Fedora17/16,CentOS/Red Hat(RHEL)6.3/5.8 配置 LEMP（译）

时间  2019-11-09
标签 fedora17 fedora centos red hat rhel 6.3 5.8 配置 lemp 栏目 Fedora 繁體版
原文   原文链接

##什么是LEMP？ LEMP(Linux,Nginx,MySQL,PHP) 相对于LAMP来讲也不遑多让。php

而对于新手来讲，nginx配置更简单，基于这种缘由，有人说Nginx比Apache强大。html

固然，Nginx和Apache到底谁更优不是我能说得清楚的，不少大企业面临这个选择也是犯难，幸亏，这不在本文的讨论范围。mysql

##教你安装LEMP 关于Linux,Nginx,MySQL,PHP-FPM，官方文档都有详细的安装说明文档。nginx

这个指南试图详尽地指导你在Fedora17/16/15/14,Centos 6.3/6.2/6.1/6/5.8,RedHat 6.3/6.3/6.1/6/5.8上面经过YUM的方式部署你的LEMP服务。web

总得来讲，可分为三步：sql

1.安装Linux(这个过程网上已有大量的教程，而且如今的Linux版本安装过程至关友好)
2.安装MySQL
3.安装Nginx和PHP(PHP-FPM)

以上每一步，都是分开的。MySQ和Nginx还有PHP其实没有多大的依赖关系。数据库

##安装MySQL5.5 MySQL 是一种关系型数据库，至关多的CMS是使用这种数据库的，几乎能够说，全部的开源PHP应用都是用MySQL，至少是支持的。好比国外的：drupal,joomla,wordpress.国内的：dedecms,帝国等等。apache

若是你是升级版本，请必定记得备份你的数据库和Mysql配置文件，而且记得先运行下

mysql_upgrade

###1.更改权限vim

su -
## 或者 ##
sudo -i

###2.安装 Remi repositorycentos

Fedora

## Remi Dependency on Fedora 18, 17, 16
rpm -Uvh http://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-stable.noarch.rpm 
rpm -Uvh http://download1.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-stable.noarch.rpm
 
## Fedora 18 ##
rpm -Uvh http://rpms.famillecollet.com/remi-release-18.rpm
 
## Fedora 17 ##
rpm -Uvh http://rpms.famillecollet.com/remi-release-17.rpm
 
## Fedora 16 ##
rpm -Uvh http://rpms.famillecollet.com/remi-release-16.rpm
 
## Fedora 15 ##
rpm -Uvh http://rpms.famillecollet.com/remi-release-15.rpm
 
## Fedora 14 ##
rpm -Uvh http://rpms.famillecollet.com/remi-release-14.rpm
 
## Fedora 13 ##
rpm -Uvh http://rpms.famillecollet.com/remi-release-13.rpm
 
## Fedora 12 ##
rpm -Uvh http://rpms.famillecollet.com/remi-release-12.rpm

CentOS 和 Red Had(RHEL)

## Remi Dependency on CentOS 6 and Red Hat (RHEL) 6 ##
rpm -Uvh http://download.fedoraproject.org/pub/epel/6/i386/epel-release-6-8.noarch.rpm
 
## CentOS 6 and Red Hat (RHEL) 6 ##
rpm -Uvh http://rpms.famillecollet.com/enterprise/remi-release-6.rpm
 
 
## Remi Dependency on CentOS 5 and Red Hat (RHEL) 5 ##
rpm -Uvh http://dl.fedoraproject.org/pub/epel/5/i386/epel-release-5-4.noarch.rpm
 
## CentOS 5 and Red Hat (RHEL) 5 ## 
rpm -Uvh http://rpms.famillecollet.com/enterprise/remi-release-5.rpm

###3.检查可用的MySQL版本

Fedora 18,17,16,15,14,13,12

yum --enablerepo=remi list mysql mysql-server

CentOS 6.3/6.2/6.1/6/5.8 和 Red Hat(RHEL) 6.3/6.2/6.1/6/5.8

yum --enablerepo=remi,remi-test list mysql mysql-server

若是正常的话，输出会像这个样子

Loaded plugins: changelog, fastestmirror, presto, refresh-packagekit
...
remi                                                            | 3.0 kB     00:00     
remi/primary_db                                                 | 106 kB     00:00     
Available Packages
mysql.i686                               5.5.29-1.fc14.remi                        @remi
mysql-server.i686                        5.5.29-1.fc14.remi                        @remi

