第14周作業
簡述CGI與FASTCGI的區別
CGI：兼職，一次性的過河拆橋式的服務
FASTCGI：專職，全周期的持續式的服務
編譯安裝基于fastcgi模式的多虛擬主機的wordpress和discuz的LAMP架構
環境準備
10.0.0.7:centos7.9:httpd+php(fastcgi模式)
10.0.0.17:centos7.9:mariadb 服務器(MariaDB-10.4.22（通用二進制格式))
實現步驟
為wordprss和discuz應用準備數據庫和用戶帳號
[root@centos7 ~]#vim /etc/my.cnf
skip_name_resolve = ON
[root@centos7 ~]#systemctl restart mysqld
MariaDB [mysql]> create database wordpress;
MariaDB [mysql]> create database discuz;
MariaDB [mysql]> grant all on wordpress.* to wordpress@'10.0.0.%' identified by "wppass";
MariaDB [mysql]> grant all on discuz.* to discuz@'10.0.0.%' identified by 'dispass';
MariaDB [mysql]> FLUSH PRIVILEGES;
編譯安裝 httpd 2.4
#安裝相關包
[root@centos7 ~]#yum install gcc pcre-devel openssl-devel expat-devel -y
#編譯安裝httpd
[root@centos7 ~]#tar xvf apr-1.7.0.tar.bz2
[root@centos7 ~]#tar xvf apr-util-1.6.1.tar.bz2
[root@centos7 ~]#tar xf httpd-2.4.46.tar.bz2
[root@centos7 ~]#mv apr-1.7.0 httpd-2.4.46/srclib/apr
[root@centos7 ~]#mv apr-util-1.6.1 httpd-2.4.46/srclib/apr-util
[root@centos7 ~]#cd httpd-2.4.46/
[root@centos7 httpd-2.4.46]#./configure \
> --prefix=/apps/httpd \
> --enable-so \
> --enable-ssl \
> --enable-cgi \
> --enable-rewrite \
> --with-zlib \
> --with-pcre \
> --with-included-apr \
> --enable-modules=most \
> --enable-mpms-shared=all \
> --with-mpm=event
[root@centos7 httpd-2.4.46]#make && make install
#準備PATH變量
[root@centos7 httpd-2.4.46]#vim /etc/profile.d/lamp.sh
#!/bin/bash
PATH=/apps/httpd/bin:$PATH
[root@centos7 httpd-2.4.46]#. /etc/profile.d/lamp.sh
#創建和配置用戶和組
[root@centos7 httpd-2.4.46]#useradd -s /sbin/nologin -r -u 88 apache
[root@centos7 httpd-2.4.46]#vim /apps/httpd/conf/httpd.conf
User apache
Group apache
#修改為event模式,編譯時已指定，此項不再需修改，可選項
[root@centos7 httpd-2.4.46]#vim /apps/httpd/conf/httpd.conf
LoadModule mpm_event_module modules/mod_mpm_event.so
#LoadModule mpm_prefork_module modules/mod_mpm_prefork.so
#LoadModule mpm_worker_module modules/mod_mpm_worker.so
[root@centos7 httpd-2.4.46]#httpd -M |grep mpm
mpm_event_module (shared)
[root@centos7 httpd-2.4.46]#apachectl start
[root@centos7 httpd-2.4.46]#vim /usr/lib/systemd/system/httpd.service
[Unit]
Description=The Apache HTTP Server
After=network.target remote-fs.target nss-lookup.target
Documentation=man:httpd(8)
Documentation=man:apachectl(8)
[Service]
Type=forking
#EnvironmentFile=/etc/sysconfig/httpd
#ExecStart=/usr/sbin/httpd $OPTIONS -DFOREGROUND
ExecStart=/apps/httpd/bin/apachectl start
#ExecReload=/usr/sbin/httpd $OPTIONS -k graceful
ExecReload=/apps/httpd/bin/apachectl graceful
ExecStop=/apps/httpd/bin/apachectl stop
KillSignal=SIGCONT
PrivateTmp=true
[Install]
WantedBy=multi-user.target
[root@centos7 httpd-2.4.46]#systemctl daemon-reload
[root@centos7 httpd-2.4.46]#systemctl restart httpd.service
