Chinaunix首页 | 论坛 | 博客

网站运维与管理cyz.blog.chinaunix.net

首页　| 　博文目录　| 　关于我

ly_cyz

  • 博客访问： 254733
  • 博文数量： 188
  • 博客积分： 0
  • 博客等级： 民兵
  • 技术积分： -30
  • 用 户 组： 普通用户
  • 注册时间： 2017-03-29 11:17
文章分类

全部博文（188）

文章存档

2013年（8）

2012年（5）

2011年（13）

2010年（26）

2009年（63）

2008年（20）

2007年（32）

2006年（21）

我的朋友
最近访客
推荐博文
相关博文
Lnamp和Lamp自动配置脚本

分类： Python/Ruby

2011-07-26 08:59:20

  1. #!/bin/bash
  3. #######################################################################
  5. # File: Autoconfig.sh #
  7. # Description: Linux Security Configuration Tool #
  9. # Language: GNU Bourne-Again Shell #
  11. # Version: 2.0 #
  13. # Date: 2011-7-21 #
  15. # Corp.: #
  17. # Author: changyuzeng #
  19. ### END INIT INFO #
  21. #######################################################################
  23. #change yum source
  25. if [ ! -f /etc/yum.repos.d/CentOS-Base-163.repo ] && [ ! -f /etc/yum.repos.d/CentOS-Base-sohu.repo ];then
  27. cd /etc/yum.repos.d/
  29. wget
  31. wget
  33. yum makecache > /dev/null 2>&1
  35. fi
  37. ############### Install dialog###############
  39. echo "Dialog now instaling,please wait..."
  41. yum -y install dialog > /dev/null 2>&1
  45. #Ntp server
  47. yum install -y ntp > /dev/null 2>&1
  49. echo '0 23 * * * /usr/sbin/ntpdate 210.72.145.44' > /tmp/crontab2.tmp
  51. crontab /tmp/crontab2.tmp
  55. #timezone
  57. rm -rf /etc/localtime
  59. ln -s /usr/share/zoneinfo/Asia/Shanghai /etc/localtime > /dev/null 2>&1
  63. #Disable SeLinux
  65. if [ -s /etc/selinux/config ]; then
  67. sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config
  69. fi
  73. INSTALL_SRC=/usr/local/src
  75. lamp_log=/root/lamp_install.log
  77. sed -i '6c ulimit -SHn 65535' /etc/rc.local
  81. ###path###
  83. stat=`grep -n '/usr/local/apache' /etc/profile`
  85. if [ $? = 1 ];then
  87. sed -i '/export PATH/i PATH=$PATH:/usr/local/mysql/bin:/usr/local/apache/sbin:/usr/local/php/bin:/usr/local/php/sbin:/usr/local/bin' /etc/profile
  89. source /etc/profile
  91. fi
  93. stat=`grep -n '/usr/local/mysql/lib' /etc/ld.so.conf`
  95. if [ $? = 1 ];then
  97. sed -i '/include/a /lib\n/usr/lib\n/usr/local/lib\n/usr/local/mysql/lib/\n/usr/local/php/lib' /etc/ld.so.conf
  99. ldconfig
  101. fi
  103. #######################################################################
  105. V_DELUSER="adm lp sync shutdown halt news uucp operator games gopher ftp"
  107. V_DELGROUP="adm lp news uucp games gopher floppy dip pppusers slipusers"
  109. V_PASSMINLEN=8
  111. V_HISTSIZE=50
  113. V_TMOUT=600
  115. V_GROUPNAME=wheel
  117. V_SERVICE="bluetooth cups firstboot hidd ip6tables kudzu nfslock portmap"
  119. V_TTY="5|6"
  121. V_SUID=(
  123. '/usr/bin/chage'
  125. '/usr/bin/gpasswd'
  127. '/usr/bin/wall'
  129. '/usr/bin/chfn'
  131. '/usr/bin/chsh'
  133. '/usr/bin/newgrp'
  135. '/usr/bin/write'
  137. '/usr/sbin/usernetctl'
  139. '/bin/traceroute'
  141. '/bin/mount'
  143. '/bin/umount'
  145. '/sbin/netreport'
  147. )
  149. ###########################################################################
  151. install_init() {
  153. clear
  155. echo "========================================================================="
  157. echo "A tool to auto-compile & install Nginx+MySQL+PHP on Linux "
  159. echo ""
  161. echo "For more information please Contact administrators"
  163. echo "========================================================================="
  169. set main domain name
  171. domain=""
  173. echo "Please input domain:"
  175. read -p "(Default domain: ):" domain
  177. if [ "$domain" = "" ]; then
  179. domain=""
  181. fi
  183. echo "==========================="
  185. echo domain="$domain"
  187. echo "==========================="
  191. #set webroot
  193. webroot=/data/webroot
  195. echo "Please input webroot:"
  197. read -p "(Default webroot: /data/weboot):" webroot
  199. if [ "$webroot" = "" ]; then
  201. webroot=/data/webroot
  203. fi
  205. echo "==========================="
  207. echo webroot=$webroot
  209. echo "==========================="
  213. #set mysql root password
  217. echo "==========================="
  221. mysqlrootpwd="bitauto123"
  223. echo "Please input the root password of mysql:"
  225. read -p "(Default password: bitauto123):" mysqlrootpwd
