系统环境：CentOS 6.8 x64
nginx版本：1.8.1
安装工具包
[root@rpmbuild ~]# yum -y install rpm-build rpmdevtools
安装nginx编译所需的依赖包
[root@rpmbuild ~]# yum -y install zlib pcre pcre-devel openssl-devel gcc gcc-c++ make
初始化一个目录结构
[root@rpmbuild ~]# rpmdev-setuptree
[root@rpmbuild ~]# tree rpmbuild/
rpmbuild/
├── BUILD # 编译rpm包的临时目录
├── RPMS # 存放由rpmbuild最终制作好的二进制包
├── SOURCES # 所有源代码和补丁文件的存放目录
├── SPECS # 存放SPEC文件的目录(重要)
└── SRPMS # 最终生成的二进制源码包所在目录
准备要制作的源码包和所需的一些额外文件
[root@rpmbuild ~]# cd rpmbuild/SOURCES/
[root@rpmbuild SOURCES]# ll
总用量 824
-rw-r--r-- 1 root root 2474 9月 25 16:57 init.nginx
-rw-r--r-- 1 root root 833473 12月 6 2016 nginx-1.8.1.tar.gz
-rw-r--r-- 1 root root 673 9月 25 17:03 nginx.conf
编写启动服务脚本，让其可以使用service和chkconfig来管理
[root@rpmbuild SOURCES]# cat init.nginx
====================================================
#!/bin/sh
#
# nginx - this>
#
# chkconfig: - 85 15
# description: Nginx is an HTTP(S) server, HTTP(S) reverse \
# proxy and IMAP/POP3 proxy server
# processname: nginx
# pidfile: /var/run/nginx/nginx.pid
# Source function library.
. /etc/rc.d/init.d/functions
# Source networking configuration.
. /etc/sysconfig/network
# Check that networking is up.
[ "$NETWORKING" = "no" ] && exit 0
nginx="/usr/local/nginx/sbin/nginx"
prog=$(basename $nginx)
NGINX_CONF_FILE="/usr/local/nginx/conf/nginx.conf"
[ -f /etc/sysconfig/nginx ] && . /etc/sysconfig/nginx
lockfile=/var/lock/subsys/nginx
make_dirs() {
# make required directories
user=`nginx -V 2>&1 | grep "configure arguments:" | sed 's/[^*]*--user=\([^ ]*\).*/\1/g' -`
options=`$nginx -V 2>&1 | grep 'configure arguments:'`
for opt in $options; do
if [ `echo $opt | grep '.*-temp-path'` ]; then
value=`echo $opt | cut -d "=" -f 2`
if [ ! -d "$value" ]; then
# echo "creating" $value
mkdir -p $value && chown -R $user $value
fi
fi
done
}
start() {
[ -x $nginx ] || exit 5
[ -f $NGINX_CONF_FILE ] || exit 6
make_dirs
echo -n $"Starting $prog: "
daemon $nginx -c $NGINX_CONF_FILE
retval=$?
echo
[ $retval -eq 0 ] && touch $lockfile
return $retval
}
stop() {
echo -n $"Stopping $prog: "
killproc $prog -QUIT
retval=$?
echo
[ $retval -eq 0 ] && rm -f $lockfile
return $retval
}
restart() {
configtest || return $?
stop
sleep 1
start
}
reload() {
configtest || return $?
echo -n $"Reloading $prog: "
killproc $nginx -HUP
RETVAL=$?
echo
}
force_reload() {
restart
}
configtest() {
$nginx -t -c $NGINX_CONF_FILE
}
rh_status() {
status $prog
}
rh_status_q() {
rh_status >/dev/null 2>&1
}
case "$1" in
start)
rh_status_q && exit 0
$1
;;
stop)
rh_status_q || exit 0
$1
;;
restart|configtest)
$1
;;
reload)
rh_status_q || exit 7
$1
;;
force-reload)
force_reload
;;
status)
rh_status
;;
condrestart|try-restart)
rh_status_q || exit 0
;;
*)
echo $"Usage: $0 {start|stop|status|restart|condrestart|try-restart|reload|force-reload|configtest}"
exit 2
esac
====================================================
创建或上传nginx自定义配置文件
[root@rpmbuild SOURCES]# cat nginx.conf
====================================================
#user nobody;
worker_processes 4;
#error_log logs/error.log;
#pid logs/nginx.pid;
events {
worker_connections 1024;
}
http {
include mime.types;
default_type application/octet-stream;
#access_log logs/access.log main;
sendfile on;
#tcp_nopush on;
keepalive_timeout 65;
#gzip on;
server {
listen 80;
server_name localhost;
location / {
root html;
index index.html index.htm;
}
#error_page 404 /404.html;
# redirect server error pages to the static page /50x.html
#
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root html;
}
}
}
====================================================
进入SPECS目录并创建nginx.spec文件
[root@rpmbuild SOURCES]# cd ../SPECS/
[root@rpmbuild SPECS]# rpmdev-newspec nginx.spec
Skeleton specfile (minimal) has been created to "nginx.spec".
