1 #!/bin/bash
2 #
3 #tddh 2017-6-6 ********@163.com rhel6u4 x86_64
4 #
5 #nginx install
6 #
7 ##########################################################################################
8
9 #定义参数
10 cur_dir=`pwd` #packages……
11 nginx_user=www
12
13 zlib=zlib-1.2.11.tar.gz
14 zlib_version=zlib-1.2.11
15
16 openssl=openssl-1.1.0f.tar.gz
17 openssl_version=openssl-1.1.0f
18
19 pcre=pcre-8.10.tar.gz
20 pcre_version=pcre-8.10
21
22 nginx=nginx-1.13.1.tar.gz
23 nginx_version=nginx-1.13.1
24
25 module1=nginx-goodies-nginx-sticky-module-ng-c78b7dd79d0d.zip
26 module1_version=nginx-goodies-nginx-sticky-module-ng-c78b7dd79d0d
27
28 module2=nginx_upstream_check_module-master.zip
29 module2_version=nginx_upstream_check_module-master
30
31 #cdrom="/app/system/rhel6.SIO" #光盘位置，全路径
32
33
34 #依赖包,#yum安装源配置
35
36 #安装nginx
37
38 #系统变量
39
40
41 cp /etc/sysctl.conf /etc/sysctl.conf_swyang.conf
42
43 cat <<EOF> /etc/sysctl.conf
44 net.ipv4.ip_forward = 0
45 net.ipv4.conf.default.rp_filter = 1
46 net.ipv4.conf.default.accept_source_route = 0
47 kernel.sysrq = 0
48 kernel.core_uses_pid = 1
49 net.ipv4.tcp_syncookies = 1
50 kernel.msgmnb = 65536
51 kernel.msgmax = 65536
52 kernel.shmmax = 68719476736
53 kernel.shmall = 4294967296
54 net.ipv4.tcp_max_tw_buckets = 6000
55 net.ipv4.tcp_sack = 1
56 net.ipv4.tcp_window_scaling = 1
57 net.ipv4.tcp_rmem = 4096 87380 4194304
58 net.ipv4.tcp_wmem = 4096 16384 4194304
59 net.core.wmem_default = 8388608
60 net.core.rmem_default = 8388608
61 net.core.rmem_max = 16777216
62 net.core.wmem_max = 16777216
63 net.core.netdev_max_backlog = 262144
64 net.core.somaxconn = 262144
65 net.ipv4.tcp_max_orphans = 3276800
66 net.ipv4.tcp_max_syn_backlog = 262144
67 net.ipv4.tcp_timestamps = 0
68 net.ipv4.tcp_synack_retries = 1
69 net.ipv4.tcp_syn_retries = 1
70 net.ipv4.tcp_tw_recycle = 1
71 net.ipv4.tcp_tw_reuse = 1
72 net.ipv4.tcp_mem = 94500000 915000000 927000000
73 net.ipv4.tcp_fin_timeout = 1
74 net.ipv4.tcp_keepalive_time = 30
75 net.ipv4.ip_local_port_range = 1024 65000
76 net.ipv4.tcp_syncookies = 1
77 fs.file-max = 999999
78 net.ipv4.tcp_tw_reuse = 1
79 net.ipv4.tcp_keepalive_time = 600
80 net.ipv4.tcp_fin_timeout = 30
81 net.ipv4.tcp_max_tw_buckets = 5000
82 net.ipv4.ip_local_port_range = 1024 61000
83 net.ipv4.tcp_rmem = 10240 87380 12582912
84 net.ipv4.tcp_wmem = 10240 87380 12582912
85 net.core.netdev_max_backlog = 8096
86 net.core.rmem_default = 6291456
87 net.core.wmem_default = 6291456
88 net.core.rmem_max = 12582912
89 net.core.wmem_max = 12582912
90 net.ipv4.tcp_max_syn_backlog = 8192
91 EOF
92
93 if [ $? -ne 0 ]
94 then
95 echo "sysctl.conf install error"
96 exit 1
97 else
98 echo "11 sysctl.conf success" >> ${cur_dir}/tddh_install.log
99 fi
100
101 sysctl -p
102
103
104 echo " ${nginx_user} soft nproc 20480" >> /etc/security/limits.conf
105 echo " ${nginx_user} hard nproc 26384" >> /etc/security/limits.conf
106 echo " ${nginx_user} soft nofile 10240" >> /etc/security/limits.conf
107 echo " ${nginx_user} hard nofile 65536" >> /etc/security/limits.conf
108 echo " ${nginx_user} soft stack 10240" >> /etc/security/limits.conf
109
110 echo "session required pam_limits.so" >> /etc/pam.d/login
111 if [ $? -ne 0 ]
112 then
113 echo "limits.conf install error"
114 exit 1
115 else
116 echo "12 limits.conf success" >> ${cur_dir}/tddh_install.log
117 fi
118
119 echo "UseDNS no" >> /etc/ssh/sshd_config
120 echo "UseLogin yes" >> /etc/ssh/sshd_config
121 /etc/init.d/sshd restart
122 if [ $? -ne 0 ]
123 then
124 echo "sshd install error"
125 exit 1
126 else
127 echo "13 sshd success" >> ${cur_dir}/tddh_install.log
128 fi
129
130 #install nginx
131 cd ${cur_dir}/packages/
132 tar -zxvf ${zlib}
133 tar -zxvf ${openssl}
134 tar -zxvf ${pcre}
135 tar -zxvf ${nginx}
136 unzip ${module1}