  227. if [ "$mysqlrootpwd" = "" ]; then
  229. mysqlrootpwd="bitauto123"
  231. fi
  233. echo "==========================="
  235. echo mysqlrootpwd="$mysqlrootpwd"
  237. echo "==========================="
  239. get_char()
  241. {
  243. SAVEDSTTY=`stty -g`
  245. stty -echo
  247. stty cbreak
  249. dd if=/dev/tty bs=1 count=1 2> /dev/null
  251. stty -raw
  253. stty echo
  255. stty $SAVEDSTTY
  257. }
  259. echo ""
  261. echo "Press any key to start..."
  263. char=`get_char`
  267. #webroot log
  269. if [ ! -d $webroot ];then
  271. mkdir $webroot
  273. chown $webroot -R
  275. fi
  277. if [ ! -d /var/logs ];then
  279. mkdir -p /var/logs
  281. chown -R www:www /var/logs
  283. fi
  285. #################uninstall php mysql httpd#############################
  287. echo "Uninstall system package 'php mysql httpd' "
  289. yum -y erase php* mysql* httpd* > /dev/null 2>&1
  293. #########################################################
  295. # #
  297. # Download and Uncompress lamp source packet #
  299. # #
  301. #####################Uncompress file#####################
  303. if [ ! -d /usr/local/src ];then
  305. mkdir /usr/local/src
  307. fi
  309. if [ ! -f /usr/local/src/software.tar ];then
  311. echo "Download Lamp && Lnmp source packet..."
  313. cd /usr/local/src
  315. wget
  317. tar zxvf software.tar.gz -C $INSTALL_SRC
  319. mv software.tar.gz software.tar > /dev/null 2>&1
  321. fi
  325. echo "Uncompress Lamp && Lnmp source packet..."
  327. sleep 5
  329. for i in $INSTALL_SRC/*gz
  331. do
  333. tar -xzf $i -C $INSTALL_SRC
  335. done
  337. for i in $INSTALL_SRC/*.tar.bz2
  339. do
  341. tar -xjf $i -C $INSTALL_SRC
  343. done
  345. for i in $INSTALL_SRC/*.zip
  347. do
  349. unzip -o $i
  351. done
  353. ##################create user and group############
  355. for a in www mysql;do
  357. id $a >/dev/null 2>&1
  359. if [ $? != 0 ];then
  361. groupadd $a && useradd $a -g $a -s /sbin/nologin -d /dev/null -M -c "for $a"
  363. echo "www and mysql user has been added to your system..."
  365. fi
  367. done
  369. ######################edit test.php################
  371. touch $webroot/test.php
  373. cat << EOF > $webroot/test.php
  377. phpinfo();
  379. ?>
  381. EOF
  385. ################Base develop Environment###########
  387. yum -y install zlib zlib-devel libxml2-devel curl curl-devel libidn-devel e2fsprogs-devel keyutils-libs-devel libselinux-devel libsepol-devel krb5-devel openssl-devel curl*
  389. yum -y install gcc gcc-c++ flex bison autoconf automake bzip2-devel zlib-devel ncurses-devel libjpeg-devel libpng-devel libtiff-devel freetype-devel pam-devel expat-devel openssl-devel gettext-devel libtool* flex aspell-devel gmp-devel freetype-devel
  393. }
  397. install_apache() {
  401. echo "+------------------------------------------------------+"
  403. echo "+ We will install apache service on the local computer +"
  405. echo "+------------------------------------------------------+"
  409. if [ -s "$INSTALL_SRC/httpd-2.2.19.tar.gz" ] && [ -d "$INSTALL_SRC/httpd-2.2.19" ];then
  411. echo "httpd-2.2.19.tar.gz [found]"
  413. cd $INSTALL_SRC/httpd-2.2.19
  415. cd srclib/apr
  417. ./configure --prefix=/usr/local/apr --enable-threads --enable-other-child --enable-static
  419. make && make install
  421. cd ../apr-util
  423. ./configure --prefix=/usr/local/apr-util --with-apr=/usr/local/apr
  425. make && make install
  427. cd ../..
  429. ./configure --prefix=/usr/local/apache --with-apr=/usr/local/apr --with-apr-util=/usr/local/apr-util --enable-so --enable-rewrite --enable-mods-shared=all --enable-rewrite --enable-static --enable-cache --enable-threads --disable-version
  431. make &&make install
  433. if [ $? = 0 ];then
  435. \cp /usr/local/apache/bin/apachectl /etc/init.d/httpd
  437. chmod 755 /etc/init.d/httpd
  439. sed -i '2 a # chkconfig: 2345 50 90' /etc/init.d/httpd
  441. sed -i '3 a\# description: Activates/Deactivates Apache Web Server' /etc/init.d/httpd
  443. chkconfig --add httpd
  445. chkconfig httpd on
  449. sed -i 's#User daemon#User www#' /usr/local/apache/conf/httpd.conf
  451. sed -i 's#Group daemon#Group www#' /usr/local/apache/conf/httpd.conf
  453. sed -i '$ a\ServerTokens Prod' /usr/local/apache/conf/httpd.conf
