python Django Nginx+ uWSGI 安装配置

环境：

CentOS7、python-3.5.3、Nignx 1.10.3 、Django 1.10.6、uWSGI 2.0.14

django项目目录：/var/webRoot/p1

项目结构：

基础包安装

yum install -y bind-utils traceroute wget man sudo ntp ntpdate screen patch make gcc gcc-c++ flex bison zip unzip ftp net-tools --skip-broken 

关联动态库 

# vi /etc/ld.so.conf                         添加如下内容

include /etc/ld.so.conf.d/*.conf

/usr/local/lib

/usr/local/lib64

/lib

/lib64

/usr/lib

/usr/lib64

编辑完ld.so.conf,执行 

# ldconfig 

使动态库生效

安装pcre

下载最新的pcre包

http://pcre.org/

#cd /usr/local/src

tar -zxvf pcre-8.40.tar.gz

cd pcre-8.40

./configure --enable-jit; make; make install

 ldconfig 

安装openssl

下载最新的openssl包

https://www.openssl.org/

cd /usr/local/src

tar -zxvf openssl-1.0.2k.tar.gz

cd openssl-1.0.2k

 ./config; make; make install

ldconfig  

安装python

yum -y install sqlite-devel

下载XZ compressed source tarball    Python-3.5.3.tar.xz 到 /usr/local/src

cd /usr/local/src; tar -Jxvf Python-3.5.3.tar.xz; cd Python-3.5.3; 

./configure --prefix=/usr/local/python_3.5.3; make; make install

python -c "import ssl; print(ssl.OPENSSL_VERSION)"    #打印python中ssl模块版本

添加环境变量

在 /etc/profile添加下面这行

export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/root/bin:/usr/local/python_3.5.3/bin

重载环境变量  . /etc/profile

若想让 python3 成为默认的python 

可以先查询 原来的python路径，然后把原来的路径做软链接指向新的python3路径即可，可直接向/bin做python3版本的链接 ln -s /usr/local/python_3.5.3/bin/python3.5

which python

修复pip3 list格式告警问题 

mkdir ~/.pip

echo -en "[list]
format=columns" > ~/.pip/pip.conf

安装django

pip3 install django

安装uwsgi

pip3 install uwsgi

uwsgi --version  # 可查看到uwsgi版本号

创建运行uwsgi的用户

useradd uwsgi -M -s /sbin/nologin

id  uwsgi 

uid=1005(uwsgi) gid=1005(uwsgi) groups=1005(uwsgi)

测试

uwsgi --http :8000 --chdir /var/webRoot/project/ --wsgi-file project/wsgi.py

curl http://127.0.0.1:8000 可以测试浏览页面

uwsgi 配置

mkdir /etc/uwsgi 

vi  /etc/uwsgi/uwsgi9090.ini

[uwsgi]
socket = 127.0.0.1:9090
chdir = /var/webRoot/p1/ 
wsgi-file = p1/wsgi.py
;virtualenv = /opt/pyevn27/ ;虚拟环境的路径
uid = 1005 ;指定运行的用户,指定运行的用户与组，root用户不用指定uid与gid
gid = 1005
master=True
vacuum=True
processes=5
max-requests=10000
pidfile = /var/run/uwsgi9090.pid
daemonize = /var/log/uwsgi/uwsgi9090.log

注意：

/var/webRoot/p1/目录及 /var/webRoot/p1/db.sqlite3  所属者与所属组应与上面的 用户与组对应

可参考https://docs.djangoproject.com/en/1.10/howto/deployment/wsgi/uwsgi/

uwsgi启动脚本：

Emperor模式
uWSGI的Epreror模式可以用来管理机器上部署的uwsgi服务，在这种模式下，会有一个特殊的进程对其它部署的服务进行监视。我们将所有配置文件（ini或xml文件）统一放到一个文件夹（如：/etc/uwsgi）中，然后启动Emperor模式：

uwsgi --emperor /etc/uwsgi

用systemd管理uwsgi服务

新建  /etc/systemd/system/uwsgi.service 文件，内容如下

[Unit]
Description=uWSGI Emperor
After=syslog.target

[Service]
ExecStart=/usr/local/python_3.5.3/bin/uwsgi --emperor /etc/uwsgi
Restart=always
KillSignal=SIGQUIT
Type=notify
StandardError=syslog
NotifyAccess=all

