[root@nginx ~]# vi /usr/local/nginx/conf/fastcgi_params

fastcgi_param QUERY_STRING $query_string;

fastcgi_param REQUEST_METHOD $request_method;

fastcgi_param CONTENT_TYPE $content_type;

fastcgi_param CONTENT_LENGTH $content_length;

fastcgi_param SCRIPT_NAME $fastcgi_script_name;

fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; #添加这

行代码

fastcgi_param REQUEST_URI $request_uri;

fastcgi_param DOCUMENT_URI $document_uri;

fastcgi_param DOCUMENT_ROOT $document_root;

fastcgi_param SERVER_PROTOCOL $server_protocol;

fastcgi_param REQUEST_SCHEME $scheme;

fastcgi_param HTTPS $https if_not_empty;

fastcgi_param GATEWAY_INTERFACE CGI/1.1;

21fastcgi_param SERVER_SOFTWARE nginx/$nginx_version;

fastcgi_param REMOTE_ADDR $remote_addr;

fastcgi_param REMOTE_PORT $remote_port;

fastcgi_param SERVER_ADDR $server_addr;

fastcgi_param SERVER_PORT $server_port;

fastcgi_param SERVER_NAME $server_name;

# PHP only, required if PHP was built with --enable-force-cgi-redirect

fastcgi_param REDIRECT_STATUS 200;

nginx 节点：

[root@nginx ~]# mkdir /www

[root@nginx ~]# chown nginx:nginx /www/

php 节点：

[root@php ~]# mkdir /www

[root@php ~]# chown nginx:nginx /www/

nginx 节点：

[root@nginx ~]# unzip wordpress-4.7.3-zh_CN.zip

[root@nginx ~]# mv wordpress/* /www/

php 节点：

[root@php ~]# unzip wordpress-4.7.3-zh_CN.zip

[root@php ~]# mv wordpress/* /www/

[root@nginx ~]# vi /www/wp-config.php

…省略…

// ** MySQL 设置 - 具体信息来自您正在使用的主机 ** //

/** WordPress 数据库的名称 */

define('DB_NAME', 'wordpress');

/** MySQL 数据库用户名 */

define('DB_USER', 'root');

/** MySQL 数据库密码 */

define('DB_PASSWORD', '000000');

/** MySQL 主机 */

define('DB_HOST', '192.168.200.30');

/** 创建数据表时默认的文字编码 */

define('DB_CHARSET', 'utf8');

/** 数据库整理类型。命令如下：

MariaDB [(none)]> start slave;

MariaDB [(none)]> show slave status\G

*** 1. row

***

Slave_IO_State: Waiting for master to send event

Master_Host: mysql1

Master_User: user

Master_Port: 3306

Connect_Retry: 60

Master_Log_File: mysql-bin.000003

Read_Master_Log_Pos: 245

Relay_Log_File: mariadb-relay-bin.000005

Relay_Log_Pos: 529

Relay_Master_Log_File: mysql-bin.000003

Slave_IO_Running: Yes

8Slave_SQL_Running: Yes

Replicate_Do_DB:

Replicate_Ignore_DB:

Replicate_Do_Table:

Replicate_Ignore_Table:

Replicate_Wild_Do_Table:

Replicate_Wild_Ignore_Table:

Last_Errno: 0

Last_Error:

Skip_Counter: 0

Exec_Master_Log_Pos: 245

Relay_Log_Space: 1256

Until_Condition: None

Until_Log_File:

Until_Log_Pos: 0

Master_SSL_Allowed: No

Master_SSL_CA_File:

Master_SSL_CA_Path:

Master_SSL_Cert:

Master_SSL_Cipher:

Master_SSL_Key:

Seconds_Behind_Master: 0

Master_SSL_Verify_Server_Cert: No

Last_IO_Errno: 0

Last_IO_Error:

Last_SQL_Errno: 0

Last_SQL_Error:

Replicate_Ignore_Server_Ids:

Master_Server_Id: 30

1 row in set (0.00 sec)

9可以看到 Slave_IO_Running 和 Slave_SQL_Running 的状态都是 Yes，配置数据库主从集

群成功。

[root@mysql1 ~]# cat /etc/my.cnf

[mysqld]

log_bin = mysql-bin #记录操作日志

binlog_ignore_db = mysql #不同步 mysql 系统数据库

server_id = 30 #数据库集群中的每个节点 id 都要不同，

一般使用 IP 地址的最后段的数字，例如 192.168.200.30，server_id 就写 30

datadir=/var/lib/mysql

socket=/var/lib/mysql/mysql.sock

# Disabling symbolic-links is recommended to prevent assorted security risks

symbolic-links=0# Settings user and group are ignored when systemd is used.

