Centos7+Nginx1.11.7+MySQL5.7.16+PHP7.1.0+openssl-1.1.0c
一、linux 系统限制配置
1、关闭系统防火墙
?
|
1
2
|
systemctl stop firewalld.service 关闭防火墙
systemctl disable firewalld.service 禁用防火墙
|
2、关闭SElinux
?
|
1
2
|
sed-i 's/SELINUX=.*/SELINUX=disabled/g'/etc/selinux/config
setenforce 0 selinux 立即生效
|
二、系统安装约定
软件源代码包存放位置：/usr/local/src
源码包编译安装位置：/usr/local/软件名字
三、下载软件包
1、下载nginx最新稳定版本
?
|
1
|
wget -P /usr/local/srchttp://nginx.org/download/nginx-1.11.7.tar.gz
|
2、下载mysql-boost-5.7.16 带 boost 如果不带源码安装如果网络环境不会可能会出现错误
?
|
1
|
wget -P /usr/local/srchttp://cdn.mysql.com/Downloads/MySQL-5.7/mysql-boost-5.7.16.tar.gz
|
3、下载php-7.1.0版本
?
|
1
|
wget -P /usr/local/srchttp://cn2.php.net/distributions/php-7.1.0.tar.gz
|
4、下载libmemcached-1.0.18
?
|
1
|
wget -P /usr/local/srchttps://launchpadlibrarian.net/165454254/libmemcached-1.0.18.tar.gz
|
5、下载php-memcached
?
|
1
2
3
|
yum -y installgit
cd/usr/local/src
git clone -b php7 https://github.com/php-memcached-dev/php-memcached.git
|
6、下载openssl-1.1.0c
?
|
1
|
wget -P /usr/local/srchttps://www.openssl.org/source/openssl-1.1.0c.tar.gz
|
四、安装编译器及依赖
?
|
1
2
3
4
5
6
7
|
yum -y insyall epel-release
yum -y installpatch gcc gcc-c++ readline-devel zlib-devel libffi-devel \
openssl openssl-devel makeautoconf automake libtool bison libxml2 \
libxml2-devel libxslt-devel libyaml-devel python python-docutils \
cmake imake expat-devel libaio libaio-devel bzr ncurses-devel wget \
libjpeg libjpeg-devel libpng libpng-devel freetype freetype-devel \
pcre-devel curl-devel libmcrypt libmcrypt-devel
|
五、编译安装mysql-boost-5.7.16 方便再次安装创建mysql_install.sh脚本
1、mysql_install.sh内容
?
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
|
#!/bin/bash
#yum update -y
#yum install -y cmake gcc-c++ ncurses-devel gcc make openssl*
#mysql安装脚本
DBDIR='/data/mysql'#mysql数据存储目录
MYSQLDIR='/usr/local/mysql'# mysql安装目录
PASSWD='123456'# mysql root密码 安装完成可远程ip登陆
[ -d $DBDIR ] || mkdir$DBDIR -p
idmysql &> /dev/null
if[ $? -ne0 ];then
useraddmysql -s /sbin/nologin-M
fi
chown-R mysql:mysql $DBDIR
cd/usr/local/src
tar-xvf mysql-boost-5.7.16.tar.gz
cdmysql-5.7.16
cmake . -DCMAKE_INSTALL_PREFIX=$MYSQLDIR \
-DMYSQL_DATADIR=$DBDIR \
-DSYSCONFDIR=/etc\
-DWITH_INNOBASE_STORAGE_ENGINE=1 \
-DWITH_ARCHIVE_STORAGE_ENGINE=1 \
-DWITH_BLACKHOLE_STORAGE_ENGINE=1 \
-DWITH_READLINE=1 \
-DWITH_LIBWRAP=0 \
-DMYSQL_UNIX_ADDR=/tmp/mysql.sock \
-DWITH_SSL=system \
-DWITH_ZLIB=system \
-DWITH_BOOST=/usr/local/src/mysql-5.7.16/boost/boost_1_59_0\
-DDEFAULT_CHARSET=utf8 \
-DDEFAULT_COLLATION=utf8_general_ci
if[ $? != 0 ];then
echo"cmake error!"
