自动化运转之SaltStack实行
自动化运维之SaltStack实践
1.1、环境
linux-node1(master服务端) | 192.168.0.15 |
linux-node2(minion客户端) | 192.168.0.16 |
1.2、SaltStack三种运行模式介绍
Local | 本地 |
Master/Minion | 传统运行方式(server端跟agent端) |
Salt SSH | SSH |
1.3、SaltStack三大功能 ●远程执行 ●配置管理 ●云管理
1.4、SaltStack安装基础环境准备
[[email protected]
~]# cat /etc/redhat-release ##查看系统版本 CentOS release 6.7
(Final)
[[email protected]
~]# uname -r ##查看系统内核版本 2.6.32-573.el6.x86_64
[[email protected]
~]# getenforce ##查看selinux的状态 Enforcing
[[email protected]
~]# setenforce 0 ##关闭selinux
[[email protected]
~]# getenforce Permissive
[[email protected]
~]# /etc/init.d/iptables stop
[[email protected]
~]# /etc/init.d/iptables stop
[[email protected]
~]# ifconfig eth0|awk -F ‘[: ]+’ ‘NR==2{print $4}’ ##过滤Ip地址
192.168.0.15
[[email protected]
~]# hostname ##查看主机名 linux-node1.zhurui.com
[[email protected]
yum.repos.d]# wget -O /etc/yum.repos.d/epel.repo
澳门游戏平台大全,
##安装salt必须使用到epel源 1.4、安装Salt 服务端:
[[email protected]
yum.repos.d]# yum install -y salt-master salt-minion
##salt-master包跟salt-minion包
[[email protected]
yum.repos.d]# chkconfig salt-master on ##加入到开机自动启动
[[email protected]
yum.repos.d]# chkconfig salt-minion on ##加入到开机自动启动
[[email protected]
yum.repos.d]# /etc/init.d/salt-master start ##启动salt-master
Starting salt-master daemon: [ OK
] 启动到这里需要修改minion配置文件,才能启动salt-minion服务
[[email protected]
yum.repos.d]# grep ‘^[a-z]’ /etc/salt/minion master: 192.168.0.15
##指定master主机
[[email protected]
yum.repos.d]# cat /etc/hosts 192.168.0.15 linux-node1.zhurui.com
linux-node1 ##确认主机名是否解析 192.168.0.16 linux-node2.zhurui.com
linux-node2 解析结果:
[[email protected]-node1 yum.repos.d]# ping linux-node1.zhurui.com
PING linux-node1.zhurui.com (192.168.0.15)56(84) bytes of data.
64 bytes from linux-node1.zhurui.com (192.168.0.15): icmp_seq=1 ttl=64 time=0.087 ms
64 bytes from linux-node1.zhurui.com (192.168.0.15): icmp_seq=2 ttl=64 time=0.060 ms
64 bytes from linux-node1.zhurui.com (192.168.0.15): icmp_seq=3 ttl=64 time=0.053 ms
64 bytes from linux-node1.zhurui.com (192.168.0.15): icmp_seq=4 ttl=64 time=0.060 ms
64 bytes from linux-node1.zhurui.com (192.168.0.15): icmp_seq=5 ttl=64 time=0.053 ms
64 bytes from linux-node1.zhurui.com (192.168.0.15): icmp_seq=6 ttl=64 time=0.052 ms
64 bytes from linux-node1.zhurui.com (192.168.0.15): icmp_seq=7 ttl=64 time=0.214 ms
64 bytes from linux-node1.zhurui.com (192.168.0.15): icmp_seq=8 ttl=64 time=0.061 ms
[[email protected]
yum.repos.d]# /etc/init.d/salt-minion start ##启动minion客户端
Starting salt-minion daemon: [ OK ]
[[email protected]
yum.repos.d]# 客户端:
[[email protected]
~]# yum install -y salt-minion ##安装salt-minion包,相当于客户端包
[[email protected]
~]# chkconfig salt-minion on ##加入开机自启动
[[email protected]
~]# grep ‘^[a-z]’ /etc/salt/minion ##客户端指定master主机
master: 192.168.0.15
[[email protected]
~]# /etc/init.d/salt-minion start ##接着启动minion Starting
salt-minion daemon: [ OK ]
1.5、Salt秘钥认证设置 1.5.1使用salt-kes -a
linux*命令之前在目录/etc/salt/pki/master目录结构如下
1.5.2使用salt-kes -a
linux*命令将秘钥通过允许,随后minions_pre下的文件会转移到minions目录下
[[email protected]-node1 minion]# salt-key -a linux*
The following keys are going to be accepted:
UnacceptedKeys:
linux-node1.zhurui.com
linux-node2.zhurui.com
Proceed?[n/Y] Y
Keyfor minion linux-node1.zhurui.com accepted.
