CentOS 7 yum nginx MySQL PHP 簡易環(huán)境搭建
用centos自帶的yum源來安裝nginx,mysql和php,超級方便,省去編譯的麻煩,省去自己配置的麻煩,還能節(jié)省非常多的時間。
更換yum源
- 我們先把yum源換成國內(nèi)的阿里云鏡像源(當(dāng)然不換也可以),先備份一下原來的源鏡像文件,以免出錯后可以恢復(fù):
[root@192 ~]# mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup
- 下載新的CentOS-Base.repo 到/etc/yum.repos.d/,版本根據(jù)自己的系統(tǒng)版本選擇下載:
# CentOS 5:
wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-5.repo
# CentOS 6:
wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-6.repo
# CentOS 7:
wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
- 更改/etc/yum.repos.d/CentOS-Media.repo使其為不生效:
vi /etc/yum.repos.d/CentOS-Media.repo
enable=0 # 修改enable為0不生效
- 運(yùn)行yum makecache生成緩存:
yum clean all
yum makecache
yum update
安裝Nginx
- 由于yum源中沒有我們想要的nginx,那么我們就需要創(chuàng)建一個“/etc/yum.repos.d/nginx.repo”的文件,其實(shí)就是新增一個yum源。
[root@192 yum.repos.d]# vi /etc/yum.repos.d/nginx.repo
# 把如下內(nèi)容復(fù)制進(jìn)去
[nginx]
name=nginx repo
baseurl=http://nginx.org/packages/centos/$releasever/$basearch/
gpgcheck=0
enabled=1
- 然后保存退出,輸入 yum list nginx 查看:
[root@192 yum.repos.d]# yum list nginx
已加載插件:fastestmirror
nginx | 2.9 kB 00:00:00
nginx/7/x86_64/primary_db | 18 kB 00:00:04
Loading mirror speeds from cached hostfile
* base: mirrors.aliyun.com
* extras: mirrors.aliyun.com
* updates: mirrors.aliyun.com
可安裝的軟件包
nginx.x86_64 1:1.10.2-1.el7.ngx nginx
[root@192 yum.repos.d]# yum list |grep nginx
nginx.x86_64 1:1.10.2-1.el7.ngx nginx
nginx-debug.x86_64 1:1.8.0-1.el7.ngx nginx
nginx-debuginfo.x86_64 1:1.10.2-1.el7.ngx nginx
nginx-module-geoip.x86_64 1:1.10.2-1.el7.ngx nginx
nginx-module-geoip-debuginfo.x86_64 1:1.10.2-1.el7.ngx nginx
nginx-module-image-filter.x86_64 1:1.10.2-1.el7.ngx nginx
nginx-module-image-filter-debuginfo.x86_64 1:1.10.2-1.el7.ngx nginx
nginx-module-njs.x86_64 1:1.10.2.0.0.20160414.1c50334fbea6-2.el7.ngx
nginx
nginx-module-njs-debuginfo.x86_64 1:1.10.2.0.0.20160414.1c50334fbea6-2.el7.ngx
nginx
nginx-module-perl.x86_64 1:1.10.2-1.el7.ngx nginx
nginx-module-perl-debuginfo.x86_64 1:1.10.2-1.el7.ngx nginx
nginx-module-xslt.x86_64 1:1.10.2-1.el7.ngx nginx
nginx-module-xslt-debuginfo.x86_64 1:1.10.2-1.el7.ngx nginx
nginx-nr-agent.noarch 2.0.0-10.el7.ngx nginx
pcp-pmda-nginx.x86_64 3.10.6-2.el7 base
如果執(zhí)行命令是這樣的顯示效果,那么我們的nginx的yum源就配置成功啦!
- 然后要安裝我們的nginx就直接執(zhí)行:
yum -y install nginx
這樣nginx的最新官網(wǎng)版本就安裝好了!
- 啟動Nginx
[root@192 yum.repos.d]# nginx #啟動nginx
[root@192 yum.repos.d]# curl 127.0.0.1
Welcome to nginx!0 auto; font-family: Tahoma, Verdana, Arial, sans-serif; }
Welcome to nginx!
