所需软件包:
gd-2.0.35.tar.gz
libxml2-2.7.7.tar.gz
libmcrypt-2.5.8.tar.bz2
cronolog-1.6.2.tar.gz
httpd-2.2.8.tar.gz
mysql-5.1.44.tar.gz
php-5.2.14.tar.gz
xcache-1.3.0.tar.gz
ZendOptimizer-3.3.9-linux-glibc23-i386.tar.gz
修改系统参数,编写脚本执行init.sh
cd /opt
vi init.sh
将下列内容拷贝至init.sh脚本中
#welcome
cat << EOF
+--------------------------------------------------------------+
| === Welcome to Centos System init === |
+--------------http://www.linuxtone.org------------------------+
+----------------------Author:NetSeek--------------------------+
EOF
#disable ipv6
cat << EOF
+--------------------------------------------------------------+
| === Welcome to Disable IPV6 === |
+--------------------------------------------------------------+
EOF
echo "alias net-pf-10 off" >> /etc/modprobe.conf
echo "alias ipv6 off" >> /etc/modprobe.conf
/sbin/chkconfig --level 35 ip6tables off
echo "ipv6 is disabled!"
#disable selinux
sed -i '/SELINUX/s/enforcing/disabled/' /etc/selinux/config
echo "selinux is disabled,you must reboot!"
#vim
sed -i "8 s/^/alias vi='vim'/" /root/.bashrc
echo 'syntax on' > /root/.vimrc
#zh_cn
sed -i -e 's/^LANG=.*/LANG="zh_CN.GB18030"/' /etc/sysconfig/i18n
#tunoff services
#--------------------------------------------------------------------------------
cat << EOF
+--------------------------------------------------------------+
| === Welcome to Tunoff services === |
+--------------------------------------------------------------+
EOF
#---------------------------------------------------------------------------------
for i in `ls /etc/rc3.d/S*`
do
CURSRV=`echo $i|cut -c 15-`
echo $CURSRV
case $CURSRV in
crond | irqbalance | microcode_ctl | network | random | sendmail | sshd | syslog | local | mysqld )
echo "Base services, Skip!"
;;
*)
echo "change $CURSRV to off"
chkconfig --level 235 $CURSRV off
service $CURSRV stop
;;
esac
done
执行脚本:
sh init.sh
重启系统
reboot
二、编译安装基本环境
使用 yum 程序安装所需开发包(以下为标准的 RPM 包名称)
rpm --import http://mirror.centos.org/centos/RPM-GPG-KEY-CentOS-5
yum -y install ntp vim-enhanced gcc gcc-c++ gcc-g77 flex bison autoconf automake bzip2-devel ncurses-devel zlib-devel libjpeg-devel libpng-devel libtiff-devel freetype-devel libXpm-devel gettext-devel pam-devel libtool libtool-ltdl openssl openssl-devel fontconfig-devel
解释如下:
安装基本的编译工具 # yum install -y gcc gcc-c++ flex bison autoconf automake libtool bzip2-devel zlib-devel ncurses-devel pam-devel
安装编译 GD 需要的库# yum install -y xorg-x11-server-Xorg fontconfig-devel libXpm-devel libjpeg-devel libpng-devel libtiff-devel freetype-devel
安装mysql需要的库# yum install -y libxml2-devel curl-devel
编译安装软件包
1)GD2
tar -zxvf gd-2.0.35.tar.gz
cd gd-2.0.35
./configure --prefix=/usr/local/gd2
make && make install
2) LibXML2
tar -zxvf libxml2-2.7.7.tar.gz
cd libxml2-2.7.7
./configure --prefix=/usr/local/libxml2
make && make install
3) LibMcrypt
tar xvf libmcrypt-2.5.8.tar.bz2
cd libmcrypt-2.5.8
./configure --prefix=/usr/local/libmcrypt
make && make install
4) Apache日志截断程序
tar zxvf cronolog-1.6.2.tar.gz
cd cronolog-1.6.2
./configure --prefix=/usr/local/cronolog
make && make install
5)安装mysql
tar -zxvf mysql-5.1.44.tar.gz
cd mysql-5.1.44
./configure --prefix=/usr/local/mysql --enable-assembler --with-extra-charsets=complex --enable-thread-safe-client --with-big-tables --with-readline --with-ssl --with-embedded-server --enable-local-infile
make && make install
创建MySQL数据库,用默认的配置my.cnf
groupadd mysql
useradd -g mysql mysql
cp /usr/local/mysql/share/mysql/my-medium.cnf /etc/my.cnf
/usr/local/mysql/bin/mysql_install_db --user=mysql
chown -R mysql /usr/local/mysql/var
chgrp -R mysql /usr/local/mysql/.