# If you need to run mysqld under a different user or group,

# customize your systemd unit file for mariadb according to the

# instructions in http://fedoraproject.org/wiki/Systemd

[mysqld_safe]

log-error=/var/log/mariadb/mariadb.log

pid-file=/var/run/mariadb/mariadb.pid

#

# include all files from the config directory

#

!includedir /etc/my.cnf.d

重启数据库服务，并进入数据库，命令如下：

[root@mysql1 ~]# systemctl restart mariadb

[root@mysql1 ~]# mysql -uroot -p000000

Welcome to the MariaDB monitor. Commands end with ; or \g.

Your MariaDB connection id is 2

Server version: 5.5.44-MariaDB-log MariaDB Server

Copyright (c) 2000, 2015, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]>

[root@mysql2 ~]# cat /etc/my.cnf

[mysqld]

log_bin = mysql-bin #记录操作日志

binlog_ignore_db = mysql #不同步 mysql 系统数据库

server_id = 40 #数据库集群中的每个节点 id 都要不同，

一般使用 IP 地址的最后段的数字，例如 192.168.200.40，server_id 就写 40

datadir=/var/lib/mysql

socket=/var/lib/mysql/mysql.sock

# Disabling symbolic-links is recommended to prevent assorted security risks

symbolic-links=0

# Settings user and group are ignored when systemd is used.

# If you need to run mysqld under a different user or group,

# customize your systemd unit file for mariadb according to the

# instructions in http://fedoraproject.org/wiki/Systemd

[mysqld_safe]

log-error=/var/log/mariadb/mariadb.log

pid-file=/var/run/mariadb/mariadb.pid

#

# include all files from the config directory

#

!includedir /etc/my.cnf.d

mysql1 节点：

[root@localhost ~]# hostnamectl set-hostname mysql1

[root@localhost ~]# logout

[root@mysql1 ~]# hostnamectl

Static hostname: mysql1Icon name: computer-vm

Chassis: vm

Machine ID: 179f6c8f2e7942ef81b0f5565a6883fa

Boot ID: 69ad020d53e54892b9005f82e182c140

Virtualization: vmware

Operating System: CentOS Linux 7 (Core)

CPE OS Name: cpe:/o:centos:centos:7

Kernel: Linux 3.10.0-327.el7.x86_64

Architecture: x86-64

mysql2 节点：

[root@localhost ~]# hostnamectl set-hostname mysql2

[root@localhost ~]# logout

[root@mysql2 ~]# hostnamectl

Static hostname: mysql2

Icon name: computer-vm

Chassis: vm

Machine ID: 179f6c8f2e7942ef81b0f5565a6883fa

Boot ID: 816b270a1275496caa3254300fc359c4

Virtualization: vmware

Operating System: CentOS Linux 7 (Core)

CPE OS Name: cpe:/o:centos:centos:7

Kernel: Linux 3.10.0-327.el7.x86_64

Architecture: x86-64

# setenforce 0

# systemctl stop firewalld

127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4

2::1 localhost localhost.localdomain localhost6 localhost6.localdomain6

192.168.200.30 mysql1

192.168.200.40 mysql2

# yum install -y mariadb mariadb-server

# systemctl start mariadb

# systemctl enable mariadb

Created symlink from /etc/systemd/system/multi-user.target.wants/mariadb.service to

/usr/lib/systemd/system/mariadb.service.

[root@mysql1 ~]# mysql_secure_installation

/usr/bin/mysql_secure_installation: line 379: find_mysql_client: command not found

NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL

MariaDB

SERVERS IN PRODUCTION USE! PLEASE READ EACH STEP CAREFULLY!

In order to log into MariaDB to secure it, we'll need the current

password for the root user. If you've just installed MariaDB, and

you haven't set the root password yet, the password will be blank,

so you should just press enter here.

Enter current password for root (enter for none): #默认按回车

OK, successfully used password, moving on...

3Setting the root password ensures that nobody can log into the MariaDB

root user without the proper authorisation.

Set root password? [Y/n] y

New password: #输入数据库 root 密码 000000

Re-enter new password: #再次输入密码 000000

Password updated successfully!

Reloading privilege tables..

... Success!

By default, a MariaDB installation has an anonymous user, allowing anyone

to log into MariaDB without having to have a user account created for

them. This is intended only for testing, and to make the installation

go a bit smoother. You should remove them before moving into a

production environment.

Remove anonymous users? [Y/n] y

... Success!

Normally, root should only be allowed to connect from 'localhost'. This

ensures that someone cannot guess at the root password from the network.

