Elastic Compute Service:Deploy an LNMP stack on an Alibaba Cloud Linux 2, Alibaba Cloud Linux 3, CentOS 7, or CentOS 8 instance

In this section, the following software versions are used. If your software versions are different from the following ones, modify the commands and parameter settings based on your business requirements.

• NGINX 1.20.1

• MySQL 8.0.39

• PHP 8.0.30

Step 1: Disable the firewall and SELinux

1. Connect to the ECS instance on which you want to deploy an LNMP stack.

   For more information, see Connection method overview.

2. Disable the firewall.

   1. Run the following command to view the status of the firewall:

      systemctl status firewalld

      

      • If inactive is returned, the firewall is disabled. In this case, proceed to Step 3.

      • If active is returned, the firewall is enabled. In this case, proceed to Step 2.b.

   2. Disable the firewall.

      • To temporarily disable the firewall, run the following command:

        sudo systemctl stop firewalld

        Note

        After you run the preceding command, the firewall is temporarily disabled. When you restart the instance, the firewall is automatically enabled.

      • To permanently disable the firewall, perform the following steps:

        1. Run the following command to disable the firewall:

           sudo systemctl stop firewalld

        2. Run the following command to prevent the firewall from being automatically enabled on system startup:

           sudo systemctl disable firewalld

        Note

        You can re-enable the firewall after you disable the firewall. For more information, visit the official firewalld website.

3. Disable Security-Enhanced Linux (SELinux).

   1. Run the following command to view the status of SELinux:

      getenforce

      • If Disabled is returned, SELinux is disabled. In this case, proceed to Step 2: Install NGINX.

      • If Enforcing is returned, SELinux is enabled. In this case, proceed to Step 3.b.

   2. Disable SELinux.

      You can temporarily or permanently disable SELinux based on your business requirements. For more information, see Enable or disable SELinux.

Step 2: Install NGINX

1. Run the following command to install NGINX:

   sudo yum -y install nginx

2. Run the following command to view the version of NGINX:

   nginx -v

   The following command output indicates that NGINX is installed:

   nginx version: nginx/1.20.1

Step 3: Install and configure MySQL

Step 4: Install and configure PHP

Configure PHP

1. Create and modify the phpinfo.php file to display PHP information.

   1. Run the following command to create the phpinfo.php file:

      sudo vim <Website root directory>/phpinfo.php

      <Website root directory> is the root value enclosed inside the location ~ .php$ braces that you configured in the nginx.conf file, as shown in the following figure. In this example, the website root directory is /usr/share/nginx/html. Run the following command to create the phpinfo.php file:

      sudo vim /usr/share/nginx/html/phpinfo.php

   2. Press the I key to enter Insert mode.

   3. Enter the following content. The phpinfo() function is used to show all configuration information of PHP.

      <?php echo phpinfo(); ?>

   4. Press the Esc key, enter :wq, and then press the Enter key to save and close the configuration file.

2. Run the following command to start PHP-FPM:

   sudo systemctl start php-fpm

3. Run the following command to configure PHP-FPM to automatically start on system startup:

   sudo systemctl enable php-fpm

Step 5: Test the connection to the LNMP stack

1. Open a web browser on your on-premises Windows computer or another Windows host that can access the Internet.

2. In the address bar, enter http://<Public IP address of the ECS instance>/phpinfo.php.

   The page in the following figure indicates that the LNMP stack is deployed.

   

In this section, the following software versions are used. If your software versions are different from the following ones, modify the commands and parameter settings based on your business requirements.

• NGINX 1.20.1

• MySQL 8.0.26

• PHP 7.4.19

Step 2: Install NGINX

1. Change the CentOS 8 repository address.

   CentOS 8 reached EOL. In accordance with Linux community rules, all content was removed from the following CentOS 8 repository address: http://mirror.centos.org/centos/8/. If you continue to use the default CentOS 8 repository on Alibaba Cloud, an error is reported. To use specific installation packages of CentOS 8, change the CentOS 8 repository address. For more information, see Change CentOS 8 repository addresses.

2. Run the following command to install NGINX.

   In this example, NGINX 1.20.1 is used.

   Note

   Go to the official NGINX website to view the list of NGINX packages suited for CentOS 8.

   sudo dnf -y install https://nginx.org/packages/centos/8/x86_64/RPMS/nginx-1.20.1-1.el8.ngx.x86_64.rpm

3. Run the following command to view the version of NGINX:

   nginx -v

   The following command output shows the version of NGINX:

   nginx version: nginx/1.20.1

Step 3: Install MySQL

1. Run the following command to install MySQL:

   sudo dnf -y install @mysql

2. Run the following command to view the version of MySQL:

   mysql -V

   The following command output shows the version of MySQL:

   mysql  Ver 8.0.26 for Linux on x86_64 (Source distribution)

Step 4: Install and configure PHP

1. Run the following commands to add and update the EPEL repository:

   sudo dnf -y install epel-release
   sudo dnf -y update epel-release

2. Run the following commands to delete the cached software packages that are no longer needed and update the software repository:

   sudo dnf clean all
   sudo dnf makecache

3. Run the follow command to enable PHP 7.4.

   Note

   In this example, PHP 7.4 is used. If you want to use PHP 8.0 or PHP 8.2, you must use the CentOS Stream operating system.

   sudo dnf module enable php:7.4

4. Run the following command to install the PHP modules:

   sudo dnf -y install php php-curl php-dom php-exif php-fileinfo php-fpm php-gd php-hash php-json php-mbstring php-mysqli php-openssl php-pcre php-xml libsodium

5. Run the following command to view the version of PHP:

   php -v

   The following command output shows the version of PHP:

   PHP 7.4.19 (cli) (built: May  4 2021 11:06:37) ( NTS )
   Copyright (c) The PHP Group
   Zend Engine v3.4.0, Copyright (c) Zend Technologies
       with Zend OPcache v7.4.19, Copyright (c), by Zend Technologies

Step 5: Configure NGINX

1. Run the following command to view the default path of the NGINX configuration file, and record the path:

   cat /etc/nginx/nginx.conf

   The include configuration item enclosed inside the http braces contains the default path of the configuration file.

