1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
| 配置测试用途的salt-master服务，并在其他的测试机上配置salt-minion
一、基础环境
1、在tvm-rpm的基础上，更新hostname=tvm-saltmaster，配置salt-master服务。
2、网络：
eth0：host-only（用于虚拟内网，手动固定IP，这样从宿主机可以直接连接到这个vm）
eth1：NAT（用于上外网，动态IP）
[iyunv@tvm-saltmaster ~]# cd /etc/sysconfig/network-scripts/
[iyunv@tvm-saltmaster network-scripts]# cat ifcfg-eth0
DEVICE=eth0
TYPE=Ethernet
ONBOOT=yes
NM_CONTROLLED=yes
BOOTPROTO=none
IPADDR=192.168.56.253
PREFIX=24
GATEWAY=192.168.56.1
DNS1=192.168.56.254
[iyunv@tvm-saltmaster network-scripts]# cat ifcfg-eth1
DEVICE=eth1
TYPE=Ethernet
ONBOOT=yes
NM_CONTROLLED=yes
BOOTPROTO=dhcp
DNS1=192.168.56.254
二、配置saltstack环境
1、安装salt-master
[iyunv@tvm-saltmaster ~]# yum -y install salt-master
[iyunv@tvm-saltmaster ~]# service salt-master start
防火墙放行TCP端口：4505:4506
2、更新dns服务器（tvm-yum）的解析
[iyunv@tvm-yum ~]# echo '192.168.56.253 salt-m.office.test' >>/etc/hosts
[iyunv@tvm-yum ~]# service dnsmasq restart
[iyunv@tvm-yum ~]# nslookup salt-m.office.test 127.0.0.1
Server: 127.0.0.1
Address: 127.0.0.1#53
Name: salt-m.office.test
Address: 192.168.56.253
3、配置salt-minion
将tvm-yum，tvm-cobbler加入salt平台
[iyunv@tvm-yum bin]# cat saltstack-install-minion.sh
#!/bin/bash
#
# 2015/7/20
salt_m=salt-m.office.test
yum install salt-minion -y
cp -a /etc/salt/minion /etc/salt/minion.bak
cat <<_EOF >/etc/salt/minion
master: ${salt_m}
id: $(hostname)
_EOF
service salt-minion start
cat /etc/salt/minion
4. 在salt-master上接受salt-minion的key
[iyunv@tvm-saltmaster ~]# salt-key -L
Accepted Keys:
Denied Keys:
Unaccepted Keys:
tvm-cobbler
tvm-test
tvm-yum
Rejected Keys:
[iyunv@tvm-saltmaster ~]# salt-key -A
The following keys are going to be accepted:
Unaccepted Keys:
tvm-cobbler
tvm-test
tvm-yum
Proceed? [n/Y] y
Key for minion tvm-cobbler accepted.
Key for minion tvm-test accepted.
Key for minion tvm-yum accepted.
测试：
[iyunv@tvm-saltmaster ~]# salt 'tvm*' test.ping
tvm-yum:
True
tvm-cobbler:
True
tvm-test:
True
三、一个示例
[iyunv@tvm-saltmaster salt]# cd /srv/salt/
1、更新salt-master的配置，调整file_roots：
[iyunv@tvm-saltmaster salt]# mkdir /etc/salt/master.d/
[iyunv@tvm-saltmaster salt]# cat /etc/salt/master.d/file_roots.conf
# Master file_roots configuration:
file_roots:
base:
- /srv/salt/base
dev:
- /srv/salt/dev
qa:
- /srv/salt/qa
prod:
- /srv/salt/prod
[iyunv@tvm-saltmaster salt]# mkdir /srv/salt/{base,dev,qa,prod}/ -p
[iyunv@tvm-saltmaster salt]# service salt-master restart
这样做的目的是：
将state trees 分别放入 dev, qa 和 prod 环境, 留下base环境提供通用的文件传输，此时前面3个环境的top.sls文件分别是类似这样的：
dev:
'webserver*dev*':
- webserver
'db*dev*':
- db
qa:
'webserver*qa*':
- webserver
'db*qa*':
- db
prod:
'webserver*prod*':
- webserver
'db*prod*':
- db
2、具体的测试工作
[iyunv@tvm-saltmaster salt]# tree /srv/salt/
/srv/salt/
├── base
│ ├── monit
│ │ ├── init.sls
│ │ └── monit.d
│ │ ├── monit-mail.conf
│ │ └── salt-minion.conf
│ ├── salt
│ │ └── minion.sls
│ ├── top.sls
│ └── vim
│ ├── init.sls
│ └── vimrc
├── dev
│ ├── top.sls
│ └── web.sls
├── prod
│ ├── top.sls
│ └── web.sls
└── qa
├── dns
│ ├── init.sls
│ └── resolv.conf
└── top.sls
9 directories, 14 files
1）首先我们看看base的配置
================------------------------==============base
[iyunv@tvm-saltmaster salt]# cat base/top.sls
base:
'*':
- vim
- monit
- salt.minion
===================================================vim
[iyunv@tvm-saltmaster salt]# cat base/vim/init.sls
vim:
pkg:
- installed
- name: {{ pillar['pkgs']['vim'] }}
/root/.vimrc:
file.managed:
- source: salt://vim/vimrc
- require:
- pkg: vim
对应的pillar是这样的：
=-------------------------------------------------=pillar
[iyunv@tvm-saltmaster salt]# tree /srv/pillar/
/srv/pillar/
├── pkg
│ └── init.sls
└── top.sls
1 directory, 2 files
[iyunv@tvm-saltmaster salt]# cat /srv/pillar/top.sls
base:
'*':
- pkg
[iyunv@tvm-saltmaster salt]# cat /srv/pillar/pkg/init.sls
pkgs:
{% if grains['os_family'] == 'RedHat' %}
vim: vim-enhanced
