LNMP部署

LNMP是众所周知的Web网站服务器架构环境，linux系统+nginx为HTTP和反向代理服务器+mysql数据库+php脚本语言组合成一个高性能、轻量、稳定、扩展性强的Web网站服务器架构环境。

注意：在安装操作系统的安装软件配置部分，建议选择“Server with GUI”，并选择“Development Tools”和“Compatibility Libraries”两项附加软件。同时在确保操作系统中gcc、libgcc、gcc-c++等编译器已经正确安装。

1、nignx安装

#依赖文件安装： 

yum -y install zlib pcre pcre-devel openssl openssl-devel

#解压nginx安装文件

tar zxvf nginx-1.16.1.tar.gz

#创建nginx用户

useradd -s /sbin/nologin www
id www

#编译安装nignx：分别为configure  、make 、make install

[root@localhost nginx-1.16.1]# ./configure
--user=www
--group=www
--prefix=/usr/local/nginx
--sbin-path=/usr/local/nginx/sbin/nginx
--conf-path=/usr/local/nginx/conf/nginx.conf
--error-log-path=/usr/local/nginx/logs/error.log
--http-log-path=/usr/local/nginx/logs/access.log
--pid-path=/var/run/nginx.pid
--lock-path=/var/lock/subsys/nginx
--with-http_stub_status_module
--with-http_ssl_module
--with-http_gzip_static_module
--with-pcre

[root@localhost nginx-1.14.0]# make
[root@localhost nginx-1.14.0]# make install

#对conf目录下的nginx.conf配置文件进行编辑

[root@localhost nginx]# cd conf/
[root@localhost conf]# ls
nginx.conf

实例配置：
[root@localhost conf]# vim nginx.conf

user www;
worker_processes 2;
worker_cpu_affinity 01 10;
error_log logs/error.log;
pid /var/run/nginx.pid;
worker_rlimit_nofile 65535;

#error_log logs/error.log notice;
#error_log logs/error.log info;

events {
use epoll;
worker_connections 1024;
}

http {
include mime.types;
default_type application/octet-stream;

log_format main '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';

access_log logs/access.log main;

sendfile on;
tcp_nopush on;

#keepalive_timeout 0;
keepalive_timeout 65;
server_names_hash_bucket_size 128;
client_max_body_size 20m;
client_header_buffer_size 32k;
large_client_header_buffers 4 128k;

gzip on;
gzip_min_length 1k;
gzip_buffers 4 16k;
gzip_http_version 1.1;
gzip_comp_level 2;
gzip_types text/plain application/x-javascript text/css application/xml;
gzip_vary on;

server {
listen 80;

server_name localhost 192.168.0.77;

#charset koi8-r;

access_log logs/host.access.log main;

location / {
root html;
index index.html index.htm;
}

error_page 404 /404.html;

# redirect server error pages to the static page /50x.html
#
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root html;
}

# proxy the PHP scripts to Apache listening on 127.0.0.1:80
#
#location ~ .php$ {
# proxy_pass http://127.0.0.1;
#}

# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
#
#location ~ .php$ {
# root html;
# fastcgi_pass 127.0.0.1:9000;
# fastcgi_index index.php;
# fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name;
# include fastcgi_params;
#}

# deny access to .htaccess files, if Apache's document root
# concurs with nginx's one
#
#location ~ /.ht {
# deny all;
#}

# another virtual host using mix of IP-, name-, and port-based configuration
#
#server {
# listen 8000;
# listen somename:8080;
# server_name somename alias another.alias;

# location / {
# root html;
# index index.html index.htm;
# }
#}

# HTTPS server
#
#server {
# listen 443 ssl;
# server_name localhost;

# ssl_certificate cert.pem;
# ssl_certificate_key cert.key;

# ssl_session_cache shared:SSL:1m;
# ssl_session_timeout 5m;

# ssl_ciphers HIGH:!aNULL:!MD5;
# ssl_prefer_server_ciphers on;

# location / {
# root html;
# index index.html index.htm;
# }
#}

}

#通过./nginx -t 测试nginx是否安装成功；

#通过./nginx -v、 ./nginx -V 查看nignx版本 ；-V参数可查看编辑安装的具体属性

[root@localhost sbin]# ./nginx -t
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
[root@localhost sbin]# ./nginx -v
nginx version: nginx/1.14.2
[root@localhost sbin]# ./nginx -V
nginx version: nginx/1.14.2
built by gcc 4.8.5 20150623 (Red Hat 4.8.5-39) (GCC)
built with OpenSSL 1.0.2k-fips 26 Jan 2017
TLS SNI support enabled
configure arguments: --user=www --group=www --prefix=/usr/local/nginx --sbin-path=/usr/local/nginx/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --error-log-path=/usr/local/nginx/logs/error.log --http-log-path=/usr/local/nginx/logs/access.log --pid-path=/var/run/nginx.pid --lock-path=/var/lock/subsys/nginx --with-http_stub_status_module --with-http_ssl_module --with-http_gzip_static_module --with-pcre

