其他分享
首页 > 其他分享> > saltstack 从入门到使用实战

saltstack 从入门到使用实战

作者:互联网

1.saltstack安装配置及测试

一.安装部署
1.Master端:
 yum install https://repo.saltstack.com/yum/redhat/salt-repo-latest.el7.noarch.rpm
 yum clean expire-cache  && yum update -y
 yum -y install salt-master  && yum -y install salt-minion
 systemctl start salt-master #启动salt-master  
 systemctl enable salt-master
 
 
2.Minion端:
yum install https://repo.saltstack.com/yum/redhat/salt-repo-latest.el7.noarch.rpm 
yum clean expire-cache  && yum update -y  && yum -y install salt-minion

systemctl start salt-minion
systemctl enable salt-minion

二.初步配置
1.Master端配置:
[root@linux-master1 ~]# vim /etc/salt/master //修改下面几行 (由于这个文件内容默认全部注释的,所以可以直接情清空该文件,然后复制下面内容。但是记住配置的格式不能错!!)
interface: 192.168.1.181 //绑定主控端master的ip,冒号后必须空一格
auto_accept: True //当该项配置成True时表示自动认证,就不需要手动运行salt-key命令进行证书信任
file_roots: //指定saltstack文件根目录位置
base: //前面必须留两个空格
- /srv/salt //前面必须留四个空格

	[root@linux-master1 ~]# systemctl restart salt-master
	Starting salt-master daemon: [ OK ]
	
	
	(如果master端也想管控自己,可以配置自己的monion)




2.Minion端配置:
	[root@linux-node1 ~]# vim /etc/salt/minion         //修改下面几行                      
	master: 192.168.1.181          //指定主控端master的ip地址,冒号后必须空一格(可以是主机名)
	id: minion-192-168-1-173     //唯一标识符,可以不配,不配默认就是主机名,修改被控端monion主机识别id,建议使用主机名或ip来设置,冒号后必须空一格
	
	[root@linux-node2 ~]# systemctl start salt-minion
	Starting salt-minion daemon: [ OK ]

三.测试初步配置通畅性
1.查看当前的salt key信息
[root@zabbix ~]# salt-key -L
Accepted Keys:
minion-dev12-192.168.1.173
minion-test-xktest001-192.168.1.114
minion-testcat001-192.168.1.48
Denied Keys:
Unaccepted Keys:
Rejected Keys:

2.测试被控主机的连通性
[root@zabbix ~]# salt '*' test.ping
	minion-dev12-192.168.1.173:
		True
	minion-testcat001-192.168.1.48:
		True
	minion-test-xktest001-192.168.1.114:
		True
		

c)远程命令执行(cmd模块),格式:salt  'client配置的id' 模块.方法  '命令参数'           (其中'*'表示所有的client)
[root@linux-master1 ~]# salt '*' cmd.run 'uptime'
[root@zabbix ~]# salt '*' cmd.run 'uptime'
minion-dev12-192.168.1.173:
	 16:58:52 up 701 days,  2:47,  1 user,  load average: 0.27, 0.25, 0.28
minion-testcat001-192.168.1.48:
	 16:58:52 up 189 days,  1:11,  1 user,  load average: 1.58, 1.62, 1.46
minion-test-xktest001-192.168.1.114:
	 16:58:52 up 159 days, 43 min,  1 user,  load average: 0.02, 0.16, 0.29







####.关于修改minion的id后,无法连通问题:
	minion配置中有一个id配置,默认是hostname,如果id配置和hostname不一致会导致无法进行通信,那么当hostname做了修改,或者错误的时候该怎么配置呢?
	①关闭salt-minion  
	②salt-key -d id  在master上删除minion的id  
	③minion上删除pki目录 rm -f /etc/salt/pki/minion/*

	④minion上删除minion_id文件 [id: minion-dev12-192.168.1.173]
	⑤修改完成,启动minion
	#此处必须先停掉minion修改,并删除相应的文件,否则会默认地去查找原先的配置,已踩坑

	#以下是刚装完查看minion_id变成了www.test123.com。进行修改成linux-node2.example.com
	[root@linux-node2 salt]# cat minion_id 
	www.test123.com
	[root@linux-node2 salt]# systemctl stop salt-minion
	[root@linux-node2 salt]# rm -rf pki
	[root@linux-node2 salt]# rm -rf minion_id 
	[root@linux-node2 salt]# systemctl start salt-minion
	[root@linux-node2 salt]# cat minion_id 
	linux-node2.example.com

2.saltstack常见使用模块介绍

四.saltstack 常见使用方式

1.利用Saltstack远程执行命令
saltstack的一个比较突出优势就是具备执行远程命令的功能。操作方法与func相似,可以帮助运维人员完成集中化的操作平台。
命令格式: slat '<操作目标>' <方法> [参数]

	salt '*' cmd.run 'df -h'
	salt '*' cmd.run 'uptime'
	salt '*' cmd.run 'free -m'
	
	salt-cp命令  远程批量传输文件

	1): -E  
	通过正则表达式进行匹配。
		示例:查看被控制端minion-test*字符开头的主机id名是否连通。
		[root@zabbix ~]# salt -E '^minion-test*' test.ping
		minion-testcat001-192.168.1.48:
			True
		minion-test-xktest001-192.168.1.114:
			True
		
	2):-L:--list        
	以主机id名列表的形式进行过滤,格式与Python的列表相似,即不同主机id名称使用逗号分隔。

		示例:获取主机id名为minion-testcat001-192.168.1.48,minion-test-xktest001-192.168.1.114 获取完整操作系统发行版名称。
		[root@zabbix ~]# salt -L 'minion-testcat001-192.168.1.48,minion-test-xktest001-192.168.1.114' grains.item osfullname
		minion-testcat001-192.168.1.48:
			----------
			osfullname:
				CentOS Linux
		minion-test-xktest001-192.168.1.114:
			----------
			osfullname:
				CentOS Linux
				
	3):-G:--grain    【常见重要使用模块】

	    根据被控主机的grains信息(grains是saltstack重要组件之一,重要作用是收集被控主机的基本系统信息)进行匹配过滤,格式为'<grain value>:<glob expression>'。


