saltstack 实战
环境：192.168.2.249 CentOS Linux release 7.2.1511 (Core) x86_64 角色：master slave 注：机器有限，192.168.2.249 同为 master slave安装：
安装epel源
# yum -y install epel-release #安装源# yum search salt #搜索Loaded plugins: fastestmirror, priorities, product-id, search-disabled-repos, subscription-managerThis system is not registered with Subscription Management. You can use subscription-manager to register.Loading mirror speeds from cached hostfile * elrepo: mirrors.tuna.tsinghua.edu.cn * epel: ftp.cuhk.edu.hk======================================== N/S matched: salt ==========================================perl-Crypt-SaltedHash.noarch : Perl interface to functions that assist in working with salted hashespython-salttesting.noarch : Testing library for SaltStack projectssalt-api.noarch : REST API for Salt, a parallel remote execution systemsalt-cloud.noarch : Cloud provisioner for Salt, a parallel remote execution systemsalt-master.noarch : Management component for salt, a parallel remote execution systemsalt-minion.noarch : Client component for Salt, a parallel remote execution systemsalt-ssh.noarch : Agentless SSH-based version of Salt, a parallel remote execution systemsalt-syndic.noarch : Master-of-master component for Salt, a parallel remote execution systemsalt.noarch : A parallel remote execution system安装master
yum -y install salt-master安装slave
yum -y install salt-minion配置master
vim /etc/salt/masterdefault_include: master.d/*.confinterface: 0.0.0.0ipv6: Falsepublish_port: 4505 #监听端口号cachedir: /data/cache/salt/masterauto_accept: True #自动接受file_roots:base: - /data/salt/salt/ file_ignore_regex:- '/\.svn($|/)'- '/\.git($|/)'file_ignore_glob:- '*.pyc'- '*.swp'pillar_roots:base: - /data/salt/pillar 注：部分配置文件省略创建目录
mkdir -p /data/salt/pillar/mkdir -p /data/salt/salt/mkdir -p /data/cache/salt/master/配置minion
vim /etc/salt/minionmaster: 127.0.0.1id: localhost启动
service salt-master startservice salt-minion start查看
# salt-key Accepted Keys:localhost Denied Keys:Unaccepted Keys:Rejected Keys:常用命令
salt '*' test.ping #测试master与minion链接 * 表示匹配所有主机salt '*' cmd.run 'sehll命令' #远程执行命令salt '*' disk.usage #查看磁盘使用情况salt '*' grains.items #查看grains所有信息salt '*' state.highstate #可以理解成同步# salt '*' test.pinglocalhost: Truesalt '*' cmd.run "df -h"localhost: Filesystem SizeUsed Avail Use% Mounted on /dev/mapper/centos-root 50G3.4G 47G 7% / devtmpfs 3.8G 03.8G 0% /dev tmpfs 3.8G 16K3.8G 1% /dev/shm tmpfs 3.8G8.5M3.8G 1% /run tmpfs 3.8G 03.8G 0% /sys/fs/cgroup /dev/mapper/centos-home408G391M407G 1% /home /dev/sda1 494M195M300M40% /boot # salt '*' grains.itemslocalhost: ......................... host: hostname hwaddr_interfaces: ---------- enp2s0: xx:xx:xx:xx:xx:xx lo: 00:00:00:00:00:00 id: localhost init: systemd ip4_interfaces: ---------- enp2s0: - 192.168.2.249 - 192.168.2.216 lo: - 127.0.0.1 ip6_interfaces: ---------- enp2s0: - xxxx::xxxx:xxxx:xxxx:xxxx lo: - ::1 ip_interfaces: ---------- enp2s0: - 192.168.2.249 - 192.168.2.216 - xxxx::xxxx:xxxx:xxxx:xxxx lo: - 127.0.0.1 - ::1 ipv4: - 127.0.0.1 - 192.168.2.216 - 192.168.2.249 ipv6: - ::1 - xxxx::xxxx:xxxx:xxxx:xxxx kernel: Linux kernelrelease: 3.10.0-327.10.1.el7.x86_64 locale_info: ---------- defaultencoding: UTF-8 defaultlanguage: en_US detectedencoding: UTF-8 