#启动nginx方法：在nginx安装目录下的sbin目录中  ./nginx 即可

[root@localhost sbin]# ./nginx
[root@localhost ~]# ps -ef | grep nginx
root 7672 1 0 22:38 ? 00:00:00 nginx: master process ./nginx
www 7673 7672 0 22:38 ? 00:00:00 nginx: worker process
www 7674 7672 0 22:38 ? 00:00:00 nginx: worker process
root 7830 2707 0 22:52 pts/1 00:00:00 grep --color=auto nginx
[root@localhost ~]# ps -ef | grep 7672
root 7672 1 0 22:38 ? 00:00:00 nginx: master process ./nginx
www 7673 7672 0 22:38 ? 00:00:00 nginx: worker process
www 7674 7672 0 22:38 ? 00:00:00 nginx: worker process
root 7832 2707 0 22:53 pts/1 00:00:00 grep --color=auto 7672

 #查看主页内容

[root@localhost nginx]# cd html/
[root@localhost html]# ll
total 8
-rw-r--r--. 1 root root 537 Dec 20 16:54 50x.html
-rw-r--r--. 1 root root 612 Dec 20 16:54 index.html

#查看访问记录（这里由于还未访问，log文件大小为0）

[root@localhost nginx]# cd logs/
[root@localhost logs]# ll
total 0
-rw-r--r--. 1 root root 0 Dec 20 17:54 access.log
-rw-r--r--. 1 root root 0 Dec 20 17:54 error.log
-rw-r--r--. 1 root root 0 Dec 20 17:54 host.access.log

#注意：一般需要对iptables 进行清空，网页打开时才不会被拒绝 
[root@localhost logs]# iptables -F
#若iptables -F不行，可以关于iptables拒绝访问nginx网页的解决方法：
1、检查是否安装iptables；最好先关闭默认的firewall
[root@localhost conf]# systemctl stop firewalld.service 
[root@localhost conf]# systemctl disable firewalld.service 
Removed symlink /etc/systemd/system/multi-user.target.wants/firewalld.service.
Removed symlink /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service.
2、下载iptables
[root@localhost conf]# yum install iptables-services.x86_64 -y
3、插入策略
[root@localhost sysconfig]# iptables -I INPUT -p tcp -d 192.168.74.74/24 --dport 80 -j ACCEPT 
[root@localhost sysconfig]# iptables --list
Chain INPUT (policy ACCEPT)
target prot opt source destination 
ACCEPT tcp -- anywhere 192.168.74.0/24 tcp dpt:http
[root@localhost sysconfig]# service iptables save
iptables: Saving firewall rules to /etc/sysconfig/iptables:[ OK ]
打开网页不会再被拒绝 

2、mysql安装

#安装依赖源

yum -y install make gcc-c++ cmake bison-devel ncurses-devel bison perl perl-devel perl perl-devel

#解压mysql至指定路径下

tar -zxvf mysql-boost-5.7.28.tar.gz -C /usr/local

#创建mysql组和用户

groupadd mysql

useradd -r -g mysql -s /bin/false mysql

#mysql 5.4版本后通过cmake来进行编译、make、make install

cmake -DCMAKE_INSTALL_PREFIX=/usr/local/mysql/ -DMYSQL_DATADIR=/data1/mysql/data -DDEFAULT_CHARSET=all

-DDEFAULT_CHARSET=utf8

-DDEFAULT_COLLATION=utf8_general_ci

-DWITH_INNOBASE_STORAGE_ENGINE=1

-DWITH_MYISAM_STORAGE_ENGINE=1

-DMYSQL_USER=mysql

-DMYSQL_TCP_PORT=3306

-DWITH_BOOST=boost

-DENABLED_LOCAL_INFILE=1

-DWITH_PARTITION_STORAGE_ENGINE=1

-DMYSQL_UNIX_ADDR=/tmp/mysqld.sock

-DWITH_EMBEDDED_SERVER=1

make

make install

#mysql安装好后，需要初始化，注意这里初始化会随机产生密码

./mysqld --initialize --user=mysql --basedir=/usr/local/mysql --datadir=/data1/mysql/data

XQv=)LAQ1j0i

#编辑my.cnf文件，对mysql配置属性进行添加。注意：由于linux系统自带my.cnf文件，最好先删除原有文件，在重新创建。

vim /etc/my.cnf

[mysqld]

datadir=/db/data

socket=/tmp/mysqld.sock

symbolic-links=0

log-error=/var/log/mysqld.log

:wq!

