目录

LAMP

Linux+Apache+Mysql/MariaDB+Perl/PHP/Python一组常用来搭建动态网站或者服务器的开源软件，本身都是各自独立的程序，但是因为常被放在一起使用，拥有了越来越高的兼容度，共同组成了一个强大的Web应用程序平台。随着开源潮流的蓬勃发展，开放源代码的LAMP已经与J2EE和.Net商业软件形成三足鼎立之势，并且该软件开发的项目在软件方面的投资成本较低，因此受到整个IT界的关注。从网站的流量上来说，70%以上的访问流量是LAMP来提供的，LAMP是最强大的网站解决方案．

Install LAMP via YUM

yum groupinstall -y "mysql数据服务器" "PHP支持"

yum install -y php-mysql

service httpd start

service mysqld start

Install LAMP via ResourceCode

Apache

Port：TCP80 TCP443

logFile：/var/log/httpd/

step1. Install Apache

rpm -e httpd -nodeps   #move system pre-installed httpd software.

tar zxvf http-XXX -C /var/src

./configure --prefix=/usr/local/apache2 --enable-so --enable-rewrite && make && make install

/usr/local/apache2/bin/apachectl start

cp /usr/local/apache2/bin/apachectl /etc/init.d/httpd

step2. Addition service to chkconfig

vim /etc/init.d/httpd

#!/bin/sh

#chkconfig:35 12 32

#description:httpd server

#12 --> priority

#32 --> close priority

step3. Start the chkconfig service

chkconfig --add httpd

chkconfig httpd on

step4. Edit the httpd service config file

vim /usr/local/apache2/conf/httpd.conf

#Global

ServerRoot "URL"            #Directory for store the config file

Timeout 60                  #connect timeout

PidFile run/httpd.pid       #the directory for store pid file

listen 80                   #listen into port

user  XXX                   #httpd default users：will use 'apache' user when you install via YUM, otherwise you have to create the 'daemon' user to run the httpd service when you install resource.

group  XXX                  #httpd service default group

keepAlive on                #one connect much transfer data

MaxkeepAliveRequests 500    #Max connection count.

keepAliveTimeout 50         #keep connect alive timeout

prefork                     #work model to small web

work                        #work model to big web

Server Admin:ManagerMail

ServerName:www.domain.com:80

DocumentRoot "[websiteUrl]"   #VirtualHost more preferential  a.yum install: /var/www/html  b.resource install:/usr/local/apache2//htdocs

DirectoryIndex:   #set welcome page

#Set welcome page example:

<IfModule dir_module>

    DirectoryIndex index.html index.php

</IfModule>

AddDefaultCharset UTF-8  #add character set

#Locality:

<Directory "/var/www/html[websiteUrl]">

  Options

  AllowOverride

  Order

  Deny from

</Directory>

step5. Httpd Stress testing

ab -c X httpdServerIP   #X:Sub-requent requests count

ab -n X httpdServerIP   #X:Total requests count

Forexample:

ab -c 2000 -n 4000 http://www.domain.com/    #2000 times PV(PageView) at the same time.

ulimit -n 2000       #Change the max supervene access count. Because the max supervene access count have to less than 1024 in the linux file.

ulimit -a                #Check all limit

Apache Virtual Machine Type

1. Virtual Machine type:
   
   (1) DomainName-based virtual hosting
   
   (2) IP address-based
   
   (3) Port-based

Use name-based virtual hosting(the same of ip and port)

step1

mkdir htdocs/baidu htdocs/sina

echo www.baidu.com > htdocs/baidu/index.html

echo www.sina.com > htdocs/sina/index.html

step2. Open virtual machine function

vim httpd.conf

#Virtual Hosts

Include conf/extra/httpd-vhosts.conf

vim conf/extra/httpd-vhosts.conf #Define virtual machine domain

For example:

NameVirtualHost \*:80   #specify virtual machine to name-based hosts.

                        #Attention: "*:80" have to same as below sections.

<VirtualHost *:80>

     ServerAdmin jmilk@fan.com

     DocumentRoot "/usr/local/apache2/htdoes/baidu"

     ServerName Jmilk.fan.com

     ErrorLog "logs/baidu-error_log"

     CustomLog "logs/baidu-access_log" common

     <Directory "/usr/local/apache2/htdoes/baidu">  #Setup website access permission

           Order allow,deny

           Allow from all

      </Directory>

</VirtualHost>

<VirtualHost *:80>

     ServerAdmin jmilk@fan.com

     DocumentRoot "/usr/local/apache2/htdoes/sina"

     ServerName Jmilk.fan.com

     ErrorLog "logs/sina-error_log"

     CustomLog "logs/sina-access_log" common

</VirtualHost>

vim /etc/hosts

10.20.0.210 www.baidu.com www.sina.com

service httpd restart

Use IP-based virtual hosting

Much step of setup the IP-based virtual hosting as same as the name-based virtual hosting,but different as below.

step1. Comments the “NameVritualHost *:80”

step2. Specify the different IP in the sections of <VirtualHost IP:80>

Use Post-based virtual hosting

step1. Add the Listen port

vim httpd.conf

  Listen 80

  Listen 81

step2. Comments the “NameVritualHost *:80”

step3. Specify the different IP in the sections of <VirtualHost IP:Post>

Create personal page.

vim httpd.conf #open home directory

 #User home directories

 Include conf/extra/httpd-userdir.conf

vim httpd-userdir.conf

 userDir public_html   --> Create Public_html file in the home directory.

