nginx信号
TERM
,INT
fast shutdown
QUIT
graceful shutdown
HUP
changing configuration, keeping up with a changed time zone (only for FreeBSD and Linux), starting new worker processes with a new configuration, graceful shutdown of old worker processes
USR1
re-opening log files
USR2
upgrading an executable file
WINCH
graceful shutdown of worker processes
编译新版本
查看旧nginx编译参数
# /usr/local/webserver/nginx/sbin/nginx -V
nginx version: nginx/1.12.2
built by gcc 4.8.5 20150623 (Red Hat 4.8.5-28) (GCC)
built with OpenSSL 1.0.2k-fips 26 Jan 2017
TLS SNI support enabled
configure arguments: --prefix=/usr/local/webserver/nginx --user=nobody --group=nobody --with-http_stub_status_module --with-http_ssl_module
编译新版本,注意不用make install
备注1
# tar -xzf nginx-1.14.2.tar.gz
# cd nginx-1.14.2
# yum install -y gcc
# ./configure --prefix=/usr/local/webserver/nginx --user=nobody --group=nobody --with-http_stub_status_module --with-http_ssl_module
# make -j `cat /proc/cpuinfo | grep "^processor" | wc -l`
平滑升级 备注2
拷贝二进制文件
# cp -a /usr/local/webserver/nginx/sbin/nginx /usr/local/webserver/nginx/sbin/nginx.oldbin
# cp -af objs/nginx /usr/local/webserver/nginx/sbin/nginx
cp: overwrite ‘/usr/local/webserver/nginx/sbin/nginx’? y
# ps -ef | grep ngin[x]
root 31862 1 0 11:16 ? 00:00:00 nginx: master process /usr/local/webserver/nginx/sbin/nginx
nobody 31863 31862 0 11:16 ? 00:00:00 nginx: worker process
nobody 31864 31862 0 11:16 ? 00:00:00 nginx: worker process
发送USR2
信号给master
进程 备注3
# kill -s USR2 12029
# ps -ef | grep ngin[x]
root 31862 1 0 11:16 ? 00:00:00 nginx: master process /usr/local/webserver/nginx/sbin/nginx
nobody 31863 31862 0 11:16 ? 00:00:00 nginx: worker process
nobody 31864 31862 0 11:16 ? 00:00:00 nginx: worker process
root 31961 31862 0 11:17 ? 00:00:00 nginx: master process /usr/local/webserver/nginx/sbin/nginx
nobody 31962 31961 0 11:17 ? 00:00:00 nginx: worker process
nobody 31963 31961 0 11:17 ? 00:00:00 nginx: worker process
发送WINCH
信号给旧master
进程
# kill -s WINCH 31862
# ps -ef | grep ngin[x]
root 31862 1 0 11:16 ? 00:00:00 nginx: master process /usr/local/webserver/nginx/sbin/nginx
root 31961 31862 0 11:17 ? 00:00:00 nginx: master process /usr/local/webserver/nginx/sbin/nginx
nobody 31962 31961 0 11:17 ? 00:00:00 nginx: worker process
nobody 31963 31961 0 11:17 ? 00:00:00 nginx: worker process
老master
进程退出
# kill -s QUIT 31862
# ps -ef | grep ngin[x]
root 31961 1 0 11:17 ? 00:00:00 nginx: master process /usr/local/webserver/nginx/sbin/nginx
nobody 31962 31961 0 11:17 ? 00:00:00 nginx: worker process
nobody 31963 31961 0 11:17 ? 00:00:00 nginx: worker process
备注
备注1
make install
实际上只是将编译好的文件拷贝到指定目录,如下
# make install
make -f objs/Makefile install
make[1]: Entering directory `/usr/local/src/nginx-1.12.2'
test -d '/usr/local/webserver/nginx' || mkdir -p '/usr/local/webserver/nginx'
test -d '/usr/local/webserver/nginx' \
|| mkdir -p '/usr/local/webserver/nginx'
test ! -f '/usr/local/webserver/nginx/sbin' \
|| mv '/usr/local/webserver/nginx/sbin' \
'/usr/local/webserver/nginx/sbin.old'
cp objs/nginx '/usr/local/webserver/nginx/sbin'
...