編譯安裝 fastcgi 方式的 php 7.4
#安裝相關包,依賴EPEL源
#php 7.4 相關包
[root@centos7 httpd-2.4.46]#yum -y install gcc libxml2-devel bzip2-devel libmcrypt-devel sqlite-devel oniguruma-devel
#php7.4 編譯
[root@centos7 httpd-2.4.46]#cd
[root@centos7 ~]#tar xvf php-7.4.28.tar.gz
[root@centos7 ~]#cd php-7.4.28/
[root@centos7 php-7.4.28]#./configure \
> --prefix=/apps/php \
> --enable-mysqlnd \
> --with-mysqli=mysqlnd \
> --with-pdo-mysql=mysqlnd \
> --with-openssl \
> --with-zlib \
> --with-config-file-path=/etc \
> --with-config-file-scan-dir=/etc/php.d \
> --enable-mbstring \
> --enable-xml \
> --enable-sockets \
> --enable-fpm \
> --enable-maintainer-zts \
> --disable-fileinfo
[root@centos7 php-7.4.28]#make -j 2 && make install
#準備PATH變量
[root@centos7 php-7.4.28]#vim /etc/profile.d/lamp.sh
PATH=/apps/php/bin:/apps/httpd/bin:$PATH
[root@centos7 php-7.4.28]#. /etc/profile.d/lamp.sh
[root@centos7 php-7.4.28]#php --version
PHP 7.4.28 (cli) (built: Mar 12 2022 14:55:19) ( ZTS )
Copyright (c) The PHP Group
Zend Engine v3.4.0, Copyright (c) Zend Technologies
#準備php配置文件和啟動文件
[root@centos7 php-7.4.28]#cp php.ini-production /etc/php.ini
[root@centos7 php-7.4.28]#cp sapi/fpm/php-fpm.service /usr/lib/systemd/system/
[root@centos7 php-7.4.28]#cd /apps/php/etc
[root@centos7 etc]#cp php-fpm.conf.default php-fpm.conf
[root@centos7 etc]#cd php-fpm.d/
[root@centos7 php-fpm.d]#cp www.conf.default www.conf
#修改進程所有者
[root@centos7 php-fpm.d]#pwd
/apps/php/etc/php-fpm.d
[root@centos7 php-fpm.d]#vim www.conf
user = apache
group = apache
#支持status和ping頁面
pm.status_path = /fpm_status
ping.path = /ping
#支持opcache加速
[root@centos7 php-fpm.d]#mkdir /etc/php.d/
[opcache]
zend_extension=opcache.so
opcache.enable=1
[root@centos7 php-fpm.d]#systemctl daemon-reload
[root@centos7 php-fpm.d]#systemctl enable --now php-fpm.service
修改配置 httpd 支持 php-fpm
[root@centos7 php-7.4.28]#vim /apps/httpd/conf/httpd.conf
#取消下面兩行的注釋
LoadModule proxy_module modules/mod_proxy.so
LoadModule proxy_fcgi_module modules/mod_proxy_fcgi.so
#修改下面行
<IfModule dir_module>
DirectoryIndex index.php index.html
</IfModule>
#加下面兩行
AddType application/x-httpd-php .php
ProxyRequests Off
#實現第一個虛擬主機
<virtualhost *:80>
servername blog.linux2022.com
documentroot /data/blog
<directory /data/blog>
require all granted
</directory>
ProxyPassMatch ^/(.*\.php)$ fcgi://127.0.0.1:9000/data/blog/$1
#實現status和ping頁面
ProxyPassMatch ^/(fpm_status|ping)$ fcgi://127.0.0.1:9000/$1
CustomLog "logs/access_blog_log" common
</virtualhost>
#第二個虛擬主機
<virtualhost *:80>
servername forum.linux2022.com
documentroot /data/forum
<directory /data/forum/>
require all granted
</directory>
ProxyPassMatch ^/(.*\.php)$ fcgi://127.0.0.1:9000/data/forum/$1
CustomLog "logs/access_forum_log" common
</virtualhost>
