nginx + php 配置
- WBOY原创
- 2016-06-23 14:34:501068浏览
本文参考了http://blog.s135.com/nginx_php_v6/ 大量内容,感谢张宴！
我的centos6是64位的版本
安装步骤：
（系统要求：Linux 2.6+ 内核，本文中的Linux操作系统为CentOS 5.3，另在RedHat AS4上也安装成功）
一、获取相关开源程序：
【适用CentOS操作系统】利用CentOS Linux系统自带的yum命令安装、升级所需的程序库（RedHat等其他Linux发行版可从安装光盘中找到这些程序库的RPM包，进行安装）：
sudo -s
LANG=C
yum -y install gcc gcc-c++ autoconf libjpeg libjpeg-devel libpng libpng-devel freetype freetype-devel libxml2 libxml2-devel zlib zlib-devel glibc glibc-devel glib2 glib2-devel bzip2 bzip2-devel ncurses ncurses-devel curl curl-devel e2fsprogs e2fsprogs-devel krb5 krb5-devel libidn libidn-devel openssl openssl-devel openldap openldap-devel nss_ldap openldap-clients openldap-servers
我下载的源码包
mysql-5.5.25a-linux2.6-x86_64.tar.gz
imagick-2.3.0.tgz
PDO_MYSQL-1.0.2.tgz
memcached-1.4.13
eaccelerator-0.9.6.1.tar.bz2
libiconv-1.14.tar.gz
memcached-1.4.13.tar.gz
nginx-1.3.3.tar.gz
libmcrypt-2.5.7
ImageMagick.tar.gz
libmcrypt-2.5.8.tar.gz
mhash-0.9.9.9.tar.bz2
pcre-8.30.tar.bz2
mcrypt-2.6.8.tar.gz
php-5.3.14.tar.bz2
二、安装php-5.3.14（FastCGI模式）
1、编译安装PHP 5.2.14所需的支持库：
tar zxvf libiconv-1.14.tar.gz
cd libiconv-1.14/
./configure --prefix=/usr/local
make
make install
cd ../
tar zxvf libmcrypt-2.5.8.tar.gz
cd libmcrypt-2.5.8/
./configure
make
make install
/sbin/ldconfig
cd libltdl/
./configure --enable-ltdl-install
make
make install
cd http://www.cnblogs.com/
tar zxvf mhash-0.9.9.9.tar.gz
cd mhash-0.9.9.9/
./configure
make
make install
cd ../
ln -s /usr/local/lib/libmcrypt.la /usr/lib/libmcrypt.la
ln -s /usr/local/lib/libmcrypt.so /usr/lib/libmcrypt.so
ln -s /usr/local/lib/libmcrypt.so.4 /usr/lib/libmcrypt.so.4
ln -s /usr/local/lib/libmcrypt.so.4.4.8 /usr/lib/libmcrypt.so.4.4.8
ln -s /usr/local/lib/libmhash.a /usr/lib/libmhash.a
ln -s /usr/local/lib/libmhash.la /usr/lib/libmhash.la
ln -s /usr/local/lib/libmhash.so /usr/lib/libmhash.so
ln -s /usr/local/lib/libmhash.so.2 /usr/lib/libmhash.so.2
ln -s /usr/local/lib/libmhash.so.2.0.1 /usr/lib/libmhash.so.2.0.1
ln -s /usr/local/bin/libmcrypt-config /usr/bin/libmcrypt-config
tar zxvf mcrypt-2.6.8.tar.gz
cd mcrypt-2.6.8/
/sbin/ldconfig
./configure
make
make install
cd ../
2、安装mysql-5.5.25a(编译过的版本)
安装在/usr/local/mysql下面,这样的话一些依赖关系都在,免去一些安装麻烦。
shell> groupadd mysql
shell> useradd -r -g mysql mysql
shell> cd /usr/local
shell> tar zxvf /path/to/mysql-VERSION-OS.tar.gz
shell> ln -s full-path-to-mysql-VERSION-OS mysql
shell> cd mysql
shell> chown -R mysql .
shell> chgrp -R mysql .
shell> scripts/mysql_install_db --user=mysql
shell> chown -R root .
