LNAMP架构项目一

一、第一阶段

假设：公司初期只有一台web服务器，搭建Web服务器的脚本如下：

 1 #检查环境

 2 setenforce 0 &> /dev/null

 3 sed -i s/=enforcing/=disabled/g /etc/selinux/config

 4 systemctl restart firewalld

 5 #使用CentOS系统原始源下载相关软件

 6 yum -y remove maria*

 7 echo '[mysql57-community]

 8 name=MySQL 5.7 Community Server

 9 baseurl=http://repo.mysql.com/yum/mysql-5.7-community/el/7/$basearch/

10 enabled=1

11 gpgcheck=0

12 ' > /etc/yum.repos.d/mysql57-community.repo

13 yum clean all && yum makecache -q

14 yum -y install epel-release -q

15 yum -y install vim bash-com* net-tools unzip nginx httpd php php-mysql mysql-com*server -q

16 #使用nginx实现动静分离，搭建网站

17 sed -i '42s/80/81/g' /etc/httpd/conf/httpd.conf

18 sed -i '38,$'c} /etc/nginx/nginx.conf

19 echo " server {

20     listen    80;

21     server_name    3344.com;

22     location ~*\.php$ {

23     proxy_pass    http://127.0.0.1:81;

24     }

25     location / {

26     root    /var/www/html;

27     }

28 }" > /etc/nginx/conf.d/3344.conf

29 systemctl restart httpd nginx

30 systemctl enable httpd nginx -q

31 firewall-cmd --add-port=80/tcp

32 firewall-cmd --add-port=80/tcp --permanent -q

33 #配置mysql数据库，开启二进制日志，创建数据库及用户

34 sed -i 4a"server-id=1\nlog-bin=binlog" /etc/my.cnf

35 systemctl restart mysqld

36 systemctl enable mysqld

37 PW=`cat /var/log/mysqld.log | grep password |head -n 1 |awk '{print $NF}'`

38 mysql -p$PW --connect-expired-password -e "alter user 'root'@'localhost' identified by 'Ryz0304/1';"

39 echo "[client]

40 user=root

41 password='Ryz0304/1'" > /root/.my.cnf #将数据库的用户密码写入配置文件中，方便登录

42 mysql -e "create database wordpress;"

43 mysql -e "grant all on wordpress.* to 'wordpress'@'localhost' identified by 'W0rdpress.';"

44 mysql -e "flush privileges;"

45 rm -rf /var/www/html/*

46 chmod -R 777 /var/www/html

47 #上传代码至nginx的工作目录/var/www/html（自定义的）

48 #浏览器访问即可

问题：

1、安装 MySQL 5.7 版本，需要卸载系统自带的mariadb-*

2、MySQL 5.7 版本安装完成后，启动命令时systemctl start mysqld，必须是mysqld；且第一次进入数据库时需要查看mysql的初始密码（/var/log/mysqld.log）

二、第二阶段

为防止一台服务器发生故障，需要动态添加一台新的服务器，使其成为主备关系，在第一台服务器宕机的情况下，web服务还可以正常运作：

#完成2台服务器的同时搭建

#各服务器的密码

MM=0304

#检查环境

setenforce 0 &> /dev/null

sed -i s/=enforcing/=disabled/g /etc/selinux/config

systemctl restart firewalld

systemctl enable firewalld &> /dev/null

echo "10.0.0.11 s1

10.0.0.12 s2" >>/etc/hosts

sshpass -p $MM scp -r /etc/hosts 10.0.0.12:/etc

ssh-keygen -t rsa -P "" -f /root/.ssh/id_rsa &> /dev/null

cp /root/.ssh/id_rsa.pub /root/.ssh/authorized_keys

sed -i 35c'StrictHostKeyChecking no' /etc/ssh/ssh_config

#配置yum源：使用原始CentOS系统的原始源，安装epel源，配置mysql源，安装服务

for a in s{1..2}

do

sshpass -p $MM scp -r /root/.ssh $a:/root

ssh $a "yum -y remove maria*"

ssh $a "echo '[mysql57-community]

name=MySQL 5.7 Community Server

baseurl=http://repo.mysql.com/yum/mysql-5.7-community/el/7/\$basearch/

enabled=1

gpgcheck=0

' > /etc/yum.repos.d/mysql57-community.repo

yum clean all -q && yum makecache -q

yum -y install epel-release -q

yum -y install vim bash-com* net-tools unzip nginx httpd php php-mysql mysql-com*server -q"

done

#配置nginx+httpd+php动静分离

for b in s{1..2}

do

ssh $b "sed -i '42s/80/81/g' /etc/httpd/conf/httpd.conf"

ssh $b "sed -i '38,$'c} /etc/nginx/nginx.conf"

ssh $b "echo \" server {

    listen    80;

    server_name    3344.com;

    location ~*\.php\$ {

    proxy_pass    http://127.0.0.1:81;

    }

    location / {

    root    /var/www/html;

