操作系統：Linux wiki 2.6.32-131.0.15.el6.x86_64
nginx版本： nginx-1.5.7
uwsgi版本：uwsgi-2.0.8
大致流程參考：http://www.linuxyw.com/353.html
(官方文檔：http://uwsgi-docs.readthedocs.org/en/latest/tutorials/Django_and_nginx.html)
下面主要介紹安裝過程中出現的幾個問題
1. uwsgi安裝中，由於openssl 源碼升級過導致的問題
ssl.c:(.text+0x4a4): undefined reference to `EC_KEY_new_by_curve_name' ssl.c:(.text+0x4e6): undefined reference to `EC_KEY_free' collect2: error: ld returned 1 exit status *** error linking uWSGI *** make: *** [all] Error 1
常叔說是由於找到了頭文件，但是沒有找到頭文件的函數的定義導致的，google一把，果然如此：
From the error shown it looks like you have new openssl headers but still old libssl.so library in the library path. Make sure to remove old openssl library (and install new library if there are no new libssl.so available). http://trac.nginx.org/nginx/ticket/169
下面問題似乎明朗了，由於我之前給openssl升級過，升級命令如下：
./config --prefix=/usr/ --openssldir=/usr/local/openssl make make test make install
再看下系統現在rpm包的安裝情況和調用的動態鏈接庫的情況：
root@192.168.100.252:/data/installs/uwsgi-2.0.8# rpm -qa | grep openssl openssl-1.0.0-10.el6.x86_64 openssl-devel-1.0.0-10.el6.x86_64 openssl098e-0.9.8e-17.el6.x86_64 root@192.168.100.252:/data/installs/uwsgi-2.0.8# ll /usr/lib64/ | grep ssl lrwxrwxrwx. 1 root root 27 Aug 20 01:15 libnss_compat_ossl.so.0 -> libnss_compat_ossl.so.0.0.0 -rwxr-xr-x. 1 root root 84672 Mar 17 2010 libnss_compat_ossl.so.0.0.0 -rwxr-xr-x. 1 root root 215792 Apr 22 2011 libssl3.so -rw-r--r-- 1 root root 676230 Jan 22 12:52 libssl.a lrwxrwxrwx. 1 root root 21 Aug 20 01:17 libsslcommon.so.5 -> libsslcommon.so.5.0.0 -rwxr-xr-x. 1 root root 209904 Apr 6 2011 libsslcommon.so.5.0.0 lrwxrwxrwx. 1 root root 15 Aug 20 01:15 libssl.so -> libssl.so.1.0.0 -rwxr-xr-x. 1 root root 324680 Apr 21 2010 libssl.so.0.9.8e lrwxrwxrwx. 1 root root 15 Aug 20 01:14 libssl.so.10 -> libssl.so.1.0.0 -rwxr-xr-x. 1 root root 374128 Feb 10 2011 libssl.so.1.0.0 lrwxrwxrwx. 1 root root 16 Aug 20 01:19 libssl.so.6 -> libssl.so.0.9.8e drwxr-xr-x. 3 root root 4096 Aug 20 01:14 openssl drwxr-xr-x. 3 root root 4096 Aug 20 01:19 openssl098e
稍等，那個1098e的rpm包應該可以先刪掉了。。rpm -e openssl098e-0.9.8e-17.el6.x86_64
不行啊，這樣還是找不到問題的根源，先找出我的虛擬機244，在上面裝一把看看，內網服務器別搞崩潰了
244的小機器也是一樣的openssl升級方法，安裝uwsgi完全沒報錯，這下真迷惑了，繼續google
http://www.111cn.net/sys/CentOS/61326.htm 大牛說需要加一個參數 shared zlib-dynamic
再次make clean ; ./config --prefix=/usr/ --openssldir=/usr/local/openssl shared zlib-dynamic ; make 還是報錯
root@192.168.100.252:/data/installs/openssl-1.0.0m# ./config --prefix=/usr/ --openssldir=/usr/local/openssl shared zlib-dynamic
root@192.168.100.252:/data/installs/openssl-1.0.0m# make
/usr/bin/ranlib ../../libcrypto.a || echo Never mind. make[2]: Leaving directory `/data/installs/openssl-1.0.0m/crypto/ts' if [ -n "libcrypto.so.1.0.0 libssl.so.1.0.0" ]; then \ (cd ..; make libcrypto.so.1.0.0); \ fi make[2]: Entering directory `/data/installs/openssl-1.0.0m' make[3]: Entering directory `/data/installs/openssl-1.0.0m' make[4]: Entering directory `/data/installs/openssl-1.0.0m' /usr/bin/ld: libcrypto.a(e_4758cca.o): relocation R_X86_64_32 against `.data' can not be used when making a shared object; recompile with -fPIC libcrypto.a(e_4758cca.o): could not read symbols: Bad value collect2: error: ld returned 1 exit status make[4]: *** [link_a.gnu] Error 1 make[4]: Leaving directory `/data/installs/openssl-1.0.0m' make[3]: *** [do_linux-shared] Error 2 make[3]: Leaving directory `/data/installs/openssl-1.0.0m' make[2]: *** [libcrypto.so.1.0.0] Error 2 make[2]: Leaving directory `/data/installs/openssl-1.0.0m' make[1]: *** [shared] Error 2 make[1]: Leaving directory `/data/installs/openssl-1.0.0m/crypto' make: *** [build_crypto] Error 1
