马哥博客作业第十五周

1、写出 MPM multi-processing module 工作模式原理以及区别
Prefork：默认工作模式，用单独的子进程来处理请求，子进程间互相独立，互不影响，大大的提高了稳定性，但每个进程都会占用内存，所以消耗系统资源过高。

Worker：使用线程来处理HTTP请求，所以效率非常高，而对系统的开销也相对较低，Worker MPM也是基于多进程的，但是每个进程会生成多个线程，由线程来处理请求，这样可以保证多线程可以获得进程的稳定性。

Event：最新的模式，现在的版本已经是稳定可用的模式。它和 worker模式很像，最大的区别在于它解决了keep-alive场景下，长期被占用的线程的资源浪费问题。

2、编译安装httpd 2.4
vim httpd.sh

#!/bin/bash
#
#********************************************************************
#Author: xuanlv
#Date: 2020-09-17
#FileName： httpd.sh
#URL: https://www.cnblogs.com/xuanlv-0413/
#Description： The test script
#Copyright (C): 2020 All rights reserved
#********************************************************************

#httpd source install

#下载httpd源码包

TARGET_DIR=/usr/local/src

INSTALL_DIR=/usr/local/httpd

DOWNLOAD_URL=https://mirror.bit.edu.cn/apache/httpd/httpd-2.4.46.tar.bz2

FILE_NAME=${DOWNLOAD_URL##*/}

UNCOMPRESS_DIR=${FILE_NAME%.tar*}

rpm -q wget || yum install -y wget

wget -O $TARGET_DIR/$FILE_NAME $DOWNLOAD_URL

#下载apr和apr-util源码包

APR_DOWNLOAD_URL=https://mirror.bit.edu.cn/apache/apr/apr-1.7.0.tar.bz2

APR_FILE_NAME=${APR_DOWNLOAD_URL##*/}

APR_UNCOMPRESS_DIR=${APR_FILE_NAME%.tar*}

wget -O $TARGET_DIR/$APR_FILE_NAME $APR_DOWNLOAD_URL

APR_UTIL_DOWNLOAD_URL=https://mirror.bit.edu.cn/apache/apr/apr-util-1.6.1.tar.bz2

APR_UTIL_FILE_NAME=${APR_UTIL_DOWNLOAD_URL##*/}

APR_UTIL_UNCOMPRESS_DIR=${APR_UTIL_FILE_NAME%.tar*}

wget -O $TARGET_DIR/$APR_UTIL_FILE_NAME $APR_UTIL_DOWNLOAD_URL

#安装依赖包

yum install -y gcc make pcre-devel openssl-devel redhat-rpm-config expat-devel

#添加apache用户

id apache &> /dev/null || useradd -r -u 80 -d /var/www -s /sbin/nologin apache

#解压源码包

tar xf $TARGET_DIR/$FILE_NAME -C $TARGET_DIR

tar xf $TARGET_DIR/$APR_FILE_NAME -C $TARGET_DIR

mv $TARGET_DIR/$APR_UNCOMPRESS_DIR $TARGET_DIR/$UNCOMPRESS_DIR/srclib/apr

tar xf $TARGET_DIR/$APR_UTIL_FILE_NAME -C $TARGET_DIR

mv $TARGET_DIR/$APR_UTIL_UNCOMPRESS_DIR $TARGET_DIR/$UNCOMPRESS-DIR/srclib/apr-util

#编译安装

cd $TARGET_DIR/$UNCOMPRESS_DIR

./configure --prefix=$INSTALL_DIR

--sysconfdir=/etc/httpd

--enable-so

--enable-ssl

--enable-cgi

--enable-rewrite

--enable-modules=most

--enable-mpms-shared=all

--with-zlib

--with-pcre

--with-included-apr

--with-mpm=event

make -j`lscpu | grep "^CPU(s)" | awk '{print $NF}'` && make install

#设置环境变量

echo 'PATH='$INSTALL_DIR'/bin:$PATH' > /etc/profile.d/httpd.sh

source /etc/profile.d/httpd.sh

#修改配置文件

sed -ri 's#(User )daemon#1apache#' /etc/httpd/httpd.conf

sed -ri 's#(Group )daemon#1apache#' /etc/httpd/httpd.conf

#启动httpd服务

cat > /lib/systemd/system/httpd.service << EOF

[Unit]