	    3.1):grains常见查询:
	    [root@zabbix ~]# salt 'minion-test*'  grains.ls
		minion-testcat001-192.168.1.48:
		    - SSDs
		    - biosreleasedate
		    - biosversion
		    - cpu_flags
		    - cpu_model
		    - cpuarch
		    - cwd
		    - disks
		    - dns
		    - domain
		    - fqdn
		    - fqdn_ip4
		    - fqdn_ip6
		    - fqdns
		    - gid
		    - gpus
		    - groupname
		    - host
		    - hwaddr_interfaces
		    - id
		    - init
		    - ip4_gw
		    - ip4_interfaces
		    - ip6_gw
		    - ip6_interfaces
		    - ip_gw
		    - ip_interfaces
		    - ipv4
		    - ipv6
		    - kernel
		    - kernelrelease
		    - kernelversion
		    - locale_info
		    - localhost
		    - lsb_distrib_codename
		    - lsb_distrib_id
		    - machine_id
		    - manufacturer
		    - master
		    - mdadm
		    - mem_total
		    - nodename
		    - num_cpus
		    - num_gpus
		    - os
		    - os_family
		    - osarch
		    - oscodename
		    - osfinger
		    - osfullname
		    - osmajorrelease
		    - osrelease
		    - osrelease_info
		    - path
		    - pid
		    - productname
		    - ps
		    - pythonexecutable
		    - pythonpath
		    - pythonversion
		    - saltpath
		    - saltversion
		    - saltversioninfo
		    - selinux
		    - serialnumber
		    - server_id
		    - shell
		    - swap_total
		    - systemd
		    - uid
		    - username
		    - uuid
		    - virtual
		    - zfs_feature_flags
		    - zfs_support
		    - zmqversion



	    [root@zabbix ~]# salt 'minion-test*'  grains.items
		minion-testcat001-192.168.1.48:
		    ----------
		    SSDs:
		    biosreleasedate:
		        04/01/2014
		    biosversion:
		        rel-1.10.2-0-g5f4c7b1-20181220_000000-szxrtosci10000
		    cpu_flags:
		        - fpu
		        - vme
		        - de
		        - pse
		        - tsc
		        - msr
		        - pae
		        - mce
		        - cx8
		        - apic
		        - sep
		        - mtrr
		        - pge
		        - mca
		        - cmov
		        - pat
		        - pse36
		        - clflush
		        - mmx
		        - fxsr
		        - sse
		        - sse2
		        - ss
		        - ht
		        - syscall
		        - nx
		        - pdpe1gb
		        - rdtscp
		        - lm
		        - constant_tsc
		        - rep_good
		        - nopl
		        - xtopology
		        - nonstop_tsc
		        - eagerfpu
		        - pni
		        - pclmulqdq
		        - ssse3
		        - fma
		        - cx16
		        - pcid
		        - sse4_1
		        - sse4_2
		        - x2apic
		        - movbe
		        - popcnt
		        - tsc_deadline_timer
		        - aes
		        - xsave
		        - avx
		        - f16c
		        - rdrand
		        - hypervisor
		        - lahf_lm
		        - abm
		        - 3dnowprefetch
		        - invpcid_single
		        - ssbd
		        - ibrs
		        - ibpb
		        - stibp
		        - fsgsbase
		        - tsc_adjust
		        - bmi1
		        - hle
		        - avx2
		        - smep
		        - bmi2
		        - erms
		        - invpcid
		        - rtm
		        - mpx
		        - avx512f
		        - avx512dq
		        - rdseed
		        - adx
		        - smap
		        - clflushopt
		        - clwb
		        - avx512cd
		        - avx512bw
		        - avx512vl
		        - xsaveopt
		        - xsavec
		        - xgetbv1
		        - arat
		        - md_clear
		        - spec_ctrl
		        - intel_stibp
		        - flush_l1d
		    cpu_model:
		        Intel(R) Xeon(R) Gold 6161 CPU @ 2.20GHz
		    cpuarch:
		        x86_64
		    cwd:
		        /
		    disks:
		        - vda
		    dns:
		        ----------
		        domain:
		        ip4_nameservers:
		            - 100.125.17.29
		            - 100.125.135.29
		        ip6_nameservers:
		        nameservers:
		            - 100.125.17.29
		            - 100.125.135.29
		        options:
		            - single-request-reopen
		        search:
		            - openstacklocal
		        sortlist:
		    domain:
		        localdomain
		    fqdn:
		        localhost.localdomain
		    fqdn_ip4:
		        - 127.0.0.1
		    fqdn_ip6:
		        - ::1
		    fqdns:
		    gid:
		        0
		    gpus:
		        |_
		          ----------
		          model:
		              GD 5446
		          vendor:
		              unknown
		    groupname:
		        root
		    host:
		        localhost
		    hwaddr_interfaces:
		        ----------
		        eth0:
		            fa:16:3e:61:e9:24
		        lo:
		            00:00:00:00:00:00
		    id:
		        minion-testcat001-192.168.1.48
		    init:
		        systemd
		    ip4_gw:
		        192.168.1.1
		    ip4_interfaces:
		        ----------
		        eth0:
		            - 192.168.1.48
		        lo:
		            - 127.0.0.1
		    ip6_gw:
		        False
		    ip6_interfaces:
		        ----------
		        eth0:
		            - fe80::f816:3eff:fe61:e924
		        lo:
		            - ::1
		    ip_gw:
		        True
		    ip_interfaces:
		        ----------
		        eth0:
		            - 192.168.1.48
		            - fe80::f816:3eff:fe61:e924
		        lo:
		            - 127.0.0.1
		            - ::1
		    ipv4:
		        - 127.0.0.1
		        - 192.168.1.48
		    ipv6:
		        - ::1
		        - fe80::f816:3eff:fe61:e924
		    kernel:
		        Linux
		    kernelrelease:
		        3.10.0-1062.12.1.el7.x86_64
		    kernelversion:
		        #1 SMP Tue Feb 4 23:02:59 UTC 2020
		    locale_info:
		        ----------
		        defaultencoding:
		            UTF-8
		        defaultlanguage:
		            en_US
		        detectedencoding:
		            UTF-8
		        timezone:
		            unknown
		    localhost:
		        cat-test
		    lsb_distrib_codename:
		        CentOS Linux 7 (Core)
		    lsb_distrib_id:
		        CentOS Linux
		    machine_id:
		        ef219b153e8049718c374985be33c24e
		    manufacturer:
		        OpenStack Foundation
		    master:
		        192.168.1.181
		    mdadm:
		    mem_total:
		        7820
		    nodename:
		        cat-test
		    num_cpus:
		        4
		    num_gpus:
		        1
		    os:
		        CentOS
		    os_family:
		        RedHat
		    osarch:
		        x86_64
		    oscodename:
		        CentOS Linux 7 (Core)
		    osfinger:
		        CentOS Linux-7
		    osfullname:
		        CentOS Linux
		    osmajorrelease:
		        7
		    osrelease:
		        7.8.2003
		    osrelease_info:
		        - 7
		        - 8
		        - 2003
		    path:
		        /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
		    pid:
		        13036
		    productname:
		        OpenStack Nova
		    ps:
		        ps -efHww
		    pythonexecutable:
		        /usr/bin/python
		    pythonpath:
		        - /usr/bin
		        - /usr/lib/python2.7/site-packages/setuptools-19.6.2-py2.7.egg
		        - /usr/lib/python2.7/site-packages/pip-7.1.2-py2.7.egg
		        - /usr/lib/python2.7/site-packages/cloud_init-0.7.9-py2.7.egg
		        - /usr/lib64/python27.zip
		        - /usr/lib64/python2.7
		        - /usr/lib64/python2.7/plat-linux2
		        - /usr/lib64/python2.7/lib-tk
		        - /usr/lib64/python2.7/lib-old
		        - /usr/lib64/python2.7/lib-dynload
		        - /usr/lib64/python2.7/site-packages
		        - /usr/lib/python2.7/site-packages
		    pythonversion:
		        - 2
		        - 7
		        - 5
		        - final
		        - 0
		    saltpath:
		        /usr/lib/python2.7/site-packages/salt
		    saltversion:
		        3000.5
		    saltversioninfo:
		        - 3000
		        - 5
		    selinux:
		        ----------
		        enabled:
		            False
		        enforced:
		            Disabled
		    serialnumber:
		        acc3aa91-3bdb-4900-90a8-4d49b7e7c136
		    server_id:
		        1515288221
		    shell:
		        /bin/sh
		    swap_total:
		        7999
		    systemd:
		        ----------
		        features:
		            +PAM +AUDIT +SELINUX +IMA -APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 -SECCOMP +BLKID +ELFUTILS +KMOD +IDN
		        version:
		            219
		    uid:
		        0
		    username:
		        root
		    uuid:
		        bf942ead-97b5-439a-b625-93ffb3cf3bce
		    virtual:
		        kvm
		    zfs_feature_flags:
		        False
		    zfs_support:
		        False
		    zmqversion:
		        4.1.4


