centos7.4 搭建lnmp

系统：阿里云 centos7.4

Php：PHP 7.1.13 (cli)

Mysql：mysql5.7

Nginx：nginx/1.12.2

一、更新centos7 yum源

cp /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup

cd /etc/yum.repos.d/

wget http://mirrors.163.com/.help/CentOS6-Base-163.repo

wget http://mirrors.aliyun.com/repo/Centos-7.repo

yum clean all

yum makecache

yum -y update

yum -y install gcc* #安卓gcc组件

yum -y install vim

#下载yum源

wget http://mirrors.163.com/centos/7.2.1511/os/x86_64/Packages/yum-3.4.3-132.el7.centos.0.1.noarch.rpm

wget http://mirrors.163.com/centos/7.2.1511/os/x86_64/Packages/python-iniparse-0.4-9.el7.noarch.rpm

wget http://mirrors.163.com/centos/7.2.1511/os/x86_64/Packages/yum-metadata-parser-1.1.4-10.el7.x86_64.rpm

wget http://mirrors.163.com/centos/7.2.1511/os/x86_64/Packages/yum-plugin-fastestmirror-1.1.31-34.el7.noarch.rpm 

#安装下载的rpm包

rpm -ivh *.rpm 

#创建文件/etc/yum.repos.d/rhel-debuginfo.repo并写入

[base]

name=CentOS-$releasever - Base

baseurl=http://mirrors.163.com/centos/7.2.1511/os/$basearch/

gpgcheck=1

gpgkey=http://mirrors.163.com/centos/7.2.1511/os/x86_64/RPM-GPG-KEY-CentOS-7

#released updates

[updates]

name=CentOS-$releasever - Updates

baseurl=http://mirrors.163.com/centos/7.2.1511/updates/$basearch/

gpgcheck=1

gpgkey=http://mirrors.163.com/centos/7.2.1511/os/x86_64/RPM-GPG-KEY-CentOS-7

[extras]

name=CentOS-$releasever - Extras

baseurl=http://mirrors.163.com/centos/7.2.1511/extras//$basearch/

gpgcheck=1

gpgkey=http://mirrors.163.com/centos/7.2.1511/os/x86_64/RPM-GPG-KEY-CentOS-7

[centosplus]

name=CentOS-$releasever - Plus

baseurl=http://mirrors.163.com/centos/7.2.1511/centosplus//$basearch/

gpgcheck=1

enabled=0

yum clean all

yum update

#安装 epel 源

yum install epel-release

二、firwall 替换成iptables

//关闭默认防火墙

#停止firewall

systemctl stop firewalld.service

#禁止firewall开机启动

systemctl disable firewalld.service

#查看默认防火墙状态（关闭后显示notrunning，开启后显示running）

firewall-cmd --state

//安装iptables

yum install  -y iptables  iptables-services

// 查看iptables配置文件

iptables -L

// 配置里面的规则 -A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT

vim /etc/sysconfig/iptables

#添加

-A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT

-A INPUT -p tcp -m state --state NEW -m tcp --dport 3306 -j ACCEPT

-A INPUT -p tcp -m state --state NEW -m tcp --dport 8080 -j ACCEPT

#开启

service iptables start

#设置防火墙开机启动

systemctl enable iptables.service

#查看iptables状态

service iptables status

#iptables服务重启

service iptables restart

#iptables服务禁用

service iptables stop

三、安装Nginx

#安装nginx源【centos7. yum安装默认的Nginx为1.12.2】

yum localinstall http://nginx.org/packages/centos//noarch/RPMS/nginx-release-centos--.el7.ngx.noarch.rpm

#安装

yum install nginx

service nginx start  

在浏览器输入ip查看

四、安装mysql

#安装mysql源

yum localinstall  http://dev.mysql.com/get/mysql57-community-release-el7-.noarch.rpm