Description=The Apache HTTP Server

After=network.target remote-fs.target nss-lookup.target

Documentation=man:httpd(8)

Documentation=man:apachectl(8)

[Service]

Type=forking

ExecStart=/usr/local/httpd/bin/apachectl start

ExecReload=/usr/local/httpd/bin/apachectl graceful

ExecStop=/usr/local/httpd/bin/apachectl stop

KillSignal=SIGCONT

PrivateTmp=true

[Install]

WantedBy=multi-user.target

EOF

systemctl daemon-reload

systemctl enable httpd.service

systemctl start httpd.service

#检查firewalld状态

firewall_status=`firewall-cmd --state`

if [ $firewall_status = running ];then

     echo "防火墙已启用，开放端口"

     firewall-cmd --permanent --add-service=http --add-service=https

     firewall-cmd --reload

fi

执行 bash httpd.sh自动完成安装

3、编写一个一键部署 LAMP 架构之 wordpress 脚本

vim wordpress.sh

#!/bin/bash
#
#********************************************************************
#Author: xuanlv
#Date: 2020-09-17
#FileName： wordpress.sh
#URL: https://www.cnblogs.com/xuanlv-0413/
#Description： The test script
#Copyright (C): 2020 All rights reserved
#********************************************************************

#wordpress自动安装

rpm -q wget || yum install -y wget

# 安装httpd

install_httpd() {

#下载httpd源码包

target_dir=/usr/local/src

install_dir=/usr/local/httpd

download_url=https://mirror.bit.edu.cn/apache/httpd/httpd-2.4.46.tar.bz2

file_name=${download_url##*/}

uncompress_dir=${file_name%.tar*}

[ -f $target_dir/$file_name ] || wget -O $target_dir/$file_name $download_url

#下载apr和apr-util源码包

apr_download_url=https://mirror.bit.edu.cn/apache/apr/apr-1.7.0.tar.bz2

apr_file_name=${apr_download_url##*/}

apr_uncompress_dir=${apr_file_name%.tar*}

[ -f $target_dir/$apr_file_name ] || wget -O $target_dir/$apr_file_name $apr_download_url

apr_util_download_url=https://mirror.bit.edu.cn/apache/apr/apr-util-1.6.1.tar.bz2

apr_util_file_name=${apr_util_download_url##*/}

apr_util_uncompress_dir=${apr_util_file_name%.tar*}

[ -f $target_dir/$apr_util_file_name ] || wget -O $target_dir/$apr_util_file_name $apr_util_download_url

#安装依赖包

yum install -y gcc make pcre-devel openssl-devel redhat-rpm-config expat-devel lbzip2

#添加apache用户

id apache &> /dev/null || useradd -r -u 80 -d /var/www -s /sbin/nologin apache

#解压源码包

tar xf $target_dir/$file_name -C $target_dir

tar xf $target_dir/$apr_file_name -C $target_dir

mv $target_dir/$apr_uncompress_dir $target_dir/$uncompress_dir/srclib/apr

tar xf $target_dir/$apr_util_file_name -C $target_dir

mv $target_dir/$apr_util_uncompress_dir $target_dir/$uncompress_dir/srclib/apr-util

#编译安装

cd $target_dir/$uncompress_dir

./configure --prefix=$install_dir

--sysconfdir=/etc/httpd

--enable-so

--enable-ssl

--enable-cgi

--enable-rewrite

--enable-modules=most

--enable-mpms-shared=all

--with-zlib

--with-pcre

--with-included-apr

--with-mpm=event

make -j`lscpu | grep "^CPU(s)" | awk '{print $NF}'` && make install

#设置环境变量

echo 'PATH='$install_dir'/bin:$PATH' > /etc/profile.d/httpd.sh

source /etc/profile.d/httpd.sh

#修改配置文件

sed -ri 's#(User )daemon#1apache#' /etc/httpd/httpd.conf

sed -ri 's#(Group )daemon#1apache#' /etc/httpd/httpd.conf

#启动httpd服务

cat > /lib/systemd/system/httpd.service << EOF

[Unit]

Description=The Apache HTTP Server

After=network.target remote-fs.target nss-lookup.target

Documentation=man:httpd(8)

Documentation=man:apachectl(8)

[Service]