shell> chown -R mysql data
# Next command is optional
shell> cp support-files/my-medium.cnf /etc/my.cnf
shell> bin/mysqld_safe --user=mysql &
# Next command is optional
shell> cp support-files/mysql.server /etc/init.d/mysqld
shell> chkconfig --add mysqld
shell> chkconfig mysqld on
进入到mysql command line 下,添加一个root权限的账户
GRANT ALL PRIVILEGES ON *.* TO 'carddev'@'localhost' IDENTIFIED BY 'carddev';
GRANT ALL PRIVILEGES ON *.* TO 'carddev'@'127.0.0.1' IDENTIFIED BY 'carddev';
3、编译安装PHP（FastCGI模式）
tar zxvf php-5.3.14.tar.gz
cd php-5.3.14
./configure --prefix=/usr/local/php --with-config-file-path=/etc --with-mysql=/usr/local/mysql --with-mysqli=/usr/local/mysql/bin/mysql_config --with-iconv-dir=/usr/local --with-freetype-dir --with-jpeg-dir --with-png-dir --with-zlib --with-libxml-dir=/usr --enable-xml --disable-rpath --enable-discard-path --enable-safe-mode --enable-bcmath --enable-shmop --enable-sysvsem --enable-inline-optimization --with-curl --with-curlwrappers --enable-mbregex --enable-fpm --enable-force-cgi-redirect --enable-mbstring --with-mcrypt --with-gd --enable-gd-native-ttf --with-openssl --with-mhash --enable-pcntl --enable-sockets --with-ldap --with-ldap-sasl --with-xmlrpc --enable-zip --nable-soap
make ZEND_EXTRA_LIBS='-liconv'
make install
cp php.ini-dist /etc/php.ini
cd ../
以下php安装错误来自百度搜索
安装php的时候,出现cannot stat `ext/phar/phar.phar': No such file or directory
于是我又: cd ext/phar/
ls -l
结果发现没有phar.phar 这个文件！！于是我怀疑是phar.php ，
cp ./phar.php ./phar.phar
make install
4、编译安装PHP5扩展模块
我将memcache server端和client端都安装在了一台机器上,这样方便测试
首先安装memcache server
tar zxvf memcached-1.4.13.tg.gz
cd memcache-1.4.13/
./configure ?prefix=/usr/local/memcached
make
make install
cd ../
在这个时候，不一定会编译通过，依旧会出现:
checking for libevent directory… configure: error: libevent is required. You can get it from http://www.monkey.org/~provos/libevent/
If it’s already installed, specify its path using ?with-libevent=/dir/
因为libevent 这个包是系统默认安装的，没有安装相应的开发所用的头文件。
所以，还要使用如下命令来安装：
yum install libevent-devel
有的时候会报一些找不到lib包的warning,例如：找不到libevent-1.4.so.2
可以建立软连接.也可以用ldconfig来解决这个问题,在/etc/ld.so.conf,添加些常用的lib库路径.
2. 安装memcache client端
Memcached客户端是基于libmemcached的，所以需先安装libmemcached。
官网：http://download.tangent.org
下载最新版本,我下载的是libmemcached-1.0.9
cd libmemcached-1.0.9
./configure --prefix=/usr/local/libmemcached --with-libmemcached-dir=/usr/local/libmemcached
make && make install
OK,现在安装PHP extension for interfacing with memcached via libmemcached library
下载地址：http://pecl.php.net/package/memcached
tar zxvf memcached-2.0.1.tgz
cd memcached-2.0.1
/usr/local/php/bin/phpize
./configure --with-php-config=/usr/local/php/bin/php-config --with-libmemcached-dir=/usr/local/libmemcached
make && make install
tar jxvf eaccelerator-0.9.6.1.tar.bz2
cd eaccelerator-0.9.6.1/
/usr/local/webserver/php/bin/phpize
./configure --enable-eaccelerator=shared --with-php-config=/usr/local/webserver/php/bin/php-config
make
make install
cd ../
tar zxvf PDO_MYSQL-1.0.2.tgz
cd PDO_MYSQL-1.0.2/
/usr/local/webserver/php/bin/phpize
