マシン環境と前提

マシン

OSX Yoshemite
- ver 10.10.5

前提

Railsの動作環境を作るぜ！
mac上にvagrant環境が既にある
vagrant上にCentOS6.7の環境が既にある

コマンドメモ

グループ一覧

cat /etc/group

ユーザ一覧

cut -d : -f1 /etc/passwd

bashrcなどにalias登録しておくと楽

alias listusers='cut -d : -f1 /etc/passwd'

nginx

nginxユーザ追加

グループ追加

sudo groupadd -g 600 nginx

ユーザ追加

sudo useradd -g nginx -u 600 -s /sbin/nologin -d /home/nginx nginx

ソースコード取得

cd /usr/local/src/

sudo wget https://nginx.org/download/nginx-1.11.5.tar.gz

sudo tar zxvf nginx-1.11.5.tar.gz

/usr/local 以下は自分でアプリケーションをインストールする場所として利用する
/usr/local/src はソースコードの置き場所

依存関係解消

yumで

sudo yum -y install pcre-devel    #正規表現ライブラリ

ビルド

cd nginx-1.7.11

sudo ./configure --prefix=/usr/local/nginx --user=nginx --group=nginx --with-http_ssl_module

sudo make

sudo make install

起動ファイルの設置

https://www.nginx.com/resources/wiki/start/topics/examples/initscripts/
リンク先から環境に合うソースをコピーしてくる

sudo vi /etc/init.d/nginx
※コピーしてきたソースを貼る

sudo chmod 755 /etc/init.d/nginx

インストールした環境に合わせてパスの書き換えをする

sudo vi /etc/init.d/nginx


nginx="/usr/sbin/nginx"
↓
nginx="/usr/local/nginx/sbin/nginx"

NGINX_CONF_FILE="/etc/nginx/nginx.conf"
↓
NGINX_CONF_FILE="/usr/local/nginx/conf/nginx.conf"

nginxの起動確認

ログの設定

出力先ディレクトリ作成

sudo mkdir /var/log/nginx

sudo chmod 777 /var/log/nginx/

sudo chown nginx:nginx /var/log/nginx

errorログの設定

sudo vi /usr/local/nginx/conf/nginx.conf


※errorログの出力を以下の設定に。
 デバッグのためにnotice以上を出力する。

error_log   /var/log/nginx/error.log notice;

ポートスキャンコマンドのインストール

sudo yum install nmap

nginx起動

起動

sudo /etc/init.d/nginx start

[vagrant@localhost nginx]$ sudo /etc/init.d/nginx start
nginx を起動中:                                            [  OK  ]
[vagrant@localhost nginx]$

ポートの確認
- 80番が開いているのでOK

nmap localhost

[vagrant@localhost nginx]$ nmap localhost

Starting Nmap 5.51 ( http://nmap.org ) at 2016-12-18 05:20 UTC
Nmap scan report for localhost (127.0.0.1)
Host is up (0.00016s latency).
Other addresses for localhost (not scanned): 127.0.0.1
Not shown: 996 closed ports
PORT    STATE SERVICE
22/tcp  open  ssh
25/tcp  open  smtp
80/tcp  open  http
111/tcp open  rpcbind

Nmap done: 1 IP address (1 host up) scanned in 0.07 seconds
[vagrant@localhost nginx]$

ログの確認

cat /var/log/nginx/error.log

[vagrant@localhost nginx]$ cat /var/log/nginx/error.log
2016/12/18 05:16:58 [notice] 9946#0: using the "epoll" event method
2016/12/18 05:16:58 [notice] 9946#0: nginx/1.11.5
2016/12/18 05:16:58 [notice] 9946#0: built by gcc 4.4.7 20120313 (Red Hat 4.4.7-16) (GCC)
2016/12/18 05:16:58 [notice] 9946#0: OS: Linux 2.6.32-573.el6.x86_64
2016/12/18 05:16:58 [notice] 9946#0: getrlimit(RLIMIT_NOFILE): 1024:4096
2016/12/18 05:16:58 [notice] 9947#0: start worker processes
2016/12/18 05:16:58 [notice] 9947#0: start worker process 9949
[vagrant@localhost nginx]$

nginxの停止

停止

sudo /etc/init.d/nginx stop

[vagrant@localhost nginx]$ sudo /etc/init.d/nginx stop
nginx を停止中:                                            [  OK  ]
[vagrant@localhost nginx]$

