[root@iZon201ihvpnoi2e3ftkphZ nginx-1.30.1]# make -j$(nproc)
make -f objs/Makefile
make[1]: Entering directory '/usr/local/src/nginx-1.30.1'
cd /tmp/nginx/openssl-1.1.1d \
&& if [ -f Makefile ]; then make clean; fi \
&& ./config --prefix=/tmp/nginx/openssl-1.1.1d/.openssl no-shared no-threads  \
&& make \
&& make install_sw LIBDIR=lib
/bin/sh: line 0: cd: /tmp/nginx/openssl-1.1.1d: No such file or directory
make[1]: *** [objs/Makefile:1260: /tmp/nginx/openssl-1.1.1d/.openssl/include/openssl/ssl.h] Error 1
make[1]: Leaving directory '/usr/local/src/nginx-1.30.1'
make: *** [Makefile:10: build] Error 2
[root@iZon201ihvpnoi2e3ftkphZ nginx-1.30.1]#

重新下载 OpenSSL 1.1.1d

# 创建目录并下载
mkdir -p /tmp/nginx
cd /tmp/nginx
wget https://www.openssl.org/source/openssl-1.1.1d.tar.gz
tar -zxf openssl-1.1.1d.tar.gz

# 回到 nginx 源码目录重新编译
cd /usr/local/src/nginx-1.30.1

# 清理之前的编译
make clean

# 重新配置（使用原来的参数）
./configure \
    --prefix=/usr/local/nginx \
    --with-http_stub_status_module \
    --with-http_ssl_module \
    --with-openssl=/tmp/nginx/openssl-1.1.1d

# 编译
make -j$(nproc)

{/collapse-item}
{collapse-item label="编译完成，备份和覆盖"}

# 1. 替换二进制（解决 Text file busy）
cp /usr/local/nginx/sbin/nginx /usr/local/nginx/sbin/nginx.old.running
rm -f /usr/local/nginx/sbin/nginx
cp ./objs/nginx /usr/local/nginx/sbin/nginx

# 2. 验证版本
/usr/local/nginx/sbin/nginx -v
# 应该显示 nginx/1.30.1

# 3. 测试配置
/usr/local/nginx/sbin/nginx -t

# 4. 热升级
kill -USR2 $(cat /usr/local/nginx/logs/nginx.pid)
sleep 5

# 5. 查看新旧进程
ps aux | grep "nginx:"

# 6. 关闭旧进程
kill -QUIT $(cat /usr/local/nginx/logs/nginx.pid.oldbin)

# 7. 最终验证
/usr/local/nginx/sbin/nginx -v
ps aux | grep nginx

{/collapse-item}
{collapse-item label="如果热升级后有问题，回滚"}

# 停止当前 nginx
kill $(cat /usr/local/nginx/logs/nginx.pid)

# 恢复旧版本
cp /usr/local/nginx/sbin/nginx.old.running /usr/local/nginx/sbin/nginx

# 启动旧版本
/usr/local/nginx/sbin/nginx

检查漏洞配置

# 搜索可能存在漏洞的 rewrite 配置
grep -rnE 'rewrite\s+.*\?.*\$[0-9]' /usr/local/nginx/conf/

清理源码

删除旧版本备份（确认一切正常后）

rm -f /usr/local/nginx/sbin/nginx.old
rm -f /usr/local/nginx/sbin/nginx.old.running

删除编译源码（可选）

rm -rf /usr/local/src/nginx-1.30.1
rm -rf /usr/local/src/nginx-1.30.1.tar.gz

最终确认

版本确认

/usr/local/nginx/sbin/nginx -v

输出: nginx/1.30.1

进程确认

ps aux | grep "nginx: master"

应该只有 1 个 master 进程（PID 2890107）

{/collapse-item}
{collapse-item label="折叠标题二"}
 折叠内容二
{/collapse-item}