SaltStack日常维护-第七篇

练习内容

远程执行其他模块

官方模块有很多超过300+

1.cmd.run

2.network

3.service

4.state

5.其它日常维护

演示

cmd.run模块

可以执行系统命令，超级模块有安全隐患，也可以更模块源代码限制危险命令执行比如（rm reboot等），二次开发一般不用此模块

[root@linux-node1 salt]# salt '*' cmd.run 'w'
linux-node1.example.com:
     :: up :,   user,  load average: 0.00, 0.01, 0.05
    USER     TTY      FROM             LOGIN@   IDLE   JCPU   PCPU WHAT
    root     pts/    192.168.56.1     :    .00s  .27s  .36s /usr/bin/python /usr/bin/salt * cmd.run w
linux-node2.example.com:
     :: up :,   user,  load average: 0.00, 0.01, 0.05
    USER     TTY      FROM             LOGIN@   IDLE   JCPU   PCPU WHAT
    root     pts/    192.168.56.1     :   :   .00s  .00s -bash

network模块

network.active_tcp，arp，connect

[root@linux-node1 salt]# salt -S '192.168.56.12' network.active_tcp
linux-node2.example.com:
    ----------
    :
        ----------
        local_addr:
            0.0.0.0
        local_port:

        remote_addr:
            0.0.0.0
        remote_port:

    :
        ----------
        local_addr:
            192.168.56.12
        local_port:

        remote_addr:
            0.0.0.0
        remote_port:

    :
        ----------
        local_addr:
            0.0.0.0
        local_port:

        remote_addr:
            0.0.0.0
        remote_port:

    :
        ----------
        local_addr:
            127.0.0.1
        local_port:

        remote_addr:
            0.0.0.0
        remote_port:

    :
        ----------
        local_addr:
            192.168.56.12
        local_port:

        remote_addr:
            192.168.56.11
        remote_port:

    :
        ----------
        local_addr:
            192.168.56.12
        local_port:

        remote_addr:
            192.168.56.1
        remote_port:

    :
        ----------
        local_addr:
            192.168.56.12
        local_port:

        remote_addr:
            192.168.56.11
        remote_port:

    :
        ----------
        local_addr:
            192.168.56.12
        local_port:

        remote_addr:
            192.168.56.11
        remote_port:

    :
        ----------
        local_addr:
            192.168.56.12
        local_port:

        remote_addr:
            192.168.56.11
        remote_port:
            

salt -S '192.168.56.12' network.active_tcp

[root@linux-node1 salt]# salt '*' network.arp
linux-node2.example.com:
    ----------
    :0c::3c:::
        192.168.56.11
    :::c0:::
        192.168.56.1
    :::e2:2f::
        192.168.56.2
linux-node1.example.com:
    ----------
    :0c::6d::0c:
        192.168.56.12
    :::c0:::
        192.168.56.1
    :::e2:2f::
        192.168.56.2

salt '*' network.arp

[root@linux-node1 salt]# salt -S '192.168.56.12' network.connect www.baidu.com
linux-node2.example.com:
    ----------
    comment:
        Successfully connected to www.baidu.com (61.135.169.125) on tcp port
    result:
        True

salt -S '192.168.56.12' network.connect www.baidu.com 80

域名解析

salt '*' network.dig www.baidu.com

获取主机名

[root@linux-node1 salt]# salt '*' network.get_hostname
linux-node1.example.com:
    linux-node1
linux-node2.example.com:
    linux-node2

获取网卡mac地址

[root@linux-node1 salt]# salt '*' network.hw_addr eth0
linux-node1.example.com:
    :0c::3c::
linux-node2.example.com:
    :0c::6d::0c

获取网卡ip地址相关信息

[root@linux-node1 salt]# salt '*' network.interface eth0
linux-node1.example.com:
    |_
      ----------
      address:
          192.168.56.11
      broadcast:
          192.168.56.255
      label:
          eth0
      netmask:
          255.255.255.0
linux-node2.example.com:
    |_
      ----------
      address:
          192.168.56.12
      broadcast:
          192.168.56.255
      label:
          eth0
      netmask:
          255.255.255.0

salt '*' network.interface eth0

只获取ip地址信息

[root@linux-node1 salt]# salt '*' network.interface_ip eth0
linux-node1.example.com:
    192.168.56.11
linux-node2.example.com:
    192.168.56.12

检查回环网卡信息

[root@linux-node1 salt]# salt '*' network.is_loopback 127.0.0.1
linux-node1.example.com:
    True
linux-node2.example.com:
    True

获取网络连接信息

salt '*' network.netstat

网络ping

[root@linux-node1 salt]# salt '*' network.ping www.baidu.com
linux-node1.example.com:
    PING www.a.shifen.com (61.135.169.121) () bytes of data.
     bytes from 61.135.169.121: icmp_seq= ttl= time=41.2 ms
     bytes from 61.135.169.121: icmp_seq= ttl= time=50.1 ms
     bytes from 61.135.169.121: icmp_seq= ttl= time=87.8 ms
     bytes from 61.135.169.121: icmp_seq= ttl= time=86.0 ms

