[关闭]
@kklinan 2017-03-09T11:45:41.000000Z 字数 10404 阅读 1077

Nginx 安装

Nginx

安装基础服务

sudo yum install autoconf automake gcc gcc-c++ libtool

安装 PCRE 库

ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/ 下载最新的 PCRE 源码包，使用下面命令下
载编译和安装 PCRE 包

  1. cd /usr/local/src
  2. wget ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-8.34.tar.gz
  3. tar -zxvf pcre-8.34.tar.gz
  4. cd pcre-8.34
  5. ./configure
  6. make
  7. make install

安装 zlib 库

http://zlib.net/zlib-1.2.8.tar.gz 下载最新的 zlib 源码包，使用下面命令下载编译和安装 zlib包：

  1. cd /usr/local/src
  2. wget http://zlib.net/zlib-1.2.8.tar.gz
  3. tar -zxvf zlib-1.2.8.tar.gz
  4. cd zlib-1.2.8
  5. ./configure
  6. make
  7. make install

安装 ssl

  1. cd /usr/local/src
  2. wget http://www.openssl.org/source/openssl-1.0.1c.tar.gz
  3. tar -zxvf openssl-1.0.1c.tar.gz

载 Nginx 最新稳定版

  1. cd /usr/local/src/
  2. sudo curl -OL http://nginx.org/download/nginx-1.8.0.tar.gz
  3. sudo tar xvf nginx-1.8.0.tar.gz
  4. sudo chown -R root:root nginx-1.8.0

Nginx编译选项简述

参考：

–prefix=PATH ： 指定nginx的安装目录。默认 /usr/local/nginx
–conf-path=PATH ： 设置nginx.conf配置文件的路径。nginx允许使用不同的配置文件启动，通过命令行中的-c选项。默认为prefix/conf/nginx.conf
–user=name： 设置nginx工作进程的用户。安装完成后，可以随时在nginx.conf配置文件更改user指令。默认的用户名是nobody。–group=name类似
–with-pcre ： 设置PCRE库的源码路径，如果已通过yum方式安装，使用–with-pcre自动找到库文件。使用–with-pcre=PATH时，需要从PCRE网站下载pcre库的源码（版本4.4 – 8.30）并解压，剩下的就交给Nginx的./configure和make来完成。perl正则表达式使用在location指令和 ngx_http_rewrite_module模块中。
–with-zlib=PATH ： 指定 zlib（版本1.1.3 – 1.2.5）的源码解压目录。在默认就启用的网络传输压缩模块ngx_http_gzip_module时需要使用zlib 。
–with-http_ssl_module ： 使用https协议模块。默认情况下，该模块没有被构建。前提是openssl与openssl-devel已安装
–with-http_stub_status_module ： 用来监控 Nginx 的当前状态
–with-http_realip_module ： 通过这个模块允许我们改变客户端请求头中客户端IP地址值(例如X-Real-IP 或 X-Forwarded-For)，意义在于能够使得后台服务器记录原始客户端的IP地址
–add-module=PATH ： 添加第三方外部模块，如nginx-sticky-module-ng或缓存模块。每次添加新的模块都要重新编译（Tengine可以在新加入module时无需重新编译）

