[toc]
基礎(chǔ)環(huán)境
添加一個非root管理員
useradd -m jin
passwd jin
# 添加sudo權(quán)限
?chmod u+w /etc/sudoers
vim /etc/sudoers
chmod u-w /etc/sudoers
允許ssh登陸
vim /etc/ssh/sshd_config
PasswordAuthentication yes # 默認(rèn)
AllowUsers jin
sudo /sbin/service sshd restart
python環(huán)境的安裝
安裝pyenv
1）安裝環(huán)境
sudo yum install update
sudo yum install zlib-devel bzip2 bzip2-devel readline-devel sqlite sqlite-devel openssl-devel
2）安裝pyenv
# 安裝git
sudo yum install git
sudo curl -L https://raw.githubusercontent.com/yyuu/pyenv-installer/master/bin/pyenv-installer | bash
3）添加pyenv到環(huán)境變量
~ 目錄下面的 .bashrc
export PATH="/home/jin/.pyenv/bin:$PATH"eval "$(pyenv init -)"eval "$(pyenv virtualenv-init -)"
4）重新加載shell配置
~ 目錄下面的 .bashrc
source .bashrc
5）python 版本的替換和虛擬環(huán)境的安裝
先安裝 yum install gcc,
把下載的文件放入 .pyenv/cache/
sudo yum install gcc
pyenv install --list
pyenv install 2.7.12
pyenv global 2.7.12
pyenv vietualenv 2.7.12 blog_env
pyenv versions
pyenv activate blog_env
pyenv deactivate
安裝 配置git
sudo yum install git
ssh-keygen -t rsa -C "jinzhang_hotline@163.com"
#/home/jin/.ssh/id_rsa 生成的位置
安裝MySQL-python ,PILLOW
###MySQL-python
yum install MariaDB-develpip install MySQL-python
### PILLOW
sudo yum install python-devel
sudo yum install zlib-devel
sudo yum install libjpeg-turbo-devel
pip install pillow
安裝 mysql
https://downloads.mariadb.org/mariadb/repositories/#mirror=neusoft&distro=CentOS&distro_release=centos7-amd64--centos7&version=10.1
將下列代碼加入
/etc/yum.repos.d/MariaDB.repo
# MariaDB 10.1 CentOS repository list - created 2016-10-25 07:54 UTC
# http://downloads.mariadb.org/mariadb/repositories/
[mariadb]
name = MariaDB
baseurl = http://yum.mariadb.org/10.1/centos7-amd64
gpgkey=https://yum.mariadb.org/RPM-GPG-KEY-MariaDB
gpgcheck=1
#安裝
sudo yum install MariaDB-server MariaDB-client
sudo systemctl start mysqld.service
# 進(jìn)入數(shù)據(jù)庫
mysql -u root
use mysql;
update user set password=PASSWORD("root") where User='root';
flush privileges;
# 重啟數(shù)據(jù)庫
service mysql restart
#建立數(shù)據(jù)庫
create database if not exists sell default charset utf8 collate utf8_general_ci;
開發(fā)模式跑起來
# 同步數(shù)據(jù)庫
python manage.py migrate
# 收集靜態(tài)文件
python manage.py collectstatic
安裝ftp服務(wù)
# 停用防火墻
systemctl stop firewalld.service
systemctl disable firewalld.service
# 啟用iptables
systemctl start iptables.service
systemctl enable iptables.service
# 安裝vsftpd
sudo yum install vsftpd
systemctl start vsftpd.service
systemctl enable vsftpd.service
- 1 安裝
sudo yum install vsftpd
- 2 配置
sudo vim /etc/vsftpd/vsftpd.conf
anonymous_enable=NO
local_enable=YES
write_enable=YES
chroot_local_user=YES
chroot_list_enable=YES
# 安裝完成vsftpd后就有有個ftp用戶
sudo passwd ftp
# selinux臨時設(shè)置
setenforce 0
# selinux永久設(shè)置
semanage fcontext -a -t public_content_t /var/ftp
restorecon -R -v /var/ftp/
ls -dZ /var/ftp/ # 查看是否有public_content_t
semanage fcontext -a -t public_content_rw_t "/var/ftp/pub(/.*)?"
