Yadda ake Sanya Tarin LEMP akan Rocky Linux 8


LEMP sanannen tari ne wanda ya ƙunshi buɗaɗɗen software wanda ake amfani da shi tare don ɗaukar nauyin aikace-aikacen yanar gizo, ko a cikin samarwa ko kowane mataki tare da ci gaba.

Kalmomin LEMP ƙayyadaddun kalmomi ne na Linux, Nginx (mai suna Engine X, saboda haka E) wanda shine mai binciken gidan yanar gizo, MariaDB ko MySQL - bayanai, da PHP don sarrafa abun ciki mai ƙarfi). An yi amfani da tarin LEMP da yawa don ɗaukar manyan zirga-zirgar ababen hawa da ƙaƙƙarfan aikace-aikacen yanar gizo da gidajen yanar gizo.

A cikin wannan jagorar, zaku koyi yadda ake shigar da tarin LEMP akan Rocky Linux 8.4.

Kafin saita shigar da tarin LEMP, tabbatar cewa kuna da buƙatu masu zuwa a wurin.

  • Misali na Rocky Linux 8 tare da daidaita mai amfani da sudo.
  • Samun damar SSH zuwa misalin Rocky Linux.

Mu fara…

Mataki 1: Sanya Nginx akan Rocky Linux

Mataki na farko shine shigar da sashin farko na tarin LEMP wanda shine sabar gidan yanar gizon Nginx. Na farko, haɓaka fakitin.

$ sudo dnf update -y

Bayan an gama sabuntawa, shigar da Nginx ta gudanar da umarni mai zuwa. Wannan yana shigar da Nginx tare da sauran abubuwan dogaro da uwar garken yanar gizo ke buƙata.

$ sudo dnf install nginx 

Da zarar Nginx ya kasance, kunna shi don farawa akan lokacin taya kuma fara Nginx daemon.

$ sudo systemctl enable nginx 
$ sudo systemctl start nginx 

Don tabbatar da cewa sabar gidan yanar gizo tana gudana, aiwatar da umarni:

$ sudo systemctl status nginx

Daga fitarwa, zamu iya yanke shawarar cewa uwar garken gidan yanar gizon yana aiki kuma yana gudana.

Idan kuna sha'awar isa, zaku iya duba sigar Nginx kamar haka. Sakamakon yana nuna muna gudana Nginx 1.14.1.

$ nginx -v

nginx version: nginx/1.14.1

Bugu da ƙari, zaku iya tabbatar da cewa mai binciken yana aiki ta hanyar bincika URL ɗin da aka nuna. Wannan zai nuna tsohowar Nginx Barka da shafin yana nuna cewa komai yayi kyau.

http://server-ip or domain name

Idan kuna da matsalolin kallon shafin, yi la'akari da buɗe tashar jiragen ruwa 80 ko ba da izinin zirga-zirgar HTTP a kan Tacewar zaɓi.

$ sudo firewall-cmd --zone=public --add-service=http --permanent 

Sa'an nan kuma sake shigar da Tacewar zaɓi kuma sake shigar da shafin.

$ sudo firewall-cmd --reload

Mataki 2: Sanya MariaDB akan Rocky Linux

Don wannan jagorar, za mu shigar da bayanan MariaDB. Wannan ya faru ne saboda ingantaccen aiki da wadatar injunan ajiya da yake bayarwa wanda ya sa ya fi MySQL girma.

Don shigar da uwar garken bayanai na MariaDB, gudanar da umarni:

$ sudo dnf install mariadb-server mariadb

Da zarar an yi, kunna kuma fara MariaDB kamar yadda aka nuna.

$ sudo systemctl enable mariadb
$ sudo systemctl start mariadb

Sannan a tabbatar da matsayinsa.

$ sudo systemctl status mariadb

Saitunan tsoho na MariaDB ba su da isasshen tsaro kuma ana iya keta bayanan ku cikin sauƙi. A matsayin riga-kafi don hana masu kutse a matakin farko, gudanar da rubutun da ke ƙasa.

$ sudo mysql_secure_installation

Tabbatar da saita Tushen kalmar sirri.

Don sauran abubuwan da suka rage, kawai a rubuta Y don cire masu amfani da ba a san su ba, ƙin shiga tushen nesa, cire bayanan gwajin, sannan a ƙarshe ajiye canje-canjen da aka yi.

Don shiga uwar garken bayanai, gudanar da umarni:

$ sudo mysql -u root -p

Samar da kalmar wucewa kuma latsa ENTER.

