CentOS 6 + Puppet 2.7 + mCollective + Foreman + RabbitMQ + Apache + Passenger Tu
So perhaps less than a ‘blog post’ this is more of a bash code-dumpfrom my Veewee definition + postinstall.sh for this deployment. Foranyone who needs a quick stack (especially if you are still on older > If nothing else, hopefully someone finds this useful to fix a bugthey may have been having in their own deployment. Note that I’ve takenout some Veewee/Vagrant/Virtual Box specific pieces of the originalpostinstall.sh. Cheers.原文出处：http://www.uncompiled.com/centos-6-puppet-27-mcollective-foreman-rabbit
[*]# Configuration Parameters
[*]MYSQL_PASSWORD="puppetized"
[*]RABBIT_USER="mcollective"
[*]RABBIT_PASSWORD="rabbitMCrabbit"
[*]MCOLLECTIVE_PSK="mcollectivePSKmcollective"
[*]FOREMAN_EMAIL="root@test.local"
[*]DOMAIN="test.local"
[*]
[*]# Initial CentOS system clean-up + upgrades
[*]yum -y erase wireless-tools gtk2 libX11 hicolor-icon-theme avahi freetype bitstream-vera-fonts
[*]yum -y upgrade
[*]yum -y clean all
[*]
[*]# Configure hostname
[*]echo -e "127.0.0.1 puppet.${DOMAIN} puppet foreman.${DOMAIN} foreman localhost" > /etc/hosts
[*]echo -e "NETWORKING=yes\nHOSTNAME=puppet.${DOMAIN}" > /etc/sysconfig/network
[*]hostname puppet.${DOMAIN}
[*]
[*]# Puppet Labs repository
[*]cat > /etc/yum.repos.d/puppetlabs.repo < < "EOF"
[*]
[*]name=Puppet Labs Packages
[*]baseurl=http://yum.puppetlabs.com/
[*]gpgcheck=0
[*]enabled=1
[*]EOF
[*]
[*]# Foreman repository
[*]cat > /etc/yum.repos.d/foreman.repo < < "EOF"
[*]
[*]name=Foreman Repo
[*]baseurl=http://yum.theforeman.org/stable
[*]gpgcheck=0
[*]enabled=1
[*]EOF
[*]
[*]# Installation of majority of stack packages
[*]yum -y install rubygems ruby-devel rubygem-stomp
[*]yum -y install httpd httpd-devel mod_ssl
[*]yum -y install mysql mysql-server mysql-devel
[*]yum -y install libcurl-devel openssl-devel openssl098e tcl tk unixODBC unixODBC-devel augeas
[*]
[*]rpm -ivh http://download.fedora.redhat.com/pub/epel/6/x86_64/rubygem-rest-client-1.6.1-2.el6.noarch.rpm
[*]rpm -ivh http://download.fedora.redhat.com/pub/epel/6/x86_64/rubygem-json-1.4.3-3.el6.x86_64.rpm
[*]rpm -ivh http://download.fedora.redhat.com/pub/epel/6/x86_64/rubygem-mime-types-1.16-3.el6.noarch.rpm
[*]
[*]# Installation of stack gems
[*]gem install --no-rdoc --no-ri puppet passenger rack mysql net-ping
[*]gem install --no-rdoc --no-ri -v 3.0.10 rails activerecord
[*]
[*]# Deploy required Puppet user, files, and directories
[*]adduser puppet
[*]
[*]mkdir -p /etc/puppet/{manifests,modules}
[*]mkdir -p /usr/share/puppet/rack/puppetmasterd/{public,tmp}
[*]
[*]mkdir -p /var/lib/puppet/{bucket,yaml,rrd,server_data,reports}
[*]chown puppet:puppet /var/lib/puppet/{bucket,yaml,rrd,server_data,reports}
[*]
[*]cp /usr/lib/ruby/gems/1.8/gems/puppet-2.7.3/ext/rack/files/config.ru /usr/share/puppet/rack/puppetmasterd/config.ru
[*]chown puppet:puppet /usr/share/puppet/rack/puppetmasterd/config.ru
