SaltStact自动化运维工具03

存储位置   类型      采集方式                 场景
Grains   minion       静态   minion启动时，可以刷新   1、获取信息 2、匹配
pillar   master       动态   指定，实时生效           1、匹配 2、敏感数据配置

LAMP （软件安装salt.states.pki 配置文件salt.states.file 服务salt.states.service）

[root@linux-node1 prod]# mkdir -p /srv/salt/prod/{apache,mysql,php}
[root@linux-node1 prod]# tree
.
├── apache
├── mysql
└── php
#################################
[root@linux-node1 prod]# cd apache/
[root@linux-node1 apache]# vim init.sls
apache-install:
pkg.installed:
- name: httpd

apache-config:
file.managed:
    - name: /etc/httpd/conf/httpd.conf
    - source: salt://apache/files/httpd.conf
    - user: root
    - group: root
    - mode: 644

apache-services:
service.running:
- name: httpd
- enable: True

[root@linux-node1 apache]# mkdir files
[root@linux-node1 apache]# cd files/
[root@linux-node1 files]# cp /etc/httpd/conf/httpd.conf .

[root@linux-node1 files]# salt 'linux-node1*' state.sls apache.init saltenv='prod'

linux-node1.localdomain:

----------

          ID: apache-install

    Function: pkg.installed

        Name: httpd

      Result: True

     Comment: All specified packages are already installed

     Started: 11:22:05.394917

    Duration: 1124.351 ms

     Changes:

----------

          ID: apache-config

    Function: file.managed

        Name: /etc/httpd/conf/httpd.conf

      Result: True

     Comment: File /etc/httpd/conf/httpd.conf is in the correct state

     Started: 11:22:06.550853

    Duration: 32.42 ms

     Changes:

----------

          ID: apache-services

    Function: service.running

        Name: httpd

      Result: True

     Comment: The service httpd is already running

     Started: 11:22:06.637945

    Duration: 115.643 ms

     Changes:   

Summary for linux-node1.localdomain

------------

Succeeded: 3

Failed:    0

------------

Total states run:     3

Total run time:   1.272 s

[root@linux-node1 prod]# cd php/
[root@linux-node1 php]# mkdir files
[root@linux-node1 php]# vim init.sls
php-install:
pkg.installed:
    - pkgs:
      - php
      - php-pdo
      - php-mysql

php-config:
file.managed:
    - name: /etc/php.ini
    - source: salt://php/files/php.ini
    - user: root
    - group: root
    - mode: 644

[root@linux-node1 php]# yum -y install php
[root@linux-node1 php]# cp /etc/php.ini files/

#################################

[root@linux-node1 prod]# cd mysql/
[root@linux-node1 mysql]# mkdir files
[root@linux-node1 mysql]# vim init.sls
mysql-install:
pkg.installed:
    - pkgs:
      - mariadb
      - mariadb-server
mysql-config:
file.managed:
    - name: /etc/my.cnf
    - source: salt://mysql/files/my.cnf
    - user: root
    - group: root
    - mode: 644

mysql-service:
service.running:
    - name: mariadb
    - enable: True

[root@linux-node1 prod]# yum -y install mariadb-server
[root@linux-node1 prod]# cp /etc/my.cnf mysql/files/
#################################

[root@linux-node1 prod]# tree
.
├── apache
│   ├── files
│   │   └── httpd.conf
│   └── init.sls
├── mysql
│   ├── files
│   │   └── my.cnf
│   └── init.sls
└── php
    ├── files
    │   └── php.ini
    └── init.sls
[root@linux-node1 files]# salt 'linux-node1*' state.sls apache.init saltenv='prod'
salt -S '192.168.0.2' state.sls php.init saltenv=prod
salt -S '192.168.0.2' state.sls mysql.init saltenv=prod

等价于以下方式：
[root@linux-node1 prod]# vim ../base/top.sls
prod:
'linux-node1.localdomain':
    - apache.init
    - php.init
    - mysql.init

[root@linux-node1 prod]# salt -S '192.168.0.2' state.highstate

linux-node1.localdomain:

----------

          ID: apache-install

    Function: pkg.installed

        Name: httpd

      Result: True

     Comment: All specified packages are already installed

     Started: 12:04:03.354119

    Duration: 987.978 ms

     Changes:

----------

          ID: apache-config

    Function: file.managed

        Name: /etc/httpd/conf/httpd.conf

      Result: True

     Comment: File /etc/httpd/conf/httpd.conf is in the correct state

     Started: 12:04:04.345800

    Duration: 24.349 ms

     Changes:

----------

          ID: apache-services

    Function: service.running

        Name: httpd

      Result: True

     Comment: The service httpd is already running

     Started: 12:04:04.371095

    Duration: 59.907 ms

     Changes:

----------

          ID: php-install

    Function: pkg.installed

      Result: True

     Comment: All specified packages are already installed

     Started: 12:04:04.431364

    Duration: 26.57 ms

     Changes:

----------

          ID: php-config

    Function: file.managed

        Name: /etc/php.ini

      Result: True

     Comment: File /etc/php.ini is in the correct state

     Started: 12:04:04.458181

    Duration: 13.008 ms

     Changes:

----------

          ID: mysql-install

    Function: pkg.installed

      Result: True

     Comment: All specified packages are already installed

     Started: 12:04:04.471433

    Duration: 24.754 ms

     Changes:

----------

          ID: mysql-config

    Function: file.managed

        Name: /etc/my.cnf

      Result: True

     Comment: File /etc/my.cnf is in the correct state

     Started: 12:04:04.496454

    Duration: 11.538 ms

     Changes:

----------

          ID: mysql-service

    Function: service.running

        Name: mariadb

      Result: True

     Comment: The service mariadb is already running

     Started: 12:04:04.508203

    Duration: 45.043 ms

     Changes:   

Summary for linux-node1.localdomain

------------

Succeeded: 8

Failed:    0

------------

Total states run:     8

Total run time:   1.193 s

incloude 和 extend 使用
[root@linux-node1 prod]# vim lamp.sls
include:
- php.init
- apache.init
- mysql.init

[root@linux-node1 prod]# vim ../base/top.sls
prod:
'linux-node1.localdomain':
- lamp
[root@linux-node1 prod]# salt -S '192.168.0.2' state.highstate

扩展
[root@linux-node1 prod]# vim lamp.sls
include: #相当于把三个文件夹里的init.sls的内容复制粘贴过来一样
- php.init
- apache.init
- mysql.init

extend:   #相当于在php/init.sls里面的pkg.installed加了一个安装项目
php-install:
    pkg.installed:
      - name: php-mbstring
[root@linux-node1 prod]# salt -S '192.168.0.2' state.highstate

#################################

require(我依赖谁) 和 require_in（我被谁依赖）使用

[root@linux-node1 prod]# vim apache/init.sls

apache-install: #没有ID下面的模块（例如pkg、file、service）不能重复
pkg.installed:
- name: httpd

apache-config:
file.managed:
    - name: /etc/httpd/conf/httpd.conf
    - source: salt://apache/files/httpdi.conf 故意改错http.conf httpdi.conf
    - user: root
    - group: root
    - mode: 644

apache-services:
service.running:
    - name: httpd
    - enable: True
    - require:   #先会判断 apache-install 和 apache-config是否执行成功不成功就不执行apache-services
      - pkg: apache-install #格式： - 模块名: 自己定义的ID
      - file: apache-config

[root@linux-node1 prod]# salt -S '192.168.0.2' state.highstate 先找到 base的top.sls ---> 再执行top.sls里面的lamp.sls --->最后执行lamp.sls里面的 mysql/init.sls php/init.sls apache/init.sls

linux-node1.localdomain:

----------

          ID: php-install

    Function: pkg.installed

        Name: php-mbstring

      Result: True

     Comment: All specified packages are already installed

     Started: 15:31:45.534122

    Duration: 992.179 ms

     Changes:

----------

          ID: php-config

    Function: file.managed

        Name: /etc/php.ini

      Result: True

     Comment: File /etc/php.ini is in the correct state

     Started: 15:31:46.529682

    Duration: 24.317 ms

     Changes:

----------

          ID: apache-install

    Function: pkg.installed

        Name: httpd

      Result: True

     Comment: All specified packages are already installed

     Started: 15:31:46.554230

    Duration: 25.533 ms

     Changes:

----------报错的地方

          ID: apache-config

    Function: file.managed

        Name: /etc/httpd/conf/httpd.conf

      Result: False

     Comment: Source file salt://apache/files/httpdi.conf not found in saltenv 'prod'

     Started: 15:31:46.580005

    Duration: 5.781 ms

     Changes:

----------报错的地方

          ID: apache-services

    Function: service.running

        Name: httpd

      Result: False

     Comment: One or more requisite failed: apache.init.apache-config

     Started: 15:31:46.587421

    Duration: 0.02 ms

     Changes:

----------

          ID: mysql-install

    Function: pkg.installed

      Result: True

     Comment: All specified packages are already installed

     Started: 15:31:46.587521

    Duration: 24.84 ms

     Changes:

----------

          ID: mysql-config

    Function: file.managed

        Name: /etc/my.cnf

      Result: True

     Comment: File /etc/my.cnf is in the correct state

     Started: 15:31:46.612602

    Duration: 11.833 ms

     Changes:

----------

          ID: mysql-service

    Function: service.running

        Name: mariadb

      Result: True

     Comment: The service mariadb is already running

     Started: 15:31:46.624651

    Duration: 59.244 ms

     Changes:   

Summary for linux-node1.localdomain

------------

Succeeded: 6

Failed:    2

------------

Total states run:     8

Total run time:   1.144 s

require_in（我被谁依赖）演示

[root@linux-node1 prod]# vim apache/init.sls

跟require效果差不多

watch 和 watch_in 的使用（不是什么模块都可以使用 service有）

[root@linux-node1 prod]# vim apache/init.sls
看着（watch）修改http.conf 文件的内容就执行重启

[root@linux-node1 prod]# vim apache/init.sls
加了一行 reload: True
看着（watch）修改http.conf 文件的内容就执行重新加载

[root@linux-node1 prod]# vim apache/init.sls
看着（watch in）修改http.conf 文件的内容就执行重新加载

unless用法
[root@linux-node1 ~]# cd /var/www/html/
[root@linux-node1 html]# mkdir admin
[root@linux-node1 admin]# vim index.html
[root@linux-node1 salt]# cd /srv/salt/prod/apache/files/
[root@linux-node1 files]# vim httpd.conf
<Directory /var/www/html/admin>
    AllowOverride All
    Order allow,deny
    Allow from all
    AuthType Basic
    AuthName "welcome"
    AuthUserFile /etc/httpd/conf/htpasswd_file
    Require user admin
</Directory>

[root@linux-node1 files]# whereis htpasswd
htpasswd: /usr/bin/htpasswd /usr/share/man/man1/htpasswd.1.gz
[root@linux-node1 files]# rpm -qf /usr/bin/htpasswd
httpd-tools-2.4.6-88.el7.centos.x86_64

[root@linux-node1 files]# cd ..
[root@linux-node1 apache]# vim init.sls 增加一个
apache-auth:
pkg.installed:
    - name: httpd-tools
cmd.run:
    - name: htpasswd -bc /etc/httpd/conf/htpasswd_file admin admin
    - unless: test -f /etc/httpd/conf/htpasswd_file # 如果条件为假才执行 htpasswd -bc /etc/httpd/conf/htpasswd_file admin admin

[root@linux-node1 ~]# salt -S '192.168.0.2' state.highstate
http://192.168.0.2/admin

jinja模板用法
[root@linux-node1 ~]# vim /srv/salt/prod/apache/init.sls #加上jinja模板
apache-config:
file.managed:
    - name: /etc/httpd/conf/httpd.conf
    - source: salt://apache/files/httpd.conf
    - user: root
    - group: root
    - mode: 644
    - template: jinja
      PORT: 80
      IPADDR: {{ grains['fqdn_ip4'][0] }} #输出的是一个列表

[root@linux-node1 ~]# vim /srv/salt/prod/apache/files/httpd.conf
#Listen 12.34.56.78:80
Listen {{ IPADDR }}:{{ PORT }}

[root@linux-node1 ~]# vim /srv/salt/base/top.sls
#base:
# 'os:ubuntu':
#    - match: grain
#    - web.apache
prod:
'linux-node*.localdomain':
    - lamp
~