137 unzip ${module2}
138
139 if [ $? -ne 0 ]
140 then
141 echo "tar nginx install error"
142 exit 1
143 else
144 echo "14 tar nginx success" >> ${cur_dir}/tddh_install.log
145 fi
146
147 cd ${nginx_version}/
148 ./configure --user=${nginx_user} --group=${nginx_user} --prefix=${cur_dir}/${nginx_version} --with-http_stub_status_module --with-http_ssl_module --add-module=${cur_dir}/packages/${module1_version} --add-module=${cur_dir}/packages/${module2_version} --with-http_realip_module --with-pcre=${cur_dir}/packages/${pcre_version} --with-zlib=${cur_dir}/packages/${zlib_version} --with-openssl=${cur_dir}/packages/${openssl_version}/ --with-http_stub_status_module --with-http_ssl_module --with-http_gzip_static_module
149
150 if [ $? -ne 0 ]
151 then
152 echo "nginx configure install error"
153 exit 1
154 else
155 echo "15 nginx configure success" >> ${cur_dir}/tddh_install.log
156 fi
157
158 make
159 if [ $? -ne 0 ]
160 then
161 echo "nginx make install error"
162 exit 1
163 else
164 echo "16 nginx make success" >> ${cur_dir}/tddh_install.log
165 fi
166
167 make install
168 if [ $? -ne 0 ]
169 then
170 echo "nginx make install install error"
171 exit 1
172 else
173 echo "17 nginx make install success" >> ${cur_dir}/tddh_install.log
174 fi
175
176
177
178 #配置
179
180 [ -d ${cur_dir}/${nginx_version}/lock ] || mkdir ${cur_dir}/${nginx_version}/lock
181 [ -d ${cur_dir}/${nginx_version}/run ] || mkdir ${cur_dir}/${nginx_version}/run
182 [ -d ${cur_dir}/${nginx_version}/script ] || mkdir ${cur_dir}/${nginx_version}/script
183
184 #nginx configure
185
186 cat <<EOF> ${cur_dir}/${nginx_version}/conf/proxy.conf
187 fs.file-max = 999999
188 net.ipv4.tcp_tw_reuse = 1
189 net.ipv4.tcp_max_tw_buckets = 5000
190 net.ipv4.ip_local_port_range = 1024 61000
191 net.ipv4.tcp_rmem = 4096 32768 262142
192 net.ipv4.tcp_wmem = 4096 32768 262142
193 net.ipv4.tcp_syncookies = 1
194 net.core.netdev_max_backlog = 8096
195 net.core.rmem_default = 262144
196 net.core.wmem_default = 262144
197 net.core.rmem_max = 2097152
198 net.core.wmem_max = 2097152
199 net.ipv4.tcp_max_syn.backlog = 1024
200 EOF
201
202 if [ $? -ne 0 ]
203 then
204 echo "nginx proxy.conf install error"
205 exit 1
206 else
207 echo "18 nginx proxy.conf success" >> ${cur_dir}/tddh_install.log
208 fi
209
210
211
212 cpu_number=`cat /proc/cpuinfo | grep process | awk '{print $3}' | wc -l`
213
214
215 cat <<EOF> ${cur_dir}/${nginx_version}/conf/nginx.conf
216 user ${nginx_user};
217 worker_processes ${cpu_number};
218
219 error_log logs/error.log;
220 error_log logs/error.log notice;
221 error_log logs/error.log info;
222
223 pid run/nginx.pid;
224
225
226 events {
227 worker_connections 1024;
228 }
229
230
231 http {
232 include mime.types;
233 default_type application/octet-stream;
234
235 #log_format main '$remote_addr - $remote_user [$time_local] "$request" '
236 # '$status $body_bytes_sent "$http_referer" '
237 # '"$http_user_agent" "$http_x_forwarded_for"';
238
239 access_log logs/access.log main;
240
241 sendfile on;
242 #tcp_nopush on;
243
244 #keepalive_timeout 0;
245 keepalive_timeout 65;
246
247 gzip on;
248
249 server {
250 listen 80;
251 server_name localhost;
252
253 #charset koi8-r;
254
255 #access_log logs/host.access.log main;
256
257 location / {
258 root html;
259 index index.html index.htm;
260 }
261
262 #error_page 404 /404.html;
263
264 # redirect server error pages to the static page /50x.html
265 #
266 error_page 500 502 503 504 /50x.html;
267 location = /50x.html {
268 root html;
269 }
270
271 # proxy the PHP scripts to Apache listening on 127.0.0.1:80
272 #
273 #location ~ \.php$ {
274 # proxy_pass http://127.0.0.1;
275 #}
276
277 # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
278 #
279 #location ~ \.php$ {
