[toc]

基礎(chǔ)環(huán)境

添加一個(gè)非root管理員

useradd -m jin
passwd jin
# 添加sudo權(quán)限
?chmod u+w /etc/sudoers
vim /etc/sudoers
chmod u-w /etc/sudoers

允許ssh登陸

vim /etc/ssh/sshd_config
PasswordAuthentication yes # 默認(rèn)
AllowUsers jin
sudo /sbin/service sshd restart

python環(huán)境的安裝

安裝pyenv
1）安裝環(huán)境

sudo yum install update
sudo  yum install zlib-devel bzip2 bzip2-devel readline-devel sqlite sqlite-devel openssl-devel

2）安裝pyenv

# 安裝git
sudo yum install git
sudo curl -L https://raw.githubusercontent.com/yyuu/pyenv-installer/master/bin/pyenv-installer | bash

3）添加pyenv到環(huán)境變量
~ 目錄下面的 .bashrc

export PATH="/home/jin/.pyenv/bin:$PATH"eval "$(pyenv init -)"eval "$(pyenv virtualenv-init -)"

4）重新加載shell配置
~ 目錄下面的 .bashrc

source  .bashrc

5）python 版本的替換和虛擬環(huán)境的安裝
先安裝 yum install gcc,
把下載的文件放入 .pyenv/cache/

sudo yum install gcc
pyenv  install --list
pyenv install 2.7.12
pyenv global 2.7.12
pyenv vietualenv 2.7.12 blog_env
pyenv versions
pyenv activate blog_env
pyenv deactivate

安裝 配置git

sudo yum install git
ssh-keygen -t rsa -C "jinzhang_hotline@163.com"
#/home/jin/.ssh/id_rsa 生成的位置

安裝MySQL-python ,PILLOW

###MySQL-python
yum install MariaDB-develpip install MySQL-python
### PILLOW
sudo yum install python-devel
sudo yum install zlib-devel
sudo yum install libjpeg-turbo-devel
pip install pillow

安裝 mysql

https://downloads.mariadb.org/mariadb/repositories/#mirror=neusoft&distro=CentOS&distro_release=centos7-amd64--centos7&version=10.1
將下列代碼加入
/etc/yum.repos.d/MariaDB.repo

# MariaDB 10.1 CentOS repository list - created 2016-10-25 07:54 UTC
# http://downloads.mariadb.org/mariadb/repositories/
[mariadb]
name = MariaDB
baseurl = http://yum.mariadb.org/10.1/centos7-amd64
gpgkey=https://yum.mariadb.org/RPM-GPG-KEY-MariaDB
gpgcheck=1

#安裝
sudo yum install MariaDB-server MariaDB-client
sudo systemctl start mysqld.service
# 進(jìn)入數(shù)據(jù)庫
mysql -u root
use mysql;
update user set password=PASSWORD("root") where User='root';
flush privileges;
# 重啟數(shù)據(jù)庫
service mysql restart

#建立數(shù)據(jù)庫
create database if not exists sell default charset utf8 collate utf8_general_ci;

開發(fā)模式跑起來

# 同步數(shù)據(jù)庫
python manage.py migrate
# 收集靜態(tài)文件
python manage.py collectstatic

安裝ftp服務(wù)

# 停用防火墻
systemctl stop firewalld.service 
systemctl disable firewalld.service 
# 啟用iptables
systemctl start iptables.service
systemctl enable iptables.service
# 安裝vsftpd
sudo yum install vsftpd
systemctl start vsftpd.service
systemctl enable vsftpd.service

• 1 安裝

sudo yum install vsftpd

• 2 配置

sudo vim /etc/vsftpd/vsftpd.conf
anonymous_enable=NO
local_enable=YES
write_enable=YES
chroot_local_user=YES
chroot_list_enable=YES
# 安裝完成vsftpd后就有有個(gè)ftp用戶
sudo passwd ftp
# selinux臨時(shí)設(shè)置
setenforce 0
# selinux永久設(shè)置
semanage fcontext -a -t public_content_t /var/ftp
restorecon -R -v /var/ftp/
ls -dZ /var/ftp/ # 查看是否有public_content_t
semanage fcontext -a -t public_content_rw_t "/var/ftp/pub(/.*)?"
restorecon -R -v /var/ftp/pub
setsebool -P allow_ftpd_anon_write on
getsebool -a|grep ftp #查看

安裝配置 gunicorn

在項(xiàng)目根目錄下新建gunicorn.conf.py

vim gunicorn.conf.py
import multiprocessing
bind = "127.0.0.1:8000"
workers = 2
errorlog = "/home/jin/sell/gunicorn.error.log"
#accsessing = "./gunicorn.access.log"
#loglevel = "debug"
proc_name = "gunicorn_sell"