  2.   --prefix=PATH                      set installation prefix
  3.   --sbin-path=PATH                   set nginx binary pathname
  4.   --conf-path=PATH                   set nginx.conf pathname
  5.   --error-log-path=PATH              set error log pathname
  6.   --pid-path=PATH                    set nginx.pid pathname
  7.   --lock-path=PATH                   set nginx.lock pathname
  9.   --user=USER                        set non-privileged user for
  10.                                      worker processes
  11.   --group=GROUP                      set non-privileged group for
  12.                                      worker processes
  14.   --build=NAME                       set build name
  15.   --builddir=DIR                     set build directory
  17.   --with-rtsig_module                enable rtsig module
  18.   --with-select_module               enable select module
  19.   --without-select_module            disable select module
  20.   --with-poll_module                 enable poll module
  21.   --without-poll_module              disable poll module
  23.   --with-threads                     enable thread pool support
  25.   --with-file-aio                    enable file AIO support
  26.   --with-ipv6                        enable IPv6 support
  28.   --with-http_ssl_module             enable ngx_http_ssl_module
  29.   --with-http_spdy_module            enable ngx_http_spdy_module
  30.   --with-http_realip_module          enable ngx_http_realip_module
  31.   --with-http_addition_module        enable ngx_http_addition_module
  32.   --with-http_xslt_module            enable ngx_http_xslt_module
  33.   --with-http_image_filter_module    enable ngx_http_image_filter_module
  34.   --with-http_geoip_module           enable ngx_http_geoip_module
  35.   --with-http_sub_module             enable ngx_http_sub_module
  36.   --with-http_dav_module             enable ngx_http_dav_module
  37.   --with-http_flv_module             enable ngx_http_flv_module
  38.   --with-http_mp4_module             enable ngx_http_mp4_module
  39.   --with-http_gunzip_module          enable ngx_http_gunzip_module
  40.   --with-http_gzip_static_module     enable ngx_http_gzip_static_module
  41.   --with-http_auth_request_module    enable ngx_http_auth_request_module
  42.   --with-http_random_index_module    enable ngx_http_random_index_module
  43.   --with-http_secure_link_module     enable ngx_http_secure_link_module
  44.   --with-http_degradation_module     enable ngx_http_degradation_module
  45.   --with-http_stub_status_module     enable ngx_http_stub_status_module
  47.   --without-http_charset_module      disable ngx_http_charset_module
  48.   --without-http_gzip_module         disable ngx_http_gzip_module
  49.   --without-http_ssi_module          disable ngx_http_ssi_module
  50.   --without-http_userid_module       disable ngx_http_userid_module
  51.   --without-http_access_module       disable ngx_http_access_module
  52.   --without-http_auth_basic_module   disable ngx_http_auth_basic_module
  53.   --without-http_autoindex_module    disable ngx_http_autoindex_module
  54.   --without-http_geo_module          disable ngx_http_geo_module
  55.   --without-http_map_module          disable ngx_http_map_module
  56.   --without-http_split_clients_module disable ngx_http_split_clients_module
  57.   --without-http_referer_module      disable ngx_http_referer_module
  58.   --without-http_rewrite_module      disable ngx_http_rewrite_module
  59.   --without-http_proxy_module        disable ngx_http_proxy_module
  60.   --without-http_fastcgi_module      disable ngx_http_fastcgi_module
  61.   --without-http_uwsgi_module        disable ngx_http_uwsgi_module
  62.   --without-http_scgi_module         disable ngx_http_scgi_module
  63.   --without-http_memcached_module    disable ngx_http_memcached_module
  64.   --without-http_limit_conn_module   disable ngx_http_limit_conn_module
  65.   --without-http_limit_req_module    disable ngx_http_limit_req_module
  66.   --without-http_empty_gif_module    disable ngx_http_empty_gif_module
  67.   --without-http_browser_module      disable ngx_http_browser_module
  68.   --without-http_upstream_hash_module