{% elif grains['os_family'] == 'Debian' %}
vim: vim
{% elif grains['os'] == 'Arch' %}
vim: vim
{% endif %}
=-------------------------------------------------=pillar end
===================================================vim end
===================================================salt
[iyunv@tvm-saltmaster salt]# cat base/salt/minion.sls
salt-minion:
pkg:
- installed
service:
- running
===================================================salt end
===================================================monit
[iyunv@tvm-saltmaster salt]# cat base/monit/init.sls
monit:
pkg:
- installed
service:
- running
/etc/monit.d/monit-mail.conf:
file.managed:
- source: salt://monit/monit.d/monit-mail.conf
- require:
- pkg: monit
/etc/monit.d/salt-minion.conf:
file.managed:
- source: salt://monit/monit.d/salt-minion.conf
- require:
- pkg: monit
- pkg: salt-minion
===================================================monit end
================------------------------==============base end
2）接着我们看其他几个环境的。
================------------------------==============dev, prod, qa
[iyunv@tvm-saltmaster salt]# cat dev/top.sls
dev:
'tvm-yum':
- web
[iyunv@tvm-saltmaster salt]# cat dev/web.sls
httpd:
pkg:
- installed
[iyunv@tvm-saltmaster salt]# cat prod/top.sls
prod:
'tvm-cobbler':
- web
[iyunv@tvm-saltmaster salt]# cat prod/web.sls
httpd:
pkg:
- installed
[iyunv@tvm-saltmaster salt]# cat qa/top.sls
qa:
'tvm-test':
- dns
[iyunv@tvm-saltmaster salt]# cat qa/dns/init.sls
/etc/resolv.conf:
file.managed:
- source: salt://dns/resolv.conf
[iyunv@tvm-saltmaster salt]# cat qa/dns/resolv.conf
================------------------------==============dev, prod, qa end
上述分别测试了以下内容：
所有对象，安装和运行vim，salt-minion，monit服务，并同步这些服务的相关配置。
针对指定的对象，安装httpd服务，或者更新dns的配置。
3、测试执行
[iyunv@tvm-saltmaster salt]# salt '*' state.highstate test=True
tvm-test:
----------
ID: /etc/resolv.conf
Function: file.managed
Result: None
Comment: The file /etc/resolv.conf is set to be changed
Started: 18:38:52.935362
Duration: 3.926 ms
Changes:
----------
diff:
---
+++
@@ -1,2 +1,1 @@
-# Generated by NetworkManager
nameserver 192.168.56.254
----------
ID: vim
Function: pkg.installed
Name: vim-enhanced
Result: True
Comment: Package vim-enhanced is already installed.
Started: 18:38:52.939421
Duration: 390.634 ms
Changes:
----------
ID: /root/.vimrc
Function: file.managed
Result: None
Comment: The file /root/.vimrc is set to be changed
Started: 18:38:53.332316
Duration: 2.383 ms
Changes:
----------
newfile:
/root/.vimrc
----------
ID: monit
Function: pkg.installed
Result: True
Comment: Package monit is already installed.
Started: 18:38:53.334811
Duration: 0.519 ms
Changes:
----------
ID: monit
Function: service.running
Result: None
Comment: Service monit is set to start
Started: 18:38:53.338162
Duration: 29.414 ms
Changes:
----------
ID: /etc/monit.d/monit-mail.conf
Function: file.managed
Result: None
Comment: The file /etc/monit.d/monit-mail.conf is set to be changed
Started: 18:38:53.371167
Duration: 2.493 ms
Changes:
----------
newfile:
/etc/monit.d/monit-mail.conf
----------
ID: salt-minion
Function: pkg.installed
Result: True
Comment: Package salt-minion is already installed.
Started: 18:38:53.377105
Duration: 0.628 ms
Changes:
----------
ID: /etc/monit.d/salt-minion.conf
Function: file.managed
Result: None
Comment: The file /etc/monit.d/salt-minion.conf is set to be changed
Started: 18:38:53.380510
Duration: 1.507 ms
Changes:
----------
newfile:
/etc/monit.d/salt-minion.conf
----------
ID: salt-minion
Function: service.running
Result: True
Comment: The service salt-minion is already running
Started: 18:38:53.383522
Duration: 17.01 ms
Changes:
Summary
------------
Succeeded: 9 (unchanged=5, changed=4)
Failed: 0
------------
Total states run: 9
tvm-yum:
----------
ID: vim
Function: pkg.installed
Name: vim-enhanced
Result: True
Comment: Package vim-enhanced is already installed.