If you see this page, the nginx web server is successfully installed andworking. Further configuration is required.
For online documentation and support please refer to"http://nginx.org/">nginx.org.
Commercial support is available at"http://nginx.com/">nginx.com.
Thank you forusing nginx.
安裝MySQL 5.7版本,官網(wǎng)http://dev.mysql.com/downloads/repo/yum/
- 獲取MySql yum源
[root@192 yum.repos.d]# rpm -Uvh http://dev.mysql.com/get/mysql57-community-release-el7-9.noarch.rpm
- 查看MySql yum情況
[root@192 yum.repos.d]# yum repolist all | grep mysql
mysql-connectors-community/x86_64 MySQL Connectors Community 啟用: 24
mysql-connectors-community-source MySQL Connectors Community - Sourc 禁用
mysql-tools-community/x86_64 MySQL Tools Community 啟用: 38
mysql-tools-community-source MySQL Tools Community - Source 禁用
mysql-tools-preview/x86_64 MySQL Tools Preview 禁用
mysql-tools-preview-source MySQL Tools Preview - Source 禁用
mysql55-community/x86_64 MySQL 5.5 Community Server 禁用
mysql55-community-source MySQL 5.5 Community Server - Sourc 禁用
mysql56-community/x86_64 MySQL 5.6 Community Server 禁用
mysql56-community-source MySQL 5.6 Community Server - Sourc 禁用
mysql57-community/x86_64 MySQL 5.7 Community Server 啟用: 146
mysql57-community-source MySQL 5.7 Community Server - Sourc 禁用
mysql80-community/x86_64 MySQL 8.0 Community Server 禁用
mysql80-community-source MySQL 8.0 Community Server - Sourc 禁用
可以看到已經(jīng)有了,并且5.7版本已經(jīng)啟用,如果沒有開啟,或者你想要選擇需要的版本進(jìn)行安裝,修改 /etc/yum.repos.d/mysql-community.repo,選擇需要的版本把enable改為1即可,其它的改為0:
[mysql57-community]
name=MySQL 5.7 Community Server
baseurl=http://repo.mysql.com/yum/mysql-5.7-commnuty
enable=1 #把需要的版本設(shè)置為1
gpgcheck=1
....
修改好后查看可用的安裝版本:
[root@192 yum.repos.d]# yum repolist enabled | grep mysql
mysql-connectors-community/x86_64 MySQL Connectors Community 24
mysql-tools-community/x86_64 MySQL Tools Community 38
mysql57-community/x86_64 MySQL 5.7 Community Server 146
- 不用猶豫,開始安裝吧!
[root@192 yum.repos.d]# yum -y install mysql-community-server
- 啟動MySql:
[root@192 yum.repos.d]# service start mysqld
Redirecting to /bin/systemctl start mysqld.service
- 開機(jī)啟動設(shè)置:
[root@192 yum.repos.d]# systemctl enable mysqld
[root@192 yum.repos.d]# systemctl daemon-reload
- mysql安裝完成之后,在/var/log/mysqld.log文件中給root生成了一個默認(rèn)密碼。通過下面的方式找到root默認(rèn)密碼,然后登錄mysql進(jìn)行修改:
[root@192 yum.repos.d]# grep 'temporary password' /var/log/mysqld.log
2016-10-23T14:51:45.705458Z 1 [Note] A temporary password is generated for root@localhost: a&sqr7dou7N_
[root@192 yum.repos.d]# mysql -uroot -p
- 修改root密碼:
ALTER USER 'root'@'localhost' IDENTIFIED BY 'NewPassWord!';
注意:mysql5.7默認(rèn)安裝了密碼安全檢查插件,默認(rèn)密碼檢查策略要求密碼必須包含:大小寫字母、數(shù)字和特殊符號,并且長度不能少于8位。否則會提示ERROR 1819 (HY000): Your password does not satisfy the current policy requirements錯誤,如所示:
