lnmp部署
目录
什么是LNMP
LNMP代表的就是：Linux系统下Nginx+MySQL+PHP这种网站服务器架构。Nginx中的PHP是以fastcgi的方式结合Nginx的，可以理解为Nginx代理了PHP的fastcgi。
为什么要用LNMP
LNMP具有成本低廉、部署灵活、快速开发、安全稳定等特点，是 Web 网络应用和环境的优秀组合。若是服务器配置比较低的个人网站，当然首选 LNMP 架构。
LNMP的工作方式
首先Nginx服务是不能处理动态请求，那么当用户发起动态请求时, Nginx又是如何进行处理的。
1、静态请求：请求静态文件或者html页面，服务器上存在的html文件
静态文件：文件上传到服务器，永远不会改变的文件就是静态文件
html就是一个标准的静态文件
2、动态请求：请求的是动态内容，带参数的请求
动态页面不存在于服务器上，可能是取数据库或者redis等地方取值拼凑成的页面
当用户发起http请求，请求会被Nginx处理，如果是静态资源请求Nginx则直接返回，如果是动态请求Nginx则通过fastcgi协议转交给后端的PHP程序处理，具体如下图所示
访问流程
1.浏览器输入域名，浏览器会拿着域名取DNS服务器解析
2.DNS服务器会将域名解析成ip
3.浏览器会去与IP对应的服务器建立tcp/ip连接
4.连接建立完成后，后向服务器发请求，请求nginx
5.nginx会判断请求是动态的还是静态的
#静态请求
location .jpg$ {
root /code
}
#动态请求
location .php$ {
fastcgi_pass 127.0.0.1:9000;
}
6.如果是静态请求，nginx去code目录获取，直接返回
7.如果是动态请求，nginx通过fastcgi协议连接PHP服务的PHP-fpm管理进程
8.PHP-FPM管理进程会下发工作给wrapper工作进程
9.wrapper工作进程判断php内容是否可以直接返回内容；
10.如果只是php内容，wrapper工作进程直接解析，并返回结果；
11.如果还需要访问数据库，则wrapper会去请求数据库获取数据，再返回数据。
12.数据流转过程
请求：浏览器 ->负载均衡 ->nginx ->php-fpm ->wrapper ->mysql
响应：mysql -> wrapper -> php-fpm -> nginx -> 负载均衡 ->浏览器。
LNMP部署
环境说明：
| 主机名 | IP地址 | 应用版本 |
| nginx | 192.168.78.20 | nginx-1.20.2 |
| mysql | 192.168.78.25 | mysql-5.7.38 |
| php | 192.168.78.30 | php-8.1.11 |
安装nginx
//修改主机名关闭防火墙和selinux [root@zzh ~]# hostnamectl set-hostname nginx [root@zzh ~]# bash [root@nginx ~]# setenforce 0 [root@nginx ~]# sed -ri 's/^(SELINUX=).*/\1disabled/g' /etc/selinux/config [root@nginx ~]# systemctl disable --now firewalld Removed /etc/systemd/system/multi-user.target.wants/firewalld.service. Removed /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service. //创建用户 [root@nginx ~]# useradd -rMs /sbin/nologin nginx //安装依赖包 [root@nginx ~]# dnf -y install pcre-devel openssl openssl-devel gd-devel gcc gcc-c++ make //下载nginx软件包并解压 [root@nginx ~]# wget http://nginx.org/download/nginx-1.20.2.tar.gz --2022-10-11 09:49:59-- http://nginx.org/download/nginx-1.20.2.tar.gz Resolving nginx.org (nginx.org)... 3.125.197.172, 52.58.199.22, 2a05:d014:edb:5704::6, ... Connecting to nginx.org (nginx.org)|3.125.197.172|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 1062124 (1.0M) [application/octet-stream] Saving to: 'nginx-1.20.2.tar.gz' nginx-1.20.2.tar.gz 100%[=======================================================================================================>] 1.01M 752KB/s in 1.4s 2022-10-11 09:50:01 (752 KB/s) - 'nginx-1.20.2.tar.gz' saved [1062124/1062124] [root@nginx ~]# tar -xf nginx-1.20.2.tar.gz //进入目录配置编译安装 [root@nginx ~]# cd nginx-1.20.2 [root@nginx nginx-1.20.2]# ./configure \ > --prefix=/usr/local/nginx \ > --user=nginx \ > --group=nginx \ > --with-debug \ > --with-http_ssl_module \ > --with-http_realip_module \ > --with-http_image_filter_module \ > --with-http_gunzip_module \ > --with-http_gzip_static_module \ > --with-http_stub_status_module \ > --http-log-path=/var/log/nginx/access.log \ > --error-log-path=/var/log/nginx/error.log [root@nginx nginx-1.20.2]# make -j $(grep 'processor' /proc/cpuinfo | wc -l) && make install //安装完成 [root@nginx nginx-1.20.2]# cd /usr/local/nginx/ [root@nginx nginx]# ls conf html logs sbin //配置环境变量 [root@nginx nginx]# echo "export PATH=$PATH:/usr/local/nginx/sbin" > /etc/profile.d/nginx.sh [root@nginx nginx]# source /etc/profile.d/nginx.sh //编写service文件启动服务 [root@nginx nginx]# cd [root@nginx ~]# cat > /usr/lib/systemd/system/nginx.service << EOF > [Unit] > Description=nginx server daemon > After=network.target > > [Service] > Type=forking > ExecStart=/usr/local/nginx/sbin/nginx > ExecStop=/usr/local/nginx/sbin/nginx -s stop > ExecReload=/bin/kill -HUP \$MAINPID > > [Install] > WantedBy=multi-user.target > EOF //重载配置加入开机自启 [root@nginx ~]# systemctl daemon-reload [root@nginx ~]# systemctl enable --now nginx Created symlink /etc/systemd/system/multi-user.target.wants/nginx.service → /usr/lib/systemd/system/nginx.service. [root@nginx ~]# ss -antl State Recv-Q Send-Q Local Address:Port Peer Address:Port Process LISTEN 0 128 0.0.0.0:80 0.0.0.0:* LISTEN 0 128 0.0.0.0:22 0.0.0.0:* LISTEN 0 128 [::]:22 [::]:*安装mysql
//修改主机名关闭防火墙和selinux [root@localhost ~]# hostnamectl set-hostname mysql [root@localhost ~]# bash [root@mysql ~]# setenforce 0 [root@mysql ~]# sed -ri 's/^(SELINUX=).*/\1disabled/g' /etc/selinux/config [root@mysql ~]# systemctl disable --now firewalld Removed /etc/systemd/system/multi-user.target.wants/firewalld.service. Removed /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service. //安装依赖包 [root@mysql ~]# dnf -y install ncurses-devel openssl-devel openssl cmake mariadb-devel ncurses-compat-libs //创建用户 [root@mysql ~]# useradd -rMs /sbin/nologin mysql //下载mysql软件包 [root@localhost ~]# tar xf mysql-5.7.39-linux-glibc2.12-x86_64.tar.gz -C /usr/local/ [root@localhost ~]# cd /usr/local/ [root@localhost local]# ls bin etc games include lib lib64 libexec mysql-5.7.39-linux-glibc2.12-x86_64 //解压重命名 [root@mysql ~]# tar xf mysql-5.7.38-linux-glibc2.12-x86_64.tar.gz -C /usr/local/ [root@mysql ~]# cd /usr/local/ [root@mysql local]# ls bin games lib libexec sbin src etc include lib64 mysql-5.7.38-linux-glibc2.12-x86_64 share [root@mysql local]# mv mysql-5.7.38-linux-glibc2.12-x86_64 mysql [root@mysql local]# ls bin etc games include lib lib64 libexec mysql sbin share src //修改属主属组 [root@mysql local]# chown -R mysql.mysql mysql //配置include、man及环境变量 [root@mysql local]# ln -s /usr/local/mysql/include /usr/include/mysql [root@mysql local]# echo '/usr/local/mysql/lib' > /etc/ld.so.conf.d/mysql.conf [root@mysql local]# vi /etc/man_db.conf MANDATORY_MANPATH /usr/local/mysql/man [root@mysql local]# echo 'export PATH=/usr/local/mysql/bin:$PATH' > /etc/profile.d/mysql.sh [root@mysql local]# source /etc/profile.d/mysql.sh [root@mysql local]# which mysql /usr/local/mysql/bin/mysql //建立数据存放目录 [root@mysql ~]# mkdir -p /opt/data [root@mysql ~]# chown -R mysql.mysql /opt/data/ //初始化数据库 [root@mysql local]# mysqld --initialize --user mysql --datadir /opt/data 2022-10-11T14:35:35.772615Z 0 [Warning] TIMESTAMP with implicit DEFAULT value is deprecated. Please use --explicit_defaults_for_timestamp server option (see documentation for more details). 