###4.升级或者安装MySLQ 5.5.29

Fedora 18,17,16,15,14,13,12

yum --enablerepo=remi install mysql mysql-server

CentOS 6.3/6.2/6.1/6/5.8 和 Red Hat(RHEL) 6.3/6.2/6.1/6/5.8

yum --enablerepo=remi,remi-test install mysql mysql-server

###5.开启MySQL服务而且配置其随系统启动

Fedora 18/17/16

systemctl start mysqld.service ## use restart after update
 
systemctl enable mysqld.service

Fedora 15/14/13/12/11, CentOS 6.3/6.2/6.1/6/5.8 和 Red Hat(RHEL) 6.3/6.2/6.1/5.8

/etc/init.d/mysqld start ## use restart after update
## 或者 ##
service mysqld start ## use restart after update
 
chkconfig --levels 235 mysqld on

###6.MySQL 安全安装 这一步很容易忽略，可是它尤其重要。你能够选择手动完成如下任务，也可使用MySQL自带的安全检查步骤。

  • 设置（更改）ROOT密码
  • 删除匿名账户
  • 不容许ROOT的远程登陆
  • 移出test数据库
  • 重建权限表

使用MySQL自带的安全检查：

/usr/bin/mysql_secure_installation

输出会是这个样子：

NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MySQL
      SERVERS IN PRODUCTION USE!  PLEASE READ EACH STEP CAREFULLY!
 
 
In order to log into MySQL to secure it, we\'ll need the current
password for the root user.  If you\'ve just installed MySQL, and
you haven\'t set the root password yet, the password will be blank,
so you should just press enter here.
 
Enter current password for root (enter for none): 
OK, successfully used password, moving on...
 
Setting the root password ensures that nobody can log into the MySQL
root user without the proper authorisation.
 
Set root password? [Y/n] Y
New password: 
Re-enter new password: 
Password updated successfully!
Reloading privilege tables..
 ... Success!
 
 
By default, a MySQL installation has an anonymous user, allowing anyone
to log into MySQL without having to have a user account created for
them.  This is intended only for testing, and to make the installation
go a bit smoother.  You should remove them before moving into a
production environment.
 
Remove anonymous users? [Y/n] Y
 ... Success!
 
Normally, root should only be allowed to connect from 'localhost'.  This
ensures that someone cannot guess at the root password from the network.
 
Disallow root login remotely? [Y/n] Y
 ... Success!
 
By default, MySQL comes with a database named 'test' that anyone can
access.  This is also intended only for testing, and should be removed
before moving into a production environment.
 
Remove test database and access to it? [Y/n] Y
 - Dropping test database...
 ... Success!
 - Removing privileges on test database...
 ... Success!
 
Reloading the privilege tables will ensure that all changes made so far
will take effect immediately.
 
Reload privilege tables now? [Y/n] Y
 ... Success!
 
Cleaning up...
 
 
 
All done!  If you\'ve completed all of the above steps, your MySQL
installation should now be secure.
 
Thanks for using MySQL!

注意：若是你有特别的缘由，不肯意使用MySQL自带的安全检查，你至少应该更改ROOT密码。

mysqladmin -u root password [your_password_here]
 
## Example ##
mysqladmin -u root password myownsecrectpass

###7.本地链接MySQL数据库

mysql -u root -p
 
## 或者 ##
mysql -h localhost -u root -p

###8.建立数据库，建立用户，容许远程链接 这个示例将使用如下参数

  • 数据库（名字） = webdb
  • 用户 = webdb_user
  • 远程IP = 10.0.15.25
  • 密码 = password123
  • 权限 = ALL

示例以下：

## CREATE DATABASE ##
mysql> CREATE DATABASE webdb;
 
## CREATE USER ##
mysql> CREATE USER 'webdb_user'@'10.0.15.25' IDENTIFIED BY 'password123';
 
## GRANT PERMISSIONS ##
mysql> GRANT ALL ON webdb.* TO 'webdb_user'@'10.0.15.25';
 
##  FLUSH PRIVILEGES, Tell the server TO reload the GRANT TABLES  ##
mysql> FLUSH PRIVILEGES;

远程链接

1.编辑文件/etc/sysconfig/iptables:

vim /etc/sysconfig/iptables

2.在最后加入这一行

-A INPUT -m state --state NEW -m tcp -p tcp --dport 3306 -j ACCEPT

3.重启防火墙

service iptables restart
## OR ##
/etc/init.d/iptables restart

4.测试远程链接：

mysql -h dbserver_name_or_ip_address -u webdb_user -p webdb

##安装Nginx和PHP-FPM ###1.更改用户权限

sudo -i
##或者##
su -

###2.安装依赖的repositiory

Fedora 17/16/15/14 Remi repository

## Remi Dependency on Fedora 17, 16
rpm -Uvh http://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-stable.noarch.rpm 
rpm -Uvh http://download1.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-stable.noarch.rpm
 
## Fedora 17 ##
rpm -Uvh http://rpms.famillecollet.com/remi-release-17.rpm
 
## Fedora 16 ##
rpm -Uvh http://rpms.famillecollet.com/remi-release-16.rpm
 
## Fedora 15 ##
rpm -Uvh http://rpms.famillecollet.com/remi-release-15.rpm
 
## Fedora 14 ##
rpm -Uvh http://rpms.famillecollet.com/remi-release-14.rpm

CentOS 6.3/6.2/6.1/6/5.8 and Red Hat (RHEL) 6.3/6.2/6.1/6/5.8 Remi repository

## Remi Dependency on CentOS 6 and Red Hat (RHEL) 6 ##
rpm -Uvh http://download.fedoraproject.org/pub/epel/6/i386/epel-release-6-8.noarch.rpm
 
## CentOS 6 and Red Hat (RHEL) 6 ##
rpm -Uvh http://rpms.famillecollet.com/enterprise/remi-release-6.rpm
 
 
## Remi Dependency on CentOS 5 and Red Hat (RHEL) 5 ##
rpm -Uvh http://dl.fedoraproject.org/pub/epel/5/i386/epel-release-5-4.noarch.rpm
 
## CentOS 5 and Red Hat (RHEL) 5 ## 
rpm -Uvh http://rpms.famillecollet.com/enterprise/remi-release-5.rpm

CentOS 6.3/6.2/6.1/6/5.8 and Red Hat (RHEL) 6.3/6.2/6.1/6/5.8的话，还须要在yum源里添加nginx。 建立文件/etc/yum.repos.d/nginx.repo，而后加入如下内容 CentOS

[nginx]
name=nginx repo
baseurl=http://nginx.org/packages/centos/$releasever/$basearch/
gpgcheck=0
enabled=1

Red Hat (RHEL)

[nginx]
name=nginx repo
baseurl=http://nginx.org/packages/rhel/$releasever/$basearch/
gpgcheck=0
enabled=1

###3.安装nginx,PHP5.4.10和PHP-FPM Fedora 17/16/15/14, CentOS 6.3/5.8 and Red Hat (RHEL) 6.3/5.8

yum --enablerepo=remi install nginx php php-fpm php-common

CentOS 6.3/5.8 and Red Hat (RHEL) 6.3/5.8

yum --enablerepo=remi,remi-test install nginx php php-fpm php-common

###4.安装PHP5.4.10的模块

  • APC (php-pecl-apc) – APC缓存和加速
  • CLI (php-cli) – 命令行接口
  • PEAR (php-pear) – PHP的一个扩展库
  • PDO (php-pdo) – 数据库链接的抽象层的一个库
  • MySQL (php-mysql) – 使得PHP能使用mysql的一个模块
  • PostgreSQL (php-pgsql) – 使PHP能使用PostgreSQL的模块
  • MongoDB (php-pecl-mongo) – PHP的MongoDB驱动
  • SQLite (php-sqlite) – 使用SQLite V2 扩展
  • Memcache (php-pecl-memcache) – 可以使用Memcached缓存系统的扩展
  • Memcached (php-pecl-memcached) –可以使用Memcached缓存服务的扩展
  • GD (php-gd) – GD库
  • XML (php-xml) – XML库
  • MBString (php-mbstring) – mbstring库，可处理多国语言字符
  • MCrypt (php-mcrypt) – 标准mcrypt库，用于字符串加密

Fedora 17/16/15/14

yum --enablerepo=remi install php-pecl-apc php-cli php-pear php-pdo php-mysql php-pgsql php-pecl-mongo php-sqlite php-pecl-memcache php-pecl-memcached php-gd php-mbstring php-mcrypt php-xml

