nginx 安装lnmp

2019-10-24 本文已影响0人铁硬

CentOS 7 yum nginx MySQL PHP 简易环境搭建

用centos自带的yum源来安装nginx，mysql和php，超级方便，省去编译的麻烦，省去自己配置的麻烦，还能节省非常多的时间。

更换yum源

cat /etc/redhat-release
先安装wget

我们先把yum源换成国内的阿里云镜像源（当然不换也可以），先备份一下原来的源镜像文件，以免出错后可以恢复：

[root@192 ~]# mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup

下载新的CentOS-Base.repo 到/etc/yum.repos.d/，版本根据自己的系统版本选择下载：

# CentOS 5:
wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-5.repo 

# CentOS 6:
wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-6.repo

# CentOS 7:
wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo

更改/etc/yum.repos.d/CentOS-Media.repo使其为不生效：

vim /etc/yum.repos.d/CentOS-Media.repo
enable=0 # 修改enable为0不生效

运行yum makecache生成缓存:

yum clean all
yum makecache
yum update

安装Nginx

由于yum源中没有我们想要的nginx，那么我们就需要创建一个“/etc/yum.repos.d/nginx.repo”的文件，其实就是新增一个yum源。

[root@192 yum.repos.d]# vi /etc/yum.repos.d/nginx.repo
# 把如下内容复制进去
[nginx]
name=nginx repo
baseurl=http://nginx.org/packages/centos/$releasever/$basearch/
gpgcheck=0
enabled=1

然后保存退出，输入 yum list nginx 查看:

[root@192 yum.repos.d]# yum list nginx
已加载插件：fastestmirror
nginx                                                                           | 2.9 kB  00:00:00     
nginx/7/x86_64/primary_db                                                       |  18 kB  00:00:04     
Loading mirror speeds from cached hostfile
 * base: mirrors.aliyun.com
 * extras: mirrors.aliyun.com
 * updates: mirrors.aliyun.com
可安装的软件包
nginx.x86_64                                  1:1.10.2-1.el7.ngx                                  nginx

[root@192 yum.repos.d]# yum list |grep nginx
nginx.x86_64                               1:1.10.2-1.el7.ngx          nginx    
nginx-debug.x86_64                         1:1.8.0-1.el7.ngx           nginx    
nginx-debuginfo.x86_64                     1:1.10.2-1.el7.ngx          nginx    
nginx-module-geoip.x86_64                  1:1.10.2-1.el7.ngx          nginx    
nginx-module-geoip-debuginfo.x86_64        1:1.10.2-1.el7.ngx          nginx    
nginx-module-image-filter.x86_64           1:1.10.2-1.el7.ngx          nginx    
nginx-module-image-filter-debuginfo.x86_64 1:1.10.2-1.el7.ngx          nginx    
nginx-module-njs.x86_64                    1:1.10.2.0.0.20160414.1c50334fbea6-2.el7.ngx
                                                                       nginx    
nginx-module-njs-debuginfo.x86_64          1:1.10.2.0.0.20160414.1c50334fbea6-2.el7.ngx
                                                                       nginx    
nginx-module-perl.x86_64                   1:1.10.2-1.el7.ngx          nginx    
nginx-module-perl-debuginfo.x86_64         1:1.10.2-1.el7.ngx          nginx    
nginx-module-xslt.x86_64                   1:1.10.2-1.el7.ngx          nginx    
nginx-module-xslt-debuginfo.x86_64         1:1.10.2-1.el7.ngx          nginx    
nginx-nr-agent.noarch                      2.0.0-10.el7.ngx            nginx    
pcp-pmda-nginx.x86_64                      3.10.6-2.el7                base

如果执行命令是这样的显示效果，那么我们的nginx的yum源就配置成功啦！

然后要安装我们的nginx就直接执行：

yum -y install nginx

这样nginx的最新官网版本就安装好了！

启动Nginx

[root@192 yum.repos.d]# nginx      #启动nginx
[root@192 yum.repos.d]# curl 127.0.0.1
Welcome to nginx!0 auto;        font-family: Tahoma, Verdana, Arial, sans-serif;    }
Welcome to nginx!

