lnmp搭建（三台主机）

lnmp搭建（三台服务器）

---

1. 环境说明

系统平台	IP	需要安装的服务
centos7 redhat7	192.168.76.131	nginx-1.12.0
centos7 redhat7	192.168.76.132	mysql-5.7
centos7 redhat7	192.168.76.133	php

2. nginx安装与配置

2.1 nginx安装

//关闭防火墙
[root@hua ~]# systemctl stop firewalld
[root@hua ~]# setenforce 0

//创建用户
[root@hua ~]# useradd -r -M -s /sbin/nologin nginx

//安装依赖环境
[root@hua ~]# yum -y install pcre-devel openssl openssl-devel gd-devel gcc gcc-c++
[root@hua ~]# yum -y groups mark install 'Development Tools'

//创建日志存放目录
[root@hua ~]# mkdir -p /var/log/nginx
[root@hua ~]# chown -R nginx.nginx /var/log/nginx

//下载安装包
[root@hua ~]# wget http://nginx.org/download/nginx-1.12.0.tar.gz
[root@hua ~]# tar xf nginx-1.12.0.tar.gz

//编译安装
[root@hua ~]# cd nginx-1.12.0
[root@hua nginx-1.12.0]# ./configure \
--prefix=/usr/local/nginx \
--user=nginx \
--group=nginx \
--with-debug \
--with-http_ssl_module \
--with-http_realip_module \
--with-http_image_filter_module \
--with-http_gunzip_module \
--with-http_gzip_static_module \
--with-http_stub_status_module \
--http-log-path=/var/log/nginx/access.log \
--error-log-path=/var/log/nginx/error.log

[root@hua ~]# make && make install

2.2 nginx配置

//配置环境变量
[root@hua ~]# echo 'export PATH=/usr/local/nginx/sbin:$PATH' > /etc/profile.d/nginx.sh
 [root@hua ~]# . /etc/profile.d/nginx.sh
 
 //检查文件配置
[root@hua ~]# nginx -t
[root@hua ~]# nginx -t
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful

//启动服务
 [root@hua ~]# nginx
 [root@hua ~]# ss -antl
 [root@hua ~]# ss -antl
State      Recv-Q Send-Q   Local Address:Port                  Peer Address:Port              
LISTEN     0      128                  *:80                               *:*                  
LISTEN     0      128                  *:22                               *:*                  
LISTEN     0      100          127.0.0.1:25                               *:*                  
LISTEN     0      128                 :::22                              :::*                  
LISTEN     0      100                ::1:25                              :::*              

3. mysql安装

//关闭防火墙
[root@hua ~]# systemctl stop firewalld
[root@hua ~]# setenforce 0

//安装依赖包
[root@hua ~]# yum -y install ncurses-devel openssl-devel openssl cmake mariadb-devel

//创建用户和组
[root@hua ~]# groupadd -r -g 306 mysql
[root@hua ~]# useradd -M -s /sbin/nologin -g 306 -u 306 mysql
[root@hua ~]# wget https://downloads.mysql.com/archives/get/file/mysql-5.7.22-linux-glibc2.12-x86_64.tar.gz
[root@hua ~]# ls
anaconda-ks.cfg                      mysql-5.7.22-linux-glibc2.12-x86_64.tar.gz
[root@hua ~]# tar xf mysql-5.7.22-linux-glibc2.12-x86_64.tar.gz -C /usr/local/
[root@hua ~]# cd /usr/local

//创建链接
[root@hua local]# ln -sv mysql-5.7.22-linux-glibc2.12-x86_64/ mysql
"mysql" -> "mysql-5.7.22-linux-glibc2.12-x86_64/"

//修改目录/usr/local/mysql的属主属组
[root@hua local]# chown -R mysql.mysql /usr/local/mysql

//设置环境变量
[root@hua local]# echo 'export PATH=/usr/local/mysql/bin:$PATH' > /etc/profile.d/mysql.sh
[root@hua local]# . /etc/profile.d/mysql.sh
[root@hua local]# echo $PATH
/usr/local/mysql/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/root/bin

//创建数据存放目录
[root@hua local]# mkdir /opt/data
[root@hua local]# chown -R mysql.mysql /opt/data/

