手记

Nginx_PHP_PHP-FPM网站环境部署手册

1. 下载稳定版源代码安装文件:


nginx-1.6.2.tar.gz

http://nginx.org/download/


php-5.5.23.tar.gz

http://php.net/downloads.php


PCRE(使Nginx支持HTTP Rewrite模块):pcre-8.35.tar.gz

ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/


可利用TCMalloc来优化Nginx的性能,需要如下两个包,一般在物理机上配置可提高性能,如果是虚拟机就不要配置这个:

libunwind-1.1.tar.gz(64位系统才需要)

http://ftp.yzu.edu.tw/nongnu/libunwind/

gperftools-2.1.tar.gz

http://download.csdn.net/detail/chunmanchunman/8201565


libmcrypt-2.5.8.tar.gz

http://sourceforge.net/projects/mcrypt/files/Libmcrypt/2.5.8/


mcrypt-2.6.8.tar.gz

http://sourceforge.net/projects/mcrypt/files/MCrypt/2.6.8/


jpegsrc.v9.tar.gz

http://www.ijg.org/files/


libpng-1.6.17.tar.gz

http://sourceforge.net/projects/libpng/files/libpng16/1.6.17/


freetype-2.5.5.tar.gz

http://ftp.twaren.net/Unix/NonGNU/freetype/


mhash-0.9.9.9.tar.gz

http://sourceforge.net/projects/mhash/files/mhash/0.9.9.9/





2. 编译安装Nginx并配置:


1)检查依赖的软件包,没有的要手动安装:

make gcc gcc-c++ autoconf libjpeg-turbo libjpeg-turbo-devel libpng

libpng-devel freetype freetype-devel libxml2 libxml2-devel zlib 

zlib-devel glibc glibc-devel glib2 glib2-devel bzip2 bzip2-devel ncurses

ncurses-devel curl curl-devel e2fsprogs e2fsprogs-devel krb5-libs

krb5-devel libidn libidn-devel openssl openssl-devel openldap 

openldap-devel openldap-clients openldap-servers portreserve 

gd gd-devel


# yum install e2fsprogs-devel openldap-devel openldap-clients

 openldap-servers portreserve gd gd-devel


2)修改系统内核和资源限制来优化Nginx性能:

# vi /etc/sysctl.conf

net.ipv4.tcp_max_tw_buckets = 10000    # timewait数量

net.ipv4.ip_local_port_range = 1024 65000  # 允许系统打开端口范围

net.ipv4.tcp_tw_recycle = 1   # 启用timewait快速回收,但会引起Android手机连接后台程序频繁超时,所以在APP服务器上设置为0

net.ipv4.tcp_tw_reuse = 1             # 启用timewait重用与新TCP

net.ipv4.tcp_syncookies = 1            # 开启SYN Cookies

net.core.somaxconn = 262144         # 系统能同时发起TCP连接数

net.core.netdev_max_backlog = 262144  #网口比内核处理数据包快时,允许发送到队列的数据包最大数目

net.ipv4.tcp_max_orphans = 262144   # 设置最多多少个TCP套接字不被关联到任何一个用户文件句柄上

net.ipv4.tcp_max_syn_backlog = 262144  

net.ipv4.tcp_synack_retries = 1

net.ipv4.tcp_syn_retries = 1

net.ipv4.tcp_fin_timeout = 1

net.ipv4.tcp_keepalive_time = 30

# /sbin/sysctl -p


# vi /etc/security/limits.conf

*        soft    nofile           10240

*        hard    nofile           65536


3)编译安装pcre-8.35,系统自带的版本过低:

# cd /usr/local/src

# tar xzvf pcre-8.35.tar.gz

# cd pcre-8.35

# ./configure --prefix=/usr/local/pcre

# make && make install


4)编译安装libunwind-1.1和gperftools-2.1,如果是虚拟机不用安装这两个软件包:

# tar xzvf libunwind-1.1.tar.gz

# cd libunwind-1.1

# CFLAGS=-fPIC ./configure

# make CFLAGS=-fPIC

# make CFLAGS=-fPIC install


# tar xzvf gperftools-2.1.tar.gz

# cd gperftools-2.1

# ./configure

# make && make install


# echo "/usr/local/lib" > /etc/ld.so.conf.d/usr_local_lib.conf

# /sbin/ldconfig



5)编译安装Nginx:


# cd /usr/local/src

# tar xzvf nginx-1.6.2.tar.gz

# cd nginx-1.6.2

# vi auto/cc/gcc

# debug             # 注释掉这两行,关闭debug模式

# CFLAGS="$CFLAGS -g"

# ./configure --prefix=/usr/local/nginx --with-pcre=/usr/local/src/pcre-8.35 --with-http_ssl_module --with-http_realip_module --with-http_image_filter_module --with-http_gzip_static_module --with-http_sub_module --with-http_stub_status_module


-----------------------------------------------------------------------------------------------

## 下面的配置方法是在物理机上启用TCMalloc来优化Nginx的性能

# ./configure --user=nginxphp --group=nginxphp --prefix=/usr/local/nginx --with-pcre=/usr/local/src/pcre-8.35 --with-google_perftools_module --with-http_ssl_module --with-http_realip_module --with-http_image_filter_module --with-http_gzip_static_module  --with-http_sub_module --with-http_stub_status_module

------------------------------------------------------------------------------------------------

(说明:--with-pcre指向的是pcre源码解压的目录)


# make

# make install


# vi /etc/profile

export PATH=/usr/local/nginx/sbin:$PATH


# source /etc/profile


# nginx -V

nginx version: nginx/1.6.2

built by gcc 4.4.7 20120313 (Red Hat 4.4.7-4) (GCC) 

TLS SNI support enabled

configure arguments: --prefix=/usr/local/nginx --with-pcre=/usr/local/src/pcre-8.35 --with-http_ssl_module --with-http_realip_module --with-http_image_filter_module --with-http_gzip_static_module --with-http_sub_module --with-http_stub_status_module



6)为Google-Perftools TCMalloc添加线程目录,这步是配置启用TCMalloc功能的,如果没有启用TCMalloc就不用配置:


# mkdir /tmp/tcmalloc

# chmod 0777 /tmp/tcmalloc


7)修改Nginx配置文件,这步是配置启用TCMalloc功能的,如果没有启用TCMalloc就不用配置:


# vi /usr/local/nginx/conf/nginx.conf

user  nobody nobody;


#pid        logs/nginx.pid;

google_perftools_profiles /tmp/tcmalloc;


8)启动,停止,热重启Nginx服务:


# /usr/local/nginx/sbin/nginx


# ps -ef|grep nginx

root     30048     1  0 18:18 ?        00:00:00 nginx: master process /usr/local/nginx/sbin/nginx

nginxphp 30049 30048  0 18:18 ?        00:00:00 nginx: worker process

# lsof -n |grep tcmall

nginx     30049  nginxphp    9w      REG                8,3        0    2106703 /tmp/tcmalloc.30049


# kill -QUIT master_pid

# kill -QUIT ‘cat /usr/local/nginx/logs/nginx.pid’


# kill -HUP ‘cat /usr/local/nginx/logs/nginx.pid’


6)添加Nginx为系统服务:

# vi /etc/rc.d/init.d/nginx


#!/bin/bash


# nginx Startup script for the Nginx HTTP Server

# it is v.0.0.2 version.

# chkconfig: - 85 15

# description: Nginx is a high-performance web and proxy server.

# It has a lot of features, but it's not for everyone.

# processname: nginx

# pidfile: /var/run/nginx.pid

# config: /usr/local/nginx/conf/nginx.conf


nginxd=/usr/local/nginx/sbin/nginx

nginx_config=/usr/local/nginx/conf/nginx.conf

nginx_pid=/usr/local/nginx/logs/nginx.pid


RETVAL=0

prog="nginx"


