CentOS 6.10 編譯安裝 LNMP Linux + Nginx + MariaDB + PHP
選 minimal 安裝
cd /usr/local/bin
設定防火牆
vi firewall.sh
變更權限
chmod +x firewall.sh
啟動防火牆
firewall.sh start
設定開機執行
vi /etc/rc.local
/usr/local/bin/firewall.sh start
設定 selinux
vi /etc/sysconfig/selinux
關閉 selinux
SELINUX=disabled
關閉 ip6tables
chkconfig ip6tables off
yum -y remove mysql-* postfix-*
yum -y install bind bind-chroot bind-utils
yum -y install postfix cyrus-sasl cyrus-sasl-gssapi cyrus-sasl-ntlm cyrus-sasl-md5 cyrus-sasl-plain dovecot
yum -y install mysql mysql-devel mysql-server
yum -y install ntp wget lynx ftp nmap crontabs mlocate bzip2 subversion git ImageMagick-* boost-*
安裝編譯所需要的函示庫
yum -y groupinstall "Development Tools"
yum -y install gcc gcc-c++ make automake autoconf kernel-devel ncurses-devel curl gd file patch mlocate diffutils curl-devel gd-devel gettext-devel glibc-devel glib2-devel libstdc++-devel libjpeg-devel libmcrypt-devel libpng-devel libxslt-devel libxml2-devel openssl-devel pcre-devel zlib-devel bison bison-devel pam-devel libc-client libc-client-devel
vi /etc/profile
export LD_LIBRARY_PATH=/usr/local/lib
export LD_RUN_PATH=/usr/local/lib
重新開機
reboot
安裝 Make
https://www.gnu.org/software/make/
lynx http://ftp.gnu.org/gnu/make/make-4.2.1.tar.gz
tar zxf make-4.2.1.tar.gz
cd make-4.2.1
./configure && make && make install && make clean
cd ..
安裝 M4
https://www.gnu.org/software/m4/m4.html
lynx http://ftp.gnu.org/gnu/m4/m4-1.4.18.tar.gz
tar zxf m4-1.4.18.tar.gz
cd m4-1.4.18
./configure && make && make install && make clean
cd ..
安裝 Autoconf
https://www.gnu.org/software/autoconf/autoconf.html
lynx http://ftp.gnu.org/gnu/autoconf/autoconf-2.69.tar.gz
tar zxf autoconf-2.69.tar.gz
cd autoconf-2.69
./configure && make && make install && make clean
cd ..
安裝 Automake
https://www.gnu.org/software/automake/
lynx http://ftp.gnu.org/gnu/automake/automake-1.15.tar.gz
tar zxf automake-1.15.tar.gz
cd automake-1.15
./configure && make && make install && make clean
cd ..
安裝 Libtool
http://ftp.gnu.org/gnu/libtool/
lynx http://ftp.gnu.org/gnu/libtool/libtool-2.4.6.tar.gz
tar zxf libtool-2.4.6.tar.gz
cd libtool-2.4.6
./configure && make && make install && make clean
cd ..
安裝 Bison
https://www.gnu.org/software/bison/
lynx http://ftp.gnu.org/gnu/bison/bison-3.0.4.tar.gz
tar zxf bison-3.0.4.tar.gz
cd bison-3.0.4
./configure && make && make install && make clean
cd ..