Keyfor minion linux-node2.zhurui.com accepted.
[[email protected]-node1 minion]# salt-key
AcceptedKeys:
linux-node1.zhurui.com
linux-node2.zhurui.com
DeniedKeys:
UnacceptedKeys:
RejectedKeys:
1.5.3此时目录机构变化成如下:
1.5.4并且伴随着客户端/etc/salt/pki/minion/目录下有master公钥生成
1.6、salt远程执行命令详解 1.6.1 salt ‘*’ test.ping 命令
[[email protected]
master]# salt ‘*’ test.ping ##salt命令
test.ping的含义是,test是一个模块,ping是模块内的方法
linux-node2.zhurui.com: True linux-node1.zhurui.com: True
[[email protected]
master]#
1.6.2
salt ‘*’ cmd.run ‘uptime’ 命令
1.7、saltstack配置管理
1.7.1编辑配置文件/etc/salt/master,将file_roots注释去掉
1.7.2接着saltstack远程执行如下命令
[[email protected]
master]# ls /srv/
[[email protected]
master]# mkdir /srv/salt
[[email protected]
master]# /etc/init.d/salt-master restart Stopping salt-master daemon:
[ OK ] Starting salt-master daemon:
[ OK ]
[[email protected]
salt]# cat apache.sls ##进入到/srv/salt/目录下创建
[[email protected]
salt]# salt ‘*’ state.sls apache ##接着执行如下语句
接着会出现如下报错:
便捷apache.sls文件添加如下:
最后成功如下:
[[email protected]-node1 salt]# salt '*' state.sls apache
linux-node2.zhurui.com:
----------
ID: apache-install
Function: pkg.installed
Name: httpd
Result:True
Comment:Package httpd is already installed.
Started:22:38:52.954973
Duration:1102.909 ms
Changes:
----------
ID: apache-install
Function: pkg.installed
Name: httpd-devel
Result:True
Comment:Package httpd-devel is already installed.
Started:22:38:54.058190
Duration:0.629 ms
Changes:
----------
ID: apache-service
Function: service.running
Name: httpd
Result:True
Comment:Service httpd has been enabled, and is running
Started:22:38:54.059569
Duration:1630.938 ms
Changes:
----------
httpd:
True
- “
Summary
------------
Succeeded:3(changed=1)
Failed:0
------------
Total states run:3
linux-node1.zhurui.com:
----------
ID: apache-install
Function: pkg.installed
Name: httpd
Result:True
Comment:Package httpd is already installed.
Started:05:01:17.491217
Duration:1305.282 ms
Changes:
----------
ID: apache-install
Function: pkg.installed
Name: httpd-devel
Result:True
Comment:Package httpd-devel is already installed.
