海运的博客

Apache基于模块化设计，编译完成后还可动态编译添加其它模块，此功能Apache编译时需添加--enable-so参数，1.x版本--enable-module=so。
查看已加载的模块：

#https://www.haiyun.me
/usr/local/httpd/bin/httpd -M

以编译添加expires模块为例：

cd /src/httpd/modules/metadata/ #进入源码模块目录
/usr/local/httpd/bin/apxs -c -i -a mod_expires.c #编译、安装、启用expires模块
/etc/init.d/httpd restart #重新启动httpd加载

安装编译环境及组件：

#https://www.haiyun.me
yum -y install gcc gcc-c++ make autoconf libjpeg libjpeg-devel libpng libpng-devel freetype freetype-devel \
libxml2 libxml2-devel zlib zlib-devel glibc glibc-devel glib2 glib2-devel bzip2 bzip2-devel ncurses ncurses-devel \
curl curl-devel e2fsprogs e2fsprogs-devel krb5 krb5-devel libidn libidn-devel openssl openssl-devel patch unzip vim-enhanced libtool-ltdl-devel libtool
wget http://sourceforge.net/projects/mcrypt/files/Libmcrypt/2.5.8/libmcrypt-2.5.8.tar.gz
tar zxvf libmcrypt-2.5.8.tar.gz
cd libmcrypt-2.5.8
./configure
make
make install
cd ../
wget http://ftp.gnu.org/pub/gnu/libiconv/libiconv-1.14.tar.gz
tar zxvf libiconv-1.14.tar.gz
cd libiconv-1.14
./configure
make
make install
cd ../
wget http://nchc.dl.sourceforge.net/project/mhash/mhash/0.9.9.9/mhash-0.9.9.9.tar.gz
tar zxvf mhash-0.9.9.9.tar.gz
cd mhash-0.9.9.9
./configure
make
make install
cd ../
ldconfig
wget http://nchc.dl.sourceforge.net/project/mcrypt/MCrypt/2.6.8/mcrypt-2.6.8.tar.gz
tar zxvf mcrypt-2.6.8.tar.gz
cd mcrypt-2.6.8
./configure
make
make install
cd ../

安装Apache2.22：

wget http://labs.renren.com/apache-mirror/httpd/httpd-2.2.22.tar.gz
tar zxvf httpd-2.2.22.tar.gz
cd httpd-2.2.22
#./configure --prefix=/usr/local/httpd --enable-so --enable-mods-shared=most
#动态编译大部分常用模块
./configure --prefix=/usr/local/httpd \
--sysconfdir=/etc/httpd \
--enable-so \
--enable-ssl  \
--enable-rewrite \
--enable-expires \
--enable-headers \
--enable-deflate \
--with-mpm=worker
make
make install
cp /usr/local/httpd/bin/apachectl /etc/init.d/httpd
chmod 755 /etc/init.d/httpd
sed -i '1a # chkconfig: 345 85 15' /etc/init.d/httpd
/etc/init.d/httpd start
chkconfig --level 3 httpd on
cd ../

安装Mysql5.1.63：

wget http://ftp.jaist.ac.jp/pub/mysql/Downloads/MySQL-5.1/mysql-5.1.63.tar.gz
tar zxvf mysql-5.1.63.tar.gz
cd mysql-5.1.63
./configure --prefix=/usr/local/mysql \
--without-debug \
--with-unix-socket-path=/tmp/mysql.sock \
--with-mysqld-ldflags=-all-static \
--with-charset=utf8 \
--with-extra-charsets=gbk,gb2312 \
--with-big-tables \
--with-readline \
--enable-local-infile \
--enable-assembler \
--enable-thread-safe-client 
make
make install
cp support-files/my-medium.cnf /etc/my.cnf
cp support-files/mysql.server /etc/init.d/mysqld
chmod 755 /etc/init.d/mysqld
chkconfig --level 3 mysqld on
useradd -s /sbin/nologin -M mysql
/usr/local/mysql/bin/mysql_install_db --user=mysql
ln -s /usr/local/mysql/bin/mysql /usr/bin/mysql
ln -s /usr/local/mysql/bin/mysqldump /usr/bin/mysqldump
ln -s /usr/local/mysql/bin/myisamchk /usr/bin/myisamchk
/etc/init.d/mysqld start
/usr/local/mysql/bin/mysqladmin -u root password "password"
cd ../

