分离部署lnmp
环境说明：
| 服务器类型 | ip地址 | 应用 | 操作系统 |
|---|---|---|---|
| nginx | 192.168.100.100 | nginx | centos7/redhat7 |
| mysql | 192.168.100.96 | mysql | centos7/redhat7 |
| php | 192.168.100.27 | php | centos7/redhat7 |
1.安装nginx
# 关闭防火墙和selinux
[root@100 ~]# systemctl stop firewalld
[root@100 ~]# systemctl disable firewalld
[root@100 ~]# getenforce
Disabled
# 创建系统用户nginx
[root@100 ~]# groupadd -r nginx
[root@100 ~]# useradd -r -M -s /sbin/nologin -g nginx nginx
# 安装依赖环境
[root@100 ~]# yum -y install pcre-devel openssl openssl-devel gd-devel gcc gcc-c++ #gd-devel 需要epel源
安装过程略....
[root@100 ~]# yum -y groups mark install 'Development Tools'
Loaded plugins: product-id, search-disabled-repos, subscription-manager
This system is not registered with an entitlement server. You can use subscription-manager to register.
There is no installed groups file.
Maybe run: yum groups mark convert (see man yum)
Marked install: Development Tools
# 创建日志存放目录
[root@100 ~]# mkdir -p /var/log/nginx
[root@100 ~]# chown -R nginx.nginx /var/log/nginx
# 下载nginx
[root@100 ~]# cd /usr/src/
[root@100 src]# wget http://nginx.org/download/nginx-1.16.1.tar.gz
--2018-08-20 11:19:09-- http://nginx.org/download/nginx-1.16.1.tar.gz
Resolving nginx.org (nginx.org)... 95.211.80.227, 206.251.255.63, 2606:7100:1:69::3f, ...
Connecting to nginx.org (nginx.org)|95.211.80.227|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 980831 (958K) [application/octet-stream]
Saving to: ‘nginx-1.16.1.tar.gz’
100%[======================================================>] 980,831 15.9KB/s in 43s
2018-08-20 11:19:52 (22.3 KB/s) - ‘nginx-1.16.1.tar.gz’ saved [980831/980831]
# 编译安装
[root@100 src]# ls
debug kernels nginx-1.16.1.tar.gz
[root@100 src]# tar xf nginx-1.16.1.tar.gz
[root@100 src]# cd nginx-1.16.1
[root@100 nginx-1.16.1]# ./configure \
--prefix=/usr/local/nginx \
--user=nginx \
--group=nginx \
--with-debug \
--with-http_ssl_module \
--with-http_realip_module \
--with-http_image_filter_module \
--with-http_gunzip_module \
--with-http_gzip_static_module \
--with-http_stub_status_module \
--http-log-path=/var/log/nginx/access.log \
--error-log-path=/var/log/nginx/error.log
[root@100 nginx-1.16.1]# make -j $(grep 'processor' /proc/cpuinfo | wc -l) && make install
安装过程略....
# 配置环境变量
[root@100 ~]# echo 'export PATH=/usr/local/nginx/sbin:$PATH' > /etc/profile.d/nginx.sh
[root@100 ~]# . /etc/profile.d/nginx.sh
# 服务控制方式，使用nginx命令
-t //检查配置文件语法
-v //输出nginx的版本
-c //指定配置文件的路径
-s //发送服务控制信号，可选值有{stop|quit|reopen|reload}
# 启动nginx
[root@100 ~]# nginx
[root@100 ~]# ss -antl
State Recv-Q Send-Q Local Address:Port Peer Address:Port
LISTEN 0 128 *:80 *:*
LISTEN 0 128 *:22 *:*
LISTEN 0 100 127.0.0.1:25 *:*
LISTEN 0 128 :::22 :::*
LISTEN 0 100 ::1:25 :::*
2.安装mysql
# 关闭防火墙和selinux
[root@96 ~]# systemctl stop firewalld
[root@96 ~]# systemctl disable firewalld
[root@96 ~]# getenforce
Disabled
# 安装依赖包
[root@96 ~]# yum -y install ncurses-devel openssl-devel openssl cmake mariadb-devel
# 安装编译工具
[root@27 php-7.2.8]# yum -y install gcc gcc-c++
# 创建用户和组
[root@96 src]# groupadd -r -g 306 mysql
[root@96 src]# useradd -M -s /sbin/nologin -g 306 -u 306 mysql
# 下载二进制格式的mysql软件包
[root@96 ~]# cd /usr/src/
