CentOS7 服务器部署（自用）

1. centos7初始化

1.1 查看本机ip

$ ifconfig

如果提示command not found

$ yum update
$ yum install net-tools

1.2 安装一些系统工具及初始化

$ yum -y install binutils compat-libstdc++-33 compat-libstdc++-33.i686 elfutils-libelf elfutils-libelf-devel gcc gcc-c++ glibc glibc.i686 glibc-common glibc-devel glibc-devel.i686 glibc-headers ksh libaio libaio.i686 libaio-devel libaio-devel.i686 libgcc libgcc.i686 libstdc++ libstdc++.i686 libstdc++-devel make cmake sysstat ncurses-devel wget vim zip unzip tcpdump

修改系统默认的最大文件打开数

$ vi /etc/security/limits.conf

加入下面一行

*          -       nofile    65536
*          soft    nproc     4096
root       soft    nproc     unlimited

1.3 配置访问黑白名单

注：所有源码文件上传至/app/src目录

2. 数据库安装

2.1 Mysql-5.7.25

wget -i -c http://dev.mysql.com/get/mysql57-community-release-el7-10.noarch.rpm
yum -y install mysql57-community-release-el7-10.noarch.rpm
yum -y install mysql-community-server

#编辑/ect/my.cnf

systemctl start mysqld
grep "password" /var/log/mysqld.log

#登录
mysql> ALTER USER 'root'@'localhost' IDENTIFIED BY 'new password';
mysql> use mysql；
mysql> select  host,user  FROM user WHERE user='root';
mysql> update user set host= '%'  WHERE user ='root';
mysql> flush privileges;

编译源码方式安装MySQL数据库

2.1.1 安装boost库

安装5.7版本的mysql一定要安装1.59.0版本的boost库

上传boost至/app/src目录

$ tar -zxvf boost_1_59_0.tar.gz
$ cp -a /app/src/boost_1_59_0 /usr/local/boost

2.1.2 安装mysql

上传mysql源码包至/app/src

2.1.2 新建mysql用户、组及目录

$ groupadd mysql                 ---新建一个msyql组
$ useradd -r -g mysql mysql      ---新建msyql用户禁止登录shell
$ mkdir /usr/local/mysql         ---创建目录
$ mkdir /app/mysql               ---数据仓库目录
$ mkdir /app/mysql/data          ---数据仓库目录
$ mkdir /app/mysql/log           ---数据日志目录
$ chown -R mysql /app/mysql      ---更改mysql目录所有者为mysql 

2.1.4 编译安装mysql

对mysql进行cmake

$ cd /app/src
$ tar -xzvf mysql-5.7.25.tar.gz
$ cd mysql-5.7.25
$ cmake -DCMAKE_INSTALL_PREFIX=/usr/local/mysql -DMYSQL_DATADIR=/app/mysql/data/ -DDEFAULT_CHARSET=utf8 -DDEFAULT_COLLATION=utf8_general_ci -DWITH_INNOBASE_STORAGE_ENGINE=1 -DWITH_ARCHIVE_STORAGE_ENGINE=1 -DWITH_BLACKHOLE_STORAGE_ENGINE=1 -DWITH_PERFSCHEMA_STORAGE_ENGINE=1 -DWITH_BOOST=/usr/local/boost

各参数说明如下：

-DCMAKE_INSTALL_PREFIX=/usr/local/mysql                   ---mysql的安装目录 
-DMYSQL_DATADIR=/app/mysql/data/                          ---数据库目录 
-DDEFAULT_CHARSET=utf8                                    ---字符集支持  
-DDEFAULT_COLLATION=utf8_general_ci                       ---字符集支持  
-DMYSQL_UNIX_ADDR=/usr/local/mysql/mysql.sock             ---指定mysql.sock位置 
-DWITH_INNOBASE_STORAGE_ENGINE=1                          ---添加INNOBASE不加建表时报错 
-DWITH_ARCHIVE_STORAGE_ENGINE=1                           ---添加ARCHIVE不加建表时报错 
-DWITH_BLACKHOLE_STORAGE_ENGINE=1                         ---添加BLACKHOLE不加建表时报错 
-DWITH_PERFSCHEMA_STORAGE_ENGINE=1                        ---添加PERFSCHEMA不加建表时报错

$ make                      ---开始编译  
$ make install              ---编译安装
$ make clean                ---如果出错后重新运行，需要删除CMakeCache.txt
$ rm -f CMakeCache.txt

2.1.5 设置权限并初始化MySQL系统授权表

$ cd /usr/local 
$ chown -R mysql:mysql mysql/                   
$ cd /usr/local/mysql 
---初始化，生成一个随机密码（有可能是空） 
$ bin/mysqld --initialize-insecure --user=mysql --basedir=/usr/local/mysql --datadir=/app/mysql/data                     

2.1.6 创建配置文件，启动Mysql

$ mv /etc/my.cnf /etc/my.cnf.bak             ---将默认生成my.cnf改名或删除否则启动服务会报错
$ vim /etc/my.cnf                            ---^5.7.18不再提供my-default.cnf 

# For advice on how to change settings please see
# http://dev.mysql.com/doc/refman/5.7/en/server-configuration-defaults.html
# *** DO NOT EDIT THIS FILE. It's a template which will be copied to the
# *** default location during install, and will be replaced if you
# *** upgrade to a newer version of MySQL.