    }

}\" > /etc/nginx/conf.d/3344.conf"

ssh $b "systemctl restart httpd nginx

systemctl enable httpd nginx -q

firewall-cmd --add-port=80/tcp

firewall-cmd --add-port=80/tcp --permanent -q"

done

#配置nginx+keepalived实现负载均衡和高可用

for c in s{1..2}

do

ssh $c "cat >/etc/nginx/conf.d/3344.conf <<EOF

 server {

    listen    80;

    location ~*\.php\$ {

    proxy_pass    http://127.0.0.1:81;

    }

    location / {

    root    /var/www/html;

    proxy_pass http://3344.com;

    }

}

upstream 3344.com {

    server 10.0.0.11;

    server 10.0.0.12;

}

EOF

"

ssh $c "cat > /etc/keepalived/keepalived.conf<<EOF

! Configuration File for keepalived

vrrp_instance VI_1 {

    state MASTER

    interface ens33

    virtual_router_id 51

    priority 100

    advert_int 1

    authentication {

        auth_type PASS

        auth_pass 1111

    }

    virtual_ipaddress {

        10.0.0.100

    }

}

EOF

"

ssh $c "firewall-cmd --add-port=80/tcp --permanent"

ssh $c "firewall-cmd --direct --permanent --add-rule ipv4 filter INPUT 0 --protocol vrrp -j ACCEPT"

ssh $c "firewall-cmd --reload"

ssh $c "systemctl enable keepalived" $> /dev/null

ssh $c "systemctl restart nginx keepalived"

done

ssh s2 "sed -i s/MASTER/BACKUP/g /etc/keepalived/keepalived.conf"

ssh s2 "sed -i s/100/90/g /etc/keepalived/keepalived.conf"

ssh s2 "systemctl restart keepalived"

#mysql5.7配置一

sed -i 4a'server-id=1\nlog-bin=log' /etc/my.cnf

firewall-cmd --add-port=3306/tcp --permanent

firewall-cmd --reload

systemctl enable mysqld

systemctl restart mysqld

PWD1=`cat /var/log/mysqld.log |grep pass |head -n 1|awk '{print $NF}'`

cat > ~/.my.cnf <<EOF

[mysql]

user=root

password='$PWD1'

EOF

mysql --connect-expired-password -e "alter user 'root'@'localhost' identified by 'Ryz0304.';"

cat > ~/.my.cnf <<EOF

[mysql]

user=root

password='Ryz0304.'

EOF

mysql -e "grant  REPLICATION SLAVE  on *.* to 'repl'@'10.0.0.%' identified by 'Repl432/1';"

mysql -e "create database wordpress;"

mysql -e "grant all on wordpress.* to 'wordpress'@'s1' identified by 'W0rdpress/1';"

mysql -e "grant all on wordpress.* to 'wordpress'@'s2' identified by 'W0rdpress/1';"

mysql -e "flush privileges;"

#mysql5.7配置二

ssh s2 "sed -i 4a'server-id=2\nlog-bin=log' /etc/my.cnf"

ssh s2  "firewall-cmd --add-port=3306/tcp --permanent"

ssh s2  "firewall-cmd --reload"

ssh s2  "systemctl enable mysqld"

ssh s2  "systemctl restart mysqld"

PWD2=`ssh s2 "cat /var/log/mysqld.log" |grep pass |head -n 1|awk '{print $NF}'`

ssh s6 "cat > ~/.my.cnf <<EOF

[mysql]

user=root

password='$PWD2'

EOF"

ssh s2 "mysql --connect-expired-password -e \"alter user 'root'@'localhost' identified by 'Ryz0304.';\""

ssh s2 "cat > ~/.my.cnf <<EOF

[mysql]

user=root

password='Abc1234/1'

EOF"

ssh s2 "mysql -e \"grant  REPLICATION SLAVE  on *.* to 'repl'@'10.0.0.%' identified by 'Repl432/1';\""

ssh s2 "mysql -e \"grant all on wordpress.* to 'wordpress'@'s1' identified by 'W0rdpress/1';\""

ssh s2 "mysql -e \"grant all on wordpress.* to 'wordpress'@'s2' identified by 'W0rdpress/1';\""

ssh s2 "mysql -e \"flush privileges;\""

#主主

FILE1=`mysql -e "show master status\G"|grep File |awk '{print $2}'`

POSI1=`mysql -e "show master status\G"|grep Posit |awk '{print $2}'`

FILE2=`ssh s2 "mysql -e \"show master status\G\""|grep File |awk '{print $2}'`

POSI2=`ssh s2 "mysql -e \"show master status\G\""|grep Posit |awk '{print $2}'`

mysql -e "change master to master_host='s5',master_user='repl',master_password='Repl432/1',master_port=3306,master_log_file='$FILE1',master_log_pos=$POSI1;"

mysql -e "start slave;"

ssh s2 "mysql -e \"change master to master_host='s6',master_user='repl',master_password='Repl432/1',master_port=3306,master_log_file='$FILE2',master_log_pos=$POSI2;\""

ssh s2 "mysql -e \"start slave;\""

三、第三阶段

四、第四阶段

五、第五阶段

六、架构

巴特西

LNAMP架构项目一

一、第一阶段

二、第二阶段

三、第三阶段

最新文章

热门文章