./configure --with-php-config=/usr/local/webserver/php/bin/php-config --with-pdo-mysql=/usr/local/webserver/mysql
make
make install
cd ../
tar zxvf ImageMagick.tar.gz
cd ImageMagick-6.5.1-2/
./configure
make
make install
cd ../
tar zxvf imagick-2.3.0.tgz
cd imagick-2.3.0/
/usr/local/webserver/php/bin/phpize
./configure --with-php-config=/usr/local/webserver/php/bin/php-config
make
make install
cd ../
5、修改php.ini文件
手工修改：查找/etc/php.ini中的extension_dir = "./"
修改为extension_dir = "/usr/local/php/lib/php/extensions"
cp -R /usr/local/php/lib/php/extensions/no-debug-non-zts-20090626/* /usr/local/php/lib/php/extensions
并在此行后增加以下几行，然后保存：
extension = "pdo_mysql.so"
extension = "imagick.so"
extension = "memcached.so"
再查找; cgi.fix_pathinfo=0
修改为cgi.fix_pathinfo=0，防止Nginx文件类型错误解析漏洞。
6、配置eAccelerator加速PHP：
mkdir -p /usr/local/eaccelerator_cache
vi /etc/php.ini
按shift+g键跳到配置文件的最末尾，加上以下配置信息：
[eaccelerator]
zend_extension="/usr/local/php/lib/php/extensions/eaccelerator.so"
eaccelerator.shm_size="64"
eaccelerator.cache_dir="/usr/local/eaccelerator_cache"
eaccelerator.enable="1"
eaccelerator.optimizer="1"
eaccelerator.check_mtime="1"
eaccelerator.debug="0"
eaccelerator.filter=""
eaccelerator.shm_max="0"
eaccelerator.shm_ttl="3600"
eaccelerator.shm_prune_period="3600"
eaccelerator.shm_only="0"
eaccelerator.compress="1"
eaccelerator.compress_level="9"
7、创建www用户和组
/usr/sbin/groupadd www
/usr/sbin/useradd -g www www
chown -R www.www /var/www
8、配置php-fpm.conf
打开一下两行注释:
pid = run/php-fpm.pid
pm.start_servers = 20
pm.min_spare_servers = 5
pm.max_spare_servers = 35
user = www
group = www
到了php5.3.3，默认即支持php-fpm
但是php/sbin/php-fpm的内容发生了变化，之前是一个脚本，现在是一个二进制文件，需要使用信号控制：
master进程可以理解以下信号
SIGINT, SIGTERM 立刻终止
SIGQUIT 平滑终止
SIGUSR1 重新打开日志文件
SIGUSR2 平滑重载所有worker进程并重新载入配置和二进制模块
示例：
php-fpm 关闭：
kill -SIGINT `cat /usr/local/php/var/run/php-fpm.pid`
php-fpm 重启：
kill -SIGUSR2 `cat /usr/local/php/var/run/php-fpm.pid`
加入到服务中去并每次开机自动启动
cp $PHP_SOURCE_DIR/sapi/fpm/init.d.php-fpm /etc/init.d/php-fpm
chmod 700 /etc/init.d/php-fpm
chkconfig --add php-fpm
chkconfig php-fpm on
服务方式启动php-fpm
service php-fpm restart
注：/usr/local/php/sbin/php-fpm还有其他参数，包括：start|stop|quit|restart|reload|logrotate，修改php.ini后不重启php-cgi，重新加载配置文件使用reload。
三、安装Nginx 0.8.46
1、安装Nginx所需的pcre库：
tar zxvf pcre-8.30.tar.gz
cd pcre-8.30/
./configure
make && make install
cd ../
2、安装Nginx
tar zxvf nginx-1.3.3.tar.gz
cd nginx-1.3.3/
./configure --user=www --group=www --prefix=/usr/local/nginx --with-http_stub_status_module --with-http_ssl_module
make && make install
cd ../
3、创建Nginx日志目录
mkdir -p /usr/local/nginx/logs/
chmod +w /usr/local/nginx/logs/
chown -R www:www /usr/local/nginx/logs/
4、创建Nginx配置文件
①、在/usr/local/webserver/nginx/conf/目录中创建nginx.conf文件：
rm -f /usr/local/nginx/conf/nginx.conf
vi /usr/local/nginx/conf/nginx.conf
user www www;
worker_processes 8;
#error_log logs/error.log;
#error_log logs/error.log notice;
#error_log logs/error.log info;
error_log /usr/local/nginx/logs/error.log crit;
pid /usr/local/nginx/logs/nginx.pid;
worker_rlimit_nofile 65535;
events {
use epoll;
worker_connections 65535;
}
http {
include mime.types;
default_type application/octet-stream;
#log_format main '$remote_addr - $remote_user [$time_local] "$request" '
# '$status $body_bytes_sent "$http_referer" '
# '"$http_user_agent" "$http_x_forwarded_for"';
#access_log logs/access.log main;
server_names_hash_bucket_size 128;
client_header_buffer_size 32k;
large_client_header_buffers 4 32k;
client_max_body_size 8m;
sendfile on;
tcp_nopush on;
#keepalive_timeout 0;
keepalive_timeout 65;
tcp_nodelay on;
fastcgi_connect_timeout 300;
fastcgi_send_timeout 300;
fastcgi_read_timeout 300;
fastcgi_buffer_size 64k;
fastcgi_buffers 4 64k;
fastcgi_busy_buffers_size 128k;
fastcgi_temp_file_write_size 128k;
gzip on;
gzip_min_length 1k;
gzip_buffers 4 16k;
gzip_http_version 1.0;
gzip_comp_level 2;
gzip_types text/plain application/x-javascript text/css application/xml;
gzip_vary on;
server {
listen 80;
server_name localhost;
index index.html index.htm index.php;
root /var/www;
#charset koi8-r;
#access_log logs/host.access.log main;
location ~ .*\.(php|php5)?$
{
#root html;
#index index.html index.htm;
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
include fcgi.conf;
}
#error_page 404 /404.html;
# redirect server error pages to the static page /50x.html
#
location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
{
expires 30d;
}
location ~ .*\.(js|css)?$
{
expires 1h;
}
log_format access '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" $http_x_forwarded_for';
access_log /usr/local/nginx/logs/access.log access;
}
}
②、在/usr/local/nginx/conf/目录中创建fcgi.conf文件：
fastcgi_param GATEWAY_INTERFACE CGI/1.1;
fastcgi_param SERVER_SOFTWARE nginx;
fastcgi_param QUERY_STRING $query_string;
fastcgi_param REQUEST_METHOD $request_method;
fastcgi_param CONTENT_TYPE $content_type;
fastcgi_param CONTENT_LENGTH $content_length;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param SCRIPT_NAME $fastcgi_script_name;
fastcgi_param REQUEST_URI $request_uri;
fastcgi_param DOCUMENT_URI $document_uri;
fastcgi_param DOCUMENT_ROOT $document_root;
fastcgi_param SERVER_PROTOCOL $server_protocol;
fastcgi_param REMOTE_ADDR $remote_addr;
fastcgi_param REMOTE_PORT $remote_port;
fastcgi_param SERVER_ADDR $server_addr;
fastcgi_param SERVER_PORT $server_port;
fastcgi_param SERVER_NAME $server_name;
# PHP only, required if PHP was built with --enable-force-cgi-redirect
fastcgi_param REDIRECT_STATUS 200;
5、启动Nginx
ulimit -SHn 65535
/usr/local/nginx/sbin/nginx
Nginx启动出错 error while loading shared libraries: libpcre.so.1
[root@localhost conf]# ldd $(which /usr/local/nginx/sbin/nginx)
linux-vdso.so.1 => (0x00007fff227ff000)
libpthread.so.0 => /lib64/libpthread.so.0 (0x00000032f3800000)
libcrypt.so.1 => /lib64/libcrypt.so.1 (0x00000032f6000000)
libpcre.so.1 => not found
libssl.so.10 => /usr/lib64/libssl.so.10 (0x00000032fc400000)
libcrypto.so.10 => /usr/lib64/libcrypto.so.10 (0x00000032fa400000)
libdl.so.2 => /lib64/libdl.so.2 (0x00000032f3400000)
libz.so.1 => /lib64/libz.so.1 (0x00000032f3c00000)