  69.                                      disable ngx_http_upstream_hash_module
  70.   --without-http_upstream_ip_hash_module
  71.                                      disable ngx_http_upstream_ip_hash_module
  72.   --without-http_upstream_least_conn_module
  73.                                      disable ngx_http_upstream_least_conn_module
  74.   --without-http_upstream_keepalive_module
  75.                                      disable ngx_http_upstream_keepalive_module
  77.   --with-http_perl_module            enable ngx_http_perl_module
  78.   --with-perl_modules_path=PATH      set Perl modules path
  79.   --with-perl=PATH                   set perl binary pathname
  81.   --http-log-path=PATH               set http access log pathname
  82.   --http-client-body-temp-path=PATH  set path to store
  83.                                      http client request body temporary files
  84.   --http-proxy-temp-path=PATH        set path to store
  85.                                      http proxy temporary files
  86.   --http-fastcgi-temp-path=PATH      set path to store
  87.                                      http fastcgi temporary files
  88.   --http-uwsgi-temp-path=PATH        set path to store
  89.                                      http uwsgi temporary files
  90.   --http-scgi-temp-path=PATH         set path to store
  91.                                      http scgi temporary files
  93.   --without-http                     disable HTTP server
  94.   --without-http-cache               disable HTTP cache
  96.   --with-mail                        enable POP3/IMAP4/SMTP proxy module
  97.   --with-mail_ssl_module             enable ngx_mail_ssl_module
  98.   --without-mail_pop3_module         disable ngx_mail_pop3_module
  99.   --without-mail_imap_module         disable ngx_mail_imap_module
  100.   --without-mail_smtp_module         disable ngx_mail_smtp_module
  102.   --with-google_perftools_module     enable ngx_google_perftools_module
  103.   --with-cpp_test_module             enable ngx_cpp_test_module
  105.   --add-module=PATH                  enable an external module
  107.   --with-cc=PATH                     set C compiler pathname
  108.   --with-cpp=PATH                    set C preprocessor pathname
  109.   --with-cc-opt=OPTIONS              set additional C compiler options
  110.   --with-ld-opt=OPTIONS              set additional linker options
  111.   --with-cpu-opt=CPU                 build for the specified CPU, valid values:
  112.                                      pentium, pentiumpro, pentium3, pentium4,
  113.                                      athlon, opteron, sparc32, sparc64, ppc64
  115.   --without-pcre                     disable PCRE library usage
  116.   --with-pcre                        force PCRE library usage
  117.   --with-pcre=DIR                    set path to PCRE library sources
  118.   --with-pcre-opt=OPTIONS            set additional build options for PCRE
  119.   --with-pcre-jit                    build PCRE with JIT compilation support
  121.   --with-md5=DIR                     set path to md5 library sources
  122.   --with-md5-opt=OPTIONS             set additional build options for md5
  123.   --with-md5-asm                     use md5 assembler sources
  125.   --with-sha1=DIR                    set path to sha1 library sources
  126.   --with-sha1-opt=OPTIONS            set additional build options for sha1
  127.   --with-sha1-asm                    use sha1 assembler sources
  129.   --with-zlib=DIR                    set path to zlib library sources
  130.   --with-zlib-opt=OPTIONS            set additional build options for zlib
  131.   --with-zlib-asm=CPU                use zlib assembler sources optimized
  132.                                      for the specified CPU, valid values:
  133.                                      pentium, pentiumpro
  135.   --with-libatomic                   force libatomic_ops library usage
  136.   --with-libatomic=DIR               set path to libatomic_ops library sources
  138.   --with-openssl=DIR                 set path to OpenSSL library sources
  139.   --with-openssl-opt=OPTIONS         set additional build options for OpenSSL
  141.   --with-debug                       enable debug logging