Type=forking

ExecStart=/usr/local/httpd/bin/apachectl start

ExecReload=/usr/local/httpd/bin/apachectl graceful

ExecStop=/usr/local/httpd/bin/apachectl stop

KillSignal=SIGCONT

PrivateTmp=true

[Install]

WantedBy=multi-user.target

EOF

systemctl daemon-reload

systemctl enable httpd.service

systemctl start httpd.service

#检查firewalld状态

firewall_status=`firewall-cmd --state`

if [ $firewall_status = running ];then

   echo "防火墙已启用，开放端口"

   firewall-cmd --permanent --add-service=http --add-service=https

   firewall-cmd --reload

fi
}

# 安装MySQL

install_mysql() {

target_dir=/usr/local

download_url=http://mirrors.163.com/mysql/Downloads/MySQL-5.7/mysql-5.7.31-linux-glibc2.12-x86_64.tar.gz

file_name=${download_url##*/}

uncompress_dir=${file_name%.tar*}

#安装依赖包

yum -y install libaio-devel numactl-libs

#创建mysql用户

id mysql &> /dev/null || useradd -r -s /sbin/nologin mysql

#下载解压安装包并创建数据目录

[ -f $target_dir/src/$file_name ] || wget -O $target_dir/src/$file_name $download_url

tar xf $target_dir/src/$file_name -C $target_dir

ln -s $target_dir/$uncompress_dir $target_dir/mysql

chown -R root.root $target_dir/$uncompress_dir

[ -d /data/mysql ] || mkdir -p /data/mysql

chown -R mysql.mysql /data/mysql

#设置环境变量

cat > /etc/profile.d/mysql.sh << EOF

export PATH=/usr/local/mysql/bin:$PATH

EOF

source /etc/profile.d/mysql.sh

#生成数据库配置文件

mv /etc/my.cnf /etc/my.cnf.bak

cat > /etc/my.cnf <<EOF

[mysqld]

port=3306

socket=/data/mysql/mysql.sock

datadir=/data/mysql

log-error=/data/mysql/mysql.log

character-set-server=utf8mb4

#skip_name_resolve

max_connections=1000

max_connect_errors=1000

[client]

port=3306

socket=/data/mysql/mysql.sock

default-character-set=utf8mb4

EOF

#mysql初始化

mysqld --initialize-insecure --user=mysql --basedir=/usr/local/mysql --datadir=/data/mysql

#创建启动脚本并启动服务

cat > /etc/systemd/system/mysqld.service << EOF

[Unit]

Description=MySQL Server

Documentation=man:mysqld(8)

Documentation=http://dev.mysql.com/doc/refman/en/using-systemd.html

After=network.target

After=syslog.target

[Install]

WantedBy=multi-user.target

[Service]

User=mysql

Group=mysql

ExecStart=/usr/local/mysql/bin/mysqld --defaults-file=/etc/my.cnf

LimitNOFILE = 5000

EOF

systemctl daemon-reload

systemctl enable mysqld.service

systemctl start mysqld.service

#检查防火墙状态

firewall_status=`firewall-cmd --state`

if [ $firewall_status = running ];then

    echo "防火墙已启用，开放端口"

    firewall-cmd --permanent --add-port=3306/tcp

    firewall-cmd --reload

fi

#修改数据库root密码

mysql -uroot -h 127.0.0.1 -e 'update mysql.user set authentication_string=password("my123456") where user="root" and Host="localhost";'

mysql -uroot -h 127.0.0.1 -e 'flush privileges;'

sed -ri 's@#(skip_name_resolve)@1@' /etc/my.cnf

systemctl restart mysqld.service

}

#安装php

install_php() {

#下载源码包

target_dir=/usr/local

install_dir=/usr/local/php

download_url=http://mirrors.sohu.com/php/php-7.4.10.tar.bz2

file_name=${download_url##*/}

uncompress_dir=${file_name%.tar*}

[ -f $target_dir/src/$file_name ] || wget -O $target_dir/src/$file_name $download_url

#安装依赖包

yum -y install gcc libxml2-devel bzip2-devel libmcrypt-devel sqlite-devel oniguruma-devel

