Saltstack帮助说明 SaltStack@Master: salt-key -hActions:-l ARG, --list=ARG 显示指定状态的key(支持正则表-L, --list-all 显示所有public keys-a ACCEPT, --accept=ACCEPT 接受指定等待认证的key(-A, --accept-all 接受所有等待认证的key-r REJECT, --reject=REJECT 拒绝指定等待认证的key(-R, --reject-all 拒绝所有等待认证的key--include-all 显示所有状态的key(包含-p PRINT, --print=PRINT 打印指定的public key(-P, --print-all 打印所有的public key-d DELETE, --delete=DELETE 删除指定key-D, --delete-all 删除所有的key-f FINGER, --finger=FINGER 显示指定key的指纹信息-F, --finger-all 显示所有key的指纹信息Options:--version 查看SaltStack程序的版本号--versions-report 查看SaltStack程序以及依赖包的版本号-h, --help 查看帮助信息-c CONFIG_DIR, --config-dir=CONFIG_DIR 指定配置文件目录-t TIMEOUT, --timeout=TIMEOUT 指定Timeout时间(默认是5s)--hard-crash 捕捉到original异常不退出(默认关闭-s, --static 以组的形式返回所有Minion的数据--async 异步执行-v, --verbose verbose模式--show-timeout 显示minion timeout状态--show-jid 显示任务jid-b BATCH, --batch=BATCH 按照百分比执行任务-a EAUTH, --auth=EAUTH, --eauth=EAUTH, --external-auth=指定外部认证方式-T, --make-token 生成Master token--return=RETURNER 指定SaltStack return-d, --doc 查看指定模块或者所有模块文档--args-separator=ARGS_SEPARATOR 设置多个传参直接分隔符--summary 显示汇总信息--username=USERNAME 指定外部认证用户名--password=PASSWORD 指定外部认证密码所有日志相关参数：Logging Options:-l LOG_LEVEL, --log-level=LOG_LEVEL 指定日志级别--log-file=LOG_FILE 指定日志记录文件所有操作目标参数：Target Options:-E, --pcre 正则匹配-L, --list 列表匹配-G, --grain grains匹配--grain-pcre grains加正则匹配-N, --nodegroup 组匹配-R, --range 范围匹配-C, --compound 综合匹配(指定多个匹配)-I, --pillar pillar值匹配-S, --ipcidr minions网段地址匹配所有输出参数：Output Options:--out=OUTPUT, --output=OUTPUT 指定输出格式--out-file=OUTPUT_FILE 指定输出文件--no-color, --no-colour 关闭所有颜色显示--force-color, --force-colour 强制输出颜色显示--state-output=STATE_OUTPUT 指定states输出格式SaltStack@Minion: rpm -ql salt-minion/etc/rc.d/init.d/salt-minion #salt minion服务启动脚本/etc/salt/minion #salt minion配置文件/usr/bin/salt-call #salt call拉取命令/usr/bin/salt-minion #salt minion 服务命令salt命令的output与log的相关参数。SaltStack@Minion: salt-call -hOptions:--version 查看SaltStack程序的版本号--versions-report 查看SaltStack程序以及依赖包的版本号-h, --help 查看帮助信息-c CONFIG_DIR, --config-dir=CONFIG_DIR 指定配置文件目录--hard-crash 扑捉到original异常不退出(默认关闭-g, --grains 返回的信息生成grains-m MODULE_DIRS, --module-dirs=MODULE_DIRS 指定自定义模块目-d, --doc, --documentation 查看指定模块或者所有模块文档--master=MASTER 指定SaltStack Master--return=RETURNER 指定SaltStack return--local 运行masterless模式--file-root=FILE_ROOT 指定file-root目录--pillar-root=PILLAR_ROOT 指定pillar-root目录--retcode-passthrough 显示salt-call命令返回状态--metadata 打印metadata信息--id=ID 指定一个minion ID--skip-grains 不加载grains信息--refresh-grains-cache 强制刷新grains信息·max_open_files——可以根据Master将Minion数量进行适当的调整。·timeout——可以根据Master和Minion的网络状况适当调整。·auto_accept和autosign_file——在大规模部署Minion的时候可以设置自动签证。.max_open_files——可以根据Master将Minion数量进行适当的调整。·timeout——可以根据Master和Minion的网络状况适当调整。·auto_accept和autosign_file——在大规模部署Minion的时候可以设置自动签证。