Started:05:01:18.796746
Duration:0.64 ms
Changes:
----------
ID: apache-service
Function: service.running
Name: httpd
Result:True
Comment:Service httpd has been enabled, and is running
Started:05:01:18.798131
Duration:1719.618 ms
Changes:
----------
httpd:
True
- “
Summary
------------
Succeeded:3(changed=1)
Failed:0
------------
Total states run:3
[[email protected]-node1 salt]#
1.7.3验证使用saltstack安装httpd是否成功 linux-node1:
[[email protected]
salt]# lsof -i:80 ##已经成功启动 COMMAND PID USER FD TYPE
DEVICE SIZE/OFF NODE NAME httpd 7397 root 4u IPv6 46164
0t0 TCP *:http (LISTEN) httpd 7399 apache 4u IPv6 46164
0t0 TCP *:http (LISTEN) httpd 7400 apache 4u IPv6 46164
0t0 TCP *:http (LISTEN) httpd 7401 apache 4u IPv6 46164
0t0 TCP *:http (LISTEN) httpd 7403 apache 4u IPv6 46164
0t0 TCP *:http (LISTEN) httpd 7404 apache 4u IPv6 46164
0t0 TCP *:http (LISTEN) httpd 7405 apache 4u IPv6 46164
0t0 TCP *:http (LISTEN) httpd 7406 apache 4u IPv6 46164
0t0 TCP *:http (LISTEN) httpd 7407 apache 4u IPv6 46164
0t0 TCP *:http (LISTEN) linux-node2:
[[email protected]
pki]# lsof -i:80 COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE
NAME httpd 12895 root 4u IPv6 47532 0t0 TCP *:http
(LISTEN) httpd 12897 apache 4u IPv6 47532 0t0 TCP *:http
(LISTEN) httpd 12898 apache 4u IPv6 47532 0t0 TCP *:http
(LISTEN) httpd 12899 apache 4u IPv6 47532 0t0 TCP *:http
(LISTEN) httpd 12901 apache 4u IPv6 47532 0t0 TCP *:http
(LISTEN) httpd 12902 apache 4u IPv6 47532 0t0 TCP *:http
(LISTEN) httpd 12906 apache 4u IPv6 47532 0t0 TCP *:http
(LISTEN) httpd 12908 apache 4u IPv6 47532 0t0 TCP *:http
(LISTEN) httpd 12909 apache 4u IPv6 47532 0t0 TCP *:http
(LISTEN)
[[email protected]
pki]# 1.7.4使用saltstack状态管理
[[email protected]
salt]# salt ‘*’ state.highstate
2.1、SaltStack之Grains数据系统 ●Grains ●Pillar
2.1.1使用salt命令查看系统版本
- “
[[email protected]-node1 salt]# salt 'linux-node1*' grains.ls
linux-node1.zhurui.com:
-SSDs
- biosreleasedate
- biosversion
- cpu_flags
- cpu_model
- cpuarch
- domain
- fqdn
- fqdn_ip4
- fqdn_ip6
- gpus
- host
- hwaddr_interfaces
- id
- init
- ip4_interfaces
- ip6_interfaces
- ip_interfaces
- ipv4
- ipv6
- kernel
- kernelrelease
- locale_info
- localhost
- lsb_distrib_codename
- lsb_distrib_id
- lsb_distrib_release
- machine_id
- manufacturer
- master
- mdadm
- mem_total
- nodename
- num_cpus
- num_gpus
- os
- os_family
- osarch
- oscodename
- osfinger
- osfullname
- osmajorrelease
- osrelease
- osrelease_info
- path
- productname
- ps
- pythonexecutable
- pythonpath
- pythonversion
- saltpath
- saltversion
- saltversioninfo
- selinux
- serialnumber
- server_id
- shell
- virtual
- zmqversion
[[email protected]-node1 salt]#
2.1.2系统版本相关信息:
[[email protected]-node1 salt]# salt 'linux-node1*' grains.items
linux-node1.zhurui.com:
----------
SSDs:
biosreleasedate:
07/31/2013
biosversion:
6.00
cpu_flags:
- fpu
- vme
- de
- pse
- tsc
- msr
- pae
- mce
- cx8
- apic
- sep
- mtrr
- pge
- mca
- cmov
- pat
- pse36
- clflush
- dts
- mmx
- fxsr
- sse
- sse2
- ss
- syscall
- nx
- rdtscp
- lm
- constant_tsc
- up
- arch_perfmon
- pebs
- bts
- xtopology
- tsc_reliable
- nonstop_tsc
- aperfmperf
- unfair_spinlock
- pni
- ssse3
- cx16
- sse4_1
- sse4_2
- x2apic
- popcnt
- hypervisor
- lahf_lm
- arat
- dts
cpu_model:
Intel(R)Core(TM) i3 CPU M 380@2.53GHz
cpuarch:
x86_64
domain:
zhurui.com
fqdn:
linux-node1.zhurui.com
fqdn_ip4:
-192.168.0.15
fqdn_ip6:
gpus:
|_
----------
model:
SVGA II Adapter
vendor:
unknown
host:
linux-node1
hwaddr_interfaces:
----------
eth0:
00:0c:29:fc:ba:90
lo:
00:00:00:00:00:00
id:
linux-node1.zhurui.com
init:
upstart
ip4_interfaces:
----------
eth0:
-192.168.0.15
lo:
-127.0.0.1
ip6_interfaces:
----------
eth0:
- fe80::20c:29ff:fefc:ba90
lo:
-::1
ip_interfaces:
----------
eth0:
-192.168.0.15
- fe80::20c:29ff:fefc:ba90
lo:
-127.0.0.1
-::1
ipv4:
-127.0.0.1
-192.168.0.15
ipv6:
-::1
- fe80::20c:29ff:fefc:ba90
kernel:
Linux
kernelrelease:
2.6.32-573.el6.x86_64
locale_info:
----------
defaultencoding:
UTF8
defaultlanguage:
en_US
detectedencoding:
UTF-8
localhost:
linux-node1.zhurui.com
lsb_distrib_codename:
Final
lsb_distrib_id:
CentOS
lsb_distrib_release:
6.7
machine_id:
da5383e82ce4b8d8a76b5a3e00000010
manufacturer:
VMware,Inc.