//初始化数据库
[root@hua local]# /usr/local/mysql/bin/mysqld --initialize --user=mysql --datadir=/opt/data/
2019-08-08T17:11:33.640254Z 0 [Warning] TIMESTAMP with implicit DEFAULT value is deprecated. Please use --explicit_defaults_for_timestamp server option (see documentation for more details).
2019-08-08T17:11:33.937800Z 0 [Warning] InnoDB: New log files created, LSN=45790
2019-08-08T17:11:33.976766Z 0 [Warning] InnoDB: Creating foreign key constraint system tables.
2019-08-08T17:11:34.034121Z 0 [Warning] No existing UUID has been found, so we assume that this is the first time that this server has been started. Generating a new UUID: 92b05b89-b9ff-11e9-8402-000c29b9f16b.
2019-08-08T17:11:34.034930Z 0 [Warning] Gtid table is not ready to be used. Table 'mysql.gtid_executed' cannot be opened.
2019-08-08T17:11:34.035758Z 1 [Note] A temporary password is generated for root@localhost: Szo_qo,!u29/
//localhost后面是随机密码

[root@hua local]# echo 'Szo_qo,!u29/' >/root/passwd
[root@hua ~]# ln -sv /usr/local/mysql/include/ /usr/local/include/mysql
"/usr/local/include/mysql" -> "/usr/local/mysql/include/"
[root@hua ~]# echo '/usr/local/mysql/lib' > /etc/ld.so.conf.d/mysql.conf

//生成配置文件
[root@hua ~]# cat > /etc/my.cnf <<EOF
> [mysqld]
> basedir = /usr/local/mysql
> datadir = /opt/data
> socket = /tmp/mysql.sock
> port = 3306
> pid-file = /opt/data/mysql.pid
> user = mysql
> skip-name-resolve
> EOF

//配置服务启动脚本
[root@hua ~]# cp -a /usr/local/mysql/support-files/mysql.server /etc/init.d/mysqld
[root@hua ~]# sed -ri 's#^(basedir=).*#\1/usr/local/mysql#g' /etc/init.d/mysqld
[root@hua ~]# sed -ri 's#^(datadir=).*#\1/opt/data#g' /etc/init.d/mysqld

//启动服务
[root@hua ~]# service mysqld start
Starting MySQL.Logging to '/opt/data/hua.err'.
. SUCCESS! 
[root@hua ~]# ss -antl
State      Recv-Q Send-Q Local Address:Port                Peer Address:Port              
LISTEN     0      128                *:22                             *:*                  
LISTEN     0      100        127.0.0.1:25                             *:*                  
LISTEN     0      128               :::22                            :::*                  
LISTEN     0      100              ::1:25                            :::*                  
LISTEN     0      80                :::3306                          :::*                  
[root@hua ~]# systemctl stop firewalld

//修改密码
[root@hua ~]# cat passwd 
Szo_qo,!u29/
[root@hua ~]# mysql -uroot -p
Enter password: 
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 2
Server version: 5.7.22

Copyright (c) 2000, 2018, Oracle and/or its affiliates. All rights reserved.

Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

mysql> set password = password('hua123');
Query OK, 0 rows affected, 1 warning (0.00 sec)

//给php那台主机权限
mysql> grant all on *.* to root@192.168.133 identified by 'hua123';
Query OK, 0 rows affected, 1 warning (0.01 sec)

mysql> flush privileges;
Query OK, 0 rows affected (0.00 sec)


mysql> quit
Bye

4. 安装php

//关闭防火墙
[root@hua ~]# systemctl stop firewalld
[root@hua ~]# setenforce 0

//安装编译软件
[root@hua ~]# yum -y install gcc gcc-c++ make 

//下载网络源
[root@hua ~]# cd /etc/yum.repos.d/
[root@hua yum.repos.d]# wget http://mirrors.163.com/.help/CentOS7-Base-163.repo
[root@hua yum.repos.d]# sed -i 's/\$releasever/7/g' /etc/yum.repos.d/CentOS7-Base-163.repo
[root@hua yum.repos.d]# sed -i 's/^enabled=.*/enabled=1/g' /etc/yum.repos.d/CentOS7-Base-163.repo
[root@hua yum.repos.d]# ls
CentOS7-Base-163.repo  redhat.repo  xx.repo

//把原来的本地源删除
[root@hua yum.repos.d]# rm -rf xx.repo 
[root@hua yum.repos.d]# yum clean all
[root@hua ~]# yum -y install epel-release
[root@hua ~]# rpm -Uvh https://mirror.webtatic.com/yum/el7/webtatic-release.rpm

//安装依赖包
[root@hua ~]# yum -y install libxml2 libxml2-devel openssl openssl-devel bzip2 bzip2-devel libcurl libcurl-devel libicu-devel libjpeg libjpeg-devel libpng libpng-devel openldap-devel  libpcre-devel freetype freetype-devel gmp gmp-devel libmcrypt libmcrypt-devel readline readline-devel libxslt libxslt-devel mhash mhash-devel php72w-mysqlnd