好熟悉的感覺，可能是源碼被污染了，刪掉重來。。
################# uWSGI configuration ################# pcre = True kernel = Linux malloc = libc execinfo = False ifaddrs = True ssl = True zlib = True locking = pthread_mutex plugin_dir = . timer = timerfd yaml = embedded json = False filemonitor = inotify routing = True debug = False capabilities = False xml = libxml2 event = epoll ############## end of uWSGI configuration ############# total build time: 6 seconds *** uWSGI is ready, launch it with ./uwsgi ***
done
2. nginx安裝，這個比較簡單，就不介紹了
cd /data/var/nginx-1.5.7 ./configure --prefix=/usr/local/nginx --with-http_ssl_module --with-pcre=/data/var/pcre-8.11 --with-openssl=/data/installs/openssl-1.0.0m/ make make install
3. uwsgi配置
3.1 參照官方文檔，先寫一個test.py測試一下uwsgi運行情況
root@192.168.100.252:/usr/local/nginx# cat /data/forilen/Kikyou/Kikyou_web/test.py def application(env, start_response): start_response('200 OK', [('Content-Type','text/html')]) #return [b"Hello World"] # python3 return ["Hello World"] # python2
啟動uwsgi
root@192.168.100.252:/data/forilen/Kikyou/Kikyou_web# uwsgi --http :8090 --wsgi-file test.py *** Starting uWSGI 2.0.8 (64bit) on [Thu Jan 22 18:07:28 2015] *** compiled with version: 4.8.2 on 22 January 2015 15:33:07 os: Linux-2.6.32-131.0.15.el6.x86_64 #1 SMP Tue May 10 15:42:40 EDT 2011 nodename: wiki machine: x86_64 clock source: unix pcre jit disabled detected number of CPU cores: 4 current working directory: /data/forilen/Kikyou/Kikyou_web detected binary path: /usr/bin/uwsgi uWSGI running as root, you can use --uid/--gid/--chroot options *** WARNING: you are running uWSGI as root !!! (use the --uid flag) *** *** WARNING: you are running uWSGI without its master process manager *** your processes number limit is 1024 your memory page size is 4096 bytes detected max file descriptor number: 1024 lock engine: pthread robust mutexes thunder lock: disabled (you can enable it with --thunder-lock) uWSGI http bound on :8090 fd 4 spawned uWSGI http 1 (pid: 31133) uwsgi socket 0 bound to TCP address 127.0.0.1:56481 (port auto-assigned) fd 3 Python version: 2.6.6 (r266:84292, Apr 11 2011, 15:50:32) [GCC 4.4.4 20100726 (Red Hat 4.4.4-13)] *** Python threads support is disabled. You can enable it with --enable-threads *** Python main interpreter initialized at 0x1aad390 your server socket listen backlog is limited to 100 connections your mercy for graceful operations on workers is 60 seconds mapped 72768 bytes (71 KB) for 1 cores *** Operational MODE: single process *** WSGI app 0 (mountpoint='') ready in 0 seconds on interpreter 0x1aad390 pid: 31132 (default app) *** uWSGI is running in multiple interpreter mode ***
瀏覽器拉取頁面：
spawned uWSGI worker 1 (and the only) (pid: 31132, cores: 1) [pid: 31132|app: 0|req: 1/1] 192.168.100.30 () {36 vars in 847 bytes} [Thu Jan 22 18:08:14 2015] GET / => generated 11 bytes in 0 msecs (HTTP/1.1 200) 1 headers in 44 bytes (1 switches on core 0)
3.2 再用uwsgi重新啟動項目Kikyou_web，下面的Kikyou_web.wsgi不用存在
root@192.168.100.252:/data/forilen/Kikyou/Kikyou_web# uwsgi --http :8090 --module Kikyou_web.wsgi *** Starting uWSGI 2.0.8 (64bit) on [Thu Jan 22 18:14:04 2015] *** compiled with version: 4.8.2 on 22 January 2015 15:33:07 os: Linux-2.6.32-131.0.15.el6.x86_64 #1 SMP Tue May 10 15:42:40 EDT 2011 nodename: wiki
