分类 saltstack 下的文章

2015-12-12

2015年12月12日
3,865 阅读
0 评论
0 点赞

2015-12-12

2015年12月12日
5,498 阅读
0 评论
0 点赞

2015-12-10

saltstack的master与minion认证及salt-key常用参数 minion认证[root@minion minion]# ll /etc/salt/pki/minion/ 总用量 12 -rw-r--r--. 1 root root 451 12月 8 06:11 minion_master.pub -r--------. 1 root root 1675 12月 8 05:56 minion.pem -rw-r--r--. 1 root root 451 12月 8 05:56 minion.pub [root@minion minion]# 而master端则是放在以下路径，这里的钥匙则是minion的，如果id名称换掉，则需要删掉重新认证：[root@master ~]# ll /etc/salt/pki/master/minions 总用量 4 -rw-r--r--. 1 root root 451 12月 8 06:09 minios.10.0.0.8.com [root@master ~]# master在minion秘钥位置[root@minion minion]# ll /etc/salt/pki/minion/minion_master.pub -rw-r--r--. 1 root root 451 12月 8 06:11 /etc/salt/pki/minion/minion_master.pub [root@minion minion]# 而master和minion是保持长链接的！[root@master ~]# lsof -i:4505 COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME salt-mast 1124 root 12u IPv4 10089 0t0 TCP *:4505 (LISTEN) salt-mast 1124 root 14u IPv4 12365 0t0 TCP 10.0.0.7:4505->10.0.0.8:33079 (ESTABLISHED) [root@minion minion]# lsof -i:4505 COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME salt-mini 1125 root 24u IPv4 10455 0t0 TCP 10.0.0.8:33079->10.0.0.7:4505 (ESTABLISHED) salt-kye参数1，删除：salt-key -d[root@master ~]# salt-key Accepted Keys: minios.10.0.0.8.com Denied Keys: Unaccepted Keys: 10.0.0.8 Rejected Keys: [root@master ~]# salt-key -d 10.0.0.8 The following keys are going to be deleted: Unaccepted Keys: 10.0.0.8 Proceed? [N/y] y Key for minion 10.0.0.8 deleted. [root@master ~]# salt-key Accepted Keys: minios.10.0.0.8.com Denied Keys: Unaccepted Keys: Rejected Keys: [root@master ~]# 2,-a :同意某一个主机-A :同意所有主机-d :删除-D :删除所有-l :列出所有如：查看时间：[root@master ~]# salt '*' cmd.run 'uptime' minios.10.0.0.8.com: 06:23:43 up 20 min, 1 user, load average: 0.00, 0.00, 0.00 [root@master ~]#