master:
192.168.0.15
mdadm:
mem_total:
556
nodename:
linux-node1.zhurui.com
num_cpus:
1
num_gpus:
1
os:
CentOS
os_family:
RedHat
osarch:
x86_64
oscodename:
Final
osfinger:
CentOS-6
osfullname:
CentOS
osmajorrelease:
6
osrelease:
6.7
osrelease_info:
-6
-7
path:
/sbin:/usr/sbin:/bin:/usr/bin
productname:
VMwareVirtualPlatform
ps:
ps -efH
pythonexecutable:
/usr/bin/python2.6
pythonpath:
-/usr/bin
-/usr/lib64/python26.zip
-/usr/lib64/python2.6
-/usr/lib64/python2.6/plat-linux2
-/usr/lib64/python2.6/lib-tk
-/usr/lib64/python2.6/lib-old
-/usr/lib64/python2.6/lib-dynload
-/usr/lib64/python2.6/site-packages
-/usr/lib64/python2.6/site-packages/gtk-2.0
-/usr/lib/python2.6/site-packages
pythonversion:
-2
-6
-6
- final
-0
saltpath:
/usr/lib/python2.6/site-packages/salt
saltversion:
2015.5.10
saltversioninfo:
-2015
-5
-10
-0
selinux:
----------
enabled:
True
enforced:
Permissive
serialnumber:
VMware-564d8f43912d3a99-eb c4 3b a9 34 fc ba 90
server_id:
295577080
shell:
/bin/bash
virtual:
VMware
zmqversion:
3.2.5
2.1.3系统版本相关信息:
2.1.4查看node1所有ip地址:
[[email protected]
salt]# salt ‘linux-node1*’ grains.get ip_interfaces:eth0
##用于信息的收集 linux-node1.zhurui.com: – 192.168.0.15 –
fe80::20c:29ff:fefc:ba90
2.1.4使用Grains收集系统信息:
[[email protected]
salt]# salt ‘linux-node1*’ grains.get os linux-node1.zhurui.com:
CentOS
[[email protected]
salt]# salt -G os:CentOS cmd.run ‘w’ ##
-G:代表使用Grains收集,使用w命令,查看登录信息 linux-node2.zhurui.com:
20:29:40 up 2 days, 16:09, 2 users, load average: 0.00, 0.00,
0.00 USER TTY FROM
[email protected]
IDLE JCPU PCPU WHAT root tty1 – Sun14
29:07m 0.32s 0.32s -bash root pts/0 192.168.0.101 Sun20
21:41m 0.46s 0.46s -bash linux-node1.zhurui.com: 02:52:01 up 1
day, 22:31, 3 users, load average: 4.00, 4.01, 4.00 USER TTY
FROM
[email protected]
IDLE JCPU PCPU WHAT root tty1 – Sat20
24:31m 0.19s 0.19s -bash root pts/0 192.168.0.101 Sun02
1.00s 1.33s 0.68s /usr/bin/python root pts/1
192.168.0.101 Sun04 21:36m 0.13s 0.13s -bash
[[email protected]
salt]# 截图如下:
2.1.5
使用Grains规则匹配到memcache的主机上运行输入hehe
[[email protected]
salt]# vim /etc/salt/minion ##编辑minion配置文件,取消如下几行注释
88 grains: 89 roles: 90 – webserver 91 – memcache
截图如下:
[[email protected]
salt]# /etc/init.d/salt-minion restart ## Stopping salt-minion
daemon: [ OK ] Starting salt-minion
daemon: [ OK ]
[[email protected]
salt]#
[[email protected]
salt]# salt -G ‘roles:memcache’ cmd.run ‘echo zhurui’
##使用grains匹配规则是memcache的客户端机器,然后输出命令
linux-node1.zhurui.com: zhurui
[[email protected]
salt]# 截图如下:
2.1.5 也可以通过创建新的配置文件/etc/salt/grains文件来配置规则
[[email protected]
salt]# cat /etc/salt/grains web: nginx
[[email protected]