#将mysql启动脚本复制到开机启动脚本中，并修改权限后启动mysql。

cp /usr/local/mysql/support-files/mysql.server /etc/init.d/mysqld

chmod 755 /etc/init.d/mysqld

chkconfig mysqld on

service mysqld start

#登录mysql

[root@localhost bin]# ./mysql -uroot -p

Enter password: #输入刚才的随机密码“XQv=)LAQ1j0i”

Welcome to the MySQL monitor. Commands end with ; or g.

Your MySQL connection id is 2

Server version: 5.7.28

Copyright (c) 2000, 2019, Oracle and/or its affiliates. All rights reserved.

Oracle is a registered trademark of Oracle Corporation and/or its

affiliates. Other names may be trademarks of their respective

owners.

Type 'help;' or 'h' for help. Type 'c' to clear the current input statement.

mysql>

mysql> SET PASSWORD = PASSWORD('Lsy@139.com');　　　　　　　　 #新密码设置

Query OK, 0 rows affected, 1 warning (0.01 sec)

mysql> ALTER USER 'root'@'localhost' PASSWORD EXPIRE NEVER; 　　　　#应用密码永不过期

Query OK, 0 rows affected (0.00 sec)mysql> flush privileges; 　　　　　　　　　#刷新

Query OK, 0 rows affected (0.00 sec)

3、安装PHP7

#安装依赖关系

yum install -y libjpeg libjpeg-devel libpng libpng-devel freetype freetype-devel libxml2 libxml2-devel zlib zlib-devel curl curl-devel openssl openssl-devel

#解压php

tar -zxvf php-7.2.3.tar.gz

#创建php安装目录。然后编译安装php  

[root@localhost local]# mkdir php7

[root@localhost local]# cd app/php-7.2.3/

[root@localhost php-7.2.3]# ./configure --prefix=/usr/local/php7 --enable-fpm --with-fpm-user=www --with-fpm-group=www --with-pdo-mysql=mysqlnd --with-mysqli=mysqlnd --with-zlib --with-curl --with-gd --with-jpeg-dir --with-png-dir --with-freetype-dir --with-openssl --enable-mbstring --enable-xml --enable-session --enable-ftp --enable-pdo -enable-tokenizer --enable-zip

make 

make install

#将php.ini-production和sapi/fpm/php-fpm.service文件，分别拷贝至/usr/local/php7/lib/php.ini  /usr/lib/systemd/system/目录下

[root@localhost php-7.2.3]# cp php.ini-production /usr/local/php7/lib/php.ini

[root@localhost php-7.2.3]# cp sapi/fpm/php-fpm.service /usr/lib/systemd/system/

#修改php-fpm配置文件www.conf

www.conf 文件位于/usr/local/php7/etc/php-fpm.conf内，注意需要将php-fpm.conf.default文件改名为php-fpm.conf，其中该文件大部分都被注释掉，最后末尾有个include=/usr/local/php7/etc/php-fpm.d/*.conf 表示所有fpm配置都在/usr/local/php7/etc/php-fpm.d/下的.conf文件中，所以切换至/usr/local/php7/etc/php-fpm.d/目录下，注意将www.conf.default文件,改名为www.conf 并编辑。

###为什么要修改php-fpm模块的配置文件？###

###因为Nginx不仅是一个Web服务器，也是一个功能强大的代理服务器，除了进行http请求的代理外，也可以进行许多其他协议请求的代理。

为了能够使Nginx理解FastCGI协议，Nginx提供了一个FastCGI模块来将http请求映射为对应的FastCGI请求。

PHP-FPM是一个第三方的FastCGI进程管理器。最先它是作为PHP的一个补丁来开发的，现在PHP-FPM已经集成到了PHP源码中，在安装PHP的时候，通过指定“--enable-fpm”选项即可启用PHP-FPM功能。