ERROR 1819 (HY000):Your password does ont satisfy the the current policy requirements
通過msyql環(huán)境變量可以查看密碼策略的相關(guān)信息:
mysql> show variables like '%password%';
+---------------------------------------+--------+
| Variable_name | Value |
+---------------------------------------+--------+
| default_password_lifetime | 0 |
| disconnect_on_expired_password | ON |
| log_builtin_as_identified_by_password | OFF |
| mysql_native_password_proxy_users | OFF |
| old_passwords | 0 |
| report_password | |
| sha256_password_proxy_users | OFF |
| validate_password_check_user_name | OFF |
| validate_password_dictionary_file | |
| validate_password_length | 8 |
| validate_password_mixed_case_count | 1 |
| validate_password_number_count | 1 |
| validate_password_policy | MEDIUM |
| validate_password_special_char_count | 1 |
+---------------------------------------+--------+
rows in set (0.00 sec)
validate_password_policy:密碼策略,默認(rèn)為MEDIUM策略
validate_password_dictionary_file:密碼策略文件,策略為STRONG才需要
validate_password_length:密碼最少長度
validate_password_mixed_case_count:大小寫字符長度,至少1個
validate_password_number_count :數(shù)字至少1個
validate_password_special_char_count:特殊字符至少1個
上述參數(shù)是默認(rèn)策略MEDIUM的密碼檢查規(guī)則。
- 修改密碼策略
一、(==已測試不可用==)如果想修改密碼策略,在/etc/my.cnf文件添加validate_password_policy配置:
# 選擇0(LOW),1(MEDIUM),2(STRONG)其中一種,選擇2需要提供密碼字典文件
validate_password_policy=0
二、進(jìn)入mysql命令端:
mysql> set global validate_password_policy=0;
mysql> set global validate_password_length=4;
# 便可以設(shè)置密碼為:1234
- 配置默認(rèn)編碼為utf8
修改/etc/my.cnf配置文件,在[mysqld]下添加編碼配置,如下所示:
[mysqld]
character_set_server=utf8
init_connect='SET NAMES utf8'
重新啟動mysql服務(wù)使配置生效:
[root@192 yum.repos.d]# systemctl restart mysqld
- 添加遠(yuǎn)程登錄用戶
默認(rèn)只允許root帳戶在本地登錄,如果要在其它機(jī)器上連接mysql,必須修改root允許遠(yuǎn)程連接,或者添加一個允許遠(yuǎn)程連接的帳戶,為了安全起見,我們添加一個新的帳戶:
mysql> grant all privileges on *.* to 'evai'@'%' identified by '@evai2016' WITH GRANT OPTION;
mysql> flush privileges;
運(yùn)行select host, user from mysql.user 查看下:
mysql> select host,user from mysql.user;
+-----------+-----------+
| host | user |
+-----------+-----------+
| % | evai |
| localhost | mysql.sys |
| localhost | root |
+-----------+-----------+
3 rows in set (0.00 sec)
Yum安裝PHP5.5,5.6,7.0
- 檢查當(dāng)前安裝的PHP包
[root@192 yum.repos.d]# yum list installed | grep php
# 如果有安裝的PHP包,先刪除他們:
[root@192 yum.repos.d]# yum remove php.x86_64 php-cli.x86_64 php-common.x86_64 php-gd.x86_64 php-ldap.x86_64 php-mbstring.x86_64 php-mcrypt.x86_64 php-mysql.x86_64 php-pdo.x86_64
- 獲取Yum源:
# Centos 5.X:
[root@192 yum.repos.d]# rpm -Uvh http://mirror.webtatic.com/yum/el5/latest.rpm
# CentOs 6.x:
[root@192 yum.repos.d]# rpm -Uvh http://mirror.webtatic.com/yum/el6/latest.rpm
# CentOs 7.X
[root@192 yum.repos.d]# rpm -Uvh https://mirror.webtatic.com/yum/el7/epel-release.rpm
