Puppet3在CentOS6.5集群下的安装

hailai

环境：3台主机，
IP分别为10.211.55.11、12、13
puppet master安装在10.211.55.11
puppet agent安装在10.211.55.11、12、13

1、安装EPEL库 后面安装puppet Dashboard需要
123yuminstall yum-prioritiesrpm-ivh https://dl.fedoraproject.org/pub/epel/epel-release-latest-6.noarch.rpm rpm—import https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-6其中源可以替换为国内镜像
12http://mirrors.ustc.edu.cn/fedora/epel/epel-release-latest-6.noarch.rpmhttp://mirrors.ustc.edu.cn/fedora/epel/RPM-GPG-KEY-EPEL-6修改/etc/yum.repos.d/epel.repo文件
在[epel]最后添加一条属性
1priority=11意思是yum先去官方源查，官方没有再去epel的源找

2、在10.211.55.11上安装dnsmasq域名解析服务
12345yuminstall dnsmasqchkconfigdnsmasq onservicednsmasq startlokkit-p 53:udp(打开iptables 53端口)echo "10.211.55.11node01.myhost.com" >>/etc/hosts 修改dnsmasq.conf
12345interface=eth0listen-address=10.211.55.11bind-interfacesresolv-file=/etc/resolv.confaddn-hosts=/etc/hosts三台主机上分别输入
1echo“nameserver 10.211.55.11”>> /etc/resolv.conf改主机名
12vi /etc/sysconfig/network 分别改为node01.myhost.com、node02.myhost.com、node03.myhost.com验证DNS是否成功
12netstat-tunlp|grep 53dignode02.myhost.com
3、在10.211.55.11安装时间同步服务器
123yuminstall ntpchkconfigntpd onservicentpd start（待完善）

4、安装Puppet
安装官方源
1rpm-ivh http://yum.puppetlabs.com/puppetlabs-release-el-6.noarch.rpm导入GPG密钥（验证包的完整性）
1rpm--import http://yum.puppetlabs.com/RPM-GPG-KEY-puppetlabs
安装
12345yuminstall puppet-serverservicepuppetmaster startservicepuppet startchkconfigpuppetmaster onchkconfigpuppet on编辑/etc/puppet/puppet.conf
12[agent]server= node01.myhost.com自动签名
1cat> /etc/puppet/autosign.conf <测试连接
1puppetagent -t删除证书
1find/var/lib/puppet/ssl -name localhost.pem -delete常用信息
1234567puppetcert list -all（查看所有证书）cat/etc/sysconfig/puppet（默认配置）/var/lib/puppet（agent证书位置）/etc/puppet/puppet.conf（配置文件）/usr/share/puppet（安装位置）puppetconfig print modulepath（查看模块位置）puppetagent -t --summarize（查看报告）
5、安装Dashboard 安装
1yuminstall -y mysql mysql-devel mysql-server httpd mod_passenger puppet-dashboardmod_passenger是让apache支持ruby
配置：
/etc/my.cnf,
在[mysqld]字段,增加最后一行
12#Allowing 32MB allows an occasional 17MB row with plenty of spare roommax_allowed_packet= 32M12345/etc/init.d/mysqldstartchkconfigmysqld onchkconfig httpd onservicehttpd startmysqladmin-u root password 'password'创建一个dashboard数据库
1mysql-uroot -ppassword <编辑 /usr/share/puppet-dashboard/config/database.yml
123456production:  database:dashboard  username:dashboard  password:password  encoding:utf8  adapter:mysql修改时区 /usr/share/puppet-dashboard/config/environment.rb
12#config.time_zone= 'UTC'  config.time_zone= 'Beijing'初始化数据库
12cd/usr/share/puppet-dashboard/rakeRAILS_ENV=production db:migrate配置Apache
12345678910111213141516171819202122232425262728293031cat> /etc/httpd/conf.d/passenger.conf << EOFLoadModulepassenger_module modules/mod_passenger.so    PassengerRoot/usr/share/rubygems/gems/passenger-3.0.17   PassengerRuby/usr/bin/ruby    PassengerHighPerformanceon   PassengerMaxPoolSize 12   PassengerPoolIdleTime 1500   PassengerStatThrottleRate 120   RailsAutoDetectOn             ServerNamenode01.myhost.com       DocumentRoot &quot;/usr/share/puppet-dashboard/public/&quot;       <Directory &quot;/usr/share/puppet-dashboard/public/&quot;>          OptionsNone          AllowOverrideAuthConfig          Orderallow,deny                  allowfrom all               ErrorLog/var/log/httpd/node01.myhost.com_error.log       LogLevelwarn       CustomLog/var/log/httpd/node06.chenshake.com_access.log combined       ServerSignatureOn     EOF /etc/init.d/httpdstartchkconfighttpd onlokkit-p 80:tcp配置puppet
1234#puppet.conf (on puppet master)  [master]    reports= store, http    reporturl= http://node06.chenshake.com:80/reports/upload/etc/init.d/puppetmaster restart

导入报告
12345678cd/usr/share/puppet-dashboardrakegems:refresh_specsrakeRAILS_ENV=production reports:import DelayedJob WorkersenvRAILS_ENV=production /usr/share/puppet-dashboard/script/delayed_job -p dashboard -n 4 -mstartps-ef|grep delayed_job|grep -v grepenvRAILS_ENV=production /usr/share/puppet-dashboard/script/delayed_job -p dashboard -n 4 -mstop这个时候你才能在Dashbaord里看到数据

6、安装Foreman （待完善）

参考：
http://www.chenshake.com/puppet-study-notes/
http://acooly.iyunv.com/blog/1993484