forked from Hakase/nginx-build
120 lines
4.3 KiB
Bash
Executable File
120 lines
4.3 KiB
Bash
Executable File
#!/bin/sh
|
|
### GCC 7.x Test Settings
|
|
## --with-cc-opt='-DTCP_FASTOPEN=23 -m64 -g -O3 -march=native -fstack-protector-strong -fuse-ld=gold -fuse-linker-plugin --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wno-strict-aliasing -Wp,-D_FORTIFY_SOURCE=2 -gsplit-dwarf -DNGX_HTTP_HEADERS' \
|
|
## --with-ld-opt='-ljemalloc -Wl,-z,relro' \
|
|
## --with-openssl-opt="enable-weak-ssl-ciphers -DCFLAGS='-march=native -O3 -fuse-linker-plugin'" \
|
|
|
|
|
|
### CentOS Passed Settings
|
|
## --with-cc-opt='-DTCP_FASTOPEN=23 -m64 -g -O3 -march=native -fstack-protector-strong -flto -fuse-ld=gold -fuse-linker-plugin --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wno-strict-aliasing -Wp,-D_FORTIFY_SOURCE=2 -gsplit-dwarf --param=ssp-buffer-size=4 -DNGX_HTTP_HEADERS' \
|
|
## --with-ld-opt='-ljemalloc -Wl,-z,relro' \
|
|
## --with-openssl-opt="enable-weak-ssl-ciphers -DCFLAGS='-march=native -O3 -flto -fuse-linker-plugin'" \
|
|
|
|
### Ubuntu (Maybe) Passed Settings
|
|
## --with-cc-opt='-DTCP_FASTOPEN=23 -m64 -g -O3 -march=native -fstack-protector-strong -flto -fuse-ld=gold -fuse-linker-plugin --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wno-strict-aliasing -Wp,-D_FORTIFY_SOURCE=2 -gsplit-dwarf --param=ssp-buffer-size=4' \
|
|
## --with-ld-opt='-Wl,-z,relro' \
|
|
## --with-openssl-opt="enable-weak-ssl-ciphers -DCFLAGS='-march=native -O3 -fuse-linker-plugin'" \
|
|
|
|
|
|
### Multithread build
|
|
BUILD_MTS="-j$(expr $(nproc) \+ 1)"
|
|
|
|
git submodule update --init --recursive
|
|
|
|
### PCRE reconf
|
|
if [ ! -f "lib/pcre/configure" ]; then
|
|
cd lib/pcre
|
|
autoreconf -f -i
|
|
cd ../..
|
|
fi
|
|
|
|
### PSOL Download (PageSpeed)
|
|
if [ ! -d "lib/ngx_pagespeed/psol" ]; then
|
|
cd lib/ngx_pagespeed
|
|
curl "$(scripts/format_binary_url.sh PSOL_BINARY_URL)" | tar xz
|
|
cd ../../
|
|
fi
|
|
|
|
# not use -flto settings.
|
|
|
|
auto/configure \
|
|
--with-cc-opt='-DTCP_FASTOPEN=23 -m64 -g -O3 -march=native -fstack-protector-strong -fuse-ld=gold -fuse-linker-plugin --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wno-strict-aliasing -Wp,-D_FORTIFY_SOURCE=2 -gsplit-dwarf -DNGX_HTTP_HEADERS' \
|
|
--with-ld-opt='-ljemalloc -Wl,-z,relro' \
|
|
--with-openssl-opt="enable-weak-ssl-ciphers -DCFLAGS='-march=native -O3 -fuse-linker-plugin'" \
|
|
--builddir=objs --prefix=/usr/local/nginx \
|
|
--conf-path=/etc/nginx/nginx.conf \
|
|
--pid-path=/var/run/nginx.pid \
|
|
--lock-path=/var/lock/nginx.lock \
|
|
--http-log-path=/var/log/nginx/access.log \
|
|
--error-log-path=/var/log/nginx/error.log \
|
|
--sbin-path=/usr/sbin/nginx \
|
|
--http-client-body-temp-path=/var/lib/nginx/client_body_temp \
|
|
--http-proxy-temp-path=/var/lib/nginx/proxy_temp \
|
|
--http-fastcgi-temp-path=/var/lib/nginx/fastcgi_temp \
|
|
--http-scgi-temp-path=/var/lib/nginx/scgi_temp \
|
|
--http-uwsgi-temp-path=/var/lib/nginx/uwsgi_temp \
|
|
--with-pcre=./lib/pcre \
|
|
--with-pcre-jit \
|
|
--with-zlib=./lib/zlib \
|
|
--with-openssl=./lib/openssl \
|
|
--with-select_module \
|
|
--with-http_v2_hpack_enc \
|
|
--with-http_realip_module \
|
|
--with-http_addition_module \
|
|
--with-http_sub_module \
|
|
--with-http_dav_module \
|
|
--with-http_stub_status_module \
|
|
--with-http_flv_module \
|
|
--with-http_mp4_module \
|
|
--with-http_geoip_module \
|
|
--with-http_gunzip_module \
|
|
--with-http_slice_module \
|
|
--with-http_gzip_static_module \
|
|
--with-http_auth_request_module \
|
|
--with-http_dav_module \
|
|
--with-http_random_index_module \
|
|
--with-http_secure_link_module \
|
|
--with-http_image_filter_module \
|
|
--with-file-aio \
|
|
--with-threads \
|
|
--with-google_perftools_module \
|
|
--with-libatomic \
|
|
--with-mail \
|
|
--with-compat \
|
|
--with-stream \
|
|
--with-http_ssl_module \
|
|
--with-mail_ssl_module \
|
|
--with-http_v2_module \
|
|
--with-http_spdy_module \
|
|
--with-stream_ssl_module \
|
|
--with-stream_geoip_module \
|
|
--with-stream_realip_module \
|
|
--with-stream_ssl_preread_module \
|
|
--add-module=./lib/ngx_devel_kit \
|
|
--add-module=./lib/ngx_brotli \
|
|
--add-module=./lib/ngx_pagespeed ${PS_NGX_EXTRA_FLAGS} \
|
|
--add-module=./lib/ngx-fancyindex \
|
|
--add-module=./lib/sass-nginx-module \
|
|
--add-module=./lib/nginx-ct \
|
|
--add-module=./lib/naxsi/naxsi_src \
|
|
--add-module=./lib/nginx-module-vts \
|
|
--add-module=./lib/nginx-dav-ext-module \
|
|
--add-module=./lib/_s/headers-more-nginx-module \
|
|
--add-module=./lib/_s/ngx_cache_purge \
|
|
--add-module=./lib/_s/set-misc-nginx-module
|
|
|
|
|
|
### OpenSSL Skip
|
|
### Do not use it for the FIRST BUILD.
|
|
#touch lib/openssl/.openssl/include/openssl/ssl.h
|
|
|
|
### Install
|
|
make $BUILD_MTS install
|
|
|
|
### Check for old files
|
|
if [ -f "/usr/sbin/nginx.old" ]; then
|
|
sleep 1
|
|
rm /usr/sbin/nginx.old
|
|
systemctl restart nginx
|
|
fi
|