备注2
除了手动一步一步的进行升级之外,也可以执行make upgrade
一步到位。
# cat Makefile
default: build
clean:
rm -rf Makefile objs
build:
$(MAKE) -f objs/Makefile
install:
$(MAKE) -f objs/Makefile install
modules:
$(MAKE) -f objs/Makefile modules
upgrade:
/usr/local/webserver/nginx/sbin/nginx -t
kill -USR2 `cat /usr/local/webserver/nginx/logs/nginx.pid`
sleep 1
test -f /usr/local/webserver/nginx/logs/nginx.pid.oldbin
kill -QUIT `cat /usr/local/webserver/nginx/logs/nginx.pid.oldbin`
备注3
从较老版本升级到新版本时候遇到一个问题,新进程会在3s左右退出,错误日志如下
2019/07/25 17:58:44 [emerg] 15540#0: bind() to 0.0.0.0:80 failed (98: Address already in use)
nginx: [emerg] bind() to 0.0.0.0:80 failed (98: Address already in use)
2019/07/25 17:58:44 [emerg] 15540#0: bind() to 0.0.0.0:80 failed (98: Address already in use)
nginx: [emerg] bind() to 0.0.0.0:80 failed (98: Address already in use)
2019/07/25 17:58:44 [emerg] 15540#0: bind() to 0.0.0.0:80 failed (98: Address already in use)
nginx: [emerg] bind() to 0.0.0.0:80 failed (98: Address already in use)
2019/07/25 17:58:44 [emerg] 15540#0: bind() to 0.0.0.0:80 failed (98: Address already in use)
nginx: [emerg] bind() to 0.0.0.0:80 failed (98: Address already in use)
2019/07/25 17:58:44 [emerg] 15540#0: bind() to 0.0.0.0:80 failed (98: Address already in use)
nginx: [emerg] bind() to 0.0.0.0:80 failed (98: Address already in use)
2019/07/25 17:58:44 [emerg] 15540#0: still could not bind()
nginx: [emerg] still could not bind()
查了一下进程监听到端口的流程:
strace
查了下,发新新master进程在打开了日志文件描述符之后,会尝试创建新的socket,猜测新老版本差异太大了,无法共享同socket。
[pid 16930] socket(AF_INET, SOCK_STREAM, IPPROTO_IP) = 8
[pid 16930] setsockopt(8, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0
[pid 16930] ioctl(8, FIONBIO, [1]) = 0
[pid 16930] bind(8, {sa_family=AF_INET, sin_port=htons(80), sin_addr=inet_addr("0.0.0.0")}, 16) = -1 EADDRINUSE (Address already in use)
[pid 16930] write(4, "2019/07/25 18:14:43 [emerg] 1693"..., 94) = 94
[pid 16930] write(2, "nginx: [emerg] bind() to 0.0.0.0"..., 72) = 72
[pid 16930] close(8) = 0
[pid 16930] nanosleep({0, 500000000}, NULL) = 0
[pid 16930] socket(AF_INET, SOCK_STREAM, IPPROTO_IP) = 8
[pid 16930] setsockopt(8, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0
[pid 16930] ioctl(8, FIONBIO, [1]) = 0
[pid 16930] bind(8, {sa_family=AF_INET, sin_port=htons(80), sin_addr=inet_addr("0.0.0.0")}, 16) = -1 EADDRINUSE (Address already in use)
[pid 16930] write(4, "2019/07/25 18:14:43 [emerg] 1693"..., 94) = 94
[pid 16930] write(2, "nginx: [emerg] bind() to 0.0.0.0"..., 72) = 72
[pid 16930] close(8)