2015年12月10日
7,043 阅读
0 评论
0 点赞

2015-12-09

saltstack配置sls文件下发在上篇文章中的返回结果是已经安装过的！通过salt在尝试安装sl，返回结果如下：[root@master init]# salt 'minios.10.0.0.8.com' state.sls init.pkg minios.10.0.0.8.com: ---------- ID: pkg.init Function: pkg.installed Name: sl Result: True Comment: The following packages were installed/updated: sl Started: 07:05:37.645283 Duration: 145585.54 ms Changes: ---------- sl: ---------- new: 5.02-1.el6 old: Summary ------------ Succeeded: 1 (changed=1) Failed: 0 ------------ Total states run: 1 [root@master init]# saltstack配置文件下发创建配置文件的模块！批量修改/etc/security/limits.conf文件~ [root@master init]# vim /etc/salt/status/init/conf.sls conf-config:----------------------------------->命名 file.managed:-------------------------------->file状态模块：managed管理 - name: /etc/security/limits.conf---------->name:被管理文件的路径 - source: salt://init/files/limits.conf---->source：salt://limits.conf在master的文件路径 - user: root------------------------------->文件用户 - group: root------------------------------>组 - mode: 644-------------------------------->权限当创建完config.sls后需要在top.sls中写入init.conf，才能够调用！[root@master status]# vim /etc/salt/status/top.sls base: 'minios.10.0.0.8.com': - init.pkg - init.conf 创建files目录[root@master init]# mkdir files [root@master init]# pwd /etc/salt/status/init [root@master init]# 将/etc/security/limits.conf的limits.conf复制到/etc/salt/status/init/files下[root@master init]# cp /etc/security/limits.conf /etc/salt/status/init/files/ 修改/etc/salt/status/init/files/下的limits.conf模板，打开两个参数，如下:[root@master init]# vim /etc/salt/status/init/files/limits.conf * soft core 0 * hard rss 10000 没改之前，在minion查看[root@minion ~]# cat /etc/security/limits.conf |grep 10000 #* hard rss 10000 [root@minion ~]# 我们在master上执行state.highstate，在执行过程中，都会检查pkg和conf[root@master init]# salt 'minios.10.0.0.8.com' state.highstate minios.10.0.0.8.com: ---------- ID: pkg.init Function: pkg.installed Name: sl Result: True Comment: Package sl is already installed. Started: 07:34:41.304171 Duration: 978.561 ms Changes: ---------- ID: conf-config Function: file.managed Name: /etc/security/limits.conf Result: True Comment: File /etc/security/limits.conf updated Started: 07:34:42.339015 Duration: 27.806 ms Changes: ---------- diff: --- +++ @@ -39,8 +39,8 @@ #<domain> <type> <item> <value> # -#* soft core 0 -#* hard rss 10000 +* soft core 0 +* hard rss 10000 #@student hard nproc 20 #@faculty soft nproc 20 #@faculty hard nproc 50 Summary ------------ Succeeded: 2 (changed=1) Failed: 0 ------------ Total states run: 2 [root@master init]# 在minion上查看结果[root@minion ~]# cat /etc/security/limits.conf |grep 10000 * hard rss 10000 [root@minion ~]#