Login the personal page

 chmod o+x /home/user

 http://IP/~userName

Security access https

step1. Install Apache by resource and enable ssl protocol

yum -y install mod_ssl

rpm -qa |grep openssl

./configure --enable-so --enable-rewirte --enable-ssl && make && make install

step2. Edit the Apache config file to enable ssl function module

vim httpd.conf

LoadModule ssl_module modules/mod_ssl.so

# Secure (SSL/TLS) connections

Include conf/extra/httpd-ssl.conf

setp3. Create ssl cert

cd conf/ and Running the cert script as below

#certcreate.sh

#!/bin/bash

read -p "文件名称前缀：" name

openssl genrsa -des3 -out ${name}a.key 1024

openssl rsa -in ${name}a.key -out ${name}.key

openssl req -new -key ${name}.key -out ${name}.csr

openssl x509 -req -days 1000 -in ${name}.csr -signkey ${name}.key -out ${name}.crt

step4. Specify virtual machine which used security(ssl) cert and ssl cert’s store directory url.

vim extra/httpd-ssl.conf

Listen 443

AddType application/x-x509-ca-cert .crt

AddType application/x-pkcs7-crl    .crl

SSLPassPhraseDialog  builtin

SSLSessionCache        "shmcb:/usr/local/apache2//logs/ssl_scache(512000)"

SSLSessionCacheTimeout  300

SSLMutex  "file:/usr/local/apache2//logs/ssl_mutex"

NameVirtualHost *:443

<VirtualHost *:443>

       DocumentRoot "/usr/local/apache2//htdocs/baidu"

       ServerName jmilk.fan.com:443

       ServerAdmin jmilk@fan.com

       ErrorLog "/usr/local/apache2//logs/baidu_error_log"

       TransferLog "/usr/local/apache2//logs/baidu_access_log"

       SSLEngine on

       SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL  -->列出运行客户端协商的密码

       SSLCertificateFile "/usr/local/apache2//conf/server.crt"

       SSLCertificateKeyFile "/usr/local/apache2//conf/server.key"

       <FilesMatch "\.(cgi|shtml|phtml|php)$">

                SSLOptions +StdEnvVars

       </FilesMatch>

       <Directory "/usr/local/apache2//cgi-bin">

                SSLOptions +StdEnvVars

       </Directory>

       BrowserMatch ".*MSIE.*" \

       nokeepalive ssl-unclean-shutdown \

       downgrade-1.0 force-response-1.0

       CustomLog "/usr/local/apache2//logs/ssl_request_log" \

       "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"

</VirtualHost>

step4. restart httpd service

service httpd restart

Access control

Only permission user who can access this web pager.

step1. Install awstats software.

unzip awstats-7.0.zip               #Program by Analytic language ,so don't need to compile.

cd /usr/local/awstats-7.0/tools

./awstats_configure.pl              #Install of interactive mode

service httpd restart               #The entry into force of awstats plugin

step2. Edit the awstats plugin configure file.

vim /etc/awstats/awstats.jmilk.fan.com.conf(awstats.domain.com.conf)

LogFile="/usr/local/apache2/logs/baidu-access_log"

mkdir /var/lib/awstats

http://localhost/awstats/awstats.pl  #access awstats software

step3. Edit apache configure file to add awstats plugin

vim httpd-vhosts.conf #change the CustomLog type from “common” to “combined”

CustomLog "logs/sina-access_log" common  --> CustomLog "logs/baidu-access_log" combined

service httpd restart

step4. setting awstats’s access limit

vim httpd.conf

#Add section below for example:

#This is to permit URL access to scripts/files in AWStats directory.

#

<Directory "/usr/local/awstats-7.0/wwwroot">

    Options None

    AllowOverride None

    Order allow,deny

    Allow from all

    AuthName "AWSTATS"

    AuthType Basic

    AuthUserFile /usr/local/awstats/wwwroot/.htpasswd

    require valid-user

</Directory>

step5. Create htpasswd user by htpasswd tool

cd /usr/local/apache2/bin/htpassed

htpasswd -c /usr/local/apache2/conf/.htpasswd userName1   #In frist create user,you have to use option -c to specify the htpasswd file store url

htpasswd userName2

service httpd restart    

MySQL

Port: TCP 3306

step1. install Mysql

step1. Install MySQL via resource

tar zxvf mysql-XXX -C /var/src

useradd mysql -s /sbin/nologin -M    #-M --> have not home directory

./configure --prefix=/usr/local/mysql --sysconfdir=/etc/ && make && make install

step2. Initialization Mysql configure.