280 # root html;
281 # fastcgi_pass 127.0.0.1:9000;
282 # fastcgi_index index.php;
283 # fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name;
284 # include fastcgi_params;
285 #}
286
287 # deny access to .htaccess files, if Apache's document root
288 # concurs with nginx's one
289 #
290 #location ~ /\.ht {
291 # deny all;
292 #}
293 }
294
295
296 # another virtual host using mix of IP-, name-, and port-based configuration
297 #
298 #server {
299 # listen 8000;
300 # listen somename:8080;
301 # server_name somename alias another.alias;
302
303 # location / {
304 # root html;
305 # index index.html index.htm;
306 # }
307 #}
308
309
310 # HTTPS server
311 #
312 #server {
313 # listen 443 ssl;
314 # server_name localhost;
315
316 # ssl_certificate cert.pem;
317 # ssl_certificate_key cert.key;
318
319 # ssl_session_cache shared:SSL:1m;
320 # ssl_session_timeout 5m;
321
322 # ssl_ciphers HIGH:!aNULL:!MD5;
323 # ssl_prefer_server_ciphers on;
324
325 # location / {
326 # root html;
327 # index index.html index.htm;
328 # }
329 #}
330
331 }
332 EOF
333
334 if [ $? -ne 0 ]
335 then
336 echo "nginx nginx.conf install error"
337 exit 1
338 else
339 echo "19 nginx nginx.conf success" >> ${cur_dir}/tddh_install.log
340 fi
341
342
343 cat <<EOF> ${cur_dir}/${nginx_version}/script/nginx.sh
344 #!/bin/bash
345 # nginx Startup script for the Nginx HTTP Server
346 # description: Nginx is a high-performance web and proxy server.
347 # It has a lot of features, but it's not for everyone.
348 # processname: nginx
349 # pidfile: /var/run/nginx.pid
350 # config: /usr/local/nginx/conf/nginx.conf
351
352 #nginx启动文件
353 nginxd=${cur_dir}/${nginx_version}/sbin/nginx
354
355 #nginx配置文件
356 nginx_config=${cur_dir}/${nginx_version}/conf/nginx.conf
357
358 #nginx的pid文件
359 nginx_pid=${cur_dir}/${nginx_version}/sbin/nginx.pid
360 RETVAL=0
361 prog="nginx"
362 # Source function library.
363 . /etc/rc.d/init.d/functions
364 # Source networking configuration.
365 . /etc/sysconfig/network
366 # Check that networking is up.
367 [ \${NETWORKING} = "no" ] && exit 0
368 [ -x \$nginxd ] || exit 0
369 # Start nginx daemons functions.
370 start() {
371 if [ -e \$nginx_pid ];then
372 echo "nginx already running...."
373 exit 1
374 fi
375 echo -n \$"Starting \$prog: "
376 daemon \$nginxd -c \${nginx_config}
377 RETVAL=\$?
378 echo
379 [ \$RETVAL = 0 ] && touch ${cur_dir}/${nginx_version}/lock/nginx
380 return $RETVAL
381 }
382 # Stop nginx daemons functions.
383 stop() {
384 echo -n \$"Stopping \$prog: "
385 killproc \$nginxd
386 RETVAL=\$?
387 echo
388 [ \$RETVAL = 0 ] && rm -f ${cur_dir}/${nginx_version}/lock/nginx ${cur_dir}/${nginx_version}/run/nginx.pid
389 }
390 # reload nginx service functions.
391 reload() {
392 echo -n \$"Reloading \$prog: "
393 #kill -HUP \`cat \${nginx_pid}\`
394 killproc \$nginxd -HUP
395 RETVAL=\$?
396 echo
397 }
398 # See how we were called.
399 case "\$1" in
400 start)
401 start
402 ;;
403 stop)
404 stop
405 ;;
406 reload)
407 reload
408 ;;
409 restart)
410 stop
411 start
412 ;;
413 status)
414 status \$prog
415 RETVAL=\$?
416 ;;
417 *)
418 echo \$"Usage: \$prog {start|stop|restart|reload|status|help}"
419 exit 1
420 esac
421 exit \$RETVAL
422 EOF
423
424
425 if [ $? -ne 0 ]
426 then
427 echo "nginx nginx.sh install error"
428 exit 1
429 else
430 echo "20 nginx nginx.sh success" >> ${cur_dir}/tddh_install.log
431 fi
432
433 chmod +x ${cur_dir}${nginx_version}/script/nginx.sh
434 chown ${nginx_user}.${nginx_user} -R ${cur_dir}/nginx
435
436 if [ $? -ne 0 ]
437 then
438 echo "nginx ${nginx_user} install error"
439 exit 1
440 else
441 echo "21 nginx ${nginx_user} success" >> ${cur_dir}/tddh_install.log
442 echo #########################End##############################
443 exit 1
444 fi
