Debian 9/10 编译安装nginx - 河马的深度解析

Debian 9, Debian 10 都适用于此教程.

实际上，Nginx 的官方repo编译的nginx，已经把能加上的module全部都加上了，因此在一般情况下，建议使用nginx的官方repo来安装nginx. 但是如果说你想添加第三方的module，或者使用最新的openssl 的话，在或者更改一下nginx 的安装路径的话，就需要自己编译了. 此篇教程尽量按照nginx官方repo的configure来编译安装openssl.

在一台全新安装的Debian 9或者Debian 10上:

1) update system and install building softwares

apt update 
apt upgrade 
# some upgrades need reboot 
reboot 
# install building componenets 
apt install build-essential git tree

2) add nginx username and group, identical to the one nginx offical repo creates:

adduser --system --home /nonexistent --shell /bin/false --no-create-home --gecos "nginx user" --group --disabled-login --disabled-password nginx

check created user and group

vi /etc/passwd
vi /etc/group

3) download nginx dependencies source code

cd ~
wget https://ftp.pcre.org/pub/pcre/pcre-8.43.tar.gz && tar xzvf pcre-8.43.tar.gz
wget https://www.zlib.net/zlib-1.2.11.tar.gz && tar xzvf zlib-1.2.11.tar.gz
wget https://www.openssl.org/source/openssl-1.1.1d.tar.gz && tar xzvf openssl-1.1.1d.tar.gz

4) download nginx, configure it and build it

wget https://nginx.org/download/nginx-1.16.1.tar.gz && tar zxvf nginx-1.16.1.tar.gz
cd nginx-1.16.1
./configure --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib/nginx/modules --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock --http-client-body-temp-path=/var/cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx --group=nginx --with-compat --with-file-aio --with-threads --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-mail --with-mail_ssl_module --with-stream --with-stream_realip_module --with-stream_ssl_module --with-stream_ssl_preread_module --with-pcre=../pcre-8.43 --with-pcre-jit --with-zlib=../zlib-1.2.11 --with-openssl=../openssl-1.1.1d --with-openssl-opt=no-nextprotoneg --with-debug

# 注意，这里的configure 是按照nginx 官方repo 的配置来的，并且加上了官方推荐的pcre，zlib以及最新的openssl. 如果需要安装其他的nginx 官方module，比如说geoip module，就需要安装其他的library. 因此在绝大多数的情况下(99%)，这个configure 是推荐的configure.

更清楚一点，可以参照下面:

./configure --prefix=/etc/nginx \
            --sbin-path=/usr/sbin/nginx \
	    --modules-path=/usr/lib/nginx/modules \
	    --conf-path=/etc/nginx/nginx.conf \
	    --error-log-path=/var/log/nginx/error.log \
	    --http-log-path=/var/log/nginx/access.log \
	    --pid-path=/var/run/nginx.pid \
	    --lock-path=/var/run/nginx.lock \
	    --http-client-body-temp-path=/var/cache/nginx/client_temp \
	    --http-proxy-temp-path=/var/cache/nginx/proxy_temp \
	    --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp \
	    --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp \
	    --http-scgi-temp-path=/var/cache/nginx/scgi_temp \
	    --user=nginx \
	    --group=nginx \
	    --with-compat \
	    --with-file-aio \
	    --with-threads \
	    --with-http_addition_module \
	    --with-http_auth_request_module \
	    --with-http_dav_module \
	    --with-http_flv_module \
	    --with-http_gunzip_module \
	    --with-http_gzip_static_module \
	    --with-http_mp4_module \
	    --with-http_random_index_module \
	    --with-http_realip_module \
	    --with-http_secure_link_module \
	    --with-http_slice_module \
	    --with-http_ssl_module \
	    --with-http_stub_status_module \
	    --with-http_sub_module \
	    --with-http_v2_module \
	    --with-mail \
	    --with-mail_ssl_module \
	    --with-stream \
	    --with-stream_realip_module \
	    --with-stream_ssl_module \
	    --with-stream_ssl_preread_module \	
	    --with-pcre=../pcre-8.43 \
	    --with-pcre-jit \
            --with-zlib=../zlib-1.2.11 \
	    --with-openssl=../openssl-1.1.1d \
	    --with-openssl-opt=no-nextprotoneg \			
	    --with-debug

make
make install

go to home

 cd ~

symlink /usr/lib/nginx/modules to /etc/nginx/modules

ln -s /usr/lib/nginx/modules /etc/nginx/modules
mkdir /var/cache/nginx -p
mkdir /etc/nginx/vhost -p

5) 创建systemd 模式的nginx service

nano /lib/systemd/system/nginx.service

添加下面的配置

[Unit]
Description=nginx - high performance web server
Documentation=http://nginx.org/en/docs/
After=network-online.target remote-fs.target nss-lookup.target
Wants=network-online.target

[Service]
Type=forking
PIDFile=/var/run/nginx.pid
ExecStartPre=/usr/sbin/nginx -t -c /etc/nginx/nginx.conf
ExecStart=/usr/sbin/nginx -c /etc/nginx/nginx.conf
ExecReload=/bin/kill -s HUP $MAINPID
ExecStop=/bin/kill -s TERM $MAINPID

[Install]
WantedBy=multi-user.target

让新的service生效:

systemctl daemon-reload

start nginx service and auto start on boot

systemctl enable nginx.service
systemctl start nginx.service

Check if nginx auto starts on server reboot

systemctl is-enabled nginx.service

Check nginx status

systemctl status nginx.service

Leave a Reply Cancel reply