localhost: hostname lsb_distrib_id: CentOS Linux machine_id: e6c3365ab74743f399d46200f52480d5 manufacturer: Gigabyte Technology Co., Ltd. master: 127.0.0.1 mdadm: mem_total: 7692 nodename: admin-node num_cpus: 4 num_gpus: 1 os: CentOS os_family: RedHat osarch: x86_64 oscodename: Core osfinger: CentOS Linux-7 osfullname: CentOS Linux osmajorrelease: 7 osrelease: 7.2.1511 osrelease_info: - 7 - 2 - 1511 path: /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin ...........................同步文件配置：
# cd /data/salt/salt# vim top.sls # top 为入口文件base:'*': # '*' 表示匹配所有主机 - base.repo#同步软件源# mkdir base# vim base/repo.sls /etc/yum.repos.d/remi-php70.repo: #同步一个源file.managed: - source: salt://base/files/etc/yum.repos.d/remi-php70.repo - user: root - group: root - mode: 644 - order: 1# mkdir base/files/etc/yum.repos.d/# vim base/files/etc/yum.repos.d/remi-php70.reponame=Remi's PHP 7.0 RPM repository for Enterprise Linux $releasever - $basearchbaseurl=http://repo.55haitao.com:62080/remi/enterprise/$releasever/php70/$basearch/#mirrorlist=http://repo.55haitao.com:62080/remi/enterprise/$releasever/php70/mirrorenabled=0gpgcheck=0name=Remi's PHP 7.0 RPM repository for Enterprise Linux $releasever - $basearch - debuginfobaseurl=http://repo.55haitao.com:62080/remi/enterprise/$releasever/debug-php70/$basearch/enabled=0gpgcheck=0name=Remi's PHP 7.0 test RPM repository for Enterprise Linux $releasever - $basearchbaseurl=http://repo.55haitao.com:62080/remi/enterprise/$releasever/test70/$basearch/#mirrorlist=http://repo.55haitao.com:62080/remi/enterprise/$releasever/test70/mirrorenabled=0gpgcheck=0name=Remi's PHP 7.0 test RPM repository for Enterprise Linux $releasever - $basearch - debuginfobaseurl=http://repo.55haitao.com:62080/remi/enterprise/$releasever/debug-test70/$basearch/enabled=0gpgcheck=0执行同步：
# salt '*' state.highstatelocalhost:---------- ID: /etc/yum.repos.d/remi-php70.repo Function: file.managed Result: True Comment: File /etc/yum.repos.d/remi-php70.repo is in the correct state Started: 15:06:41.837987 Duration: 17.243 ms Changes: Summary------------Succeeded: 1Failed: 0------------Total states run: 1设置自动同步
# cd /data/salt/pillar/# vim top.slsbase:'*': - schedule.highstate# mkdir schedule# vim schedule/highstate.sls schedule:highstate: function: state.highstate minutes: 1在master上修改Pilla文件后，需要用以下命令刷新minion上的数据
# salt '*' saltutil.refresh_pillarlocalhost: True查看minion拥有哪些Pillar数据
# salt '*' pillar.datalocalhost: ---------- schedule: ---------- highstate: ---------- function: state.highstate minutes: 1测试自动同步
# vim /data/salt/salt/base/files/etc/yum.repos.d/remi-php70.repo name=Remi's PHP 7.0 RPM repository for Enterprise Linux $releasever - $basearchbaseurl=http://repo.55haitao.com:62080/remi/enterprise/$releasever/php70/$basearch/#mirrorlist=http://repo.55haitao.com:62080/remi/enterprise/$releasever/php70/mirrorenabled=1 #启用gpgcheck=0....................检测自动同步
# cat /etc/yum.repos.d/remi-php70.repo name=Remi's PHP 7.0 RPM repository for Enterprise Linux $releasever - $basearchbaseurl=http://repo.55haitao.com:62080/remi/enterprise/$releasever/php70/$basearch/#mirrorlist=http://repo.55haitao.com:62080/remi/enterprise/$releasever/php70/mirrorenabled=1 #才修改的gpgcheck=0.................
页:
[1]