Disallow root login remotely? [Y/n] n

... skipping.

By default, MariaDB comes with a database named 'test' that anyone can

access. This is also intended only for testing, and should be removed

before moving into a production environment.

45

Remove test database and access to it? [Y/n] y

- Dropping test database...

... Success!

- Removing privileges on test database...

... Success!

Reloading the privilege tables will ensure that all changes made so far

will take effect immediately.

Reload privilege tables now? [Y/n] y

... Success!

Cleaning up...

All done! If you've completed all of the above steps, your MariaDB

installation should now be secure.

Thanks for using MariaDB!

修改 mysql1 节点的数据库配置文件，在配置文件/etc/my.cnf 中的[mysqld]增添如下内容。

4.3.2 案例分析

1.规划节点

Linux 操作系统的单节点规划，见表 4-3-1。

4.2.3 案例实施

1.基础环境安装

（1）修改主机名

使用远程连接工具 CRT 连接到 192.168.200.50 虚拟机，并进行修改主机名的操作，将

192.168.200.50 主机名修改为 nginx。命令如下：

[root@localhost ~]# hostnamectl set-hostname php

[root@localhost ~]# logout

[root@php ~]# hostnamectl

Static hostname: php

Icon name: computer-vm

Chassis: vm

Machine ID: 179f6c8f2e7942ef81b0f5565a6883fa

Boot ID: e48eac1312ca40beae638f6f43e0c31aVirtualization: vmware

Operating System: CentOS Linux 7 (Core)

CPE OS Name: cpe:/o:centos:centos:7

Kernel: Linux 3.10.0-327.el7.x86_64

Architecture: x86-64

（2）关闭防火墙及 SELinux 服务

关闭防火墙 firewalld 及 SELinux 服务，命令如下：

# setenforce 0

# systemctl stop firewalld

（3）安装配置基础服务

使用 CentOS-7-x86_64-DVD-1511.iso 文件自行配置本地 YUM 源，编译安装基础环境，

命令如下：

[root@php ~]# yum -y install gcc gcc-c++ libxml2-devel libcurl-devel openssl-devel

bzip2-devel

使用远程传输工具，将提供的 libmcrypt-2.5.8.tar.gz 压缩包上传至 php 节点的/usr/local/src

目录下，解压该压缩包，进入解压后目录，编译安装该服务，命令如下：

[root@php src]# tar -zxvf libmcrypt-2.5.8.tar.gz

[root@php src]# cd libmcrypt-2.5.8/

[root@php libmcrypt-2.5.8]# ./configure --prefix=/usr/local/libmcrypt && make && make

install

（4）安装 PHP 环境

使用远程传输工具，将提供的 php-5.6.27.tar.gz 压缩包上传至 php 节点的/usr/local/src 目

录下，解压该压缩包，进入解压后的目录，编译安装 PHP 服务，命令如下：

[root@php src]# tar -zxvf php-5.6.27.tar.gz

[root@php src]# cd php-5.6.27/

[root@php php-5.6.27]# ./configure --prefix=/usr/local/php5.6 --with-mysql=mysqlnd \

--with-pdo-mysql=mysqlnd --with-mysqli=mysqlnd --with-openssl --enable-fpm \

--enable-sockets --enable-sysvshm --enable-mbstring --with-freetype-dir --with-jpeg-dir \

--with-png-dir --with-zlib --with-libxml-dir=/usr --enable-xml --with-mhash \

--with-mcrypt=/usr/local/libmcrypt --with-config-file-path=/etc \

--with-config-file-scan-dir=/etc/php.d --with-bz2 --enable-maintainer-zts

17如果没有报错提示，则进行下一步安装，命令如下：

[root@php php-5.6.27]# make && make install

在等待 10 分钟左右的时间，编译安装完毕。

4.1.3 案例实施

1.基础环境安装

（1）修改主机名

使用远程连接工具 CRT 连接到 192.168.200.30、

第四章 应用系统分布式构建运维

4.1 实战案例——部署主从数据库

4.1.1 案例目标

（1）了解数据库服务的安装。如不确定请勿更改 */

define('DB_COLLATE', '');

…省略…

[root@nginx ~]# scp /www/wp-config.php root@192.168.200.60:/www/

[root@mysql1 ~]# mysql -uroot -p000000

Welcome to the MariaDB monitor. Commands end with ; or \g.

23Your MariaDB connection id is 5

Server version: 5.5.44-MariaDB-log MariaDB Server

Copyright (c) 2000, 2015, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]> create database wordpress;

Query OK, 1 row affected (0.00 sec)

MariaDB [(none)]> Ctrl-C -- exit!

