saltstack的安装和初步试用体验
1. 本例中，主机server200-21为salt-master，其他主机为salt-minion2. 【salt-master】
安装：
# yum install salt-master
启动服务：
# service salt-master start
Starting salt-master daemon:
防火墙放行端口：4505:4506
（接下来先跳转到第3步，配置一个minion）
列出salt-key：
salt-key -L
最初没有需要accept的key：
# salt-key -L
Accepted Keys:
Unaccepted Keys:
Rejected Keys:
有minion申请连接到master后：
# salt-key -L
Accepted Keys:
Unaccepted Keys:
test230
Rejected Keys:
可以accept所有被pending的key：
salt-key -A
也可以accept指定key
# salt-key -a test230
The following keys are going to be accepted:
Unaccepted Keys:
test230
Proceed? y
Key for minion test230 accepted.
附上【salt-key】常用命令
Actions:
-l ARG, --list=ARGList the public keys. The args "pre", "un", and
"unaccepted" will list unaccepted/unsigned keys. "acc"
or "accepted" will list accepted/signed keys. "rej" or
"rejected" will list rejected keys. Finally, "all"
will list all keys.
-L, --list-all List all public keys. (Deprecated: use "--list all")
-a ACCEPT, --accept=ACCEPT
Accept the specified public key (use --include-all to
match rejected keys in addition to pending keys).
Globs are supported.
-A, --accept-all Accept all pending keys
-r REJECT, --reject=REJECT
Reject the specified public key (use --include-all to
match accepted keys in addition to pending keys).
Globs are supported.
-R, --reject-all Reject all pending keys
--include-all Include non-pending keys when accepting/rejecting
-p PRINT, --print=PRINT
Print the specified public key
-P, --print-all Print all public keys
-d DELETE, --delete=DELETE
Delete the specified key. Globs are supported.
-D, --delete-all Delete all keys
-f FINGER, --finger=FINGER
Print the specified key's fingerprint
-F, --finger-all Print all keys' fingerprints
3. 【salt-minion】
安装：
# yum install salt-minion
配置master和自己的id：
# cat /etc/salt/minion |grep ^[^#]
master: 10.0.200.21
id: test230
启动服务：
# service salt-minion start
Starting salt-minion daemon:
注意：master的端口需要开放才能访问。
# service salt-minion restart
Stopping salt-minion daemon:
Starting salt-minion daemon:
等待master接受minion的key
master已接受
4. 测试
# salt '*' test.ping
test230:
True
接下来，测试安装一个服务：
配置master：
# cat /etc/salt/master |grep -v ^$|grep -v ^#
file_roots:
base:
- /srv/salt
# mkdir /srv/salt/
# cd /srv/salt/
# ls
servers.slstop.sls
# cat top.sls
base:
'*':
- servers
# cat servers.sls
dnsmasq:
pkg:
- installed
执行：
# salt '*' state.highstate
test230:
----------
ID: dnsmasq
Function: pkg.installed
Result: True
Comment: Package dnsmasq is already installed.
Started: 16:58:12.932112
Duration: 1153.556 ms
Changes:
Summary
------------
Succeeded: 1
Failed: 0
------------
Total states run: 1
# salt '*' cmd.run 'rpm -qa |grep dns'
test230:
dnsmasq-2.48-13.el6.x86_64
查看：
# which dnsmasq
/usr/sbin/dnsmasq
页:
[1]