[*]
[*]# Install Foreman
[*]rpm -ivh http://yum.theforeman.org/stable/RPMS/foreman-0.3-1.noarch.rpm --nodeps
[*]
[*]# mCollective & Plugins
[*]yum -y install mcollective mcollective-common mcollective-client
[*]
[*]cd /usr/libexec/mcollective/mcollective/application
[*]for i in filemgr nettest package puppetd service; do
[*]wget https://raw.github.com/puppetlabs/mcollective-plugins/master/agent/$i/application/$i.rb
[*]done
[*]wget https://raw.github.com/phobos182/mcollective-plugins/master/agent/etcfacts/application/etcfacts.rb
[*]wget https://raw.github.com/phobos182/mcollective-plugins/master/agent/shellcmd/application/shellcmd.rb
[*]wget https://raw.github.com/phobos182/mcollective-plugins/master/agent/yum/application/yum.rb
[*]
[*]cd /usr/libexec/mcollective/mcollective/agent
[*]for i in nettest filemgr puppetd puppetral puppetca; do
[*]wget https://raw.github.com/puppetlabs/mcollective-plugins/master/agent/$i/agent/$i.rb
[*]wget https://raw.github.com/puppetlabs/mcollective-plugins/master/agent/$i/agent/$i.ddl
[*]done
[*]
[*]wget -O package.rb https://raw.github.com/puppetlabs/mcollective-plugins/master/agent/package/agent/puppet-package.rb
[*]wget https://raw.github.com/puppetlabs/mcollective-plugins/master/agent/package/agent/package.ddl
[*]wget -O service.rb https://raw.github.com/puppetlabs/mcollective-plugins/master/agent/service/agent/puppet-service.rb
[*]wget https://raw.github.com/puppetlabs/mcollective-plugins/master/agent/service/agent/service.ddl
[*]wget https://raw.github.com/phobos182/mcollective-plugins/master/agent/etcfacts/etc_facts.rb
[*]wget https://raw.github.com/phobos182/mcollective-plugins/master/agent/etcfacts/etc_facts.ddl
[*]wget https://raw.github.com/phobos182/mcollective-plugins/master/agent/shellcmd/shellcmd.rb
[*]wget https://raw.github.com/phobos182/mcollective-plugins/master/agent/shellcmd/shellcmd.ddl
[*]wget https://raw.github.com/phobos182/mcollective-plugins/master/agent/yum/yum.rb
[*]wget https://raw.github.com/phobos182/mcollective-plugins/master/agent/yum/yum.ddl
[*]
[*]cd /usr/libexec/mcollective/mcollective/facts/
[*]wget https://raw.github.com/puppetlabs/mcollective-plugins/master/facts/facter/facter_facts.rb
[*]
[*]# Fix ODBC requirement for Erlang
[*]ln -s /usr/lib64/libodbc.so.2 /usr/lib64/libodbc.so.1
[*]
[*]# Install Erlang
[*]rpm -ivh http://yum.puppetlabs.com/prosvc/5/x86_64/erlang-R12B-5.10.el5.x86_64.rpm --nodeps
[*]
[*]# Install RabbitMQ & Plugins
[*]rpm -ivh http://www.rabbitmq.com/releases/rabbitmq-server/v2.5.1/rabbitmq-server-2.5.1-1.noarch.rpm
[*]
[*]cd /usr/lib/rabbitmq/lib/rabbitmq_server-2.5.1/plugins
[*]wget http://www.rabbitmq.com/releases/plugins/v2.5.1/amqp_client-2.5.1.ez
[*]wget http://www.rabbitmq.com/releases/plugins/v2.5.1/rabbitmq_stomp-2.5.1.ez
[*]
[*]chkconfig rabbitmq-server on
[*]service rabbitmq-server start
[*]
[*]# Configure RabbitMQ user/privileges
[*]rabbitmqctl add_user ${RABBIT_USER} ${RABBIT_PASSWORD}
