LNMP分离部署

LNMP理论

fastcgi的主要优点：
把动态语言和http服务器分离开来，使nginx可以处理静态请求和向后转发动态请求，而php/php-fpm服务器转移解析PHP动态请求

使用fastcgi的原因：
Nginx 不支持对外部动态程序的直接调用或者解析，所有的外部程序（包括PHP）必须通过FastCGI接口来调用。

FastCGI的重要特点总结：

是HTTP服务器和动态脚本语言间通信的接口或者工具
优点就是把动态语言解析和HTTP服务器分离了开来
Nginx、Apache、lighttpd以及多数动态语言都支持FastCGI。
接口方式采用C/S结构，分为HTTP服务器（客户端）和动态语言解析服务器（服务端）
PHP动态语言服务端可以启动多个FastCGI的守护进程例如：php-fpm(fastcgi process mangemnt)
http服务器通过例（Nginx fastgi_pass)FastCGI客户端和动态语言FastCGI服务端通信（例如：php-fpm）

nginx - fastcgi - php - mysql 协同下的请求的完整访问过程

用户发送http请求报文给nginx服务器
nginx会根据文件url和后缀来判断请求
如果请求的是静态内容,nginx会将结果直接返回给用户
如果请求的是动态内容,nginx会将请求交给fastcgi客户端,通过fastcgi_pass将这个请求发送给php-fpm
php-fpm会将请求交给wrapper
wrapper收到请求会生成新的线程调用php动态程序解析服务器
如果用户请求的是博文、或者内容、PHP会请求MySQL查询结果
如果用户请求的是图片、附件、PHP会请求nfs存储查询结果
php会将查询到的结果交给Nginx
nginx会生成一个响应报文返还给用户

LNMP安装注意事项

Nginx + PHP的组合，问题多出在配置上，配置的时候需要仔细
PHP测试页面，在创建的时候要注意开头结尾，？不要打错了，或者打反了

#正确示范
<?php
phpinfo();
?>

防火墙和selinux一定要关闭，不然是访问不到php测试页面的
权限问题，在配置过程中涉及到了很多的文件配置，权限一定要给足，然后根据需求，修改权限

LNMP分离部署的实现

环境说明

主机名	IP地址	应用	系统版本
nginx	192.168.110.11	nginx	redhat 8
mysql	192.168.110.12	mysql	redhat 8
php	192.168.110.13	php	redhat 8

准备工作

配置网络源（三台机器）

curl -o /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-8.repo   
sed -i -e '/mirrors.cloud.aliyuncs.com/d' -e '/mirrors.aliyuncs.com/d' /etc/yum.repos.d/CentOS-Base.repo
sed -i 's|$releasever|8|' /etc/yum.repos.d/CentOS-Base.repo  
yum install -y https://mirrors.aliyun.com/epel/epel-release-latest-8.noarch.rpm
sed -i 's|^#baseurl=https://download.fedoraproject.org/pub|baseurl=https://mirrors.aliyun.com|' /etc/yum.repos.d/epel*
sed -i 's|^metalink|#metalink|' /etc/yum.repos.d/epel*
sed -i 's|$releasever|8|' /etc/yum.repos.d/epel*

关闭防火墙和selinux（三台机器）

systemctl disable --now firewalld
setenforce 0
sed -ri 's/^(SELINUX=).*/1disabled/g' /etc/selinux/config

准备安装包

//nginx
wget http://nginx.org/download/nginx-1.20.0.tar.gz

//mysql
wget https://downloads.mysql.com/archives/get/p/23/file/mysql-5.7.31-linux-glibc2.12-x86_64.tar.gz

开始部署

安装nginx

//创建nginx用户
[root@nginx ~]# useradd -r -M -s /sbin/nologin nginx

//安装工具包和依赖包
[root@nginx ~]# yum -y install vim pcre-devel openssl openssl-devel gd-devel gcc gcc-c++ make
[root@nginx ~]# yum -y groups mark install 'Development tools'

//创建日志存放目录
[root@nginx ~]# mkdir -p /var/log/nginx
[root@nginx ~]# chown -R  nginx.nginx /var/log/nginx

//解压源码包
[root@nginx ~]# tar xf nginx-1.20.0.tar.gz 
[root@nginx ~]# ls
anaconda-ks.cfg  nginx-1.20.0  nginx-1.20.0.tar.gz

//编译安装
[root@nginx ~]# cd nginx-1.20.0
[root@nginx nginx-1.20.0]# ./configure 
--prefix=/usr/local/nginx 
--user=nginx 
--group=nginx 
--with-debug 
--with-http_ssl_module 
--with-http_realip_module 
--with-http_image_filter_module 
--with-http_gunzip_module 
--with-http_gzip_static_module 
--with-http_stub_status_module 
--http-log-path=/var/log/nginx/access.log 
--error-log-path=/var/log/nginx/error.log

//启用多核心加速安装
[root@nginx nginx-1.20.0]# make -j $(grep 'processor' /proc/cpuinfo | wc -l) && make install

//添加环境变量
[root@nginx nginx-1.20.0]# echo 'export PATH=/usr/local/nginx/sbin:$PATH' > /etc/profile.d/nginx.sh
[root@nginx nginx-1.20.0]# source /etc/profile.d/nginx.sh

//修改配置文件
[root@nginx ~]# vim  /usr/local/nginx/conf/nginx.conf
...此处省略n行...
    server {
        listen       80;
        server_name  localhost;
        
        location / {
            root   html;
            index  index.php index.html index.htm;
        }
        location ~ .php$ {
            fastcgi_pass   192.168.110.13:9000;
            fastcgi_index  index.php;
            fastcgi_param  SCRIPT_FILENAME  /var/www/html/$fastcgi_script_name;
            include        fastcgi_params;
        }

