So perhaps less than a ‘blog post’ this is more of a bash code-dump from my Veewee definition + postinstall.sh for this deployment. For anyone who needs a quick stack (especially if you are still on older > If nothing else, hopefully someone finds this useful to fix a bug they may have been having in their own deployment. Note that I’ve taken out some Veewee/Vagrant/Virtual Box specific pieces of the original postinstall.sh. Cheers.# Configuration Parameters MYSQL_PASSWORD="puppetized" RABBIT_USER="mcollective" RABBIT_PASSWORD="rabbitMCrabbit" MCOLLECTIVE_PSK="mcollectivePSKmcollective" FOREMAN_EMAIL="root@test.local" DOMAIN="test.local" # Initial CentOS system clean-up + upgrades yum -y erase wireless-tools gtk2 libX11 hicolor-icon-theme avahi freetype bitstream-vera-fonts yum -y upgrade yum -y clean all # Configure hostname echo -e "127.0.0.1 puppet.${DOMAIN} puppet foreman.${DOMAIN} foreman localhost" > /etc/hosts echo -e "NETWORKING=yes\nHOSTNAME=puppet.${DOMAIN}" > /etc/sysconfig/network hostname puppet.${DOMAIN} # Puppet Labs repository cat > /etc/yum.repos.d/puppetlabs.repo < < "EOF" [puppetlabs] name=Puppet Labs Packages baseurl=http://yum.puppetlabs.com/ gpgcheck=0 enabled=1 EOF # Foreman repository cat > /etc/yum.repos.d/foreman.repo < < "EOF" [foreman] name=Foreman Repo baseurl=http://yum.theforeman.org/stable gpgcheck=0 enabled=1 EOF # Installation of majority of stack packages yum -y install rubygems ruby-devel rubygem-stomp yum -y install httpd httpd-devel mod_ssl yum -y install mysql mysql-server mysql-devel yum -y install libcurl-devel openssl-devel openssl098e tcl tk unixODBC unixODBC-devel augeas rpm -ivh http://download.fedora.redhat.com/pub/epel/6/x86_64/rubygem-rest-client-1.6.1-2.el6.noarch.rpm rpm -ivh http://download.fedora.redhat.com/pub/epel/6/x86_64/rubygem-json-1.4.3-3.el6.x86_64.rpm rpm -ivh http://download.fedora.redhat.com/pub/epel/6/x86_64/rubygem-mime-types-1.16-3.el6.noarch.rpm # Installation of stack gems gem install --no-rdoc --no-ri puppet passenger rack mysql net-ping gem install --no-rdoc --no-ri -v 3.0.10 rails activerecord # Deploy required Puppet user, files, and directories adduser puppet mkdir -p /etc/puppet/{manifests,modules} mkdir -p /usr/share/puppet/rack/puppetmasterd/{public,tmp} mkdir -p /var/lib/puppet/{bucket,yaml,rrd,server_data,reports} chown puppet:puppet /var/lib/puppet/{bucket,yaml,rrd,server_data,reports} cp /usr/lib/ruby/gems/1.8/gems/puppet-2.7.3/ext/rack/files/config.ru /usr/share/puppet/rack/puppetmasterd/config.ru chown puppet:puppet /usr/share/puppet/rack/puppetmasterd/config.ru # Install Foreman rpm -ivh http://yum.theforeman.org/stable/RPMS/foreman-0.3-1.noarch.rpm --nodeps # mCollective & Plugins yum -y install mcollective mcollective-common mcollective-client cd /usr/libexec/mcollective/mcollective/application for i in filemgr nettest package puppetd service; do wget https://raw.github.com/puppetlabs/mcollective-plugins/master/agent/$i/application/$i.rb done wget https://raw.github.com/phobos182/mcollective-plugins/master/agent/etcfacts/application/etcfacts.rb wget https://raw.github.com/phobos182/mcollective-plugins/master/agent/shellcmd/application/shellcmd.rb