2022-10-11T14:35:36.535134Z 0 [Warning] InnoDB: New log files created, LSN=45790 2022-10-11T14:35:36.638150Z 0 [Warning] InnoDB: Creating foreign key constraint system tables. 2022-10-11T14:35:36.707132Z 0 [Warning] No existing UUID has been found, so we assume that this is the first time that this server has been started. Generating a new UUID: f87791bd-4971-11ed-a76d-000c29e2cd1c. 2022-10-11T14:35:36.708061Z 0 [Warning] Gtid table is not ready to be used. Table 'mysql.gtid_executed' cannot be opened. 2022-10-11T14:35:36.910937Z 0 [Warning] A deprecated TLS version TLSv1 is enabled. Please use TLSv1.2 or higher. 2022-10-11T14:35:36.910964Z 0 [Warning] A deprecated TLS version TLSv1.1 is enabled. Please use TLSv1.2 or higher. 2022-10-11T14:35:36.911380Z 0 [Warning] CA certificate ca.pem is self signed. 2022-10-11T14:35:36.962040Z 1 [Note] A temporary password is generated for root@localhost: 6wR%+a_a9:zp [root@mysql local]# echo '6wR%+a_a9:zp' > pass //生成配置文件 [root@mysql ~]# cat >> /etc/my.cnf <<EOF > [mysqld] > basedir = /usr/local/mysql > datadir = /opt/data > socket = /tmp/mysql.sock > port = 3306 > pid-file = /opt/data/mysql.pid > user = mysql > skip-name-resolve > EOF //配置服务启动脚本 [root@mysql ~]# cp -a /usr/local/mysql/support-files/mysql.server /etc/init.d/mysqld [root@mysql ~]# sed -ri 's#^(basedir=).*#\1/usr/local/mysql#g' /etc/init.d/mysqld [root@mysql ~]# sed -ri 's#^(basedir=).*#\1/usr/local/mysql#g' /etc/init.d/mysqld [root@mysql ~]# chmod +x /etc/init.d/mysqld //编写service文件启动服务并设置开机自启 [root@mysql ~]# cat > /usr/lib/systemd/system/mysqld.service <<EOF > [Unit] > Description=mysqld server daemon > After=network.target > > [Service] > Type=forking > ExecStart=/etc/init.d/mysqld start > ExecStop=/etc/init.d/mysqld stop > ExecReload=/bin/kill -HUP \$MAINPID > > [Install] > WantedBy=multi-user.target > EOF [root@mysql ~]# systemctl daemon-reload [root@mysql ~]# systemctl enable --now mysqld Synchronizing state of mysqld.service with SysV service script with /usr/lib/systemd/systemd-sysv-install. Executing: /usr/lib/systemd/systemd-sysv-install enable mysqld Created symlink /etc/systemd/system/multi-user.target.wants/mysqld.service → /usr/lib/systemd/system/mysqld.service. [root@mysql ~]# ss -antl State Recv-Q Send-Q Local Address:Port Peer Address:Port Process LISTEN 0 128 0.0.0.0:22 0.0.0.0:* LISTEN 0 128 [::]:22 [::]:* LISTEN 0 80 *:3306 *:* //登录mysql修改密码 [root@mysql ~]# mysql -uroot -p6wR%+a_a9:zp mysql: [Warning] Using a password on the command line interface can be insecure. Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 2 Server version: 5.7.39 Copyright (c) 2000, 2022, Oracle and/or its affiliates. Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. mysql> set password = password('123com'); Query OK, 0 rows affected, 1 warning (0.00 sec) mysql> quit Bye [root@mysql ~]# mysql -uroot -p123com mysql: [Warning] Using a password on the command line interface can be insecure. Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 3 Server version: 5.7.39 MySQL Community Server (GPL) Copyright (c) 2000, 2022, Oracle and/or its affiliates. Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. mysql>安装php
//修改主机名关闭防火墙selinux [root@localhost ~]# hostnamectl set-hostname php [root@localhost ~]# bash [root@php ~]# systemctl disable --now firewalld Removed /etc/systemd/system/multi-user.target.wants/firewalld.service. Removed /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service. [root@php ~]# setenforce 0 [root@php ~]# sed -ri 's/^(SELINUX=).*/\1disabled/g' /etc/selinux/config //配置yum源 [root@php ~]# curl -o /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-vault-8.5.2111.repo [root@php ~]# sed -i -e '/mirrors.cloud.aliyuncs.com/d' -e '/mirrors.aliyuncs.com/d' /etc/yum.repos.d/CentOS-Base.repo //安装依赖包 [root@php ~]# yum -y install epel-release [root@php ~]# yum -y install openssl-devel pcre-devel expat-devel libtool gcc gcc-c++ wget make ncurses-devel openssl cmake libxm12 libxm12-devel bzip2 bzip2-devel libcurl libcurl-devel libicu-devel libjpeg libjpeg-devel libpng libpng-devel openldap-devel freetype freetype-devel gmp gmp-devel readline readline-devel libxslt libxslt-devel php-mysqlnd libsqlite3x-devel libzip-devel https://dl.rockylinux.org/pub/rocky/9/CRB/x86_64/os/Packages/o/oniguruma-devel-6.9.6-1.el9.5.x86_64.rpm http://mirror.stream.centos.org/9-stream/CRB/x86_64/os/Packages/libzip-devel-1.7.3-7.el9.x86_64.rpm http://mirror.centos.org/centos/8-stream/PowerTools/x86_64/os/Packages/oniguruma-devel-6.8.2-2.el8.x86_64.rpm --allowerasing --skip-broken --nobest //下载php软件包 [root@php ~]# wget https://www.php.net/distributions/php-8.1.11.tar.gz //解压软件包编译安装 [root@php ~]# tar xf php-8.1.11.tar.gz [root@php ~]# cd php-8.1.11 [root@php php-8.1.11]# ./configure --prefix=/usr/local/php8 --with-config-file-path=/etc --enable-fpm --enable-inline-optimization --disable-debug --disable-rpath --enable-shared --enable-soap --with-openssl --enable-bcmath --with-iconv --with-bz2 --enable-calendar --with-curl --enable-exif --enable-ftp --enable-gd --with-jpeg --with-zlib-dir --with-freetype --with-gettext --enable-json --enable-mbstring --enable-pdo --with-mysqli=mysqlnd --with-pdo-mysql=mysqlnd --with-readline --enable-shmop --enable-simplexml --enable-sockets --with-zip --enable-mysqlnd-compression-support --with-pear --enable-pcntl --enable-posix [root@php php-8.1.11]# make [root@php php-8.1.11]# make install //配置环境变量查看版本 [root@php