[mysqld]

# Remove leading # and set to the amount of RAM for the most important data
# cache in MySQL. Start at 70% of total RAM for dedicated server, else 10%.
# innodb_buffer_pool_size = 128M

# Remove leading # to turn on a very important data integrity option: logging
# changes to the binary log between backups.
# log_bin

# These are commonly set, remove the # and set as required.
# basedir = .....
# datadir = .....
# port = .....
# server_id = .....
# socket = .....

# Remove leading # to set options mainly useful for reporting servers.
# The server defaults are faster for transactions and fast SELECTs.
# Adjust sizes as needed, experiment to find the optimal values.
# join_buffer_size = 128M
# sort_buffer_size = 2M
# read_rnd_buffer_size = 2M

max_allowed_packet = 100M

sql_mode=NO_ENGINE_SUBSTITUTION,STRICT_TRANS_TABLES

plugin-load = validate_password.so
validate_password_policy = 1
validate-password = FORCE_PLUS_PERMANENT
validate_password_check_user_name = ON

max_connect_errors = 10

log_bin = ON
server-id = 123
log-bin = /app/mysql/log/mysql-bin

$ /usr/local/mysql/bin/mysqld_safe --user=mysql &    ---后台启动mysql 

2.1.7 配置Mysql自动启动

$ cp /usr/local/mysql/support-files/mysql.server /etc/init.d/mysqld    ---复制启动文件
$ chmod 755 /etc/init.d/mysqld                                         ---增加执行权限 
$ chkconfig mysqld on
$ systemctl start mysqld           ---启动mysql服务 
$ systemctl restart mysqld         ---重启mysql  
$ systemctl stop mysqld            ---停止mysql服务  

2.1.8 配置Mysql系统环境变量

$ vi /etc/profile
---文件在最后添加如下两行 
PATH=/usr/local/mysql/bin:$PATH  
export PATH 
---重新载入环境变量
$ source /etc/profile

2.1.9 访问MySQL数据库

$ mysql -uroot -p                                           ---连接mysql，输入初始化时生成的随机密码 
mysql>alter user 'root'@'localhost' identified by '123456'; ---修改root新密码 
mysql>quit;                                             ---退出也可用exit;  
$ myslq -uroot -p123456                                     ---重新登录时输入新的密码回车

2.1.10 添加用户

登录MySQL，添加用户，并赋予root权限

mysql> grant all privileges on *.* to 'root'@'10.6.0.71' identified by '123456';
mysql> flush privileges;

2.2 Redis-5.0.5

2.2.1 安装Redis

$ cd /app/src
$ wget http://download.redis.io/releases/redis-5.0.5.tar.gz
$ tar -zxvf redis-5.0.5.tar.gz
$ cd redis-5.0.5
$ make && make install
$ cd /usr/local/bin
$ ls                                  
---查看是否有redis-server redis-cli,若没有则执行如下两行命令
$ cp /app/src/redis-5.0.5/src/redis-server /usr/local/bin 
$ cp /app/src/redis-5.0.5/src/redis-cli /usr/local/bin

2.2.2 配置Redis

$ mkdir /etc/redis
$ cp /app/src/redis-5.0.5/redis.conf /etc/redis/redis.conf
$ vi /etc/redis/redis.conf

输入i进入编辑模式编辑redis.conf

• 更改daemonize=yes ，允许后台运行redis服务

• #requirepass foobared去掉注释，foobared改为自己的密码，我在这里改为123，requirepass 123

• bind 127.0.0.1，修改为bind 0.0.0.0，允许外部网络连接

esc进入命令模式输入:wq保存

命令模式下输入/关键字可快速查找关键字n切换至下一个匹配的关键字

2.2.3 配置自启动

$ vi /etc/init.d/redis

输入一下内容

#!/bin/sh
#chkconfig: 2345 10 90
#description: Start and Stop redis

PATH=/usr/local/bin:/sbin:/usr/bin:/bin
REDISPORT=6379 
EXEC=/usr/local/bin/redis-server 
REDIS_CLI=/usr/local/bin/redis-cli 
 