[root@centos7 php-7.4.28]#systemctl restart httpd.service
修改配置 httpd 支持 php-fpm
[root@centos7 php-7.4.28]#vim /apps/httpd/conf/httpd.conf
#取消下面兩行的注釋
LoadModule proxy_module modules/mod_proxy.so
LoadModule proxy_fcgi_module modules/mod_proxy_fcgi.so
#修改下面行
<IfModule dir_module>
DirectoryIndex index.php index.html
</IfModule>
#加下面兩行
AddType application/x-httpd-php .php
ProxyRequests Off
#實現第一個虛擬主機
<virtualhost *:80>
servername blog.linux2022.com
documentroot /data/blog
<directory /data/blog>
require all granted
</directory>
ProxyPassMatch ^/(.*\.php)$ fcgi://127.0.0.1:9000/data/blog/$1
#實現status和ping頁面
ProxyPassMatch ^/(fpm_status|ping)$ fcgi://127.0.0.1:9000/$1
CustomLog "logs/access_blog_log" common
</virtualhost>
#第二個虛擬主機
<virtualhost *:80>
servername forum.linux2022.com
documentroot /data/forum
<directory /data/forum/>
require all granted
</directory>
ProxyPassMatch ^/(.*\.php)$ fcgi://127.0.0.1:9000/data/forum/$1
CustomLog "logs/access_forum_log" common
</virtualhost>
[root@centos7 php-7.4.28]#systemctl restart httpd.service
準備wordpress和discuz 相關文件
[root@centos7 php-fpm.d]#cd /data/
[root@centos7 data]#mkdir blog forum
[root@centos7 ~]#tar xf latest-zh_CN.tar.gz
[root@centos7 ~]#mv wordpress/* /data/blog/
[root@centos7 ~]#mv Discuz_X3.4_SC_UTF8_20210630.zip /opt
[root@centos7 ~]#cd /opt
[root@centos7 opt]#unzip Discuz_X3.4_SC_UTF8_20210630.zip
[root@centos7 opt]#mv upload/* /data/forum/
[root@centos7 opt]#chown -R apache.apache /data/*
通過 loganalyzer 展示數據庫中的日志
一、環境準備
10.0.0.14 數據庫centos7
10.0.0.16 rsyslog centos7
10.0.0.22 http+php centos8
二、實現配置
10.0.0.16 rsyslog
安裝連接mysql模塊相關的程序包
yum install rsyslog-mysql
將sql腳本復制到數據庫服庫上
scp /usr/share/doc/rsyslog-8.24.0/mysql-createDB.sql 10.0.0.14:/data
10.0.0.14數據庫centos7
安裝數據庫
yum install -y mariadb-server
在mariadb數據庫服務器上創建相關數據庫和表，并授權rsyslog能連接至當前服務器
MariaDB [(none)]> source /data/mysql-createDB.sql
MariaDB [(none)]> create user rsyslog@'10.0.0.%' identified by '123456';
MariaDB [Syslog]> grant all on Syslog.* to rsyslog@'10.0.0.%';
10.0.0.16 配置日志服務器
配置rsyslog的配置文件
[root@rsyslog ~]# vi /etc/rsyslog.conf
....
#### MODULES ####
$ModLoad ommysql
....
#mysql
*.* :ommysql:10.0.0.14,Syslog,rsyslog,123456
重啟rsyslog服務
systemctl restart rsyslog.service
驗證:
10.0.0.22httpd+php 服務器
安裝php和相關軟件包
yum -y install httpd php-fpm php-mysqlnd php-gd
systemctl enable --now httpd php-fpm
安裝 LogAnalyzer（從http://loganalyzer.adiscon.com/downloads/ 下載loganalyzer-4.1.10.tar.gz）
wget https://download.adiscon.com/loganalyzer/loganalyzer-4.1.12.tar.gz --no-check-certificate
配置web界面
tar xvf loganalyzer-4.1.12.tar.gz
mv loganalyzer-4.1.12/src/ /var/www/html/log
touch /var/www/html/log/config.php
chmod 666 /var/www/html/log/config.php
瀏覽器打開10.0.0.22/log
結束
浙公網安備 33010602011771號