# Source function library.

. /etc/rc.d/init.d/functions


# Source networking configuration.

. /etc/sysconfig/network


# Check that networking is up.

[ ${NETWORKING} = "no" ] && exit 0

[ -x $nginxd ] || exit 0


# Start nginx daemons functions.


start() {

  if [ -e $nginx_pid ];then

    echo "nginx already running...."

    exit 1

  fi

  echo -n $"Starting $prog: "

  daemon $nginxd -c ${nginx_config}

  RETVAL=$?

  echo

  [ $RETVAL = 0 ] && touch /var/lock/subsys/nginx

  return $RETVAL

}


# Stop nginx daemons functions.


stop() {

  echo -n $"Stopping $prog: "

  killproc $nginxd

  RETVAL=$?

  echo

  [ $RETVAL = 0 ] && rm -f /var/lock/subsys/nginx /usr/local/nginx/logs/nginx.pid

}


reload() {

  echo -n $"Reloading $prog: "

  #kill -HUP `cat ${nginx_pid}`

  killproc $nginxd -HUP

  RETVAL=$?

  echo

}


# See how we were called.


case "$1" in

  start)

    start

    ;;

  stop)

    stop

    ;;

  reload)

    reload

    ;;

  restart)

    stop

    start

    ;;

  status)

    status $prog

    RETVAL=$?

    ;;

  *)


  echo $"Usage: $prog {start|stop|restart|reload|status|help}"

  exit 1

esac


exit $RETVAL



# chmod 775 /etc/rc.d/init.d/nginx

# chkconfig nginx on

# chkconfig --level 24 nginx off


3. 编译安装PHP (5.3版以后PHP-FPM已集成到PHP内核中) 并配置:


1)检查依赖的软件包,没有的要手动安装:

make  gcc  gcc-c++  libxml2  libxml2-devel  autoconf libjpeg-turbo

libjpeg-turbo-devel  libpng  libpng-devel  freetype  freetype-devel 

zlib  zlib-devel  glibc  glibc-devel  glib2  glib2-devel


# yum install libjpeg-turbo-devel


2)更新几个PHP依赖的软件源码包:

# cd /usr/local/src

# tar xzvf jpegsrc.v9.tar.gz

# cd jpeg-9

# ./configure --prefix=/usr/local/jpeg9 --enable-shared --enable-static

# make && make install


# tar xzvf libpng-1.6.17.tar.gz

# cd libpng-1.6.17

# ./configure --prefix=/usr/local/png --enable-shared

# make && make install


# tar xzvf freetype-2.5.5.tar.gz

# cd freetype-2.5.5

# ./configure --prefix=/usr/local/freetype --enable-shared

# make && make install


# tar xzvf libmcrypt-2.5.8.tar.gz

# cd libmcrypt-2.5.8

# ./configure --prefix=/usr/local/libmcrypt --enable-shared

# make && make install


# tar xzvf mhash-0.9.9.9.tar.gz

# cd mhash-0.9.9.9

# ./configure --prefix=/usr/local/mhash --enable-shared

# make && make install



-------------------------------------------------------------------------------

## 这个测试环境中没安装成功,以后有机会再测试

# tar xzvf mcrypt-2.6.8.tar.gz

# cd mcrypt-2.6.8

# ./configure --prefix=/usr/local/mcrypt

--with-libmcrypt-prefix=/usr/local/libmcrypt --enable-shared

--------------------------------------------------------------------------------------------


3)编译安装PHP及PHP-FPM:


# cd /usr/local/src

# tar xzvf php-5.5.23.tar.gz

# cd php-5.5.23


(说明:下面的编译方法是针对MySQL服务器在另外的服务器上)

# ./configure --prefix=/usr/local/php --with-config-file-path=/usr/local/php/etc

 --with-mysql=mysqlnd --with-mysqli=mysqlnd --with-pdo-mysql=mysqlnd 

 --with-jpeg-dir=/usr/local/jpeg9

 --with-png-dir=/usr/local/png --with-freetype-dir=/usr/local/freetype

 --with-mhash=/usr/local/mhash --with-mcrypt=/usr/local/libmcrypt --with-gd

 --with-iconv --with-zlib --with-openssl --with-xmlrpc --with-gettext --with-curl

 --without-pear --enable-fpm --enable-bcmath --enable-shmop --enable-sysvsem

 --enable-mbstring --enable-ftp --enable-gd-native-ttf --enable-pcntl

 --enable-sockets --enable-zip --enable-soap --enable-session --enable-xml

 --enable-inline-optimization --enable-mbregex


http://www.cnxct.com/some-errors-on-compile-php-5-3-8-with-pdo_mysql-and-mysqlnd/