PIDFILE=/var/run/redis_6379.pid
CONF="/etc/redis/redis.conf" 

case "$1" in
        start)
                if [ -f $PIDFILE ]
                then
                        echo "$PIDFILE exists, process is already running or crashed."
                else
                        echo "Starting Redis server..."
                        $EXEC $CONF
                fi
                if [ "$?"="0" ]
                then
                        echo "Redis is running..."
                fi
                ;;
        stop)
                if [ ! -f $PIDFILE ]
                then
                        echo "$PIDFILE exists, process is not running."
                else
                        PID=(cat $PIDFILE)
                        echo "Stopping..."
                        $REDIS_CLI -a "$2" -p $REDISPORT SHUTDOWN
                        while [ -x $PIDFILE ]
                        do
                                echo "Waiting for Redis to shutdown..."
                                sleep 1
                        done
                        echo "Redis stopped"
                fi
                ;;
        restart|force-reload)
                ${0} stop
                ${0} start
                ;;
        *)
                echo "Usage: /etc/init.d/redis {start|stop|restart|force-reload}" >&2
                exit 1
esac

配置自启动

$ chmod 755 /etc/init.d/redis
$ chkconfig redis on

启动或停止redis

$ service redis start
$ service redis stop 123

测试redis

$ redis-cli -a 123
-----------------------------------------
127.0.0.1:6379> set foo bar
OK
127.0.0.1:6379> get foo
"bar"
127.0.0.1:6379> quit

2.3 SQL Server安装

下载 Microsoft SQL Server Red Hat 存储库配置文件

$ curl -o /etc/yum.repos.d/mssql-server.repo https://packages.microsoft.com/config/rhel/7/mssql-server-2017.repo

安装SQL Server

$ yum install -y mssql-server
$ /opt/mssql/bin/mssql-conf setup

按照提示设置SA用户密码，并选择对应的版本（通常是2，Developer），选择语言（10，中文简体）

安装完成后自动启动，查看是否启动

$ systemctl status mssql-server

2.4 Oracl 11g安装

2.4.1安装环境

oracle软件版本：

linux.x64_11gR2_database_1of2.zip

linux.x64_11gR2_database_2of2.zip

创建目录

$ mkdir -p /app/oracle/product/11.2.0/db_1
$ chmod 775 -R /app 
$ chown oracle:oinstall -R /app/oracle

上传安装包到/app/oracle/app/，解压安装包，解压完成后，会在目录下出现一个database的目录，大概2.3G大小

$ unzip linux.x64_11gR2_database_1of2.zip
$ unzip linux.x64_11gR2_database_2of2.zip

安装环境

$ yum -y install binutils compat-libcap1  compat-libstdc++-33 compat-libstdc++-33*.i686 elfutils-libelf-devel gcc gcc-c++ glibc*.i686 glibc glibc-devel glibc-devel*.i686 ksh libgcc*.i686 libgcc libstdc++ libstdc++*.i686 libstdc++-devel libstdc++-devel*.i686 libaio libaio*.i686 libaio-devel libaio-devel*.i686 make sysstat unixODBC unixODBC*.i686 unixODBC-devel unixODBC-devel*.i686 libXp xrdp gpm* xorg-x11-drv-evdev

增加虚拟内存（以8G内存为例）

$ dd if=/dev/zero of=/swapadd bs=1024 count=8388608
$ mkswap /swapadd
$ swapon /swapadd
$ vim /etc/fastab

$ 在末尾追加以下内容
/swapadd swap swap default 0 0

查看和修改主机名

$ 查看主机名信息
$ hostnamectl status

$ 同时修改所有三个主机名：静态、瞬态和灵活主机名为oradb
$ hostnamectl set-hostname oradb

修改hosts文件

$ vim /etc/hosts

$ 加入以下内容
127.0.0.1       oradb

关闭Selinux

$ sed -i "s/SELINUX=enforcing/SELINUX=disabled/" /etc/selinux/config  
$ setenforce 0

修改 /etc/sysctl.conf，增加如下内容后，执行sysctl -p

kernel.shmmni = 4096 
kernel.shmmax = 4398046511104
kernel.shmall = 1073741824
kernel.sem = 250 32000 100 128
fs.aio-max-nr = 1048576
fs.file-max = 6815744
net.ipv4.ip_local_port_range = 9000 65500
net.core.rmem_default = 262144
net.core.rmem_max = 4194304
net.core.wmem_default = 262144
net.core.wmem_max = 1048586

$ sysctl -p

2.4.2 用户和环境变量

新增用户组、用户

$ groupadd oinstall && groupadd dba && useradd -g oinstall -G dba oracle
$ chown oracle:oinstall -R /app/oracle
$ chmod 755 -R /app/oracle

修改/etc/profile

if [ $USER = "oracle" ]; then
   if [ $SHELL = "/bin/ksh" ]; then
      ulimit -p 16384
      ulimit -n 65536
   else
      ulimit -u 16384 -n 65536
   fi
fi