#解压源码包

tar xf $target_dir/src/$file_name -C $target_dir

#编译安装

cd $target_dir/$uncompress_dir

./configure --prefix=$install_dir

--enable-mysqlnd

--with-mysqli=mysqlnd

--with-pdo-mysql=mysqlnd

--with-openssl

--with-zlib

--with-config-file-path=/etc

--with-config-file-scan-dir=/etc/php.d

--enable-mbstring

--enable-xml

--enable-sockets

--enable-fpm

--enable-maintainer-zts

--disable-fileinfo

make -j`lscpu | grep "^CPU(s)" | awk '{print $NF}'` && make install

#设置环境变量

echo 'PATH='$install_dir'/bin:$PATH' > /etc/profile.d/php.sh

source /etc/profile.d/php.sh

#生成配置文件和启动文件

cp php.ini-production /etc/php.ini

cp $install_dir/etc/php-fpm.conf.default $install_dir/etc/php-fpm.conf

cp $install_dir/etc/php-fpm.d/www.conf.default $install_dir/etc/php-fpm.d/www.conf

#cp $target_dir/$uncompress_dir/sapi/fpm/php-fpm.service /lib/systemd/system/

cat > /lib/systemd/system/php-fpm.service << EOF

[Unit]

Description=The PHP FastCGI Process Manager

After=syslog.target network.target

[Service]

Type=simple

PIDFile=/var/run/php-fpm.pid

ExecStart=/usr/local/php/sbin/php-fpm --nodaemonize --fpm-config /usr/local/php/etc/php-fpm.conf

ExecReload=/bin/kill -USR2 $MAINPID

PrivateTmp=true

[Install]

WantedBy=multi-user.target

EOF

#修改配置文件

sed -ri 's#(user = )nobody#1apache#' $install_dir/etc/php-fpm.d/www.conf

sed -ri 's#(group = )nobody#1apache#' $install_dir/etc/php-fpm.d/www.conf

sed -ri 's#;(pm.status_path = )/status#1/php-fpm_status#' $install_dir/etc/php-fpm.d/www.conf

sed -ri 's#;(ping.path = /ping)#1#' $install_dir/etc/php-fpm.d/www.conf

mkdir /etc/php.d

cat > /etc/php.d/opcache.ini << EOF

[opacache]

zend_extensio=opcache.so

opcache.enable=1

EOF

systemctl daemon-reload

systemctl enable php-fpm.service

systemctl start php-fpm.service

#修改httpd配置，支持php-fpm

sed -ri 's@#(LoadModule proxy_fcgi_module modules/mod_proxy_fcgi.so)@1@' /etc/httpd/httpd.conf

sed -ri 's@#(LoadModule proxy_module modules/mod_proxy.so)@1@' /etc/httpd/httpd.conf

sed -ri 's@(DirectoryIndex )(index.html)@1index.php 2@' /etc/httpd/httpd.conf

sed -ri '$aAddType application/x-httpd-php .php ProxyRequests Off' /etc/httpd/httpd.conf

cat >> /etc/httpd/httpd.conf << EOF

<VirtualHost *:80>

   ServerName localhost

   DocumentRoot /data/wordpress

   <Directory "/data/wordpress">

        Require all granted

   </Directory>

   ProxyPassMatch ^/(.*.php)$ fcgi://127.0.0.1:9000/data/wordpress/$1

   ProxyPassMatch ^/(php-fpm_status|ping)$ fcgi://127.0.0.1:9000/$1

   CustomLog "logs/access_wordpress_log" common

</VirtualHost>

EOF

systemctl restart httpd.service

}

# 安装WordPress

install_wordpress() {

#下载wordpress安装包

target_dir=/usr/local/src

install_dir=/data

download_url=https://cn.wordpress.org/wordpress-5.4.2-zh_CN.zip

file_name=${download_url##*/}

uncompress_dir=${file_name%%-*}

[ -f $target_dir/$file_name ] || wget -O $target_dir/$file_name $download_url

#解压安装包

unzip $target_dir/$file_name -d $target_dir

mv $target_dir/$uncompress_dir $install_dir/

chown -R apache:apache $install_dir/$uncompress_dir

#创建数据库和用户

mysql -uroot -pmy123456 -e 'create database wordpress;'

mysql -uroot -pmy123456 -e 'grant all on wordpress.* to wpuser@"10.0.0.%" identified by "wp123456";'

}

install_httpd

install_mysql

install_php

install_wordpress

执行bash wordpress.sh自动完成安装