If you see this page, the nginx web server is successfully installed andworking. Further configuration is required.
For online documentation and support please refer to"http://nginx.org/">nginx.org.
Commercial support is available at"http://nginx.com/">nginx.com.
Thank you forusing nginx.

安装MySQL 5.7版本，官网http://dev.mysql.com/downloads/repo/yum/

获取MySql yum源

[root@192 yum.repos.d]# rpm -Uvh  http://dev.mysql.com/get/mysql57-community-release-el7-9.noarch.rpm

查看MySql yum情况

[root@192 yum.repos.d]# yum repolist all | grep mysql
mysql-connectors-community/x86_64 MySQL Connectors Community         启用:    24
mysql-connectors-community-source MySQL Connectors Community - Sourc 禁用
mysql-tools-community/x86_64      MySQL Tools Community              启用:    38
mysql-tools-community-source      MySQL Tools Community - Source     禁用
mysql-tools-preview/x86_64        MySQL Tools Preview                禁用
mysql-tools-preview-source        MySQL Tools Preview - Source       禁用
mysql55-community/x86_64          MySQL 5.5 Community Server         禁用
mysql55-community-source          MySQL 5.5 Community Server - Sourc 禁用
mysql56-community/x86_64          MySQL 5.6 Community Server         禁用
mysql56-community-source          MySQL 5.6 Community Server - Sourc 禁用
mysql57-community/x86_64          MySQL 5.7 Community Server         启用:   146
mysql57-community-source          MySQL 5.7 Community Server - Sourc 禁用
mysql80-community/x86_64          MySQL 8.0 Community Server         禁用
mysql80-community-source          MySQL 8.0 Community Server - Sourc 禁用

可以看到已经有了，并且5.7版本已经启用，如果没有开启，或者你想要选择需要的版本进行安装，修改 /etc/yum.repos.d/mysql-community.repo，选择需要的版本把enable改为1即可，其它的改为0：

[mysql57-community]
name=MySQL 5.7 Community Server
baseurl=http://repo.mysql.com/yum/mysql-5.7-commnuty
enable=1 #把需要的版本设置为1
gpgcheck=1
....

修改好后查看可用的安装版本：

[root@192 yum.repos.d]# yum repolist enabled | grep mysql
mysql-connectors-community/x86_64 MySQL Connectors Community           24
mysql-tools-community/x86_64           MySQL Tools Community                     38
mysql57-community/x86_64                MySQL 5.7 Community Server              146

不用犹豫，开始安装吧！

[root@192 yum.repos.d]# yum -y install mysql-community-server

启动MySql:

[root@192 yum.repos.d]# service mysqld start
Redirecting to /bin/systemctl start  mysqld.service

开机启动设置：

[root@192 yum.repos.d]# systemctl enable mysqld
[root@192 yum.repos.d]# systemctl daemon-reload

mysql安装完成之后，在/var/log/mysqld.log文件中给root生成了一个默认密码。通过下面的方式找到root默认密码，然后登录mysql进行修改：

[root@192 yum.repos.d]# grep 'temporary password' /var/log/mysqld.log
2016-10-23T14:51:45.705458Z 1 [Note] A temporary password is generated for root@localhost: a&sqr7dou7N_
[root@192 yum.repos.d]# mysql -uroot -p

修改root密码：

ALTER USER 'root'@'localhost' IDENTIFIED BY 'NewPassWord!';

注意：mysql5.7默认安装了密码安全检查插件，默认密码检查策略要求密码必须包含：大小写字母、数字和特殊符号，并且长度不能少于8位。否则会提示ERROR 1819 (HY000): Your password does not satisfy the current policy requirements错误，如所示：

