linux运维、架构之路-Lamp架构部署

一、Lamp架构原理

二、Lamp架构软件安装

1、apache安装脚本

#！/bin/sh

cd /server/tools/

yum install zlib-devel -y

wget http://mirror.bit.edu.cn/apache/httpd/httpd-2.2.34.tar.gz

tar xf httpd-2.2..tar.gz

cd httpd-2.2.

./configure \

--prefix=/application/apache2.2.34 \ #安装目录

--enable-deflate \ #压缩

--enable-expires \ #缓存过期时间

--enable-headers \ #http请求头

--enable-modules=most \ #激活apache大多数模块

--enable-so \

--with-mpm=worker \ #进程的一种模式

--enable-rewrite #伪静态

make && make install

ln -s /application/apache2.2.34/ /application/apache

/application/apache/bin/apachectl start

lsof -i:

①apache和php是以模块的形式配合，安装完apache默认安装了

[root@web03 ~]# ll /application/apache/modules/

total

-rw-r--r--  root root      -- : httpd.exp

-rwxr-xr-x  root root  -- : libphp5.so

②同样apache的主配置文件里也配置了php模块

[root@web03 ~]# grep libphp5.so /application/apache/conf/httpd.conf

LoadModule php5_module        modules/libphp5.so

2、MySQL安装脚本

#!/bin/bash

useradd -s /sbin/nologin -M mysql

cd /server/tools

tar xf mysql-5.6.-linux-glibc2.-x86_64.tar.gz

mkdir -p /application/

mv /server/tools/mysql-5.6.-*-x86_64 /application/mysql-5.6.

ln -s /application/mysql-5.6./ /application/mysql

chown -R mysql.mysql /application/mysql/

/application/mysql/scripts/mysql_install_db --basedir=/application/mysql --datadir=/application/mysql/data --user=mysql

\cp /application/mysql/support-files/mysql.server /etc/init.d/mysqld

chmod +x /etc/init.d/mysqld

sed -i 's#/usr/local/mysql#/application/mysql#g' /application/mysql/bin/mysqld_safe /etc/init.d/mysqld

\cp /application/mysql/support-files/my-default.cnf /etc/my.cnf

/etc/init.d/mysqld start

lsof -i:

echo 'export PATH=/application/mysql/bin:$PATH' >>/etc/profile

source /etc/profile

chkconfig --add mysqld

chkconfig mysqld on

/application/mysql/bin/mysqladmin -u root password ''

3、PHP安装脚本

#!/bin/bash

yum install -y zlib-devel libxml2-devel libjpeg-devel libjpeg-turbo-devel libiconv-devel freetype-devel libpng-devel gd-devel libcurl-devel libxslt-devel

yum -y install libmcrypt-devel mhash mcrypt

cd /server/tools/

tar zxf libiconv-1.14.tar.gz

cd libiconv-1.14

./configure --prefix=/usr/local/libiconv

make && make install

cd /server/tools/

tar xf php-5.5..tar.gz

cd php-5.5.

./configure \

--prefix=/application/php5.5.32 \

--with-apxs2=/application/apache/bin/apxs \ #指定apache的/bin/apxs路径，通过apxs来增加PHP扩展模块

--with-mysql=/application/mysql/ \ #指定mysql安装路径

--with-pdo-mysql=mysqlnd \

--with-xmlrpc \

--with-openssl \

--with-zlib \

--with-freetype-dir \

--with-gd \

--with-jpeg-dir \

--with-png-dir \

--with-iconv=/usr/local/libiconv \

--enable-short-tags \

--enable-sockets \

--enable-zend-multibyte \

--enable-soap \

--enable-mbstring \

--enable-static \

--enable-gd-native-ttf \

--with-curl \

--with-xsl \

--enable-ftp \

--with-libxml-dir\

ln -s /application/mysql/lib/libmysqlclient.so.  /usr/lib64/

touch ext/phar/phar.phar

make && make install

ln -s /application/php-5.5./ /application/php

MySQL和web分离，php编译参数

./configure \

--prefix=/application/php5.5.32 \

--with-apxs2=/application/apache/bin/apxs \

--with-mysql=mysqlnd \

--with-pdo-mysql=mysqlnd \

--with-xmlrpc \

--with-openssl \

--with-zlib \

--with-freetype-dir \

--with-gd \

--with-jpeg-dir \

--with-png-dir \

--with-iconv=/usr/local/libiconv \

--enable-short-tags \

--enable-sockets \

--enable-zend-multibyte \

--enable-soap \

--enable-mbstring \

--enable-static \

--enable-gd-native-ttf \

--with-curl \

--with-xsl \

--enable-ftp \

--with-libxml-dir\

4、配置apache支持PHP只需三步

[root@web03 conf]# diff httpd.conf httpd.conf.bak

54d53

< LoadModule php5_module        modules/libphp5.so

,68c66,

< User www #修改默认用户

< Group www

---

> User daemon

> Group daemon

168c167

<     DirectoryIndex index.php index.html #加入动态首页文件

---

>     DirectoryIndex index.html

,321d318

<     AddType application/x-httpd-php .php .phtml #加入支持PHP的内容

<     AddType application/x-httpd-php-source .phps

三、apache配置文件说明

1、主配置文件httpd.conf

#修改以下内容

Include conf/extra/httpd-vhosts.conf   #打开注释

Options -Indexes FollowSymLinks        #主页打不开时，禁止列目录（优化）

2、虚拟主机配置文件httpd-vhosts.conf

<VirtualHost *:>

    ServerAdmin @qq.com

    DocumentRoot "/var/html/www"

    ServerName www.etiantian.org

    ServerAlias etiantian.org

    ErrorLog "logs/www-error_log"

    CustomLog "logs/www-access_log" common

</VirtualHost>

增加虚拟主机时必须加入以下内容，不然报403错误

egrep -v "#|^$" httpd.conf >httpd.conf.bak

[root@web03 conf]# tail - httpd.conf

</IfModule>

<Directory "/var/html">

    Options -Indexes FollowSymLinks

    AllowOverride None

    Order allow,deny

    Allow from all

</Directory>

3、apache常用命令

/extar/htdocs（默认站点目录）

/bin/apachectl -t（检查语法）

/bin/apachectl graceful（平滑重启服务）

/application/apache/bin/apachectl -l（查看编译的模块）

strace /application/apache/bin/apachectl -M（如果检查慢的话，用strace追踪）

4、日志轮询

①日志轮询工具cronolog

yum install cronolog -y

以bbs为例加入

CustomLog "|/usr/sbin/cronolog /app/logs/access_bbs_%Y%m%d.log" combined

mkdir /app/logs -p

/application/apache/bin/apachectl graceful

②脚本定时任切割日志思路，晚上00点

cd /application/apache/logs/

mv www-access_log www-access_$(date +%F)log

/application/apache/bin/apachectl graceful

5、apache安全优化

1、编译之前改源码

2、隐藏apache版本号信息

vi /application/apache/conf/httpd.conf

Include conf/extra/httpd-default.conf #去注释

vi /application/apache/conf/extra/httpd-default.conf

ServerTokens Prod

ServerSignature Off

3、Options -Indexes FollowSymLinks  禁止列目录（优化）