Started: 18:38:52.997489
Duration: 543.976 ms
Changes:
----------
ID: /root/.vimrc
Function: file.managed
Result: None
Comment: The file /root/.vimrc is set to be changed
Started: 18:38:53.585168
Duration: 3.526 ms
Changes:
----------
diff:
---
+++
@@ -36,7 +36,7 @@
call append(line("."), "\# ")
call append(line(".")+1, "")
else
-call setline(1, "\#!/usr/local/bin/python3")
+call setline(1, "\#!/bin/env python")
call append(line("."), "\# ")
call append(line(".")+1, "")
endif
----------
ID: monit
Function: pkg.installed
Result: True
Comment: Package monit is already installed.
Started: 18:38:53.588771
Duration: 0.4 ms
Changes:
----------
ID: monit
Function: service.running
Result: None
Comment: Service monit is set to start
Started: 18:38:53.590614
Duration: 45.839 ms
Changes:
----------
ID: /etc/monit.d/monit-mail.conf
Function: file.managed
Result: None
Comment: The file /etc/monit.d/monit-mail.conf is set to be changed
Started: 18:38:53.638343
Duration: 2.308 ms
Changes:
----------
newfile:
/etc/monit.d/monit-mail.conf
----------
ID: salt-minion
Function: pkg.installed
Result: True
Comment: Package salt-minion is already installed.
Started: 18:38:53.642663
Duration: 0.421 ms
Changes:
----------
ID: /etc/monit.d/salt-minion.conf
Function: file.managed
Result: None
Comment: The file /etc/monit.d/salt-minion.conf is set to be changed
Started: 18:38:53.644675
Duration: 1.788 ms
Changes:
----------
newfile:
/etc/monit.d/salt-minion.conf
----------
ID: salt-minion
Function: service.running
Result: True
Comment: The service salt-minion is already running
Started: 18:38:53.648015
Duration: 19.282 ms
Changes:
----------
ID: httpd
Function: pkg.installed
Result: True
Comment: Package httpd is already installed.
Started: 18:38:53.667560
Duration: 0.693 ms
Changes:
Summary
------------
Succeeded: 9 (unchanged=4, changed=3)
Failed: 0
------------
Total states run: 9
tvm-cobbler:
----------
ID: vim
Function: pkg.installed
Name: vim-enhanced
Result: True
Comment: Package vim-enhanced is already installed.
Started: 18:38:52.975341
Duration: 539.106 ms
Changes:
----------
ID: /root/.vimrc
Function: file.managed
Result: None
Comment: The file /root/.vimrc is set to be changed
Started: 18:38:53.563618
Duration: 2.315 ms
Changes:
----------
newfile:
/root/.vimrc
----------
ID: monit
Function: pkg.installed
Result: None
Comment: The following packages are set to be installed/updated: monit
Started: 18:38:53.566013
Duration: 1348.534 ms
Changes:
----------
ID: monit
Function: service.running
Result: False
Comment: The named service monit is not available
Started: 18:38:54.916384
Duration: 15.674 ms
Changes:
----------
ID: /etc/monit.d/monit-mail.conf
Function: file.managed
Result: None
Comment: The file /etc/monit.d/monit-mail.conf is set to be changed
Started: 18:38:54.933968
Duration: 2.129 ms
Changes:
----------
newfile:
/etc/monit.d/monit-mail.conf
----------
ID: salt-minion
Function: pkg.installed
Result: True
Comment: Package salt-minion is already installed.
Started: 18:38:54.938502
Duration: 0.409 ms
Changes:
----------
ID: /etc/monit.d/salt-minion.conf
Function: file.managed
Result: None
Comment: The file /etc/monit.d/salt-minion.conf is set to be changed
Started: 18:38:54.940479
Duration: 1.426 ms
Changes:
----------
newfile:
/etc/monit.d/salt-minion.conf
----------
ID: salt-minion
Function: service.running
Result: True
Comment: The service salt-minion is already running
Started: 18:38:54.943468
Duration: 14.437 ms
Changes:
----------
ID: httpd
Function: pkg.installed
Result: True
Comment: Package httpd is already installed.
Started: 18:38:54.958084
Duration: 0.562 ms
Changes:
Summary
------------
Succeeded: 8 (unchanged=4, changed=3)
Failed: 1
------------
Total states run: 9
4、执行
[iyunv@tvm-saltmaster salt]# salt '*' state.highstate
ZYXW、参考
1、doc
http://docs.saltstack.com/en/latest/ref/states/top.html
|
QQ群⑧：
窥视卡
雷达卡
发表于 2015-7-23 08:29:07
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
千斤顶
显身卡