#安装mysql

yum install mysql-community-server

#安装mysql的开发包

yum install mysql-community-devel

#启动mysql

service mysqld start

#查看mysql启动状态

service mysqld status 
#获取mysql默认密码

[root@localhost /]# grep 'temporary password' /var/log/mysqld.log
2018-03-30T06:49:03.200170Z 1 [Note] A temporary password is generated for root@localhost: g0Zb#ku;dOh&

五、安装php

资料来源   https://blog.csdn.net/river131/article/details/53838640

rpm 安装 Php7 相应的 yum源

    CentOS/RHEL 7.x:

    rpm -Uvh https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm

    rpm -Uvh https://mirror.webtatic.com/yum/el7/webtatic-release.rpm

安装PHP7.2

    yum install php72w php72w-opcache

 安装依赖

 yum install php72w php72w-bcmath php72w-cli php72w-common php72w-dba php72w-devel php72w-embedded php72w-enchant php72w-fpm php72w-gd php72w-imap php72w-interbase php72w-intl php72w-ldap php72w-mbstring php72w-mcrypt php72w-mysql php72w-mysqlnd php72w-odbc php72w-opcache php72w-pdo php72w-pdo_dblib php72w-pear php72w-pecl-apcu php72w-pecl-imagick php72w-pecl-xdebug php72w-pgsql php72w-phpdbg php72w-process php72w-pspell php72w-recode php72w-snmp php72w-soap php72w-tidy php72w-xml php72w-xmlrpc

如果是Apache + PHP的话必须使用 PHPIniDir 指定php5的配置文件php.ini的路径

PHPINIDir /etc/php.ini

六、配置Nginx支持PHP

#添加用户组、用户

groupadd www #添加mysql组

useradd -g www www -s /bin/false #添加的用户直接登录系统

#直接使用编译后未经优化处理的配置

cp /usr/local/src/php-7.1./php.ini-production /usr/local/php/etc/php.ini

cp /usr/local/php/etc/php-fpm.conf.default /usr/local/php/etc/php-fpm.conf

cp /usr/local/php/etc/php-fpm.d/www.conf.default /usr/local/php/etc/php-fpm.d/www.conf

cp /usr/local/src/php-7.1./sapi/fpm/php-fpm.service /lib/systemd/system/php-fpm.service

#配置PHP文件

vi /usr/local/php/etc/php.ini

vi /usr/local/php/etc/php-fpm.conf

vi /usr/local/php/etc/php-fpm.d/www.conf

######测试配置

/usr/local/php/sbin/php-fpm -t

######修改文件权限

chmod  /lib/systemd/system/php-fpm.service

######设置为开机启动

systemctl enable php-fpm.service

######启动php-fpm

systemctl start php-fpm.service

#配置域名

vim /etc/nginx/conf.d/vhost.conf

#添加

server {

    listen       ;

    server_name  www.xxx.com;

    access_log  /var/log/nginx/host.access.log  main;

    location / {

        root   /www/;

        index  index.html index.htm index.php ;

    }

    error_page        /50x.html;

    location = /50x.html {

        root   /usr/share/nginx/html;

    }

    location ~* \.php$ {

        root           /www/;

        fastcgi_pass   127.0.0.1:;

        fastcgi_index  index.php;

        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;

        include        fastcgi_params;

    }

    location ~ /\.ht {

        deny  all;

    }

}

nginx报403

一、缺少index.html或者index.php文件，

二、权限问题，如果nginx没有web目录的操作权限，也会出现403错误。

三、SELinux设置为开启状态（enabled）的原因

文献参考：

　　　　http://blog.csdn.net/u012027999/article/details/73744032，

　　　　http://blog.csdn.net/trh0123/article/details/53899610?utm_source=itdadao&utm_medium=referral，

　　　　https://www.cnblogs.com/zzh10086130/p/6440378.html，

　　　　https://www.cnblogs.com/zzh10086130/p/6440378.html