修改oracle用户环境变量（切换至oracle用户）

$ su oracle
$ vim ~/.bash_profile

$ 加入以下内容
export TMP=/tmp     #安装oracle软件过程中使用的临时文件目录
export TMPDIR=$TMP    #安装oracle软件过程中使用的临时文件目录
export ORACLE_BASE=/app/oracle   #Oracle的BASE目录，所有关于Oracle的文件全部存放在这个目录中
export ORACLE_HOME=/app/oracle/product/11.2.0/db_1  #安装Oracle软件存放的目录
export ORACLE_SID=orcl   #将要创建的数据库实例的名字
export ORACLE_TERM=xterm  #安装的时候指定终端的定义资源文件xterm表示窗口方式，rt100表示终端调试模式
export PATH=/usr/sbin:$PATH   
export PATH=$ORACLE_HOME/bin:$PATH   #SHELL可执行文件的搜索路径
export LD_LIBRARY_PATH=$ORACLE_HOME/lib:/lib:/usr/lib   #库文件的搜索路径
export CLASSPATH=$ORACLE_HOME/jre:$ORACLE_HOME/jlib:$ORACLE_HOME/rdbms/jlib #java的class文件执行搜索的bin路径
export EDITOR=vim   #在oracle操作环境下嵌入使用的文本编辑工具
export NLS_LANG=AMERICAN_AMERICA.UTF8   #oracle用户这个客户端所识别的字符集
export NLS_DATE_FORMAT='YYYY-MM-DD HH24:MI:SS' #oracle用户这个客户端所识别的时间显式格式

$ source ~/.bash_profile

2.4.3 安装

配置应答文件

$ cat db_install.rsp | grep -v "#"|grep -v "^$"
$ 应答文件参考设置如下
oracle.install.responseFileVersion=/oracle/install/rspfmt_dbinstall_response_schema_v11_2_0
oracle.install.option=INSTALL_DB_SWONLY
ORACLE_HOSTNAME=oradb
UNIX_GROUP_NAME=oinstall
INVENTORY_LOCATION=/app/oracle/oraInventory
SELECTED_LANGUAGES=en,zh_CN
ORACLE_HOME=/app/oracle/product/11.2.0/db_1
ORACLE_BASE=/app/oracle
oracle.install.db.InstallEdition=EE
oracle.install.db.isCustomInstall=false
oracle.install.db.customComponents=oracle.server:11.2.0.1.0,oracle.sysman.ccr:10.2.7.0.0,oracle.xdk:11.2.0.1.0,oracle.rdbms.oci:11.2.0.1.0,oracle.network:11.2.0.1.0,oracle.network.listener:11.2.0.1.0,oracle.rdbms:11.2.0.1.0,oracle.options:11.2.0.1.0,oracle.rdbms.partitioning:11.2.0.1.0,oracle.oraolap:11.2.0.1.0,oracle.rdbms.dm:11.2.0.1.0,oracle.rdbms.dv:11.2.0.1.0,orcle.rdbms.lbac:11.2.0.1.0,oracle.rdbms.rat:11.2.0.1.0
oracle.install.db.DBA_GROUP=dba
oracle.install.db.OPER_GROUP=oinstall
oracle.install.db.CLUSTER_NODES=
oracle.install.db.config.starterdb.type=GENERAL_PURPOSE
oracle.install.db.config.starterdb.globalDBName=ora11g
oracle.install.db.config.starterdb.SID=ORCL
oracle.install.db.config.starterdb.characterSet=AL32UTF8
oracle.install.db.config.starterdb.memoryOption=true
oracle.install.db.config.starterdb.memoryLimit=512
oracle.install.db.config.starterdb.installExampleSchemas=false
oracle.install.db.config.starterdb.enableSecuritySettings=true
oracle.install.db.config.starterdb.password.ALL=oracle
oracle.install.db.config.starterdb.password.SYS=
oracle.install.db.config.starterdb.password.SYSTEM=
oracle.install.db.config.starterdb.password.SYSMAN=
oracle.install.db.config.starterdb.password.DBSNMP=
oracle.install.db.config.starterdb.control=DB_CONTROL
oracle.install.db.config.starterdb.gridcontrol.gridControlServiceURL=
oracle.install.db.config.starterdb.dbcontrol.enableEmailNotification=false
oracle.install.db.config.starterdb.dbcontrol.emailAddress=
oracle.install.db.config.starterdb.dbcontrol.SMTPServer=
oracle.install.db.config.starterdb.automatedBackup.enable=false
oracle.install.db.config.starterdb.automatedBackup.osuid=
oracle.install.db.config.starterdb.automatedBackup.ospwd=
oracle.install.db.config.starterdb.storageType=FILE_SYSTEM_STORAGE
oracle.install.db.config.starterdb.fileSystemStorage.dataLocation=
oracle.install.db.config.starterdb.fileSystemStorage.recoveryLocation=
oracle.install.db.config.asm.diskGroup=
oracle.install.db.config.asm.ASMSNMPPassword=
MYORACLESUPPORT_USERNAME=
MYORACLESUPPORT_PASSWORD=
SECURITY_UPDATES_VIA_MYORACLESUPPORT=
DECLINE_SECURITY_UPDATES=true
PROXY_HOST=
PROXY_PORT=
PROXY_USER=
PROXY_PWD=

