CentOS7下搭建基本LNMP环境，部署WordPress
系统环境：CentOS Linux release 7.4.1708 (Core) 3.10.0-693.el7.x86_64
软件版本：nginx-1.12.2.tar.gz
php 7.1.11
mysql-community-server-5.7.20-1.el7.x86_64
网络环境中配置了DNS服务器，本次nginx服务器的IP是192.168.1.20，域名是wp1.st.local。过程中全部使用域名配置或访问。
一、安装nginx
1、安装依赖及相关支持库
# yum install pcre-devel pcre openssl openssl-devel
2、编译安装nginx
# cd nginx-1.12.2 # ./configure \ --prefix=/opt/nginx \ --sbin-path=/usr/sbin/nginx \ --user=nginx \ --group=nginx \ --pid-path=/var/run/nginx.pid \ --lock-path=/var/run/nginx.lock \ --with-http_ssl_module \ --with-http_stub_status_module \ --with-pcre \ --error-log-path=/var/log/nginx/error.log \ --http-log-path=/var/log/nginx/access.log \ --with-http_gzip_static_module \ --with-file-aio \ --with-http_realip_module
3、编译成功
Configuration summary + using system PCRE library + using system OpenSSL library + using system zlib library nginx path prefix: "/opt/nginx" nginx binary file: "/usr/sbin/nginx" nginx modules path: "/opt/nginx/modules" nginx configuration prefix: "/opt/nginx/conf" nginx configuration file: "/opt/nginx/conf/nginx.conf" nginx pid file: "/var/run/nginx.pid" nginx error log file: "/var/log/nginx/error.log" nginx http access log file: "/var/log/nginx/access.log" nginx http client request body temporary files: "client_body_temp" nginx http proxy temporary files: "proxy_temp" nginx http fastcgi temporary files: "fastcgi_temp" nginx http uwsgi temporary files: "uwsgi_temp" nginx http scgi temporary files: "scgi_temp"
4、安装
# make && make install
5、检验安装结果
# nginx -V nginx version: nginx/1.12.2 built by gcc 4.8.5 20150623 (Red Hat 4.8.5-16) (GCC) built with OpenSSL 1.0.2k-fips 26 Jan 2017 TLS SNI support enabled configure arguments: --prefix=/opt/nginx --sbin-path=/usr/sbin/nginx --user=nginx --group=nginx --with-http_ssl_module --with-http_stub_status_module --with-pcre --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --with-http_gzip_static_module --with-file-aio --with-http_realip_module --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock
6、创建nginx用户
# useradd -M -s /sbin/nologin nginx
7、创建nginx的unit
注意文件路径
# vi /usr/lib/systemd/system/nginx.service [Unit] Description=The nginx HTTP and reverse proxy server After=network.target remote-fs.target nss-lookup.target [Service] Type=forking PIDFile=/run/nginx.pid # Nginx will fail to start if /run/nginx.pid already exists but has the wrong # SELinux context. This might happen when running `nginx -t` from the cmdline. # https://bugzilla.redhat.com/show_bug.cgi?id=1268621 ExecStartPre=/usr/bin/rm -f /run/nginx.pid ExecStartPre=/usr/sbin/nginx -t ExecStart=/usr/sbin/nginx ExecReload=/bin/kill -s HUP $MAINPID KillSignal=SIGQUIT TimeoutStopSec=5 KillMode=process PrivateTmp=true [Install] WantedBy=multi-user.target
8、防火墙
# iptables -I INPUT 5 -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
# iptables-save >/etc/sysconfig/iptables
9、配置nginx.conf语法高亮
# wget http://www.vim.org/scripts/download_script.php?src_id=14376 -O /usr/share/vim/vim74/syntax/nginx.vim # vi /usr/share/vim/vim74/filetype.vim #追加一行，注意nginx的配置文件路径 au BufRead,BufNewFile /opt/nginx/conf/* set ft=nginx
10、修改配置文件