[root@192 yum.repos.d]# rpm -Uvh https://mirror.webtatic.com/yum/el7/webtatic-release.rpm
如果想刪除上面安裝的包,重新安裝:
[root@192 yum.repos.d]# rpm -qa | grep webstatic
rpm -e 上面搜索到的包即可
- 運(yùn)行yum install
[root@192 yum.repos.d]# yum install php55w.x86_64 php55w-cli.x86_64 php55w-common.x86_64 php55w-gd.x86_64 php55w-ldap.x86_64 php55w-mbstring.x86_64 php55w-mcrypt.x86_64 php55w-mysql.x86_64 php55w-pdo.x86_64
[root@192 yum.repos.d]# yum install php56w.x86_64 php56w-cli.x86_64 php56w-common.x86_64 php56w-gd.x86_64 php56w-ldap.x86_64 php56w-mbstring.x86_64 php56w-mcrypt.x86_64 php56w-mysql.x86_64 php56w-pdo.x86_64
# 注:如果想升級到5.6把上面的55w換成56w就可以了。
[root@192 yum.repos.d]# yum install php70w.x86_64 php70w-cli.x86_64 php70w-common.x86_64 php70w-gd.x86_64 php70w-ldap.x86_64 php70w-mbstring.x86_64 php70w-mcrypt.x86_64 php70w-mysql.x86_64 php70w-pdo.x86_64
- 安裝PHP-FPM
[root@192 yum.repos.d]# yum install php55w-fpm
[root@192 yum.repos.d]# yum install php56w-fpm
[root@192 yum.repos.d]# yum install php70w-fpm
# 注:如果想升級到5.6把上面的55w換成56w就可以了。
- 啟動php-fpm:
[root@192 yum.repos.d]# systemctl start php-fpm
[root@192 yum.repos.d]# systemctl enable php-fpm
PHP配置文件php.ini路徑: /etc/php.ini
php-fpm配置文件php-fpm.conf路徑:/etc/php-fpm.conf
安裝PHP7
- 獲取yum源:
[root@192 yum.repos.d]# rpm -Uvh https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
[root@192 yum.repos.d]# rpm -Uvh https://mirror.webtatic.com/yum/el7/webtatic-release.rpm
- 執(zhí)行命令安裝php7:
[root@192 yum.repos.d]# yum install php70w.x86_64 php70w-cli.x86_64 php70w-common.x86_64 php70w-gd.x86_64 php70w-ldap.x86_64 php70w-mbstring.x86_64 php70w-mcrypt.x86_64 php70w-mysql.x86_64 php70w-pdo.x86_64
- 安裝php-fpm:
[root@192 yum.repos.d]# yum install php70w-fpm php70w-opcache
- 啟動php-fpm:
[root@192 yum.repos.d]# systemctl start php-fpm
防火墻
開啟80端口、3306端口。CentOS 7.0默認(rèn)使用的是firewall作為防火墻,這里改為iptables防火墻。
- 關(guān)閉firewall:
[root@192 yum.repos.d]# systemctl stop firewalld.service
# 停止firewall
[root@192 yum.repos.d]# systemctl disable firewalld.service
# 禁止firewall開機(jī)啟動
- 安裝iptables防火墻:
[root@192 yum.repos.d]# yum install iptables-services
# 安裝
[root@192 yum.repos.d]# vi /etc/sysconfig/iptables
# 編輯防火墻配置文件
# Firewall configuration written by system-config-firewall
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 3306 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT
:wq! #保存退出
[root@192 yum.repos.d]# systemctl restart iptables.service
# 最后重啟防火墻使配置生效
[root@192 yum.repos.d]# systemctl enable iptables.service
# 設(shè)置防火墻開機(jī)啟動
關(guān)閉selinux
# 使配置立即生效
[root@192 yum.repos.d]# setenforce 0
[root@192 yum.repos.d]# vi /etc/selinux/config
#SELINUX=enforcing #注釋掉
#SELINUXTYPE=targeted #注釋掉
SELINUX=disabled #增加
:wq! #保存退出
注意:
網(wǎng)絡(luò)配置注意要關(guān)閉:IP6,此可能引起不能連網(wǎng)
要關(guān)閉selinx(tp Runtime不能創(chuàng)建文件由此引起)