ERROR 1819 (HY000):Your password does ont satisfy the the current policy requirements

通过msyql环境变量可以查看密码策略的相关信息：

mysql> show variables like '%password%';
+---------------------------------------+--------+
| Variable_name                         | Value  |
+---------------------------------------+--------+
| default_password_lifetime             | 0      |
| disconnect_on_expired_password        | ON     |
| log_builtin_as_identified_by_password | OFF    |
| mysql_native_password_proxy_users     | OFF    |
| old_passwords                         | 0      |
| report_password                       |        |
| sha256_password_proxy_users           | OFF    |
| validate_password_check_user_name     | OFF    |
| validate_password_dictionary_file     |        |
| validate_password_length              | 8      |
| validate_password_mixed_case_count    | 1      |
| validate_password_number_count        | 1      |
| validate_password_policy              | MEDIUM |
| validate_password_special_char_count  | 1      |
+---------------------------------------+--------+
rows in set (0.00 sec)

validate_password_policy：密码策略，默认为MEDIUM策略
validate_password_dictionary_file：密码策略文件，策略为STRONG才需要
validate_password_length：密码最少长度
validate_password_mixed_case_count：大小写字符长度，至少1个
validate_password_number_count ：数字至少1个
validate_password_special_char_count：特殊字符至少1个
上述参数是默认策略MEDIUM的密码检查规则。

修改密码策略

一、（==已测试不可用==）如果想修改密码策略，在/etc/my.cnf文件添加validate_password_policy配置：

# 选择0（LOW），1（MEDIUM），2（STRONG）其中一种，选择2需要提供密码字典文件
validate_password_policy=0

二、进入mysql命令端：

mysql> set global validate_password_policy=0;
mysql> set global validate_password_length=4;
# 便可以设置密码为：1234

配置默认编码为utf8

修改/etc/my.cnf配置文件，在[mysqld]下添加编码配置，如下所示：

[mysqld]
character_set_server=utf8
init_connect='SET NAMES utf8'

重新启动mysql服务使配置生效：

[root@192 yum.repos.d]# systemctl restart mysqld

添加远程登录用户

默认只允许root帐户在本地登录，如果要在其它机器上连接mysql，必须修改root允许远程连接，或者添加一个允许远程连接的帐户，为了安全起见，我们添加一个新的帐户：

mysql> grant all privileges on *.* to 'evai'@'%' identified by '@evai2016' WITH GRANT OPTION;
mysql> flush privileges;

运行select host, user from mysql.user 查看下：

mysql> select host,user from mysql.user;
+-----------+-----------+
| host      | user      |
+-----------+-----------+
| %         | evai      |
| localhost | mysql.sys |
| localhost | root      |
+-----------+-----------+
3 rows in set (0.00 sec)

Yum安装PHP5.5,5.6,7.0

检查当前安装的PHP包

[root@192 yum.repos.d]# yum list installed | grep php
# 如果有安装的PHP包，先删除他们：
[root@192 yum.repos.d]#  yum remove php.x86_64 php-cli.x86_64 php-common.x86_64 php-gd.x86_64 php-ldap.x86_64 php-mbstring.x86_64 php-mcrypt.x86_64 php-mysql.x86_64 php-pdo.x86_64

获取Yum源：

# Centos 5.X：
[root@192 yum.repos.d]# rpm -Uvh http://mirror.webtatic.com/yum/el5/latest.rpm
# CentOs 6.x：
[root@192 yum.repos.d]# rpm -Uvh http://mirror.webtatic.com/yum/el6/latest.rpm
# CentOs 7.X
[root@192 yum.repos.d]# rpm -Uvh https://mirror.webtatic.com/yum/el7/epel-release.rpm
[root@192 yum.repos.d]# rpm -Uvh https://mirror.webtatic.com/yum/el7/webtatic-release.rpm