cp /usr/local/mysql/support-files/my-medium.cnf /etc/my.cnf

/usr/local/mysql/bin/mysql-install-db --user=mysql

chown -R root:mysql /usr/local/mysql

chown -R mysql:mysql /usr/local/mysql/var

ln -s /usr/local/mysql/bin/* /usr/local/bin

vim /etc/profile

PATH=${PATH}/usr/local/mysql/bin

step3. Start mysql service

mysql_safe --user=mysql &

cp /usr/local/mysql/support-files/mysql.server /etc/init.d/mysqld

chmod a+x /etc/init.d/mysqld

echo "/usr/local/mysql/lib/mysql" >> /etc/ld.so.conf   --> setup mysql interface

ldconfig   #Refresh the ld.so.conf file.

service mysqld start

chkconfig mysqld on

step4. Setup mysql’s user and password.

mysqladmin -u root password '123'    #setting password

mysql -u root -p123          #login mysql

#or

mysql_secure_installation --> Basic secure setting

step5. Check the Mysql install

 mysal -u root -p123

 show databases;

 use mysql;

 show tables;

step6. Mysql usage

a. list user’s table field information

describe user;

b. create database and create file in the /usr/local/mysql/var/

create database world;

c. create table

create table tableName(id int not null,name char(16) not null,password char(16) not null default '123',primany key(id));

d. delete table

drop table table DBName.tableName;

delete fro tableName where id=3;

e. select table info or select table item info.

select * from tableName;

select * from tableName where price > 10;  #selece by condition

select * from tableName order by price;    #from small to big sort

select * from tableName order by price desc;  #from big to small sort. desc 降序

select avg(price) from tableName;    #average value

select sum(price) from tableName;    #summation; or use function min() max() count():output notes conunt.

select type,avg(price) from tableName group by type;

type,avg(price)     #every type's average price

select type,avg(price) from tableName group by type having avg(price) > 10;     #use where before grouping, use having after grouping. 

f. select from much table.

select table1Name.name,table2Name.nation from table1Name,table2Name where table1Name.id=table2Name.id;           #内链接查询

select table1Name.name,table2Name.nation from table1Name left join table2Name on table1Name.id=table2Name.id;    #左链接(left join)查询，以左表为主，左表必须全列出符合的记录，右表若没有对应的记录时，以null补全

select table1Name.name,table2Name.nation from table1Name right join table2Name on table1Name.id=table2Name.id;   #右链接(right join)

select table1Name.name,table2Name.nation from table1Name cross join table2Name;                                  #全链接查询，交叉查询(cross join)笛卡儿积

g. Insert item into table

insert into tableName(id,name,password) values(1,'userName','123');

h. Update the table item info.

update tableName set password=encrypt('123') where id=1;

b.Mysql date backup and recover:

(1) Backup:

mysqldump -u root -p123 databaseName > tableName.sql  --> backup a database

mysqldump -u root -p123 --all-databases > all.sql  --> backup all database

(2) Recover:

mysql -u root -p123 tableName < tableName.sql

mysql -u root -p123 < all.sql  --> resover all the database

PHP

step1. Install php support

tar zxvf libmcrypt -C /usr/local

tar zxvf mhach -C /usr/local

tar zxvf mcrypt -C /usr/local    #libmcrypr,mhach annd mcrypt combine to secure encrypt deal with.

cd /usr/local/libmcrypt

./configure && make && make install

echo "/usr/local/lib" >> /etc/ld.so.conf

ldconfig

cd /usr/local/mhach

./configure && make && make install

ldconfig

cd /usr/local/mcrypt

./configure && make && make install

tar zxvf php-XXX.tar.gz -C /usr/local

mv php-XXX PHP5

cd /usr/local/php5

./configure --prefix=/usr/local/php5 --with-apxs2=/usr/local/apache2/bin/apx5 --with-mysql=/usr/local/mysql --with-mcrpyt --with-config-file-path=/usr/local/php5 --enable-mbstring && make && make install

step2. Edit php Configure file

cp /usr/local/php5/php.ini-development /usr/local/php5/php.ini

vim /usr/local/apache2/conf/httpd.conf #add php plugin to apache

<IfModule mime_module>   #加入.PHP后缀识别模块

        AddType application/x-httpd-php .php

</IfModule>

<IfModule dir_module>   #加入PHP欢迎页面

        DirectoryIndex index.html index.php

</IfModule>

step3. Test the php module

vim TestPHP.php

<?php

    phpinfo()

?>

step4. Install phpMyAdmin manager paper.

tar phpMyAdmin -C /usr/local/apache2/htdocs/baidu

mv phpMyAdmin pma

cp pma/confg.sample.inc.php pma/config.inc.php

step5. Install Discuz

unzip Discuz

cd Discuz

mv upload /usr/local/apache2/htdoes/bbs

chown -R daemon:daemon /usr/local/apache2/htdoes/bbs

http://localhost/bbs  #enter installtation pager