LNMP

Posted 2021-05-31 fxx013

lnmp搭建（分离部署）

环境

系统	主机名	ip	功能
rhel8	node1	192.168.94.141	nginx
rhel8	node2	192.168.94.143	mysql
rhel8	node4	192.168.94.130	php

准备工作：

//防火墙selinux关闭
systemctl disable --now firewalld
sed -ri \'/SELINUX=enforcing/s/enforcing/disable/g\' /etc/selinux/config
//配置网络源
curl -o /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-8.repo
sed -i -e \'/mirrors.cloud.aliyuncs.com/d\' -e \'/mirrors.aliyuncs.com/d\' /etc/yum.repos.d/CentOS-Base.repo
sed -i \'s|$releasever|8|\' /etc/yum.repos.d/CentOS-Base.repo
yum install -y https://mirrors.aliyun.com/epel/epel-release-latest-8.noarch.rpm
sed -i \'s|^metalink|#metalink|\' /etc/yum.repos.d/epel*
sed -i \'s|^#baseurl=https://download.fedoraproject.org/pub|baseurl=https://mirrors.aliyun.com|\' /etc/yum.repos.d/epel*
sed -i \'s|$releasever|8|\' /etc/yum.repos.d/epel*
yum clean all
yum makecache

node1安装nginx(源码)

//创建nginx用户
[root@node1 ~]# useradd -r -M -s /sbin/nologin nginx

//安装开发工具组和依赖包
[root@node1 ~]# yum -y install pcre-devel openssl openssl-devel gd-devel gcc gcc-c++ make 
[root@node1 ~]# yum -y groups mark install \'development tools\'

//创建日志存放目录
[root@node1 ~]# mkdir -p /var/log/nginx
[root@node1 ~]# chown -R  nginx.nginx /var/log/nginx
//下载源码包
[root@node1 ~]# cd /usr/src/
[root@node1 src]# wget http://nginx.org/download/nginx-1.20.0.tar.gz
[root@node1 src]# ll
...
-rw-r--r--. 1 root root 1061070 Apr 20 22:46 nginx-1.20.0.tar.gz
//解压
[root@node1 src]# tar xf nginx-1.20.0.tar.gz 
[root@node1 src]# cd nginx-1.20.0/
//编译安装
[root@node1 nginx-1.20.0]# ./configure \\
> --prefix=/usr/local/nginx \\	#指定路径
> --user=nginx \\	#指定用户
> --group=nginx \\	#指定组
> --with-debug \\	#启用debug测试
> --with-http_ssl_module \\	#启用ssl证书模块
> --with-http_realip_module \\	#启用http真实ip模块
> --with-http_image_filter_module \\	#启用http图像过滤器模块
> --with-http_gunzip_module \\	#启用http压缩模块
> --with-http_gzip_static_module \\	#启用静态压缩
> --with-http_stub_status_module \\	#启用状态页面
> --http-log-path=/var/log/nginx/access.log \\	#指定日http访问日志路径
> --error-log-path=/var/log/nginx/error.log	#指定报错日志路径

//启用多核心加速安装
[root@node1 nginx-1.20.0]# make -j $(grep \'processor\' /proc/cpuinfo | wc -l) && make install

//添加环境变量
[root@node1 nginx-1.20.0]# echo \'export PATH=/usr/local/nginx/sbin:$PATH\' > /etc/profile.d/nginx.sh
[root@node1 nginx-1.20.0]# source /etc/profile.d/nginx.sh
[root@node1 nginx-1.20.0]# which nginx
/usr/local/nginx/sbin/nginx

node2安装mysql(二进程包安装)

[root@node2 ~]# useradd -r -M -s /sbin/nologin mysql
[root@node2 ~]# id mysql
uid=993(mysql) gid=989(mysql) groups=989(mysql)
[root@node2 ~]# yum -y install ncurses-devel openssl-devel openssl cmake mariadb-devel gcc gcc-c++ ncurses-compat-libs*

[root@node2 ~]# wget https://downloads.mysql.com/archives/get/p/23/file/mysql-5.7.31-linux-glibc2.12-x86_64.tar.gz
[root@node2 ~]# ll
total 367720
-rw-------. 1 root root      1179 Jan  6 18:03 anaconda-ks.cfg
-rw-r--r--. 1 root root 376537503 May 30 21:36 mysql-5.7.31-linux-glibc2.12-x86_64.tar.gz
[root@node2 ~]# tar xf mysql-5.7.31-linux-glibc2.12-x86_64.tar.gz -C /usr/local/
[root@node2 ~]# ln -s /usr/local/mysql-5.7.31-linux-glibc2.12-x86_64/ /usr/local/mysql
[root@node2 ~]# chown -R mysql.mysql /usr/local/mysql*
[root@node2 ~]# mkdir /opt/data
[root@node2 ~]# chown -R mysql.mysql /usr/local/mysql