		[root@zabbix ~]# salt 'minion-test*'  grains.item os
		minion-test-xktest001-192.168.1.114:
		    ----------
		    os:
		        CentOS
		minion-testcat001-192.168.1.48:
		    ----------
		    os:
		        CentOS




		3.2):grains 正则匹配
			示例:获取主机发行版本为7.2的Python版本号
			[root@zabbix ~]# salt -G 'osrelease:7.2.*' cmd.run 'python -V'
			minion-dev12-192.168.1.173:
				Python 2.7.5
				
			[root@zabbix ~]# salt --grain-pcre  'osrelease:7.*' cmd.run 'python -V'
			minion-dev12-192.168.1.173:
				Python 2.7.5
			minion-testcat001-192.168.1.48:
				Python 2.7.5
			minion-test-xktest001-192.168.1.114:
				Python 2.7.5


		3.3):自定义grain
			*在minion上进行配置grains ,重启systemctl restart salt-minion 
				grains:
				  roles:
				    - webserver
				    - memcache
				  deployment: datacenter4
				  cabinet: 13
				  cab_u: 14-15
				  
			* 在master上查询是否添加上了自定义的grains
			salt 'minion-test-xktest001-192.168.1.114'  grains.items

			 cab_u:
    			14-15
		    cabinet:
		        13
			deployment:
    			datacenter4

			 roles:
		        - webserver
		        - memcache  






	4):-I:--pillar  【常见重要使用模块】

		#使用场景: 
			a.敏感数据
			b.定时执行任务





		#根据被控主机的pillar(作用是定义与被控主机相关的任何数据,定义好的数据可以被其他组件使用)信息进行过滤匹配.
		格式为'对象名称:对象值',比如过滤所有具备'apache:httpd' pillar值的主机。

		示例:探测具有"nginx:root:/data"信息的主机连通性【我测试不通】
			[root@linux-master1 ~]# salt -I 'nginx:root:/data' test.ping
			minion-dev12-192.168.1.173:
				True
			minion-test-xktest001-192.168.1.114:
				True
			其中pillar属性配置文件如下(后面会讲到)	
			nginx:
				root:/data
			

		






	5):-N:--nodegroup      

	 根据主控端master配置文件中的分组名称进行过滤。
		如下配置的组信息(主机信息支持正则表达式、grain、条件运算符等),通常根据业务类型划分,不同业务具备相同的特点,包括部署环境、应用平台、配置文件等。
		nodegroups:
		  dev: 'minion-dev12-192.168.1.173'
		  test: 'minion-testcat001-192.168.1.48,minion-test-xktest001-192.168.1.114'
		  #xk-test: ''
		  #uat: ''

		其中:
		L@    表示后面的主机id格式为列表,即主机id以逗号隔开;
		G@   表示以grain格式描述;
		S@   表示以ip子网或地址格式描述
		
		示例:探测web1group(或web2group)被控主机的连通性
		[root@zabbix ~]# salt -N dev test.ping
		minion-dev12-192.168.1.173:
			True
		[root@zabbix ~]# salt -N test test.ping
		minion-testcat001-192.168.1.48:
			True
		minion-test-xktest001-192.168.1.114:
			True


	
	6):-C:--compound        

	根据条件运算符not、and、or去匹配不同规则的主机信息。
		示例:探测minion-192开头并且操作系统为Centos的主机连通性。
		[root@zabbix ~]# salt -C 'E@^minion-dev* and G@os:Centos' test.ping
		minion-dev12-192.168.1.173:
			True
		[root@zabbix ~]# salt -C 'E@^minion-test* and G@os:Centos' test.ping
		minion-testcat001-192.168.1.48:
			True
		minion-test-xktest001-192.168.1.114:
			True
			
		其中:
		not语句不能作为第一个条件执行,不过可以通过以下方法来规避:
		示例:探测非minion-prod开头的主机连通性。
		[root@zabbix ~]# salt -C '* and not E@^minion-prod*' test.ping
		minion-dev12-192.168.1.173:
			True
		minion-testcat001-192.168.1.48:
			True
		minion-test-xktest001-192.168.1.114:
			True
		