  455. sed -i 's#ErrorLog "logs/error_log"#ErrorLog "/var/logs/error_log"#' /usr/local/apache/conf/httpd.conf
  457. sed -i 's#CustomLog "logs/access_log" common#CustomLog "/var/logs/access_log" common#' /usr/local/apache/conf/httpd.conf
  459. sed -i 's/#ServerName '$domain':80/g' /usr/local/apache/conf/httpd.conf
  461. sed -i 's#DocumentRoot "/usr/local/apache/htdocs"# DocumentRoot "'$webroot'"#' /usr/local/apache/conf/httpd.conf
  463. sed -i 's###' /usr/local/apache/conf/httpd.conf
  467. echo "test apache running!" >> $lamp_log
  469. /usr/local/apache/bin/apachectl -t >> $lamp_log
  471. /usr/local/apache/bin/apachectl start >> $lamp_log
  473. fi
  475. fi
  477. echo "=============================="
  479. echo " apache install finished "
  481. echo "=============================="
  483. }
  487. install_mysql() {
  489. ##################################################install && configure mysql#############################################
  491. echo "+------------------------------------------------------+"
  493. echo "+ We will install mysql service on the local computer +"
  495. echo "+------------------------------------------------------+"
  497. if [ -s "$INSTALL_SRC/mysql-5.5.14.tar.gz" ] && [ -d "$INSTALL_SRC/mysql-5.5.14" ];then
  499. echo " Mysql installing now..." >> $lamp_log
  501. cd $INSTALL_SRC/libiconv-1.13.1
  503. ./configure --prefix=/usr/local
  505. make && make install >> $lamp_log
  507. cd ../
  511. cd libmcrypt-2.5.8/
  513. ./configure
  515. make && make install >> $lamp_log
  517. /sbin/ldconfig
  519. cd libltdl/
  521. ./configure --enable-ltdl-install
  523. make&&make install >> $lamp_log
  525. cd ../../
  529. cd mhash-0.9.9.9/
  531. ./configure
  533. make&&make install >> $lamp_log
  535. cd ../
  537. ln -s /usr/local/lib/libmcrypt.la /usr/lib/libmcrypt.la
  539. ln -s /usr/local/lib/libmcrypt.so /usr/lib/libmcrypt.so
  541. ln -s /usr/local/lib/libmcrypt.so.4 /usr/lib/libmcrypt.so.4
  543. ln -s /usr/local/lib/libmcrypt.so.4.4.8 /usr/lib/libmcrypt.so.4.4.8
  545. ln -s /usr/local/lib/libmhash.a /usr/lib/libmhash.a
  547. ln -s /usr/local/lib/libmhash.la /usr/lib/libmhash.la
  549. ln -s /usr/local/lib/libmhash.so /usr/lib/libmhash.so
  551. ln -s /usr/local/lib/libmhash.so.2 /usr/lib/libmhash.so.2
  553. ln -s /usr/local/lib/libmhash.so.2.0.1 /usr/lib/libmhash.so.2.0.1
  555. ln -s /usr/local/bin/libmcrypt-config /usr/bin/libmcrypt-config
  559. cd mcrypt-2.6.8/
  561. /sbin/ldconfig
  563. ./configure
  565. make&&make install >> $lamp_log
  567. cd ../
  571. mkdir -p /data/mysql
  573. chown -R mysql.mysql /data/mysql
  575. cd cmake-2.8.4/
  577. ./bootstrap
  579. gmake && gmake install >> $lamp_log
  581. cd ../
  587. cd mysql-5.5.14/
  589. cmake . \
  591. -DSYSCONFDIR=/etc \
  593. -DCMAKE_INSTALL_PREFIX:PATH=/usr/local/mysql \
  595. -DCOMMUNITY_BUILD:BOOL=ON \
  597. -DENABLED_PROFILING:BOOL=ON \
  599. -DENABLE_DEBUG_SYNC:BOOL=OFF \
  601. -DMYSQL_DATADIR:PATH=/data/mysql \
  603. -DWITH_MYISAM_STORAGE_ENGINE=1
  605. -DWITH_INNOBASE_STORAGE_ENGINE=1
  607. -DWITH_ARCHIVE_STORAGE_ENGINE=1
  609. -DWITH_BLACKHOLE_STORAGE_ENGINE=1
  611. -DDEFAULT_CHARSET=utf8
  613. -DDEFAULT_COLLATION=utf8_general_ci
  615. -DWITH_EXTRA_CHARSETS:STRING=all \
  617. -DWITH_SSL:STRING=bundled \
  619. -DWITH_UNIT_TESTS:BOOL=OFF \
  621. -DWITH_ZLIB:STRING=bundled \
  623. -LH
  625. make
  627. make install >> $lamp_log
  631. if [ $? = 0 ];then
  633. \cp support-files/my-huge.cnf /etc/my.cnf
  635. sed -i '30 a \open_files_limit = 10240\nmax_connections = 5000' /etc/my.cnf
  639. chown -R root.mysql /usr/local/mysql/
  641. /usr/local/mysql/scripts/mysql_install_db \
  643. --defaults-file=/etc/my.cnf \
  645. --basedir=/usr/local/mysql \
  647. --datadir=/data/mysql \
  649. --user=mysql
  651. chown -R mysql.mysql /data/mysql
  653. \cp support-files/mysql.server /etc/init.d/mysqld
  655. chmod 755 /etc/init.d/mysqld
  657. chkconfig --add mysqld
  659. echo "test mysql running!" >> $lamp_log
  661. /etc/init.d/mysqld start
  663. /etc/init.d/mysqld status >> $lamp_log
  665. mysqladmin -u root password $mysqlrootpwd
  667. #./bin/mysql_secure_installation
  669. fi
  671. else
  673. echo" mysql install failed"
  675. fi
  677. echo "=============================="
  679. echo " mysql install finished "