瀏覽器訪問
3.3 配置/usr/local/nginx/conf/nginx.conf，添加django資源處理配置部分
server { # the port your site will be served on listen 8090; server_name localhost; charset utf-8; # max upload size client_max_body_size 75M; # adjust to taste # Django media location /media { alias /data/forilen/Kikyou/Kikyou_web/media; # your Django project's media files - amend as required } location /static { alias /usr/lib/python2.6/site-packages/django/contrib/admin/static; # your Django project's static files - amend as required } # Finally, send all non-media requests to the Django server. location / { uwsgi_pass django; include /usr/local/nginx/conf/uwsgi_params; # the uwsgi_params file you installed } }
reload nginx配置，瀏覽器訪問請求資源
3.4 修改nginx.conf
upstream django { server unix:///usr/local/nginx/uwsgi.sock; # for a file socket #server 127.0.0.1:8001; # for a web port socket (we'll use this first) }
啟動項目：root@192.168.100.252:/usr/local/nginx# uwsgi --socket /usr/local/nginx/uwsgi.sock --module Kikyou_web.wsgi --chmod-socket=664
此時只有靜態頁面可以訪問 >_<
3.5 添加文件/usr/local/nginx/conf/uwsgi.ini
# uwsgi.ini file [uwsgi] # Django-related settings # the base directory (full path) chdir = /data/forilen/Kikyou/Kikyou_web # Django's wsgi file module = Kikyou_web.wsgi # the virtualenv (full path) # home = /path/to/virtualenv # process-related settings # master master = true # maximum number of worker processes processes = 2 # the socket (use the full path to be safe socket = /usr/local/nginx/uwsgi.sock # ... with appropriate permissions - may be needed # chmod-socket = 664 # clear environment on exit vacuum = true
root@192.168.100.252:/usr/local/nginx# uwsgi --ini /usr/local/nginx/conf/uwsgi.ini
reload nginx，再次訪問，此時靜態頁面和動態頁面都能正常訪問。。^_^
4. 常見錯誤積累
4.1 nginx配置錯誤導致報錯
Traceback (most recent call last): File "/usr/lib/python2.6/site-packages/django/core/handlers/wsgi.py", line 231, in __call__ request = self.request_class(environ) File "/usr/lib/python2.6/site-packages/django/core/handlers/wsgi.py", line 147, in __init__ self.method = environ['REQUEST_METHOD'].upper() KeyError: 'REQUEST_METHOD' [pid: 16269|app: 0|req: 1/1] () {16 vars in 627 bytes} [Mon Feb 2 02:43:01 2015] => generated 0 bytes in 44 msecs ( 500) 0 headers in 0 bytes (0 switches on core 0)
后記：最后sshd服務掛了，起不來了，看來給openssl升級還是那么困難。。。。>_<
4.2 django調用系統腳本，由於超時導致504timeout
調整nginx.conf配置，添加超時配置如下，完美解決問題。
#the upstream component nginx needs to connect to upstream django { server unix:///usr/local/nginx/uwsgi.sock; # for a file socket #server 127.0.0.1:8001; # for a web port socket (we'll use this first) } server { # the port your site will be served on listen 8090; server_name localhost; charset utf-8; # max upload size client_max_body_size 75M; # adjust to taste access_log /data/release/Kikyou/Kikyou_web/logs/access.log; error_log /data/release/Kikyou/Kikyou_web/logs/error.log; # Django media location /media { alias /data/release/Kikyou/Kikyou_web/media; # your Django project's media files - amend as required } location /static { alias /usr/lib/python2.6/site-packages/django/contrib/admin/static; # your Django project's static files - amend as required } # Finally, send all non-media requests to the Django server. location / { uwsgi_pass django; uwsgi_read_timeout 1800; uwsgi_send_timeout 300; proxy_read_timeout 300; include /usr/local/nginx/conf/uwsgi_params; # the uwsgi_params file you installed } }