	7):-S:--ipcidr 

	根据被控主机的ip地址或ip子网进行匹配。
		[root@zabbix ~]# salt -S 192.168.0.0/16 test.ping
		minion-dev12-192.168.1.173:
			True
		minion-testcat001-192.168.1.48:
			True
		minion-test-xktest001-192.168.1.114:
			True
		[root@zabbix ~]# salt -S 192.168.1.173 test.ping
		minion-dev12-192.168.1.173:
			True
		[root@zabbix ~]# salt -S 192.168.1.114 test.ping
		minion-test-xktest001-192.168.1.114:
			True
		[root@zabbix ~]# salt -S 192.168.1.48 test.ping
		minion-testcat001-192.168.1.48:
			True

		



	
	
	
	
	
2.Saltstack常用模块及API

	saltstack提供了非常丰富的功能模块,涉及操作系统的基础功能、常用工具支持等,更多模块信息请见:https://docs.saltstack.com/en/latest/ref/modules/all/index.html
	当然,也可以通过sys模块列出当前版本支持的所有模块:
	[root@zabbix ~]# salt '*' sys.list_modules
	minion-dev12-192.168.1.173:
		- acl
		- aliases
		- alternatives
		- ansible
		- apache
		- archive #压缩解压
		- artifactory
		- beacons
		- bigip
		- boto_cfn
		- boto_cloudwatch
		- boto_dynamodb
		- boto_ec2
		- boto_elasticache
		- boto_iam
		- boto_secgroup
		- boto_sns
		- bridge
		- btrfs
		- buildout
		- chroot
		- cloud
		- cmd
		- composer
		- config
		- consul
		- container_resource
		- cp
		- cron
		- cryptdev
		- data
		- defaults
		- devmap
		- disk
		- django
		- dnsmasq
		- dnsutil
		- drbd
		- environ
		- etcd
		- ethtool
		- event
		- extfs
		- file
		- firewalld
		- freezer
		- gem
		- genesis
		- git
		- glassfish
		- gnome
		- google_chat
		- grafana4
		- grains
		- group
		- hashutil
		- highstate_doc
		- hosts
		- http
		- incron
		- ini
		- inspector
		- introspect
		- iosconfig
		- ip
		- ipset
		- iptables
		- jboss7
		- jboss7_cli
		- jinja
		- k8s
		- kernelpkg
		- key
		- keyboard
		- kmod
		- locale
		- locate
		- log
		- logrotate
		- lowpkg
		- mandrill
		- match
		- mattermost
		- mine
		- minion
		- modjk
		- mount
		- msteams
		- nagios_rpc
		- namecheap_domains
		- namecheap_domains_dns
		- namecheap_domains_ns
		- namecheap_ssl
		- namecheap_users
		- network
		- nexus
		- nginx
		- nova
		- npm
		- nspawn
		- nxos_api
		- openscap
		- openstack_config
		- opsgenie
		- out
		- pagerduty
		- pagerduty_util
		- pam
		- parallels
		- partition
		- peeringdb
		- pillar
		- pip
		- pkg
		- pkg_resource
		- postfix
		- ps
		- publish
		- pushover
		- pyenv
		- qemu_img
		- qemu_nbd
		- rabbitmq
		- random
		- random_org
		- rbenv
		- redis
		- rest_sample_utils
		- restartcheck
		- ret
		- rsync
		- rvm
		- s3
		- s6
		- salt_proxy
		- salt_version
		- saltcheck
		- saltutil
		- schedule
		- scsi
		- sdb
		- seed
		- selinux
		- serverdensity_device
		- service
		- shadow
		- slack
		- slsutil
		- smbios
		- smtp
		- solrcloud
		- sqlite3
		- ssh
		- state
		- status
		- statuspage
		- supervisord
		- svn
		- sys
		- sysctl
		- sysfs
		- syslog_ng
		- system
		- telegram
		- telemetry
		- temp
		- test
		- timezone
		- tuned
		- udev
		- uptime
		- user
		- vault
		- vbox_guest
		- virtualenv
		- vsphere
		- webutil
		- x509
		- xfs
		- xml
		- zabbix
		- zenoss
		
	接下来抽取出常见的模块进行介绍,并列举模块API的用法。
	API原理:通过调用master client模块,实例化一个LocalClient对象,再调用cmd()方法来实现的。
	如下是API实现test.ping的示例:
	import salt.client 
	client = salt.client.LocalClient()
	ret = client.cmd('*','test.ping')
	print ret

	结果以一个标准的python字典形式的字符串返回码,可以通过eval()函数转换成python的字典类型,方便后续的业务逻辑处理,程序运行结果如下:	
	{'minion-192-168-1-102': True, 'minion-192-168-1-118': True}

	截图如下:
	[root@zabbix tmp]# python test002.py 
	{u'minion-test-xktest001-192.168.1.114': True, u'minion-testcat001-192.168.1.48': True, u'minion-dev12-192.168.1.173': True}
	
	###注意:将字符字典转换成python的字典类型,推荐使用ast模块的literal_eval()方法,可以过滤表达式中的恶意函数。
	
	
	
	
	1).Archive模块
		功能:实现系统层面的压缩包调用,支持gunzip、gzip、rar、tar、unrar、unzip等。
		
		示例1:采用tar解压被控制机的/tmp/eureka.tar.gz 包
		[root@zabbix ~]# salt  'minion-dev12-192.168.1.173' archive.tar xf /tmp/eureka.tar.gz dest=/tmp
		minion-dev12-192.168.1.173:
		
		示例2:采用gzip压缩被控制机的/tmp/test.txt文件
		[root@zabbix ~]# salt 'minion-dev*' archive.gzip /tmp/eureka.txt
		minion-dev12-192.168.1.173:
		
		实例3:将被控制机的/mnt/test打包到/mnt下的test.tar.gz
		[root@linux-node1 ~]# salt '*' archive.tar zcf /mnt/test.tar.gz /mnt/test
		##将被控制机的/mnt/nginx-1.9.7.tar.gz包解压,解压默认放到被控制机的当前用户家目录(即/root)路径下(注意:archive.tar后面的参数前不能加-)
		##将被控制机的/mnt/heihei.tar.bz2包解压,解压默认放到被控制机的当前用户家目录(即/root)路径下
		
		
	2)......其他的根据常用模块通过查看帮助文档
		有非常详细的使用方法
		salt 'minion-testcat001-192.168.1.48' sys.doc
		
		
		常用的模块:
		1.sys.doc
		2.test 	  [test.ping]
		3.system  [system.reboot/system.shutdown/system.poweroff]
		4.status  [cpuinfo/loadavg/meminfo/netstats/uptime/diskusage/procs]
		5.service [status/available/restart/stop/status/disabled/get_all]
		6.saltutl [is_running/running/kill_job/]
		7.pip     [install/uninstall/list/freeze/version]
		8.pillar  [data,ext,get,item,items,raw]
		9.cmd     [run/script]
		10.file   [修改文件的一些权限等]

