LNMP工作模式
工作平臺爲紅帽6.6 64位
nginx的優點:
1、Nginx是一個小巧而高效的Linux下的Web服務器軟件,是由 Igor Sysoev 爲俄羅斯訪問量第二的 Rambler.ru 站點開發的,已經在一些俄羅斯的大型網站上運行多年,相當的穩定
2、Nginx是解決C10K問題的服務器之一。不同於傳統的服務器,Nginx的不依賴於線程處理請求。相反,它使用一個更可擴展的事件驅動(event-driven)(異步)架構
編譯安裝Nginx
1、解決依賴關係
# yum groupinstall "DevelopmentTools" "Server Platform Deveopment"
# yum install openssl-devel pcre-devel
2、安裝
首先添加用戶nginx,實現以之運行nginx服務進程:
# groupadd -r -g 108 nginx
# useradd -r -g 108 -u 108 nginx
# date 時間同步
# ntpdate 172.16.0.1
# tar xf nginx-1.4.1.tar.gz
接着開始編譯和安裝:
# cd nginx-1.4.1/
# ./configure \
--prefix=/usr \
--sbin-path=/usr/sbin/nginx \
--conf-path=/etc/nginx/nginx.conf \
--error-log-path=/var/log/nginx/error.log \
--http-log-path=/var/log/nginx/access.log \
--pid-path=/var/run/nginx/nginx.pid \
--lock-path=/var/lock/nginx.lock \
--user=nginx \
--group=nginx \
--with-http_ssl_module \
--with-http_flv_module \
--with-http_stub_status_module \
--with-http_gzip_static_module \
--http-client-body-temp-path=/var/tmp/nginx/client/ \
--http-proxy-temp-path=/var/tmp/nginx/proxy/ \
--http-fastcgi-temp-path=/var/tmp/nginx/fcgi/ \
--http-uwsgi-temp-path=/var/tmp/nginx/uwsgi \
--http-scgi-temp-path=/var/tmp/nginx/scgi \
--with-pcre \
--with-file-aio
# make && make install
3、爲nginx提供SysV init腳本:
新建文件/etc/rc.d/init.d/nginx,內容如下:
# vim /etc/rc.d/init.d/nginx
#!/bin/sh
#
# nginx - this script starts and stops thenginx daemon
#
# chkconfig: - 85 15
# description: Nginx is an HTTP(S) server, HTTP(S) reverse \
# proxy and IMAP/POP3 proxy server
# processname: nginx
# config: /etc/nginx/nginx.conf
# config: /etc/sysconfig/nginx
# pidfile: /var/run/nginx.pid
# Source function library.
. /etc/rc.d/init.d/functions
# Source networking configuration.
. /etc/sysconfig/network
# Check that networking is up.
[ "$NETWORKING" = "no"] && exit 0
nginx="/usr/sbin/nginx"
prog=$(basename $nginx)
NGINX_CONF_FILE="/etc/nginx/nginx.conf"
[ -f/etc/sysconfig/nginx ] && . /etc/sysconfig/nginx
lockfile=/var/lock/subsys/nginx
make_dirs() {
#make required directories
user=`nginx -V 2>&1 | grep "configure arguments:" | sed's/[^*]*--user=\([^ ]*\).*/\1/g' -`
options=`$nginx -V 2>&1 | grep 'configure arguments:'`
for opt in $options; do
if [ `echo $opt | grep '.*-temp-path'` ]; then
value=`echo $opt | cut -d "=" -f 2`
if [ ! -d "$value" ]; then
# echo "creating"$value
mkdir -p $value && chown-R $user $value
fi
fi
done
}
start() {
[-x $nginx ] || exit 5
[-f $NGINX_CONF_FILE ] || exit 6
make_dirs
echo -n $"Starting $prog: "
daemon $nginx -c $NGINX_CONF_FILE
retval=$?
echo
[ $retval -eq 0 ] && touch $lockfile
return $retval
}
stop() {
echo -n $"Stopping $prog: "
killproc $prog -QUIT
retval=$?
echo
[$retval -eq 0 ] && rm -f $lockfile
return $retval
}
restart() {
configtest || return $?
stop
sleep 1
start
}
reload() {
configtest || return $?
echo -n $"Reloading $prog: "
killproc $nginx -HUP
RETVAL=$?