php-8.1.11]# echo 'export PATH=/usr/local/php8/bin:$PATH' > /etc/profile.d/php8.sh [root@php php-8.1.11]# source /etc/profile.d/php8.sh [root@php php-8.1.11]# which php /usr/local/php8/bin/php [root@php php-8.1.11]# php -v PHP 8.1.11 (cli) (built: Oct 11 2022 15:39:15) (NTS) Copyright (c) The PHP Group Zend Engine v4.1.11, Copyright (c) Zend Technologies //配置php-fpm [root@php php-8.1.11]# cp php.ini-production /etc/php.ini cp: overwrite '/etc/php.ini'? y [root@php php-8.1.11]# cp sapi/fpm/init.d.php-fpm /etc/init.d/php-fpm [root@php php-8.1.11]# chmod +x /etc/init.d/php-fpm [root@php php-8.1.11]# cp /usr/local/php8/etc/php-fpm.conf.default /usr/local/php8/etc/php-fpm.conf [root@php php-8.1.11]# cp /usr/local/php8/etc/php-fpm.d/www.conf.default /usr/local/php8/etc/php-fpm.d/www.conf //编写service文件启动服务并设为开机自启 [root@php php-8.1.11]# cat > /usr/lib/systemd/system/php.service <<EOF > [Unit] > Description=mysqld server daemon > After=network.target > > [Service] > Type=forking > ExecStart=/etc/init.d/mysqld start > ExecStop=/etc/init.d/mysqld stop > ExecReload=/bin/kill -HUP \$MAINPID > > [Install] > WantedBy=multi-user.target > EOF [root@php php-8.1.11]# systemctl daemon-reload [root@php php-8.1.11]# systemctl enable --now php Created symlink /etc/systemd/system/multi-user.target.wants/php.service → /usr/lib/systemd/system/php.service. [root@php php-8.1.11]# ss -antl State Recv-Q Send-Q Local Address:Port Peer Address:Port Process LISTEN 0 128 0.0.0.0:22 0.0.0.0:* LISTEN 0 128 127.0.0.1:9000 0.0.0.0:* LISTEN 0 128 [::]:22 [::]:*安装后配置
nginx服务端
[root@nginx ~]# vim /usr/local/nginx/conf/nginx.conf ······ location / { root html; index index.php index.html index.htm; //添加index.php } ······ location ~ \.php$ { root html; fastcgi_pass 192.168.78.35:9000; //改为php端ip fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME /var/www$fastcgi_script_name; //将$/scripts修改为根目录 include fastcgi_params; } //检查配置文件是否有错误 [root@nginx ~]# nginx -t nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful //重启服务 [root@nginx ~]# systemctl restart nginx //创建index.php文件 [root@nginx ~]# cd /usr/local/nginx/html/ [root@nginx html]# vim index.php [root@nginx html]# cat index.php <?php phpinfo(); ?>php服务端
[root@php ~]# vim /usr/local/php8/etc/php-fpm.d/www.conf listen = 192.168.78.35:9000 //监听php服务器的ip端口号为9000 ;listen.allowed_clients = 192.168.78.20 //允许nginx服务器进行访问 //创建index.php文件 [root@php ~]# mkdir /var/www [root@php ~]# cat > /var/www/index.php <<EOF > <?php > phpinfo(); > ?> > EOF //重启服务 [root@php ~]# systemctl restart php [root@php ~]# ss -antl State Recv-Q Send-Q Local Address:Port Peer Address:Port Process LISTEN 0 128 0.0.0.0:22 0.0.0.0:* LISTEN 0 128 192.168.78.35:9000 0.0.0.0:* LISTEN 0 128 [::]:22 [::]:*
原文链接：https://blog.csdn.net/Eternity_zzh/article/details/127274186
© 版权声明
声明📢本站内容均来自互联网，归原创作者所有，如有侵权必删除。
本站文章皆由CC-4.0协议发布，如无来源则为原创，转载请注明出处。
THE END