    --- www.a.shifen.com ping statistics ---
     packets transmitted,  received, % packet loss, time 3008ms
    rtt min/avg/max/mdev = 41.298/66.354/87.884/20.883 ms
linux-node2.example.com:
    PING www.a.shifen.com (61.135.169.121) () bytes of data.
     bytes from 61.135.169.121: icmp_seq= ttl= time=47.3 ms
     bytes from 61.135.169.121: icmp_seq= ttl= time=45.0 ms
     bytes from 61.135.169.121: icmp_seq= ttl= time=90.8 ms
     bytes from 61.135.169.121: icmp_seq= ttl= time=88.2 ms

    --- www.a.shifen.com ping statistics ---
     packets transmitted,  received, % packet loss, time 3006ms
    rtt min/avg/max/mdev = 45.089/67.892/90.865/21.685 ms

网络ping的其它参数

root@linux-node1 ~]# salt '*' network.ping archlinux.org timeout=
linux-node2.example.com:
    PING archlinux.org (138.201.81.199) () bytes of data.
     bytes from apollo.archlinux.org (138.201.81.199): icmp_seq= ttl= time= ms
     bytes from apollo.archlinux.org (138.201.81.199): icmp_seq= ttl= time= ms
     bytes from apollo.archlinux.org (138.201.81.199): icmp_seq= ttl= time= ms
     bytes from apollo.archlinux.org (138.201.81.199): icmp_seq= ttl= time= ms

    --- archlinux.org ping statistics ---
     packets transmitted,  received, % packet loss, time 3005ms
    rtt min/avg/max/mdev = 247.004/268.189/296.863/18.292 ms
linux-node1.example.com:
    PING archlinux.org (138.201.81.199) () bytes of data.
     bytes from apollo.archlinux.org (138.201.81.199): icmp_seq= ttl= time= ms
     bytes from apollo.archlinux.org (138.201.81.199): icmp_seq= ttl= time= ms
     bytes from apollo.archlinux.org (138.201.81.199): icmp_seq= ttl= time= ms
     bytes from 138.201.81.199: icmp_seq= ttl= time= ms

    --- archlinux.org ping statistics ---
     packets transmitted,  received, % packet loss, time 3003ms
    rtt min/avg/max/mdev = 208.509/230.999/260.674/19.194 ms
[root@linux-node1 ~]# salt '*' network.ping archlinux.org return_boolean=True
linux-node2.example.com:
    True
linux-node1.example.com:
    True

service模块

service是一个虚拟模块，要调用不同类型系统的服务查看

[root@linux-node1 salt]# salt '*' service.get_all
linux-node1.example.com:
    - -.mount
    - NetworkManager
    - NetworkManager-dispatcher
    - NetworkManager-wait-online
......

检查ssh服务

[root@linux-node1 salt]# salt '*' service.available sshd
linux-node1.example.com:
    True
linux-node2.example.com:
    True

重新加载web服务

[root@linux-node1 salt]# salt '*' service.reload httpd
linux-node1.example.com:
    True
linux-node2.example.com:
    True

查看服务状态

[root@linux-node1 salt]# salt '*' service.status httpd
linux-node1.example.com:
    True
linux-node2.example.com:
    True

执行模块state

This function will call state.highstate or state.sls based on the arguments passed to this function. It exists as a more intuitive way of applying state

salt '*' state.apply

加载本地的yml

salt '*' state.apply localconfig=/path/to/minion.yml

查看minion在top.sls配置信息

[root@linux-node1 salt]# salt '*node1*' state.show_top
linux-node1.example.com:
    ----------
    base:
        - web.lamp

单独执行pkg模块，执行模块直接就执行 ，状态模块先检查

root@linux-node1 ~]# salt 'linux-node1.example.com' state.single pkg.installed name=vim-enhanced
linux-node1.example.com:
----------
          ID: vim-enhanced
    Function: pkg.installed
      Result: True
     Comment: Package vim-enhanced is already installed.
     Started: ::39.793850
    Duration: 825.955 ms
     Changes:   

Summary
------------
Succeeded:
Failed:
------------
Total states run:
[root@linux-node1 ~]# 

其它日常维护

mange检查节点状态

[root@linux-node1 ~]# salt-run manage.status
down:
up:
    - linux-node1.example.com
    - linux-node2.example.com

mange检查minion版本，有时候可能因为版本不同而导致执行失败

[root@linux-node1 ~]# salt-run manage.versions
Master:
    2015.5.
Up to date:
    ----------
    linux-node1.example.com:
        2015.5.
    linux-node2.example.com:
        2015.5.

为了安全 可以先执行测试 test=True，没有问题在应用到服务器

salt "linux-node2*" state.highstate test=True

salt-cp拷贝文件

[root@linux-node1 ~]# salt-cp   'linux-node2.example.com' /etc/rc.local  /mnt/
{'linux-node2.example.com': {'/mnt/rc.local': True}}

附：英文参考文档 全部模块

https://www.unixhot.com/docs/saltstack/ref/modules/all/