PHP-FPM管理的进程包含master进程和worker进程两种。master进程只有一个，主要负责监听端口，接收来自Web Server的请求，而worker进程则一般有多个(具体数量根据实际需要配置)，每个进程内部都嵌了一个PHP解释器，是PHP代码真正执行的地方。Nginx就可以将请求发送给PHP-FPM了，也就实现了Nginx与PHP-FPM的集成。###

cd /usr/local/php7/etc

[root@localhost etc]# cp php-fpm.conf.default php-fpm.conf 

[root@localhost etc]# ll

total 20

-rw-r--r--. 1 root root 1244 May 17 15:36 pear.conf

-rw-r--r--. 1 root root 4468 May 17 15:36 php-fpm.conf

-rw-r--r--. 1 root root 4468 May 17 16:18 php-fpm.conf.default

drwxr-xr-x. 2 root root 46 May 17 16:16 php-fpm.d

[root@localhost etc]# cd php-fpm.d/

[root@localhost php-fpm.d]# cp www.conf.default www.conf 

[root@localhost php-fpm.d]# ll

total 40

-rw-r--r--. 1 root root 18596 May 17 15:36 www.conf

-rw-r--r--. 1 root root 18596 May 17 16:16 www.conf.default

[root@localhost php-fpm.d]# vim www.conf            #可修改pm配置

user = www

group = www

listen = 127.0.0.1:9000

pm = dynamic

pm.max_children = 100

pm.start_servers = 10

pm.min_spare_servers = 5

pm.max_spare_servers = 50

:wq!

#启动php-fpm模块

cd /usr/local/php7/sbin

[root@localhost sbin]# ./php-fpm 

[root@localhost sbin]# ps -ef | grep php-fpm 

root 55345 1 0 16:31 ? 00:00:00 php-fpm: master process (/usr/local/php7/etc/php-fpm.conf)

www 55346 55345 0 16:31 ? 00:00:00 php-fpm: pool www

www 55347 55345 0 16:31 ? 00:00:00 php-fpm: pool www

www 55348 55345 0 16:31 ? 00:00:00 php-fpm: pool www

www 55349 55345 0 16:31 ? 00:00:00 php-fpm: pool www

www 55350 55345 0 16:31 ? 00:00:00 php-fpm: pool www

www 55351 55345 0 16:31 ? 00:00:00 php-fpm: pool www

www 55352 55345 0 16:31 ? 00:00:00 php-fpm: pool www

www 55353 55345 0 16:31 ? 00:00:00 php-fpm: pool www

www 55354 55345 0 16:31 ? 00:00:00 php-fpm: pool www

www 55355 55345 0 16:31 ? 00:00:00 php-fpm: pool www

root 55359 114912 0 16:31 pts/1 00:00:00 grep --color=auto php-fpm

4、修改nginx的配置文件来支持php

[root@localhost ~]# cd /usr/local/nginx/conf/

[root@localhost conf]# vim nginx.conf

在server下修改或者添加location ~ .php$参数如下：

server {

listen 80;

server_name localhost 192.168.74.74;

#charset koi8-r;

access_log logs/host.access.log main;

location / {

root html;

index index.html index.htm index.php;

}

error_page 404 /404.html;

# redirect server error pages to the static page /50x.html

#

error_page 500 502 503 504 /50x.html;

location = /50x.html {

root html;

}

# proxy the PHP scripts to Apache listening on 127.0.0.1:80

#

location ~ .php$ {

root html;

fastcgi_pass 127.0.0.1:9000;

fastcgi_index index.php;

fastcgi_param SCRIPT_FILENAME /usr/local/nginx/html$fastcgi_script_name;

include fastcgi_params;

}

# proxy_pass http://127.0.0.1;

#}

.....

:wq!

#重启nignx

[root@localhost conf]# killall -9 nginx

[root@localhost conf]# cd ../sbin/

[root@localhost sbin]# ./nginx

#添加php测试文件phpinfo.php

[root@localhost sbin]# cd ../html/

[root@localhost html]# vim phpinfo.php

<?php phpinfo(); ?>

:wq!

打开浏览器http://192.168.74.74/phpinfo.php验证

/usr/local/php7/bin/php -m #查看PHP安装的模块信息

验证php连接mysql数据库的两种方式：

cd /usr/local/nginx/html/

[root@localhost html]# vim mysqli.php

<?php

$conn = mysqli_connect('127.0.0.1', 'root', 'Lsy@139.com', 'mysql');

if(!$conn){

die("数据库连接错误" . mysqli_connect_error());

}else{

echo"数据库连接成功";

}

:x!

打开浏览器http://192.168.74.74/mysqli.php验证

[root@localhost html]# vim pdo-mysql.php

<?php

try{

$pdo=new pdo('mysql:host=127.0.0.1;dbname=mysql','root','Lsy@139.com');

}catch(PDDException $e){

echo "数据库连接错误";

}

echo "数据库连接成功";

?>

:x!

打开浏览器http://192.168.74.74/pdo-mysql.php验证