restorecon -R -v /var/ftp/pub
setsebool -P allow_ftpd_anon_write on
getsebool -a|grep ftp #查看
安裝配置 gunicorn
在項目根目錄下新建gunicorn.conf.py
vim gunicorn.conf.py
import multiprocessing
bind = "127.0.0.1:8000"
workers = 2
errorlog = "/home/jin/sell/gunicorn.error.log"
#accsessing = "./gunicorn.access.log"
#loglevel = "debug"
proc_name = "gunicorn_sell"
安裝配置 nginx
- 添加源
新建/etc/yum.repos.d/nginx.repo
# Replace “OS” with “rhel” or “centos”, depending on the distribution used, and “OSRELEASE” with “5”, “6”, or “7”, for 5.x, 6.x, or 7.x versions, respectively
[nginx]
name=nginx repo
baseurl=http://nginx.org/packages/rhel/7/$basearch/
gpgcheck=0
enabled=1
sudo yum install nginx
- 添加權(quán)限
/etc/nginx/ngnix.conf
修改 user www; 為 user jin;
- 在項目根目錄下新建nginx.conf
vim nginx.conf
server {
listen 80;
server_name 101.201.238.27;
access_log /home/jin/sell/nginx.access.log;
error_log /home/jin/sell/nginx.error.log;
location / {
proxy_pass http://127.0.0.1:8000;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
#location /robots.txt {
#alias /home/jin/sell/static/robots.txt;
#}
#location /favicon.ico {
# alias /home/jin/sell/static/img/favicon.ico;
#}
location /static {
alias /home/jin/sell/site_static;
expires 30d;
}
# this prevents hidden files (beginning with a period) from being served
location ~ /\. {
access_log off; log_not_found off; deny all;
}
}
將其鏈接到 /etc/nginx/conf.d/blog_project.conf
sudo ln -s /home/jin/sell/nginx.conf /etc/nginx/conf.d/sell_nignx.conf
django配置
django setting
ALLOWED_HOSTS = ['localhost','101.201.238.27']
配置wsgi 在django的目錄下修改
import sys
import site
import os
# site-packages
site.addsitedir('~/.pyenv/versions/healthydoc_env/lib/python2.7/site-packages') # changed to your env
PROJECT_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
sys.path.insert(0, PROJECT_DIR)
# activate env
activate_env = os.path.expanduser("~/.pyenv/versions/healthydoc_env/bin/activate_this.py") # changed to your env
execfile(activate_env, dict(__file__=activate_env))
from django.core.wsgi import get_wsgi_application
os.environ.setdefault("DJANGO_SETTINGS_MODULE", "healthy_doc.settings") # changed to your settings
application = get_wsgi_application()
### 如果要外部訪問啰挪，則打開80端口：
可以選擇臨時關(guān)閉防火墻
sudo service iptables stop
# 查看開放端口
# iptables -L -n --line-numbe 或者開放一些需要的端口蒿往，比如 80
sudo iptables -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
sudo /sbin/iptables -I INPUT -p tcp --dport 80 -j ACCEPT
# sudo service iptatbles save
在/home/jin/sell 運(yùn)行一下gunicorn: 用django的wsgi
sudo nohup gunicorn sell.wsgi:application -c /home/jin/sell/gunicorn.conf.py&
supervisor
supervisor就是用Python開發(fā)的一套通用的進(jìn)程管理程序攒霹，能將一個普通的命令行進(jìn)程變?yōu)楹笈_daemon，并監(jiān)控進(jìn)程狀態(tài)孔庭，異常退出時能自動重啟。
- 安裝
sudo yum install supervisor
# ubuntu
sudo apt-get install supervisor
- 配置
然后陡厘，給我們自己開發(fā)的應(yīng)用程序編寫一個配置文件灭必，讓supervisor來管理它。每個進(jìn)程的配置文件都可以單獨(dú)分拆掸刊，放在/etc/supervisor/conf.d/目錄下免糕，以.conf作為擴(kuò)展名，例如，app.conf定義了一個gunicorn的進(jìn)程
[program:app]
command=/usr/bin/gunicorn -w 1 wsgiapp:application
directory=/srv/www
user=www-data
其中说墨，進(jìn)程app定義在[program:app]中，command是命令苍柏，directory是進(jìn)程的當(dāng)前目錄尼斧，user是進(jìn)程運(yùn)行的用戶身份。
- 啟用
sudo systemctl restart supervisord
重啟supervisor试吁，讓配置文件生效棺棵，然后運(yùn)行命令supervisorctl啟動進(jìn)程
supervisorctl start app
supervisorctl stop app
- 在命令使用變量
如果要在命令行中使用變量，就需要自己先編寫一個shell腳本
#!/bin/sh
/usr/bin/gunicorn -w `grep -c ^processor /proc/cpuinfo` wsgiapp:application
然后熄捍，加上x權(quán)限烛恤，再把command指向該shell腳本即可。