[root@96 src]# wget https://downloads.mysql.com/archives/get/file/mysql-5.7.22-linux-glibc2.12-x86_64.tar.gz
# 解压软件至/usr/local/
[root@96 src]# ls
debug kernels mysql-5.7.22-linux-glibc2.12-x86_64.tar.gz
[root@96 src]# tar xf mysql-5.7.22-linux-glibc2.12-x86_64.tar.gz -C /usr/local/
[root@96 ~]# ls /usr/local/
bin games lib libexec sbin src
etc include lib64 mysql-5.7.22-linux-glibc2.12-x86_64 share
[root@96 ~]# cd /usr/local/
[root@96 local]# ln -sv mysql-5.7.22-linux-glibc2.12-x86_64/ mysql
‘mysql’ -> ‘mysql-5.7.22-linux-glibc2.12-x86_64/’
# 修改目录/usr/local/mysql的属主属组
[root@96 ~]# chown -R mysql.mysql /usr/local/mysql
# 添加环境变量
[root@96 ~]# ls /usr/local/mysql
bin COPYING docs include lib man README share support-files
[root@96 ~]# echo 'export PATH=/usr/local/mysql/bin:$PATH' > /etc/profile.d/mysql.sh
[root@96 ~]# . /etc/profile.d/mysql.sh
[root@96 ~]# echo $PATH
/usr/local/mysql/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/root/bin
# 建立数据存放目录
[root@96 mysql]# mkdir /opt/data
[root@96 mysql]# chown -R mysql.mysql /opt/data/
[root@96 mysql]# ll /opt/
total 0
drwxr-xr-x 2 mysql mysql 6 Aug 14 16:54 data
# 初始化数据库
[root@96 ~]# /usr/local/mysql/bin/mysqld --initialize --user=mysql --datadir=/opt/data/
2018-08-15T07:57:46.168380Z 0 [Warning] TIMESTAMP with implicit DEFAULT value is deprecated. Please use --explicit_defaults_for_timestamp server option (see documentation for more details).
2018-08-15T07:57:50.542516Z 0 [Warning] InnoDB: New log files created, LSN=45790
2018-08-15T07:57:50.927286Z 0 [Warning] InnoDB: Creating foreign key constraint system tables.
2018-08-15T07:57:51.071260Z 0 [Warning] No existing UUID has been found, so we assume that this is the first time that this server has been started. Generating a new UUID: e8600890-a060-11e8-b1a2-000c294c50b4.
2018-08-15T07:57:51.074566Z 0 [Warning] Gtid table is not ready to be used. Table 'mysql.gtid_executed' cannot be opened.
2018-08-15T07:57:51.078089Z 1 [Note] A temporary password is generatedfor root@localhost: hfGdwnViq6,,
# 请注意，这个命令的最后会生成一个临时密码，此处密码是hfGdwnViq6,,
# 配置mysql
[root@96 ~]# ln -sv /usr/local/mysql/include/ /usr/local/include/mysql
‘/usr/local/include/mysql’ -> ‘/usr/local/mysql/include/’
[root@96 ~]# echo '/usr/local/mysql/lib' > /etc/ld.so.conf.d/mysql.conf
[root@96 ~]# ldconfig -v
# 生成配置文件
[root@96 ~]# cat > /etc/my.cnf <<EOF
[mysqld]
basedir = /usr/local/mysql
datadir = /opt/data
socket = /tmp/mysql.sock
port = 3306
pid-file = /opt/data/mysql.pid
user = mysql
skip-name-resolve
EOF
# 配置服务启动脚本
[root@96 ~]# cp -a /usr/local/mysql/support-files/mysql.server /etc/init.d/mysqld
[root@96 ~]# sed -ri 's#^(basedir=).*#\1/usr/local/mysql#g' /etc/init.d/mysqld
[root@96 ~]# sed -ri 's#^(datadir=).*#\1/opt/data#g' /etc/init.d/mysqld
# 启动mysql
[root@96 ~]# service mysqld start
Starting MySQL.. SUCCESS!
[root@96 ~]# ss -antl
State Recv-Q Send-Q Local Address:Port Peer Address:Port
LISTEN 0 128 *:22 *:*
LISTEN 0 100 127.0.0.1:25 *:*
LISTEN 0 128 :::22 :::*
LISTEN 0 100 ::1:25 :::*
LISTEN 0 80 :::3306 :::*
# 修改密码
# 使用临时密码登录
[root@96 ~]# mysql -uroot -p‘hfGdwnViq6,,’
Welcome to the MySQL monitor. Commands end with ; or \g.
