[# Linux] Centos 7编译安装LNMP环境及 php-fpm

wget http://nginx.org/download/nginx-1.14.0.tar.gz

wget https://www.openssl.org/source/openssl-1.0.2p.tar.gz

wget ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-8.43.tar.gz

wget http://cn.php.net/distributions/php-7.1.5.tar.gz

wget https://ncu.dl.sourceforge.net/project/mcrypt/Libmcrypt/2.5.8/libmcrypt-2.5.8.tar.gz

wget https://mirrors.tuna.tsinghua.edu.cn/mariadb//mariadb-10.1.35/source/mariadb-10.1.35.tar.gz

wget http://www.zlib.net/zlib-1.2.11.tar.gz

yum -y install zlib-devel gcc-c++

./config shared zlib-dynamic \

--prefix=/usr/local/openssl

make && make install

mv /usr/bin/openssl /usr/bin/openssl.old

 mv /usr/lib64/libssl.so  /usr/lib64/libssl.so.old

mv /usr/lib64/libssl.so.1.0.2k /usr/lib64/libssl.so.1.0.2k.old

ln -s /usr/local/openssl/bin/openssl /usr/bin/openssl

ln -s /usr/local/openssl/lib/libssl.so /usr/lib64/libssl.so

echo "/usr/local/openssl/lib" >> /etc/ld.so.conf

yum -y install make cmake readline-devel openssl-devel libaio-devel

cmake \

-DCMAKE_INSTALL_PREFIX=/usr/local/mysql \

-DMYSQL_DATADIR=/data/mysqldb \

-DWITHOUT_TOKUDB=1 \

-DWITH_INNOBASE_STORAGE_ENGINE=1 \

-DWITH_ARCHIVE_STPRAGE_ENGINE=1 \

-DWITH_BLACKHOLE_STORAGE_ENGINE=1 \

-DWIYH_READLINE=1 \

-DWIYH_SSL=system \

-DVITH_ZLIB=system \

-DWITH_LOBWRAP=0 \

-DMYSQL_TCP_PORT=3306 \

-DMYSQL_UNIX_ADDR=/tmp/mysqld.sock \

-DDEFAULT_CHARSET=utf8 \

-DDEFAULT_COLLATION=utf8_general_ci

make && make install

dd if=/dev/zero of=/home/swap bs=1024 count=512000

/sbin/mkswap /home/swap

/sbin/swapon /home/swap 

vim /etc/fstab

UUID=af69fe08-8670-4461-b8d0-8e63c2677893 /home/swap            swap    swap            0 0

cp /usr/local/mysql/support-files/my-medium.cnf /etc/my.cnf

groupadd mysql

useradd -r -g mysql -s /sbin/nologin mysql -M

/usr/local/mysql/scripts/mysql_install_db \

--user=mysql --basedir=/usr/local/mysql --datadir=/data/mysqldb

chown -R mysql:mysql /data/mysqldb

/usr/local/mysql/support-files/mysql.server start

/usr/local/mysql/bin/mysql_secure_installation

cp /usr/local/mysql/support-files/mysql.server /etc/init.d/mysql

chkconfig mysql on

chkconfig --level 345 mysql on

export PATH=$PATH:/usr/local/mysql/bin

yum -y install php-mcrypt libmcrypt libmcrypt-devel  autoconf  gd  libpng libpng-devel libxml2 libxml2-devel zlib curl curl-devel freetype freetype-devel libjpeg libjpeg-devel

./configure \

--with-php-config=/usr/local/php7/bin/php-config/ \

--with-libmcrypt=/usr/local/libmcrypt/lib

make && make install

./configure \

--prefix=/usr/local/php7/ \

--enable-fpm \

--enable-mbstring \

--with-curl \

--with-gd \

--with-freetype-dir \

--with-jpeg-dir=/usr/lib64 \

--with-mcrypt=/usr/local/libmcrypt/ \

--with-zlib \

--enable-opcache \

--enable-mysqlnd  \

--enable-shmop \

--enable-sysvsem \

--enable-sysvshm \

--enable-mbstring \

--with-mcrypt \

--with-xmlrpc \

--enable-bcmath \

--with-mysqli=shared,mysqlnd \

--with-pdo-mysql=shared,mysqlnd \

--with-config-file-path=/usr/local/php7/etc/ \

--with-mysql-sock=/tmp/mysql.sock

make && make install

make clean && make && make install

cp php.ini-production /usr/local/php7/etc/php.ini

cp /usr/local/php7/etc/php-fpm.conf.default /usr/local/php7/etc/php-fpm.conf

cp /usr/local/php7/etc/php-fpm.d/www.conf.default /usr/local/php7/etc/php-fpm.d/www.conf

cp sapi/fpm/php-fpm /usr/local/php7/sbin/php-fpm

groupadd php-fpm

useradd -g php-fpm -s /sbin/nologin php-fpm -M

useradd nginx -s /sbin/nologin

usermod -a -G php-fpm nginx

vim /usr/local/php7/etc/php.ini

#避免PHP信息暴露在http头中

expose_php = Off



#避免暴露php调用mysql的错误信息

display_errors = Off



#在关闭display_errors后开启PHP错误日志（路径在php-fpm.conf中配置）

log_errors = On



#设置PHP的扩展库路径

extension_dir = "/usr/local/php7/lib/php/extensions/no-debug-non-zts-20160303"



#设置PHP的opcache和mysql动态库(直接在扩展路径下面加上)

zend_extension=opcache.so

extension=mysqli.so

extension=pdo_mysql.so



#开启opcache 关于opcache更多信息可以参考此贴 <a href="post/jb1252">PHP通过动态编译添加opcache模块</a>

[opcache]

