设为首页 收藏本站
查看: 720|回复: 0

[经验分享] Nginx_PHP_PHP-FPM网站环境部署手册

[复制链接]
累计签到:1 天
连续签到:1 天
发表于 2016-4-20 09:18:34 | 显示全部楼层 |阅读模式
1. 下载稳定版源代码安装文件:

nginx-1.6.2.tar.gz
http://nginx.org/download/

php-5.5.23.tar.gz
http://php.net/downloads.php

PCRE(使Nginx支持HTTP Rewrite模块):pcre-8.35.tar.gz
ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/

可利用TCMalloc来优化Nginx的性能,需要如下两个包,一般在物理机上配置可提高性能,如果是虚拟机就不要配置这个:
libunwind-1.1.tar.gz(64位系统才需要)
http://ftp.yzu.edu.tw/nongnu/libunwind/
gperftools-2.1.tar.gz
http://download.csdn.net/detail/chunmanchunman/8201565

libmcrypt-2.5.8.tar.gz
http://sourceforge.net/projects/mcrypt/files/Libmcrypt/2.5.8/

mcrypt-2.6.8.tar.gz
http://sourceforge.net/projects/mcrypt/files/MCrypt/2.6.8/

jpegsrc.v9.tar.gz
http://www.ijg.org/files/

libpng-1.6.17.tar.gz
http://sourceforge.net/projects/libpng/files/libpng16/1.6.17/

freetype-2.5.5.tar.gz
http://ftp.twaren.net/Unix/NonGNU/freetype/

mhash-0.9.9.9.tar.gz
http://sourceforge.net/projects/mhash/files/mhash/0.9.9.9/




2. 编译安装Nginx并配置:

1)检查依赖的软件包,没有的要手动安装:
make gcc gcc-c++ autoconf libjpeg-turbo libjpeg-turbo-devel libpng
libpng-devel freetype freetype-devel libxml2 libxml2-devel zlib
zlib-devel glibc glibc-devel glib2 glib2-devel bzip2 bzip2-devel ncurses
ncurses-devel curl curl-devel e2fsprogs e2fsprogs-devel krb5-libs
krb5-devel libidn libidn-devel openssl openssl-devel openldap
openldap-devel openldap-clients openldap-servers portreserve
gd gd-devel

# yum install e2fsprogs-devel openldap-devel openldap-clients
openldap-servers portreserve gd gd-devel

2)修改系统内核和资源限制来优化Nginx性能:
# vi /etc/sysctl.conf
net.ipv4.tcp_max_tw_buckets = 10000    # timewait数量
net.ipv4.ip_local_port_range = 1024 65000  # 允许系统打开端口范围
net.ipv4.tcp_tw_recycle = 1   # 启用timewait快速回收,但会引起Android手机连接后台程序频繁超时,所以在APP服务器上设置为0
net.ipv4.tcp_tw_reuse = 1             # 启用timewait重用与新TCP
net.ipv4.tcp_syncookies = 1            # 开启SYN Cookies
net.core.somaxconn = 262144         # 系统能同时发起TCP连接数
net.core.netdev_max_backlog = 262144  #网口比内核处理数据包快时,允许发送到队列的数据包最大数目
net.ipv4.tcp_max_orphans = 262144   # 设置最多多少个TCP套接字不被关联到任何一个用户文件句柄上
net.ipv4.tcp_max_syn_backlog = 262144  
net.ipv4.tcp_synack_retries = 1
net.ipv4.tcp_syn_retries = 1
net.ipv4.tcp_fin_timeout = 1
net.ipv4.tcp_keepalive_time = 30
# /sbin/sysctl -p

# vi /etc/security/limits.conf
*        soft    nofile           10240
*        hard    nofile           65536

3)编译安装pcre-8.35,系统自带的版本过低:
# cd /usr/local/src
# tar xzvf pcre-8.35.tar.gz
# cd pcre-8.35
# ./configure --prefix=/usr/local/pcre
# make && make install

4)编译安装libunwind-1.1和gperftools-2.1,如果是虚拟机不用安装这两个软件包:
# tar xzvf libunwind-1.1.tar.gz
# cd libunwind-1.1
# CFLAGS=-fPIC ./configure
# make CFLAGS=-fPIC
# make CFLAGS=-fPIC install

# tar xzvf gperftools-2.1.tar.gz
# cd gperftools-2.1
# ./configure
# make && make install

# echo "/usr/local/lib" > /etc/ld.so.conf.d/usr_local_lib.conf
# /sbin/ldconfig


5)编译安装Nginx:

# cd /usr/local/src
# tar xzvf nginx-1.6.2.tar.gz
# cd nginx-1.6.2
# vi auto/cc/gcc
# debug             # 注释掉这两行,关闭debug模式
# CFLAGS="$CFLAGS -g"
# ./configure --prefix=/usr/local/nginx --with-pcre=/usr/local/src/pcre-8.35 --with-http_ssl_module --with-http_realip_module --with-http_image_filter_module --with-http_gzip_static_module --with-http_sub_module --with-http_stub_status_module

-----------------------------------------------------------------------------------------------
## 下面的配置方法是在物理机上启用TCMalloc来优化Nginx的性能
# ./configure --user=nginxphp --group=nginxphp --prefix=/usr/local/nginx --with-pcre=/usr/local/src/pcre-8.35 --with-google_perftools_module --with-http_ssl_module --with-http_realip_module --with-http_image_filter_module --with-http_gzip_static_module  --with-http_sub_module --with-http_stub_status_module
------------------------------------------------------------------------------------------------
(说明:--with-pcre指向的是pcre源码解压的目录)

# make
# make install

# vi /etc/profile
export PATH=/usr/local/nginx/sbin:$PATH

# source /etc/profile

# nginx -V
nginx version: nginx/1.6.2
built by gcc 4.4.7 20120313 (Red Hat 4.4.7-4) (GCC)
TLS SNI support enabled
configure arguments: --prefix=/usr/local/nginx --with-pcre=/usr/local/src/pcre-8.35 --with-http_ssl_module --with-http_realip_module --with-http_image_filter_module --with-http_gzip_static_module --with-http_sub_module --with-http_stub_status_module


6)为Google-Perftools TCMalloc添加线程目录,这步是配置启用TCMalloc功能的,如果没有启用TCMalloc就不用配置:

# mkdir /tmp/tcmalloc
# chmod 0777 /tmp/tcmalloc

7)修改Nginx配置文件,这步是配置启用TCMalloc功能的,如果没有启用TCMalloc就不用配置:

# vi /usr/local/nginx/conf/nginx.conf
user  nobody nobody;

#pid        logs/nginx.pid;
google_perftools_profiles /tmp/tcmalloc;

8)启动,停止,热重启Nginx服务:

# /usr/local/nginx/sbin/nginx

# ps -ef|grep nginx
root     30048     1  0 18:18 ?        00:00:00 nginx: master process /usr/local/nginx/sbin/nginx
nginxphp 30049 30048  0 18:18 ?        00:00:00 nginx: worker process
# lsof -n |grep tcmall
nginx     30049  nginxphp    9w      REG                8,3        0    2106703 /tmp/tcmalloc.30049

# kill -QUIT master_pid
# kill -QUIT ‘cat /usr/local/nginx/logs/nginx.pid’

# kill -HUP ‘cat /usr/local/nginx/logs/nginx.pid’

6)添加Nginx为系统服务:
# vi /etc/rc.d/init.d/nginx

#!/bin/bash

# nginx Startup script for the Nginx HTTP Server
# it is v.0.0.2 version.
# chkconfig: - 85 15
# description: Nginx is a high-performance web and proxy server.
# It has a lot of features, but it's not for everyone.
# processname: nginx
# pidfile: /var/run/nginx.pid
# config: /usr/local/nginx/conf/nginx.conf

nginxd=/usr/local/nginx/sbin/nginx
nginx_config=/usr/local/nginx/conf/nginx.conf
nginx_pid=/usr/local/nginx/logs/nginx.pid

RETVAL=0
prog="nginx"

# Source function library.
. /etc/rc.d/init.d/functions

# Source networking configuration.
. /etc/sysconfig/network

# Check that networking is up.
[ ${NETWORKING} = "no" ] && exit 0
[ -x $nginxd ] || exit 0

# Start nginx daemons functions.

start() {
  if [ -e $nginx_pid ];then
    echo "nginx already running...."
    exit 1
  fi
  echo -n $"Starting $prog: "
  daemon $nginxd -c ${nginx_config}
  RETVAL=$?
  echo
  [ $RETVAL = 0 ] && touch /var/lock/subsys/nginx
  return $RETVAL
}

# Stop nginx daemons functions.

stop() {
  echo -n $"Stopping $prog: "
  killproc $nginxd
  RETVAL=$?
  echo
  [ $RETVAL = 0 ] && rm -f /var/lock/subsys/nginx /usr/local/nginx/logs/nginx.pid
}

reload() {
  echo -n $"Reloading $prog: "
  #kill -HUP `cat ${nginx_pid}`
  killproc $nginxd -HUP
  RETVAL=$?
  echo
}

