nginx-1.18 编译安装

#安装编译工具和所需的依赖包
[root@yzl ~]# yum install -y  wget gcc gcc-c++ zlib-devel openssl openssl-devel pcre pcre-devel

#下载nginx tar包到/usr/local/src/
[root@yzl ~]# wget http://nginx.org/download/nginx-1.18.0.tar.gz -P /usr/local/src/

#解压
[root@yzl ~]# cd /usr/local/src/
[root@yzl src]# tar -xvf nginx-1.18.0.tar.gz

#创建用户数据目录并授权
[root@yzl ~]# mkdir -p /apps/nginx
[root@yzl ~]# useradd -s /sbin/nologin nginx
[root@yzl ~]# chown -R nginx.nginx /apps/nginx

#编译安装
[root@yzl ~]# cd /usr/local/src/nginx-1.18.0
[root@yzl nginx-1.18.0]# ./configure --prefix=/apps/nginx --user=nginx --group=nginx --with-http_ssl_module --with-http_stub_status_module
[root@yzl nginx-1.18.0]# make -j 4
[root@yzl nginx-1.18.0]# make install

#配置环境变量
[root@yzl ~]# ln -s /apps/nginx/sbin/nginx /usr/bin/
[root@yzl ~]# nginx -t
nginx: the configuration file /apps/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /apps/nginx/conf/nginx.conf test is successful
[root@yzl ~]# 

#永久生效
[root@yzl ~]# vi /etc/profile.d/nginx.sh
[root@yzl ~]# source /etc/profile.d/nginx.sh 

#开机启动配置文件
[root@yzl ~]# cat /etc/systemd/system/nginx.service 
[Unit]
Description=nginx - high performance web server
Documentation=http://nginx.org/en/docs/
After=network-online.target remote-fs.target nss-lookup.target
Wants=network-online.target

[Service]
Type=forking
PIDFile=/apps/nginx/logs/nginx.pid
ExecStart=/apps/nginx/sbin/nginx -c /apps/nginx/conf/nginx.conf
ExecReload=/bin/sh -c "/bin/kill -s HUP $(/bin/cat /apps/nginx/logs/nginx.pid)"
ExecStop=/bin/sh -c "/bin/kill -s TERM $(/bin/cat /apps/nginx/logs/nginx.pid)"

[Install]
WantedBy=multi-user.target
[root@yzl ~]# 

平滑升级和回滚

#下载最新稳定版
[root@yzl ~]# wget http://nginx.org/download/nginx-1.20.1.tar.gz -P /usr/local/src/
[root@yzl src]# tar -xvf nginx-1.20.1.tar.gz 

#查看当前使用的版本及编译选项。结果如下：
[root@yzl nginx-1.20.1]# 
[root@yzl nginx-1.20.1]# nginx -V
nginx version: nginx/1.18.0
built by gcc 8.4.1 20200928 (Red Hat 8.4.1-1) (GCC) 
built with OpenSSL 1.1.1g FIPS  21 Apr 2020
TLS SNI support enabled
configure arguments: --prefix=/apps/nginx --user=nginx --group=nginx --with-http_ssl_module --with-http_stub_status_module

#configure arguments后面是以前编译时的参数，现在编译使用一样的参数
[root@yzl nginx-1.20.1]# ./configure --prefix=/apps/nginx --user=nginx --group=nginx --with-http_ssl_module --with-http_stub_status_module

#只要make无需make install
[root@yzl nginx-1.20.1]# make -j 4
[root@yzl nginx-1.20.1]# objs/nginx -v
nginx version: nginx/1.20.1
[root@yzl nginx-1.20.1]# 

#查看两个版本
[root@yzl nginx-1.20.1]# ll objs/nginx /apps/nginx/sbin/nginx
-rwxr-xr-x 1 root root 5837360 Jun  7 07:56 /apps/nginx/sbin/nginx
-rwxr-xr-x 1 root root 5926320 Jun  7 09:18 objs/nginx
[root@yzl nginx-1.20.1]# 

#把之前的旧版的nginx命令备份
[root@yzl nginx-1.20.1]# mv /apps/nginx/sbin/nginx /apps/nginx/sbin/nginx.old

#把新版本的nginx命令复制过去
[root@yzl nginx-1.20.1]# cp ./objs/nginx /apps/nginx/sbin/

#检查一下有没有问题
[root@yzl nginx-1.20.1]# /apps/nginx/sbin/nginx -t
nginx: the configuration file /apps/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /apps/nginx/conf/nginx.conf test is successful