3.saltstack日志转存储

五.配置通过数据库接收saltstack 回显

1.rsyslog接收salt日志
	[root@zabbix ~]# salt '*' test.ping --return syslog 【master执行】
	minion-dev12-192.168.1.173:
		True
	minion-testcat001-192.168.1.48:
		True
	minion-test-xktest001-192.168.1.114:
		True
		
	[root@design-0012 ~]# tail  -10000 /var/log/messages|grep "minion" 【minon查看】
	Dec  1 14:47:33 localhost salt-minion: {"fun_args": [], "jid": "20201201064732908317", "return": true, "retcode": 0, "success": true, "fun": "test.ping", "id": "minion-dev12-192.168.1.173"}




2.mysql接收salt日志

	1):准备mysql,新建salt库,并创建表:
	CREATE TABLE `salt_returns` (
	  `fun` varchar(50) NOT NULL,
	  `jid` varchar(255) NOT NULL,
	  `return` mediumtext NOT NULL,
	  `id` varchar(255) NOT NULL,
	  `success` varchar(10) NOT NULL,
	  `full_ret` mediumtext NOT NULL,
	  `alter_time` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP,
	  KEY `id` (`id`),
	  KEY `jid` (`jid`),
	  KEY `fun` (`fun`)
	) ENGINE=InnoDB DEFAULT CHARSET=utf8;
	
	2):salt-minion端安装yum -y install MySQL-python,并配置/etc/salt/minion ,重启salt-minion
		[root@cat-test ~]# cat /etc/salt/minion|grep "mysql"
		#return: mysql
		mysql.host: '192.168.1.100'
		mysql.user: 'salt'
		mysql.pass: 'Salt@123456'
		mysql.db: 'salt'
		mysql.port: 3306
		
	3):测试使用
		[root@Master ~]# salt '*' cmd.run 'hostname' --return mysql 
		minion-dev12-192.168.1.173:
			design-0012
		minion-testcat001-192.168.1.48:
			cat-test
		minion-test-xktest001-192.168.1.114:
			test-xkcat001
			
	##如果有上千上万台,对mysql的压力是非常大的,生产中我们不建议采用。


3.通过配置master来转存储
	1):创建sql:https://www.unixhot.com/docs/saltstack/ref/returners/all/salt.returners.mysql.html

	2):配置master节点/etc/salt/master
		#return: mysql
		master_job_cache: mysql
		mysql.host: '119.3.56.222'
		mysql.user: 'salt'
		mysql.pass: 'Salt@123456'
		mysql.db: 'salt'
		mysql.port: 13067


	3):重启
		systemctl restart salt-master

	4):验证
		salt '*'  test.ping
		查看数据库




4.通过event编写python脚本来转存储
	0):安装mysql,创建数据库及账号并授权,安装python的mysql模块
		CREATE TABLE `salt_returns` (
	  `fun` varchar(50) NOT NULL,
	  `jid` varchar(255) NOT NULL,
	  `return` mediumtext NOT NULL,
	  `id` varchar(255) NOT NULL,
	  `success` varchar(10) NOT NULL,
	  `full_ret` mediumtext NOT NULL,
	  `alter_time` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP,
	  KEY `id` (`id`),
	  KEY `jid` (`jid`),
	  KEY `fun` (`fun`)
	) ENGINE=InnoDB DEFAULT CHARSET=utf8;
	###########为了方便看数量,新增自增nid:
	CREATE TABLE `salt_returns` (
	   `nid` int auto_increment primary key not null,
	  `fun` varchar(50) NOT NULL,
	  `jid` varchar(255) NOT NULL,
	  `return` mediumtext NOT NULL,
	  `id` varchar(255) NOT NULL,
	  `success` varchar(10) NOT NULL,
	  `full_ret` mediumtext NOT NULL,
	  `alter_time` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP,
	  KEY `id` (`id`),
	  KEY `jid` (`jid`),
	  KEY `fun` (`fun`)
	) ENGINE=InnoDB DEFAULT CHARSET=utf8;
	
	
	yum -y install MySQL-python  #执行脚本的时候遇的问题,发现安装的是1.2.5的版本导致不兼容,
	# ImportError: this is MySQLdb version (1, 2, 5, 'final', 1), but _mysql is version (1, 4, 6, 'final', 0)n 
	pip uninstall mysqlclient
	pip install mysqlclient==1.4.6
	

	1):监听脚本,master端执行salt '*' cmd.run 'hostname',会打印出一个字典。
	import salt.utils.event
	event=salt.utils.event.MasterEvent('/var/run/salt/master')
	for eachevent in event.iter_events(full=True):
		print eachevent
		print "------"
		
		
	2):自定义return 
	a.master节点安装yum -y install MySQL-python 
	b.编写returnner
		vi salt_event_to_mysql.py 
		#!/bin/env python 
		#coding=utf8
		import json 
		import salt.config
		import salt.utils.event 
		import MySQLdb
		_opts_=salt.config.client_config('/etc/salt/master')
		conn=MySQLdb.connect(host=_opts__['mysql.host'],user=_opts_['mysql.user'],passwd=_opts_['mysql.pass'],db=_opts_[''mysql.db',port=_opts_['mysql.port'])
		cursor=conn.cursor()
		
		event=salt.utils.event.MasterEvent(_opts_['sock_dir'])
		for eachevent in event.iter_events(full=True):
			ret=eachevent['data']
			if "salt/job/" in eachevent['tag']:
				if ret.has_key('id') and ret.has_key('return'):
					if ret['fun'] == "saltutil.find_job":
					continue
				
				sql='''inster into `salt_returns`(`fun`,`jid`,`return`,`id`,`success`,`full_ret`) values(%s,%s,%s,%s,%s,%s)'''
				cursor.execute(sql,(ret['fun'],ret['jid'],json.dumps(ret['return']),ret['id'],ret['success'],json.dumps[ret]))
				
				cursor.execute("COMMIT")
			
			
			else:
				pass
			
		fi	
	
	
	c.增加master节点配置mysql  /etc/salt/master
		#event_return: mysql
		mysql.host: '119.3.56.222'
		mysql.user: 'salt'
		mysql.pass: 'Salt@123456'
		mysql.db: 'salt'
		mysql.port: 13067

