安装Nginx，这里我略过使用包管理器而使用编译的方式让Nginx运行起来：1、安装Zlib函数库 ####Gcc编译环境是必须条件##### [root@i-it ~]# yum install gcc-c++ make autoconf aotomake [root@i-it ~]# tar zxf zlib-1.2.8.tar.gz [root@i-it ~]# cd zlib-1.2.8 [root@i-it zlib-1.2.8]# ./configure --prefix=/software/zlib [root@i-it zlib-1.2.8]# make && make install
2、添加对rewrite的支持，编译参数中启用了对utf8字符的支持，以便nginx支持中文的正则表达式 [root@i-it ~]# tar zxf pcre-8.35.tar.gz [root@i-it ~]# cd pcre-8.35 [root@i-it pcre-8.35]# ./configure --prefix=/software/pcre --enable-utf8 --enable-unicode-properties [root@i-it pcre-8.35]# make && make install
3、添加对https 的支持 [root@i-it ~]# tar zxf openssl-1.0.1h.tar.gz [root@i-it ~]# cd openssl-1.0.1h [root@i-it openssl-1.0.1h]# ./config --prefix=/software/openssl [root@i-it openssl-1.0.1h]# make && make install
4、安装libunwind库 [root@i-it ~]# tar zxf libunwind-1.1.tar.gz [root@i-it ~]# cd libunwind-1.1 [root@i-it libunwind-1.1]# CFLAGS=-fPIC ./configure --prefix=/software/google-libunwind [root@i-it libunwind-1.1]# make CFLAGS=-fPIC && make CFLAGS=-fPIC install
5、安装google-perftools [root@i-it ~]# tar zxf gperftools-2.2.tar.gz [root@i-it ~]# cd gperftools-2.2 [root@i-it gperftools-2.2]# LDFLAGS="-L/software/google-libunwind/lib" CPPFLAGS="-I/software/google-libunwind/include" ./configure --prefix=/software/google-perftools [root@i-it gperftools-2.2]# make && make install
6、添加共享库路径 [root@i-it ~]# echo "/software/google-libunwind/lib/" >> /etc/ld.so.conf [root@i-it ~]# echo "/software/google-perftools/lib/" >> /etc/ld.so.conf [root@i-it ~]# echo "/software/zlib/lib/" >> /etc/ld.so.conf [root@i-it ~]# echo "/software/pcre/lib/" >> /etc/ld.so.conf [root@i-it ~]# ldconfig -v
7、编译Nginx [root@i-it ~]# groupadd -g 1500 nginx [root@i-it ~]# useradd -M -u 1500 -g nginx -s /sbin/nologin nginx [root@i-it ~]# mkdir /var/tmp/nginx [root@i-it ~]# chown nginx:nginx /var/tmp/nginx/ [root@i-it ~]# tar zxf nginx-1.7.1.tar.gz [root@i-it ~]# cd nginx-1.7.1 #############注释该文件的174行取消debug模式############## [root@i-it nginx-1.7.1]# vi auto/cc/gcc 173 # debug 174 # CFLAGS="$CFLAGS -g" ######因为google-perftools库的安装路径并非默认，所以这里又要修改一次源码#### [root@i-it nginx-1.7.1]# sed -i "s#/usr/local#/software/google-perftools#" auto/lib/google-perftools/conf [root@i-it nginx-1.7.1]# ./configure --prefix=/software/nginx --user=nginx --group=nginx --with-http_stub_status_module --with-http_ssl_module --with-http_realip_module --with-http_gzip_static_module --with-google_perftools_module --with-debug --http-client-body-temp-path=/var/tmp/nginx/client --http-proxy-temp-path=/var/tmp/nginx/proxy --http-fastcgi-temp-path=/var/tmp/nginx/fastcgi --http-uwsgi-temp-path=/var/tmp/nginx/uwsgi --http-scgi-temp-path=/var/tmp/nginx/scgi --with-pcre=/root/pcre-8.35 --with-openssl=/root/openssl-1.0.1h --with-zlib=/root/zlib-1.2.8 [root@i-it nginx-1.7.1]# make && make install
8、先添加一个启动脚本，让Nginx run起来 [root@i-it ~]# vi /etc/init.d/nginx #!/bin/bash # nginx Startup script for the Nginx HTTP Server # it is v.0.0.2 version. # chkconfig: - 85 15 # description: Nginx is a high-performance web and proxy server. # It has a lot of features, but it's not for everyone. # processname: nginx # pidfile: /software/nginx/logs/nginx.pid # config: /software/nginx/conf/nginx.conf nginxd=/software/nginx/sbin/nginx nginx_config=/software/nginx/conf/nginx.conf nginx_pid=/software/nginx/logs/nginx.pid RETVAL=0 prog="nginx" # Source function library. . /etc/rc.d/init.d/functions # Source networking configuration. . /etc/sysconfig/network # Check that networking is up. [ ${NETWORKING} = "no" ] && exit 0 [ -x $nginxd ] || exit 0 # Start nginx daemons functions. start() { if [ -e $nginx_pid ];then echo "nginx already