wwtou's blog 窝窝头-学技术

WEB服务之 Nginx 服务脚本安装

/

Nginx 介绍：

Nginx (engine x) 是一个高性能的HTTP和反向代理web服务器，同时也提供了IMAP/POP3/SMTP服务。其将源代码以类BSD许可证的形式发布，因它的稳定性、丰富的功能集、简单的配置文件和低系统资源的消耗而闻名。因些许多企业都在使用。

目的：

1、一键安装
2、修改源码改变nginx的名称和版本【安全】

脚本内容：

  1. #!/bin/bash
  2. #
  3. #********************************************************************
  4. #Author:            wwtou
  5. #Date:                 2025-04-18
  6. #FileName：            Nginx_install.sh
  7. #Description：        The test script for OS Version greater than 8.0
  8. #Copyright (C):     2020 All rights reserved
  9. #********************************************************************
  10. # 修改nginx名称和版本
  11. # vim src/core/nginx.h
  12. # #define NGINX_VERSION "1.66.88"
  13. # #define NGINX_VER "websrv" NGINX_VERSION
  14. #
  15. # vim src/http/ngx_http_header_filter_module.c
  16. # static char ngx_http_server_string[] = "Server: websrv" CRLF
  17. #**********************************************************************
  19. NGINX_VER=1.26.3
  20. CUSTOM_VER=66.88.0
  21. SERVER_NAME=Websrv
  22. NGINX_FILE=nginx-${NGINX_VER}.tar.gz
  23. NGINX_URL=http://nginx.org/download/
  24. HOST_IP=$(hostname -I | awk '{print $1}')
  25. SRC_DIR=/tools
  26. NGINX_INSTALL_DIR=/apps/nginx
  27. NGINX_TMP_DIR=/var/tmp/nginx
  28. CONFILE=/etc/nginx/nginx.conf
  29. NGINX_COMMAND_FILE=/etc/profile.d/nginx.sh
  30. USER=nginx
  31. GROUP=nginx
  32. CPUS=$(lscpu |awk '/^CPU\(s\)/{print $2}')
  34. . /etc/os-release
  36. color() {
  37.     local text="$1"
  38.     local status="$2"
  39.     local RES_COL=60
  40.     local GREEN="\033[1;32m"
  41.     local RED="\033[1;31m"
  42.     local YELLOW="\033[1;33m"
  43.     local NORMAL="\033[0m"
  45.     # 左侧文本 + 对齐
  46.     printf "%-${RES_COL}s" "$text"
  48.     # 移动光标到第 RES_COL 列
  49.     echo -en "\033[${RES_COL}G"
  51.     echo -n "["
  52.     case "$status" in
  53.         success|0)
  54.             echo -en "${GREEN}  OK  ${NORMAL}"
  55.             ;;
  56.         failure|1)
  57.             echo -en "${RED}FAILED${NORMAL}"
  58.             ;;
  59.         *)
  60.             echo -en "${YELLOW}WARNING${NORMAL}"
  61.             ;;
  62.     esac
  63.     echo "]"
  64. }
  66. check () {
  67.     [ -e ${NGINX_INSTALL_DIR} ] && { color "nginx 已安装,请卸载后再安装" 1; exit; }
  68.     [ ! -d ${NGINX_TMP_DIR} ] && mkdir -p ${NGINX_TMP_DIR}/{client,proxy,fcgi,uwsgi,scgi}
  70.     color "检查操作系统和系统版本" 0
  71.     # Detect OS
  72.     # $os_version variables aren't always in use, but are kept here for convenience
  73.     if grep -qs "ubuntu" /etc/os-release; then
  74.         os="ubuntu"
  75.         os_version=$(grep 'VERSION_ID' /etc/os-release | cut -d '"' -f 2 | tr -d '.')
  76.     elif [[ -e /etc/debian_version ]]; then
  77.         os="debian"
  78.         os_version=$(grep -oE '[0-9]+' /etc/debian_version | head -1)
  79.     elif egrep -i "openeuler|rocky|almalinux|Anolis|centos|kylin" /etc/os-release &> /dev/null; then
  80.         os="centos"
  81.         os_version=$(grep  "VERSION_ID" /etc/os-release | awk -F'"' '{print $2}' | cut -d'.' -f1)
  82.     elif [[ -e /etc/fedora-release ]]; then
  83.         os="fedora"
  84.         os_version=$(grep -oE '[0-9]+' /etc/fedora-release | head -1)
  85.     else