[root@rpmbuild SPECS]# ls
nginx.spec
[root@rpmbuild SPECS]# vim nginx.spec
====================================================
Name: nginx
Version: 1.8.1 # 版本号，不能使用“-”
Release: 1%{?dist}
Summary: Made from nginx-1.8.1.tar.gz # 简单描述信息，最好不超过50个字符
Group: Applications/Archiving # 用“less /usr/share/doc/rpm-4.8.0/GROUPS”里的一组
License: GPLv2 # 一定要带上（最好是对方源码包的LICENSE）BSD，GPL，GPLv2
URL: http://nginx.org
Packager: CentOS
Vendor: CentOS
Source0: %{name}-%{version}.tar.gz # source主要是引用一下自己定义好的脚本，配置文件之类的内容。
Source1: init.nginx # nginx在主配置文件里面做了很多优化，包括cpu抢占，各种缓存策略，进程数等。
Source2: nginx.conf # 每增加一个Source，都需要在%install段和%files段做相应配置，如果是启动脚本的话。
BuildRoot: %_topdir/BUILDROOT
BuildRequires: gcc # 编译代码需要的软件。
Requires: zlib,pcre,pcre-devel,openssl,openssl-devel # 定义nginx rpm安装时依赖的包，需要提前进行手动安装。
%description # 软件包的描述，可多行编写，段中间空行隔开
Custom a rpm by yourself! Build nginx-1.8.1.tar.gz to nginx-1.8.1-1.el6.x86_64.rpm
%prep # 编译之前的处理，如解压
%setup -q
%build # 开始编译，如make
%configure # 这行必须删掉，否则会报“./configure: error: invalid option "--host=x86_64-redhat-linux-gnu"”这样的错误
./configure \
--user=nginx \
--group=nginx \
--prefix=/usr/local/nginx \
--error-log-path=/usr/local/nginx/logs/error.log \
--http-log-path=/usr/local/nginx/logs/access.log \
--pid-path=/usr/local/nginx/logs/nginx.pid \
--lock-path=/usr/local/nginx/logs/nginx.lock \
--with-http_ssl_module \
--with-http_flv_module \
--with-http_stub_status_module \
--with-http_gzip_static_module \
--with-pcre
make %{?_smp_mflags}
%install # 开始安装，如make install
rm -rf $RPM_BUILD_ROOT
make install DESTDIR=$RPM_BUILD_ROOT
%{__install} -p -D -m 0755 %{SOURCE1} $RPM_BUILD_ROOT/etc/rc.d/init.d/nginx
%{__install} -p -D %{SOURCE2} $RPM_BUILD_ROOT/usr/local/nginx/conf/nginx.conf
%pre # 安装前执行的动作
useradd -s /sbin/nologin nginx 2> /dev/null
%post # 安装后执行的动作
chmod +x /etc/init.d/nginx
chkconfig --add nginx
chkconfig nginx on
%preun # 卸载之前的动作
/etc/init.d/nginx stop > /dev/null 2>&1
userdel -r nginx 2> /dev/null
%clean
rm -rf $RPM_BUILD_ROOT
%files # 指定哪些文件需要被打包
%defattr(-,nginx,nginx,-)
/usr/local/nginx # 表示包含此目录下的所有文件
%attr(0755,root,root) /etc/rc.d/init.d/nginx # 此宏是定义单个文件的权限
%config(noreplace) /usr/local/nginx/conf/nginx.conf # 指定为配置文件
%doc
%changelog
====================================================
[root@rpmbuild SPECS]# rpmbuild -bb nginx.spec # 制作二进制包
[root@rpmbuild SPECS]# rpmbuild -ba nginx.spec # 既制作二进制包又制作src格式包
[root@rpmbuild SPECS]# du -sh ../RPMS/x86_64/nginx-1.8.1-1.el6.x86_64.rpm
256K ../RPMS/x86_64/nginx-1.8.1-1.el6.x86_64.rpm
[root@rpmbuild SPECS]# rpm -qpl ../RPMS/x86_64/nginx-1.8.1-1.el6.x86_64.rpm
/etc/rc.d/init.d/nginx
/usr/local/nginx
/usr/local/nginx/conf
/usr/local/nginx/conf/fastcgi.conf
/usr/local/nginx/conf/fastcgi.conf.default
/usr/local/nginx/conf/fastcgi_params
/usr/local/nginx/conf/fastcgi_params.default
/usr/local/nginx/conf/koi-utf
/usr/local/nginx/conf/koi-win
/usr/local/nginx/conf/mime.types
/usr/local/nginx/conf/mime.types.default
/usr/local/nginx/conf/nginx.conf
/usr/local/nginx/conf/nginx.conf.default
/usr/local/nginx/conf/scgi_params
/usr/local/nginx/conf/scgi_params.default
/usr/local/nginx/conf/uwsgi_params