running...." exit 1 fi echo -n $"Starting $prog: " daemon $nginxd -c ${nginx_config} RETVAL=$? echo [ $RETVAL = 0 ] && touch /var/lock/subsys/nginx return $RETVAL } # Stop nginx daemons functions. stop() { echo -n $"Stopping $prog: " killproc $nginxd RETVAL=$? echo [ $RETVAL = 0 ] && rm -f /var/lock/subsys/nginx /usr/local/nginx/logs/nginx.pid } reload() { echo -n $"Reloading $prog: " #kill -HUP `cat ${nginx_pid}` killproc $nginxd -HUP RETVAL=$? echo } # See how we were called. case "$1" in start) start ;; stop) stop ;; reload) reload ;; restart) stop start ;; status) status $prog RETVAL=$? ;; *) echo $"Usage: $prog {start|stop|restart|reload|status|help}" exit 1 esac exit $RETVAL #########赋权让其run起来######### [root@i-it ~]# chmod 755 /etc/init.d/nginx && chkconfig nginx on [root@i-it ~]# service nginx start Starting nginx: [ OK ] [root@i-it ~]# netstat -pant | grep 80 tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 37831/nginx
9、Nginx run起来了，配置前面的google-perftools库 #####创建线程目录##### [root@i-it ~]# mkdir /tmp/tcmalloc [root@i-it ~]# chmod 0777 /tmp/tcmalloc/ ####修改Nginx配置文件##### [root@i-it ~]# vi /software/nginx/conf/nginx.conf pid logs/nginx.pid; google_perftools_profiles /tmp/tcmalloc; ###查看google-perftools是否加载### [root@i-it ~]# service nginx restart Stopping nginx: [ OK ] Starting nginx: [ OK ] [root@i-it ~]# lsof -n | grep tcmalloc nginx 37882 nginx 9w REG 253,0 0 1179654 /tmp/tcmalloc.37882 nginx 37883 nginx 11w REG 253,0 0 1179655 /tmp/tcmalloc.37883 ####每一行输出的数据表示Nginx主配置文件中worker_processes的值，其每个线程文件后面的数值为Nginx启动的PID#### [root@i-it ~]# ps aux | grep nginx root 37880 0.0 0.2 30200 892 ? Ss 00:27 0:00 nginx: master process /software/nginx/sbin/nginx -c /software/nginx/conf/nginx.conf nginx 37882 0.0 1.1 34804 3844 ? S 00:27 0:00 nginx: worker process nginx 37883 0.0 1.1 34804 3772 ? S 00:27 0:00 nginx: worker process ####iptables 开80端口#### [root@i-it ~]# iptables -I INPUT -p tcp --dport 80 -j ACCEPT 1、关闭系统中不需要的服务 ###minimal 本来就是最小安装，这里我也就不提建议了，跟着自己的环境来### [root@i-it ~]# chkconfig --list auditd 0:off 1:off 2:on 3:on 4:on 5:on 6:off blk-availability 0:off 1:on 2:on 3:on 4:on 5:on 6:off crond 0:off 1:off 2:on 3:on 4:on 5:on 6:off ip6tables 0:off 1:off 2:on 3:on 4:on 5:on 6:off iptables 0:off 1:off 2:on 3:on 4:on 5:on 6:off iscsi 0:off 1:off 2:off 3:on 4:on 5:on 6:off iscsid 0:off 1:off 2:off 3:on 4:on 5:on 6:off lvm2-monitor 0:off 1:on 2:on 3:on 4:on 5:on 6:off mdmonitor 0:off 1:off 2:on 3:on 4:on 5:on 6:off multipathd 0:off 1:off 2:off 3:off 4:off 5:off 6:off netconsole 0:off 1:off 2:off 3:off 4:off 5:off 6:off netfs 0:off 1:off 2:off 3:on 4:on 5:on 6:off network 0:off 1:off 2:on 3:on 4:on 5:on 6:off nginx 0:off 1:off 2:on 3:on 4:on 5:on 6:off postfix 0:off 1:off 2:on 3:on 4:on 5:on 6:off rdisc 0:off 1:off 2:off 3:off 4:off 5:off 6:off restorecond 0:off 1:off 2:off 3:off 4:off 5:off 6:off rsyslog 0:off 1:off 2:on 3:on 4:on 5:on 6:off saslauthd 0:off 1:off 2:off 3:off 4:off 5:off 6:off sshd 0:off 1:off 2:on 3:on 4:on 5:on 6:off udev-post 0:off 1:on 2:on 3:on 4:on 5:on 6:off
###建议先备份一下### [root@i-it ~]# ll /software/nginx/sbin/nginx -h -rwxr-xr-x. 1 root root 2.9M Jun 8 00:02 /software/nginx/sbin/nginx [root@i-it ~]# strip /software/nginx/sbin/nginx [root@i-it ~]# ll /software/nginx/sbin/nginx -h -rwxr-xr-x. 1 root root 2.6M Jun 8 01:54 /software/nginx/sbin/nginx
####重新挂载当前分区，不记录Nginx对文件访问的时间修改#### mount -o defaults,noatime,nodiratime -o remount /dev/sda1
####修改配置文件#### [root@i-it ~]# egrep -v "^#|^$" /etc/security/limits.conf * - nofile 65535 * - nproc 65535 [root@i-it ~]# su - [root@i-it ~]# ulimit -u 65535 [root@i-it ~]# ulimit -n 65535
[root@i-it ~]# cat >/etc/sysctl.conf< |