[root@linux-node1 ~]# salt '*' state.highstate

SaltStact自动化运维工具03的更多相关文章

SaltStact自动化运维工具01
什么是saltstackSaltstack是基于python开发的一套C/S架构配置管理工具使用SSL证书签方的方式进行认证管理底层使用ZeroMQ消息队列pub/sub方式通信 – 号称世界 ...
SaltStact自动化运维工具02
Grains基础:• Grains是saltstack最重要的组件之一• 存储minion端的基本信息,这些信息一般都是静态的,如CPU.内核.操作系统等• Grains存储在minion本地• 管 ...
自动化运维工具之ansible
自动化运维工具之ansible 一,ansible简介 ansible是新出现的自动化运维工具,基于Python开发,集合了众多运维工具(puppet.cfengine.chef.func.fab ...
Linux实战教学笔记25:自动化运维工具之ansible (一)
第二十五节 ansible之文件的批量分发标签(空格分隔): Linux实战教学笔记-陈思齐 ---本教学笔记是本人学习和工作生涯中的摘记整理而成,此为初稿(尚有诸多不完善之处),为原创作品,允许转 ...
部署MySQL自动化运维工具inception+archer
***************************************************************************部署MySQL自动化运维工具inception+a ...
Ansible自动化运维工具
ansible软件介绍 python语言是运维人员必会的语言!  ansible是一个基于Python开发的自动化运维工具!(saltstack)  其功能实现基于SSH远程连接服务!  ans ...
企业级自动化运维工具应用实战ansible
公司计划在年底做一次大型市场促销活动,全面冲刺下交易额,为明年的上市做准备.公司要求各业务组对年底大促做准备,运维部要求所有业务容量进行三倍的扩容,并搭建出多套环境可以共开发和测试人员做测试,运维老大 ...
自动化运维工具-Ansible之4-变量
自动化运维工具-Ansible之4-变量目录自动化运维工具-Ansible之4-变量变量概述变量的定义和调用变量优先级测试变量优先级测试二变量注册 facts缓存变量概述变量提供 ...
自动化运维工具-Ansible之2-ad-hoc
自动化运维工具-Ansible之2-ad-hoc 目录自动化运维工具-Ansible之2-ad-hoc Ansible ad-hoc Ansible命令模块 Ansible软件管理模块 Ansibl ...

随机推荐

HTML <area> 对象
<area>对象的属性属性描述 W3C alt 设置或返回当浏览器无法显示某个区域时的替换文字. Yes coords 设置或返回图像映射中可点击区域的坐标. Yes hash 设置或 ...
php如何判断SQL语句的查询结果是否为空？
PHP与mysql这对黄金搭档配合的相当默契,但偶尔也会遇到一些小需求不知道该怎么做,例如今天要谈到的:如何判断sql语句查询的结果集是否为空! 我们以查询学生信息为例,来看看究竟如何实现我们的需求. ...
HDU 1569 方格取数(2)
方格取数(2) Time Limit: 5000ms Memory Limit: 32768KB This problem will be judged on HDU. Original ID: 15 ...
ElasticSearch中profile API的使用
1. 前言 profile API 是 Elasticsearch 5.x 的一个新接口.通过这个功能,可以看到一个搜索聚合请求,是如何拆分成底层的 Lucene 请求,并且显示每部分的耗时情况. 2 ...
mongodb--分片架构【待填的坑】
首先有一个问题没有搞懂:什么是自动分片?用脚本吗? 一: 多机方式中的另一种方式[分片 => sharding] 分片的对象的谁? 对一个[集合 => 表]进行拆分,把一个大数据拆分成多个 ...
[bzoj1316]树上的询问_点分治
树上的询问 bzoj-1316 题目大意:一棵n个点的带权有根树,有p个询问,每次询问树中是否存在一条长度为Len的路径,如果是,输出Yes否输出No. 注释:$1\le n\le 10^4$,$1\ ...
【Android界面实现】SlidingMenu最新版本号使用具体解释
转载请注明出处:http://blog.csdn.net/zhaokaiqiang1992 在非常久之前的一篇文章中,简单的介绍了一下开源项目SlidingMenu控件的使用,这一篇文章,将比較具体的 ...
初步了解Shuttle ESB
ESB:EnterpriseService Bus,即企业服务总线.它是传统中间件技术与XML.Web服务等技术结合的产物.从面向服务体系架构发展而来. ESB採用了"总线"这种模 ...
DNS负载均衡 Nginx 负载均衡的种类
DNS负载均衡当一个网站有足够多的用户的时候,假如每次请求的资源都位于同一台机器上面,那么这台机器随时可能会蹦掉.处理办法就是用DNS负载均衡技术,它的原理是在DNS服务器中为同一个主机名配置多个I ...
Linux - shell壳脚本
shell脚本. 壳,充当一个翻译,让计算机能够认识的二进制程序,并将结果翻译给我们. 加在内核上,可以跟内核打交道的壳. 可以通过/etc/shells 来查看. [root@local ~]# c ...

SaltStact自动化运维工具03

SaltStact自动化运维工具03的更多相关文章

随机推荐

热门专题