; Determines if Zend OPCache is enabled

opcache.enable=1



#设置PHP脚本允许访问的目录（需要根据实际情况配置）

open_basedir = /www/

vim /usr/local/php7/etc/php-fpm.conf

#设置pid文件的位置：

pid = /run/php-fpm.pid



#设置错误日志的路径

error_log = /var/log/php-fpm/error.log

#引入www.conf文件中的配置

include=/usr/local/php7/etc/php-fpm.d/*.conf

vim /usr/local/php7/etc/php-fpm.d/www.conf

#设置用户和用户组

user = php-fpm

group = php-fpm



#配置PHP监听，nginx后面设置监听要和这里一样

listen = /tmp/php-fpm.sock



#设置监听的用户组

listen.owner = php-fpm

listen.group = php-fpm

listen.mode = 0660



#开启慢日志

slowlog = /var/log/php-fpm/$pool-slow.log

request_slowlog_timeout = 10s



#设置php的session目录（所属用户和用户组都是php-fpm）

php_value[session.save_handler] = files

php_value[session.save_path] = /var/lib/php/session/

echo -e '\nexport PATH=/usr/local/php7/bin:/usr/local/php7/sbin:$PATH\n' >> /etc/profile && source /etc/profile

mkdir /var/log/php-fpm/

chown php-fpm:php-fpm /var/log/php-fpm

/usr/local/php7/sbin/php-fpm

yum -y install perl perl-devel perl-ExtUtils-Embed  libxslt-devel

./configure \

--prefix=/usr/local/nginx \

--sbin-path=/usr/sbin/nginx \

--conf-path=/etc/nginx/nginx.conf \

--pid-path=/run/nginx/nginx.pid  \

--lock-path=/var/lock/nginx.lock \

--with-http_ssl_module \

--with-http_v2_module \

--with-http_realip_module \

--with-http_xslt_module \

--with-http_stub_status_module \

--with-http_sub_module \

--with-http_degradation_module \

--with-http_secure_link_module \

--with-http_gzip_static_module \

--with-http_perl_module \

--with-pcre=/root/pcre-8.39 \

--with-openssl=/root/openssl-1.0.2k \

--with-zlib=/root/zlib-1.2.11 \

--http-client-body-temp-path=/var/tmp/nginx/client_body \

--http-proxy-temp-path=/var/tmp/nginx/proxy \

--http-fastcgi-temp-path=/var/tmp/nginx/fastcgi \

--http-uwsgi-temp-path=/var/tmp/nginx/uwsgi \

--http-scgi-temp-path=/var/tmp/nginx/scgi \

--with-stream \

--with-debug \

--with-ld-opt="-Wl,-E"

make && make install

mkdir -p /var/tmp/nginx/{client,proxy,fastcgi,uwsgi,scgi}

#设置用户

user  nginx; 

worker_processes  1;



error_log  /var/log/nginx/error.log; #错误日志

#error_log  logs/error.log  notice;

#error_log  logs/error.log  info;



pid        /var/run/nginx/nginx.pid; #pid文件



events {

    worker_connections  1024;

}

http {

    include       mime.types;

    default_type  application/octet-stream;



    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '

                      '$status $body_bytes_sent "$http_referer" '

                      '"$http_user_agent" "$http_x_forwarded_for"';



    access_log  /var/log/nginx/access.log  main;



    sendfile        on;

    #tcp_nopush     on;



    #keepalive_timeout  0;

    keepalive_timeout  65;



    #隐藏Nginx版本信息，禁止网站目录浏览

    server_tokens off;

    autoindex off;

    #当FastCGI后端服务器处理请求给出http响应码为4xx和5xx时，就转发给nginx

    fastcgi_intercept_errors on;



    #关于fastcgi的配置

    fastcgi_connect_timeout 300;

    fastcgi_send_timeout 300;

    fastcgi_read_timeout 300;

    fastcgi_buffer_size 64k;

    fastcgi_buffers 4 64k;

    fastcgi_busy_buffers_size 128k;

    fastcgi_temp_file_write_size 128k;



    #支持gzip压缩

    gzip on;

    gzip_min_length 1k;

    gzip_buffers 16 64k;

    gzip_http_version 1.1;

    gzip_comp_level 6;

    gzip_types text/plain text/html text/xml text/css text/javascript application/javascript application/xhtml+xml application/xml application/x-javascript application/json;

    gzip_vary on;

    gzip_disable "MSIE [1-6].(?!.*SV1)";





    # 将所有http请求重定向到https

server{

      listen 80;

      server_name www.guhei.net;

      return 301 https://www.guhei.net$request_uri;

    }



    # 配置HTTPS 

    server {

        listen               443 ssl http2;

        server_name www.guhei.net;

        ssl_certificate /etc/nginx/ssl/1.crt;   #证书文件

        ssl_certificate_key /etc/nginx/ssl/1.key; #证书文件

        ssl_session_cache shared:SSL:3m;

        ssl_session_timeout 5m;

        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;

        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

        ssl_prefer_server_ciphers on;



    location / { 

            root   /www; #网站根目录

            index  welcome.html index.php index.html;

            error_page  404              /404.html;

        }

        # php-fpm监听

        location ~ \.php$ {

        error_page  404             /404.html;

        try_files $uri =404;

        fastcgi_pass   unix:/tmp/php-fpm.sock;

        fastcgi_index  index.php;

        fastcgi_param  SCRIPT_FILENAME $document_root$fastcgi_script_name;

        include        fastcgi_params;

                                   }   

                }

    }