安装数据库软件

$ su oracl
$ /app/database/runInstaller -silent -force -ignorePrereq -responseFile /app/database/response/db_install.rsp

开始安装，等待5分钟左右出现以下信息

the following configuration scripts need to be executed as the "root" user.
 #!/bin/sh 
 #Root scripts to run

/app/oracle/oraInventory/orainstRoot.sh
/app/oracle/product/11.2.0/db_1/root.sh
To execute the configuration scripts:
         1. Open a terminal window 
         2. Log in as "root" 
         3. Run the scripts 
         4. Return to this window and hit "Enter" key to continue 

Successfully Setup Software.

在root用户下执行上面2个脚本

$ /app/oracle/oraInventory/orainstRoot.sh
$ /app/oracle/product/11.2.0/db_1/root.sh

安装监听

$ /app/oracle/product/11.2.0/db_1/bin/netca /silent /responseFile /app/database/response/netca.rsp

启动监听、查看监听状态

若不是在oracle用户下，需要切换
$ su - oracle

$ lsnrctl start
$ lsnrctl status

静默dbca建立数据库

$ vim /app/database/response/dbca.rsp 

$ 设置以下内容
GDBNAME = "orcl.oradb" #78行，全局数据库名字 sid+hostname
SID = "orcl" #149行
CHARACTERSET = "AL32UTF8" #415行，编码
NATIONALCHARACTERSET= "UTF8" #425行

$ 开始安装
$ /app/oracle/product/11.2.0/db_1/bin/dbca -silent -responseFile /app/database/response/dbca.rsp

安装完成后启动数据库（一般会自动启动）

若不是在oracle用户下，需要切换
$ su - oracle

$ sqlplus / as sysdba
SQL> startup
SQL> select INSTANCE_NAME,VERSION from v$instance;

至此oracle11g安装完成，可通过软件连接，连接信息如下

服务名:orcl.oradb
SID:orcl
用户名:sys

3. 语言环境安装

3.1 jdk

3.1.1 安装

上传jdk至/app/src目录

$ cd /app/src
$ tar -xzvf jdk-8u201-linux-x64.tar.gz
$ mkdir /usr/java
$ cp -a jdk1.8.0_201 /usr/java/jdk1.8

3.1.2 设环境变量

$ vi /etc/profile
---编辑profile文件，在最后增加以下内容

#set java environment
export JAVA_HOME=/usr/java/jdk1.8
export JRE_HOME=${JAVA_HOME}/jre  
export CLASSPATH=.:${JAVA_HOME}/lib:${JRE_HOME}/lib  
export PATH=${JAVA_HOME}/bin:$PATH

---wq保存退出
$ source /etc/profile       ---执行命令让环境变量生效
$ java -version             ---成功输出java版本，表明jdk安装成功

3.2 php

3.2.1 安装依赖包

$ yum install libxml2 libxml2-devel openssl openssl-devel bzip2 bzip2-devel libcurl libcurl-devel libjpeg libjpeg-devel libpng libpng-devel freetype freetype-devel gmp gmp-devel libmcrypt libmcrypt-devel readline readline-devel libxslt libxslt-deve

3.2.2 yum安装

$ rpm -Uvh https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm   
$ rpm -Uvh https://mirror.webtatic.com/yum/el7/webtatic-release.rpm

$ yum -y install php73 php73-cli php73-common php73-devel php73-embedded php73-fpm php73-gd php73-mbstring php73-mysqlnd php73-opcache php73-pdo php73-xml php73-php-pecl-redis5.x86_64 php73-php-json.x86_64 php73-pear.noarch

$ pecl install redis

3.2.3 启动php-fpm

$ systemctl enable php-fpm
$ systemctl start php-fpm

4. 服务器安装

4.1 Tomcat

4.1.1 安装

上传tomcat至/app/src目录

$ cd /app/src
$ mkdir /app/webserver                 ---创建应用服务器目录
$ mkdir /app/website                   ---创建站点文件目录
$ unzip apache-tomcat-7.0.47.zip
$ cd apache-tomcat-7.0.47/bin
$ chmod 755 *.sh
$ ./startup.sh                         ---启动
$ ./shutdown.sh                        ---关闭

4.1.2 自启动

$ vim /etc/init.d/tomcat

主要tomcat路径

CATALINA_HOME="/app/webserver/tomcat"