Your MySQL connection id is 2
Server version: 5.7.22
Copyright (c) 2000, 2018, Oracle and/or its affiliates. All rights reserved.
Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
mysql>
# 设置新密码
mysql> set password = password('shicailun123!');
Query OK, 0 rows affected, 1 warning (0.00 sec)
mysql> quit
Bye
# 使用新密码登录
[root@96 ~]# mysql -uroot -p‘shicailun123！’
Welcome to the MySQL monitor. Commands end with ; or \g.
Your MySQL connection id is 2
Server version: 5.7.22
Copyright (c) 2000, 2018, Oracle and/or its affiliates. All rights reserved.
Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
mysql>
3.安装php
# 关闭防火墙和selinux
[root@27 ~]# systemctl stop firewalld
[root@27 ~]# systemctl disable firewalld
[root@27 ~]# getenforce
Disabled
# 配置网络源，epel源，php源
[root@27 ~]# cd /etc/yum.repos.d/
[root@27 yum.repos.d]# wget http://mirrors.163.com/.help/CentOS7-Base-163.repo
[root@27 ~]# sed -i 's/\$releasever/7/g' /etc/yum.repos.d/CentOS7-Base-163.repo
[root@27 ~]# sed -i 's/^enabled=.*/enabled=1/g' /etc/yum.repos.d/CentOS7-Base-163.repo
[root@27 ~]# yum -y install epel-release
[root@27 ~]# wget https://mirror.webtatic.com/yum/el7/webtatic-release.rpm
[root@27 ~]# rpm -Uvh webtatic-release.rpm
# 安装依赖包
[root@27 ~]# yum -y install libxml2 libxml2-devel openssl openssl-devel bzip2 bzip2-devel libcurl libcurl-devel libicu-devel libjpeg libjpeg-devel libpng libpng-devel openldap-devel libpcre-devel freetype freetype-devel gmp gmp-devel libmcrypt libmcrypt-devel readline readline-devel libxslt libxslt-devel mhash mhash-devel php72w-mysqlnd
# 安装编译工具
[root@27 php-7.2.8]# yum -y install gcc gcc-c++
# 下载php
[root@27 ~]# cd /usr/src/
[root@27 src]# wget http://cn.php.net/distributions/php-7.2.8.tar.xz
# 编译安装php
[root@27 src]# tar xf php-7.2.8.tar.xz
[root@27 src]# cd php-7.2.8
[root@27 php-7.2.8]# ./configure --prefix=/usr/local/php7 \
--with-config-file-path=/etc \
--enable-fpm \
--enable-inline-optimization \
--disable-debug \
--disable-rpath \
--enable-shared \
--enable-soap \
--with-openssl \
--enable-bcmath \
--with-iconv \
--with-bz2 \
--enable-calendar \
--with-curl \
--enable-exif \
--enable-ftp \
--with-gd \
--with-jpeg-dir \
--with-png-dir \
--with-zlib-dir \
--with-freetype-dir \
--with-gettext \
--enable-json \
--enable-mbstring \
--enable-pdo \
--with-mysqli=mysqlnd \
--with-pdo-mysql=mysqlnd \
--with-readline \
--enable-shmop \
--enable-simplexml \
--enable-sockets \
--enable-zip \
--enable-mysqlnd-compression-support \
--with-pear \
--enable-pcntl \
--enable-posix
[root@27 php-7.2.8]# make && make install
# 安装后配置
[root@27 ~]# echo 'export PATH=/usr/local/php7/bin:$PATH' > /etc/profile.d/php7.sh
[root@27 ~]# source /etc/profile.d/php7.sh
[root@27 php-7.2.8]# which php
/usr/local/php7/bin/php
[root@27 php-7.2.8]# php -v
PHP 7.2.8 (cli) (built: Aug 16 2018 13:27:30) ( NTS )
Copyright (c) 1997-2018 The PHP Group
Zend Engine v3.2.0, Copyright (c) 1998-2018 Zend Technologies
# 配置php-fpm（必须在此目录下操作）
[root@27 php-7.2.8]# cp php.ini-production /etc/php.ini
[root@27 php-7.2.8]# cp sapi/fpm/init.d.php-fpm /etc/init.d/php-fpm
[root@27 php-7.2.8]# chmod +x /etc/rc.d/init.d/php-fpm
[root@27 php-7.2.8]# cp /usr/local/php7/etc/php-fpm.conf.default /usr/local/php7/etc/php-fpm.conf
[root@27 php-7.2.8]# cp /usr/local/php7/etc/php-fpm.d/www.conf.default /usr/local/php7/etc/php-fpm.d/www.conf
# 编辑php-fpm的配置文件（/usr/local/php7/etc/php-fpm.conf）最后添加以下几行内容：
[root@27 php-7.2.8]# vim /usr/local/php7/etc/php-fpm.conf
pm.max_children = 50 # 最多同时提供50个进程提供50个并发服务
pm.start_servers = 5 # 启动时启动5个进程
pm.min_spare_servers = 2 # 最小空闲进程数
pm.max_spare_servers = 8 # 最大空闲进程数
[root@27 ~]# tail /usr/local/php7/etc/php-fpm.conf
; file.