		

	d.验证是否写入数据库
	[root@zabbix tmp]# python salt_event_to_mysql.py 
	
	[root@zabbix ~]# salt '*'  cmd.run 'free -m' #不用加--return ,查看mysql数据库发现已经写入!
	minion-dev12-192.168.1.173:
					  total        used        free      shared  buff/cache   available
		Mem:          15886        4043        5330         533        6511       10917
		Swap:          8191        4874        3317
	minion-test-xktest001-192.168.1.114:
					  total        used        free      shared  buff/cache   available
		Mem:           7820         553         761           8        6505        7018
		Swap:          7999           0        7999
	minion-testcat001-192.168.1.48:
					  total        used        free      shared  buff/cache   available
		Mem:           7820        5538         210          87        2071        1894
		Swap:          7999         194        7805

4.saltstack核心sls语法简述

1.Salt 的核心是state

state 状态系统的核心是sls,或者叫做 **S**aLt State 文件。
SLS表示系统将会是什么样的一种状态,而且是以一种很简单的格式来包含这些数据----经常也叫做配置管理。

2.sls是什么,用什么语法编写
SLS文件实际上只是一些:字典 dictionaries 列表 list 字符串 数字

sls文件主要使用的YAML语法来进行编写。

3.sls 编写 yaml 注意事项

salt缩进有2个空格组成,不要使用tabs  

字典格式的,键值对以1个空格隔开。
例如 cabinet: 13

列表项,使用一个短横杠+一个空格;多个项使用同样的缩进级别作为同一列表的一部分。 
例如:roles:
	    - webserver
	    - memcache


参考: 
YAML 编写规则:
http://docs.saltstack.cn/topics/yaml/index.html

State 模块列表:

https://docs.saltstack.com/en/latest/ref/states/all/index.html

5.saltstack文件系统及sls模版使用

六.文件系统Demo

1.修改配置文件
	vi /etc/salt/master    #file_roots 
	file_roots:
	  base:
		- /srv/salt
	  dev:
		- /srv/salt/dev
	
	
	systemctl restart salt-master


2.创建目录
	mkdir /srv/salt -p 
	mkdir /srv/salt/dev -p



3.写sls文件

	[root@zabbix salt]# cat top.sls 
	base: #哪个环境
	  '*': #哪些机器
	   - hosts #使用哪个sls文件
	
	
	[root@zabbix salt]# cat hosts.sls 
	/tmp/hosts:  #同步到远程机器的的地址
	  file.managed:
		- source: salt://tmp/hosts  #同步源
		- user: root
		- group: root
		- mode: 600
		
		
	/srv/salt/etc/hosts文件要准备好。


	###目录结构如下:
	../salt/
	├── top.sls
	│   

	├── etc
	│   ├── hosts
	│   └── script
	│       └── test.sh
	├── hosts
	│   ├── a.sls
	│   ├── h.sls
	│   └── init.sls

	


4.如何运行
	1): salt '*'  state.sls hosts  或者 salt '*'  state.highstate
	[root@zabbix salt]# salt '*'  state.sls hosts #state.sls模块,hosts.sls要在/srv/salt根目录下查找该文件
	minion-dev12-192.168.1.173:
	----------
			  ID: /tmp/hosts
		Function: file.managed
		  Result: True
		 Comment: File /tmp/hosts updated
		 Started: 18:42:34.344385
		Duration: 64.319 ms
		 Changes:   
				  ----------
				  diff:
					  --- 
					  +++ 
					  @@ -1,4 +1,3 @@
					   salt-master    192.168.1.1
					   salt-minion01  192.168.1.2
					   salt-minion02  192.168.1.3
					  -salt-minion03  192.168.1.4

	Summary for minion-dev12-192.168.1.173
	------------
	Succeeded: 1 (changed=1)
	Failed:    0



	[root@zabbix salt]# salt '*'  state.highstate
	minion-dev12-192.168.1.173:
	----------
			  ID: /tmp/hosts
		Function: file.managed
		  Result: True
		 Comment: File /tmp/hosts is in the correct state
		 Started: 18:34:54.551044
		Duration: 21.687 ms
		 Changes:   

	Summary for minion-dev12-192.168.1.173
	------------
	Succeeded: 1
	Failed:    0
	------------
	Total states run:     1
	Total run time:  21.687 ms





	2):规范化的管理
		mkdir /srv/salt/hosts && mv hosts.sls /srv/salt/hosts
		
		salt '*'  state.sls hosts.hosts 
		#hosts.hosts 表示hosts目录下的hosts.sls文件
		[root@zabbix salt]# salt '*'  state.sls hosts.hosts
		minion-dev12-192.168.1.173:
		----------
				  ID: /tmp/hosts
			Function: file.managed
			  Result: True
			 Comment: File /tmp/hosts updated
			 Started: 18:47:11.725849
			Duration: 64.385 ms
			 Changes:   
					  ----------
					  diff:
						  --- 
						  +++ 
						  @@ -1,3 +1,4 @@
						   salt-master    192.168.1.1
						   salt-minion01  192.168.1.2
						   salt-minion02  192.168.1.3
						  +aaaaa

		Summary for minion-dev12-192.168.1.173
		------------
		Succeeded: 1 (changed=1)
		Failed:    0
		------------
		Total states run:     1
		Total run time:  64.385 ms


	#如果需要安装软件,则改为mv hosts.sls init.sls ,给一个默认的init文件。
		salt '*'  state.sls hosts  
		#如果能找到hosts.hosts.sls就执行,如果没有则找init.sls !!!
		
		[root@zabbix salt]# salt '*'  state.sls hosts
		minion-dev12-192.168.1.173:
		----------
				  ID: /tmp/hosts
			Function: file.managed
			  Result: True
			 Comment: File /tmp/hosts updated
			 Started: 18:51:05.357742
			Duration: 39.004 ms
			 Changes:   
					  ----------
					  diff:
						  --- 
						  +++ 
						  @@ -2,3 +2,4 @@
						   salt-minion01  192.168.1.2
						   salt-minion02  192.168.1.3
						   aaaaa
						  +bbbbb

		Summary for minion-dev12-192.168.1.173
		------------
		Succeeded: 1 (changed=1)
		Failed:    0
		------------
		Total states run:     1
		Total run time:  39.004 ms
	
	#vi /srv/salt/h.sls 
	hostname:
		cmd.run
	
		[root@zabbix hosts]# salt '*'  state.sls hosts.h
		minion-dev12-192.168.1.173:
		----------
				  ID: hostname
			Function: cmd.run
			  Result: True
			 Comment: Command "hostname" run
			 Started: 18:54:33.566382
			Duration: 8.697 ms
			 Changes:   
					  ----------
					  pid:
						  24842
					  retcode:
						  0
					  stderr:
					  stdout:
						  design-0012