ポートの確認
- 80番が閉じているのでOK

nmap localhost

[vagrant@localhost nginx]$ nmap localhost

Starting Nmap 5.51 ( http://nmap.org ) at 2016-12-18 05:27 UTC
Nmap scan report for localhost (127.0.0.1)
Host is up (0.0052s latency).
Other addresses for localhost (not scanned): 127.0.0.1
Not shown: 997 closed ports
PORT    STATE SERVICE
22/tcp  open  ssh
25/tcp  open  smtp
111/tcp open  rpcbind

Nmap done: 1 IP address (1 host up) scanned in 0.07 seconds
[vagrant@localhost nginx]$

環境変数にパスを通す

とりあえず追加した

sudo vi /etc/profile

最終行に以下を追記
# user add
export PATH=$PATH:/usr/local/nginx/sbin/

再ログインして確認

[vagrant@localhost nginx]$ nginx -v
nginx version: nginx/1.11.5
[vagrant@localhost nginx]$

Ruby

前提

rbenvを利用しない
- ソースからインストール
- 本番環境を想定
  - 本番環境のRubyのverを頻繁に変更することはない
  - なのでRuby2.3.3をピンポイントでインストールする
  - という設定で進める

CentOSにデフォルトでインストールされているrubyの削除

sudo yum erase ruby.x86_64

依存関係の解消

yumで一気にやっちまう

yum.confの編集
- IPv6を無効にする

sudo vi /etc/yum.conf

以下を追記
# user add
ip_resolve=4

yumのupdate&install

sudo yum -y install libyaml libyaml-devel zlib zlib-devel readline readline-devel openssl openssl-devel libxml2 libxml2-devel libxslt libxslt-devel libcurl-devel

sudo yum update libyaml libyaml-devel zlib zlib-devel readline readline-devel openssl openssl-devel libxml2 libxml2-devel libxslt libxslt-devel libcurl-devel

ダウンロード

cd /usr/local/src

sudo wget https://cache.ruby-lang.org/pub/ruby/2.3/ruby-2.3.3.tar.gz

sudo tar zxvf ruby-2.3.3.tar.gz

インストール

cd ruby-2.3.3

sudo ./configure --prefix=/usr/local/    # オプションは必要があれば何か付与すること

sudo make

sudo make install


一気にやりたいならこれでもいいかも(未検証)
sudo ./configure --prefix=/usr/local/ && make && make install

確認

ruby -v

[vagrant@localhost ruby-2.3.3]$ ruby -v
ruby 2.3.3p222 (2016-11-21 revision 56859) [x86_64-linux]
[vagrant@localhost ruby-2.3.3]$

which ruby

[vagrant@localhost ruby-2.3.3]$ which ruby
/usr/local/bin/ruby
[vagrant@localhost ruby-2.3.3]$

Rails

Gemでインストール

gemコマンドをsudoできるようにする
- /usr/local/bin/ 以下にあるコマンドは全てsudoできるようにしてしまう

sudo visudo


以下の記述を修正(nginxもついでに追加)
Defaults    secure_path = /sbin:/bin:/usr/sbin:/usr/bin
↓
Defaults    secure_path = /sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin/:/usr/local/nginx/sbin/

インストール

sudo gem install rails -v 5.0.0.1

確認

rails -v

[vagrant@localhost ~]$ rails -v
Rails 5.0.0.1
[vagrant@localhost ~]$

Passenger

インストール

gemでインストール

sudo gem install passenger -v '5.0.30'