[*]rabbitmqctl set_permissions ${RABBIT_USER} ".*" ".*" ".*"
[*]rabbitmqctl delete_user guest
[*]
[*]# Install Apache Passenger module
[*]passenger-install-apache2-module -a
[*]
[*]# Configuration files for mCollective
[*]cat > /etc/mcollective/server.cfg < < "EOF"
[*]topicprefix = /topic/
[*]main_collective = mcollective
[*]collectives = mcollective
[*]libdir = /usr/libexec/mcollective
[*]logfile = /var/log/mcollective.log
[*]loglevel = info
[*]daemonize = 1
[*]
[*]securityprovider = psk
[*]plugin.psk = MCOLLECTIVE_PSK_PH
[*]
[*]connector = stomp
[*]plugin.stomp.host = localhost
[*]plugin.stomp.port = 61613
[*]plugin.stomp.user = RABBIT_USER_PH
[*]plugin.stomp.password = RABBIT_PASSWORD_PH
[*]
[*]factsource = facter
[*]EOF
[*]
[*]cat > /etc/mcollective/client.cfg < < "EOF"
[*]topicprefix = /topic/
[*]main_collective = mcollective
[*]collectives = mcollective
[*]libdir = /usr/libexec/mcollective
[*]logfile = /dev/null
[*]loglevel = info
[*]
[*]securityprovider = psk
[*]plugin.psk = MCOLLECTIVE_PSK_PH
[*]
[*]connector = stomp
[*]plugin.stomp.host = localhost
[*]plugin.stomp.port = 61613
[*]plugin.stomp.user = RABBIT_USER_PH
[*]plugin.stomp.password = RABBIT_PASSWORD_PH
[*]
[*]factsource = facter
[*]EOF
[*]
[*]# Configure MySQL
[*]chkconfig mysqld on && service mysqld start
[*]mysql -u root -e "CREATE DATABASE puppet;"
[*]mysql -u root -e "GRANT ALL PRIVILEGES ON puppet.* TO puppet@localhost IDENTIFIED BY '${MYSQL_PASSWORD}';"
[*]
[*]# Puppet configuration
[*]cat > /etc/puppet/puppet.conf < < "EOF"
[*]
[*]logdir = /var/log/puppet
[*]rundir = /var/run/puppet
[*]ssldir = $vardir/ssl
[*]factpath = $vardir/lib/facter
[*]templatedir = $confdir/templates
[*]pluginsync = true
[*]classfile = $vardir/classes.txt
[*]localconfig = $vardir/localconfig
[*]reportdir = /var/lib/puppet/reports
[*]
[*]
[*]report = true
[*]ignorecache = true
[*]
[*]
[*]reports = http,store,log,foreman
[*]ssl_client_header = SSL_CLIENT_S_DN
[*]ssl_client_verify_header = SSL_CLIENT_VERIFY
[*]storeconfigs = true
[*]dbadapter = mysql
[*]dbuser = puppet
[*]dbpassword = MYSQL_PASSWORD_PH
[*]dbname = puppet
[*]dbserver = localhost
[*]dbsocket = /var/lib/mysql/mysql.sock
[*]EOF
[*]
[*]# Foreman configuration files
[*]cat > /usr/share/foreman/config/database.yml < < "EOF"
[*]production:
[*]adapter: mysql
[*]database: puppet
[*]username: puppet
[*]password: MYSQL_PASSWORD_PH
[*]host: localhost
[*]socket: "/var/lib/mysql/mysql.sock"
[*]EOF
[*]
[*]cat > /usr/share/foreman/config/settings.yaml < < "EOF"
[*]---
[*]:modulepath: /etc/puppet/modules/
[*]:tftppath: tftp/
[*]:ldap: false
[*]:puppet_server: puppet
[*]:unattended: false
[*]:puppet_interval: 30
[*]:document_root: /usr/share/foreman/public
[*]:administrator: FOREMAN_EMAIL_PH
[*]:foreman_url: foreman.DOMAIN_PH
[*]EOF
[*]
[*]cat > /usr/share/foreman/config/email.yaml < < "EOF"
[*]production:
[*]delivery_method: :smtp
[*]smtp_settings:
[*]address: localhost
[*]port: 25
[*]domain: DOMAIN_PH
[*]authentication: :none
[*]EOF
[*]
[*]# Foreman report for Puppet
[*]cat > /usr/lib/ruby/gems/1.8/gems/puppet-2.7.3/lib/puppet/reports/foreman.rb < < "EOF"
[*]$foreman_url="https://foreman.DOMAIN_PH:443"
[*]
[*]require 'puppet'
[*]require 'net/http'
[*]require 'uri'
[*]
[*]Puppet::Reports.register_report(:foreman) do
[*]Puppet.settings.use(:reporting)
[*]desc "Sends reports directly to Foreman"
[*]
[*]def process
[*]begin
[*]uri = URI.parse($foreman_url)
[*]http = Net::HTTP.new(uri.host, uri.port)
[*]if uri.scheme == 'https' then
[*]http.use_ssl = true
[*]http.verify_mode = OpenSSL::SSL::VERIFY_NONE
[*]end
[*]req = Net::HTTP::Post.new("/reports/create?format=yml")
[*]req.set_form_data({'report' => to_yaml})
[*]response = http.request(req)
[*]rescue Exception => e
[*]raise Puppet::Error, "Could not send report to Foreman at #{$foreman_url}/reports/create?format=yml: #{e}"
[*]end
[*]end
[*]end
[*]EOF
[*]
[*]# Apache configuration files
[*]cat > /etc/httpd/conf.d/puppet.conf < < "EOF"
[*]Listen 8140
[*]
[*]SSLEngine on
[*]SSLCipherSuite SSLv2:-LOW:-EXPORT:RC4+RSA
[*]SSLCertificateFile /var/lib/puppet/ssl/certs/puppet.DOMAIN_PH.pem
[*]SSLCertificateKeyFile /var/lib/puppet/ssl/private_keys/puppet.DOMAIN_PH.pem
[*]SSLCertificateChainFile /var/lib/puppet/ssl/ca/ca_crt.pem
[*]SSLCACertificateFile /var/lib/puppet/ssl/ca/ca_crt.pem
[*]SSLCARevocationFile /var/lib/puppet/ssl/ca/ca_crl.pem
[*]SSLVerifyClient optional
[*]SSLVerifyDepth 1
[*]SSLOptions +StdEnvVars
[*]
[*]RackAutoDetect On
[*]DocumentRoot /usr/share/puppet/rack/puppetmasterd/public/
[*]
[*]Options None
[*]AllowOverride None
[*]Order allow,deny
[*]allow from all
[*]
[*]EOF
[*]
[*]cat > /etc/httpd/conf.d/passenger.conf < < "EOF"
[*]LoadModule passenger_module /usr/lib/ruby/gems/1.8/gems/passenger-3.0.8/ext/apache2/mod_passenger.so
[*]PassengerRoot /usr/lib/ruby/gems/1.8/gems/passenger-3.0.8
[*]PassengerRuby /usr/bin/ruby
[*]EOF
[*]
[*]cat > /etc/httpd/conf.d/foreman.conf < < "EOF"
[*]Listen 443
[*]NameVirtualHost *:443
[*]LoadModule ssl_module modules/mod_ssl.so
[*]AddType application/x-x509-ca-cert .crt
[*]AddType application/x-pkcs7-crl .crl
[*]
[*]
[*]ServerName foreman.DOMAIN_PH
[*]
[*]RailsAutoDetect On
[*]DocumentRoot /usr/share/foreman/public
[*]
[*]
[*]Options FollowSymLinks
[*]DirectoryIndex index.html
[*]AllowOverride None
[*]Order allow,deny
[*]allow from all
[*]
[*]SSLEngine On
[*]SSLCertificateFile /var/lib/puppet/ssl/certs/puppet.DOMAIN_PH.pem
[*]SSLCertificateKeyFile /var/lib/puppet/ssl/private_keys/puppet.DOMAIN_PH.pem
[*]
[*]EOF
[*]
[*]# Remove stock Apache configuration files
[*]rm -f /etc/httpd/conf.d/ssl.conf
[*]rm -f /etc/httpd/conf.d/welcome.conf
[*]
[*]# IPTables configuration
[*]cat > /etc/sysconfig/iptables < < "EOF"
[*]# Firewall configuration written by system-config-firewall
[*]# Manual customization of this file is not recommended.