		Summary for minion-dev12-192.168.1.173
		------------
		Succeeded: 1 (changed=1)
		Failed:    0
		------------
		Total states run:     1
		Total run time:   8.697 ms

6.saltstack proxy代理架构

1.saltstack proxy  架构

	 Master
   |        |
  proxy   proxy ------------------>>>>>>也需要安装salt-master
  | | |   | | |
m1 m2 m2  m4 m5 m6


proxy上需要安装sync来进行同步master上的目录,一个master则不存在文件同步的问题。
Master的执行日志可以存储到Mysql上。

使用的核心组件为:salt syndic
3个重要参数:
	syndic_master: 更高级别master的ip地址
	syndic_log_file:  syndic日志文件的路径(绝对路径或相对路径均可)

	order_masters: True 【官方文档没有介绍,如果不加该参数则不进行转发】


1):proxy节点安装
	安装yum install -y salt-master
	安装yum install -y salt-syndic
	vi /etc/salt/master  
	syndic_master: 192.168.1.181  #添加salt-master节点地址
	syndic_log_file: /var/log/salt/syndic
	order_masters: True

	重启salt-master 和 salt-syndic



2):配置minion到proxy节点
	vi /etc/salt/minion
	master: 192.168.1.150
	or
	master: 192.168.1.219




3):清理salt-key认证,从master-->proxy--->minion
	master:
		cd /etc/salt/master 
		salt-key -D -y && rm -rf pki
		systemctl restart salt-master


	proxy:
		cd /etc/salt/
		salt-key -D -y && rm -rf pki
		systemctl restart salt-master  && systemctl restart salt-syndic
		#如果proxy有2台则进行同样操作


	minion:
		cd /etc/salt
		rm -rf pki


	#最后从master节点开始接受key
	master: salt-key -A -y
	proxy: salt-key -A -y 


	#验证:
	proxy:
		[root@tools-skywalking-test001 salt]# salt '*'  test.ping
		minion-test-xktest001-192.168.1.114:
		    True


		 [root@sonarqube-jenkins02 salt]# salt '*'  test.ping
		 minion-testcat001-192.168.1.48:
		    True



		确认从proxy--->minion通畅




	master:
		[root@zabbix salt]# salt '*'  test.ping
		minion-test-xktest001-192.168.1.114:
		    True
		minion-testcat001-192.168.1.48:
		    True


		确认master--->proxy【因为proxy没有安装minion所有不会显示】---->minion通畅

2.saltstack 双主 架构

Master1     Master2
   |           |
m1 m2 m3    m1  m2  m3


双主是在minion上配置2个master:
vi /etc/salt/minion
master:
  - m1
  - m2


前提是保证minion持续运行能跟2个master持续保持连接。

7.saltstack 生产实践注意事项

1.不建议用salt 的file模块进行:目录管理,代码部署等。
建议用 "命令编排的状态管理":
	压缩包,file.managed
	cmd.run 执行部署

2.不建议使用salt 管理项目的配置文件。
建议用:分层管理,salt只管理服务的配置 例如Nginx Apache Tomcat

3.如果你有固定的文件服务器
可以使用source: salt:// http:// ftp://

4.SLS 版本化

1.在git上创建项目
2.找一个测试环境,编写sls进行测试,提交到仓库
3.生产环境git pull代码,测试完毕后,再全部执行
	可以知道提交变更了什么配置或者文件.

5.使用Master job Cache保存Job的输出Mysql存储
cd /var/cache/salt/jobs

vi /etc/salt/master  #keep_jobs: 24 默认保留24小时

生产的话,最好保留输出到Mysql中保存。

6.saltstack 二次开发
1):Master Job cache 将所有的job出输出保存在Mysql
2):如果做管理平台,可以将User id 和Jid做关联
3):使用List 做目标选择

8.saltstack 安装部署实战

1.练习:安装apache 并启动服务?
1):
[root@zabbix base]# cat apache.sls 
apache-install:
  pkg.installed:
    - name: httpd              

apache-service:
  service.running:
    - name: httpd
    - enable: True



[root@zabbix base]# salt 'minion-test-xktest001-192.168.1.114'  state.sls   apache
minion-test-xktest001-192.168.1.114:
----------
          ID: apache-install
    Function: pkg.installed
        Name: httpd
      Result: True
     Comment: All specified packages are already installed
     Started: 11:11:06.062511
    Duration: 1255.692 ms
     Changes:   
----------
          ID: apache-service
    Function: service.running
        Name: httpd
      Result: True
     Comment: Service httpd has been enabled, and is running
     Started: 11:11:07.319372
    Duration: 221.627 ms
     Changes:   
              ----------
              httpd:
                  True

Summary for minion-test-xktest001-192.168.1.114
------------
Succeeded: 2 (changed=1)
Failed:    0
------------
Total states run:     2
Total run time:   1.477 s

注意:如果想把apache.sls放在目录里分类放,可以在base中mkdir apache或者mkdir web
[root@zabbix base]# mv apache.sls  apache
[root@zabbix base]# salt 'minion-testcat001-192.168.1.48'  state.sls  web.apache



2):创建top.sls来执行apache.sls的高级状态

cd /sr/salt/base
vi top.sls
[root@zabbix base]# cat top.sls 
base:
  'minion-test-xktest001-192.168.1.114':
    - web.apache
  'minion-testcat001-192.168.1.48':
    - web.apache


目录结构如下:执行: salt '*'  state.highstate 

├── top.sls
└── web
	└── apache.sls

2.练习:

使用sls安装nxing,并管理Nginx的配置文件,当Nginx配置文件被修改的时,自动更新配置文件,并重启Nginx?