[Install]
WantedBy=multi-user.target

systemctl enable uwsgi

systemctl start uwsgi

安装nginx

yum -y install zlib zlib-devel gd gd-devel --skip-broken

添加一个不能登录且没有主目录的用户Nginx

#useradd nginx -M -s /sbin/nologin   

下载nginx 最新稳定版

cd /usr/local/src

tar -zxvf nginx-1.10.3.tar.gz; cd nginx-1.10.3

./configure --prefix=/usr/local/nginx --user=nginx --group=nginx --with-http_stub_status_module --with-http_ssl_module --with-pcre=/usr/local/src/pcre-8.40 --with-http_realip_module --with-http_image_filter_module --with-http_gzip_static_module --with-openssl=/usr/local/src/openssl-1.0.2k --with-openssl-opt="enable-tlsext" --with-stream --with-stream_ssl_module --with-http_v2_module

make; make install

nginx错误编译处理：

make[1]: *** [/usr/local/src/openssl-1.1.0e/.openssl/include/openssl/ssl.h] Error 255

原因： /usr/local/src/openssl-1.1.0e/.openssl路径不存在。

解决方法：打开 nginx解压源文件的下的 auto/lib/openssl/conf

CORE_INCS="$CORE_INCS $OPENSSL/.openssl/include"
CORE_DEPS="$CORE_DEPS $OPENSSL/.openssl/include/openssl/ssl.h"
CORE_LIBS="$CORE_LIBS $OPENSSL/.openssl/lib/libssl.a"
CORE_LIBS="$CORE_LIBS $OPENSSL/.openssl/lib/libcrypto.a"
CORE_LIBS="$CORE_LIBS $NGX_LIBDL"

修改成以下代码：

CORE_INCS="$CORE_INCS $OPENSSL/include"
CORE_DEPS="$CORE_DEPS $OPENSSL/include/openssl/ssl.h"
CORE_LIBS="$CORE_LIBS $OPENSSL/libssl.a"
CORE_LIBS="$CORE_LIBS $OPENSSL/libcrypto.a"
CORE_LIBS="$CORE_LIBS $NGX_LIBDL"

重新编译即可

添加ngxin到系统服务，设置nginx开启启动

vi /etc/rc.d/init.d/nginx                    #编辑启动文件添加下面内容

=======================================================

#!/bin/bash

# nginx Startup script for the Nginx HTTP Server

# it is v.0.0.2 version.

# chkconfig: - 85 15

# description: Nginx is a high-performance web and proxy server.

# It has a lot of features, but it's not for everyone.

# processname: nginx

# pidfile: /var/run/nginx.pid

# config: /usr/local/nginx/conf/nginx.conf

nginxd=/usr/local/nginx/sbin/nginx

nginx_config=/usr/local/nginx/conf/nginx.conf

nginx_pid=/usr/local/nginx/logs/nginx.pid

RETVAL=0

prog="nginx"

# Source function library.

. /etc/rc.d/init.d/functions

# Source networking configuration.

. /etc/sysconfig/network

# Check that networking is up.

[ "${NETWORKING}" = "no" ] && exit 0

[ -x $nginxd ] || exit 0

# Start nginx daemons functions.

start() {

if [ -e $nginx_pid ];then

echo "nginx already running...."

exit 1

fi

echo -n $"Starting $prog: "

daemon $nginxd -c ${nginx_config}

RETVAL=$?

echo

[ $RETVAL = 0 ] && touch /var/lock/subsys/nginx

return $RETVAL

}

# Stop nginx daemons functions.

stop() {

echo -n $"Stopping $prog: "

killproc $nginxd

RETVAL=$?

echo

[ $RETVAL = 0 ] && rm -f /var/lock/subsys/nginx /usr/local/nginx/logs/nginx.pid

}

reload() {

echo -n $"Reloading $prog: "

#kill -HUP `cat ${nginx_pid}`

killproc $nginxd -HUP

RETVAL=$?

echo

}

# See how we were called.

case "$1" in

start)

start

;;

stop)

stop

;;

reload)

reload

;;

restart)

stop

start

;; 

status)

status $prog

RETVAL=$?