2015年12月09日
5,555 阅读
0 评论
0 点赞

2015-12-08

saltstack远程执行安装包 saltstacksaltstack主要用来远程执行，配置管理和云管理1，更新yum源wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-6.repo 2，更新epel源mkdir /home/linuxea/tools -p && cd /home/linuxea/tools wget http://mirrors.ustc.edu.cn/fedora/epel/6/x86_64/epel-release-6-8.noarch.rpm rpm -ivh epel-release-6-8.noarch.rpm rpm -qa |grep epel 3，yum安装服务端：yum install salt-master启动服务端，监听端口4405,4406[root@master ~]# service salt-master start [root@master ~]# lsof -i :4505 COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME salt-mast 26847 root 12u IPv4 65103 0t0 TCP *:4505 (LISTEN) [root@master ~]# lsof -i :4506 COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME salt-mast 26881 root 20u IPv4 65251 0t0 TCP *:4506 (LISTEN) [root@master ~]# 客户端：yum install salt-minion[root@minion ~]# service salt-minon start [root@minion ~]# vim /etc/salt/minion master: 10.0.0.7 id: minios.10.0.0.8.com 把minion_id修改，不使用此ID[root@minion ~]# cat /etc/salt/minion_id 10.0.0.8 [root@minion ~]# mv /etc/salt/minion_id /etc/salt/minion_id.bak [root@minion ~]# master和minon需要认证！---------->id的认证[root@master ~]# salt-key Accepted Keys: Denied Keys: Unaccepted Keys: 10.0.0.8 minios.10.0.0.8.com Rejected Keys: [root@master ~]# 添加认证[root@master ~]# salt-key -a minios.10.0.0.8.com The following keys are going to be accepted: Unaccepted Keys: minios.10.0.0.8.com Proceed? [n/Y] y Key for minion minios.10.0.0.8.com accepted. [root@master ~]# 在查看，minios.10.0.0.8.com已经被认证[root@master ~]# salt-key Accepted Keys: minios.10.0.0.8.com Denied Keys: Unaccepted Keys: 10.0.0.8 Rejected Keys: [root@master ~]# 测试minios.10.0.0.8.com，返回True是正常（*代表所有）[root@master ~]# salt 'minios.10.0.0.8.com' test.ping minios.10.0.0.8.com: True [root@master ~]# 使用cmd.run模块远程执行！远程查看硬盘[root@master ~]# salt 'minios.10.0.0.8.com' cmd.run 'df -h' minios.10.0.0.8.com: Filesystem Size Used Avail Use% Mounted on /dev/sda2 18G 2.5G 14G 16% / tmpfs 491M 236K 491M 1% /dev/shm /dev/sda1 283M 28M 240M 11% /boot 远程查看系统时间[root@master ~]# salt 'minios.10.0.0.8.com' cmd.run 'uptime' minios.10.0.0.8.com: 06:16:18 up 3:00, 2 users, load average: 0.00, 0.01, 0.00 [root@master ~]# 配置管理！default_include: master.d/*.conf ----------->配置文件放置interface: 0.0.0.0-------------------------->监听端口user: root---------------------------------->默认用户例如：file_roots: (两个空格)base: （四个空格） - /etc/salt/states dev: - /etc/salt/states/prod - /srv/salt/dev/states prod: - /srv/salt/prod/services - /srv/salt/prod/states 本文修改:[root@master ~]# vim /etc/salt/master default_include: master.d/*.conf interface: 0.0.0.0 state_top: top.sls --------------------->后缀 user: root file_roots: base: - /etc/salt/status dev: - /etc/salt/services/dev [root@master ~]# mkdir -p /etc/salt/status [root@master ~]# mkdir -p /etc/salt/services/dev [root@master ~]# /etc/init.d/salt-master restart Stopping salt-master daemon: [确定] Starting salt-master daemon: [确定] [root@master ~]# log位置[root@master ~]# tail -f /var/log/salt/master 编写状态文件！给每个类型创建分支创建一个安装文件包的分支文件目录[root@master status]# mkdir /etc/salt/status/init 在top.sls中调用init目录下的pkg文件[root@master ~]# vim /etc/salt/status/top.sls #huanjing base: 'minios.10.0.0.8.com': - init.pkg 创建pkg文件，写入需要安装的文件，格式如下：[root@master status]# vim /etc/salt/status/pkg.sls pkg.init: pkg.installed: - names: - lrzsz - mtr - nmap - nginx 目录结构如下：[root@master status]# tree /etc/salt/ /etc/salt/ ├── master ├── pki │ └── master │ ├── master.pem │ ├── master.pub │ ├── minions │ │ └── minios.10.0.0.8.com │ ├── minions_autosign │ ├── minions_denied │ ├── minions_pre │ │ └── 10.0.0.8 │ └── minions_rejected ├── services │ └── dev └── status ├── init ├── pkg.sls └── top.sls 11 directories, 7 files [root@master status] 执行测试：[root@master init]# salt 'minios.10.0.0.8.com' state.sls init.pkg minios.10.0.0.8.com: ---------- ID: pkg.init Function: pkg.installed Name: mtr Result: True Comment: Package mtr is already installed. Started: 07:31:40.877509 Duration: 921.628 ms Changes: ---------- ID: pkg.init Function: pkg.installed Name: nmap Result: True Comment: Package nmap is already installed. Started: 07:31:41.799288 Duration: 0.439 ms Changes: ---------- ID: pkg.init Function: pkg.installed Name: lrzsz Result: True Comment: Package lrzsz is already installed. Started: 07:31:41.799851 Duration: 0.328 ms Changes: ---------- ID: pkg.init Function: pkg.installed Name: nginx Result: True Comment: Package nginx is already installed. Started: 07:31:41.800254 Duration: 0.321 ms Changes: Summary ------------ Succeeded: 4 Failed: 0 ------------ Total states run: 4 [root@master init]# 在minios.10.0.0.8.com查看[root@minion ~]# rpm -qa mtr mtr-0.75-5.el6.x86_64 [root@minion ~]# rpm -qa nmap nmap-5.51-4.el6.x86_64 [root@minion ~]# rpm -qa nginx nginx-1.0.15-12.el6.x86_64 [root@minion ~]# rpm -qa lrzsz lrzsz-0.12.20-27.1.el6.x86_64 [root@minion ~]#

2015年12月08日
5,462 阅读
0 评论
0 点赞