps/nginx/conf/nginx.conf | grep -v "^$" 重启nginx并访问php状态页 #/apps/nginx/sbin/nginx –t #/apps/nginx/sbin/nginx stop #/apps/nginx/sbin/nginx start 修改客户端host映射关系测试访问 #http://www.silence.net/index.php

4-部署WordPress #cd /data/nginx/wordpress/ #mv index.php /opt/ 下载安装包(略) #tar -xvf wordpress-5.4.2-zh_CN.tar.gz #mv wordpress/* . #cp wp-config-sample.php wp-config.php #vim wp-config.php define( 'DB_NAME', 'wordpress' ); /** MySQL数据库用户名 / define( 'DB_USER', 'wordpress' ); /* MySQL数据库密码 / define( 'DB_PASSWORD', '123456' ); /* MySQL主机 */ define( 'DB_HOST', '172.24.77.242' ); 添加网站目录权限 #chown www.www /data/nginx/wordpress/ /apps/nginx/ -R 重新加载nginx #/apps/nginx/sbin/nginx -s reload 测试访问 #http://www.silence.net/wp-admin/install.php

自定义错误页面测试默认的错误页面 #http://www.silence.net/f.php #mkdir /data/nginx/logs #vim /apps/nginx/conf/nginx.conf error_page 500 502 503 504 404 /error.html; access_log /data/nginx/logs/www-silence-net_access.log; error_log /data/nginx/logs/www-silence-net_error.log; location = /error.html { root /data/nginx; } 创建自定义错误页面 #/data/nginx/wordpress #vim error.html 重启Nginx #killall nginx #/apps/nginx/sbin/nginx 测试错误页面

自定义访问日志为json格式 #vim /apps/nginx/conf/nginx.conf log_format access_json '{"@timestamp":"$time_iso8601",' '"host":"$server_addr",' '"clientip":"$remote_addr",' '"size":$body_bytes_sent,' '"responsetime":$request_time,' '"upstreamtime":"$upstream_response_time",' '"upstreamhost":"$upstream_addr",' '"http_host":"$host",' '"uri":"$uri",' '"domain":"$host",' '"xff":"$http_x_forwarded_for",' '"referer":"$http_referer",' '"tcp_xff":"$proxy_protocol_addr",' '"http_user_agent":"$http_user_agent",' '"status":"$status"}'; access_log /apps/nginx/logs/access_json.log access_json;

access_log /data/nginx/logs/www-silence-net_access.log access_json; 修改前的日志格式为重启Nginx #killall nginx #/apps/nginx/sbin/nginx 修改后日志格式为