  681. echo "=============================="
  683. }
  687. install_apache-php() {
  691. echo "+------------------------------------------------------------+"
  693. echo "+ We will install "apache php" service on the local computer +"
  695. echo "+------------------------------------------------------------+"
  699. if [ -s "$INSTALL_SRC/php-5.3.6.tar.gz" ] && [ -d "$INSTALL_SRC/php-5.3.6" ];then
  701. echo "php will installing..." >> $lamp_log
  703. cd $INSTALL_SRC/php-5.3.6
  705. ./configure --prefix=/usr/local/php --with-config-file-path=/etc --with-apxs2=/usr/local/apache/bin/apxs --with-mysql=/usr/local/mysql --with-mysqli=/usr/local/mysql/bin/mysql_config --with-iconv-dir=/usr/local --with-freetype-dir --with-jpeg-dir --with-png-dir=/usr/lib --with-zlib --with-libxml-dir --enable-xml --disable-rpath --enable-safe-mode --enable-bcmath --enable-shmop --enable-sysvsem --enable-inline-optimization --with-curl --with-curlwrappers --enable-mbregex --enable-mbstring --with-mcrypt --with-gd --enable-gd-native-ttf --with-mhash --enable-pcntl --enable-sockets --with-xmlrpc --enable-zip --enable-soap --with-openssl --enable-zend-multibyte --with-bz2 --enable-exif --without-pear
  707. make ZEND_EXTRA_LIBS='-liconv' >> $lamp_log
  709. make install >> $lamp_log
  715. if [ $? = 0 ];then
  717. \cp php.ini-production /etc/php.ini
  719. ln -s /usr/local/php/etc/php.ini /etc/php.ini
  721. cd ../
  725. cd memcache-3.0.6
  727. /usr/local/php/bin/phpize
  729. ./configure --with-php-config=/usr/local/php/bin/php-config
  731. make && make install >> $lamp_log
  733. cd ../
  737. cd eaccelerator-0.9.6.1/
  739. /usr/local/php/bin/phpize
  741. ./configure --enable-eaccelerator=shared --with-php-config=/usr/local/php/bin/php-config
  743. make && make install >> $lamp_log
  745. cd ../
  749. cd PDO_MYSQL-1.0.2/
  751. /usr/local/php/bin/phpize
  753. ./configure --with-php-config=/usr/local/php/bin/php-config --with-pdo-mysql=/usr/local/mysql
  755. make && make install >> $lamp_log
  757. cd ../
  761. cd ImageMagick-6.6.9
  763. ./configure
  765. make && make install >> $lamp_log
  767. cd ../
  771. cd imagick-3.1.0b1/
  773. /usr/local/php/bin/phpize
  775. ./configure --with-php-config=/usr/local/php/bin/php-config
  777. make && make install >> $lamp_log
  781. ###zend configure#######
  783. bit=`uname -m`
  785. echo $bit
  787. if [ $bit == i686 ]
  789. then
  791. \cp /usr/local/src/ZendGuardLoader-php-5.3-linux-glibc23-i386/php-5.3.x/ZendGuardLoader.so /usr/local/php/lib/php/extensions/no-debug-non-zts-20090626/
  793. else
  795. cp /usr/local/src/ZendGuardLoader-php-5.3-linux-glibc23-x86_64/php-5.3.x/ZendGuardLoader.so /usr/local/php/lib/php/extensions/no-debug-non-zts-20090626/
  797. fi
  799. sed -i 's#; extension_dir = "./"#extension_dir = "/usr/local/php/lib/php/extensions/no-debug-non-zts-20090626/"\nextension = "memcache.so"\nextension = "pdo_mysql.so"\nextension = "imagick.so"\n#' /etc/php.ini
  801. sed -i 's#output_buffering = Off#output_buffering = On#' /etc/php.ini
  803. sed -i "s#; always_populate_raw_post_data = On#always_populate_raw_post_data = On#g" /etc/php.ini
  805. sed -i "s#; cgi.fix_pathinfo=0#cgi.fix_pathinfo=0#g" /etc/php.ini
  807. sed -i '/;date.timezone/c date.timezone = Asia/Shanghai' /etc/php.ini
  809. sed -i "s#magic_quotes_gpc = Off#magic_quotes_gpc = On#g" /etc/php.ini
  811. mkdir /usr/local/eaccelerator_cache > /dev/null 2>&1
  813. sed -i '$ c ; End:\n\[eaccelerator]\nzend_extension="/usr/local/php/lib/php/extensions/no-debug-non-zts-20090626/eaccelerator.so"\neaccelerator.shm_size="64"\neaccelerator.cache_dir="/usr/local/eaccelerator_cache"\neaccelerator.enable="1"\neaccelerator.optimizer="1"\neaccelerator.check_mtime="1"\neaccelerator.debug="0"\neaccelerator.filter=""\neaccelerator.shm_max="0"\neaccelerator.shm_ttl="3600"\neaccelerator.shm_prune_period="3600"\neaccelerator.shm_only="0"\neaccelerator.compress="1"\neaccelerator.compress_level="9"\n\[Zend Optimizer]\nzend_extension="/usr/local/php/lib/php/extensions/no-debug-non-zts-20090626/ZendGuardLoader.so"\nzend_optimizer.optimization_level=1\nzend_optimizer.encoder_loader=0' /etc/php.ini
  815. sed -i 's#DirectoryIndex index.html#& index.php#' /usr/local/apache/conf/httpd.conf