安裝配置 nginx

• 添加源
  新建/etc/yum.repos.d/nginx.repo

# Replace “OS” with “rhel” or “centos”, depending on the distribution used, and “OSRELEASE” with “5”, “6”, or “7”, for 5.x, 6.x, or 7.x versions, respectively
[nginx]
name=nginx repo
baseurl=http://nginx.org/packages/rhel/7/$basearch/
gpgcheck=0
enabled=1

sudo yum install nginx

• 添加權(quán)限

/etc/nginx/ngnix.conf
修改 user www; 為 user jin;

• 在項(xiàng)目根目錄下新建nginx.conf

vim nginx.conf
server {
     listen 80;
     server_name 101.201.238.27;
     access_log /home/jin/sell/nginx.access.log;
     error_log /home/jin/sell/nginx.error.log;
      location / {
         proxy_pass http://127.0.0.1:8000;
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
     }
      #location /robots.txt {
     #alias /home/jin/sell/static/robots.txt;
     #}
      #location /favicon.ico {
     # alias /home/jin/sell/static/img/favicon.ico;
     #}
      location  /static  {
         alias    /home/jin/sell/site_static;
         expires 30d;
     }
       # this prevents hidden files (beginning with a period) from being served
      location ~ /\. {
        access_log off; log_not_found off; deny all;
     }
 }

將其鏈接到 /etc/nginx/conf.d/blog_project.conf

sudo ln -s /home/jin/sell/nginx.conf /etc/nginx/conf.d/sell_nignx.conf

django配置

django setting
ALLOWED_HOSTS = ['localhost','101.201.238.27']

配置wsgi 在django的目錄下修改

import sys
import site
import os

# site-packages
site.addsitedir('~/.pyenv/versions/healthydoc_env/lib/python2.7/site-packages')  # changed to your env
PROJECT_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
sys.path.insert(0, PROJECT_DIR)

# activate env
activate_env = os.path.expanduser("~/.pyenv/versions/healthydoc_env/bin/activate_this.py")  # changed to your env
execfile(activate_env, dict(__file__=activate_env))

from django.core.wsgi import get_wsgi_application
os.environ.setdefault("DJANGO_SETTINGS_MODULE", "healthy_doc.settings")  # changed to your settings
application = get_wsgi_application()

### 如果要外部訪問，則打開80端口：

可以選擇臨時(shí)關(guān)閉防火墻
sudo service iptables stop
# 查看開放端口
# iptables -L -n --line-numbe  或者開放一些需要的端口，比如 80
sudo iptables -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
  sudo /sbin/iptables -I INPUT -p tcp --dport 80 -j ACCEPT
# sudo service iptatbles save

在/home/jin/sell 運(yùn)行一下gunicorn: 用django的wsgi

sudo nohup gunicorn sell.wsgi:application -c /home/jin/sell/gunicorn.conf.py&

supervisor

supervisor就是用Python開發(fā)的一套通用的進(jìn)程管理程序，能將一個(gè)普通的命令行進(jìn)程變?yōu)楹笈_(tái)daemon，并監(jiān)控進(jìn)程狀態(tài)，異常退出時(shí)能自動(dòng)重啟。

• 安裝

sudo yum install supervisor
# ubuntu
sudo apt-get install supervisor

• 配置
  然后，給我們自己開發(fā)的應(yīng)用程序編寫一個(gè)配置文件，讓supervisor來管理它。每個(gè)進(jìn)程的配置文件都可以單獨(dú)分拆，放在/etc/supervisor/conf.d/目錄下，以.conf作為擴(kuò)展名，例如，app.conf定義了一個(gè)gunicorn的進(jìn)程

[program:app]
command=/usr/bin/gunicorn -w 1 wsgiapp:application
directory=/srv/www
user=www-data

其中，進(jìn)程app定義在[program:app]中，command是命令，directory是進(jìn)程的當(dāng)前目錄，user是進(jìn)程運(yùn)行的用戶身份。

• 啟用
  sudo systemctl restart supervisord

重啟supervisor，讓配置文件生效，然后運(yùn)行命令supervisorctl啟動(dòng)進(jìn)程

 supervisorctl start app
 supervisorctl stop app

• 在命令使用變量
  如果要在命令行中使用變量，就需要自己先編寫一個(gè)shell腳本

#!/bin/sh
/usr/bin/gunicorn -w `grep -c ^processor /proc/cpuinfo` wsgiapp:application

然后，加上x權(quán)限，再把command指向該shell腳本即可。

參考

http://www.itdecent.cn/p/288ebe5396a0