【nginx】How to compile and install nginx1.15.3 on CentOS7

一、实验环境

操作系统： CentOS7.2 Minimal

IP： 192.168.1.105

nginx版本： 1.15.3

二、安装编译环境

nginx源码都是用C/C++写的，所以需要在编译用的CentOS 7服务器上安装gcc和gcc-c++等相关软件包。

# yum -y install vim epel-release wget

安装编译工具

# yum -y install  gcc  gcc-c++  autoconf automake make

安装依赖库

#  yum -y install openssl openssl-devel libxml2-devel libxslt-devel perl-devel perl-ExtUtils-Embed libtool zlib zlib-devel pcre pcre-devel patch

三、创建用户及用户组

# groupadd -r nginx 

# useradd  -r  -g  nginx  -s/sbin/nologin  -d  /usr/local/nginx  -M  nginx

四、创建相关目录

1.创建编译后的nginx存放目录

# mkdir -pv /usr/local/nginx

2. 创建缓存目录

# mkdir -pv /usr/local/nginx/tmp/{client_body,proxy,fastcgi,uwsgi,scgi}

3. 创建logs、etc 目录

# mkdir  -pv  /usr/local/nginx/{logs,etc}

五、软件下载及解压

# wget http://nginx.org/download/nginx-1.15.3.tar.gz

# tar -zxvf nginx-1.15.3.tar.gz

nginx第三方模块：nginx-sticky-module，基于cookie的会话保持

# wget  https://bitbucket.org/nginx-goodies/nginx-sticky-module-ng/get/master.tar.gz

# tar -zxvf /master.tar.gz 

# mv nginx-goodies-nginx-sticky-module-ng-08a395c66e42/   nginx-sticky-module/

六、编译

# cd  nginx-1.15.3 

############################################

# ./configure \

--prefix=/usr/local/nginx \

--user=nginx \

--group=nginx \

--sbin-path=/usr/local/nginx/sbin/nginx \

--conf-path=/usr/local/nginx/etc/nginx.conf \

--error-log-path=/usr/local/nginx/logs/error.log \

--http-log-path=/usr/local/nginx/logs/access.log \

--pid-path=/var/run/nginx.pid  \

--lock-path=/usr/local/nginx/nginx.lock \

--http-client-body-temp-path=/usr/local/nginx/tmp/client_body \

--http-proxy-temp-path=/usr/local/nginx/tmp/proxy \

--http-fastcgi-temp-path=/usr/local/nginx/tmp/fastcgi \

--http-uwsgi-temp-path=/usr/local/nginx/tmp/uwsgi \

--http-scgi-temp-path=/usr/local/nginx/tmp/scgi \

--with-http_ssl_module \

--with-http_v2_module \

--with-http_dav_module \

--with-http_flv_module \

--with-http_realip_module \

--with-http_addition_module \

--with-http_xslt_module \

--with-http_stub_status_module \

--with-http_sub_module \

--with-http_random_index_module \

--with-http_degradation_module \

--with-http_secure_link_module \

--with-http_gzip_static_module \

--with-http_perl_module \

--add-module=/root/nginx-sticky-module \

--with-debug \

--with-file-aio \

--with-mail \

--with-mail_ssl_module \

--with-stream \

--with-ld-opt="-Wl,-E"

#########################################

编译选项说明

# make && make install

# ll  -R  /usr/local/nginx 

查看nginx版本和编译参数

# /usr/local/nginx/sbin/nginx -V 2>&1 | sed 's/ --/\n--/g' | egrep --color '.*path.*|$'

七、编写启动脚本或者unit文件，二选一

启动脚本

# vim  /etc/init.d/nginx

####################################################

#! /bin/bash

#

# nginx - this script starts and stops the nginx daemon

#

# chkconfig:  - 85 15

# description:  The nginx HTTP and reverse proxy server

#             

#

# processname: nginx

# config:      /etc/nginx/nginx.conf

# pidfile:    /var/run/nginx.pid

# Source function library.

. /etc/rc.d/init.d/functions

# Source networking configuration.

. /etc/sysconfig/network

# Check that networking is up.

[ "$NETWORKING" = "no" ] && exit 0

nginx="/usr/local/nginx/sbin/nginx"

prog=$(basename $nginx)

NGINX_CONF_FILE="/usr/local/nginx/etc/nginx.conf"

[ -f /etc/sysconfig/nginx ] && . /etc/sysconfig/nginx

lockfile="/var/lock/subsys/nginx.lock"

start() {

    [ -x $nginx ] || exit 5

    [ -f $NGINX_CONF_FILE ] || exit 6

    echo -n "Starting $prog: "

    daemon $nginx -c $NGINX_CONF_FILE

    retval=$?

    echo

    [ $retval -eq 0 ] && touch $lockfile

    return $retval

}

stop() {

    echo -n "Stopping $prog: "

    killproc $prog -QUIT

    retval=$?