exit1
fi
make&& makeinstall
if[ $? -ne0 ];then
echo"install mysql is failed!"&& /bin/false
fi
sleep2
chown-R mysql:mysql $MYSQLDIR
chown-R root:root $MYSQLDIR
cp$MYSQLDIR/support-files/my-default.cnf /etc/my.cnf
echoexportPATH=$PATH:$MYSQLDIR/bin:$MYSQLDIR/lib>>/etc/profile
source/etc/profile
cat>> /etc/my.cnf << EOF
character_set_server = utf8
basedir = $MYSQLDIR
datadir = $DBDIR
port = 3306
server_id = 1
socket = /tmp/mysql.sock
explicit_defaults_for_timestamp=true
EOF
sed-i 's/sql_mode=.*/sql_mode=NO_ENGINE_SUBSTITUTION,STRICT_TRANS_TABLES,NO_AUTO_CREATE_USER/g'/etc/my.cnf
source/etc/profile
sleep5
cd$MYSQLDIR
cpsupport-files/mysql.server /etc/init.d/mysqld
chmod700 /etc/init.d/mysqld
mysql_ssl_rsa_setup
rm-rf $DBDIR
mysqld --initialize --user=mysql
if[ $? -ne0 ];then
echo"install mysql is failed!"&& /bin/false
fi
#/etc/init.d/mysqld stop
mysqld_safe --user=mysql --skip-grant-tables --skip-networking &
sleep5
echo"update user set authentication_string=Password('$PASSWD') where user='root'; flush privileges;"| mysql mysql
echo"set password=Password('$PASSWD'); flush privileges;"| mysql -u root -p$PASSWD --connect-expired-password
sleep5
echo"GRANT ALL PRIVILEGES ON *.* TO root@'%' IDENTIFIED BY '$PASSWD'; FLUSH PRIVILEGES; "| mysql -u root -p$PASSWD
/etc/init.d/mysqldrestart
if[ $? -ne0 ];then
echo"install mysql is failed!"&& /bin/false
fi
IDSO=`cat/etc/ld.so.conf| grep$MYSQLDIR/lib| wc-l `
if[ $IDSO -eq0 ];then
echo"$MYSQLDIR/lib">> /etc/ld.so.conf
ldconfig
fi
chkconfig mysqld on
|
2、给 mysql_install.sh 可执行权限
?
|
1
|
chmod+x mysql_install.sh
|
3、运行mysql_install.sh
?
|
1
|
./mysql_install.sh
|
六、编译安装php7 创建php安装脚本php7_install.sh
1、vim php7_install.sh
?
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
|
#!/bin/bash
if[ $( find/ -name mysql | wc-l ) -gt 1 ];then
echo" mysql is install "
else
yum install-y mysql
fi
cd/usr/local/src
tar-xzvf php-7.1.0.tar.gz
cd./php-7.1.0
./configure\
--prefix=/usr/local/php7\
--exec-prefix=/usr/local/php7\
--with-config-file-path=/usr/local/php7/etc\
--with-curl \
--with-freetype-dir\
--with-gd \
--with-gettext \
--with-iconv-dir\
--with-kerberos \
--with-libdir=lib64 \
--with-libxml-dir\
--with-mysqli \
--with-openssl \
--with-pcre-regex \
--with-pdo-mysql \
--with-pdo-sqlite \
--with-pear \
--with-png-dir\
--with-xmlrpc \
--with-xsl \
--with-zlib \
--with-zlib-dir\
--with-mhash \
--with-mcrypt \
--with-openssl-dir\
--with-jpeg-dir\
--enable-fpm \
--enable-bcmath \
--enable-libxml \
--enable-inline-optimization \
--enable-gd-native-ttf \
--enable-mbregex \
--enable-mbstring \
--enable-opcache \
--enable-pcntl \
--enable-shmop \
--enable-soap \
--enable-sockets \
--enable-sysvsem \
--enable-xml \
--enable-zip
make&& makeinstall
# 中文php画图取消这个参数，不然会出现乱码
# --enable-gd-jis-conv \
|
2、给 php7_install.sh 可执行权限
?
