![Nginx with-cc-opt 和 with-ld-opt 配置选项](https://linux22.com/image/709387/Nginx%20with-cc-opt%20%E5%92%8C%20with-ld-opt%20%E9%85%8D%E7%BD%AE%E9%80%89%E9%A1%B9.png)
当我运行时,nginx -V
我在输出中得到类似的内容。
--with-ld-opt='-lrt -ljemalloc -Wl,-z,relro' --with-cc-opt='-m64 -mtune=native -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wno-sign-compare -Wno-string-plus-int -Wno-deprecated-declarations -Wno-unused-parameter -Wno-unused-const-variable -Wno-conditional-uninitialized -Wno-mismatched-tags -Wno-c++11-extensions -Wno-sometimes-uninitialized -Wno-parentheses-equality -Wno-tautological-compare -Wno-self-assign -Wno-deprecated-register -Wno-deprecated -Wno-invalid-source-encoding -Wno-pointer-sign -Wno-parentheses -Wno-enum-conversion'
这是什么,以及如何知道从源代码编译 nginx 时需要在这里输入哪些值?
答案1
开箱即用,您可能不需要自己提供任何标志,配置脚本应该自动检测一些合理的默认值。
但是,为了优化速度和/或安全性,您可能应该提供一些编译器标志。Red Hat 发布一篇文章关于他们认为好的标志集合。以 开头的标志-Wl
由链接器使用,因此您应该使用 提供它们--with-ld-opt
。例如-Wl,-pie
将变成--with-ld-opt="-pie"
。
另一个合理的方法是复制发行版提供的软件包所使用的选项。维护者可能知道他在做什么,而你至少知道它适用于你的用例。
答案2
此 Nginx 选项显示配置选项(需要设置您的编译器和链接器):
-V : show version and configure options then exit
正如本文档页面所述 ->http://nginx.org/en/docs/configure.html:
--with-ld-opt=parameters — sets additional parameters that will be used during linking.
--with-cc-opt=parameters — sets additional parameters that will be added to the CFLAGS variable.
因此,第一个选项是您想要添加到链接器 (ld) 的选项,第二个选项是用于编译器 (cc、gcc 等) 的选项。有关这些选项的更多信息,请参阅 gcc 手册页:https://linux.die.net/man/1/gcc
答案3
当您输入以下命令时:
nginx -V -h
其中:
-V: : show version and configure options then exit
因此,您可以使用各种参数相应地配置构建。可以使用 configure 命令配置构建。
--sbin-path=path — sets the name of an nginx executable file. This name is used only during installation. By default the file is named prefix/sbin/nginx.
--conf-path=path — sets the name of an nginx.conf configuration file. If needs be, nginx can always be started with a different configuration file, by specifying it in the command-line parameter -c file. By default the file is named prefix/conf/nginx.conf.
--pid-path=path — sets the name of an nginx.pid file that will store the process ID of the main process. After installation, the file name can always be changed in the nginx.conf configuration file using the pid directive. By default the file is named prefix/logs/nginx.pid.
--error-log-path=path — sets the name of the primary error, warnings, and diagnostic file. After installation, the file name can always be changed in the nginx.conf configuration file using the error_log directive. By default the file is named prefix/logs/error.log.
--http-log-path=path — sets the name of the primary request log file of the HTTP server. After installation, the file name can always be changed in the nginx.conf configuration file using the access_log directive. By default the file is named prefix/logs/access.log.
--build=name — sets an optional nginx build name.
--user=name — sets the name of an unprivileged user whose credentials will be used by worker processes. After installation, the name can always be changed in the nginx.conf configuration file using the user directive. The default user name is nobody.
--group=name — sets the name of a group whose credentials will be used by worker processes. After installation, the name can always be changed in the nginx.conf configuration file using the user directive. By default, a group name is set to the name of an unprivileged user.
--with-select_module
--without-select_module — enables or disables building a module that allows the server to work with the select() method. This module is built automatically if the platform does not appear to support more appropriate methods such as kqueue, epoll, or /dev/poll.
--with-poll_module
--without-poll_module — enables or disables building a module that allows the server to work with the poll() method. This module is built automatically if the platform does not appear to support more appropriate methods such as kqueue, epoll, or /dev/poll.
--without-http_gzip_module — disables building a module that compresses responses of an HTTP server. The zlib library is required to build and run this module.
--without-http_rewrite_module — disables building a module that allows an HTTP server to redirect requests and change URI of requests. The PCRE library is required to build and run this module.
--without-http_proxy_module — disables building an HTTP server proxying module.
--with-http_ssl_module — enables building a module that adds the HTTPS protocol support to an HTTP server. This module is not built by default. The OpenSSL library is required to build and run this module.
--with-pcre=path — sets the path to the sources of the PCRE library. The library distribution (version 4.4 — 8.41) needs to be downloaded from the PCRE site and extracted. The rest is done by nginx’s ./configure and make. The library is required for regular expressions support in the location directive and for the ngx_http_rewrite_module module.
--with-pcre-jit — builds the PCRE library with “just-in-time compilation” support (1.1.12, the pcre_jit directive).
--with-zlib=path — sets the path to the sources of the zlib library. The library distribution (version 1.1.3 — 1.2.11) needs to be downloaded from the zlib site and extracted. The rest is done by nginx’s ./configure and make. The library is required for the ngx_http_gzip_module module.
--with-cc-opt=parameters — sets additional parameters that will be added to the CFLAGS variable. When using the system PCRE library under FreeBSD, --with-cc-opt="-I /usr/local/include" should be specified. If the number of files supported by select() needs to be increased it can also be specified here such as this: --with-cc-opt="-D FD_SETSIZE=2048".
--with-ld-opt=parameters — sets additional parameters that will be used during linking. When using the system PCRE library under FreeBSD, --with-ld-opt="-L /usr/local/lib" should be specified.`
根据您的需要进行配置,无论您遇到什么困难,只需添加-h
即可获取有关配置中特定参数的信息。