Mataki 3: Sanya PHP akan Rocky Linux

Bangare na ƙarshe don shigarwa shine PHP ta hanyar PHP-FPM, wanda ke tsaye ga FastCGI Process Manager. Wannan ingantacciyar na'ura ce mai inganci kuma mai haɓakawa don PHP wanda ke ba da fasalulluka waɗanda ke ba da garantin aiki mafi kyau, da tsaro ga manyan gidajen yanar gizo masu zirga-zirga.

Don farawa, za mu shigar da ma'ajin Remi wanda shine wurin ajiyar kuɗi na ɓangare na uku wanda ke ba da sabbin nau'ikan PHP.

Don kunna ma'ajiyar Remi, gudanar da umarni:

$ sudo dnf install dnf-utils http://rpms.remirepo.net/enterprise/remi-release-8.rpm

Da zarar an kunna ma'ajiyar Remi, duba jerin samfuran PHP waɗanda aka shirya ta amfani da umarnin da aka nuna.

$ sudo dnf module list php

Daga fitarwa, za mu iya ganin cewa tsoho version 7.2 - tare da alamar [d] . Koyaya, za mu shigar da sabon tsarin wanda shine Remi 8.0.

Don haka, sake saita tsoffin samfuran PHP kuma kunna sabon tsarin Remi PHP.

$ sudo dnf module list reset php
$ sudo dnf module enable php:remi-8.0

Na gaba, sabunta tsarin kuma shigar da PHP da PHP-FPM tare da kari na PHP na fifikonku.

$ sudo dnf install php php-fpm php-gd php-mysqlnd php-cli php-opcache

Da zarar an gama shigarwa, kunna kuma fara PHP-FPM kamar yadda aka nuna.

$ sudo systemctl enable php-fpm
$ sudo systemctl start php-fpm

Na gaba, tabbatar da matsayin aiki na PHP-FPM.

$ sudo systemctl status php-fpm

Yawanci, PHP-FPM yana gudana azaman mai amfani da Apache, amma tunda muna amfani da Nginx, muna buƙatar saita shi zuwa Nginx. Don haka, buɗe fayil ɗin sanyi mai zuwa.

$ sudo vim /etc/php-fpm.d/www.conf

Saita mai amfani da rukuni zuwa Nginx.

user = nginx
Group = nginx

Bayan haka, sake shigar da daemon na PHP-FPM.

$ sudo systemctl reload php-fpm

Don tabbatar da cewa mun shigar da sabuwar sigar PHP, gudanar da umarni.

$ php -v

Wata babbar hanyar Testin PHP ita ce ta ƙirƙirar fayil ɗin PHP mai sauƙi da sanya shi a cikin kundin adireshin yanar gizo wanda ke cikin /usr/share/nginx/html. Don haka, ƙirƙirar fayil ɗin info.php mai sauƙi a cikin /usr/share/nginx/html directory webroot.

$ sudo vim /usr/share/nginx/html/info.php

Ƙara abun ciki mai zuwa kuma ajiye fayil ɗin.

<?php

phpinfo();

?>

Don aiwatar da canje-canje, sake shigar da sabar gidan yanar gizon Nginx.

$ sudo systemctl restart nginx

A ƙarshe, shiga URL mai zuwa.

http://server-ip/info.php

Za a nuna shafin yanar gizon da ke da cikakkun bayanai game da sigar PHP da aka shigar tare da sauran kari na PHP.

A wannan lokacin, saitin LEMP ɗin mu ya cika. A mataki na gaba, za mu dauki bakuncin samfurin rukunin yanar gizon ta hanyar saita toshe uwar garken Nginx.

Mataki 3: Sanya Nginx Server Block a Rocky Linux

Toshewar uwar garken yana bawa masu gudanarwa damar karɓar gidajen yanar gizo da yawa akan sabar ɗaya ta hanyar ayyana tushen kundayen adireshi daban-daban. Waɗannan su ne kundayen adireshi waɗanda ke ɗauke da fayilolin gidan yanar gizon.

Anan, za mu ƙirƙiri fayil ɗin toshe uwar garken Nginx guda ɗaya don ɗaukar gidan yanar gizon samfurin.

Da farko, ƙirƙiri kundin adireshi na rukunin yanar gizon wanda zai ƙunshi bayanan rukunin da za su kasance ga maziyartan rukunin. Ka ɗauka kana da yanki mai suna example.com. Ƙirƙiri kundin adireshi na rukunin yanar gizon kamar haka. Tabbatar maye gurbin example.com tare da Cikakken Sunan Domain Cancantar rukunin yanar gizon ku ko yankin rajista.