#!/bin/bash
#
# kenny kenny.zhou@tom.com
# /etc/rc.d/init.d/tomcat
# init script for tomcat precesses
#
# processname: tomcat
# description: tomcat is a j2se server
# chkconfig: 2345 86 16
# description: Start up the Tomcat servlet engine.

if [ -f /etc/init.d/functions ]; then
. /etc/init.d/functions
elif [ -f /etc/rc.d/init.d/functions ]; then
. /etc/rc.d/init.d/functions
else
echo -e "/atomcat: unable to locate functions lib. Cannot continue."
exit -1
fi

RETVAL=$?
CATALINA_HOME="/app/webserver/tomcat"

case "$1" in
start)
if [ -f $CATALINA_HOME/bin/startup.sh ];
then
echo $"Starting Tomcat"
$CATALINA_HOME/bin/startup.sh
fi
;;
stop)
if [ -f $CATALINA_HOME/bin/shutdown.sh ];
then
echo $"Stopping Tomcat"
$CATALINA_HOME/bin/shutdown.sh
fi
;;
*)
echo $"Usage: $0 {start|stop}"
exit 1
;;
esac

exit $RETVAL

$ chmod 755 /etc/init.d/tomcat
$ chkconfig tomcat on
$ service tomcat start
$ service tomcat stop

在tomcat/bin/catalina.sh文件中加入以下语句

export JAVA_HOME=/usr/java/jdk1.8
export CATALINA_HOME=/app/webserver/tomcat
export CATALINA_BASE=/app/webserver/tomcat
export CATALINA_TMPDIR=/app/webserver/tomcat/temp

4.2 Nginx-1.16.0

4.2.1 安装PCRE库

PCRE用于提供编译环境的函数库，上传pcre源码包至/app/src目录下

$ cd /app/src
$ tar -zxvf pcre-8.43.tar.gz
$ cd pcre-8.43
$ ./configure
$ make && make install

4.2.2 安装zlib库

上传zlib源码包至/app/src目录下

$ cd /app/src
$ tar -zxvf zlib-1.2.11.tar.gz
$ cd zlib-1.2.11
$ ./configure
$ make && make install

4.2.3 安装ssl

上传openssl源码包至/app/src目录下

$ cd /app/src
$ tar -zxvf openssl-1.1.1g.tar.gz
$ cd openssl-1.1.1g
$ ./config
$ make && make install

4.2.4 安装nginx

上传nginx源码包至/app/src目录下

$ cd /app/src
$ tar -zxvf nginx-1.17.0.tar.gz
$ cd nginx-1.17.0
$ ./configure --sbin-path=/usr/local/nginx/nginx  --conf-path=/usr/local/nginx/nginx.conf --pid-path=/usr/local/nginx/nginx.pid  --with-http_ssl_module --with-pcre=/app/src/pcre-8.43  --with-zlib=/app/src/zlib-1.2.11 --with-openssl=/app/src/openssl-1.1.1g

$ make && make install

4.2.5 修改nginx.conf,让nginx支持php

$ vi /usr/local/nginx/nginx.conf
---编辑nginx.conf文件
---在http server index 后添加index.php
---在http server中添加如下代码

location ~ .php$ {
    root html;
    fastcgi_pass 127.0.0.1:9000;
    fastcgi_index index.php;
    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    include fastcgi_params;
}

创建php文件测试

\$ vi /usr/local/nginx/html/index.php

添加如下代码

<?php

    phpinfo();

?>

浏览器访问该服务器id，本机测试为http://IP地址，如果能正常访问，则配置成功

4.2.6 配置nginx开机启动

$ vi /etc/init.d/nginx

#! /bin/bash
#chkconfig: - 85 15
PATH=/usr/local/nginx
DESC="nginx daemon"
NAME=nginx
DAEMON=$PATH/$NAME
CONFIGFILE=$PATH/$NAME.conf
PIDFILE=$PATH/$NAME.pid
SCRIPTNAME=/etc/init.d/$NAME
set -e
[ -x "$DAEMON" ] || exit 0
do_start() {
$DAEMON -c $CONFIGFILE || echo -n "nginx already running"
}
do_stop() {
$DAEMON -s stop || echo -n "nginx not running"
}
do_reload() {
$DAEMON -s reload || echo -n "nginx can't reload"
}
case "$1" in
start)
echo -n "Starting $DESC: $NAME"
do_start
echo "."
;;
stop)
echo -n "Stopping $DESC: $NAME"
do_stop
echo "."
;;
reload|graceful)
echo -n "Reloading $DESC configuration..."
do_reload
echo "."
;;
restart)
echo -n "Restarting $DESC: $NAME"
do_stop
do_start
echo "."
;;
*)
echo "Usage: $SCRIPTNAME {start|stop|reload|restart}" >&2
exit 3
;;
esac
exit 0