添加Mysql启动服务,并且设置root密码
cp /usr/local/mysql/share/mysql/mysql.server /etc/init.d/mysql
chmod 755 /etc/init.d/mysql
chkconfig --level 345 mysql on
echo "/usr/local/mysql/lib/mysql" >> /etc/ld.so.conf
echo "/usr/local/lib" >>/etc/ld.so.conf
ldconfig
ln -s /usr/local/mysql/lib/mysql /usr/lib/mysql
ln -s /usr/local/mysql/include/mysql /usr/include/mysql
service mysql start
/usr/local/mysql/bin/mysqladmin -u root password root //root改为你需要的密码
service mysql restart
6)安装apache
groupadd httpd
useradd -g httpd -s /sbin/nologin -M httpd
tar -zxvf httpd-2.2.8.tar.gz
cd httpd-2.2.8
./configure --prefix=/usr/local/apache2 --with-included-apr --enable-so --enable-deflate=shared --enable-expires=shared --enable-rewrite=shared --enable-static-support --disable-userdir --enable-dav --enable-maintainer-mode
红色字体为部署SVN服务器所用,否则编译svn的时候会报错
make
make install
7)安装php
tar -zxvf php-5.2.14.tar.gz
cd php-5.2.14
mkdir -p /usr/local/php/etc
./configure --prefix=/usr/local/php --with-apxs2=/usr/local/apache2/bin/apxs --with-config-file-path=/usr/local/php/etc --with-mysql=/usr/local/mysql --with-libxml-dir=/usr/local/libxml2 --with-gd=/usr/local/gd2 --with-jpeg-dir --with-png-dir --with-bz2 --with-freetype-dir --with-iconv-dir --with-zlib-dir --with-openssll --with-mcrypt=/usr/local/libmcrypt --enable-soap --enable-gd-native-ttf --enable-ftp --enable-mbstring --enable-exif --disable-ipv6 --disable-cgi --disable-cli
make
make install
cp php.ini-dist /usr/local/php/etc/php.ini
7)安装Xcache
tar -zxvf xcache-1.3.0.tar.gz
cd xcache-1.3.0
/usr/local/php/bin/phpize ./configure --enable-xcache --enable-xcache-coverager --with-php-config=/usr/local/php/bin/php-config --enable-inline-optimization --disable-debug
vi /usr/local/php/etc/php.ini
在最后添加以下内容
[xcache-common]
zend_extension = /usr/local/php/lib/php/extensions/no-debug-non-zts-20060613/xcache.so
[xcache.admin]
xcache.admin.user = "admin"
;create md5 password: echo -n "password"| md5sum
xcache.admin.pass = "f3dfd37a03b1356d6380b41e524f903b" #password is hx10.com
[xcache]
; Change xcache.size to tune the size of the opcode cache
xcache.size = 24M
xcache.shm_scheme = "mmap"
xcache.count = 4
xcache.slots = 8K
xcache.ttl = 0
xcache.gc_interval = 0
; Change xcache.var_size to adjust the size of variable cache
xcache.var_size = 8M
xcache.var_count = 1
xcache.var_slots = 8K
xcache.var_ttl = 0
xcache.var_maxttl = 0
xcache.var_gc_interval = 300
xcache.test = Off
xcache.readonly_protection = On
xcache.mmap_path = "/tmp/xcache"
xcache.coredump_directory = ""
xcache.cacher = On
xcache.stat = On
xcache.optimizer = Off
[xcache.coverager]
xcache.coverager = On
xcache.coveragedump_directory = ""
8)安装Zend Optimizer 系统如果是64位的,请安装64位的ZendOptimizer-3.3.9-linux-glibc23文件;
tar -zxvf ZendOptimizer-3.3.9-linux-glibc23-i386.tar.gz
mv ZendOptimizer-3.3.9-linux-glibc23-i386 /usr/local/Zend
cp /usr/local/Zend/data/5_2_x_comp/ZendOptimizer.so /usr/local/Zend/
vi /usr/local/php/etc/php.ini
最后一行加入以下内容
zend_optimizer.optimization_level=15
zend_extension=/usr/local/Zend/ZendOptimizer.so
9)整合Apache与PHP及系统初化配置
vi /usr/local/apache2/conf/httpd.conf
查找AddType application/x-gzip .gz .tgz,在该行下面添加
AddType application/x-httpd-php .php
查找DirectoryIndex index.html 把该行修改成
DirectoryIndex index.html index.htm index.php
找到
#Include conf/extra/httpd-mpm.conf
#Include conf/extra/httpd-info.conf
#Include conf/extra/httpd-vhosts.conf
#Include conf/extra/httpd-default.conf
去掉这4行前面的#
注意:以上 4 个扩展配置文件中的设置请按照相关原则进行合理配置!