(说明:PHP5.4及以上版本默认连接MySQL的驱动就是mysqlnd,不需要在编译时加with-mysql, with-mysqli, with-pdo-mysql编译参数也行)


(说明:这个编译方法是对MySQL在本机上,只在某些情况下使用,例如集成化的安装环境,数据库和应用服务器在一起安装)

# ./configure --prefix=/usr/local/php --with-config-file-path=/usr/local/php/etc

 --with-mysql=/usr/local/mysql --with-mysqli=/usr/local/mysql/bin/mysql_config

 --with-mysql-sock=/tmp/mysqld.sock --with-jpeg-dir=/usr/local/jpeg9

 --with-png-dir=/usr/local/png --with-freetype-dir=/usr/local/freetype

 --with-mhash=/usr/local/mhash --with-mcrypt=/usr/local/libmcrypt --with-gd

 --with-iconv --with-zlib --with-openssl --with-xmlrpc --with-gettext --with-curl

 --without-pear --enable-fpm --enable-bcmath --enable-shmop --enable-sysvsem

 --enable-mbstring --enable-ftp --enable-gd-native-ttf --enable-pcntl

 --enable-sockets --enable-zip --enable-soap --enable-session --enable-xml

 --enable-inline-optimization --enable-mbregex


# make

# make install


4)配置PHP和PHP-FPM:

# cp /usr/local/src/php-5.5.23/php.ini-production

 /usr/local/php/etc/php.ini


# vi /usr/local/php/etc/php.ini

disable_functions =

passthru,exec,system,chroot,scandir,chgrp,chown,shell_exec,proc_open,proc_get_status,ini_alter,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,stream_socket_server,escapeshellcmd,dll,popen,disk_free_space,checkdnsrr,checkdnsrr,getservbyname,getservbyport,disk_total_space,posix_ctermid,posix_get_last_error,posix_getcwd, posix_getegid,posix_geteuid,posix_getgid, posix_getgrgid,posix_getgrnam,posix_getgroups,posix_getlogin,posix_getpgid,posix_getpgrp,posix_getpid, posix_getppid,posix_getpwnam,posix_getpwuid, posix_getrlimit, posix_getsid,posix_getuid,posix_isatty, posix_kill,posix_mkfifo,posix_setegid,posix_seteuid,posix_setgid, posix_setpgid,posix_setsid,posix_setuid,posix_strerror,posix_times,posix_ttyname,posix_uname

(说明: 列出PHP可以禁用的函数,如果某些程序需要用到这个函数,可以删除,取消禁用)


date.timezone = PRC            -- 设置时区

expose_php = Off               -- 禁止显示PHP版本信息

short_open_tag = On            -- 支持PHP短标签 


# cp /usr/local/php/etc/php-fpm.conf.default

 /usr/local/php/etc/php-fpm.conf


# vi /usr/local/php/etc/php-fpm.conf

[global]

pid = run/php-fpm.pid

[www]

user = nobody

group = nobody


5)启动,停止PHP-FPM:


# /usr/local/php/sbin/php-fpm


6)配置PHP-FPM为系统服务:

# cp /usr/local/src/php-5.5.23/sapi/fpm/init.d.php-fpm

 /etc/init.d/php-fpm

# chmod +x /etc/init.d/php-fpm

# chkconfig php-fpm on

# chkconfig --level 24 php-fpm off

# service php-fpm start


4. 配置Nginx支持PHP:


user  nobody nobody;    -- 集成环境此用户名与组要和PHP-FPM的一样

http {

  server {

location / {

        root   html;

        index  index.php index.html index.htm;     -- 增加index.php

}

location ~ \.php$ {

    root          html;

    fastcgi_pass    127.0.0.1:9000;

    fastcgi_index   index.php;

    fastcgi_param  SCRIPT_FILENAME $document_root$fastcgi_script_name;

    include        fastcgi_params;