如果想删除上面安装的包，重新安装:

[root@192 yum.repos.d]# rpm -qa | grep webstatic

rpm -e 上面搜索到的包即可

运行yum install

[root@192 yum.repos.d]# yum install php55w.x86_64 php55w-cli.x86_64 php55w-common.x86_64 php55w-gd.x86_64 php55w-ldap.x86_64 php55w-mbstring.x86_64 php55w-mcrypt.x86_64 php55w-mysql.x86_64 php55w-pdo.x86_64

[root@192 yum.repos.d]# yum install php56w.x86_64 php56w-cli.x86_64 php56w-common.x86_64 php56w-gd.x86_64 php56w-ldap.x86_64 php56w-mbstring.x86_64 php56w-mcrypt.x86_64 php56w-mysql.x86_64 php56w-pdo.x86_64
# 注：如果想升级到5.6把上面的55w换成56w就可以了。

[root@192 yum.repos.d]# yum install php70w.x86_64 php70w-cli.x86_64 php70w-common.x86_64 php70w-gd.x86_64 php70w-ldap.x86_64 php70w-mbstring.x86_64 php70w-mcrypt.x86_64 php70w-mysql.x86_64 php70w-pdo.x86_64

安装PHP-FPM

[root@192 yum.repos.d]# yum install php55w-fpm 
[root@192 yum.repos.d]# yum install php56w-fpm 
[root@192 yum.repos.d]# yum install php70w-fpm
# 注：如果想升级到5.6把上面的55w换成56w就可以了。

启动php-fpm:

[root@192 yum.repos.d]# systemctl start php-fpm
[root@192 yum.repos.d]# systemctl enable php-fpm

PHP配置文件php.ini路径： /etc/php.ini

php-fpm配置文件php-fpm.conf路径：/etc/php-fpm.conf

安装PHP7

获取yum源：

[root@192 yum.repos.d]# rpm -Uvh https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
[root@192 yum.repos.d]# rpm -Uvh https://mirror.webtatic.com/yum/el7/webtatic-release.rpm

执行命令安装php7:

[root@192 yum.repos.d]# yum install php70w.x86_64 php70w-cli.x86_64 php70w-common.x86_64 php70w-gd.x86_64 php70w-ldap.x86_64 php70w-mbstring.x86_64 php70w-mcrypt.x86_64 php70w-mysql.x86_64 php70w-pdo.x86_64

安装php-fpm：

[root@192 yum.repos.d]# yum install php70w-fpm php70w-opcache

启动php-fpm：

[root@192 yum.repos.d]# systemctl start php-fpm

防火墙

开启80端口、3306端口。CentOS 7.0默认使用的是firewall作为防火墙，这里改为iptables防火墙。

关闭firewall:

[root@192 yum.repos.d]# systemctl stop firewalld.service
# 停止firewall
[root@192 yum.repos.d]# systemctl disable firewalld.service
# 禁止firewall开机启动

安装iptables防火墙:

[root@192 yum.repos.d]# yum install iptables-services
# 安装
[root@192 yum.repos.d]# vi /etc/sysconfig/iptables
# 编辑防火墙配置文件

# Firewall configuration written by system-config-firewall
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 3306 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT

:wq! #保存退出

[root@192 yum.repos.d]# systemctl restart iptables.service
# 最后重启防火墙使配置生效
[root@192 yum.repos.d]# systemctl enable iptables.service
# 设置防火墙开机启动

关闭selinux

# 使配置立即生效
[root@192 yum.repos.d]# setenforce 0

[root@192 yum.repos.d]# vi /etc/selinux/config
#SELINUX=enforcing #注释掉
#SELINUXTYPE=targeted #注释掉
SELINUX=disabled #增加
:wq! #保存退出

注意：

网络配置注意要关闭：IP6，此可能引起不能连网
要关闭selinx（tp Runtime不能创建文件由此引起）