wget https://raw.github.com/phobos182/mcollective-plugins/master/agent/yum/application/yum.rb cd /usr/libexec/mcollective/mcollective/agent for i in nettest filemgr puppetd puppetral puppetca; do wget https://raw.github.com/puppetlabs/mcollective-plugins/master/agent/$i/agent/$i.rb wget https://raw.github.com/puppetlabs/mcollective-plugins/master/agent/$i/agent/$i.ddl done wget -O package.rb https://raw.github.com/puppetlabs/mcollective-plugins/master/agent/package/agent/puppet-package.rb wget https://raw.github.com/puppetlabs/mcollective-plugins/master/agent/package/agent/package.ddl wget -O service.rb https://raw.github.com/puppetlabs/mcollective-plugins/master/agent/service/agent/puppet-service.rb wget https://raw.github.com/puppetlabs/mcollective-plugins/master/agent/service/agent/service.ddl wget https://raw.github.com/phobos182/mcollective-plugins/master/agent/etcfacts/etc_facts.rb wget https://raw.github.com/phobos182/mcollective-plugins/master/agent/etcfacts/etc_facts.ddl wget https://raw.github.com/phobos182/mcollective-plugins/master/agent/shellcmd/shellcmd.rb wget https://raw.github.com/phobos182/mcollective-plugins/master/agent/shellcmd/shellcmd.ddl wget https://raw.github.com/phobos182/mcollective-plugins/master/agent/yum/yum.rb wget https://raw.github.com/phobos182/mcollective-plugins/master/agent/yum/yum.ddl cd /usr/libexec/mcollective/mcollective/facts/ wget https://raw.github.com/puppetlabs/mcollective-plugins/master/facts/facter/facter_facts.rb # Fix ODBC requirement for Erlang ln -s /usr/lib64/libodbc.so.2 /usr/lib64/libodbc.so.1 # Install Erlang rpm -ivh http://yum.puppetlabs.com/prosvc/5/x86_64/erlang-R12B-5.10.el5.x86_64.rpm --nodeps # Install RabbitMQ & Plugins rpm -ivh http://www.rabbitmq.com/releases/rabbitmq-server/v2.5.1/rabbitmq-server-2.5.1-1.noarch.rpm cd /usr/lib/rabbitmq/lib/rabbitmq_server-2.5.1/plugins wget http://www.rabbitmq.com/releases/plugins/v2.5.1/amqp_client-2.5.1.ez wget http://www.rabbitmq.com/releases/plugins/v2.5.1/rabbitmq_stomp-2.5.1.ez chkconfig rabbitmq-server on service rabbitmq-server start # Configure RabbitMQ user/privileges rabbitmqctl add_user ${RABBIT_USER} ${RABBIT_PASSWORD} rabbitmqctl set_permissions ${RABBIT_USER} ".*" ".*" ".*" rabbitmqctl delete_user guest # Install Apache Passenger module passenger-install-apache2-module -a # Configuration files for mCollective cat > /etc/mcollective/server.cfg < < "EOF" topicprefix = /topic/ main_collective = mcollective collectives = mcollective libdir = /usr/libexec/mcollective logfile = /var/log/mcollective.log loglevel = info daemonize = 1 securityprovider = psk plugin.psk = MCOLLECTIVE_PSK_PH connector = stomp plugin.stomp.host = localhost plugin.stomp.port = 61613 plugin.stomp.user = RABBIT_USER_PH plugin.stomp.password = RABBIT_PASSWORD_PH factsource = facter EOF cat > /etc/mcollective/client.cfg < < "EOF" topicprefix = /topic/ main_collective = mcollective collectives = mcollective libdir = /usr/libexec/mcollective logfile = /dev/null loglevel = info securityprovider = psk plugin.psk = MCOLLECTIVE_PSK_PH connector = stomp plugin.stomp.host = localhost plugin.stomp.port = 61613 plugin.stomp.user = RABBIT_USER_PH plugin.stomp.password = RABBIT_PASSWORD_PH factsource = facter EOF # Configure MySQL chkconfig mysqld on && service mysqld start mysql -u root -e "CREATE DATABASE puppet;" mysql -u root -e "GRANT ALL PRIVILEGES ON puppet.