  86.         color "This installer seems to be running on an unsupported distribution.Supported distros are Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS and Fedora." 1
  87.         exit
  88.     fi
  90.     if [[ "$os" == "ubuntu" && "$os_version" -lt 2204 ]]; then
  91.         color "Ubuntu 22.04 or higher is required to use this installer.This version of Ubuntu is too old and unsupported." 1
  92.         exit
  93.     fi
  95.     if [[ "$os" == "debian" ]]; then
  96.         if grep -q '/sid' /etc/debian_version; then
  97.             color "Debian Testing and Debian Unstable are unsupported by this installer." 1
  98.             exit
  99.         fi
  100.         if [[ "$os_version" -lt 11 ]]; then
  101.             color "Debian 11 or higher is required to use this installer.This version of Debian is too old and unsupported." 1
  102.             exit
  103.         fi
  104.     fi
  106.     if [[ "$os" == "centos" && "$os_version" -lt 9 ]]; then
  107.         os_name=$(grep  "^NAME" /etc/os-release | awk -F'"' '{print $2}')
  108.         echo "$os_name 9 or higher is required to use this installer.This version of $os_name is too old and unsupported." 0
  109.         exit
  110.     fi
  112.    color "安装工具包,检查防火墙" 0
  113.    if ! hash ufw 2>/dev/null && ! hash firewall-cmd 2>/dev/null && ! hash iptables 2>/dev/null; then
  114.         if [[ "$os" == "ubuntu" && "$os" == "debinn" ]]; then
  115.             apt -y update && apt install -y ufw
  116.             [ $? -ne 0 ] && { color "Install UFW Failed" 1 ; exit; }
  117.             ufw disable
  118.             color 'ufw is closed' 0
  119.         else
  120.             dnf install -y firewalld
  121.             [ $? -ne 0 ] && { color "Install Firewalld Failed" 1; exit; }
  122.             setenforce 0
  123.             sed -i '/^SELINUX=/c SELINUX=disabled' /etc/selinux/config
  124.             color 'Selinux has been disabled, and Permanent After Restarting' 0
  125.             systemctl disable --now  firewalld.service &>/dev/null
  126.             color 'firewalld is complete closed' 0
  127.         fi
  128.     fi
  130.     if [[ "$os" == "ubuntu" && "$os" == "debinn" ]]; then
  131.             apt -y update && apt install -y tar wget vim bash-completion gcc make libpcre3 libpcre3-dev openssl libssl-dev zlib-dev
  132.             [ $? -ne 0 ] && { color "Install Tools Failed" 1 ; exit; }
  133.     else
  134.             dnf install -y wget tar vim-enhanced bash-completion gcc make openssl-devel pcre-devel zlib-devel perl-ExtUtils-Embed
  135.             [ $? -ne 0 ] && { color "Install Tools Failed" 1; exit; }
  136.     fi
  138.     [ ! -d ${SRC_DIR} ] && mkdir ${SRC_DIR}
  139.     cd  ${SRC_DIR}
  140.     if [  -e ${SRC_DIR}/${NGINX_FILE} ];then
  141.         color "相关文件已准备好" 0
  142.     else
  143.         color '开始下载 nginx 源码包' 0
  144.         wget  ${NGINX_URL}${NGINX_FILE}
  145.         [ $? -ne 0 ] && { color "下载 ${NGINX_FILE}文件失败" 1; exit; } 
  146.     fi
  147. } 
  149. install () {
  150.     color "开始安装 nginx" 0
  151.     if id $USER  &>/dev/null; then
  152.         color "$USER 用户已存在" 1 
  153.     else
  154.         groupadd $GROUP
  155.         useradd -r -g $GROUP -s /sbin/nologin $USER
  156.         color "创建 $USER 用户" 0 