; Relative path can also be used. They will be prefixed by:
; - the global prefix if it's been set (-p argument)
; - /usr/local/php7 otherwise
include=/usr/local/php7/etc/php-fpm.d/*.conf
pm.max_children = 50
pm.start_servers = 5
pm.min_spare_servers = 2
pm.max_spare_servers = 8
# 启动php-fpm
[root@27 ~]# service php-fpm start
Starting php-fpm done
# 查看9000端口是否启动
[root@27 ~]# ss -antl
State Recv-Q Send-Q Local Address:Port Peer Address:Port
LISTEN 0 128 *:111 *:*
LISTEN 0 5 192.168.122.1:53 *:*
LISTEN 0 128 *:22 *:*
LISTEN 0 128 127.0.0.1:631 *:*
LISTEN 0 128 127.0.0.1:9000 *:*
LISTEN 0 128 :::111 :::*
LISTEN 0 128 :::22 :::*
LISTEN 0 128 ::1:631 :::
4.安装后配置
nginx服务器端
# 修改/usr/local/nginx/conf/nginx.conf配置文件
[root@100 ~]# vim /usr/local/nginx/conf/nginx.conf
http {
server {
listen 80;
server_name localhost; ##注：若想用域名访问，请修改localhost为域名，并修改hosts文件
location / {
root html;
index index.php index.html index.htm; ##注：添加index.php
}
}
location ~ \.php(.*)$ {
root /www/zabbix;
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
fastcgi_split_path_info ^((?U).+\.php)(/?.+)$;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
include fastcgi_params;
}
}
# 检查配置文件是否有误
[root@100 ~]# nginx -t
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
# 启动服务并查看端口
[root@100 ~]# nginx
[root@100 ~]# ss -antl
State Recv-Q Send-Q Local Address:Port Peer Address:Port
LISTEN 0 128 *:80 *:*
LISTEN 0 128 *:22 *:*
LISTEN 0 100 127.0.0.1:25 *:*
LISTEN 0 128 :::22 :::*
LISTEN 0 100 ::1:25 :::*
# 在存放网页的目录中创建index.php文件（与配置文件中的“root”项对应）
[root@100 ~]# cat > /usr/local/nginx/html/index.php <<EOF
> <?php
> phpinfo();
> ?>
> EOF
php服务器端
# 配置/usr/local/php7/etc/php-fpm.d/www.conf配置文件，修改如下内容
[root@27 ~]# vim /usr/local/php7/etc/php-fpm.d/www.conf
listen = 192.168.100.27:9000 ##注：监听的IP地址改为php服务器的IP地址，端口为9000
listen.allowed_clients = 192.168.100.100 ##注：允许192.168.100.100(nginx)这台服务器访问
# 在php服务器上创建/var/www/根目录
[root@27 ~]# mkdir /var/www/
# 在创建的目录中创建index.php文件，文件的内容如下
[root@27 ~]# cat > /var/www/index.php <<EOF
> <?php
> phpinfo();
> ?>
> EOF
# 重启php-fpm服务，并查看端口
[root@27 ~]# service php-fpm restart
Gracefully shutting down php-fpm . done
Starting php-fpm done
[root@27 ~]# ss -antl
State Recv-Q Send-Q Local Address:Port Peer Address:Port
LISTEN 0 128 *:111 *:*
LISTEN 0 5 192.168.122.1:53 *:*
LISTEN 0 128 *:22 *:*
LISTEN 0 128 127.0.0.1:631 *:*
LISTEN 0 128 192.168.100.27:9000 *:*
访问验证：
域名访问：
IP访问：
489
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
