因為最近開機器的需求越來越多了，所以就乾脆寫一個流程來加強記憶

1.安裝 apache

安裝 apache 包含 SSL 模組並啟動 apache
sudo yum install httpd mod_ssl openssl
sudo systemctl start httpd
sudo systemctl enable httpd

2.安裝 php5.6

安裝 wget
sudo yum install wget
安裝 epel & remi
wget http://mirror.centos.org/centos/7/extras/x86_64/Packages/epel-release-7-11.noarch.rpm
wget http://rpms.famillecollet.com/enterprise/remi-release-7.rpm
rpm -Uvh remi-release-7*.rpm epel-release-7*.rpm
修改啟動程式庫(Repo,repository)
vi /etc/yum.repos.d/remi.repo

[remi-php56]
name=Les RPM de remi de PHP 5.6 pour Enterprise Linux 6 - $basearch
#baseurl=http://rpms.famillecollet.com/enterprise/6/php56/$basearch/
mirrorlist=http://rpms.famillecollet.com/enterprise/6/php56/mirror
# WARNING: If you enable this repository, you must also enable "remi"
#將 enabled=0 修改成 1
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi

安裝PHP5.6
sudo yum install php php-gd php-mysql php-mcrypt php-mbstring
安裝時要確認版本是否有跳成 5.6

================================================================================================================================
 Package                        Arch                   Version                                 Repository                  Size
================================================================================================================================
Installing:
 php                            x86_64                 5.5.20-2.el6.remi                       remi-php55                 2.6 M
 php-gd                         x86_64                 5.5.20-2.el6.remi                       remi-php55                  72 k
 php-mysqlnd                    x86_64                 5.5.20-2.el6.remi                       remi-php55                 3.6 M
Installing for dependencies:
 php-cli                        x86_64                 5.5.20-2.el6.remi                       remi-php55                 3.7 M
 php-common                     x86_64                 5.5.20-2.el6.remi                       remi-php55                 1.0 M
 php-pdo                        x86_64                 5.5.20-2.el6.remi                       remi-php55                 112 k
 php-pear                       noarch                 1:1.9.5-3.el6.remi                      remi                       375 k
 php-pecl-jsonc                 x86_64                 1.3.6-1.el6.remi.5.5.1                  remi-php55                  47 k
 php-pecl-zip                   x86_64                 1.12.4-1.el6.remi.5.5                   remi-php55                 269 k
 php-process                    x86_64                 5.5.20-2.el6.remi                       remi-php55                  57 k
 php-xml                        x86_64                 5.5.20-2.el6.remi                       remi-php55                 208 k

Transaction Summary
================================================================================================================================
Install      11 Package(s)

3.安裝 vsftpd

yum -y install vsftpd

vi /etc/vsftpd/vsftpd.conf
修改的 conf 內容
#限制匿名登入
anonymous_enable=NO
#限制使用者無法跳出家目錄
chroot_list_enable=YES 啟用鎖定家目錄
#排除根目錄寫入的問題
allow_writeable_chroot=YES

sudo vi /etc/pam.d/vsftpd
修改pam設定
auth required pam_shells.so 改成 auth required pam_nologin.so

啟動 FTP
sudo systemctl start vsftpd

設定開機後啟動
sudo systemctl enable vsftpd

4.建立使用者帳號並指向到 Web 目錄

#新增使用者並指派為虛擬帳戶以及指定目錄
sudo useradd -s /sbin/nologin -d /var/www username
#建立使用者密碼
sudo passwd username

5.修改 selinux

一般來說會直接關掉 selinux ，但是相對的會有安全性問題，所以還是針對特例關閉就好了
#查詢目前放行狀態

getsebool -a | grep ftp
ftpd_anon_write --> off
ftpd_connect_all_unreserved --> off
ftpd_connect_db --> off
ftpd_full_access --> off
ftpd_use_cifs --> off
ftpd_use_fusefs --> off
ftpd_use_nfs --> off
ftpd_use_passive_mode --> off
httpd_can_connect_ftp --> off
httpd_enable_ftp_server --> off
tftp_anon_write --> off
tftp_home_dir --> off

這邊會看到 ftpd_full_access  是 off 狀態
#將ftpd_full_access 改成 on
setsebool -P ftpd_full_access=1
#再查詢一次

getsebool -a | grep ftp
ftpd_anon_write --> off
ftpd_connect_all_unreserved --> off
ftpd_connect_db --> off
ftpd_full_access --> on
ftpd_use_cifs --> off
ftpd_use_fusefs --> off
ftpd_use_nfs --> off
ftpd_use_passive_mode --> off
httpd_can_connect_ftp --> off
httpd_enable_ftp_server --> off
tftp_anon_write --> off
tftp_home_dir --> off

5.修改 防火牆設定

sudo firewall-cmd --zone=public --add-service=ftp
sudo firewall-cmd --zone=public --add-service=http
sudo firewall-cmd --zone=public --add-service=https