/usr/local/nginx/conf/uwsgi_params.default
/usr/local/nginx/conf/win-utf
/usr/local/nginx/html
/usr/local/nginx/html/50x.html
/usr/local/nginx/html/index.html
/usr/local/nginx/logs
/usr/local/nginx/sbin
/usr/local/nginx/sbin/nginx
[root@rpmbuild SPECS]# rpm -ivh ../RPMS/x86_64/nginx-1.8.1-1.el6.x86_64.rpm
Preparing... ########################################### [100%]
1: nginx ########################################### [100%]
[root@rpmbuild SPECS]# rpm -qi nginx
Name : nginx Relocations: (not relocatable)
Version : 1.8.1 Vendor: CentOS
Release : 1.el6 Build Date: 2018年09月25日 星期二 18时02分06秒
Install Date: 2018年09月25日 星期二 18时04分30秒 Build Host: rpmbuild.test.org
Group : Applications/Archiving Source RPM: nginx-1.8.1-1.el6.src.rpm
Size : 706370 License: GPLv2
Signature : (none) # rpm包未签名
Packager : CentOS
URL : http://nginx.org
Summary : Made from nginx-1.8.1.tar.gz
Description :
Custom a rpm by yourself! Build nginx-1.8.1.tar.gz to nginx-1.8.1-1.el6.x86_64.rpm
使用gpg方式生成签名密钥
[root@rpmbuild SPECS]# gpg --gen-key # 在图形界面下操作
gpg (GnuPG) 2.0.14; Copyright (C) 2009 Free Software Foundation, Inc.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
gpg: 已创建目录‘/root/.gnupg’
gpg: 新的配置文件‘/root/.gnupg/gpg.conf’已建立
gpg: 警告：在‘/root/.gnupg/gpg.conf’里的选项于此次运行期间未被使用
gpg: 钥匙环‘/root/.gnupg/secring.gpg’已建立
gpg: 钥匙环‘/root/.gnupg/pubring.gpg’已建立
请选择您要使用的密钥种类：
(1) RSA and RSA (default)
(2) DSA and Elgamal
(3) DSA (仅用于签名)
(4) RSA (仅用于签名)
您的选择？
RSA 密钥长度应在 1024 位与 4096 位之间。
您想要用多大的密钥尺寸？(2048)
您所要求的密钥尺寸是 2048 位
请设定这把密钥的有效期限。
0 = 密钥永不过期
密钥的有效期限是？(0)
密钥永远不会过期
以上正确吗？(y/n)y
You need a user ID to identify your key; the software constructs the user ID
from the Real Name, Comment and Email Address in this form:
"Heinrich Heine (Der Dichter) <heinrichh>"/<heinrichh>
真实姓名：rpmbuild
电子邮件地址：[email protected]
注释：GPG-RPM-KEY
您选定了这个用户标识：
“rpmbuild (GPG-RPM-KEY) <rpmbuild>”/<rpmbuild>
更改姓名(N)、注释(C)、电子邮件地址(E)或确定(O)/退出(Q)？O
您需要一个密码来保护您的私钥。
can't connect to `/root/.gnupg/S.gpg-agent': 没有那个文件或目录
gpg-agent[15055]: 已创建目录‘/root/.gnupg/private-keys-v1.d’
我们需要生成大量的随机字节。这个时候您可以多做些琐事(像是敲打键盘、移动
鼠标、读写硬盘之类的)，这会让随机数字发生器有更好的机会获得足够的熵数。
# 这里不需要输入东西，只需要移动鼠标即可
gpg: /root/.gnupg/trustdb.gpg：建立了信任度数据库
gpg: 密钥 D75962BF 被标记为绝对信任
公钥和私钥已经生成并经签名。
gpg: 正在检查信任度数据库
gpg: 需要 3 份勉强信任和 1 份完全信任，PGP 信任模型
gpg: 深度：0 有效性： 1 已签名： 0 信任度：0-，0q，0n，0m，0f，1u
pub 2048R/D75962BF 2018-09-26
密钥指纹 = 6EF5 BF25 DA5D 1216 4710 4CD7 0A95 3DE9 D759 62BF
uid rpmbuild (GPG-RPM-KEY) <rpmbuild>
sub 2048R/0C94E7EA 2018-09-26
查看生成的密钥
[root@rpmbuild SPECS]# gpg --list-key
/root/.gnupg/pubring.gpg
------------------------
pub 2048R/D75962BF 2018-09-26
uid rpmbuild (GPG-RPM-KEY) <rpmbuild>
sub 2048R/0C94E7EA 2018-09-26
导出公钥以供验证
[root@rpmbuild SPECS]# gpg --export -a "rpmbuild" > RPM-GPG-KEY-rpmbuild
在~/.rpmmacros宏中定义加密密钥
[root@rpmbuild SPECS]# cat ~/.rpmmacros
%_topdir %(echo $HOME)/rpmbuild
%_smp_mflags -j3
%__arch_install_post /usr/lib/rpm/check-rpaths /usr/lib/rpm/check-buildroot
%_gpg_name rpmbuild # 添加这一行
为rpm包签名
[root@rpmbuild SPECS]# rpm --addsign ../RPMS/x86_64/nginx-1.8.1-1.el6.x86_64.rpm
Enter pass phrase: # 输入私钥密码
Pass phrase is good.