# See how we were called.

case "$1" in
  start)
    start
    ;;
  stop)
    stop
    ;;
  reload)
    reload
    ;;
  restart)
    stop
    start
    ;;
  status)
    status $prog
    RETVAL=$?
    ;;
  *)

  echo $"Usage: $prog {start|stop|restart|reload|status|help}"
  exit 1
esac

exit $RETVAL


# chmod 775 /etc/rc.d/init.d/nginx
# chkconfig nginx on
# chkconfig --level 24 nginx off

3. 编译安装PHP (5.3版以后PHP-FPM已集成到PHP内核中) 并配置:

1)检查依赖的软件包,没有的要手动安装:
make  gcc  gcc-c++  libxml2  libxml2-devel  autoconf libjpeg-turbo
libjpeg-turbo-devel  libpng  libpng-devel  freetype  freetype-devel
zlib  zlib-devel  glibc  glibc-devel  glib2  glib2-devel

# yum install libjpeg-turbo-devel

2)更新几个PHP依赖的软件源码包:
# cd /usr/local/src
# tar xzvf jpegsrc.v9.tar.gz
# cd jpeg-9
# ./configure --prefix=/usr/local/jpeg9 --enable-shared --enable-static
# make && make install

# tar xzvf libpng-1.6.17.tar.gz
# cd libpng-1.6.17
# ./configure --prefix=/usr/local/png --enable-shared
# make && make install

# tar xzvf freetype-2.5.5.tar.gz
# cd freetype-2.5.5
# ./configure --prefix=/usr/local/freetype --enable-shared
# make && make install

# tar xzvf libmcrypt-2.5.8.tar.gz
# cd libmcrypt-2.5.8
# ./configure --prefix=/usr/local/libmcrypt --enable-shared
# make && make install

# tar xzvf mhash-0.9.9.9.tar.gz
# cd mhash-0.9.9.9
# ./configure --prefix=/usr/local/mhash --enable-shared
# make && make install


-------------------------------------------------------------------------------
## 这个测试环境中没安装成功,以后有机会再测试
# tar xzvf mcrypt-2.6.8.tar.gz
# cd mcrypt-2.6.8
# ./configure --prefix=/usr/local/mcrypt
--with-libmcrypt-prefix=/usr/local/libmcrypt --enable-shared
--------------------------------------------------------------------------------------------

3)编译安装PHP及PHP-FPM:

# cd /usr/local/src
# tar xzvf php-5.5.23.tar.gz
# cd php-5.5.23

(说明:下面的编译方法是针对MySQL服务器在另外的服务器上)
# ./configure --prefix=/usr/local/php --with-config-file-path=/usr/local/php/etc
--with-mysql=mysqlnd --with-mysqli=mysqlnd --with-pdo-mysql=mysqlnd
--with-jpeg-dir=/usr/local/jpeg9
--with-png-dir=/usr/local/png --with-freetype-dir=/usr/local/freetype
--with-mhash=/usr/local/mhash --with-mcrypt=/usr/local/libmcrypt --with-gd
--with-iconv --with-zlib --with-openssl --with-xmlrpc --with-gettext --with-curl
--without-pear --enable-fpm --enable-bcmath --enable-shmop --enable-sysvsem
--enable-mbstring --enable-ftp --enable-gd-native-ttf --enable-pcntl
--enable-sockets --enable-zip --enable-soap --enable-session --enable-xml
--enable-inline-optimization --enable-mbregex

http://www.cnxct.com/some-errors ... _mysql-and-mysqlnd/

(说明:PHP5.4及以上版本默认连接MySQL的驱动就是mysqlnd,不需要在编译时加with-mysql, with-mysqli, with-pdo-mysql编译参数也行)

(说明:这个编译方法是对MySQL在本机上,只在某些情况下使用,例如集成化的安装环境,数据库和应用服务器在一起安装)
# ./configure --prefix=/usr/local/php --with-config-file-path=/usr/local/php/etc
--with-mysql=/usr/local/mysql --with-mysqli=/usr/local/mysql/bin/mysql_config
--with-mysql-sock=/tmp/mysqld.sock --with-jpeg-dir=/usr/local/jpeg9
--with-png-dir=/usr/local/png --with-freetype-dir=/usr/local/freetype
--with-mhash=/usr/local/mhash --with-mcrypt=/usr/local/libmcrypt --with-gd
--with-iconv --with-zlib --with-openssl --with-xmlrpc --with-gettext --with-curl
--without-pear --enable-fpm --enable-bcmath --enable-shmop --enable-sysvsem
--enable-mbstring --enable-ftp --enable-gd-native-ttf --enable-pcntl
--enable-sockets --enable-zip --enable-soap --enable-session --enable-xml
--enable-inline-optimization --enable-mbregex

