LNAMP架构项目一

一、第一阶段

假设：公司初期只有一台web服务器，搭建Web服务器的脚本如下：

 1 #检查环境
 2 setenforce 0 &> /dev/null
 3 sed -i s/=enforcing/=disabled/g /etc/selinux/config
 4 systemctl restart firewalld
 5 #使用CentOS系统原始源下载相关软件
 6 yum -y remove maria*
 7 echo '[mysql57-community]
 8 name=MySQL 5.7 Community Server
 9 baseurl=http://repo.mysql.com/yum/mysql-5.7-community/el/7/$basearch/
10 enabled=1
11 gpgcheck=0
12 ' > /etc/yum.repos.d/mysql57-community.repo
13 yum clean all && yum makecache -q
14 yum -y install epel-release -q
15 yum -y install vim bash-com* net-tools unzip nginx httpd php php-mysql mysql-com*server -q
16 #使用nginx实现动静分离，搭建网站
17 sed -i '42s/80/81/g' /etc/httpd/conf/httpd.conf
18 sed -i '38,$'c} /etc/nginx/nginx.conf
19 echo " server {
20     listen    80;
21     server_name    3344.com;
22     location ~*\.php$ {
23     proxy_pass    http://127.0.0.1:81;
24     }
25     location / {
26     root    /var/www/html;
27     }
28 }" > /etc/nginx/conf.d/3344.conf
29 systemctl restart httpd nginx
30 systemctl enable httpd nginx -q
31 firewall-cmd --add-port=80/tcp
32 firewall-cmd --add-port=80/tcp --permanent -q
33 #配置mysql数据库，开启二进制日志，创建数据库及用户
34 sed -i 4a"server-id=1\nlog-bin=binlog" /etc/my.cnf
35 systemctl restart mysqld
36 systemctl enable mysqld
37 PW=`cat /var/log/mysqld.log | grep password |head -n 1 |awk '{print $NF}'`
38 mysql -p$PW --connect-expired-password -e "alter user 'root'@'localhost' identified by 'Ryz0304/1';"
39 echo "[client]
40 user=root
41 password='Ryz0304/1'" > /root/.my.cnf #将数据库的用户密码写入配置文件中，方便登录
42 mysql -e "create database wordpress;"
43 mysql -e "grant all on wordpress.* to 'wordpress'@'localhost' identified by 'W0rdpress.';"
44 mysql -e "flush privileges;"
45 rm -rf /var/www/html/*
46 chmod -R 777 /var/www/html
47 #上传代码至nginx的工作目录/var/www/html（自定义的）
48 #浏览器访问即可

问题：

1、安装 MySQL 5.7 版本，需要卸载系统自带的mariadb-*

2、MySQL 5.7 版本安装完成后，启动命令时systemctl start mysqld，必须是mysqld；且第一次进入数据库时需要查看mysql的初始密码（/var/log/mysqld.log）

二、第二阶段

为防止一台服务器发生故障，需要动态添加一台新的服务器，使其成为主备关系，在第一台服务器宕机的情况下，web服务还可以正常运作：

#完成2台服务器的同时搭建

#各服务器的密码
MM=0304

#检查环境
setenforce 0 &> /dev/null
sed -i s/=enforcing/=disabled/g /etc/selinux/config
systemctl restart firewalld
systemctl enable firewalld &> /dev/null

echo "10.0.0.11 s1
10.0.0.12 s2" >>/etc/hosts
sshpass -p $MM scp -r /etc/hosts 10.0.0.12:/etc

ssh-keygen -t rsa -P "" -f /root/.ssh/id_rsa &> /dev/null
cp /root/.ssh/id_rsa.pub /root/.ssh/authorized_keys
sed -i 35c'StrictHostKeyChecking no' /etc/ssh/ssh_config

#配置yum源：使用原始CentOS系统的原始源，安装epel源，配置mysql源，安装服务
for a in s{1..2}
do
sshpass -p $MM scp -r /root/.ssh $a:/root
ssh $a "yum -y remove maria*"
ssh $a "echo '[mysql57-community]
name=MySQL 5.7 Community Server
baseurl=http://repo.mysql.com/yum/mysql-5.7-community/el/7/\$basearch/
enabled=1
gpgcheck=0
' > /etc/yum.repos.d/mysql57-community.repo
yum clean all -q && yum makecache -q
yum -y install epel-release -q
yum -y install vim bash-com* net-tools unzip nginx httpd php php-mysql mysql-com*server -q"
done

#配置nginx+httpd+php动静分离
for b in s{1..2}
do
ssh $b "sed -i '42s/80/81/g' /etc/httpd/conf/httpd.conf"
ssh $b "sed -i '38,$'c} /etc/nginx/nginx.conf"
ssh $b "echo \" server {
    listen    80;
    server_name    3344.com;
    location ~*\.php\$ {
    proxy_pass    http://127.0.0.1:81;
    }
    location / {
    root    /var/www/html;
    }
}\" > /etc/nginx/conf.d/3344.conf"
ssh $b "systemctl restart httpd nginx
systemctl enable httpd nginx -q
firewall-cmd --add-port=80/tcp
firewall-cmd --add-port=80/tcp --permanent -q"
done