    echo

    [ $retval -eq 0 ] && rm -f $lockfile

    return $retval

}

restart() {

    configtest || return $?

    stop

    sleep 1

    start

}

reload() {

    configtest || return $?

    echo -n "Reloading $prog: "

    killproc $nginx -HUP

    RETVAL=$?

    echo

}

force_reload() {

    restart

}

configtest() {

  $nginx -t -c $NGINX_CONF_FILE

}

rh_status() {

    status $prog

}

rh_status_q() {

    rh_status >/dev/null 2>&1

}

case "$1" in

    start)

        rh_status_q && exit 0

        $1

        ;;

    stop)

        rh_status_q || exit 0

        $1

        ;;

    restart|configtest)

        $1

        ;;

    reload)

        rh_status_q || exit 7

        $1

        ;;

    force-reload)

        force_reload

        ;;

    status)

        rh_status

        ;;

    condrestart|try-restart)

        rh_status_q || exit 0

            ;;

    *)

        echo $"Usage: $0 {start|stop|status|restart|condrestart|try-restart|reload|force-reload|configtest}"

        exit 2

        ;;

esac

#####################################################

unit文件

# vim /etc/systemd/system/nginx.service

##############################################

[Unit]

Description=The nginx HTTP and reverse proxy server

After=network.target remote-fs.target nss-lookup.target

[Service]

Type=forking

PIDFile=/run/nginx.pid

# Nginx will fail to start if /run/nginx.pid already exists but has the wrong

# SELinux context. This might happen when running `nginx -t` from the cmdline.

# https://bugzilla.redhat.com/show_bug.cgi?id=1268621

ExecStartPre=/usr/bin/rm -f /run/nginx.pid

ExecStartPre=/usr/local/nginx/sbin/nginx -t

ExecStart=/usr/local/nginx/sbin/nginx

ExecReload=/bin/kill -s HUP $MAINPID

KillSignal=SIGQUIT

TimeoutStopSec=5

KillMode=process

PrivateTmp=true

[Install]

WantedBy=multi-user.target

##############################################

注:   /var/run/ --------> /run/

八、启动nginx 服务

关闭selinux

# setenforce 0

# sed  -i  's/^SELINUX=.*/SELINUX=permissive/g'  /etc/selinux/config

如果选用启动脚本

#  chmod +x /etc/init.d/nginx 

# chkconfig --add nginx

# chkconfig nginx on

# service nginx start 

# service nginx status 

如果选用unit文件

# systemctl daemon-reload

# systemctl enable nginx 

# systemctl start nginx

# systemctl status nginx

九、用非root用户启动nginx的问题

用编译好的rpm包安装的nginx，master进程的运行用户是root，无法更改，worker进程的运行用户默认是nginx（可以更改），可以监听1024以下端口。

如果需要以sysV init 或者systemd启动nginx，那么编译nginx时，pid文件路径有要求  --pid-path=/var/run/nginx.pid ，或者更改配置文件中的pid文件生成的默认路径，否则用启动脚本或者unit文件启动服务失败！

 # vim /usr/local/nginx/etc/nginx.conf

# systemctl restart  nginx 

# systemctl status nginx 

如果因为安全加固原因，nginx服务的所有进程需要以非root用户运行，那么必须使用编译的nginx

例如以nginx用户，那么需要注意：

1  创建的nginx用户需要能被切换过去，也就是 shell不能为 /sbin/nologin,否则无法执行 su - nginx  -c  "/usr/local/nginx/sbin.nginx"

# groupadd nginx

# useradd nginx  -d /home/nginx 

2 相应的文件目录属主属组更改为nginx用户 ， 需 chown -R  nginx:nginx  /usr/local/nginx

3. nginx配置文件中，监听端口需大于1024，否则会报权限拒绝

4 编译nginx时，pid文件路径能自定义 ,一般无需编译时指定，默认为logs/nginx.pid

# vim /usr/local/nginx/etc/nginx.conf

# su - nginx -c "/usr/local/nginx/sbin/nginx -c /usr/local/nginx/etc/nginx.conf"

# ps aux | grep nginx

# ss -tan 

十、参考

CentOS 7.5 编译安装 Nginx 1.15.3

https://segmentfault.com/a/1190000016498647

nginx最新稳定版的rpm安装

https://www.jianshu.com/p/c2f579c44055?tdsourcetag=s_pcqq_aiomsg

nginx会话保持之nginx-sticky-module模块

https://www.jianshu.com/p/6d973db47ee4

nginx 编译参数详解

http://www.ttlsa.com/nginx/nginx-configure-descriptions

nginx作为web服务以及nginx.conf详解

http://www.cnblogs.com/f-ck-need-u/p/7576137.html#nginx

How to Install Nginx on CentOS 7 / RHEL 7

https://webhostinggeeks.com/howto/how-to-install-nginx-on-centos-7-rhel-7