  817. sed -i '356 c\ AddType application/x-httpd-php-source .php' /usr/local/apache/conf/httpd.conf
  819. sed -i '357 c\ AddType application/x-httpd-php .php' /usr/local/apache/conf/httpd.conf
  821. #sed -i '53 c LoadModule php5_module modules/libphp5.so' /usr/local/apache/conf/httpd.conf
  823. ldconfig
  825. /etc/init.d/httpd restart
  827. echo "---test "apache-php" status----" >> $lamp_log
  829. /usr/local/php/bin/php -v >> $lamp_log
  831. fi
  833. fi
  835. echo "========================== Check install ================================"
  837. echo "CentOS/RadHat auto configure "
  839. echo "========================================================================="
  841. echo ""
  843. echo "For more information please visit http:///"
  845. echo ""
  847. echo "Lamp status manage:"
  849. echo " /etc/init.d/httpd {start|stop|reload|restart|kill|status}"
  851. echo " /etc/init.d/mysqld {start|stop|reload|restart|kill|status}"
  853. echo ""
  855. echo "phpinfo : "
  857. echo "default mysql root password:$mysqlrootpwd"
  859. echo "mysql security configure: mysql_secure_installation"
  861. echo "The path of some dirs:"
  863. echo "mysql dir: /usr/local/mysqld"
  865. echo "php dir: /usr/local/php"
  867. echo "apache dir: /usr/local/apache"
  869. echo "web dir : $webroot"
  871. echo "log dir : /var/logs"
  873. echo ""
  875. echo "========================================================================="
  877. }
  883. install_nginx-php() {
  887. echo "+-----------------------------------------------------------+"
  889. echo "+ We will install "nginx php" service on the local computer +"
  891. echo "+-----------------------------------------------------------+"
  895. if [ -s "$INSTALL_SRC/php-5.3.6.tar.gz" ] && [ -d "$INSTALL_SRC/php-5.3.6" ];then
  897. echo " php-5.3.6.tar.gz [found]"
  899. cd $INSTALL_SRC/php-5.3.6
  901. ./configure --prefix=/usr/local/php --with-config-file-path=/etc --with-mysql=/usr/local/mysql --with-mysqli=/usr/local/mysql/bin/mysql_config --with-iconv-dir=/usr/local --with-freetype-dir --with-jpeg-dir --with-png-dir=/usr/lib --with-zlib --with-libxml-dir --enable-xml --disable-rpath --enable-safe-mode --enable-bcmath --enable-shmop --enable-sysvsem --enable-inline-optimization --with-curl --with-curlwrappers --enable-mbregex --enable-mbstring --with-mcrypt --with-gd --enable-gd-native-ttf --with-mhash --enable-pcntl --enable-sockets --with-xmlrpc --enable-zip --enable-soap --with-openssl --enable-zend-multibyte --with-bz2 --enable-exif --without-pear --enable-fpm --with-fpm-user=www --with-fpm-group=www
  903. make ZEND_EXTRA_LIBS='-liconv' >> $lamp_log
  905. make install >> $lamp_log
  909. if [ $? = 0 ];then
  911. \cp php.ini-production /etc/php.ini
  913. ln -s /usr/local/php/etc/php.ini /etc/php.ini
  915. \cp /usr/local/src/php-fpm.conf /usr/local/php/etc/php-fpm.conf
  917. \cp sapi/fpm/init.d.php-fpm /etc/init.d/php-fpm
  919. chmod 755 /etc/init.d/php-fpm
  921. chkconfig --add php-fpm
  923. chkconfig php-fpm on
  925. /etc/init.d/php-fpm start >> $lamp_log
  927. cd ../
  931. cd memcache-3.0.6
  933. /usr/local/php/bin/phpize
  935. ./configure --with-php-config=/usr/local/php/bin/php-config
  937. make && make install >> $lamp_log
  939. cd ../
  943. cd eaccelerator-0.9.6.1/
  945. /usr/local/php/bin/phpize
  947. ./configure --enable-eaccelerator=shared --with-php-config=/usr/local/php/bin/php-config
  949. make && make install >> $lamp_log
  951. cd ../
  955. cd PDO_MYSQL-1.0.2/
  957. /usr/local/php/bin/phpize
  959. ./configure --with-php-config=/usr/local/php/bin/php-config --with-pdo-mysql=/usr/local/mysql
  961. make && make install >> $lamp_log
  963. cd ../
  967. cd ImageMagick-6.6.9
  969. ./configure
  971. make && make install >> $lamp_log
  973. cd ../
  977. cd imagick-3.1.0b1/
  979. /usr/local/php/bin/phpize
  981. ./configure --with-php-config=/usr/local/php/bin/php-config
  983. make && make install >> $lamp_log
  987. ###zend configure#######
  989. bit=`uname -m`
  991. echo $bit
  993. if [ $bit == i686 ]
  995. then
  997. \cp /usr/local/src/ZendGuardLoader-php-5.3-linux-glibc23-i386/php-5.3.x/ZendGuardLoader.so /usr/local/php/lib/php/extensions/no-debug-non-zts-20090626/
  999. else
