CentOS-6.5-saltstack-安装

官方文档

官方网站：https://www.saltstack.com/

官方文档   https://docs.saltstack.cn/contents.html

GitHub:  https://github.com/saltstack

中国saltstack用户组：https://www.saltstack.cn/

CentOS-6.5安装saltstack

192.168.161.132 salt-master	salt-master 可装（salt-minion）这里只装salt-master
192.168.161.133 salt-test-minion	salt-minion

[root@salt-master /]# cat /etc/hosts
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
:: localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.161.132    salt-master
192.168.161.133    salt-test-minion

安装epel源

[root@salt-master /]# wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-6.repo

关闭防火墙

[root@salt-master /]# /etc/init.d/iptables stop
iptables: Setting chains to policy ACCEPT: filter [ OK ]
iptables: Flushing firewall rules: [ OK ]
iptables: Unloading modules: [ OK ]

[root@salt-test-minion /]# /etc/init.d/iptables stop
iptables: Setting chains to policy ACCEPT: filter [ OK ]
iptables: Flushing firewall rules: [ OK ]
iptables: Unloading modules: [ OK ]

一、master端配置

[root@salt-master /]# yum -y install salt-master

Installed:
salt-master.noarch :2015.5.-.el6

Dependency Installed:
PyYAML.x86_64 :3.10-3.1.el6
libyaml.x86_64 :0.1.-.el6_6
m2crypto.x86_64 :0.20.-.el6
openpgm.x86_64 :5.1.-.el6
python-babel.noarch :0.9.-5.1.el6
python-backports.x86_64 :1.0-.el6
python-backports-ssl_match_hostname.noarch :3.4.0.2-.el6.centos
python-chardet.noarch :2.2.-.el6
python-jinja2.x86_64 :2.2.-.el6_5
python-msgpack.x86_64 :0.4.-.el6
python-requests.noarch :2.6.-.el6
python-six.noarch :1.9.-.el6
python-urllib3.noarch :1.10.-.el6
python-zmq.x86_64 :14.3.-.el6
salt.noarch :2015.5.-.el6
zeromq3.x86_64 :3.2.-.el6

Dependency Updated:
python.x86_64 :2.6.-.el6_8 python-libs.x86_64 :2.6.-.el6_8

Complete!

[root@salt-master /]# chkconfig salt-master on
[root@salt-master /]# chkconfig --list salt-master
salt-master :off    :off    :on    :on    :on    :on    :off

二、salt-test-minion端配置

[root@salt-test-minion /]# yum -y install salt-minion

Installed:
salt-minion.noarch :2015.5.-.el6

Dependency Installed:
PyYAML.x86_64 :3.10-3.1.el6
libyaml.x86_64 :0.1.-.el6_6
m2crypto.x86_64 :0.20.-.el6
openpgm.x86_64 :5.1.-.el6
python-babel.noarch :0.9.-5.1.el6
python-backports.x86_64 :1.0-.el6
python-backports-ssl_match_hostname.noarch :3.4.0.2-.el6.centos
python-chardet.noarch :2.2.-.el6
python-jinja2.x86_64 :2.2.-.el6_5
python-msgpack.x86_64 :0.4.-.el6
python-requests.noarch :2.6.-.el6
python-six.noarch :1.9.-.el6
python-urllib3.noarch :1.10.-.el6
python-zmq.x86_64 :14.3.-.el6
salt.noarch :2015.5.-.el6
zeromq3.x86_64 :3.2.-.el6

Dependency Updated:
python.x86_64 :2.6.-.el6_8 python-libs.x86_64 :2.6.-.el6_8

Complete!

[root@salt-test-minion /]# chkconfig salt-minion on　　　　#加入开机启动
[root@salt-test-minion /]# chkconfig --list salt-minion
salt-minion :off    :off    :on    :on    :on    :on    :off

三、master端配置

[root@salt-master /]# cp /etc/salt/master /etc/salt/master.bk   #做备份
[root@salt-master /]# vim /etc/salt/master

416 file_roots: 　　　　#：把#（注释）去掉

417   base:

418     - /srv/salt

529 pillar_roots: 　　　　#：把#（注释）去掉

530   base:

531     - /srv/pillar

[root@salt-master /]# /etc/init.d/salt-master start
Starting salt-master daemon: [ OK ]

四、salt-test-minion端配置

[root@salt-test-minion /]# cp /etc/salt/minion /etc/salt/minion.bk
[root@salt-test-minion /]# vim /etc/salt/minion

16 master: 192.168.161.132 　　　　#改为master的Ip或主机名

78 id: minion #定义个名字（建议起个有意义的名字如：nfs、nginx等）

[root@salt-test-minion /]# /etc/init.d/salt-minion start
Starting salt-minion daemon: [ OK ]

[root@salt-test-minion /]# chkconfig salt-minion on

五、master端配置

[root@salt-master /]# salt-key  -L#显示所有minion认证信息

[root@salt-master /]# salt-key -a salt-test-minion   #接受salt-test-minion的认证信息；可跟参数 -y

[root@salt-master /]# salt-key

或

[root@localhost /]# salt-key -A   #接受所有Unaccepted状态的minion认证信息

The following keys are going to be accepted:

Unaccepted Keys:

minion

Proceed? [n/Y] y

Key for minion minion accepted.

[root@localhost /]# salt-key

Accepted Keys:

minion

Denied Keys:

Unaccepted Keys:

Rejected Keys:

六、安装完成、一些简单命令介绍

[root@localhost salt]# salt-key -d salt-test-minion  #拒绝认证salt-test-minion

[root@localhost salt]# salt-key -D    拒绝所有

 [root@salt-master /]# salt '*' test.ping    #检查当前所有主机状态

或

[root@salt-master /]# salt 'salt-test-minion' test.ping

[root@salt-master /]# salt '*' cmd.run 'df -h'

七、文件分发

[root@salt-master /]# mkdir /srv/{salt,pillar}
[root@salt-master /]# cd /srv/salt/
[root@salt-master salt]# pwd
/srv/salt

[root@salt-master salt]# vim host_file.sls

/etc/hosts:
file.managed:
- source: salt://files/hosts
- user: root
- group: root
- mode: 644

[root@salt-master salt]# mkdir files
[root@salt-master salt]# cd files
[root@salt-master files]# ls
[root@salt-master files]# vim /etc/hosts
[root@salt-master files]# cat /etc/hosts     #在最后追加一些内容 目的和salt-test-minion的/etc/hosts/的内容不同，后面验证是否分发成功
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
:: localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.161.132    salt-master
192.168.161.133    salt-test-minion
#########################

#[root@salt-test-minion /]# cat /etc/hosts     #salt-test-minion  的hosts文件
#127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
#:: localhost localhost.localdomain localhost6 localhost6.localdomain6
#192.168.161.132    salt-master
#192.168.161.133    salt-test-minion

[root@salt-master files]# cp /etc/hosts .    #拷贝到当前目录
[root@salt-master files]# cd -
/srv/salt
[root@salt-master salt]# salt '*' state.sls host_file

到salt-test-minion上验证是否真的分发成功

或

[root@salt-master salt]# salt-cp '*' /etc/hosts /etc     #不用创建上面的host_file.sls即可实现（不建议此方法）