[*]*filter
[*]:INPUT ACCEPT
[*]:FORWARD ACCEPT
[*]:OUTPUT ACCEPT
[*]-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
[*]-A INPUT -p icmp -j ACCEPT
[*]-A INPUT -i lo -j ACCEPT
[*]-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
[*]-A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
[*]-A INPUT -m state --state NEW -m tcp -p tcp --dport 443 -j ACCEPT
[*]-A INPUT -m state --state NEW -m tcp -p tcp --dport 8140 -j ACCEPT
[*]-A INPUT -m state --state NEW -m tcp -p tcp --dport 61613 -j ACCEPT
[*]-A INPUT -j REJECT --reject-with icmp-host-prohibited
[*]-A FORWARD -j REJECT --reject-with icmp-host-prohibited
[*]COMMIT
[*]EOF
[*]
[*]# Enable IPTables ruleset
[*]service iptables restart
[*]
[*]# Replace placeholder values for configuration
[*]sed -i "s/MYSQL_PASSWORD_PH/${MYSQL_PASSWORD}/g" /etc/puppet/puppet.conf /usr/share/foreman/config/database.yml
[*]sed -i "s/MCOLLECTIVE_PSK_PH/${MCOLLECTIVE_PSK}/g" /etc/mcollective/server.cfg /etc/mcollective/client.cfg
[*]sed -i "s/RABBIT_USER_PH/${RABBIT_USER}/g" /etc/mcollective/server.cfg /etc/mcollective/client.cfg
[*]sed -i "s/RABBIT_PASSWORD_PH/${RABBIT_PASSWORD}/g" /etc/mcollective/server.cfg /etc/mcollective/client.cfg
[*]sed -i "s/FOREMAN_EMAIL_PH/${FOREMAN_EMAIL}/g" /usr/share/foreman/config/settings.yaml
[*]sed -i "s/DOMAIN_PH/${DOMAIN}/g" /etc/httpd/conf.d/puppet.conf
[*]sed -i "s/DOMAIN_PH/${DOMAIN}/g" /etc/httpd/conf.d/foreman.conf
[*]sed -i "s/DOMAIN_PH/${DOMAIN}/g" /usr/lib/ruby/gems/1.8/gems/puppet-2.7.3/lib/puppet/reports/foreman.rb
[*]sed -i "s/DOMAIN_PH/${DOMAIN}/g" /usr/share/foreman/config/email.yaml
[*]sed -i "s/DOMAIN_PH/${DOMAIN}/g"/usr/share/foreman/config/settings.yaml
[*]
[*]# Set Foreman symlinks
[*]ln -sf /usr/share/foreman/config/database.yml /etc/foreman/database.yml
[*]ln -sf /usr/share/foreman/config/settings.yaml /etc/foreman/settings.yaml
[*]ln -sf /usr/share/foreman/config/email.yaml /etc/foreman/email.yaml
[*]
[*]# Enable mCollective
[*]chkconfig mcollective on
[*]service mcollective start
[*]
[*]# Generate Puppet master CA
[*]puppet cert --generate puppet.${DOMAIN}
[*]
[*]# Enable Apache
[*]chkconfig httpd on
[*]service httpd start
[*]
[*]# Rake Foreman
[*]cd /usr/share/foreman
[*]RAILS_ENV=production rake db:migrate
[*]
[*]# Execute Puppet agent
[*]puppet agent -t
[*]
[*]# Finished
[*]exit
[*]
页:
[1]