[root@yzl nginx-1.20.1]# ps aux |grep nginx
root       35855  0.0  0.0  42352  3364 ?        Ss   08:47   0:00 nginx: master process /apps/nginx/sbin/nginx -c /apps/nginx/conf/nginx.conf
nginx      35866  0.0  0.1  77068  5276 ?        S    08:48   0:00 nginx: worker process
root       38718  0.0  0.0  12132  1196 pts/4    S+   09:43   0:00 grep --color=auto nginx

#USR2 平滑升级可执行程序，将存储有旧版本主进程ID的文件重命名为nginx.pid.oldbin,跟着启动新的nginx
#此时两个master的进程都在运行，只是旧的master不在监听，由新的master监听80
#此时nginx开启一个新的master进程，这个master进程会生成新的worker进程，这就是升级后的nginx进程，此时老的进程不会自动退出，但是当接收新的请求不作处理而是交给新的进程处理

[root@yzl nginx-1.20.1]# kill -USR2 `cat /apps/nginx/logs/nginx.pid`
[root@yzl nginx-1.20.1]# ps auxf |grep nginx
root       38724  0.0  0.0  12132  1196 pts/4    S+   09:45   0:00  |           \_ grep --color=auto nginx
root       35855  0.0  0.0  42352  3364 ?        Ss   08:47   0:00 nginx: master process /apps/nginx/sbin/nginx -c /apps/nginx/conf/nginx.conf
nginx      35866  0.0  0.1  77068  5276 ?        S    08:48   0:00  \_ nginx: worker process
root       38721  0.0  0.1  42240  5560 ?        S    09:44   0:00  \_ nginx: master process /apps/nginx/sbinnginx -c /apps/nginx/conf/nginx.conf
nginx      38722  0.0  0.1  76988  5104 ?        S    09:44   0:00      \_ nginx: worker process
[root@yzl nginx-1.20.1]#

[root@yzl nginx-1.20.1]# pstree -p

           ├─nginx(35855)─┬─nginx(38721)───nginx(38722)
           │              └─nginx(35866)

[root@yzl nginx-1.20.1]# lsof -i:80
COMMAND   PID  USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
nginx   35855  root    8u  IPv4 109084      0t0  TCP *:http (LISTEN)
nginx   35866 nginx    8u  IPv4 109084      0t0  TCP *:http (LISTEN)
nginx   38721  root    8u  IPv4 109084      0t0  TCP *:http (LISTEN)
nginx   38722 nginx    8u  IPv4 109084      0t0  TCP *:http (LISTEN)
[root@yzl nginx-1.20.1]# 

#先关闭旧的nginx的worker进程，而不关闭nginx主进程方便回滚
#向原nginx主进程发送WINCH信号，它会逐步关闭旗下的工作进程（主进程不退回），这时所有请求都会由新版nginx处理

[root@yzl nginx-1.20.1]# kill -WINCH `cat /apps/nginx/logs/nginx.pid.oldbin`
[root@yzl nginx-1.20.1]# ps auxf |grep nginx
root       39044  0.0  0.0  12132  1120 pts/4    S+   09:52   0:00  |           \_ grep --color=auto nginx
root       35855  0.0  0.0  42352  3364 ?        Ss   08:47   0:00 nginx: master process /apps/nginx/sbin/nginx -c /apps/nginx/conf/nginx.conf
root       38721  0.0  0.1  42240  5560 ?        S    09:44   0:00  \_ nginx: master process /apps/nginx/sbinnginx -c /apps/nginx/conf/nginx.conf
nginx      38722  0.0  0.1  76988  5104 ?        S    09:44   0:00      \_ nginx: worker process
[root@yzl nginx-1.20.1]# 

[root@yzl nginx-1.20.1]# pstree -p |grep nginx
           |-nginx(35855)---nginx(38721)---nginx(38722)
[root@yzl nginx-1.20.1]# 



#经过一段时间测试，新版本服务没问题，最后退出老的master
[root@yzl nginx-1.20.1]# kill -QUIT `cat /apps/nginx/logs/nginx.pid.oldbin`

#查看版本是不是已经新版了
[root@yzl nginx-1.20.1]# nginx -v
nginx version: nginx/1.20.1

[root@yzl nginx-1.20.1]# curl -I 127.0.0.1
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Mon, 07 Jun 2021 13:56:00 GMT
Content-Type: text/html
Content-Length: 6
Last-Modified: Mon, 07 Jun 2021 13:34:15 GMT
Connection: keep-alive
ETag: "60be2057-6"
Accept-Ranges: bytes



#回滚
#如果升级的版本发现问题需要回滚，可以重新拉起旧版本的worker
注意：回滚的前提是不能关闭老版的master
[root@yzl nginx-1.20.1]#  kill -HUP `cat /apps/nginx/logs/nginx.pid.oldbin`
[root@yzl nginx-1.20.1]# kill -QUIT `cat /apps/nginx/logs/nginx.pid`