CentOS 6.4 部署saltstack master/minion

xsmscb

实验环境:
salt-master: 10.65.253.121 slatm-3738
salt-monion1: 10.65.253.125 slats1-4739
salt-monion2: 10.65.253.139 slats2-5740

Saltstack master.
安装epel yum源
[iyunv@slatm-3738 ~]# rpm -ivh http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm
Retrieving http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm
warning: /var/tmp/rpm-tmp.dV3tGo: Header V3 RSA/SHA256 Signature, key ID 0608b895: NOKEY
Preparing...                ########################################### [100%]
   1:epel-release           ########################################### [100%]

安装salt-master
[iyunv@slatm-3738 ~]#  yum install salt-master.noarch -y

salt-master配置文件
[iyunv@slatm-3738 ~]# grep -v ^# /etc/salt/master | grep -v ^$
default_include: master.d/*.conf
interface: 10.65.253.121
publish_port: 4505
max_open_files: 100000
worker_threads: 5
ret_port: 4506
pidfile: /var/run/salt-master.pid
root_dir: /home/salt/
pki_dir: /etc/salt/pki/master
cachedir: /var/cache/salt/master
timeout: 5
sock_dir: /var/run/salt/master
file_roots:
  base:
    - /srv/salt/data/
pillar_roots:
  base:
    - /srv/pillar/data/
key_logfile: /var/log/salt/key
log_level_logfile: warning
log_datefmt_logfile: '%Y-%m-%d %H:%M:%S'
log_fmt_logfile: '%(asctime)s,%(msecs)03.0f [%(name)-17s][%(levelname)-8s] %(message)s'
nodegroups:
   group1: '10.65.253.125'
   group2: '10.65.253.139'

启动salt-master服务
[iyunv@slatm-3738 ~]# /etc/init.d/salt-master start
Starting salt-master daemon:                               [  OK  ]
[iyunv@slatm-3738 salt]# chkconfig salt-master on

Saltstack minion.
1. 安装epel yum源
[iyunv@slats1-4739 ~]# rpm -ivh http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm
Retrieving http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm
warning: /var/tmp/rpm-tmp.soS8bi: Header V3 RSA/SHA256 Signature, key ID 0608b895: NOKEY
Preparing...                ########################################### [100%]
   1:epel-release           ########################################### [100%]

2. 安装软件
[iyunv@slats1-4739 ~]# yum -y install salt-minion

3. 更改配置文件
[iyunv@slats1-4739 ~]# grep -v ^# /etc/salt/minion | grep -v ^$
master: 10.65.253.121
master_port: 4506
user: root
pidfile: /var/run/salt-minion.pid
root_dir: /home/salt/
pki_dir: /etc/salt/pki/minion
id: 10.65.253.125
cachedir: /var/cache/salt/minion
sock_dir: /var/run/salt/minion
backup_mode: minion
acceptance_wait_time: 10
acceptance_wait_time_max: 0
file_roots:
  base:
    - /srv/salt
pillar_roots:
  base:
    - /srv/pillar
log_file: /var/log/salt/minion
key_logfile: /var/log/salt/key
log_level: warning
log_datefmt_logfile: '%Y-%m-%d %H:%M:%S'
log_fmt_logfile: '%(asctime)s,%(msecs)03.0f [%(name)-17s][%(levelname)-8s] %(message)s'

启动salt-minion服务
[iyunv@slats1-4739 ~]# /etc/init.d/salt-minion start
Starting salt-minion daemon:                               [  OK  ]
[iyunv@slats1-4739 ~]# chkconfig salt-minion on

在slat-master上查看/接受minion的key
[iyunv@slatm-3738 ~]# salt-key
Accepted Keys:
Unaccepted Keys:
10.65.253.125
Rejected Keys:

[iyunv@slatm-3738 ~]# salt-key -y -a 10.65.253.125
The following keys are going to be accepted:
Unaccepted Keys:
10.65.253.125
Key for minion 10.65.253.125 accepted.

查看key的状态:
[iyunv@slatm-3738 ~]# salt-key -L
Accepted Keys:
10.65.253.125
Unaccepted Keys:
Rejected Keys:

可以通过命令删除指定的key
# salt-key -y -d 192.168.0.100

测试:
查看主机状态:
[iyunv@slatm-3738 ~]# salt '10.65.253.125' test.ping
10.65.253.125:
    True

向所有minion上执行命令:
[iyunv@slatm-3738 ~]# salt '*' cmd.run 'uname -a'
10.65.253.125:
    Linux slats1-4739 2.6.32-358.el6.x86_64 #1 SMP Fri Feb 22 00:31:26 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux

给定义的指定组执行命令:
[iyunv@slatm-3738 ~]# salt --nodegroup group1 cmd.run 'uname -a'
10.65.253.125:
    Linux slats1-4739 2.6.32-358.el6.x86_64 #1 SMP Fri Feb 22 00:31:26 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux

执行minion上的自定义脚本
a. 在minion上方个脚本
[iyunv@slats1-4739 ~]# cat /tmp/test.sh
#!/bin/bash

echo "hello world."

[iyunv@slatm-3738 ~]# salt '*' cmd.run 'sh /tmp/test.sh'
10.65.253.125:
    hello world.

[iyunv@slatm-3738 ~]# salt -N group1 cmd.run 'sh /tmp/test.sh'
10.65.253.125:
    hello world.


实验: 通过salt-master给client安装vim，并配置/etc/vimrc配置文件。
1. 确认当前salt-master的file roots目录。如果没有需要手工创建。
file_roots:
base:
- /home/salt/srv/data/
pillar_roots:
base:
- /home/salt/srv/pillar/data/

[iyunv@slatm-3738 srv]#  /home/salt/srv/data/ -p
[iyunv@slatm-3738 srv]# mkdir /home/salt/srv/pillar/data/ -p

2. 定制vim.sls文件
[iyunv@slatm-3738 data]# cat vim.sls
vim:
pgk.installed

/etc/vimrc:
file.managed:
- source: salt://vimrc
- mode: 644
- user: root
- group: root

准备/etc/vimrc配置文件
[iyunv@slatm-3738 data]# cat vimrc
syntax enable
set textwidth=79
set shiftwidth=4
set tabstop=4
set expandtab
set softtabstop=4
set shiftround
set fileencodings=utf-8
set encoding=utf8
set tenc=utf8

3. 测试vim.sls的配置
[iyunv@slatm-3738 data]# salt -N group1 state.sls vim

salt-client端的配置:
[iyunv@slats1-4739 ~]# rpm -qa |grep -i vim
vim-minimal-7.2.411-1.8.el6.x86_64
vim-common-7.2.411-1.8.el6.x86_64
vim-enhanced-7.2.411-1.8.el6.x86_64

[iyunv@slats1-4739 ~]# cat /etc/vimrc
syntax enable
set textwidth=79
set shiftwidth=4
set tabstop=4
set expandtab
set softtabstop=4
set shiftround
set fileencodings=utf-8
set encoding=utf8
set tenc=utf8