確認

[vagrant@localhost ~]$ passenger -v
Phusion Passenger 5.0.30
[vagrant@localhost ~]$ which passenger
/usr/local/bin/passenger
[vagrant@localhost ~]$

nginxモジュールのインストール

sudo passenger-install-nginx-module

ところどころで聞かれる。

最初はpassengerサポートでnginxをコンパイルするか？なので 1
次は言語。 Ruby で
nginxのソースコードの場所を聞かれるので /usr/local/src/nginx-1.11.5 で
どこにインストールしたいか聞かれるので /usr/local/nginx で
そのほかのconfigureオプションを聞かれるけどとりあえず無し。そのまま Enter 押下で
最後に、やっちまうぞ！？的な感じになるのでおとなしく yes で
無事に終わったら Enter で

[vagrant@localhost ~]$ sudo passenger-install-nginx-module
Welcome to the Phusion Passenger Nginx module installer, v5.0.30.

This installer will guide you through the entire installation process. It
shouldn't take more than 5 minutes in total.

Here's what you can expect from the installation process:

 1. This installer will compile and install Nginx with Passenger support.
 2. You'll learn how to configure Passenger in Nginx.
 3. You'll learn how to deploy a Ruby on Rails application.

Don't worry if anything goes wrong. This installer will advise you on how to
solve any problems.

Press Enter to continue, or Ctrl-C to abort.
1

--------------------------------------------

Which languages are you interested in?

Use <space> to select.
If the menu doesn't display correctly, press '!'

 ‣ ⬢  Ruby
   ⬢  Python
   ⬡  Node.js
   ⬡  Meteor

--------------------------------------------

Checking for required software...

 * Checking for C compiler...
      Found: yes
      Location: /usr/bin/cc

省略

--------------------------------------------

Automatically download and install Nginx?

Nginx doesn't support loadable modules such as some other web servers do,
so in order to install Nginx with Passenger support, it must be recompiled.

Do you want this installer to download, compile and install Nginx for you?

 1. Yes: download, compile and install Nginx for me. (recommended)
    The easiest way to get started. A stock Nginx 1.10.1 with Passenger
    support, but with no other additional third party modules, will be
    installed for you to a directory of your choice.

 2. No: I want to customize my Nginx installation. (for advanced users)
    Choose this if you want to compile Nginx with more third party modules
    besides Passenger, or if you need to pass additional options to Nginx's
    'configure' script. This installer will  1) ask you for the location of
    the Nginx source code,  2) run the 'configure' script according to your
    instructions, and  3) run 'make install'.

Whichever you choose, if you already have an existing Nginx configuration file,
then it will be preserved.

Enter your choice (1 or 2) or press Ctrl-C to abort: 2

--------------------------------------------

Where is your Nginx source code located?

Please specify the directory: /usr/local/src/nginx-1.11.5

--------------------------------------------

Where do you want to install Nginx to?

Please specify a prefix directory [/opt/nginx]: /usr/local/nginx

--------------------------------------------

Extra Nginx configure options

If you want to pass extra arguments to the Nginx 'configure' script, then
please specify them. If not, then specify nothing and press Enter.

If you specify nothing then the 'configure' script will be run as follows:

  sh ./configure --prefix='/usr/local/nginx' --with-http_ssl_module --with-http_gzip_static_module --with-http_stub_status_module --with-cc-opt=-Wno-error --with-ld-opt='' --add-module='/usr/local/lib/ruby/gems/2.3.0/gems/passenger-5.0.30/src/nginx_module'

Extra arguments to pass to configure script:

--------------------------------------------

Confirm configure flags

The Nginx configure script will be run as follows:

  sh ./configure --prefix='/usr/local/nginx' --with-http_ssl_module --with-http_gzip_static_module --with-http_stub_status_module --with-cc-opt=-Wno-error --with-ld-opt='' --add-module='/usr/local/lib/ruby/gems/2.3.0/gems/passenger-5.0.30/src/nginx_module'

Is this what you want? (yes/no) [default=yes]: yes

--------------------------------------------

Compiling Passenger support files...
# env NOEXEC_DISABLE=1 /usr/local/bin/ruby /usr/local/bin/rake nginx:clean nginx RELEASE=yes

省略

--------------------------------------------

Nginx with Passenger support was successfully installed.