# vi /opt/nginx/conf/nginx.conf user nginx; worker_processes auto; server { listen 80; server_name wp1.st.local; #配置域名 location / { root html; index index.php index.html index.htm; #增加index.php } error_page 500 502 503 504 /50x.html; location = /50x.html { root html; }
11、启动服务
# systemctl start nginx.service
# systemctl enable nginx.service
12、访问测试
二、安装PHP
1、添加扩展源
# yum -y install https://mirror.webtatic.com/yum/el7/epel-release.rpm https://mirror.webtatic.com/yum/el7/webtatic-release.rpm
2、安装支持库
# yum install libxml2 libxml2-devel libpng libpng-devel libcurl-devel libcurl libzip-devel libzip gd bzip2-devel bzip2
3、安装PHP7.1及相关支持
# yum -y install mod_php71w php71w-mbstring php71w-pear php71w-fpm php71w-gd php71w-pdo
php71w-mysql放在安装MySQL时一起安装，因为在未添加mysql57源的时候，可能会安装mariadb-libs作为mysql-community-libs的替代。
4、修改配置文件
# vi /etc/php-fpm.d/www.conf #指定用户为前面创建的nginx user = nginx group = nginx
修改nginx.conf，root最好填写绝对路径，document_root就是root选项的指定目录
#添加 location ~ \.php$ { root /opt/nginx/html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; include fastcgi_params; }
修改所属用户为nginx
# chown -R nginx. /var/lib/php
# chown -R nginx. /opt/nginx/html
5、启动php-fpm，重载nginx
# systemctl start php-fpm.service # systemctl enable php-fpm.service
# systemctl reload nginx.service
6、访问测试
# /opt/nginx/html/index.php <?php phpinfo(); ?>
注意权限
# chown nginx. index.php
三、安装MySQL5.7
1、添加扩展源
# vi /etc/yum.repos.d/mysql-community.repo [mysql57-community] name=MySQL 5.7 Community Server baseurl=http://repo.mysql.com/yum/mysql-5.7-community/el/7/$basearch/ enabled=1 gpgcheck=1 gpgkey=http://repo.mysql.com/RPM-GPG-KEY-mysql
2、安装MySQL
# yum -y install mysql-community-server php71w-mysql
3、启动并配置
# vi /etc/my.cnf #添加一行 character-set-server=utf8 # systemctl start mysqld
通过mysql_secure_installation命令按提示设置root密码以及基础的MySQL配置
4、创建数据库和新用户
mysql> create database wordpress; mysql> create user 'wp_user'@'%' identified by 'xxxxxxxx'； #创建用户 mysql> grant all privileges on wordpress.* to 'wp_user'@'%' identified by 'xxxxxxxx'; #授权
mysql> flush privileges;
5、重置MySQL的用户密码
如果忘记MySQL密码，就使用如下办法重置。需要root权限
#vi /etc/my.cnf [mysqld] skip-grant-tables #mysql -uroot mysql> use mysql; mysql> update user set authentication_string=password('xxxxxxxx') where user='root'; #5.7版本的密码字段是authentication_string，而不是password mysql> flush privileges;
修改完后注释掉skip-grant-tables，重启mysqld.service
四、安装WordPress
1、下载并解压
# wget https://cn.wordpress.org/wordpress-4.9.1-zh_CN.zip # unzip wordpress-4.9.1-zh_CN.zip # cp -rva wordpress/* /opt/nginx/html/
2、修改用户和组
# chown nginx. /opt/nginx/html
3、SELINUX
# cd /opt/nginx # chcon -R -t httpd_sys_content_t html/ # cd html/ # chcon -R -t httpd_sys_rw_content_t wp-content/
通过编译安装的nginx与yum安装的的安全上下文有所不同，yum安装会自动配置正确的上下文，编译安装默认可能是admin_home_t，访问时会提示File not found，必须改为httpd_sys_content_t
4、按照提示部署WordPress
五、配置nginx虚拟机
1、添加配置
虚拟server都可以配置为80端口，配置不同的域名
# mkdir /opt/nginx/conf.d # vi /opt/nginx/conf.d/virtual1.conf server { listen 80; server_name bbs.st.local; location / { root /opt/nginx/virtual; index index.html index.htm; } } #在nginx.conf全局区块中包含配置文件 # vi /opt/nginx/conf/nginx.conf include /opt/nginx/conf.d/*.conf;
2、创建虚拟主机目录并修改权限
# mkdir /opt/nginx/virtual # vi /opt/nginx/virtual/index.html Nginx Virtual Host Test Page # chown -R nginx. /opt/nginx/virtual/ # chcon -R -t httpd_sys_content_t /opt/nginx/virtual/
3、重载服务
# systemctl reload nginx.service
4、结果检测