libc.so.6 => /lib64/libc.so.6 (0x00000032f3000000)
/lib64/ld-linux-x86-64.so.2 (0x00000032f2c00000)
libfreebl3.so => /lib64/libfreebl3.so (0x00000032f5c00000)
libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x00000032fb000000)
libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00000032f9800000)
libcom_err.so.2 => /lib64/libcom_err.so.2 (0x00000032f7000000)
libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x00000032f8800000)
libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x00000032f9000000)
libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x00000032f9400000)
libresolv.so.2 => /lib64/libresolv.so.2 (0x00000032f5000000)
libselinux.so.1 => /lib64/libselinux.so.1 (0x00000032f4c00000)
可以看出 libpcre.so.1 => not found 并没有找到，进入/lib目录中手动链接下
[root@localhost lib]# ln -s libpcre.so.0.0.1 libpcre.so.1
然后在启动nginx ok 了
[root@localhost lib]# /usr/local/nginx/sbin/nginx
另外我在/etc/ld.so.conf下面加了些配置
1 include ld.so.conf.d/*.conf
2 include /usr/lib
3 include /usr/lib64
4 include /usr/local/lib
四、配置开机自动启动Nginx
vi /etc/rc.local
ulimit -SHn 65535
/usr/local/nginx/sbin/nginx
五、优化Linux内核参数
vi /etc/sysctl.conf
在末尾增加以下内容：
# Add
net.ipv4.tcp_max_syn_backlog = 65536
net.core.netdev_max_backlog = 32768
net.core.somaxconn = 32768
net.core.wmem_default = 8388608
net.core.rmem_default = 8388608
net.core.rmem_max = 16777216
net.core.wmem_max = 16777216
net.ipv4.tcp_timestamps = 0
net.ipv4.tcp_synack_retries = 2
net.ipv4.tcp_syn_retries = 2
net.ipv4.tcp_tw_recycle = 1
#net.ipv4.tcp_tw_len = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_mem = 94500000 915000000 927000000
net.ipv4.tcp_max_orphans = 3276800
#net.ipv4.tcp_fin_timeout = 30
#net.ipv4.tcp_keepalive_time = 120
net.ipv4.ip_local_port_range = 1024 65535
使配置立即生效：
/sbin/sysctl -p
六、在不停止Nginx服务的情况下平滑变更Nginx配置
1、修改/usr/local/nginx/conf/nginx.conf配置文件后，请执行以下命令检查配置文件是否正确：
/usr/local/nginx/sbin/nginx -t
如果屏幕显示以下两行信息，说明配置文件正确：
the configuration file /usr/local/webserver/nginx/conf/nginx.conf syntax is ok
the configuration file /usr/local/webserver/nginx/conf/nginx.conf was tested successfully
2、平滑重启：
①、对于Nginx 0.8.x版本，现在平滑重启Nginx配置非常简单，执行以下命令即可：
/usr/local/nginx/sbin/nginx -s reload
②、对于Nginx 0.8.x之前的版本，平滑重启稍微麻烦一些，按照以下步骤进行即可。输入以下命令查看Nginx主进程号：
ps -ef | grep "nginx: master process" | grep -v "grep" | awk -F ' ' '{print $2}'
屏幕显示的即为Nginx主进程号，例如：
6302
这时，执行以下命令即可使修改过的Nginx配置文件生效：
kill -HUP 6302
或者无需这么麻烦，找到Nginx的Pid文件：
kill -HUP `cat /usr/local/webserver/nginx/nginx.pid`
七、编写每天定时切割Nginx日志的脚本
1、创建脚本/usr/local/nginx/sbin/cut_nginx_log.sh
vi /usr/local/nginx/sbin/cut_nginx_log.sh
输入以下内容：
#!/bin/bash
# This script run at 00:00
# The Nginx logs path
logs_path="/usr/local/nginx/logs/"
mkdir -p ${logs_path}$(date -d "yesterday" +"%Y")/$(date -d "yesterday" +"%m")/
mv ${logs_path}access.log ${logs_path}$(date -d "yesterday" +"%Y")/$(date -d "yesterday" +"%m")/access_$(date -d "yesterday" +"%Y%m%d").log
kill -USR1 `cat /usr/local/nginx/nginx.pid`
2、设置crontab，每天凌晨00:00切割nginx访问日志
crontab -e
输入以下内容：
00 00 * * * /bin/bash /usr/local/nginx/sbin/cut_nginx_log.sh