#配置nginx+keepalived实现负载均衡和高可用
for c in s{1..2}
do
ssh $c "cat >/etc/nginx/conf.d/3344.conf <<EOF
 server {
    listen    80;
    location ~*\.php\$ {
    proxy_pass    http://127.0.0.1:81;
    }
    location / {
    root    /var/www/html;
    proxy_pass http://3344.com;
    }
}
upstream 3344.com {
    server 10.0.0.11;
    server 10.0.0.12;
}
EOF
"
ssh $c "cat > /etc/keepalived/keepalived.conf<<EOF
! Configuration File for keepalived

vrrp_instance VI_1 {
    state MASTER
    interface ens33
    virtual_router_id 51
    priority 100
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1111
    }
    virtual_ipaddress {
        10.0.0.100
    }
}
EOF
"

ssh $c "firewall-cmd --add-port=80/tcp --permanent"
ssh $c "firewall-cmd --direct --permanent --add-rule ipv4 filter INPUT 0 --protocol vrrp -j ACCEPT"
ssh $c "firewall-cmd --reload"
ssh $c "systemctl enable keepalived" $> /dev/null
ssh $c "systemctl restart nginx keepalived"
done

ssh s2 "sed -i s/MASTER/BACKUP/g /etc/keepalived/keepalived.conf"
ssh s2 "sed -i s/100/90/g /etc/keepalived/keepalived.conf"
ssh s2 "systemctl restart keepalived"

#mysql5.7配置一
sed -i 4a'server-id=1\nlog-bin=log' /etc/my.cnf
firewall-cmd --add-port=3306/tcp --permanent
firewall-cmd --reload
systemctl enable mysqld
systemctl restart mysqld

PWD1=`cat /var/log/mysqld.log |grep pass |head -n 1|awk '{print $NF}'`
cat > ~/.my.cnf <<EOF
[mysql]
user=root
password='$PWD1'
EOF

mysql --connect-expired-password -e "alter user 'root'@'localhost' identified by 'Ryz0304.';"
cat > ~/.my.cnf <<EOF
[mysql]
user=root
password='Ryz0304.'
EOF

mysql -e "grant  REPLICATION SLAVE  on *.* to 'repl'@'10.0.0.%' identified by 'Repl432/1';"
mysql -e "create database wordpress;"
mysql -e "grant all on wordpress.* to 'wordpress'@'s1' identified by 'W0rdpress/1';"
mysql -e "grant all on wordpress.* to 'wordpress'@'s2' identified by 'W0rdpress/1';"
mysql -e "flush privileges;"

#mysql5.7配置二
ssh s2 "sed -i 4a'server-id=2\nlog-bin=log' /etc/my.cnf"
ssh s2  "firewall-cmd --add-port=3306/tcp --permanent"
ssh s2  "firewall-cmd --reload"
ssh s2  "systemctl enable mysqld"
ssh s2  "systemctl restart mysqld"

PWD2=`ssh s2 "cat /var/log/mysqld.log" |grep pass |head -n 1|awk '{print $NF}'`
ssh s6 "cat > ~/.my.cnf <<EOF
[mysql]
user=root
password='$PWD2'
EOF"

ssh s2 "mysql --connect-expired-password -e \"alter user 'root'@'localhost' identified by 'Ryz0304.';\""
ssh s2 "cat > ~/.my.cnf <<EOF
[mysql]
user=root
password='Abc1234/1'
EOF"

ssh s2 "mysql -e \"grant  REPLICATION SLAVE  on *.* to 'repl'@'10.0.0.%' identified by 'Repl432/1';\""
ssh s2 "mysql -e \"grant all on wordpress.* to 'wordpress'@'s1' identified by 'W0rdpress/1';\""
ssh s2 "mysql -e \"grant all on wordpress.* to 'wordpress'@'s2' identified by 'W0rdpress/1';\""
ssh s2 "mysql -e \"flush privileges;\""

#主主
FILE1=`mysql -e "show master status\G"|grep File |awk '{print $2}'`
POSI1=`mysql -e "show master status\G"|grep Posit |awk '{print $2}'`
FILE2=`ssh s2 "mysql -e \"show master status\G\""|grep File |awk '{print $2}'`
POSI2=`ssh s2 "mysql -e \"show master status\G\""|grep Posit |awk '{print $2}'`
mysql -e "change master to master_host='s5',master_user='repl',master_password='Repl432/1',master_port=3306,master_log_file='$FILE1',master_log_pos=$POSI1;"
mysql -e "start slave;"
ssh s2 "mysql -e \"change master to master_host='s6',master_user='repl',master_password='Repl432/1',master_port=3306,master_log_file='$FILE2',master_log_pos=$POSI2;\""
ssh s2 "mysql -e \"start slave;\""

三、第三阶段

四、第四阶段

五、第五阶段

六、架构