登出再登入
安裝 BIND
https://www.isc.org/downloads/bind/
tar zxf bind-9.10.5.tar.gz
cd bind-9.10.5
./configure
make depend
make
make install
make clean
關閉 chroot
vi /etc/sysconfig/named
#ROOTDIR=/var/named/chroot
/usr/sbin/rndc-confgen -a -c /etc/rndc.key
/usr/sbin/rndc-confgen > /etc/rndc.conf
vi /etc/rndc.key
vi /etc/rndc.conf
vi /etc/named.conf
將 127.0.0.1 改為 any
listen-on port 53 { any; };
將 localhost 改為 any
allow-query { any; };
註解掉 ipv6
#listen-on-v6 port 53 { ::1; };
vi /etc/named.rfc1912.zones
最下面加入
zone "網域名稱" IN { type master; file "網域名稱設定檔"; allow-update { none; }; };
多數網域設定檔快速方法
先把檔案傳到 /var/named/chroot/var/named
再做權限變更
chown root.named named.*
chmod 640 named.*
然後移動檔案至 /var/named
mv named.* /var/named
啟動 named
/etc/rc.d/init.d/named start
開機啟動
chkconfig named on
編輯 dovecot 設定檔
vi /etc/dovecot/dovecot.conf
protocols = imap pop3
啟動 pop3
/etc/rc.d/init.d/dovecot start
開機啟動
chkconfig dovecot on
啟動認證
/etc/rc.d/init.d/saslauthd start
開機啟動
chkconfig saslauthd on
編輯 postfix 設定檔
vi /etc/postfix/main.cf
郵件主機名稱
myhostname = 主機名稱
郵件主機網域名稱
mydomain = 網域名稱
郵件主機發信來源
myorigin = $myhostname
要監聽的網路介面
inet_interfaces = all
要收信的網域名稱
mydestination = /etc/postfix/local-host-names
帳號對照表
virtual_alias_maps = hash:/etc/postfix/virtual
設定信任網域
mynetworks_style = host
規定信任的用戶端
mynetworks = 127.0.0.0/8, 192.168.0.0/24, hash:/etc/postfix/access
規範可以幫忙 relay 的下一部 MTA 主機位址
relay_domains = $mydestination
啟動 SMTP 認證
smtpd_sasl_auth_enable = yes
broken_sasl_auth_clients = yes
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_security_options = noanonymous
smtpd_client_restrictions = permit_sasl_authenticated
smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated
vi /etc/dovecot/conf.d/10-auth.conf
disable_plaintext_auth = no
auth_mechanisms = plain login
vi /etc/dovecot/conf.d/10-mail.conf
mail_location = mbox:~/mail:INBOX=/var/mail/%u
vi /etc/dovecot/conf.d/10-master.conf
service auth 區塊
#unix_listener auth-userdb
unix_listener /var/spool/postfix/private/auth {
mode = 0666
user = postfix
group = postdrop
}
設定接收的網域
vi /etc/postfix/local-host-names
設定郵件帳號對應
vi /etc/postfix/virtual
轉換對照表
postmap /etc/postfix/virtual
啟動服務
/etc/rc.d/init.d/postfix start
開機啟動
chkconfig postfix on
重新開機
reboot
先切換到目錄
cd /usr/local/src
下載 7-zip
https://sourceforge.net/projects/p7zip/
安裝 7-zip
tar jxf p7zip_16.02_src_all.tar.bz2
cd p7zip_16.02
cp makefile.linux_amd64 makefile.machine
make all
./install.sh
make clean
執行檔位置
/usr/local/bin/7za
下載 redis
https://redis.io/
http://download.redis.io/releases/redis-3.2.8.tar.gz
安裝 redis
tar zxf redis-3.2.8.tar.gz
cd redis-3.2.8
make
make test
make install
cd utils
./install_server.sh
make clean
啟動 redis
/usr/local/bin/redis-server /etc/redis/6379.conf
命令列
/usr/local/bin/redis-cli
性能測試
/usr/local/bin/redis-benchmark -n 10000
下載 ProFTPD
http://www.proftpd.org/
lynx ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.6.tar.gz
安裝 ProFTPD
tar zxf proftpd-1.3.6.tar.gz
cd proftpd-1.3.6
./configure --prefix=/usr/local/ProFTPD && make && make install && make clean
cd ..
下載 libmcrypt
https://sourceforge.net/projects/mcrypt/
安裝 libmcrypt
tar zxf libmcrypt-2.5.8.tar.gz
cd libmcrypt-2.5.8
./configure --prefix=/usr/local/libmcrypt && make && make install && make clean
cd ..