../RPMS/x86_64/nginx-1.8.1-1.el6.x86_64.rpm:
将公钥导入rpm包
[root@rpmbuild SPECS]# rpm --import RPM-GPG-KEY-rpmbuild
验证rpm包密钥
[root@rpmbuild SPECS]# rpm --checksig ../RPMS/x86_64/nginx-1.8.1-1.el6.x86_64.rpm
../RPMS/x86_64/nginx-1.8.1-1.el6.x86_64.rpm: rsa sha1 (md5) pgp md5 OK
重新安装nginx，验证安装包的签名信息
[root@rpmbuild SPECS]# rpm -qa | grep nginx
nginx-1.8.1-1.el6.x86_64
[root@rpmbuild SPECS]# rpm -e nginx-1.8.1-1.el6.x86_64
[root@rpmbuild SPECS]# rpm -ivh ../RPMS/x86_64/nginx-1.8.1-1.el6.x86_64.rpm
Preparing... ########################################### [100%]
1: nginx ########################################### [100%]
[root@rpmbuild SPECS]# rpm -qi nginx
Name : nginx Relocations: (not relocatable)
Version : 1.8.1 Vendor: CentOS
Release : 1.el6 Build Date: 2018年09月26日 星期三 14时23分16秒
Install Date: 2018年09月26日 星期三 17时51分17秒 Build Host: rpmbuild.test.org
Group : Applications/Archiving Source RPM: nginx-1.8.1-1.el6.src.rpm
Size : 706370 License: GPLv2
Signature : RSA/SHA1, 2018年09月26日 星期三 17时43分57秒, Key ID 0a953de9d75962bf
Packager : CentOS
URL : http://nginx.org
Summary : Made from nginx-1.8.1.tar.gz
Description :
Custom a rpm by yourself! Build nginx-1.8.1.tar.gz to nginx-1.8.1-1.el6.x86_64.rpm
[root@rpmbuild SPECS]# /etc/init.d/nginx configtest
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
[root@rpmbuild SPECS]# ll /usr/local/
总用量 48
drwxr-xr-x. 2 root root 4096 9月 23 2011 bin
drwxr-xr-x. 2 root root 4096 9月 23 2011 etc
drwxr-xr-x. 2 root root 4096 9月 23 2011 games
drwxr-xr-x. 2 root root 4096 9月 23 2011 include
drwxr-xr-x. 2 root root 4096 9月 23 2011 lib
drwxr-xr-x. 2 root root 4096 9月 23 2011 lib64
drwxr-xr-x. 2 root root 4096 9月 23 2011 libexec
drwxr-xr-x 5 nginx nginx 4096 9月 25 18:04 nginx
drwxr-xr-x. 2 root root 4096 9月 23 2011 sbin
drwxr-xr-x. 5 root root 4096 9月 20 2017 share
drwxr-xr-x. 2 root root 4096 9月 23 2011 src
[root@rpmbuild SPECS]# chkconfig --list nginx
nginx 0:关闭 1:关闭 2:启用 3:启用 4:启用 5:启用 6:关闭
[root@rpmbuild SPECS]# /etc/init.d/nginx start
正在启动 nginx： [确定]
[root@rpmbuild SPECS]# netstat -tnlp | grep nginx
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 14991/nginx
閱讀更多 YosonXu 的文章