设置权限，启动nginx

$ chmod 755 /etc/init.d/nginx 
$ chkconfig nginx on 
$ systemctl start nginx                  ---启动
$ systemctl restart nginx                ---重启
$ systemctl stop nginx                   ---关闭

5. 文件同步安装

例如，要将服务器A的文件，同步到服务器B

5.1 待同步服务器A

5.1.1 安装rsync

上传rsync至/app/src目录下

$ cd /app/src
$ tar -zxvf rsync-3.1.3.tar.gz
$ cd rsync-3.1.3
$ ./configure --prefix=/usr/local/rsync --disable-ipv6 --disable-iconv
$ make && make install

5.1.2 配置rsync

$ vi /etc/rsyncd.conf
-----------------------------------------------------------

uid=root
gid=root
use chroot=yes
max connections=10
pid file = /var/run/rsyncd.pid
lock file = /var/run/rsync.lock
log file = /var/log/rsyncd.log

[cjsw-cms]
path = /app/websites/cjsw-cms
hosts allow = 10.6.0.218
ignore errors
read only = no
write only = no

5.1.3 配置rsync自启动

启动rsync

$ /usr/local/rsync/bin/rsync --daemon

设置rsync开机启动

$ vi /etc/init.d/rsyncd

#!/bin/bash
#
# rsyncd        This shell script takes care of starting and stopping standalone rsync.
#
# chkconfig: - 99 50
# description: rsync is a file transport daemon
# processname: rsync
# config: /etc/rsyncd.conf

# Source function library
. /etc/rc.d/init.d/functions

RETVAL=0
prog="rsync"

PPATH="/usr/local/rsync/bin/"

# Your rsync config file path
CFILE="/etc/rsyncd.conf"

OPTIONS="--daemon -4 --config $CFILE"

start() {
        # Start daemons.
        [ -x $PPATH$prog ] || { echo "FATAL: No such programme"; exit 4; }
        [ -f $CFILE ] || { echo "FATAL: config file does not exist"; exit 6; }
        echo -n $"Starting $prog: "
        daemon $PPATH$prog $OPTIONS
        RETVAL=$?
        [ $RETVAL -eq 0 ] && touch /var/lock/subsys/$prog
        echo
        return $RETVAL
}

stop() {
        # Stop daemons.
        echo -n $"Shutting down $prog: "
        killproc $prog
        RETVAL=$?
        echo
        [ $RETVAL -eq 0 ] && rm -f /var/lock/subsys/$prog
        return $RETVAL
}

# call the function we defined
case "$1" in
  start)
        start
        ;;
  stop)
        stop
        ;;
  restart|reload)
        stop
        start
        RETVAL=$?
        ;;
  status)
        status $prog
        RETVAL=$?
        ;;
  *)
        echo $"Usage: $0 {start|stop|restart|reload|status}"
        exit 2
esac

exit $RETVAL

$ chmod 755 /etc/init.d/rsyncd
$ chkconfig rsyncd on
$ systemctl start rsyncd          ---启动
$ systemctl stop rsyncd           ---关闭

5.2 同步源服务器B

5.2.1 安装rsync

上传rsync至/app/src目录下

$ cd /app/src
$ tar -zxvf rsync-3.1.3.tar.gz
$ cd rsync-3.1.3
$ ./configure --prefix=/usr/local/rsync --disable-ipv6 --disable-iconv
$ make && make install

被同步方rsync为client不需要配置rsyncd.conf，建立一个空的/etc/rsyncd.conf文件即可

5.2.2 安装lsyncd

上传lsyncd至/app/src目录下

$ yum install lua lua-devel lua-static pkgconfig gcc asciidoc
$ cd /app/src
$ tar -zxvf lsyncd-release-2.2.3.tar.gz
$ cd lsyncd-release-2.2.3
$ cmake -DCMAKE_INSTALL_PREFIX=/usr/local/lsyncd
$ make && make install
$ mkdir /var/log/lsyncd                                ---创建日志目录

5.2.3 配置lsyncd

$ vi /etc/lsyncd.lua

settings {  
  logfile="/var/log/lsyncd/lsyncd.log",  
  statusFile="/var/log/lsyncd/lsyncd.status",  
  maxDelays=1,  
  maxProcesses=6,  
  statusInterval=20  
}  
     
sync {
  default.rsync,  
  source = "/app/websites/gdsw-cms/upload/1",
  target = "10.6.61.60::gdsw-www",
  exclude="/WEB-INF**",
  rsync = {
     binary   = "/usr/local/rsync/bin/rsync",
     archive = true,
     compress = true,
     whole_file = false
   }
}