|
1
|
chmod+x php7_install.sh
|
3、执行 php7_install.sh
?
|
1
|
./php7_install.sh
|
4、编译安装libmemcached-1.0.18
vim libmemcached_install.sh
?
|
1
2
3
4
5
6
7
8
9
|
#/!bin/bash
cd/usr/local/src
tar-zxvf libmemcached-1.0.18.tar.gz
cd./libmemcached-1.0.18
./configure--prefix=/usr/local/libmemcached
make&& makeinstall
chmod+x libmemcached_install.sh
./libmemcached_install.sh
|
5、编译安装php-memcached
vim memcached_install.sh
?
|
1
2
3
4
5
6
7
8
9
10
|
#!/bin/bash
cd/usr/local/src/php-memcached
/usr/local/php7/bin/phpize
./configure--with-libmemcached-dir=/usr/local/libmemcached\
--with-php-config=/usr/local/php7/bin/php-config\
--disable-memcached-sasl
make&& makeinstall
chmod+x memcached_install.sh
./memcached_install.sh
|
留意编完成生成文件路径
?
|
1
|
Installing shared extensions: /usr/local/php7/lib/php/extensions/no-debug-non-zts-20160303/
|
七、编译安装openssl-1.1.0c
vim openssl_install.sh
?
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
|
#!/bin/bash
#openssl install
cd/usr/local/src
tar-xvf openssl-1.1.0c.tar.gz
cd/usr/local/src/openssl-1.1.0c
./config--openssldir=/usr/local/ssl
make&& makeinstall
./configshared --openssldir=/usr/local/ssl
makeclean
make&& makeinstall
IDSO=`cat/etc/ld.so.conf| grep/usr/local/lib64| wc-l `
if[ $IDSO -eq0 ];then
echo"/usr/local/lib64">> /etc/ld.so.conf
fi
ldconfig
chmod+x openssl_install.sh
./openssl_install.sh
|
八、编译安装nginx-1.11.7
vim nginx_install.sh
?
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
|
#!/bin/bash
# nginx install
idnginx &> /dev/null
if[ $? -ne0 ];then
groupadd -r nginx
useradd-g nginx -r nginx
fi
cd/usr/local/src
tar-xvf nginx-1.11.7.tar.gz
cd/usr/local/src/nginx-1.11.7
./configure--prefix=/usr/local/nginx\
--sbin-path=/usr/sbin/nginx\
--conf-path=/etc/nginx/nginx.conf \
--error-log-path=/var/log/nginx/error.log \
--http-log-path=/var/log/nginx/access.log \
--pid-path=/var/run/nginx.pid \
--lock-path=/var/run/nginx.lock \
--http-client-body-temp-path=/var/cache/nginx/client_temp\
--http-proxy-temp-path=/var/cache/nginx/proxy_temp\
--http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp\
--http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp\
--http-scgi-temp-path=/var/cache/nginx/scgi_temp\
--user=nginx \
--group=nginx \
--with-http_ssl_module \
--with-http_realip_module \
--with-http_addition_module \
--with-http_sub_module \
--with-http_dav_module \
--with-http_flv_module \
--with-http_mp4_module \
--with-http_gunzip_module \
--with-http_gzip_static_module \
--with-http_random_index_module \
--with-http_secure_link_module \
--with-http_stub_status_module \
--with-http_auth_request_module \
--with-threads \
--with-stream \
--with-openssl=/usr/local/src/openssl-1.1.0c \ # openssl 源码解压路径
--with-stream_ssl_module \
--with-http_slice_module \
--with-mail \
--with-mail_ssl_module \
--with-file-aio \
--with-http_v2_module \
--with-ipv6
mkdir-pv /var/cache/nginx/{client_temp,proxy_temp,fastcgi_temp,uwsgi_temp,scgi_temp}
make&& makeinstall
|
2、给nginx_install.sh可执行权限
?
|
1
2
|
chmod+x nginx_install.sh
./nginx_install.sh
|
九、配置PHP7
/usr/local/php7/lib/php/extensions/no-debug-non-zts-20160303/memcached.so
这个路径是 随机可变的所以要注意
留意变完成生成文件路径
Installing shared extensions: /usr/local/php7/lib/php/extensions/no-debug-non-zts-20160303/
?
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
|
cd/usr/local/src/php-7.1.0
cpphp.ini-production /usr/local/php7/etc/php.ini
cp/usr/local/php7/etc/php-fpm.conf.default /usr/local/php7/etc/php-fpm.conf
cp/usr/local/php7/etc/php-fpm.d/www.conf.default /usr/local/php7/etc/php-fpm.d/www.conf
sed-i "s/user = .*/user = nginx/g"/usr/local/php7/etc/php-fpm.d/www.conf
sed-i "s/group = .*/group = nginx/g"/usr/local/php7/etc/php-fpm.d/www.conf
cp./sapi/fpm/init.d.php-fpm /etc/init.d/php-fpm
chmod+x /etc/init.d/php-fpm
chkconfig php-fpm on
cat>> /usr/local/php7/etc/php.ini<< EOF
soap.wsdl_cache_enabled=1
max_input_time = 600
max_execution_time = 300
date.timezone = Asia/Shanghai
post_max_size = 32M
memory_limit = 128M
mbstring.func_overload = 1
extension=/usr/local/php7/lib/php/extensions/no-debug-non-zts-20160303/memcached.so
EOF
cat> /usr/local/nginx/html/index.php<<EOF
<?php
phpinfo();
?>
EOF
service php-fpm start
|
十、配置nginx
1、重命名：/etc/nginx/nginx.conf
?
|
1
|
mv/etc/nginx/nginx.conf /etc/nginx/nginx.conf.back
|
2、新建/etc/nginx/nginx.conf
?
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
|
cat> /etc/nginx/nginx.conf << EOF
user nginx;
worker_processes 1;
error_log /var/log/nginx/error.log warn;
pid /var/run/nginx.pid;
events {
worker_connections 1024;
}
http {
include /etc/nginx/mime.types;
default_type application/octet-stream;
log_format main '\$remote_addr - \$remote_user [\$time_local] "\$request" '
'\$status \$body_bytes_sent "\$http_referer" '
'"\$http_user_agent" "\$http_x_forwarded_for"';
access_log /var/log/nginx/access.log main;
sendfile on;
#tcp_nopush on;
keepalive_timeout 65;
#gzip on;
include /etc/nginx/conf.d/*.conf;
}
EOF
|
3、创建/etc/nginx/conf.d
?
|
1
|
mkdir-p /etc/nginx/conf.d
|
4、创建支持php-fpm web nginx配置
?
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
|
cat> /etc/nginx/conf.d/default.conf << EOF
server {
listen 80;
server_name localhost;
#charset koi8-r;
#access_log logs/host.access.log main;
location / {
root /usr/local/nginx/html;
index index.php index.html index.htm;
}
#error_page 404 /404.html;
# redirect server error pages to the static page /50x.html
#
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root html;
}
# proxy the PHP scripts to Apache listening on 127.0.0.1:80
#
#location ~ \.php$ {
# proxy_pass http://127.0.0.1;
#}
# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
#
location ~ \.php$ {
root /usr/local/nginx/html;
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
include fastcgi_params;
}
location ~* ^.+\.(jpg|jpeg|gif|png|bmp)$ {
access_log off;
root opencart;
expires 30d;
break;
}
}
EOF
|
5、创建nginx启动脚本
vim /etc/init.d/nginx
?