* TO puppet@localhost IDENTIFIED BY '${MYSQL_PASSWORD}';" # Puppet configuration cat > /etc/puppet/puppet.conf < < "EOF" [main] logdir = /var/log/puppet rundir = /var/run/puppet ssldir = $vardir/ssl factpath = $vardir/lib/facter templatedir = $confdir/templates pluginsync = true classfile = $vardir/classes.txt localconfig = $vardir/localconfig reportdir = /var/lib/puppet/reports [agent] report = true ignorecache = true [master] reports = http,store,log,foreman ssl_client_header = SSL_CLIENT_S_DN ssl_client_verify_header = SSL_CLIENT_VERIFY storeconfigs = true dbadapter = mysql dbuser = puppet dbpassword = MYSQL_PASSWORD_PH dbname = puppet dbserver = localhost dbsocket = /var/lib/mysql/mysql.sock EOF # Foreman configuration files cat > /usr/share/foreman/config/database.yml < < "EOF" production: adapter: mysql database: puppet username: puppet password: MYSQL_PASSWORD_PH host: localhost socket: "/var/lib/mysql/mysql.sock" EOF cat > /usr/share/foreman/config/settings.yaml < < "EOF" --- :modulepath: /etc/puppet/modules/ :tftppath: tftp/ :ldap: false :puppet_server: puppet :unattended: false :puppet_interval: 30 :document_root: /usr/share/foreman/public :administrator: FOREMAN_EMAIL_PH :foreman_url: foreman.DOMAIN_PH EOF cat > /usr/share/foreman/config/email.yaml < < "EOF" production: delivery_method: :smtp smtp_settings: address: localhost port: 25 domain: DOMAIN_PH authentication: :none EOF # Foreman report for Puppet cat > /usr/lib/ruby/gems/1.8/gems/puppet-2.7.3/lib/puppet/reports/foreman.rb < < "EOF" $foreman_url="https://foreman.DOMAIN_PH:443" require 'puppet' require 'net/http' require 'uri' Puppet::Reports.register_report(:foreman) do Puppet.settings.use(:reporting) desc "Sends reports directly to Foreman" def process begin uri = URI.parse($foreman_url) http = Net::HTTP.new(uri.host, uri.port) if uri.scheme == 'https' then http.use_ssl = true http.verify_mode = OpenSSL::SSL::VERIFY_NONE end req = Net::HTTP::Post.new("/reports/create?format=yml") req.set_form_data({'report' => to_yaml}) response = http.request(req) rescue Exception => e raise Puppet::Error, "Could not send report to Foreman at #{$foreman_url}/reports/create?format=yml: #{e}" end end end EOF # Apache configuration files cat > /etc/httpd/conf.d/puppet.conf < < "EOF" Listen 8140 SSLEngine on SSLCipherSuite SSLv2:-LOW:-EXPORT:RC4+RSA SSLCertificateFile /var/lib/puppet/ssl/certs/puppet.DOMAIN_PH.pem SSLCertificateKeyFile /var/lib/puppet/ssl/private_keys/puppet.DOMAIN_PH.pem SSLCertificateChainFile /var/lib/puppet/ssl/ca/ca_crt.pem SSLCACertificateFile /var/lib/puppet/ssl/ca/ca_crt.pem SSLCARevocationFile /var/lib/puppet/ssl/ca/ca_crl.pem SSLVerifyClient optional SSLVerifyDepth 1 SSLOptions +StdEnvVars RackAutoDetect On DocumentRoot /usr/share/puppet/rack/puppetmasterd/public/ Options None AllowOverride None Order allow,deny allow from all EOF cat > /etc/httpd/conf.d/passenger.conf < < "EOF" LoadModule passenger_module /usr/lib/ruby/gems/1.8/gems/passenger-3.0.8/ext/apache2/mod_passenger.so