注：exclude中的/对应的是source目录而不是系统的根目录

测试运行lsyncd

$ lsyncd /etc/lsyncd.lua

查看lsyncd运行

$ tail -200f /var/log/lsyncd/lsyncd.log

5.2.4 配置lsyncd自启动

$ vi /etc/init.d/lsyncd

#!/bin/bash
#
# lsyncd: Starts the lsync Daemon
#
# chkconfig: 345 99 90
# description:Lsyncd uses rsync to synchronize local directories with a remote
# machine running rsyncd. Lsyncd watches multiple directories
# trees through inotify. The first step after adding the watches
# is to, rsync all directories with the remote host, and then sync
# single file buy collecting the inotify events.
# processname: lsyncd
. /etc/rc.d/init.d/functions
lsyncd="/usr/local/lsyncd/bin/lsyncd"
lockfile="/var/lock/subsys/lsyncd"
pidfile="/var/run/lsyncd.pid"
prog="lsyncd"
RETVAL=0
start() {
        if [ -f $lockfile ]; then
                echo -n $"$prog is already running: "
                echo
        else
                echo -n $"Starting $prog: "
                daemon "$lsyncd /etc/lsyncd.lua"
                RETVAL=$?
                echo
                [ $RETVAL = 0 ] && touch $lockfile
                 return $RETVAL

        fi
}
stop() {
        echo -n $"Stopping $prog: "
        killproc $lsyncd
        RETVAL=$?
        echo
        [ $RETVAL = 0 ] && rm -f $lockfile
        return $RETVAL
}
case "$1" in
        start)
        start
        ;;
        stop)
        stop
        ;;
        restart)
        stop
        start
        ;;
        status)
        status $lsyncd
        ;;
        *)
        echo "Usage: lsyncd {start|stop|restart|status}"
        exit 1
esac
exit $?

$ chmod 775 /etc/init.d/lsyncd
$ chkconfig lsyncd on
$ systemctl start lsyncd          ---启动
$ systemctl stop lsyncd           ---关闭

6.建设SVN服务器

6.1 安装svn

$ sudo yum install subversion
$ which svnserve
/bin/svnserve

$ svnserve --version

subversion默认以/var/svn作为数据根目录，可以通过/etc/sysconfig/svnserve修改这个默认位置。

将根目录修改到/app/svn下。

6.2 建立版本库

使用svnadmin建立版本库report1

$ svnadmin create /app/svn/report1

6.3 配置版本库

配置版本库需要修改板块库下的三个配置文件，说明如下

路径/app/svn/report1/conf
authz               负责账号权限的管理，控制账号是否读写权限
passwd              负责账号和密码的用户名单管理
svnserve.conf        svn服务器配置文件

修改passwd

# 格式：用户名 = 密码

修改authz

[groups]
team = harry,sally
test = joe

[repoWeb:/]
* = r
@team = rw
@test = r

# 以上表明有组team、test分别包含不同的用户，对于具体路径repoWeb:/，两个组具有不同权限
# team具有读写权限，test具有读权限

修改svnserve.conf

[general]
anon-access = none                     #控制非鉴权用户访问版本库的权限
auth-access = write                    #控制鉴权用户访问版本库的权限
password-db = passwd                   #指定用户名口令文件名
authz-db = authz                       #指定权限配置文件名
realm = spring-hello-world             #指定版本库的认证域，即在登录时提示的认证域名称

6.4 启动SVN

手动启动

$ systemctl start svnserve
$ netstat -apn|grep svn
# 查看启动后端口为3690

# 重启
$ systemctl restart svnserve
# 停止
$ systemctl stop svnserve
# 状态
$ systemctl status svnserve

添加自启动

$ systemctl enable svnserve

7. 设置防火墙

如果是云服务器（阿里云，腾讯云等）还需要考虑云服务器自身的网络安全策略，否则端口可能依然无法使用

启动防火墙

$ systemctl start firewalld
$ systemctl stop firewalld
$ systemctl restart firewalld

查看所有开放的端口

firewall-cmd --zone=public --list-ports

开放常规端口（centos7），--permanent永久生效，不加则重启后生效

$ firewall-cmd --zone=public --add-port=80/tcp --permanent
$ firewall-cmd --zone=public --add-port=22/tcp --permanent
$ firewall-cmd --zone=public --add-port=8080/tcp --permanent
$ firewall-cmd --zone=public --add-port=3306/tcp --permanent
$ firewall-cmd --zone=public --add-port=1521/tcp --permanent
$ firewall-cmd --zone=public --add-port=1433/tcp --permanent
$ firewall-cmd --zone=public --add-port=6379/tcp --permanent
$ firewall-cmd --zone=public --add-port=873/tcp --permanent
$ firewall-cmd --zone=public --add-port=3690/tcp --permanent

如若还想开放8080,3306,6379,873等端口号可按上述方法添加，添加完成之后执行

$ firewall-cmd --reload