# make
# make install

4)配置PHP和PHP-FPM:
# cp /usr/local/src/php-5.5.23/php.ini-production
/usr/local/php/etc/php.ini

# vi /usr/local/php/etc/php.ini
disable_functions =
passthru,exec,system,chroot,scandir,chgrp,chown,shell_exec,proc_open,proc_get_status,ini_alter,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,stream_socket_server,escapeshellcmd,dll,popen,disk_free_space,checkdnsrr,checkdnsrr,getservbyname,getservbyport,disk_total_space,posix_ctermid,posix_get_last_error,posix_getcwd, posix_getegid,posix_geteuid,posix_getgid, posix_getgrgid,posix_getgrnam,posix_getgroups,posix_getlogin,posix_getpgid,posix_getpgrp,posix_getpid, posix_getppid,posix_getpwnam,posix_getpwuid, posix_getrlimit, posix_getsid,posix_getuid,posix_isatty, posix_kill,posix_mkfifo,posix_setegid,posix_seteuid,posix_setgid, posix_setpgid,posix_setsid,posix_setuid,posix_strerror,posix_times,posix_ttyname,posix_uname
(说明: 列出PHP可以禁用的函数,如果某些程序需要用到这个函数,可以删除,取消禁用)

date.timezone = PRC            -- 设置时区
expose_php = Off               -- 禁止显示PHP版本信息
short_open_tag = On            -- 支持PHP短标签

# cp /usr/local/php/etc/php-fpm.conf.default
/usr/local/php/etc/php-fpm.conf

# vi /usr/local/php/etc/php-fpm.conf
[global]
pid = run/php-fpm.pid
[www]
user = nobody
group = nobody

5)启动,停止PHP-FPM:

# /usr/local/php/sbin/php-fpm

6)配置PHP-FPM为系统服务:
# cp /usr/local/src/php-5.5.23/sapi/fpm/init.d.php-fpm
/etc/init.d/php-fpm
# chmod +x /etc/init.d/php-fpm
# chkconfig php-fpm on
# chkconfig --level 24 php-fpm off
# service php-fpm start

4. 配置Nginx支持PHP:

user  nobody nobody;    -- 集成环境此用户名与组要和PHP-FPM的一样
http {
  server {
location / {
        root   html;
        index  index.php index.html index.htm;     -- 增加index.php
}
location ~ \.php$ {
    root          html;
    fastcgi_pass    127.0.0.1:9000;
    fastcgi_index   index.php;
    fastcgi_param  SCRIPT_FILENAME $document_root$fastcgi_script_name;
    include        fastcgi_params;
}
  }
}

(说明:SCRIPT_FILENAME后面的要改为$document_root或绝对路径)


# vi /usr/local/nginx/html/index.php
<?php
  Phpinfo();
?>


5. 在浏览器中访问:http://192.168.1.12,看到下面的信息,表示配置成功:


http://zyan.cc/nginx_php_v7/

http://www.iyunv.com/Linux/2014-06/103266p2.htm


6. 配置PHP Memcached扩展:

1)下载源代码安装文件:

文件版本:memcache-2.2.7.tgz (稳定版)(比较旧的扩展,已不用)
下载地址:http://pecl.php.net/package/memcache

文件版本:libmemcached-1.0.18.tar.gz(比较新的扩展,使用这个)
下载地址:https://launchpad.net/libmemcached/+download

文件版本:memcached-2.2.0.tgz(配合上面的一起使用)
下载地址:http://pecl.php.net/package/memcached



## 可选的基于PHP5&Jquery的Memcached可视化管理监控工具
文件版本:memadmin-1.0.12.tar.gz
下载地址:http://www.junopen.com/memadmin/

------------------------------------------------------------------------------------------
2)安装PHP Memcache扩展(如果有比较旧的环境,可能用到这个)

# cd /usr/local/src
# tar xzvf memcache-2.2.7.tgz
# cd memcache-2.2.7
# /usr/local/php/bin/phpize
# ./configure --with-php-config=/usr/local/php/bin/php-config
--enable-memcache
# make
# make install
Installing shared extensions:
/usr/local/php/lib/php/extensions/no-debug-non-zts-20121212/
--------------------------------------------------------------------------------------------


2)安装PHP Memcached扩展:

# cd /usr/local/src
# tar xzvf libmemcached-1.0.18.tar.gz
# cd libmemcached-1.0.18
# ./configure --prefix=/usr/local/libmemcached
# make
# make install

# tar xzvf memcached-2.2.0.tgz
# cd memcached-2.2.0
# /usr/local/php/bin/phpize
# ./configure --with-php-config=/usr/local/php/bin/php-config
--with-libmemcached-dir=/usr/local/libmemcached --enable-memcached
# make
# make install
Installing shared extensions:
/usr/local/php/lib/php/extensions/no-debug-non-zts-20121212/


3)安装Memcached可视化管理监控工具,可选的:

# cd /usr/local/src
# tar xzvf memadmin-1.0.12.tar.gz
# mv memadmin /usr/local/nginx/html/

4)启用PHP 的Memcached动态扩展:

# vi /usr/local/php/etc/php.ini

extension=memcached.so

#extension=memcache.so

5)重加载PHP-FPM服务进程,使新添的Memcached动态扩展生效:

# service php-fpm reload



7. 配置PHP MongoDB扩展:

1)下载源代码安装文件:

文件版本:mongo-1.6.10.tgz (稳定版)
下载地址:http://pecl.php.net/package/mongo

2)安装PHP MongoDB扩展:

# cd /usr/local/src
# tar xzvf mongo-1.6.10.tgz
# cd mongo-1.6.10
# /usr/local/php/bin/phpize
# ./configure --with-php-config=/usr/local/php/bin/php-config  --enable-mongo
# make
# make install
Installing shared extensions:
/usr/local/php/lib/php/extensions/no-debug-non-zts-20121212/

# ls /usr/local/php/lib/php/extensions/no-debug-non-zts-20121212/
memcached.so  mongo.so  opcache.a  opcache.so

3)启用PHP 的MongoDB动态扩展:

# vi /usr/local/php/etc/php.ini

extension=mongo.so

4)重加载PHP-FPM服务进程,使新添的MongoDB动态扩展生效:

# service php-fpm reload


运维网声明 1、欢迎大家加入本站运维交流群:群②:261659950 群⑤:202807635 群⑦870801961 群⑧679858003
2、本站所有主题由该帖子作者发表,该帖子作者与运维网享有帖子相关版权
3、所有作品的著作权均归原作者享有,请您和我们一样尊重他人的著作权等合法权益。如果您对作品感到满意,请购买正版
4、禁止制作、复制、发布和传播具有反动、淫秽、色情、暴力、凶杀等内容的信息,一经发现立即删除。若您因此触犯法律,一切后果自负,我们对此不承担任何责任
5、所有资源均系网友上传或者通过网络收集,我们仅提供一个展示、介绍、观摩学习的平台,我们不对其内容的准确性、可靠性、正当性、安全性、合法性等负责,亦不承担任何法律责任
6、所有作品仅供您个人学习、研究或欣赏,不得用于商业或者其他用途,否则,一切后果均由您自己承担,我们对此不承担任何法律责任
7、如涉及侵犯版权等问题,请您及时通知我们,我们将立即采取措施予以解决
8、联系人Email:admin@iyunv.com 网址:www.yunweiku.com

所有资源均系网友上传或者通过网络收集,我们仅提供一个展示、介绍、观摩学习的平台,我们不对其承担任何法律责任,如涉及侵犯版权等问题,请您及时通知我们,我们将立即处理,联系人Email:kefu@iyunv.com,QQ:1061981298 本贴地址:https://www.yunweiku.com/thread-206326-1-1.html 上篇帖子: 收集整理的Nginx的面试题 下篇帖子: CentOS6.7下nginx编译安装 网站
您需要登录后才可以回帖 登录 | 立即注册

本版积分规则

扫码加入运维网微信交流群X

扫码加入运维网微信交流群

扫描二维码加入运维网微信交流群,最新一手资源尽在官方微信交流群!快快加入我们吧...

扫描微信二维码查看详情

客服E-mail:kefu@iyunv.com 客服QQ:1061981298


QQ群⑦:运维网交流群⑦ QQ群⑧:运维网交流群⑧ k8s群:运维网kubernetes交流群


提醒:禁止发布任何违反国家法律、法规的言论与图片等内容;本站内容均来自个人观点与网络等信息,非本站认同之观点.


本站大部分资源是网友从网上搜集分享而来,其版权均归原作者及其网站所有,我们尊重他人的合法权益,如有内容侵犯您的合法权益,请及时与我们联系进行核实删除!



合作伙伴: 青云cloud

快速回复 返回顶部 返回列表