saltstack-系统初始化

6543

1 . 编写resolv.conf(dns) 文件

[iyunv@node1 ~]# cat /srv/salt/system/dns/dns.sls

/etc/resolv.conf:

  file.managed:

    - source: salt://system/dns/resolv.conf

    - user: root

    - group: root

    - mode: 644

2 . 给历史命令(history)添加时间

[iyunv@node1 ~]# cat /srv/salt/system/history/history.sls

/etc/profile:

  file.append:

   - text:

     - export HISTTIMEFORMAT="%F %T `whoami`"

3 . 编写命令审计功能

[iyunv@node1 ~]# cat audit.sls

/etc/bashrc

  file.append:

    - text:

      - export PROMPT_COMMAND='{ msg=$(history 1 | { read x y; echo $y; });logger "[euid=$(whoami)]":$(who am i):[`pwd`]"$msg"; }'

4 .更改内核参数

[iyunv@node1 ~]# cat sysctl.sls

vm.swappiness:

  sysctl.present:

    - value: 0

net.ipv4.ip_local_port_range:

  sysctl.present:

    - value: 10000 65000

fs.file-max:

  sysctl.present:

    - value: 100000

5.集中管理上面4个配置文件

[iyunv@node1 ~]# cat /srv/salt/system/init.sls

include:

  - system.dns

  - system.history

  - system.audit

  - system.sysctl

6.执行salt

[iyunv@node1 ~]# salt '*' state.sls  system.dns  system.history  system.audit  system.sysctl

7.查看minion端是否执行成功

[iyunv@node1 init]# salt '*' cmd.run 'cat /etc/resolv.conf'

salt-minion:

    nameserver 8.8.8.8