2. Run the following commands to back up the default configuration file in the default path of the configuration file:

   cd /etc/nginx/conf.d
   sudo cp default.conf default.conf.bak

3. Modify the default configuration file.

   1. Run the following command to open the default configuration file:

      sudo vim default.conf

   2. Press the I key to enter Insert mode.

   3. Modify the following content within the location braces:

      location / {
          # Replace the path with the root directory of your website. 
          root   /usr/share/nginx/html;
          # Add the default homepage index.php. 
          index  index.html index.htm index.php;
      }

   4. Remove the comment symbol (#) at the beginning of the location ~ \.php$ line and modify the content enclosed inside the braces.

      Sample modifications:

      location ~ \.php$ {
          # Replace the path with the root directory of your website. 
          root           /usr/share/nginx/html;
          # NGINX is associated with PHP-FPM by using UNIX sockets. This configuration must be the same as the listen configuration in the /etc/php-fpm.d/www.conf file. 
          fastcgi_pass   unix:/run/php-fpm/www.sock;
          fastcgi_index  index.php;
          # Change /scripts$fastcgi_script_name to $document_root$fastcgi_script_name. 
          fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
          # NGINX uses the FastCGI interface to process PHP requests. 
          include        fastcgi_params;
      }

      Note

      The following methods can be used for inter-process communication between NGINX and PHP-FPM:

      • Use TCP sockets. NGINX can communicate with PHP-FPM across instances over the network.

      • Use UNIX domain sockets. NGINX can communicate with PHP-FPM only within the same instance. Communication across networks is not supported.

      

   5. Press the Esc key, enter :wq, and then press the Enter key to save and close the configuration file.

4. Run the following command to start NGINX:

   sudo systemctl start nginx

5. Run the following command to configure NGINX to automatically start on system startup:

   sudo systemctl enable nginx

Step 6: Configure MySQL

1. Run the following command to start MySQL and configure MySQL to automatically start on system startup:

   sudo systemctl enable --now mysqld

2. Run the following command to check whether MySQL is started:

   sudo systemctl status mysqld

   If the command output contains Active: active (running), MySQL is started.

3. Run the following command to configure security settings for MySQL and set the password:

   sudo mysql_secure_installation

   After you run the command, perform the following operations based on the command prompts:

   1. Enter Y and press the Enter key to start the configuration process.

   2. Enter 2 and press the Enter key as prompted for the password strength policy.

      0 indicates a weak password policy, 1 indicates a medium password policy, and 2 indicates a strong password policy. We recommend that you use a strong password policy.

   3. Enter a new password for MySQL and confirm it.

      In this example, the password PASSword123! is used.

   4. Enter Y and press the Enter key to confirm your password.

   5. Enter Y and press the Enter key to delete anonymous users.

   6. Specify whether to allow remote access to MySQL.

      • Enter Y and press the Enter key to deny remote access.

      • Enter N or a key other than Y and press the Enter key to allow remote access.

   7. Enter Y and press the Enter key to delete the test database and the access permissions on the test database.

   8. Enter Y and press the Enter key to reload privilege tables.

Step 7: Configure PHP

1. Modify the PHP configuration file.

   1. Run the following command to open the configuration file:

      sudo vim /etc/php-fpm.d/www.conf

   2. Press the I key to enter Insert mode.

   3. Find the user = apache and group = apache lines and change apache to nginx.

      

   4. Press the Esc key, enter :wq, and then press the Enter key to save and close the configuration file.

2. Create and modify the phpinfo.php file to display PHP information.

   1. Run the following command to create the phpinfo.php file:

      sudo vim <Website root directory>/phpinfo.php

      <Website root directory> is the root value enclosed inside the location ~ .php$ braces that you configured in the nginx.conf file, as shown in the following figure. In this example, the website root directory is /usr/share/nginx/html. Run the following command to create the phpinfo.php file:

      sudo vim /usr/share/nginx/html/phpinfo.php

   2. Press the I key to enter Insert mode.

   3. Enter the following content. The phpinfo() function is used to show all configuration information of PHP.

      <?php echo phpinfo(); ?>

   4. Press the Esc key, enter :wq, and then press the Enter key to save and close the configuration file.

3. Run the following command to start PHP-FPM:

   sudo systemctl start php-fpm

4. Run the following command to configure PHP-FPM to automatically start on system startup:

   sudo systemctl enable php-fpm

Step 8: Test the connection to the LNMP stack

1. Open a web browser on your on-premises physical machine.

2. In the address bar, enter http://<Public IP address of the ECS instance>/phpinfo.php.

   The page in the following figure indicates that the LNMP stack is deployed.