CentOS 6.3/5.8 and Red Hat (RHEL) 6.3/5.8

yum --enablerepo=remi,remi-test install php-pecl-apc php-cli php-pear php-pdo php-mysql php-pgsql php-pecl-mongo php-sqlite php-pecl-memcache php-pecl-memcached php-gd php-mbstring php-mcrypt php-xml

###5.中止httpd(Apache)服务，开启Nginx和PHP-FPM服务。 中止 httpd(Apache)

/etc/init.d/httpd stop
## OR ##
service httpd stop

开启Nginx

/etc/init.d/nginx start ## use restart after update
## OR ##
service nginx start ## use restart after update

开启PHP-FPM

/etc/init.d/php-fpm start ## use restart after update
## OR ##
service php-fpm start ## use restart after update

###6.使Nginx和PHP-FPM随系统启动而启动 取消httpd的启动

chkconfig httpd off

自动启动Nginx

chkconfig --add nginx
chkconfig --levels 235 nginx on

自动启动PHP-FPM

chkconfig --add php-fpm
chkconfig --levels 235 php-fpm on

###7.配置Nginx和PHP-FPM 例子中使用testsite.local做为站点，可是这不是正式的站点。 正式的站点是像blog.mlskill.com这个样子

## public_html directory and logs directory ##
mkdir -p /srv/www/testsite.local/public_html
mkdir /srv/www/testsite.local/logs
chown -R apache:apache /srv/www/testsite.local

非必须的步骤，添加日志到/var/log目录

## public_html directory and logs directory ##
mkdir -p /srv/www/testsite.local/public_html
mkdir -p /var/log/nginx/testsite.local
chown -R apache:apache /srv/www/testsite.local
chown -R nginx:nginx /var/log/nginx

【注意】我在这里用户和用户组都使用Apache是由于PHP-FPM默认是以apache为用户的，你也能够自定义。

建立站点的nginx的配置文件

mkdir /etc/nginx/sites-available
mkdir /etc/nginx/sites-enabled

在/etc/nginx/nginx.conf文件中加入下面这行，在include /etc/nginx/conf.d/*.conf这行后面（在http的大括号里面）

## Load virtual host conf files. ##
include /etc/nginx/sites-enabled/*;

建立testsites.local虚拟站点文件

把下面的内容加入/etc/nginx/sites-available/testsite.local。这是最基础的站点配置。

server {
    server_name testsite.local;
    access_log /srv/www/testsite.local/logs/access.log;
    error_log /srv/www/testsite.local/logs/error.log;
    root /srv/www/testsite.local/public_html;
 
    location / {
        index index.html index.htm index.php;
    }
 
    location ~ \.php$ {
        include /etc/nginx/fastcgi_params;
        fastcgi_pass  127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME /srv/www/testsite.local/public_html$fastcgi_script_name;
    }
}

将你的虚拟站点连接到/etc/nginx/sites-enabled已开启站点

cd /etc/nginx/sites-enabled/
ln -s /etc/nginx/sites-available/testsite.local
service nginx restart

将testsite.local做为域名加入/etc/hosts文件

127.0.0.1               localhost.localdomain localhost testsite.local

若是你使用另一台机器做为你的Nginx服务器，把它的公有IP加入/etc/hosts

10.0.2.19				wordpress

###8.测试 建立一个测试文件 /srv/www/testsite.local/publick_html/index.php

<?php 
    echo phpinfo();
?>

在你的浏览器地址栏输入 http://testsite.local/ 你就能看到你的PHP信息了。

远程链接

1.编辑文件/etc/sysconfig/iptables:

vim /etc/sysconfig/iptables

2.在最后加入这一行

-A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT

3.重启防火墙

service iptables restart
## OR ##
/etc/init.d/iptables restart

4.测试远程链接： 在浏览器打开你的域名，http://your.domain

预告： 1.Nginx和PHP-FPM的详细设置和加速方面的设置。 2.APC的设置和注意事项。

相关文章
相关标签/搜索
每日一句
    每一个你不满意的现在，都有一个你没有努力的曾经。
本站公众号
   欢迎关注本站公众号,获取更多信息
联系我们 最近搜索 最新文章 沪ICP备13005482号-10 MyBatis教程 SQL 教程 MySQL教程 Java 教程 Thymeleaf 教程 Hibernate教程 Spring教程 Redis教程