在Ubuntu22中安装LAMP技术栈

本文将指导您如何在Ubuntu 22.04 LTS系统上安装PHP 8.1、MySQL和Apache2，以及如何配置Let’s Encrypt SSL证书自动更新，以确保您的网站安全可靠。

部署Web服务器运行环境是复杂且容易出错的，以下内容仅面向有相关专业知识的专业人士，如果您是我们的客户，自购买日期起，我们为您免费提供三个月的技术支援，如需帮助，请与我们取得联系。

先决条件

• 拥有公网IP及可远程访问的Ubuntu服务器
• 系统管理员账号
• SSH客户端：Xshell、Putty等

安装步骤

更新系统

首先，打开终端并更新您的系统到最新状态：

sudo apt update && sudo apt upgrade

安装Apache2

sudo apt install apache2

启动Apache2服务并设置开机自启：

sudo systemctl start apache2

sudo systemctl enable apache2

配置防火墙

查看当前应用通行规则

sudo ufw app list

添加Apache

sudo ufw allow in "Apache"

添加ssl和openSSH

ufw allow OpenSSH

ufw allow ssh

查看防火墙当前状态

sudo ufw status

Status: active

To                         Action      From

--                         ------      ----

OpenSSH                    ALLOW       Anywhere                  

Apache Full                ALLOW       Anywhere                  

OpenSSH (v6)               ALLOW       Anywhere (v6)             

Apache Full (v6)           ALLOW       Anywhere (v6)        

安装MySQL

安装MySQL数据库服务器：

sudo apt install mysql-server

安装完毕后进入配置项

mysql_secure_installation 

VALIDATE PASSWORD COMPONENT can be used to test passwords

and improve security. It checks the strength of password

and allows the users to set only those passwords which are

secure enough. Would you like to setup VALIDATE PASSWORD component?

Press y|Y for Yes, any other key for No: n

Skipping password set for root as authentication with auth_socket is used by default.

If you would like to use password authentication instead, this can be done with the "ALTER_USER" command.

See https://dev.mysql.com/doc/refman/8.0/en/alter-user.html#alter-user-password-management for more information.

By default, a MySQL installation has an anonymous user,

allowing anyone to log into MySQL without having to have

a user account created for them. This is intended only for

testing, and to make the installation go a bit smoother.

You should remove them before moving into a production

environment.

Remove anonymous users? (Press y|Y for Yes, any other key for No) : y

Success.

Normally, root should only be allowed to connect from

'localhost'. This ensures that someone cannot guess at

the root password from the network.

Disallow root login remotely? (Press y|Y for Yes, any other key for No) : y

 ... skipping.

By default, MySQL comes with a database named 'test' that

anyone can access. This is also intended only for testing,

and should be removed before moving into a production

environment.

Remove test database and access to it? (Press y|Y for Yes, any other key for No) : y

 - Dropping test database...

Success.

 - Removing privileges on test database...

Success.

Reloading the privilege tables will ensure that all changes

made so far will take effect immediately.

Reload privilege tables now? (Press y|Y for Yes, any other key for No) : y

Success.

All done! 

出于安全考虑，我们在”Disallow root login remotely?“中使用了”Y“，这样root用户将无法使用远程登录，这时候我们需要创建一个远程用户

CREATE USER 'pmauser'@'localhost' IDENTIFIED WITH mysql_native_password BY 'password_here';

GRANT ALL PRIVILEGES ON *.* TO 'pmauser'@'localhost' WITH GRANT OPTION; 

安装php8.1

php8.1是php语言的主版本的一次重大更新，最大亮点是带来了性能的显著提升。

sudo apt install php libapache2-mod-php php-mysql

安装完毕后使用php -v检查版本

PHP 8.1.2 (cli) (built: Mar  4 2022 18:13:46) (NTS)

Copyright (c) The PHP Group

Zend Engine v4.1.2, Copyright (c) Zend Technologies

    with Zend OPcache v8.1.2, Copyright (c), by Zend Technologies

安装常用库

sudo apt-get install -y php8.1-cli php8.1-common php8.1-mysql php8.1-zip php8.1-gd php8.1-mbstring php8.1-curl php8.1-xml php8.1-bcmath

配置虚拟主机

创建用于存放网站项目的目录：/mnt/www/www.yourdomain.com/public_html

mkdir -p /mnt/www/www.yourdomain.com/public_html

由于apache2默认会在/etc/apache2/目录中创建sites-available以及sites-enabled目录，这让虚拟主机配置变得很方便，只需要在sites-available目录下创建yourdomain.com.conf文件

<VirtualHost *:80>

    ServerName www.yourdomain.com

    ServerAlias www.yourdomain.com

    DocumentRoot /mnt/www/www.yourdomain.com/public_html

    DirectoryIndex index.html index.php

    #ErrorLog /mnt/www/www.yourdomain.com/error.log    

    #CustomLog /mnt/www/www.yourdomain.com/requests.log combined    

    <Directory /mnt/www/www.yourdomain.com/public_html/>    

        Options FollowSymLinks

        AllowOverride All

        Require all granted

    </Directory>

</VirtualHost>

这时候我们需要建立软连接，但是apache2可以用命令来实现

sudo a2ensite yourdomain.com

禁用默认站点（取消软连接）

sudo a2dissite 000-default

最后检查apache2配置文件的语法是否有误

sudo apache2ctl configtest

注意：如果这里出现AH00558错误

AH00558: apache2: Could not reliably determine the server's fully qualified domain name, using xx.xx.xx.xx. Set the 'ServerName' directive globally to suppress this message

Syntax OK

这里是由于缺少全局的ServerName配置，需要打开文件vi /etc/apache2/apache2.conf，在最后一行加上

ServerName 127.0.0.1

即可解决此问题。

修改完配置一定要重启apache2让配置生效：

sudo systemctl reload apache2

除此以外值得一提的是，php的文件位置为：/etc/php/8.1/apache2/php.ini，如果要修改内存及上传文件大小等参数需要在这里修改。

安装Let’s Encrypt客户端

安装Certbot

sudo apt install certbot python3-certbot-apache

获取SSL证书

为您的域名获取免费的Let’s Encrypt SSL证书：

sudo certbot --apache www.yourdomain.com

按照提示操作，输入电子邮件地址并同意条款。

自动更新证书

配置cron job以自动更新证书：

sudo crontab -e

添加以下内容：

0 0,12 * * * /usr/bin/certbot renew --quiet

测试

sudo certbot renew --dry-run

至此，您已经成功在Ubuntu 22.04上安装了PHP 8.1、MySQL和Apache2，并配置了Let’s Encrypt SSL证书的自动更新。现在，您的网站已经准备好以安全的方式向访客提供服务了。