  1001. \cp /usr/local/src/ZendGuardLoader-php-5.3-linux-glibc23-x86_64/php-5.3.x/ZendGuardLoader.so /usr/local/php/lib/php/extensions/no-debug-non-zts-20090626/
  1003. fi
  1007. sed -i 's#; extension_dir = "./"#extension_dir = "/usr/local/php/lib/php/extensions/no-debug-non-zts-20090626/"\nextension = "memcache.so"\nextension = "pdo_mysql.so"\nextension = "imagick.so"\n#' /etc/php.ini
  1009. sed -i 's#output_buffering = Off#output_buffering = On#' /etc/php.ini
  1011. sed -i "s#; always_populate_raw_post_data = On#always_populate_raw_post_data = On#g" /etc/php.ini
  1013. sed -i "s#; cgi.fix_pathinfo=0#cgi.fix_pathinfo=0#g" /etc/php.ini
  1015. sed -i '/;date.timezone/c date.timezone = Asia/Shanghai' /etc/php.ini
  1017. sed -i "s#magic_quotes_gpc = Off#magic_quotes_gpc = On#g" /etc/php.ini
  1019. mkdir /usr/local/eaccelerator_cache > /dev/null 2>&1
  1023. #############zend && eaccelerator opimization################
  1025. cat >>/etc/php.ini<
  1027. [eaccelerator]
  1029. zend_extension="/usr/local/php/lib/php/extensions/no-debug-non-zts-20090626/eaccelerator.so"
  1031. eaccelerator.shm_size="64"
  1033. eaccelerator.cache_dir="/usr/local/eaccelerator_cache"
  1035. eaccelerator.enable="1"
  1037. eaccelerator.optimizer="1"
  1039. eaccelerator.check_mtime="1"
  1041. eaccelerator.debug="0"
  1043. eaccelerator.filter=""
  1045. eaccelerator.shm_max="0"
  1047. eaccelerator.shm_ttl="3600"
  1049. eaccelerator.shm_prune_period="3600"
  1051. eaccelerator.shm_only="0"
  1053. eaccelerator.compress="1"
  1055. eaccelerator.compress_level="9"
  1057. [Zend Optimizer]
  1059. zend_extension="/usr/local/php/lib/php/extensions/no-debug-non-zts-20090626/ZendGuardLoader.so"
  1061. zend_optimizer.optimization_level=1
  1063. zend_optimizer.encoder_loader=0
  1065. EOF
  1067. echo "---test "nginx-php" status----" >> $lamp_log
  1069. /usr/local/php/bin/php -v >> $lamp_log
  1071. fi
  1073. fi
  1075. echo "CentOS/RadHat auto configure "
  1077. echo "========================================================================="
  1079. echo ""
  1081. echo "For more information please visit http:///"
  1083. echo ""
  1085. echo "lnmp status manage:"
  1087. echo " /etc/init.d/nginx {start|stop|reload|restart|kill|status}"
  1089. echo " /etc/init.d/mysqld {start|stop|reload|restart|kill|status}"
  1091. echo "phpinfo : "
  1093. echo "default mysql root password:$mysqlrootpwd"
  1095. echo "mysql security configure: mysql_secure_installation"
  1097. echo "The path of some dirs:"
  1099. echo "mysql dir: /usr/local/mysql"
  1101. echo "php dir: /usr/local/php"
  1103. echo "nginx dir: /usr/local/apache"
  1105. echo "web dir : $webroot"
  1107. echo "log dir : /var/logs"
  1109. echo ""
  1111. echo "========================================================================="
  1113. }
  1117. install_nginx() {
  1121. echo "+------------------------------------------------------+"
  1123. echo "+ We will install nginx service on the local computer +"
  1125. echo "+------------------------------------------------------+"
  1129. if [ -s "$INSTALL_SRC/nginx-1.0.4.tar.gz" ] && [ -d "$INSTALL_SRC/nginx-1.0.4" ];then
  1131. echo " nginx-1.0.4.tar.gz [found]"
  1133. cd $INSTALL_SRC/pcre-8.12
  1135. ./configure
  1137. make && make install >> $lamp_log
  1139. cd ../
  1143. cd nginx-1.0.4/
  1145. #disable version
  1147. sed -i 's/#define NGINX_VERSION "1.0.8"/#define NGINX_VERSION "1.8"/' src/core/nginx.h
  1149. sed -i 's#nginx/#bitautotech/#' src/core/nginx.h
  1151. sed -i 's#Server: nginx#Server: bitautotech#' src/http/ngx_http_header_filter_module.c
  1153. sed -i '28s/nginx/bitautech/' src/http/ngx_http_special_response.c
  1155. sed -i '21a \"
    http://
    " CRLF\' src/http/ngx_http_special_response.c
  1157. ./configure --user=www --group=www --prefix=/usr/local/nginx --with-http_stub_status_module --with-http_ssl_module
  1159. make && make install >> $lamp_log
  1163. if [ $? = 0 ];then
  1165. mkdir -p /var/logs
  1167. chown -R www:www /var/logs
  1169. \cp /usr/local/src/nginx.conf /usr/local/nginx/conf/nginx.conf
  1171. sed -i 's#root /data/webroot/bitauto#root '$webroot'#' /usr/local/nginx/conf/nginx.conf
  1173. sed -i 's#server_name ;#server_name '$domain';#' /usr/local/nginx/conf/nginx.conf
  1175. \cp /usr/local/src/nginx /etc/init.d/nginx