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
|
# chkconfig: 2345 10 90
# description: Start and Stop nginx
PATH=/usr/local/bin:/sbin:/usr/bin:/bin
EXEC=/usr/sbin/nginx
PIDFILE=/var/run/nginx.pid
CONF="/etc/nginx/nginx.conf"
AUTH="1234"
case"$1"in
start)
if[ -f $PIDFILE ]
then
echo"$PIDFILE exists, process is already running or crashed."
else
echo"Starting nginx server..."
$EXEC -c $CONF &
fi
if[ "$?"="0"]
then
echo"nginx is running..."
fi
;;
stop)
if[ ! -f $PIDFILE ]
then
echo"$PIDFILE exists, process is not running."
else
PID=$(cat$PIDFILE)
echo"Stopping..."
kill-9 $PID
PID=$(pidof nginx)
kill-9 $PID
rm-rf /var/run/nginx.pid
sleep2
while[ -x $PIDFILE ]
do
echo"Waiting for nginx to shutdown..."
sleep1
done
echo"nginx stopped"
fi
;;
reload)
$EXEC -s reload
;;
restart|force-reload)
${0} stop
${0} start
;;
*)
echo"Usage: /etc/init.d/nginx {start|stop|restart|force-reload|reload}">&2
exit1
esac
|
6、给 /etc/init.d/nginx 可执行权限
?
|
1
|
chmod+x /etc/init.d/nginx
|
7、设置开机启动
?
|
1
|
chkconfig nginx on
|
8、启动nginx
?
|
1
|
service nginx start
|
十一、测试
?
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
|
[root@QKA169 src]# openssl version
OpenSSL 1.1.0c 10 Nov 2016
mysql -u root -p123456
mysql> show databases;
+--------------------+
| Database |
+--------------------+
| information_schema |
| mysql |
| performance_schema |
| sys |
+--------------------+
4 rows inset(0.00 sec)
看看是否登陆成功。远程带IP是否登陆成功
mysql -u root -h192.168.1.69 -p123456
mysql> show databases;
+--------------------+
| Database |
+--------------------+
| information_schema |
| mysql |
| performance_schema |
| sys |
+--------------------+
4 rows inset(0.00 sec)
mysql: [Warning] Using a password on the commandline interface can be insecure.
Welcome to the MySQL monitor. Commands end with ; or \g.
Your MySQL connection idis 6
Server version: 5.7.16 Source distribution
Copyright (c) 2000, 2016, Oracle and/orits affiliates. All rights reserved.
Oracle is a registered trademark of Oracle Corporation and/orits
affiliates. Other names may be trademarks of their respective
owners.
Type 'help;'or '\h'forhelp. Type '\c'to clearthe current input statement.
mysql>
|
测试nginx 是否能打开
?
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
|
[root@QKA169 html]# ps -ef | grep php-fpm
root 337433 1 0 18:03 ? 00:00:00 php-fpm: master process (/usr/local/php7/etc/php-fpm.conf)
nobody 337434 337433 0 18:03 ? 00:00:00 php-fpm: pool www
nobody 337435 337433 0 18:03 ? 00:00:00 php-fpm: pool www
root 337454 37888 0 18:12 pts/000:00:00 grep--color=auto php-fpm
[root@QKA169 html]# ps -ef | grep nginx
root 337400 1 0 18:01 ? 00:00:00 nginx: master process /usr/sbin/nginx-c /etc/nginx/nginx.conf
nginx 337401 337400 0 18:01 ? 00:00:00 nginx: worker process
root 337456 37888 0 18:13 pts/000:00:00 grep--color=auto nginx
[root@QKA169 html]# netstat -nalp | grep 80
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 337400/nginx: maste
tcp 0 0 192.168.1.69:80 192.168.6.6:54714 TIME_WAIT -
tcp 0 0 192.168.1.69:80 192.168.6.6:54709 TIME_WAIT -
远程打开
http://192.168.1.69/
|