Nginx 编译:

  1. cd nginx-1.8.0
  2. sudo ./configure --help
  3. sudo ./configure --prefix=/usr/local/nginx --with-http_ssl_module

模块安装

安装headers-more-nginx-module模块（https://github.com/openresty/headers-more-nginx-module）请先下载到/usr/local/src/目录并解压重命名为：headers-more-nginx-module
编译命令：
sudo ./configure --prefix=/usr/local/nginx --with-http_ssl_module --add-module=/usr/local/src/headers-more-nginx-module

  1. sudo make
  2. sudo make install

创建启动脚本

  1. #!/bin/sh
  2. #
  3. # nginx - this script starts and stops the nginx daemon
  4. #
  5. # chkconfig:   2345 85 15
  6. # description:  Nginx is an HTTP(S) server, HTTP(S) reverse \
  7. #               proxy and IMAP/POP3 proxy server
  8. # processname: nginx
  9. # config:      /usr/local/nginx/conf/nginx.conf
  10. # pidfile:     /var/run/nginx.pid
  12. # Source function library.
  13. . /etc/rc.d/init.d/functions
  15. # Source networking configuration.
  16. . /etc/sysconfig/network
  18. # Check that networking is up.
  19. [ "$NETWORKING" = "no" ] && exit 0
  21. nginx="/usr/local/nginx/sbin/nginx"
  22. prog=$(basename $nginx)
  24. NGINX_CONF_FILE="/usr/local/nginx/conf/nginx.conf"
  26. lockfile=/var/lock/subsys/nginx
  28. start() {
  29.     [ -x $nginx ] || exit 5
  30.     [ -f $NGINX_CONF_FILE ] || exit 6
  31.     echo -n $"Starting $prog: "
  32.     daemon $nginx -c $NGINX_CONF_FILE
  33.     retval=$?
  34.     echo
  35.     [ $retval -eq 0 ] && touch $lockfile
  36.     return $retval
  37. }
  39. stop() {
  40.     echo -n $"Stopping $prog: "
  41.     killproc $prog -QUIT
  42.     retval=$?
  43.     echo
  44.     [ $retval -eq 0 ] && rm -f $lockfile
  45.     return $retval
  46. }
  48. restart() {
  49.     configtest || return $?
  50.     stop
  51.     sleep 1
  52.     start
  53. }
  55. reload() {
  56.     configtest || return $?
  57.     echo -n $"Reloading $prog: "
  58.     killproc $nginx -HUP
  59.     RETVAL=$?
  60.     echo
  61. }
  63. force_reload() {
  64.     restart
  65. }
  67. configtest() {
  68.   $nginx -t -c $NGINX_CONF_FILE
  69. }
  71. rh_status() {
  72.     status $prog
  73. }
  75. rh_status_q() {
  76.     rh_status >/dev/null 2>&1
  77. }
  79. case "$1" in
  80.     start)
  81.         rh_status_q && exit 0
  82.         $1
  83.         ;;
  84.     stop)
  85.         rh_status_q || exit 0
  86.         $1
  87.         ;;
  88.     restart|configtest)
  89.         $1
  90.         ;;
  91.     reload)
  92.         rh_status_q || exit 7
  93.         $1
  94.         ;;
  95.     force-reload)
  96.         force_reload
  97.         ;;
  98.     status)
  99.         rh_status
  100.         ;;
  101.     condrestart|try-restart)
  102.         rh_status_q || exit 0
  103.             ;;
  104.     *)
  105.         echo $"Usage: $0 {start|stop|status|restart|condrestart|try-restart|reload|force-reload|configtest}"
  106.         exit 2
  107. esac

重新设置启动脚本的所有者：sudo chown root:root /etc/init.d/nginx
重新查看启动脚本的所有者：ll /etc/init.d/nginx
查看启动脚本的命令：sudo service nginx
查看系统服务的命令帮助：chkconfig --help
将启动脚本添加至系统服务：sudo chkconfig --add nginx
查看系统服务列表：sudo chkconfig --list
启动Nginx服务：sudo service nginx start
搜索查看Nginx的运行进程：ps aux | grep nginx

配置

切换目录：cd /usr/local/nginx/conf
编辑Nginx的默认配置文件：sudo vim nginx.conf

  1. user  healthd;
  2. worker_processes  2;
  4. #error_log  logs/error.log;
  5. #error_log  logs/error.log  notice;
  6. #error_log  logs/error.log  info;
  8. pid        logs/nginx.pid;
  10. events {
  11.     worker_connections  2048;
  12. }
  14. http {
  15.     include       mime.types;
  16.     default_type  application/octet-stream;
  18.     log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
  19.                       '$status $body_bytes_sent "$http_referer" '
  20.                       '"$http_user_agent" "$http_x_forwarded_for"';
  22.     access_log  logs/access.log  main;
  24.     sendfile        on;
  25.     #tcp_nopush     on;
  27.     #keepalive_timeout  0;
  28.     keepalive_timeout  65;
  30.     gzip  on;
  32.     include include/*.conf;
  33. }

创建配置文件中的include目录：sudo mkdir include
切换目录：cd include/
创建：sudo vim localhost.conf

  1. server {
  2.         listen       80;
  3.         server_name  localhost;
  4.         root           html;
  6.         #charset koi8-r;
  8.         #access_log  logs/host.access.log  main;
  10.         location / {
  11.             index  index.html index.htm;
  12.         }
  14.         #error_page  404              /404.html;
  16.         # redirect server error pages to the static page /50x.html
  17.         #
  18.         error_page   500 502 503 504  /50x.html;
  19.         location = /50x.html {
  20.             root   html;
  21.         }
  23.         # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
  24.         #
  25.         location ~ \.php$ {
  26.             fastcgi_pass   127.0.0.1:9000;
  27.             fastcgi_index  index.php;
  28.             include        fastcgi.conf;
  29.         }
  31.         # deny access to .htaccess files, if Apache's document root
  32.         # concurs with nginx's one
  33.         #
  34.         #location ~ /\.ht {
  35.         #    deny  all;
  36.         #}
  37.     }

检查Nginx配置是否有误：sudo service nginx configtest
启动Nginx：sudo service nginx start
查看启动进程是否存在Nginx：ps aux | grep nginx
访问服务测试是否成功：curl -v http://localhost/

添加新批注
在作者公开此批注前，只有你和作者可见。
回复批注