echo
}
force_reload() {
restart
}
configtest() {
$nginx -t -c $NGINX_CONF_FILE
}
rh_status() {
status $prog
}
rh_status_q() {
rh_status >/dev/null 2>&1
}
case "$1" in
start)
rh_status_q && exit 0
$1
;;
stop)
rh_status_q || exit 0
$1
;;
restart|configtest)
$1
;;
reload)
rh_status_q || exit 7
$1
;;
force-reload)
force_reload
;;
status)
rh_status
;;
condrestart|try-restart)
rh_status_q || exit 0
;;
*)
echo $"Usage: $0{start|stop|status|restart|condrestart|try-restart|reload|force-reload|configtest}"
exit 2
esac
而後爲此腳本賦予執行權限:
# chmod +x /etc/rc.d/init.d/nginx
添加至服務管理列表,並讓其開機自動啓動:
# chkconfig --add nginx
# chkconfig nginx on
而後就可以啓動服務並測試了:
# service nginx start
訪問測試頁 172.16.50.200
Mysql的準備
準備數據存放的文件系統
1、新建一個邏輯卷,並將其掛載至特定目錄即可。這裏假設其邏輯卷的掛載目錄爲/mydata,而後需要創建/mydata/data目錄做爲mysql數據的存放目錄。
# mkdir/mydata/data -pv
2、新建用戶以安全方式運行進程:
# groupadd -rmysql
# useradd -g mysql-r -s /sbin/nologin -M -d /mydata/data mysql
# chown -Rmysql:mysql /mydata/data
3、安裝並初始化mysql-5.6.10
首先下載平臺對應的mysql版本至本地,這裏是64位平臺,因此,選擇的爲mysql-5.6.10-linux-glibc2.5-x86_64.tar.gz
# tar xf mysql-5.6.10-linux-glibc2.5-x86_64.tar.gz-C /usr/local
# cd /usr/local/
# ln -sv mysql-5.6.10-linux-glibc2.5-x86_64mysql
# cd mysql
# chown -Rmysql:mysql .
初始化數據庫
#scripts/mysql_install_db --user=mysql --datadir=/mydata/data
# chown -Rroot . 爲安全起見,需要將屬主改爲root
4、爲mysql提供主配置文件:
# cd/usr/local/mysql
[root@slavemysql]# vim my.cnf
需要添加如下行指定mysql數據文件的存放位置:
datadir =/mydata/data
innodb_file_per_table= on
log-bin =master-bin
socket =/tmp/mysql.sock
5、爲mysql提供sysv服務腳本:
# cd/usr/local/mysql
# cpsupport-files/mysql.server /etc/rc.d/init.d/mysqld
添加至服務列表:
# chkconfig --addmysqld
# chkconfig mysqldon
而後就可以啓動服務測試使用了。
爲了使用mysql的安裝符合系統使用規範,並將其開發組件導出給系統使用,這裏還需要進行如下步驟:
6、輸出mysql的man手冊至man命令的查找路徑:
編輯/etc/man.config,添加如下行即可:
MANPATH /usr/local/mysql/man
7、輸出mysql的頭文件至系統頭文件路徑/usr/include:
這可以通過簡單的創建鏈接實現:
# ln -sv/usr/local/mysql/include /usr/include/mysql
8、輸出mysql的庫文件給系統庫查找路徑:
# echo '/usr/local/mysql/lib'> /etc/ld.so.conf.d/mysql.conf
而後讓系統重新載入系統庫:
# ldconfig
9、修改PATH環境變量,讓系統可以直接使用mysql的相關命令。
# vim /etc/profile.d/mysql.d ---添加內容如下
export PATH=$PATH:/usr/local/mysql/bin
# . /etc/profile.d/mysql.d
安裝PHP
安裝一下安裝包
libmcrypt-2.5.7-5.el5.i386.rpm
libmcrypt-devel-2.5.7-5.el5.i386.rpm
mhash-0.9.2-6.el5.i386.rpm
mhash-devel-0.9.2-6.el5.i386.rpm
# yum install libmcrypt-2.5.7-5.el5.i386.rpmlibmcrypt-devel-2.5.7-5.el5.i386.rpm mhash-0.9.2-6.el5.i386.rpmmhash-devel-0.9.2-6.el5.i386.rpm -y
# yum install libxml2-devel libcurl-devel bzip2-devel openssl-devel –y
編譯安裝PHP
# tar xf php-5.4.4.tar.bz2
# cd php-5.4.4
./configure --prefix=/usr/local/php--with-mysql=/usr/local/mysql --with-openssl --enable-fpm --with-mysqli=/usr/local/mysql/bin/mysql_config--enable-mbstring --with-freetype-dir --with-jpeg-dir --with-png-dir--with-zlib --with-libxml-dir=/usr --enable-xml --enable-sockets --with-mcrypt --with-config-file-path=/etc--with-config-file-scan-dir=/etc/php.d --with-bz2 --enable-maintainer-zts --with-curl
#make
# make install
準備PHP的配置文件
# cd php-5.4.4
# cpphp.ini-production /etc/php.ini
爲php-fpm提供Sysv init腳本,並將其添加至服務列表:
# cd php-5.4.4
# cp sapi/fpm/init.d.php-fpm /etc/rc.d/init.d/php-fpm
# cp sapi/fpm/init.d.php-fpm/etc/init.d/php-fpm
# chmod +x/etc/init.d/php-fpm
# chkconfig --add php-fpm
# chkconfig php-fpm on
準備php_fpm的配置文件
# cp php.ini-production/etc/php.ini
# cd/usr/local/php/etc/
# cpphp-fpm.conf.default php-fpm.conf
# vimphp-fpm.conf
修改內容爲:
pm.max_children =150
pm.start_servers= 5
pm.min_spare_servers= 2
pm.max_spare_servers= 8
pid = /usr/local/php/var/run/php-fpm.pid
啓動php-fpm
# service php-fpm start
Starting php-fpm done
編輯nginx,啓用定義的php頁面的上下文
# vim /etc/nginx/nginx.conf
location ~ \.php$ {
root /web/slave;
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name;
include fastcgi_params;
}
並且添加默認頁面
index index.php index.htmlindex.htm;
編輯fastcgi_params文件
# vim /etc/nginx/fastcgi_params
fastcgi_param GATEWAY_INTERFACE CGI/1.1; 服務器接口
fastcgi_param SERVER_SOFTWARE nginx; 服務器
fastcgi_param QUERY_STRING $query_string; 查詢字符串
fastcgi_param REQUEST_METHOD $request_method; 請求方法
fastcgi_param CONTENT_TYPE $content_type; 內容類型
fastcgi_param CONTENT_LENGTH $content_length;內容長度
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; 網頁文件根目錄
fastcgi_param SCRIPT_NAME $fastcgi_script_name;腳本名稱
fastcgi_param REQUEST_URI $request_uri; 請求哪個URI
fastcgi_param DOCUMENT_URI $document_uri;網頁路徑URI
fastcgi_param DOCUMENT_ROOT $document_root;
fastcgi_param SERVER_PROTOCOL $server_protocol;服務協議
fastcgi_param REMOTE_ADDR $remote_addr;客戶端地址
fastcgi_param REMOTE_PORT $remote_port;客戶端端口
fastcgi_param SERVER_ADDR $server_addr;服務器端地址
fastcgi_param SERVER_PORT $server_port;服務器端端口
fastcgi_param SERVER_NAME $server_name;服務器名稱
重新啓動nginx
# service nginx restart
# vim /web/htdocs/index.php 提供測試頁面
<h1>test Page</h1>
<?php
phpinfo()
?>
添加加速器Xcache
# tar xf xcache-3.0.1.tar.bz2
# cd xcache-3.0.1
# /usr/local/php/bin/phpize
# ./configure --enable-xcache--with-php-config=/usr/local/php/bin/php-config
# make && make install
安裝完成,會顯示圖中所示路徑
編輯php.ini,整合php和xcache:
# mkdir/etc/php.d
# cp xcache.ini/etc/php.d/
# vim/etc/php.d/xcache.ini
更改內容爲
extension =/usr/local/php/lib/php/extensions/no-debug-zts-20100525/xcache.so
重新啓動php-fpm
# service php-fpm restart
SSL的加密連接
[root@www CA]# (umask 077; openssl genrsa2048 > private/cakey.pem)
[root@www CA]# openssl req -new -x509 -keyprivate/cakey.pem -out cacert.pem
[root@www CA]# echo 01 > serial
[root@slave CA]# cat serial
01 序列號爲01
[root@www CA]# cd/etc/nginx/ssl/
[root@www ssl]#ls
[root@www ssl]#(umask 077; openssl genrsa 2048 > nginx.key)
[root@www ssl]# openssl req -new -keynginx.key -out nginx.csr
[root@www ssl]# openssl ca -in nginx.csr-out nginx.crt -days 3665
配置文件定義
# vim /etc/nginx/nginx.conf
#HTTPS server
#
server {
listen 443;
server_name www.test.com;
ssl on;
ssl_certificate /etc/nginx/ssl/nginx.crt;
ssl_certificate_key /etc/nginx/ssl/nginx.key;
ssl_session_timeout 5m;
ssl_protocols SSLv2 SSLv3 TLSv1;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;
location ~ \.php$ {
root /web/bbs;
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name;
include fastcgi_params;
}
location / {
root /web/bbs;
index index.php index.htmlindex.htm;
}
}
到此LNMP就完成了