  1177. chmod +x /etc/init.d/nginx
  1179. chkconfig -add nginx
  1181. chkconfig nginx on
  1183. /etc/init.d/nginx start
  1185. echo "---test nginx status----" >> $lamp_log
  1187. /usr/local/nginx/sbin/nginx -t >> $lamp_log
  1189. fi
  1191. fi
  1193. echo ""
  1195. echo "=============================="
  1197. echo " nginx install finished "
  1199. echo "=============================="
  1201. echo ""
  1203. }
  1205. #################################################################################
  1207. #make the dialog menu
  1209. dialog \
  1211. --separate-output \
  1213. --checklist " Linux auto configuration tool" \
  1215. 20 60 15 \
  1217. \
  1219. 0 "Delete unwanted user and group" on \
  1221. 1 "Change password limit(PASS_MIN_LEN=8)" on \
  1223. 2 "Set auto loginout time(10min)" on \
  1225. 3 "Remove Linux version infomation" on \
  1227. 4 "Refused root ssh,Use SU" off \
  1229. 5 "Stop Unnecessary Services" on \
  1231. 6 "Optimize Kernel parameters" on \
  1233. 7 "Change history limit(HISTSIZE=50)" on \
  1235. 8 "Change ssh port(port 10001)" on \
  1237. 9 "Lock Account file(passwd,shadow,group,gshadow...)" on \
  1239. 10 "Chmod init.d rights(Permissions:700)" on \
  1241. 11 "Remove SUID " on \
  1243. 12 "Other Security Configure" on \
  1245. 13 "Install and configure LAMP" off \
  1247. 14 "Install and configure LNMP" off \
  1249. 2>output
  1253. in=$(
  1255. echo $in
  1259. #the function of confirm
  1261. function Confirm()
  1263. {
  1267. #text height witdh
  1269. dialog --yesno "Are you sure to configure ...?" 6 36
  1271. if [ $? -eq 0 ]
  1273. then
  1275. isConfirmed=0
  1277. return 0
  1279. else
  1281. isConfirmed=1
  1283. return 1
  1285. fi
  1287. }
  1291. #whether confirm of not
  1293. if [ -n "$in" ]
  1295. then
  1297. Confirm
  1299. if [ $? -eq 1 ]
  1301. then
  1303. clear
  1305. exit 1
  1307. fi
  1309. fi
  1313. #configure
  1315. for i in $in
  1317. do
  1319. case $i in
  1321. "0")
  1323. echo "**********delete unwanted user and group...***********"
  1325. for i in $V_DELUSER ;do
  1327. echo "deleting $i";
  1329. userdel $i ;
  1331. done
  1333. for i in $V_DELGROUP ;do
  1335. echo "deleting $i";
  1337. groupdel $i;
  1339. done
  1341. ;;
  1343. "1")
  1345. echo "**************change password limit ...***************"
  1347. echo "/etc/login.defs"
  1349. echo "PASS_MIN_LEN $V_PASSMINLEN"
  1351. sed -i "/^PASS_MIN_LEN/s/5/$V_PASSMINLEN/" /etc/login.defs
  1353. ;;
  1357. "2")
  1359. echo "**************change login timeout ...****************"
  1361. echo "/etc/profile"
  1363. echo "TMOUT=$V_TMOUT"
  1365. sed -i "/^HISTSIZE/a\TMOUT=$V_TMOUT" /etc/profile
  1367. ;;
  1369. "3")
  1371. echo "**************remove system version...****************"
  1373. \cp /etc/issue /etc/issue.bak
  1375. \cp /etc/issue.net /etc/issue.net.bak
  1377. rm -f /etc/issue /etc/issue.net
  1379. touch /etc/issue /etc/issue.net
  1381. echo "cat /etc/issue"
  1383. cat /etc/issue
  1385. echo "cat /etc/issue.net"
  1387. cat /etc/issue.net
  1389. ;;
  1391. "4")
  1393. echo "*****************denied root login,use SU ...*****************"
  1395. echo "/etc/ssh/sshd_config"
  1397. echo "PermitRootLogin no"
  1399. sed -i '/^#PermitRootLogin/s/#PermitRootLogin yes/PermitRootLogin no/' /etc/ssh/sshd_config
  1401. ###set wheel group env#########
  1403. sed -i '23c#if [ "$EUID" = "0" ]; then' /etc/profile
  1405. sed -i '23agid=`/usr/bin/id -g`\nif [ $gid -eq 10 ];then' /etc/profile
  1407. source /etc/profile
  1409. chmod +w /etc/sudoers
  1411. sed -i '93a %wheel ALL=(ALL) NOPASSWD: ALL' /etc/sudoers
  1413. chmod -w /etc/sudoers
  1415. ####create su user###
  1417. useradd -g 10 bitnms
  1419. echo bitauto123 |passwd --stdin "bitnms"
  1423. /etc/init.d/sshd reload
  1425. echo "permit $V_GROUPNAME use su ..."
  1427. echo "/etc/pam.d/su"
  1429. echo "auth sufficient /lib/security/pam_rootok.so debug"
  1431. echo "auth required /lib/security/pam_wheel.so group=$V_GROUPNAME"
  1433. if egrep "auth sufficient /lib/security/pam_rootok.so debug" /etc/pam.d/su > /dev/null
  1435. then
  1437. echo 'warning:existed'
  1439. else
  1441. echo 'auth sufficient /lib/security/pam_rootok.so debug' >> /etc/pam.d/su
  1443. echo "auth required /lib/security/pam_wheel.so group=${V_GROUPNAME}" >> /etc/pam.d/su