vi /usr/local/apache2/conf/extra/httpd-vhosts.conf
<VirtualHost *:80>
ServerAdmin [email protected]
DocumentRoot "/www/wwwroot/"
ServerName www.test.com
ServerAlias www.test.com
ErrorLog "logs/www.test.com-error_log"
CustomLog "logs/www.test.com-access_log" common
</VirtualHost>
新建一个虚拟主机,删除原有的虚拟主机配置;
mkdir -p /www/wwwroot/
然后PHP探针放到这个目录
vi /usr/local/apache2/conf/httpd.conf
找到
<Directory />
Options FollowSymLinks
AllowOverride None
Order deny,allow
Deny from all //把这里的Deny改成Allow
</Directory>
找到
#ServerName www.example.com:80 在这一行后面加入下一行
ServerName 127.0.0.1:80
找到
User httpd
Group httpd
把原来的daemon修改成httpd
Apache 运行账户 httpd:httpd
chown -R httpd:httpd /www/wwwroot
重启apache
# /usr/local/apache2/bin/apachectl restart
输入探针的地址访问
http://ip/php.php
安装apache服务
cd httpd-2.2.8
cp support/apachectl /etc/init.d/httpd
vi /etc/init.d/httpd
加入以下的代码,使apache可以用chkconfig方式启动(保留#):
# Startup script for the Apache Web Server
# chkconfig: 2345 10 90
# description: Apache is a World Wide Web server.
# processname: httpd
# pidfile: /usr/local/apache2/log/httpd.pid
# config: /usr/local/apache2/conf/httpd.conf
安装服务并开机启动
chmod 755 /etc/init.d/httpd
chkconfig --add httpd
chkconfig --level 345 httpd on
service httpd start
10)安全和性能优化
vi /usr/local/php/etc/php.ini
查找disable_functions =
等号后面加入以下参数,注意不能换行
phpinfo,passthru,exec,system,chroot,scandir,chgrp,chown,shell_exec,proc_open,proc_get_status,ini_alter,ini_alter,ini_restore,dl,pfsockopen,openlog,syslog,readlink,symlink,popepassthru,stream_socket_server,get_cfg_var
查找以下2项,把on改成off
expose_php = Off
display_errors = Off
vi /usr/local/apache2/conf/extra/httpd-default.conf 修改后的内容如下
Timeout 15
KeepAlive Off
MaxKeepAliveRequests 50
KeepAliveTimeout 5
UseCanonicalName Off
AccessFileName .htaccess
ServerTokens Prod
ServerSignature Off
HostnameLookups Off
vi /usr/local/apache2/conf/extra/httpd-mpm.conf 修改一个模块后的内容如下
原来的配置如下:
<IfModule mpm_prefork_module>
ServerLimit 256
StartServers 5
MinSpareServers 5
MaxSpareServers 10
MaxClients 256
MaxRequestsPerChild 0
</IfModule>
修改后配置如下
<IfModule mpm_prefork_module>
ServerLimit 2000
StartServers 2000
MinSpareServers 10
MaxSpareServers 10
MaxClients 2000
MaxRequestsPerChild 10000
</IfModule>
查看是什么模式
/usr/local/apache2/bin/apachectl -l
如果出现prefork.c那就说明是prefork模式