Please edit your Nginx configuration file (probably /usr/local/nginx/conf/nginx.conf),
and set the passenger_root and passenger_ruby configuration options in the
'http' block, like this:

  http {
      ...
      passenger_root /usr/local/lib/ruby/gems/2.3.0/gems/passenger-5.0.30;
      passenger_ruby /usr/local/bin/ruby;
      ...
  }

After you (re)start Nginx, you are ready to deploy any number of web
applications on Nginx.

Press ENTER to continue.

--------------------------------------------

Deploying a web application

To learn how to deploy a web app on Passenger, please follow the deployment
guide:

  https://www.phusionpassenger.com/library/deploy/nginx/deploy/

Enjoy Phusion Passenger, a product of Phusion (www.phusion.nl) :-)
https://www.phusionpassenger.com

Phusion Passenger is a registered trademark of Hongli Lai & Ninh Bui.
[vagrant@localhost ~]$

確認
- --add-module にpassengerのモジュールが追加されている

nginx -V

[vagrant@localhost ~]$ nginx -V
nginx version: nginx/1.11.5
built by gcc 4.4.7 20120313 (Red Hat 4.4.7-16) (GCC)
built with OpenSSL 1.0.1e-fips 11 Feb 2013
TLS SNI support enabled
configure arguments: --prefix=/usr/local/nginx --with-http_ssl_module --with-http_gzip_static_module --with-http_stub_status_module --with-cc-opt=-Wno-error --with-ld-opt= --add-module=/usr/local/lib/ruby/gems/2.3.0/gems/passenger-5.0.30/src/nginx_module
[vagrant@localhost ~]$

起動&停止確認

[vagrant@localhost ~]$ sudo /etc/init.d/nginx start
nginx を起動中:                                            [  OK  ]
[vagrant@localhost ~]$ nmap localhost

Starting Nmap 5.51 ( http://nmap.org ) at 2016-12-18 09:40 UTC
Nmap scan report for localhost (127.0.0.1)
Host is up (0.00017s latency).
Other addresses for localhost (not scanned): 127.0.0.1
Not shown: 996 closed ports
PORT    STATE SERVICE
22/tcp  open  ssh
25/tcp  open  smtp
80/tcp  open  http
111/tcp open  rpcbind

Nmap done: 1 IP address (1 host up) scanned in 0.09 seconds



[vagrant@localhost ~]$ sudo /etc/init.d/nginx stop
nginx を停止中:                                            [  OK  ]
[vagrant@localhost ~]$ nmap localhost

Starting Nmap 5.51 ( http://nmap.org ) at 2016-12-18 09:40 UTC
Nmap scan report for localhost (127.0.0.1)
Host is up (0.00031s latency).
Other addresses for localhost (not scanned): 127.0.0.1
Not shown: 997 closed ports
PORT    STATE SERVICE
22/tcp  open  ssh
25/tcp  open  smtp
111/tcp open  rpcbind

Nmap done: 1 IP address (1 host up) scanned in 0.06 seconds
[vagrant@localhost ~]$

ブラウザからアクセスしてrailsアプリを表示する

アプリの作成

cd /vagrant

rails new getwild

Gemfileの編集
- therubyracer のコメントアウトを外す
- 外しておかないとrailsアプリを動かした時にエラーになる

cd getwild

vi Gemfile

bundle install を実行

[vagrant@localhost getwild]$ bundle install
Fetching gem metadata from https://rubygems.org/..........
Fetching version metadata from https://rubygems.org/..
Fetching dependency metadata from https://rubygems.org/.
Resolving dependencies...
Using rake 12.0.0
Using concurrent-ruby 1.0.3