$ sudo mkdir -p /var/www/example.com/html

An saita tsarin adireshin yankin yanzu don ɗaukar fayilolin rukunin yanar gizon. A halin yanzu, tushen mai amfani ne ya mallaki fayilolin. Muna buƙatar saita ikon mallakar ta yadda mai amfani na yau da kullun ya mallaki fayil ɗin.

Don canza ikon mallakar fayilolin zuwa mai amfani a halin yanzu, yi amfani da umarnin chown.

$ sudo chown -R $USER:$USER /var/www/example.com/html

Maɓallin $USER yana ɗaukar ƙimar mai amfani da shiga a halin yanzu kuma yana ba da ikon mallakar mai amfani ga fayilolin html da ƙananan kundiyoyin. Bugu da ƙari, ba da izinin karantawa ga babban tushen tushen gidan yanar gizon don maziyartan rukunin yanar gizon su sami damar shiga shafukan yanar gizon.

$ sudo chmod -R 755 /var/www

An tsara kundin adireshin rukunin yanar gizon yanzu da kyau don hidimar shafukan yanar gizon.

Yanzu bari mu ƙirƙiri wurin gwajin samfurin. Za mu ƙirƙiri babban fayil na index.html a cikin kundin adireshin html na yankin.

$ sudo vim /var/www/example.com/html/index.html

Manna abubuwan da ke ƙasa. Kamar yadda kake gani, yana da mahimmanci kamar yadda muke amfani da shi kawai don dalilai na gwaji.

<html>
  <head>
    <title>Welcome to Example.com!</title>
  </head>
  <body>
    <h1>Success! The server block is active!</h1>
  </body>
</html>

Ajiye ku fita fayil ɗin HTML.

Fayil toshewar uwar garken fayil ne wanda ya ƙunshi daidaitawar rukunin yanar gizon. Ya bayyana yadda sabar gidan yanar gizo ta Nginx ke amsa buƙatun maziyartan rukunin. Za mu fara da ƙirƙirar kundayen adireshi guda biyu:

  • /etc/nginx/sites-available – Wannan ita ce directory ɗin da zai riƙe fayil ɗin toshe uwar garken.
  • /etc/nginx/sites-enabled - Littafin jagora yana sanar da Nginx cewa fayil ɗin toshe uwar garken yana shirye don biyan buƙatun.

Don haka, ƙirƙirar kundin adireshi kamar haka:

$ sudo mkdir /etc/nginx/sites-available
$ sudo mkdir /etc/nginx/sites-enabled

Bayan haka, shirya babban fayil ɗin Nginx.

$ sudo mkdir /etc/nginx/nginx.conf

Manna wadannan layukan. Layin farko yana ƙayyadad da hanyar zuwa kundin adireshi mai ɗauke da ƙarin fayilolin daidaitawa. Layi na biyu yana ƙara žwažwalwar ajiya da aka kebe don tantance sunayen yanki.

include /etc/nginx/sites-enabled/*.conf;
server_names_hash_bucket_size 64;

Ajiye ku fita.

Na gaba, ƙirƙirar fayil toshe uwar garken.

$ sudo vim /etc/nginx/sites-available/example.com.conf

Manna abubuwan da ke ƙasa. Sauya misali.com tare da Cikakken Sunan Domain da Ya cancanta (FQDN) ko adireshin IP na uwar garken.

server {
    listen  80;

    server_name example.com www.example.com;

    location / {
        root  /var/www/example.com/html;
        index  index.html index.htm;
        try_files $uri $uri/ =404;
    }

    error_page  500 502 503 504  /50x.html;
    location = /50x.html {
        root  /usr/share/nginx/html;
    }
}

Ajiye kuma fita fayil ɗin.

A ƙarshe, muna buƙatar kunna fayil ɗin toshe uwar garken. Don yin haka, za mu ƙirƙiri hanyar haɗi ta alama don fayil ɗin toshe uwar garken zuwa ga adireshi masu kunna shafuka.

$ sudo ln -s /etc/nginx/sites-available/example.com.conf /etc/nginx/sites-enabled/example.com.conf

Sannan sake kunna Nginx don canje-canjen da za a yi.

$ sudo systemctl restart nginx

Don gwada tsarin ƙaddamar da burauzar ku kuma ziyarci yankin rukunin yanar gizon ku

http://example.com

Wannan yakamata ya nuna rukunin rukunin uwar garken kamar yadda muka tsara a Mataki na 3.

Kuma wannan yana kunsa shi. A cikin wannan jagorar, mun bi ku ta hanyar shigar da tarin LEMP akan Rocky Linux 8 kuma mun ci gaba da tafiya don ƙirƙira da daidaita fayil ɗin toshe uwar garken inda muka dauki bakuncin gidan yanar gizon al'ada.