-
-
Save claudio4/9f10222a72ed675a8b0a53e4494479d9 to your computer and use it in GitHub Desktop.
Compiling Nginx with LibreSSL (and http2)
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/usr/bin/env bash | |
if [ "$1" == "" ] || [ "$2" == "" ] || [ "$3" == "" ]; then | |
>&2 echo "No enough arguments provided. use ./build_nginx.sh nginx-version PCRE-version libressl-version" | |
exit 1 | |
fi | |
# names of latest versions of each package | |
export NGINX_VERSION=$1 | |
export VERSION_PCRE="pcre-$2" | |
export VERSION_LIBRESSL="libressl-$3" | |
export VERSION_NGINX=nginx-$NGINX_VERSION | |
#export NPS_VERSION=1.9.32.10 | |
#export VERSION_PAGESPEED=v${NPS_VERSION}-beta | |
# URLs to the source directories | |
export SOURCE_LIBRESSL=http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/ | |
export SOURCE_PCRE=ftp://ftp.pcre.org/pub/pcre/ | |
export SOURCE_NGINX=http://nginx.org/download/ | |
#Build directory | |
export BPATH=$(pwd)/build | |
# clean out any files from previous runs of this script | |
rm -rf $BPATH | |
mkdir $BPATH | |
# proc for building faster | |
NB_PROC=$(grep -c ^processor /proc/cpuinfo) | |
# ensure that we have the required software to compile our own nginx | |
sudo apt-get -y install curl wget build-essential libgd-dev libgeoip-dev checkinstall git | |
# grab the source files | |
echo "Download sources" | |
wget -P $BPATH $SOURCE_PCRE$VERSION_PCRE.tar.gz | |
wget -P $BPATH $SOURCE_LIBRESSL$VERSION_LIBRESSL.tar.gz | |
wget -P $BPATH $SOURCE_NGINX$VERSION_NGINX.tar.gz | |
# expand the source files | |
echo "Extract Packages" | |
cd $BPATH | |
tar xzf $VERSION_NGINX.tar.gz | |
tar xzf $VERSION_LIBRESSL.tar.gz | |
tar xzf $VERSION_PCRE.tar.gz | |
# set where LibreSSL and nginx will be built | |
export STATICLIBSSL=$BPATH/$VERSION_LIBRESSL | |
# build static LibreSSL | |
echo "Configure & Build LibreSSL" | |
cd $STATICLIBSSL | |
./configure LDFLAGS=-lrt CFLAGS="-march=native -O2 -pipe" CPPFLAGS="-march=native -O2 -pipe" --prefix=${STATICLIBSSL}/.openssl/ && make install-strip -j $NB_PROC | |
# build nginx, with various modules included/excluded | |
echo "Configure & Build Nginx" | |
cd $BPATH/$VERSION_NGINX | |
#echo "Download and apply path" | |
#wget -q -O - $NGINX_PATH | patch -p0 | |
mkdir -p $BPATH/nginx | |
./configure --with-openssl=$STATICLIBSSL \ | |
--with-ld-opt="-lrt" \ | |
--with-cc-opt="-march=native -O2 -pipe" \ | |
--sbin-path=/usr/sbin/nginx \ | |
--conf-path=/etc/nginx/nginx.conf \ | |
--error-log-path=/var/log/nginx/error.log \ | |
--http-log-path=/var/log/nginx/access.log \ | |
--with-pcre=$BPATH/$VERSION_PCRE \ | |
--with-http_ssl_module \ | |
--with-http_v2_module \ | |
--with-file-aio \ | |
--with-threads \ | |
--with-ipv6 \ | |
--with-http_gzip_static_module \ | |
--with-http_stub_status_module \ | |
--without-mail_pop3_module \ | |
--without-mail_smtp_module \ | |
--without-mail_imap_module \ | |
--with-http_image_filter_module \ | |
--lock-path=/var/lock/nginx.lock \ | |
--pid-path=/run/nginx.pid \ | |
--http-client-body-temp-path=/var/lib/nginx/body \ | |
--http-fastcgi-temp-path=/var/lib/nginx/fastcgi \ | |
--http-proxy-temp-path=/var/lib/nginx/proxy \ | |
--http-scgi-temp-path=/var/lib/nginx/scgi \ | |
--http-uwsgi-temp-path=/var/lib/nginx/uwsgi \ | |
--with-pcre-jit \ | |
--with-http_stub_status_module \ | |
--with-http_realip_module \ | |
--with-http_auth_request_module \ | |
--with-http_addition_module \ | |
--with-http_geoip_module | |
touch $STATICLIBSSL/.openssl/include/openssl/ssl.h | |
make -j $NB_PROC && sudo checkinstall --pkgname="nginx-libressl" --pkgversion="$NGINX_VERSION" \ | |
--provides="nginx" --requires="libc6, libpcre3, zlib1g" --strip=yes \ | |
--stripso=yes --backup=yes -y --install=yes | |
echo "All done."; | |
echo "This build has not edited your existing /etc/nginx directory."; | |
echo "If things aren't working now you may need to refer to the"; | |
echo "configuration files the new nginx ships with as defaults,"; | |
echo "which are available at /etc/nginx-default"; | |
exit 0 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment