CentOS 7 PHP / PHP-FPM 7.4 설치 (remi repo)

By Kerus Ashe in Linux PHP January 29, 2020

(Last Updated On: November 28, 2020)

PHP-FPM 7.3 https://blog.kerus.net/1014/install-php-7-3-fpm-remirepo-on-centos
CentOS 8 PHP-FPM : https://blog.kerus.net/2276/centos-8-php-7-4-fpm-%ec%84%a4%ec%b9%98-remirepo

1 Remi Repo

remi 저장소를 설치한다

sudp rpm -Uvh https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm && \
sudo yum -y install http://rpms.remirepo.net/enterprise/remi-release-7.rpm && \
sudo yum -y install yum-utils

2 Disabling 5.4 (default version) And Enable 7.4ver

remi 저장소에서는 php가 기본적으로 5.4버전으로 활성화되어있어서
비활성화 한다음에 설치하고 싶은 버전으로 설치한다.

sudo yum-config-manager --disable remi-php54 && \
sudo yum-config-manager --enable remi-php74

3 Install

3.A for Apache2 (httpd)

yum -y install php

3.B for PHP-FPM (nginx, fastcgi…)

yum -y install php-fpm

4 Install Libraries

sudo yum -y install \
php-cli \
php-redis \
php-brotli \
php-intl \
php-gd \
php-gmp \
php-imap \
php-bcmath \
php-interbase \
php-json \
php-mbstring \
php-mysqlnd \
php-odbc \
php-opcache \
php-memcached \
php-tidy \
php-pdo \
php-pdo-dblib \
php-pear \
php-pgsql \
php-process \
php-pecl-apcu \
php-pecl-geoip \
php-pecl-imagick \
php-pecl-hrtime \
php-pecl-json \
php-pecl-memcache \
php-pecl-mongodb \
php-pecl-rar \
php-pecl-pq \
php-pecl-redis4 \
php-pecl-yaml \
php-pecl-zip

5 Start PHP

5.A Apache

systemctl restart httpd

5.B PHP-FPM

systemctl enable php-fpm &&
systemctl start php-fpm

6 Redis / Memcached

sudo yum -y install redis memcached

sudo systemctl enable redis &&
sudo systemctl enable memcached &&
sudo systemctl start redis &&
sudo systemctl start memcached

Preventing Memcached Listen wildcard

https://www.cloudflare.com/learning/ddos/memcached-ddos-attack/

vim /etc/sysconfig/memcached

PORT="11211" 
USER="memcached" 
MAXCONN="1024" 
CACHESIZE="64" 
OPTIONS="-l 127.0.0.1"

sudo systemctl restart memcached

netstat -an | grep ":11211"
tcp        0      0 127.0.0.1:11211         0.0.0.0:*               LISTEN
udp        0      0 127.0.0.1:11211         0.0.0.0:*

127.0.0.1의 아이피로 열려있는 확인. ( 0.0.0.0:11211 이면 위험하다 )