[root@node2 ~]# echo \'export PATH=/usr/local/mysql/bin:$PATH\'> /etc/profile.d/mysql.sh
[root@node2 ~]# source /etc/profile.d/mysql.sh
[root@node2 ~]# which mysql
/usr/local/mysql/bin/mysql

[root@node2 ~]# mysqld --initialize --user=mysql --datadir=/opt/data
...
2021-05-30T13:40:43.855205Z 1 [Note] A temporary password is generated for root@localhost: yyll2lwogs=X

[root@node2 ~]# echo  \'yyll2lwogs=X\' > .mysqltmppass

[root@node2 ~]# echo \'/usr/local/mysql/lib/\'> /etc/ld.so.conf.d/mysql.co
nf
[root@node2 ~]# ldconfig 

[root@node2 ~]# cat >> /etc/my.cnf <<EOF
[mysqld]
basedir = /usr/local/mysql
datadir = /opt/data
socket = /tmp/mysql.sock
port = 3306
pid-file = /opt/data/mysql.pid
user = mysql
skip-name-resolve
EOF

[root@node2 ~]# cp /usr/local/mysql/support-files/mysql.server /etc/init.d/mysqld
[root@node2 ~]# cat >> /etc/init.d/mysqld <<EOF
> basedir=/usr/local/mysql
> datadir=/opt/data
> EOF
[root@node2 ~]# service mysqld start
Starting MySQL.Logging to \'/opt/data/node2.err\'.
 SUCCESS! 
[root@node2 ~]# mysql -uroot -p\'yyll2lwogs=X\'
mysql> set password = password(\'123456\');
Query OK, 0 rows affected, 1 warning (0.01 sec)

node3安装php（yum）

[root@node4 ~]# yum -y install libxml2 libxml2-devel openssl openssl-devel bzip2 bzip2-devel libcurl libcurl-devel libicu-devel libjpeg libjpeg-devel libpng libpng-devel openldap-devel  pcre-devel freetype freetype-devel gmp gmp-devel libmcrypt libmcrypt-devel readline readline-devel libxslt libxslt-devel mhash mhash-devel php-mysqlnd
[root@node4 ~]# yum -y install php-*

配置

node1

[root@node1 ~]# vim /usr/local/nginx/conf/nginx.conf
...
location  / {
            root /www;
            index index.php index.html;
        }
....
      location ~ \\.php$ {
            root           /www;
            fastcgi_pass   192.168.94.130:9000;
            fastcgi_index  index.php;
            fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
            include        fastcgi_params;
        }

[root@node1 ~]# vim /usr/local/nginx/conf/fastcgi_params
...
fastcgi_param  SCRIPT_FILENAME    $document_root$fastcgi_script_name;

[root@node1 ~]# mkdir /www/
[root@node1 ~]# chown -R nginx.nginx /www/

node4

[root@node4 ~]# useradd  -M -s /sbin/nologin nginx
[root@node4 ~]# yum -y install nfs-*
[root@node4 ~]# mkdir  /www
[root@node4 ~]# chown -R nginx.nginx /www/
[root@node4 ~]# cat > /www/index.php <EOF
  >  <?php
  >      phpinfo();
  > ?>
[root@node4 ~]# vim /etc/exports

/www 192.168.94.130/24(rw,all_squash,root_squash,anonuid=991,anongid=989) #需跟nginx机id相同


[root@node4 ~]# vim /etc/php-fpm.d/www.conf 
...
;listen = /run/php-fpm/www.sock	#加；注释
listen = 0.0.0.0:9000	#添加监听端口
...
listen.allowed_clients = 192.168.94.141	#添加允许监听服务端


[root@node4 ~]# systemctl status nfs-server.service 
[root@node4 ~]# systemctl start php-fpm
[root@node4 ~]# ss -antl|grep 9000
LISTEN    0         128                0.0.0.0:9000             0.0.0.0:*   

[root@node1 ~]# yum -y install nfs-*
[root@node1 ~]# showmount -e 192.168.94.130
Export list for 192.168.94.130:
/www 192.168.94.130/24
[root@node1 ~]# mount -t nfs 192.168.94.130:/www /www/
[root@node1 ~]# ss -antl
State   Recv-Q  Send-Q   Local Address:Port     Peer Address:Port  
LISTEN  0       128            0.0.0.0:111           0.0.0.0:*     
LISTEN  0       128            0.0.0.0:80            0.0.0.0:*     
LISTEN  0       128            0.0.0.0:22            0.0.0.0:*     
LISTEN  0       128               [::]:111              [::]:*     
LISTEN  0       128               [::]:22               [::]:*

node2

mysql> grant all on *.* to root@192.168.94.141 identified by \'123456\';
Query OK, 0 rows affected, 1 warning (0.01 sec)

mysql> flush privileges;
Query OK, 0 rows affected (0.00 sec)

mysql> quit

测试访问