;;

*)

echo $"Usage: $prog {start|stop|restart|reload|status|help}"

exit 1

esac

exit $RETVAL

=======================================================

:wq!              #保存退出

chmod 755 /etc/rc.d/init.d/nginx              #赋予文件执行权限

chkconfig nginx on                   #设置开机启动

/etc/rc.d/init.d/nginx restart                   #重启

service nginx restart

CentOS 7 nginx启动脚本

vi /usr/lib/systemd/system/nginx.service  #编辑启动文件添加下面内容

[Unit]
Description=nginx - high performance web server
Documentation=http://nginx.org/en/docs/
After=network.target remote-fs.target nss-lookup.target

 

[Service]
Type=forking
PIDFile=/usr/local/nginx/logs/nginx.pid
ExecStartPre=/usr/local/nginx/sbin/nginx -t -c /etc/nginx/nginx.conf
ExecStart=/usr/local/nginx/sbin/nginx -c /etc/nginx/nginx.conf
ExecReload=/bin/kill -s HUP $MAINPID
ExecStop=/bin/kill -s QUIT $MAINPID
PrivateTmp=true

[Install]
WantedBy=multi-user.target

systemctl enable nginx #设置开机启动

systemctl start nginx.service #启动

nginx配置 

/usr/local/nginx/conf/conf.d/p1.conf

upstream control_cc_com {
    server 127.0.0.1:9090 weight=10 max_fails=0;
}

server {
    listen       8080;
    server_name  localhost;
    charset utf-8;
    access_log  logs/p1.log  main;

    location /static/system/ {
        alias /var/webRoot/p1/upload/system/;
    }


    location /static/user_image/ {
        alias /var/webRoot/p1/upload/user_image/;
    }

    location /static {
        alias /var/webRoot/p1/static;
    }

    location / {            
        include uwsgi_params;
        uwsgi_pass control_cc_com;
    }
}

nginx.conf

user nginx nginx;
worker_processes auto;
worker_cpu_affinity auto;

error_log  logs/error.log notice;
pid        logs/nginx.pid;
worker_rlimit_nofile 65535;

events {
    use epoll;
    worker_connections 65535;
}


http {
    include       mime.types;
    default_type  application/octet-stream;
    log_format  main  '$http_x_forwarded_for`$remote_addr`$proxy_add_x_forwarded_for`[$time_local]`"$request"`'
                      '$status`$body_bytes_sent`"$http_referer"`'
                      '"$http_user_agent"`"$request_time"`'
                      '$http_x_request_id`$upstream_response_time`$upstream_addr`$upstream_connect_time`$upstream_status';

    log_format  access  '$remote_addr`[$time_local]`"$request"`'
                      '$status`$body_bytes_sent`"$http_referer"`'
                      '"$http_user_agent"`"$http_x_forwarded_for"`'
                      '$http_x_request_id`$upstream_response_time`$upstream_addr`$upstream_connect_time`$upstream_status';

#    proxy_ignore_client_abort on;
    proxy_headers_hash_max_size 2048;
    proxy_headers_hash_bucket_size 256;
    sendfile    on;
    tcp_nopush  on;
    tcp_nodelay on;
    keepalive_timeout 60;
    server_tokens off;

    gzip    on;
    gzip_min_length 1k;
    gzip_buffers    4 16k;
    gzip_http_version 1.1;
    gzip_comp_level 2;
    gzip_types  text/plain  application/x-javascript text/css application/xml;
    gzip_vary on;

    client_max_body_size 100m;
    client_body_buffer_size 128k;
    client_body_temp_path /dev/shm/client_body_temp;
    proxy_connect_timeout 600;
    proxy_read_timeout 600;
    proxy_send_timeout 600;
    proxy_buffer_size 16k;
    proxy_buffers 32 32k;
    proxy_busy_buffers_size 64k;
    proxy_temp_file_write_size 64k;
    proxy_temp_path /dev/shm/proxy_temp;

    include /etc/nginx/conf.d/*.conf;

}

django admin静态文件加载不了问题

在settings.py 添加下面设置

先把setttings中的 STATICFILES_DIRS 注释

STATIC_ROOT = os.path.join(BASE_DIR, "static")
STATICFILES_FINDERS = (
    "django.contrib.staticfiles.finders.FileSystemFinder",
    "django.contrib.staticfiles.finders.AppDirectoriesFinder"
)

cd /var/webRoot/p1

python3 manage.py collectstatic    #复制 admin静态文件拷到当前目录 static目录

会生成 ./static/admin  目录，并把上面的配置删除或注释掉

时区设置，请注意大小写，到Linux生产系统时遇到这个问题。

TIME_ZONE = 'Asia/Shanghai'