saltstack配置文件的模块简单写法 配置文件的模块写法[root@master init]# cat zabbix_agent.sls zabbix_agent: pkg.installed: - names: - zabbix22-agent file.managed: - name: /etc/zabbix_agentd.conf - source: salt://init/files/zabbix_agentd.conf - user: root - group: root - mode: 644 service.running: - name: zabbix-agentd - enable: True - reload: True - watch: - file: zabbix_agent 如上！比如我们修改的是zabbix_agentd.conf中的Server=10.0.0.22则，只需要将zabbix_agentd.conf的server端定义变量即可Server={{Zabbix_Server}} 如下：template: zabbixjinjiadefaults: Zabbix_Server: {{ pillar'zabbix-agent' }}如下：[root@master init]# pwd /etc/salt/status/init [root@master init]# [root@master init]# vim zabbix_agent.sls zabbix_agent: pkg.installed: - names: - zabbix22-agent file.managed: - name: /etc/zabbix_agentd.conf - source: salt://init/files/zabbix_agentd.conf - user: root - group: root - mode: 644 - template: jinja - defaults: Zabbix_Server: {{ pillar['zabbix-agent']['Zabbix_Server'] }} service.running: - name: zabbix-agentd - enable: True - reload: True - watch: - file: zabbix_agent 而后创建在pillar下zabbix_agent.sls[root@master init]# pwd /etc/salt/pillar/init [root@master init]# [root@master init]# cat zabbix_agent.sls zabbix-agent: Zabbix_Server: 10.0.0.222 注意：Zabbix_Server: 10.0.0.222 ------>对应status/init下的zabbix_agent中的Zabbix_Server: {{ pillar['zabbix-agent']['Zabbix_Server'] }}的'Zabbix_Server'而后在pillar下的top.sls中添加- init.zabbix_agent[root@master pillar]# vim top.sls [root@master pillar]# pwd /etc/salt/pillar [root@master pillar]# cat top.sls base: '*': - init.rsyslog - init.zabbix_agent [root@master pillar]# 执行结果如下：[root@master init]# salt '*' state.highstate minion.23.com: ---------- ID: pkg.init Function: pkg.installed Name: mtr Result: True Comment: Package mtr is already installed. Started: 08:19:01.343078 Duration: 677.19 ms Changes: ---------- ID: pkg.init Function: pkg.installed Name: nginx Result: True Comment: Package nginx is already installed. Started: 08:19:02.020432 Duration: 0.443 ms Changes: ---------- ID: pkg.init Function: pkg.installed Name: lrzsz Result: True Comment: Package lrzsz is already installed. Started: 08:19:02.020936 Duration: 0.248 ms Changes: ---------- ID: zabbix_agent Function: pkg.installed Name: zabbix22-agent Result: True Comment: Package zabbix22-agent is already installed. Started: 08:19:02.021242 Duration: 0.248 ms Changes: ---------- ID: zabbix_agent Function: file.managed Name: /etc/zabbix_agentd.conf Result: True Comment: File /etc/zabbix_agentd.conf updated Started: 08:19:02.023524 Duration: 12.842 ms Changes: ---------- diff: --- +++ @@ -84,7 +84,7 @@ # Server= #Server=127.0.0.1 -Server=10.0.0.22 +Server=10.0.0.222 ### Option: ListenPort # Agent will listen on this port for connections from the server. ---------- ID: zabbix_agent Function: service.running Name: zabbix-agentd Result: True Comment: Service reloaded Started: 08:19:02.065563 Duration: 178.509 ms Changes: ---------- zabbix-agentd: True Summary ------------ Succeeded: 6 (changed=2) Failed: 0 ------------ Total states run: 6 第二种修改方式： - template: jinja - defaults: Zabbix_Server: {{ pillar['Zabbix_Server'] }} 如下：[root@master init]# pwd /etc/salt/status/init [root@master init]# [root@master init]# vim zabbix_agent.sls zabbix_agent: pkg.installed: - names: - zabbix22-agent file.managed: - name: /etc/zabbix_agentd.conf - source: salt://init/files/zabbix_agentd.conf - user: root - group: root - mode: 644 - template: jinja - defaults: Zabbix_Server: {{ pillar['Zabbix_Server'] }} service.running: - name: zabbix-agentd - enable: True - reload: True - watch: - file: zabbix_agent [root@master init]# pwd /etc/salt/status/init [root@master init]# 注释掉#zabbix-agent:，修改下ip以示区别[root@master init]# vim ../../pillar/init/zabbix_agent.sls #zabbix-agent: Zabbix_Server: 10.0.0.111------------------>key是和zabbix_agentd中的一样 跑一边查看！已经OK[root@master init]# salt '*' state.highstate minion.23.com: ---------- ID: pkg.init Function: pkg.installed Name: mtr Result: True Comment: Package mtr is already installed. Started: 08:23:42.171235 Duration: 686.816 ms Changes: ---------- ID: pkg.init Function: pkg.installed Name: nginx Result: True Comment: Package nginx is already installed. Started: 08:23:42.858330 Duration: 0.674 ms Changes: ---------- ID: pkg.init Function: pkg.installed Name: lrzsz Result: True Comment: Package lrzsz is already installed. Started: 08:23:42.859121 Duration: 0.274 ms Changes: ---------- ID: zabbix_agent Function: pkg.installed Name: zabbix22-agent Result: True Comment: Package zabbix22-agent is already installed. Started: 08:23:42.859455 Duration: 0.267 ms Changes: ---------- ID: zabbix_agent Function: file.managed Name: /etc/zabbix_agentd.conf Result: True Comment: File /etc/zabbix_agentd.conf updated Started: 08:23:42.862150 Duration: 9.588 ms Changes: ---------- diff: --- +++ @@ -84,7 +84,7 @@ # Server= #Server=127.0.0.1 -Server=10.0.0.222 +Server=10.0.0.111 ### Option: ListenPort # Agent will listen on this port for connections from the server. ---------- ID: zabbix_agent Function: service.running Name: zabbix-agentd Result: True Comment: Service reloaded Started: 08:23:42.898476 Duration: 170.457 ms Changes: ---------- zabbix-agentd: True Summary ------------ Succeeded: 6 (changed=2) Failed: 0 ------------ Total states run: 6 第三种方法！Zabbix_Server:直接填写IP即可！zabbix_agent: pkg.installed: - names: - zabbix22-agent file.managed: - name: /etc/zabbix_agentd.conf - source: salt://init/files/zabbix_agentd.conf - user: root - group: root - mode: 644 - template: jinja - defaults: Zabbix_Server: 10.0.0.33 service.running: - name: zabbix-agentd - enable: True - reload: True - watch: - file: zabbix_agent 目录结构如下：[root@master salt]# tree . ├── master ├── minion ├── minion.d │   └── _schedule.conf ├── pillar │   ├── init │   │   ├── rsyslog.sls │   │   └── zabbix_agent.sls │   └── top.sls ├── pki │   ├── master │   │   ├── master.pem │   │   ├── master.pub │   │   ├── minions │   │   │   ├── master.22.com │   │   │   ├── minion.21.com │   │   │   └── minion.23.com │   │   ├── minions_autosign │   │   ├── minions_denied │   │   ├── minions_pre │   │   └── minions_rejected │   └── minion │   ├── minion_master.pub │   ├── minion.pem │   └── minion.pub ├── services │   └── dev └── status ├── init │   ├── files │   │   └── zabbix_agentd.conf │   ├── pkg.sls │   └── zabbix_agent.sls └── top.sls