省略

Using rails 5.0.0.1
Using sass-rails 5.0.6
Bundle complete! 16 Gemfile dependencies, 65 gems now installed.
Use `bundle show [gemname]` to see where a bundled gem is installed.
[vagrant@localhost getwild]$

nginx.confの編集

とりあえず以下の内容に編集。

/usr/local/nginx/conf/nginx.conf


# user  nobody;
worker_processes  1;

error_log   /var/log/nginx/error.log notice;
pid        /var/log/nginx/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include       mime.types;
    default_type  application/octet-stream;

    sendfile        on;
    #tcp_nopush     on;

    #keepalive_timeout  0;
    keepalive_timeout  65;

    #gzip  on;

    passenger_root /usr/local/lib/ruby/gems/2.3.0/gems/passenger-5.0.30;
    passenger_ruby /usr/local/bin/ruby;

    server {
        listen       80;
        server_name  192.168.33.10;
        access_log   /var/log/nginx/192.168.33.10.access.log;
        error_log    /var/log/nginx/192.168.33.10.error.log;

        location / {
            root                  /vagrant/getwild/public;
            passenger_base_uri    /;
            passenger_enabled     on;
            rails_spawn_method    smart;
            rails_env             development;
            index                 index.html index.htm;
        }

        #error_page  404              /404.html;

        # redirect server error pages to the static page /50x.html
        #
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }

    }


    # another virtual host using mix of IP-, name-, and port-based configuration
    #
    #server {
    #    listen       8000;
    #    listen       somename:8080;
    #    server_name  somename  alias  another.alias;

    #    location / {
    #        root   html;
    #        index  index.html index.htm;
    #    }
    #}


    # HTTPS server
    #
    #server {
    #    listen       443 ssl;
    #    server_name  localhost;

    #    ssl_certificate      cert.pem;
    #    ssl_certificate_key  cert.key;

    #    ssl_session_cache    shared:SSL:1m;
    #    ssl_session_timeout  5m;

    #    ssl_ciphers  HIGH:!aNULL:!MD5;
    #    ssl_prefer_server_ciphers  on;

    #    location / {
    #        root   html;
    #        index  index.html index.htm;
    #    }
    #}

}

iptablesの編集

80番ポートにアクセスできるようにする

確認

sudo /sbin/iptables -L --line-numbers

[vagrant@localhost ~]$ sudo /sbin/iptables -L --line-numbers
Chain INPUT (policy ACCEPT)
num  target     prot opt source               destination
1    ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED
2    ACCEPT     icmp --  anywhere             anywhere
3    ACCEPT     all  --  anywhere             anywhere
4    ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:ssh
5    REJECT     all  --  anywhere             anywhere            reject-with icmp-host-prohibited

Chain FORWARD (policy ACCEPT)
num  target     prot opt source               destination
1    REJECT     all  --  anywhere             anywhere            reject-with icmp-host-prohibited

Chain OUTPUT (policy ACCEPT)
num  target     prot opt source               destination
[vagrant@localhost ~]$

80番を開ける

sudo /sbin/iptables -I INPUT 5 -p tcp -m tcp --dport 80 -j ACCEPT

保存

sudo service iptables save

[vagrant@localhost ~]$ sudo service iptables save
iptables: Saving firewall rules to /etc/sysconfig/iptables:[  OK  ]
[vagrant@localhost ~]$

再確認

[vagrant@localhost ~]$ sudo /sbin/iptables -L --line-numbers
Chain INPUT (policy ACCEPT)
num  target     prot opt source               destination
1    ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED
2    ACCEPT     icmp --  anywhere             anywhere
3    ACCEPT     all  --  anywhere             anywhere
4    ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:ssh
5    ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:http
6    REJECT     all  --  anywhere             anywhere            reject-with icmp-host-prohibited

Chain FORWARD (policy ACCEPT)
num  target     prot opt source               destination
1    REJECT     all  --  anywhere             anywhere            reject-with icmp-host-prohibited

Chain OUTPUT (policy ACCEPT)
num  target     prot opt source               destination
[vagrant@localhost ~]$

ブラウザからアクセスする

自分の環境の場合以下にアクセスすることでvagrant上のアプリにつながる。

http://192.168.33.10/

railsアプリを動作させる環境が出来上がりました。