下載 apr
http://apr.apache.org/
安装 apr
tar jxf apr-1.5.2.tar.bz2
cd apr-1.5.2
./configure --prefix=/usr/local/apr && make && make install && make clean
cd ..
下載 apr-util
http://apr.apache.org/
安装 apr-util
tar jxf apr-util-1.5.4.tar.bz2
cd apr-util-1.5.4
./configure --prefix=/usr/local/apr-util --with-apr=/usr/local/apr/bin/apr-1-config && make && make install && make clean
cd ..
下載 sqlite
https://www.sqlite.org/
lynx https://www.sqlite.org/2017/sqlite-autoconf-3180000.tar.gz
安裝 sqlite
tar zxf sqlite-autoconf-3180000.tar.gz
cd sqlite-autoconf-3180000
./configure --prefix=/usr/local/sqlite3 && make && make install && make clean
cd ..
執行檔位置
/usr/local/sqlite3/bin/sqlite3
下載 subversion
https://subversion.apache.org/
lynx http://ftp.twaren.net/Unix/Web/apache/subversion/subversion-1.9.5.tar.bz2
安裝 subversion
tar jxf subversion-1.9.5.tar.bz2
cd subversion-1.9.5
./configure --prefix=/usr/local/subversion --with-apr=/usr/local/apr --with-apr-util=/usr/local/apr-util --with-sqlite=/usr/local/sqlite3 && make && make install && make clean
cd ..
下載 ImageMagick
https://www.imagemagick.org/script/index.php
lynx https://www.imagemagick.org/download/ImageMagick.tar.gz
安裝 ImageMagick
tar zxf ImageMagick.tar.gz
cd ImageMagick-7.0.5-5
./configure --prefix=/usr/local/ImageMagick && make && make install && make clean
cd ..
下載 cmake
http://www.cmake.org/
lynx https://cmake.org/files/v3.8/cmake-3.8.1.tar.gz
安裝 cmake
tar zxf cmake-3.8.1.tar.gz
cd cmake-3.8.1
./configure && make && make install && make clean
cd ..
下載 MariaDB
https://downloads.mariadb.org/
lynx http://ftp.yz.yamagata-u.ac.jp/pub/dbms/mariadb//mariadb-10.1.23/source/mariadb-10.1.23.tar.gz
安裝 MariaDB
tar zxf mariadb-10.1.23.tar.gz
cd mariadb-10.1.23
/usr/local/bin/cmake . -DDEFAULT_CHARSET=utf8 -DDEFAULT_COLLATION=utf8_general_ci && make && make install && make clean
切換到目的目錄
cd /usr/local/mysql
變更擁有者
chown -R mysql .
變更群組
chgrp -R mysql .
安裝預設資料
scripts/mysql_install_db --user=mysql
變更程式擁有者為 root
chown -R root .
變更資料擁有者為 mysql
chown -R mysql data
複製設定檔
cp support-files/my-huge.cnf /etc/my.cnf
編輯設定檔
vi /etc/my.cnf
character-set-server = utf8
collation-server = utf8_general_ci
#default_storage_engine = InnoDB
default_storage_engine = MyISAM
skip-external-locking
thread_concurrency
skip-networking
啟動 mysql
/usr/local/mysql/bin/mysqld_safe --datadir=/var/lib/mysql &
開機啟動
vi /etc/rc.local
/usr/local/mysql/bin/mysqld_safe --datadir=/var/lib/mysql &
設定 root 帳號密碼
/usr/local/mysql/bin/mysqladmin -u root password '新密碼'
登入 mysql
/usr/local/mysql/bin/mysql -u root -p
use mysql;
delete from user where Host <> 'localhost' or User <> 'root';
exit;
切換目錄
cd /usr/local/src
下載 postgresql
http://www.postgresql.org/
lynx https://ftp.postgresql.org/pub/source/v9.6.2/postgresql-9.6.2.tar.bz2
安裝 postgresql
tar jxf postgresql-9.6.2.tar.gz
cd postgresql-9.6.2
./configure --prefix=/usr/local/pgsql --without-readline && gmake && gmake install && gmake clean
新增使用者 postgres
useradd postgres
建立資料目錄
mkdir /usr/local/pgsql/data
變更資料擁有者
chown postgres /usr/local/pgsql/data
切換使用者
su - postgres
初始化資料