PassengerRoot /usr/lib/ruby/gems/1.8/gems/passenger-3.0.8 PassengerRuby /usr/bin/ruby EOF cat > /etc/httpd/conf.d/foreman.conf < < "EOF" Listen 443 NameVirtualHost *:443 LoadModule ssl_module modules/mod_ssl.so AddType application/x-x509-ca-cert .crt AddType application/x-pkcs7-crl .crl ServerName foreman.DOMAIN_PH RailsAutoDetect On DocumentRoot /usr/share/foreman/public Options FollowSymLinks DirectoryIndex index.html AllowOverride None Order allow,deny allow from all SSLEngine On SSLCertificateFile /var/lib/puppet/ssl/certs/puppet.DOMAIN_PH.pem SSLCertificateKeyFile /var/lib/puppet/ssl/private_keys/puppet.DOMAIN_PH.pem EOF # Remove stock Apache configuration files rm -f /etc/httpd/conf.d/ssl.conf rm -f /etc/httpd/conf.d/welcome.conf # IPTables configuration cat > /etc/sysconfig/iptables < < "EOF" # Firewall configuration written by system-config-firewall # Manual customization of this file is not recommended. *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT -A INPUT -p icmp -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT -A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT -A INPUT -m state --state NEW -m tcp -p tcp --dport 443 -j ACCEPT -A INPUT -m state --state NEW -m tcp -p tcp --dport 8140 -j ACCEPT -A INPUT -m state --state NEW -m tcp -p tcp --dport 61613 -j ACCEPT -A INPUT -j REJECT --reject-with icmp-host-prohibited -A FORWARD -j REJECT --reject-with icmp-host-prohibited COMMIT EOF # Enable IPTables ruleset service iptables restart # Replace placeholder values for configuration sed -i "s/MYSQL_PASSWORD_PH/${MYSQL_PASSWORD}/g" /etc/puppet/puppet.conf /usr/share/foreman/config/database.yml sed -i "s/MCOLLECTIVE_PSK_PH/${MCOLLECTIVE_PSK}/g" /etc/mcollective/server.cfg /etc/mcollective/client.cfg sed -i "s/RABBIT_USER_PH/${RABBIT_USER}/g" /etc/mcollective/server.cfg /etc/mcollective/client.cfg sed -i "s/RABBIT_PASSWORD_PH/${RABBIT_PASSWORD}/g" /etc/mcollective/server.cfg /etc/mcollective/client.cfg sed -i "s/FOREMAN_EMAIL_PH/${FOREMAN_EMAIL}/g" /usr/share/foreman/config/settings.yaml sed -i "s/DOMAIN_PH/${DOMAIN}/g" /etc/httpd/conf.d/puppet.conf sed -i "s/DOMAIN_PH/${DOMAIN}/g" /etc/httpd/conf.d/foreman.conf sed -i "s/DOMAIN_PH/${DOMAIN}/g" /usr/lib/ruby/gems/1.8/gems/puppet-2.7.3/lib/puppet/reports/foreman.rb sed -i "s/DOMAIN_PH/${DOMAIN}/g" /usr/share/foreman/config/email.yaml sed -i "s/DOMAIN_PH/${DOMAIN}/g"/usr/share/foreman/config/settings.yaml # Set Foreman symlinks ln -sf /usr/share/foreman/config/database.yml /etc/foreman/database.yml ln -sf /usr/share/foreman/config/settings.yaml /etc/foreman/settings.yaml ln -sf /usr/share/foreman/config/email.yaml /etc/foreman/email.yaml # Enable mCollective chkconfig mcollective on service mcollective start # Generate Puppet master CA puppet cert --generate puppet.${DOMAIN} # Enable Apache chkconfig httpd on service httpd start # Rake Foreman cd /usr/share/foreman RAILS_ENV=production rake db:migrate # Execute Puppet agent puppet agent -t # Finished exit
运维网声明
1、欢迎大家加入本站运维交流群:群②:261659950 群⑤:202807635 群⑦870801961 群⑧679858003运维网
QQ群⑧：
窥视卡
雷达卡
发表于 2018-8-3 09:07:15
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
千斤顶
显身卡