[root@hua ~]# wget http://cn.php.net/distributions/php-7.2.8.tar.xz
[root@hua ~]# tar xf php-7.2.8.tar.xz

//编译安装
[root@hua ~]# cd php-7.2.8
[root@hua php-7.2.8]# ./configure --prefix=/usr/local/php7  \
--with-config-file-path=/etc \
--enable-fpm \
--enable-inline-optimization \
--disable-debug \
--disable-rpath \
--enable-shared \
--enable-soap \
--with-openssl \
--enable-bcmath \
--with-iconv \
--with-bz2 \
--enable-calendar \
--with-curl \
--enable-exif  \
--enable-ftp \
--with-gd \
--with-jpeg-dir \
--with-png-dir \
--with-zlib-dir \
--with-freetype-dir \
--with-gettext \
--enable-json \
--enable-mbstring \
--enable-pdo \
--with-mysqli=mysqlnd \
--with-pdo-mysql=mysqlnd \
--with-readline \
--enable-shmop \
--enable-simplexml \
--enable-sockets \
--enable-zip \
--enable-mysqlnd-compression-support \
--with-pear \
--enable-pcntl \
--enable-posix

[root@hua php-7.2.8]# make && make install

//设置环境变量
[root@hua php-7.2.8]# echo 'export PATH=/usr/local/php7/bin:$PATH' > /etc/profile.d/php7.sh
[root@hua php-7.2.8]# source /etc/profile.d/php7.sh

//查看版本号，出来了就没问题
[root@hua php-7.2.8]# php -v
PHP 7.2.8 (cli) (built: Aug  9 2019 01:52:28) ( NTS )
Copyright (c) 1997-2018 The PHP Group
Zend Engine v3.2.0, Copyright (c) 1998-2018 Zend Technologies

[root@hua php-7.2.8]# cp php.ini-production /etc/php.ini
cp：是否覆盖"/etc/php.ini"？ y

//配置php-fpm
[root@hua php-7.2.8]# cp sapi/fpm/init.d.php-fpm /etc/init.d/php-fpm
[root@hua php-7.2.8]# chmod +x /etc/rc.d/init.d/php-fpm
[root@hua php-7.2.8]# cp /usr/local/php7/etc/php-fpm.conf.default /usr/local/php7/etc/php-fpm.conf
[root@hua php-7.2.8]# cp /usr/local/php7/etc/php-fpm.d/www.conf.default /usr/local/php7/etc/php-fpm.d/www.conf
[root@hua ~]# vim /usr/local/php7/etc/php-fpm.d/www.conf
listen = 192.168.76.133:9000  // 修改ip
listen.allowed_clients = 192.168.76.131   //添加此行
[root@hua php-7.2.8]# vim /usr/local/php7/etc/php-fpm.conf
//在配置文件最后加上下面几行
pm.max_children = 50    
pm.start_servers = 5    
pm.min_spare_servers = 2    
pm.max_spare_servers = 8    

//创建php页面存放目录
[root@hua ~]# mkdir /var/www/             
[root@hua ~]# cd /var/www/          
[root@hua www]# vim index.php
<?php
        phpinfo();
?>

//启动php
[root@hua php-7.2.8]# service php-fpm start
Starting php-fpm  done
[root@hua php-7.2.8]# ss -antl
State      Recv-Q Send-Q Local Address:Port                Peer Address:Port              
LISTEN     0      128                *:22                             *:*                  
LISTEN     0      100        127.0.0.1:25                             *:*                  
LISTEN     0      128        127.0.0.1:9000                           *:*                  
LISTEN     0      128               :::22                            :::*                  
LISTEN     0      100              ::1:25                            :::*                  

5. 安装后配置

nginx主机端

//修改配置文件
[root@hua ~]# vim /usr/local/nginx/conf/nginx.conf

server {
        listen       80;
        server_name  localhost;

        #charset koi8-r;
        #access_log  logs/host.access.log  main;

        location / {
            root   html;
            index  index.php index.html index.htm;   //加上index.php
        }

//取消注释并修改
 location ~ \.php$ {
            root           html;
            fastcgi_pass   192.168.76.133:9000; 
            fastcgi_index  index.php;
            fastcgi_param  SCRIPT_FILENAME $document_root $fastcgi_script_name;  //修改成$document_root
            include        fastcgi_params;
        }

//创建测试页面
[root@hua ~]# cd /usr/local/nginx/html/
[root@hua html]# cat > index.php <<EOF
> <?php
>     phpinfo();
> ?>
> EOF
[root@hua html]# nginx -s reload

6.验证