/usr/local/pgsql/bin/initdb -D /usr/local/pgsql/data
編輯設定檔
vi /usr/local/pgsql/data/postgresql.conf
vi /usr/local/pgsql/data/pg_ident.conf
vi /usr/local/pgsql/data/pg_hba.conf
讓區網或特定IP直接連線(Default Port 5432)
host all all 192.168.1.0/24 trust
啟動 pgsql (須用 postgres 使用者啟動)
/usr/local/pgsql/bin/pg_ctl -D /usr/local/pgsql/data -l logfile start
登入 postgresql
/usr/local/pgsql/bin/psql
設定 postgres 密碼
alter role postgres with password '12345678';
登出 postgresql
\q
登出 postgres 使用者
exit
重新開機
reboot
切換目錄
cd /usr/local/src
下載 nginx
http://nginx.org/
lynx http://nginx.org/download/nginx-1.13.0.tar.gz
lynx http://nginx.org/download/nginx-1.12.0.tar.gz
lynx http://nginx.org/download/nginx-1.10.3.tar.gz
安裝 nginx
tar zxf nginx-1.12.0.tar.gz
cd nginx-1.12.0
./configure --prefix=/usr/local/nginx --with-threads --with-pcre && make && make install && make clean
./configure --prefix=/usr/local/nginx --with-threads --with-pcre --with-http_ssl_module --with-http_v2_module && make && make install && make clean
設定 nginx
vi /usr/local/nginx/conf/nginx.conf
新增 http2 支援
listen 80 http2;
listen 443 ssl http2;
新增PHP支援
# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
location ~ \.php$ {
root html;
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
include fastcgi_params;
}
測試 nginx
/usr/local/nginx/sbin/nginx -t
啟動 nginx
/usr/local/nginx/sbin/nginx -c /usr/local/nginx/conf/nginx.conf
停止 nginx
/usr/local/nginx/sbin/nginx -s stop
/usr/local/nginx/sbin/nginx -s quit
重啟 nginx
/usr/local/nginx/sbin/nginx -s reload
預設根目錄
/usr/local/nginx/html
下載 php
http://www.php.net/
lynx http://tw2.php.net/distributions/php-5.6.30.tar.bz2
安裝參數
./configure --help
安裝 php-5.6.30
tar jxf php-5.6.30.tar.bz2
cd php-5.6.30
# 自訂版(請自行依當時情況更動)
./configure --prefix=/usr/local/php5 --with-config-file-path=/etc --with-config-file-scan-dir=/etc/php.d --enable-maintainer-zts --with-tsrm-pthreads --enable-bcmath --with-bz2 --enable-calendar --enable-cgi --enable-cli --enable-ctype --with-curl --enable-dom --without-enchant --enable-exif --enable-fileinfo --enable-filter --enable-ftp --enable-fpm --with-fpm-user=nobody --with-fpm-group=nobody --with-gd --with-gettext --enable-hash --with-iconv --without-imap --disable-intl --enable-json --enable-libxml --enable-mbstring --with-mcrypt=/usr/local/libmcrypt --with-mhash --enable-mysqlnd --with-mysqli=mysqlnd --with-mysql-sock --enable-opcache --with-openssl --enable-pcntl --without-pear --with-pdo-mysql=mysqlnd --with-pdo-pgsql --with-pgsql=/usr/local/pgsql --enable-phar --enable-posix --enable-session --enable-shmop --enable-simplexml --enable-soap --enable-sockets --enable-sysvmsg --enable-sysvsem --enable-sysvshm --enable-tokenizer --enable-wddx --enable-xml --enable-xmlreader --with-xmlrpc --with-xsl --enable-zip --with-zlib