//检查配置文件语法是否有误
[root@nginx ~]# nginx -t
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful

//创建测试页面index.php
[root@nginx ~]# cat > /usr/local/nginx/html/index.php <<EOF
<?php
     phpinfo();
?>
EOF
 
//启动服务
[root@nginx ~]# nginx

//查看端口
[root@nginx ~]# ss -antl
State     Recv-Q     Send-Q         Local Address:Port         Peer Address:Port    
LISTEN    0          128                  0.0.0.0:22                0.0.0.0:*       
LISTEN    0          128                  0.0.0.0:80                0.0.0.0:*       
LISTEN    0          128                     [::]:22                   [::]:*

安装mysql

//安装依赖包
[root@mysql ~]# yum -y install ncurses-devel openssl-devel openssl cmake mariadb-devel ncurses-compat-libs

//创建mysql的用户和组
[root@mysql ~]# useradd -r -M -s /sbin/nologin mysql

//下载源码包
[root@mysql ~]# wget https://downloads.mysql.com/archives/get/p/23/file/mysql-5.7.31-linux-glibc2.12-x86_64.tar.gz
[root@mysql ~]# ls
anaconda-ks.cfg  mysql-5.7.31-linux-glibc2.12-x86_64.tar.gz

//解压mysql源码包
[root@mysql ~]# tar xf mysql-5.7.31-linux-glibc2.12-x86_64.tar.gz -C /usr/local/

//设置软链接并修改属主和属组
[root@mysql ~]# ln -s  /usr/local/mysql-5.7.31-linux-glibc2.12-x86_64 /usr/local/mysql
[root@mysql ~]# chown -R mysql.mysql /usr/local/mysql*

//添加环境变量
[root@mysql ~]# echo 'export PATH=/usr/local/mysql/bin:$PATH' > /etc/profile.d/mysql.sh
[root@mysql ~]# source /etc/profile.d/mysql.sh 
[root@mysql ~]# which mysql
/usr/local/mysql/bin/mysql

//建立数据存放目录
[root@mysql ~]# mkdir /opt/data
[root@mysql ~]# chown -R mysql.mysql /opt/data

//初始化数据库
[root@mysql ~]# mysqld --initialize --user=mysql --datadir=/opt/data
#记住这个密码
root@localhost: HJt_/;L3l>EE

//记住密码，把这个生成的临时密码写到a文件中，方便等下查看
[root@mysql ~]# echo 'HJt_/;L3l>EE' > a
[root@mysql ~]# cat a
HJt_/;L3l>EE

//编辑my.cnf文件
[root@mysql ~]# cat >> /etc/my.cnf <<EOF
[mysqld]
basedir = /usr/local/mysql
datadir = /opt/data
socket = /tmp/mysql.sock
port = 3306
pid-file = /opt/data/mysql.pid
user = mysql
skip-name-resolve
EOF

//配置服务启动脚本
[root@mysql ~]# cp /usr/local/mysql/support-files/mysql.server /etc/init.d/mysqld
[root@mysql ~]# cat >> /etc/init.d/mysqld <<EOF
basedir=/usr/local/mysql
datadir=/opt/data
EOF

//启动mysql
[root@mysql ~]# service mysqld start
[root@mysql ~]# ss -antl
State      Recv-Q     Send-Q          Local Address:Port           Peer Address:Port     
LISTEN     0          128                   0.0.0.0:22                  0.0.0.0:*        
LISTEN     0          128                      [::]:22                     [::]:*        
LISTEN     0          80                          *:3306                      *:* 


//查看密码，登录数据库设置密码123456
[root@mysql ~]# cat a
HJt_/;L3l>EE
[root@mysql ~]# mysql -uroot -p'HJt_/;L3l>EE'
mysql: [Warning] Using a password on the command line interface can be insecure.
Welcome to the MySQL monitor.  Commands end with ; or g.
Your MySQL connection id is 2
Server version: 5.7.31

Copyright (c) 2000, 2020, Oracle and/or its affiliates. All rights reserved.

Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.

Type 'help;' or 'h' for help. Type 'c' to clear the current input statement.

mysql> set password = password('123456');    //设置密码123456
Query OK, 0 rows affected, 1 warning (0.00 sec)

mysql> quit
Bye

//设置完后配置
[root@mysql ~]# echo '/usr/local/mysql/lib' > /etc/ld.so.conf.d/mysql.conf
[root@mysql ~]# ldconfig

安装php

//安装开发工具包
[root@php ~]# yum -y groups mark install 'Development Tools'

//安装依赖包
[root@php ~]# yum -y install libxml2 libxml2-devel openssl openssl-devel bzip2 bzip2-devel libcurl libcurl-devel libicu-devel libjpeg libjpeg-devel libpng libpng-devel openldap-devel  pcre-devel freetype freetype-devel gmp gmp-devel libmcrypt libmcrypt-devel readline readline-devel libxslt libxslt-devel mhash mhash-devel php-mysqlnd

//安装php
[root@php ~]# yum -y install php-*

[root@php ~]# vim /etc/php-fpm.d/www.conf
......................
;listen = /run/php-fpm/www.sock #注释此行
listen = 0.0.0.0:9000  #添加监听端口
...........................
...........................
; must be separated by a comma. If this value is left blank, connections will be
; accepted from any ip address.
; Default Value: any
listen.allowed_clients = 192.168.110.30  #搜索allowed把此处的IP该为nginx主机的ip
 
//创建测试页面index.php
[root@php ~]# cat > /usr/local/nginx/html/index.php <<EOF
<?php
     phpinfo();
?>
EOF
[root@php ~]# chown -R nginx.nginx /var/www/html/

//启动php
[root@php ~]# systemctl start php-fpm