  157.     fi
  158.     color "开始安装 nginx 依赖包" 0
  159.     cd $SRC_DIR
  160.     tar xf ${NGINX_FILE}
  161.     NGINX_DIR=`echo ${NGINX_FILE} | sed -nr 's/^(.*[0-9]).*/\1/p'`
  162.     cd ${NGINX_DIR}
  164.     sed -i "s|${NGINX_VER}|${CUSTOM_VER}|"  src/core/nginx.h
  165.     sed -i "s|nginx/|${SERVER_NAME}/|"      src/core/nginx.h
  166.     sed -i "s| nginx| ${SERVER_NAME}|"      src/http/ngx_http_header_filter_module.c
  168.     [ $? -eq 0 ] && color "nginx 修改源码版本成功" 0 ||  { color "nginx 修改源码版本失败,退出!" 1 ; exit; }
  170.     ./configure \
  171.      --prefix=${NGINX_INSTALL_DIR} \
  172.      --sbin-path=${NGINX_INSTALL_DIR}/sbin/nginx \
  173.      --conf-path=$CONFILE \
  174.      --pid-path=/var/run/nginx.pid  \
  175.      --lock-path=/var/lock/nginx.lock \
  176.      --user=$USER \
  177.      --group=$GROUP \
  178.      --with-pcre \
  179.      --with-stream \
  180.      --with-http_ssl_module \
  181.      --with-http_flv_module \
  182.      --with-http_stub_status_module \
  183.      --with-http_gzip_static_module \
  184.      --with-http_realip_module \
  185.      --with-http_v2_module \
  186.      --with-http_dav_module \
  187.      --http-client-body-temp-path=/var/tmp/nginx/client \
  188.      --http-proxy-temp-path=/var/tmp/nginx/proxy \
  189.      --http-fastcgi-temp-path=/var/tmp/nginx/fcgi \
  190.      --http-uwsgi-temp-path=/var/tmp/nginx/uwsgi \
  191.      --http-scgi-temp-path=/var/tmp/nginx/scgi \
  192.      --without-mail_pop3_module \
  193.      --without-mail_imap_module \
  194.      --without-mail_smtp_module
  195.      # --with-openssl=/root/openssl-1.1.1w
  196.     make -j $CPUS && make install
  198.     [ $? -eq 0 ] && color "nginx 编译安装成功" 0 ||  { color "nginx 编译安装失败,退出!" 1 ;exit; }
  200.     chown -R $USER:$GROUP  ${NGINX_INSTALL_DIR}
  201.     echo "export PATH=${NGINX_INSTALL_DIR}/sbin:${PATH}" > ${NGINX_COMMAND_FILE}
  202.     cat > /etc/security/limits.d/nginx.conf <<EOF
  203. * soft nofile 65535
  204. * hard nofile 65535
  205. EOF
  206.     cat > /usr/lib/systemd/system/nginx.service <<EOF
  207. [Unit]
  208. Description=The nginx HTTP and reverse proxy server
  209. After=network.target remote-fs.target nss-lookup.target
  211. [Service]
  212. Type=forking
  213. ExecStart=${NGINX_INSTALL_DIR}/sbin/nginx -c $CONFILE
  214. ExecReload=${NGINX_INSTALL_DIR}/sbin/nginx -s reload
  215. ExecStop=${NGINX_INSTALL_DIR}/sbin/nginx -s stop
  216. KillSignal=SIGQUIT
  217. TimeoutStopSec=5
  218. KillMode=process
  219. #PrivateTmp=true
  220. LimitNOFILE=100000
  222. [Install]
  223. WantedBy=multi-user.target
  224. EOF
  226.     systemctl daemon-reload
  227.     systemctl enable --now nginx.service &> /dev/null 
  228.     systemctl is-active nginx &> /dev/null ||  { color "nginx 启动失败,退出!" 1 ; exit; }
  229.     color "nginx 安装完成" 0
  230.     echo
  231.     echo "请先运行: source ${NGINX_COMMAND_FILE}"
  232.     echo "访问链接: http://${HOST_IP}"
  233.     echo
  234. }
  236. check
  237. install

运行脚本：

  1. # bash nginx_install.sh

通过执行脚本实现一键安装 ~~

转载请注明作者和出处，并添加本页链接。
原文链接: //www.wwtou.com/pawx8DY.html

下一篇：K8S 与 Docker、containerd、CRI-O 和 runc 之间关系

上一篇：Linux 系统修改IP地址的脚本

没有什么能够阻挡，你对自由的向往…

Copyright © 2025  窝窝头-学技术

Powered by zrlog, Themed by Robin L.

冀ICP备：2025109353号