# 完整版
./configure --prefix=/usr/local/php5 --with-config-file-path=/etc --with-config-file-scan-dir=/etc/php.d --with-apxs2=/usr/local/apache2/bin/apxs --enable-maintainer-zts --with-tsrm-pthreads --enable-bcmath --with-bz2 --enable-calendar --enable-cgi --enable-cli --enable-ctype --with-curl --enable-dom --without-enchant --enable-exif --enable-fileinfo --enable-filter --enable-ftp --enable-fpm --with-gd --with-gettext --enable-hash --with-iconv --without-imap --disable-intl --enable-json --enable-libxml --enable-mbstring --with-mcrypt --with-mhash --enable-mysqlnd --with-mysqli=mysqlnd --with-mysql-sock --enable-opcache --with-openssl --enable-pcntl --without-pear --with-pdo-mysql=mysqlnd --with-pdo-pgsql --with-pdo-sqlite --with-pgsql=/usr/local/pgsql --enable-phar --enable-posix --enable-session --enable-shmop --enable-simplexml --enable-soap --enable-sockets --with-sqlite3=/usr/local/sqlite3 --enable-sysvmsg --enable-sysvsem --enable-sysvshm --enable-tokenizer --enable-wddx --enable-xml --enable-xmlreader --with-xmlrpc --with-xsl --enable-zip --with-zlib
make
make install
make clean
複製 PHP 設定檔
cp php.ini-production /usr/local/php5/etc/php.ini
複製 php-fpm 設定檔
cp /usr/local/php5/etc/php-fpm.conf.default /usr/local/php5/etc/php-fpm.conf
編輯設定檔
vi /usr/local/php5/etc/php.ini
vi /usr/local/php5/etc/php-fpm.conf
啟動 php-fpm
/usr/local/php5/sbin/php-fpm -c /usr/local/php5/etc/php.ini -y /usr/local/php5/etc/php-fpm.conf
將 php 加入系統環境變數
vi /etc/profile
在最後面加入
export PATH=$PATH:/usr/local/php5/bin
下載 php imagick
http://pecl.php.net/package/imagick
lynx http://pecl.php.net/get/imagick-3.3.0.tgz
安裝 php imagick
tar zxf imagick-3.3.0.tgz
cd imagick-3.3.0
/usr/local/php5/bin/phpize
./configure --with-php-config=/usr/local/php5/bin/php-config --with-imagick=/usr/local/ImageMagick && make && make install && make clean
cd ..
vi /usr/local/php5/etc/php.ini
extension=imagick.so
下載 phpredis
http://pecl.php.net/package/redis
https://github.com/phpredis/phpredis/releases
安裝 php redis
tar zxf phpredis-2.2.8.tar.gz
cd phpredis-2.2.8
/usr/local/php5/bin/phpize
./configure --with-php-config=/usr/local/php5/bin/php-config && make && make install && make clean
vi /usr/local/php5/etc/php.ini
extension=redis.so
-----------------------------------------------------------------------------------------
設定 sshd
vi /etc/ssh/sshd_config
LoginGraceTime 2m
PermitRootLogin yes
StrictModes yes
MaxAuthTries 6
MaxSessions 10
PermitEmptyPasswords no
PasswordAuthentication yes
重新啟動
/etc/rc.d/init.d/sshd restart
-----------------------------------------------------------------------------------------
vi +/expose_php /usr/local/php5/etc/php.ini
expose_php = Off
-----------------------------------------------------------------------------------------
Opcache 經查資料似乎須要 Thread Safe 未啟用時才能開啟
opcache.memory_consumption=128
opcache.interned_strings_buffer=8
opcache.max_accelerated_files=4000
opcache.revalidate_freq=60
opcache.fast_shutdown=1
opcache.enable_cli=1
-----------------------------------------------------------------------------------------
tar zxf Python-3.6.1.tgz
cd Python-3.6.1
./configure
./configure --enable-optimizations
make
make test
make install
make clean
/usr/local/bin/python3
/usr/local/bin/pip3
-----------------------------------------------------------------------------------------
| 新增時間 |
2019-12-31 |
| 最後更新 |
2022-02-09 |