  1445. fi
  1447. ;;
  1451. "5")
  1453. echo "**************close services autostart ...*************"
  1455. for i in $V_SERVICE ;do
  1457. chkconfig $i off;
  1459. done
  1461. ;;
  1463. "6")
  1465. echo "***************change kernel parameters****************"
  1467. \cp /etc/sysctl.conf /etc/sysctl.conf.bak
  1469. echo "net.ipv4.ip_local_port_range = 1024 65535" >> /etc/sysctl.conf
  1471. echo "net.ipv4.tcp_fin_timeout = 30" >> /etc/sysctl.conf
  1473. echo "net.ipv4.tcp_keepalive_time = 600" >> /etc/sysctl.conf
  1475. echo "net.ipv4.tcp_tw_recycle = 1" >> /etc/sysctl.conf
  1477. echo "net.ipv4.tcp_tw_reuse = 1" >> /etc/sysctl.conf
  1479. cho "net.core.netdev_max_backlog = 30000" >> /etc/syscte.conf
  1481. echo "net.ipv4.tcp_no_metrics_save = 1" >> /etc/sysctl.conf
  1483. echo "net.core.somaxconn = 262144" >> /etc/sysctl.conf
  1485. echo "net.ipv4.tcp_max_orphans = 8000" >> /etc/sysctl.conf
  1487. echo "net.ipv4.tcp_max_syn_backlog = 10240" >> /etc/sysctl.conf
  1489. echo "net.ipv4.tcp_synack_retries = 2" >> /etc/sysctl.conf
  1491. echo "net.ipv4.tcp_syn_retries = 2" >> /etc/sysctl.conf
  1493. echo "fs.file-max = 65535" >> /etc/sysctl.conf
  1495. echo "modprobe ip_conntrack" >> /etc/rc.local
  1497. modprobe ip_conntrack
  1499. echo "nepv4.conf.all.send_redirectst.ipv4.netfilter.ip_conntrack_max = 655360" >> /etc/sysctl.conf
  1501. echo "net.ipv4.netfilter.ip_conntrack_tcp_timeout_established = 600" >> /etc/sysctl.conf
  1503. sysctl -p
  1505. ;;
  1509. "7")
  1511. echo "************change history limit ...******************"
  1513. echo "/etc/profile"
  1515. echo "HISTSIZE $V_HISTSIZE"
  1517. sed -i "/^HISTSIZE/s/1000/$V_HISTSIZE/" /etc/profile
  1519. ;;
  1523. "8")
  1525. echo "*****************Change ssh port.*****************"
  1527. echo "/etc/ssh/sshd_config"
  1529. echo "Port 10001" >> /etc/ssh/sshd_config
  1531. /etc/init.d/sshd reload
  1533. ;;
  1535. "9")
  1537. echo "*****************lock user&services ...***************"
  1539. echo "chattr +i /etc/passwd /etc/shadow /etc/group /etc/gshadow /etc/services"
  1541. chattr +i /etc/passwd /etc/shadow /etc/group /etc/gshadow /etc/services
  1543. ;;
  1547. "10")
  1549. echo "***********init script only for root ...**************"
  1551. echo "chmod -R 700 /etc/init.d/*"
  1553. echo "chmod 600 /etc/grub.conf"
  1555. echo "chattr +i /etc/grub.conf"
  1557. chmod -R 700 /etc/init.d/*
  1559. chmod 600 /etc/grub.conf
  1561. chattr +i /etc/grub.conf
  1563. ;;
  1565. "11")
  1567. echo "******************remove SUID ...*********************"
  1569. echo "/usr/bin/chage /usr/bin/gpasswd ..."
  1571. for i in ${V_SUID[@]};
  1573. do
  1575. chmod a-s $i
  1577. done
  1579. ;;
  1581. "12")
  1583. echo "********************Other security set******************"
  1585. echo "change tty in /etc/inittab"
  1587. echo "#5:2345:respawn:/sbin/mingetty tty5"
  1589. echo "#6:2345:respawn:/sbin/mingetty tty6"
  1591. sed -i '/^[$V_TTY]:2345/s/^/#/' /etc/inittab
  1593. echo "change /etc/host.conf"
  1595. echo "order bind,hosts" > /etc/host.conf
  1597. echo "multi on" >> /etc/host.conf
  1599. echo "nospoof on" >> /etc/host.conf
  1601. echo "close ctrl+alt+del to restart server ..."
  1603. echo "/etc/inittab"
  1605. echo "#ca::ctrlaltdel:/sbin/shutdown -t3 -r now"
  1607. sed -i '/^ca::/s/^/#/' /etc/inittab
  1609. ;;
  1611. "13")
  1613. echo "*******************LAMP******************"
  1615. install_init
  1617. install_mysql
  1619. for soft in apache php ;do
  1621. case $soft in
  1623. apache)
  1625. install_apache;;
  1627. php)
  1629. install_apache-php;;
  1631. esac
  1633. done
  1635. ;;
  1637. "14")
  1639. echo "********************LNMP******************"
  1641. install_init
  1643. for soft in mysql nginx php;do
  1645. case $soft in
  1647. mysql)
  1649. install_mysql;;
  1651. nginx)
  1653. install_nginx;;
  1655. php)
  1657. install_nginx-php;;
  1659. esac
  1661. done
  1663. ;;
  1665. esac
  1667. done
阅读(1273) | 评论(0) | 转发(0) |
0

上一篇：hyper-v的虚拟机无法做nlb的问题解决

下一篇：Snort安装配置

给主人留下些什么吧！~~
关于我们 | 关于IT168 | 联系方式 | 广告合作 | 法律声明 | 免费注册

Copyright 2001-2010 ChinaUnix.net All Rights Reserved 北京皓辰网域网络信息技术有限公司. 版权所有

感谢所有关心和支持过ChinaUnix的朋友们

16024965号-6