}

  }

}


(说明:SCRIPT_FILENAME后面的要改为$document_root或绝对路径)



# vi /usr/local/nginx/html/index.php

<?php

  Phpinfo();

?>



5. 在浏览器中访问:http://192.168.1.12,看到下面的信息,表示配置成功:

 


http://zyan.cc/nginx_php_v7/


http://www.linuxidc.com/Linux/2014-06/103266p2.htm



6. 配置PHP Memcached扩展:


1)下载源代码安装文件:


文件版本:memcache-2.2.7.tgz (稳定版)(比较旧的扩展,已不用)

下载地址:http://pecl.php.net/package/memcache


文件版本:libmemcached-1.0.18.tar.gz(比较新的扩展,使用这个)

下载地址:https://launchpad.net/libmemcached/+download


文件版本:memcached-2.2.0.tgz(配合上面的一起使用)

下载地址:http://pecl.php.net/package/memcached




## 可选的基于PHP5&Jquery的Memcached可视化管理监控工具

文件版本:memadmin-1.0.12.tar.gz

下载地址:http://www.junopen.com/memadmin/


------------------------------------------------------------------------------------------

2)安装PHP Memcache扩展(如果有比较旧的环境,可能用到这个)


# cd /usr/local/src

# tar xzvf memcache-2.2.7.tgz

# cd memcache-2.2.7

# /usr/local/php/bin/phpize

# ./configure --with-php-config=/usr/local/php/bin/php-config 

--enable-memcache

# make

# make install

Installing shared extensions:

/usr/local/php/lib/php/extensions/no-debug-non-zts-20121212/

--------------------------------------------------------------------------------------------



2)安装PHP Memcached扩展:


# cd /usr/local/src

# tar xzvf libmemcached-1.0.18.tar.gz

# cd libmemcached-1.0.18

# ./configure --prefix=/usr/local/libmemcached

# make

# make install


# tar xzvf memcached-2.2.0.tgz

# cd memcached-2.2.0

# /usr/local/php/bin/phpize

# ./configure --with-php-config=/usr/local/php/bin/php-config 

--with-libmemcached-dir=/usr/local/libmemcached --enable-memcached

# make

# make install

Installing shared extensions:

/usr/local/php/lib/php/extensions/no-debug-non-zts-20121212/



3)安装Memcached可视化管理监控工具,可选的:


# cd /usr/local/src

# tar xzvf memadmin-1.0.12.tar.gz

# mv memadmin /usr/local/nginx/html/


4)启用PHP 的Memcached动态扩展:


# vi /usr/local/php/etc/php.ini


extension=memcached.so


#extension=memcache.so


5)重加载PHP-FPM服务进程,使新添的Memcached动态扩展生效:


# service php-fpm reload




7. 配置PHP MongoDB扩展:


1)下载源代码安装文件:


文件版本:mongo-1.6.10.tgz (稳定版) 

下载地址:http://pecl.php.net/package/mongo


2)安装PHP MongoDB扩展:


# cd /usr/local/src

# tar xzvf mongo-1.6.10.tgz

# cd mongo-1.6.10

# /usr/local/php/bin/phpize

# ./configure --with-php-config=/usr/local/php/bin/php-config  --enable-mongo

# make

# make install

Installing shared extensions:

/usr/local/php/lib/php/extensions/no-debug-non-zts-20121212/


# ls /usr/local/php/lib/php/extensions/no-debug-non-zts-20121212/

memcached.so  mongo.so  opcache.a  opcache.so


3)启用PHP 的MongoDB动态扩展:


# vi /usr/local/php/etc/php.ini


extension=mongo.so


4)重加载PHP-FPM服务进程,使新添的MongoDB动态扩展生效:


# service php-fpm reload


0人推荐
随时随地看视频
慕课网APP