salt]# /etc/init.d/salt-minion restart
##修改完配置文件以后需要重启服务 Stopping salt-minion daemon:
[ OK ] Starting salt-minion daemon:
[ OK ]
[[email protected]
salt]#
[[email protected]
salt]# salt -G web:nginx cmd.run ‘w’
##使用grains匹配规则为web:nginx的主机运行命令w
linux-node1.zhurui.com: 03:31:07 up 1 day, 23:11, 3 users, load
average: 4.11, 4.03, 4.01 USER TTY FROM
[email protected]
IDLE JCPU PCPU WHAT root tty1 – Sat20
25:10m 0.19s 0.19s -bash root pts/0 192.168.0.101 Sun02
0.00s 1.41s 0.63s /usr/bin/python root pts/1
192.168.0.101 Sun04 22:15m 0.13s 0.13s -bash grains的用法:
1.收集底层系统信息 2、远程执行里面匹配minion 3、top.sls里面匹配minion
2.1.5 也可以/srv/salt/top.sls配置文件匹配minion
[[email protected]
salt]# cat /srv/salt/top.sls base: ‘web:nginx’: – match: grain
– apache
[[email protected]
salt]#
2.2、SaltStack之Pillar数据系统 2.2.1
首先在master配置文件552行打开pillar开关
[[email protected]
salt]# grep ‘^[a-z]’ /etc/salt/master file_roots: pillar_opts:
True
[[email protected]
salt]# /etc/init.d/salt-master restart ##重启master Stopping
salt-master daemon: [ OK ] Starting
salt-master daemon: [ OK ]
[[email protected]
salt]# salt ‘*’ pillar.items ##使用如下命令验证 截图如下:
[[email protected]
salt]# grep ‘^[a-z]’ /etc/salt/master 529 pillar_roots:
##打开如下行 530 base: 531 – /srv/pillar 截图如下:
[[email protected]
salt]# mkdir /srv/pillar
[[email protected]
salt]# /etc/init.d/salt-master restart ##重启master Stopping
salt-master daemon: [ OK ] Starting
salt-master daemon: [ OK ]
[[email protected]
salt]# vim /srv/pillar/apache.sls
[[email protected]
salt]# cat /srv/pillar/apache.sls {%if grains[‘os’] == ‘CentOS’ %}
apache: httpd {% elif grains[‘os’] == ‘Debian’ %} apache: apache2 {%
endif %}
[[email protected]
salt]# 截图如下:
接着指定哪个minion可以看到:
[[email protected]
salt]# cat /srv/pillar/top.sls base: ‘*’: – apache
[[email protected]
salt]# salt ‘*’ pillar.items ##修改完成以后使用该命令验证
linux-node1.zhurui.com: ———- apache: httpd
linux-node2.zhurui.com: ———- apache: httpd
截图如下:
2.2.1
使用Pillar定位主机
报错处理:
[[email protected]
salt]# salt ‘*’ saltutil.refresh_pillar ##需要执行刷新命令
linux-node2.zhurui.com: True linux-node1.zhurui.com: True
[[email protected]
salt]# 截图如下:
[[email protected]
salt]# salt -I ‘apache:httpd’ test.ping linux-node1.zhurui.com:
True linux-node2.zhurui.com: True
[[email protected]
salt]#
2.3、SaltStack数据系统区别介绍
名称 | 存储位置 | 数据类型 | 数据采集更新方式 | 应用 |
Grains | minion端 | 静态数据 | minion启动时收集,也可以使用saltutil.sync_grains进行刷新。 | 存储minion基本数据,比如用于匹配minion,自身数据可以用来做资产管理等。 |
Pillar | master端 | 动态数据 | 在master端定义,指定给对应的minion,可以使用saltutil.refresh_pillar刷新 | 存储Master指定的数据,只有指定的minion可以看到,用于敏感数据保存。 |
自动化运维之SaltStack实践 1.1、环境 linux-node1(master服务端)
192.168.0.15 linux-node2(minion客户端) 192.168.0.16…