安装PHP5.3.13：

wget http://cn.php.net/distributions/php-5.3.13.tar.gz
tar zxvf php-5.3.13.tar.gz
cd php-5.3.13
./configure --prefix=/usr/local/php  \
--with-apxs2=/usr/local/httpd/bin/apxs \
--with-mysql=/usr/local/mysql \
--with-mysqli=/usr/local/mysql/bin/mysql_config \
--disable-debug \
--with-iconv-dir \
--with-freetype-dir \
--with-jpeg-dir \
--with-png-dir \
--with-zlib \
--with-libxml-dir \
--with-mcrypt \
--with-gd \
--with-openssl \
--with-mhash \
--with-xmlrpc \
--with-curl \
--enable-inline-optimization \
--enable-xml \
--enable-mbstring \
--enable-gd-native-ttf \
--enable-sockets \
--enable-zip 
make ZEND_EXTRA_LIBS='-liconv'
make install
cp php.ini-production /usr/local/php/etc/php.ini
ln -s /usr/local/php/bin/php /usr/bin/php
ln -s /usr/local/php/bin/phpize /usr/bin/phpize
cd ../

配置Apache支持PHP程序：

cat >>/etc/httpd/httpd.conf <<EOF
AddType application/x-httpd-php .php
AddType application/x-httpd-source-php .phps
EOF
sed -i 's/index.html/index.html index.php/g' /etc/httpd/httpd.conf
/etc/init.d/httpd restart

测试PHP：

cat >> /usr/local/httpd/htdocs/phpinfo.php <<EOF
<?php  
phpinfo();  
?> 
EOF

prefork是Unix平台上默认的MPM，编译时可使用参数./configure –with-mpm=worker自定义。
查看当前MPM：

#https://www.haiyun.me
httpd -V|grep mpm
 -D APACHE_MPM_DIR="server/mpm/prefork"

prefork采用预派生子进程方式，用单独的子进程来处理不同的请求，每个进程时间内只能维持一个连接，进程之间彼此独立。
prefork配置：

<IfModule prefork.c>
ServerLimit      256 #服务器端连接数限制，最大2000
StartServers       8 #初始启动8个进程
MinSpareServers    5 #最小空闲进程数
MaxSpareServers   20 #最大空闲进程数，超过限制父进程将杀死多余的子进程。
MaxClients       256 #最大连接、进程数，一般和ServerLimit相同，超过此限制的请求进入等候队列。
MaxRequestsPerChild  4000 #每个进程生存期间可处理请求次数，超过终结此进程。
</IfModule>

worker支持多线程和多进程混合模型的MPM，使用多线程来处理，可以处理相对大量的请求，而系统资源的开销要小于基于prefork的服务器。
worker配置：

<IfModule worker.c>
StartServers         10 #默认启动子进程数
MaxClients         150 #同一时间最大连接数
MinSpareThreads     25 #最小空闲线程数
MaxSpareThreads     75 #最大空闲线程数
ThreadsPerChild     25 #每个进程建立的常驻线程数
MaxRequestsPerChild  40000 #每个进程生存期间可处理请求次数，超过终结此进程。
</IfModule>

查看历史登录记录：

last
utmpdump /var/log/btmp

清除历史登录记录：

echo > /var/log/wtmp

查看失败登录记录：

lastb
utmpdump /var/log/btmp

清除失败登录记录：

echo > /var/log/btmp

清除历史命令：

history -c
echo > ~/.bash_history 

主服务器需安装配置inotify-tools，用于实时监控服务器文件变化。
inotify-tool实时监控并发送文件到rsync从服务器脚本：

#/bin/bash
host=https://www.haiyun.me
src=/var/www/html
dst=www
user=back
passwd=passwd
echo "$passwd" > /etc/rsync.pass
chmod 600 /etc/rsync.pass
inotifywait -mrq -e close_write,create,delete,attrib --timefmt '%d/%m/%y %H:%M' --format '%T %w%f %e' $src\
|while read files 
do
    file=`echo $files|awk '{print $3}'`
    rsync -vzrtopg --delete --progress $file $user@$host::$dst --password-file=/etc/rsync.pass
    echo "$files was rsynced" >> /var/log/rsync.log
done

从服务器配置rsync：

uid = nobody
gid = nobody
use chroot = no
max connections = 10
strict modes = yes
log file = /var/log/rsyncd.log
pid file = /var/run/rsyncd.pid
lock file = /var/run/rsyncd.lock

[www]
path = /home/wwwroot
comment = www file
ignore errors
hosts allow = *
list = false
auth users = onovps
secrets file = /etc/server.pass
read only = no
write only = no
uid = root
gid = root

建立验证文件，root权限可查看：

echo "onovps:passwd" > /etc/server.pass 
chmod 600 /etc/server.pass

启动rsync进程：

rsync --daemon
echo "rsync --daemon" >> /etc/rc.local