Aborted

装，如图 4-6-1 所示。

CentOS-7-x86_64-DVD-1511.iso。

4.4 实战案例——分布式部署 LNMP+WordPress

4.4.1 案例目标

4.2.2 案例分析

4.1.3 案例实施

文件的操作。

4.3.3 案例实施

MariaDB [(none)]> grant all privileges on *.* to root@'%' identified by "000000";

Query OK, 0 rows affected (0.00 sec)

67

MariaDB [(none)]> grant replication slave on *.* to 'user'@'mysql2' identified by '000000';

Query OK, 0 rows affected (0.00 sec)

[root@php php-5.6.27]# groupadd -g 1001 nginx

[root@php php-5.6.27]# useradd -u 900 nginx -g nginx -s /sbin/nologin

[root@php php-5.6.27]# tail -1 /etc/passwd

nginx:x:900:1001::/home/nginx:/sbin/nologin

[root@php php-5.6.27]# cp php.ini-production /etc/php.ini

[root@php php-5.6.27]# cp sapi/fpm/init.d.php-fpm /etc/init.d/php-fpm

[root@php php-5.6.27]# chmod +x /etc/init.d/php-fpm

[root@php php-5.6.27]# chkconfig --add php-fpm

[root@php php-5.6.27]# chkconfig php-fpm on

[root@php php-5.6.27]# cp /usr/local/php5.6/etc/php-fpm.conf.default

/usr/local/php5.6/etc/php-fpm.conf

[root@php php-5.6.27]# vim /usr/local/php5.6/etc/php-fpm.conf

[root@php ~]# grep -n '^'[a-Z] /usr/local/php5.6/etc/php-fpm.conf

25:pid = run/php-fpm.pid

149:user = nginx

150:group = nginx

164:listen = 192.168.200.60:9000

224:pm = dynamic

18235:pm.max_children = 50

240:pm.start_servers = 5

245:pm.min_spare_servers = 5

250:pm.max_spare_servers = 35

[root@localhost ~]# hostnamectl set-hostname nginx

[root@localhost ~]# logout

[root@nginx ~]# hostnamectl

Static hostname: nginx

Icon name: computer-vm

Chassis: vm

Machine ID: 179f6c8f2e7942ef81b0f5565a6883fa

Boot ID: 9ac638fec1c64c94aab96d0acfa4f542Virtualization: vmware

Operating System: CentOS Linux 7 (Core)

CPE OS Name: cpe:/o:centos:centos:7

Kernel: Linux 3.10.0-327.el7.x86_64

Architecture: x86-64

# setenforce 0

# systemctl stop firewalld

[root@nginx ~]# groupadd -g 1001 nginx

[root@nginx ~]#useradd -u 900 nginx -g nginx -s /sbin/nologin

[root@nginx ~]# tail -1 /etc/passwd

nginx:x:900:1001::/home/nginx:/sbin/nologin

[root@nginx src]# tar -zxvf nginx-1.12.2

[root@nginx src]# cd nginx-1.12.2/

[root@nginx-1.12.2]#./configure --prefix=/usr/local/nginx --with-http_dav_module \

--with-http_stub_status_module --with-http_addition_module \

--with-http_sub_module --with-http_flv_module --with-http_mp4_module \

--with-http_ssl_module --with-http_gzip_static_module --user=nginx --group=nginx

[root@nginx-1.12.2]# make && make install

[root@nginx nginx-1.12.2]# ln -s /usr/local/nginx/sbin/nginx /usr/local/sbin/

[root@nginx nginx-1.12.2]# nginx -t

nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok

nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful

[root@nginx nginx-1.12.2]# nginx

[root@nginx nginx-1.12.2]# netstat -ntpl

Active Internet connections (only servers)

Proto Recv-Q Send-Q Local Address Foreign Address State

PID/Program name

tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN

5726/nginx: master

tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN

1400/sshd

tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN

2274/master

tcp6 0 0 :::22 :::* LISTEN

1400/sshd

tcp6 0 0 ::1:25 :::* LISTEN

2274/master

如果发现 80 端口启动，则表示 Nginx 服务启动成功。

使用实战案例 4.1-4.3 创建的虚拟机完成本次案例。

[root@nginx ~]# vi /usr/local/nginx/conf/nginx.conf

…省略…

location / {

root /www; #更改网页目录

index index.php index.html index.htm; #添加 index.php}

…省略…

location ~ \.php$ { #去掉 location{}前的注释符

root /www; #更改目录为/www

fastcgi_pass 192.168.200.60:9000; #注意：在这里添加 PHP 主机

IP 地址

fastcgi_index index.php;

fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name;

include fastcgi_params;

}

…省略…