1.创建sls文件并准备nginx配置文件

mkdir /srv/salt/nginx 
vi init.sls
-------------------------------SLS文件--------------------------------------------------
nginx:
  pkg:
    - installed
  service:
    - running
    - enable: True
    - reload: True
    -watch: #监控下面2个文件有变化重启
      - pkg: nginx
      - file: /etc/nginx/nginx.conf
      - file: /etc/nginx/conf.d/default.conf
/etc/nginx/nginx.conf:
  file.managed:
    - source: salt://etc/nginx/nginx.conf
    - user: root
    - group: root
    - mode: 644
/etc/nginx/conf.d/default.conf:
  file.managed:
    - source: salt://etc/nginx/conf.d/default.conf
    - user: root
    - group: root
    - mode: 644
-----------------------------------------------------------------------------------------

cp /etc/nginx/nginx.conf  /srv/salt/etc/nginx/
cp /etc/nginx/conf.d/default.conf.rpmsave   /srv/salt/etc/nginx/conf.d/default.conf





2.执行salt 安装

cd /srv/salt/nginx  
[root@zabbix nginx]# salt 'minion-test*'  state.sls nginx 
minion-testcat001-192.168.1.48:
----------
          ID: nginx
    Function: pkg.installed
      Result: True
     Comment: The following packages were installed/updated: nginx
     Started: 15:57:16.394723
    Duration: 30605.935 ms
     Changes:   
              ----------
              centos-indexhtml:
                  ----------
                  new:
                      7-9.el7.centos
                  old:
              dejavu-fonts-common:
                  ----------
                  new:
                      2.33-6.el7
                  old:
              dejavu-sans-fonts:
                  ----------
                  new:
                      2.33-6.el7
                  old:
              fontconfig:
                  ----------
                  new:
                      2.13.0-4.3.el7
                  old:
              fontpackages-filesystem:
                  ----------
                  new:
                      1.44-8.el7
                  old:
              gd:
                  ----------
                  new:
                      2.0.35-26.el7
                  old:
              gperftools-libs:
                  ----------
                  new:
                      2.6.1-1.el7
                  old:
              libX11:
                  ----------
                  new:
                      1.6.7-3.el7_9
                  old:
              libX11-common:
                  ----------
                  new:
                      1.6.7-3.el7_9
                  old:
              libXau:
                  ----------
                  new:
                      1.0.8-2.1.el7
                  old:
              libXpm:
                  ----------
                  new:
                      3.5.12-1.el7
                  old:
              libjpeg-turbo:
                  ----------
                  new:
                      1.2.90-8.el7
                  old:
              libxcb:
                  ----------
                  new:
                      1.13-1.el7
                  old:
              libxslt:
                  ----------
                  new:
                      1.1.28-6.el7
                  old:
              nginx:
                  ----------
                  new:
                      1:1.16.1-3.el7
                  old:
              nginx-all-modules:
                  ----------
                  new:
                      1:1.16.1-3.el7
                  old:
              nginx-filesystem:
                  ----------
                  new:
                      1:1.16.1-3.el7
                  old:
              nginx-mod-http-image-filter:
                  ----------
                  new:
                      1:1.16.1-3.el7
                  old:
              nginx-mod-http-perl:
                  ----------
                  new:
                      1:1.16.1-3.el7
                  old:
              nginx-mod-http-xslt-filter:
                  ----------
                  new:
                      1:1.16.1-3.el7
                  old:
              nginx-mod-mail:
                  ----------
                  new:
                      1:1.16.1-3.el7
                  old:
              nginx-mod-stream:
                  ----------
                  new:
                      1:1.16.1-3.el7
                  old:
              openssl11-libs:
                  ----------
                  new:
                      1:1.1.1g-1.el7
                  old:
----------
          ID: /etc/nginx/nginx.conf
    Function: file.managed
      Result: True
     Comment: File /etc/nginx/nginx.conf is in the correct state
     Started: 15:57:47.020842
    Duration: 57.542 ms
     Changes:   
----------
          ID: /etc/nginx/conf.d/default.conf
    Function: file.managed
      Result: True
     Comment: File /etc/nginx/conf.d/default.conf updated
     Started: 15:57:47.078554
    Duration: 21.527 ms
     Changes:   
              ----------
              diff:
                  New file
              mode:
                  0644
----------
          ID: nginx
    Function: service.running
      Result: True
     Comment: Service nginx has been enabled, and is running
     Started: 15:57:47.100388
    Duration: 265.845 ms
     Changes:   
              ----------
              nginx:
                  True

Summary for minion-testcat001-192.168.1.48
------------
Succeeded: 4 (changed=3)
Failed:    0
------------
Total states run:     4
Total run time:  30.951 s
minion-test-xktest001-192.168.1.114:
----------
          ID: nginx
    Function: pkg.installed
      Result: True
     Comment: The following packages were installed/updated: nginx
     Started: 15:57:14.591576
    Duration: 113224.327 ms
     Changes:   
              ----------
              centos-indexhtml:
                  ----------
                  new:
                      7-9.el7.centos
                  old:
              dejavu-fonts-common:
                  ----------
                  new:
                      2.33-6.el7
                  old:
              dejavu-sans-fonts:
                  ----------
                  new:
                      2.33-6.el7
                  old:
              fontconfig:
                  ----------
                  new:
                      2.13.0-4.3.el7
                  old:
              fontpackages-filesystem:
                  ----------
                  new:
                      1.44-8.el7
                  old:
              gd:
                  ----------
                  new:
                      2.0.35-26.el7
                  old:
              gperftools-libs:
                  ----------
                  new:
                      2.6.1-1.el7
                  old:
              libX11:
                  ----------
                  new:
                      1.6.7-3.el7_9
                  old:
              libX11-common:
                  ----------
                  new:
                      1.6.7-3.el7_9
                  old:
              libXau:
                  ----------
                  new:
                      1.0.8-2.1.el7
                  old:
              libXpm:
                  ----------
                  new:
                      3.5.12-1.el7
                  old:
              libjpeg-turbo:
                  ----------
                  new:
                      1.2.90-8.el7
                  old:
              libxcb:
                  ----------
                  new:
                      1.13-1.el7
                  old:
              libxslt:
                  ----------
                  new:
                      1.1.28-6.el7
                  old:
              nginx:
                  ----------
                  new:
                      1:1.16.1-3.el7
                  old:
              nginx-all-modules:
                  ----------
                  new:
                      1:1.16.1-3.el7
                  old:
              nginx-filesystem:
                  ----------
                  new:
                      1:1.16.1-3.el7
                  old:
              nginx-mod-http-image-filter:
                  ----------
                  new:
                      1:1.16.1-3.el7
                  old:
              nginx-mod-http-perl:
                  ----------
                  new:
                      1:1.16.1-3.el7
                  old:
              nginx-mod-http-xslt-filter:
                  ----------
                  new:
                      1:1.16.1-3.el7
                  old:
              nginx-mod-mail:
                  ----------
                  new:
                      1:1.16.1-3.el7
                  old:
              nginx-mod-stream:
                  ----------
                  new:
                      1:1.16.1-3.el7
                  old:
              openssl11-libs:
                  ----------
                  new:
                      1:1.1.1g-1.el7
                  old:
----------
          ID: /etc/nginx/nginx.conf
    Function: file.managed
      Result: True
     Comment: File /etc/nginx/nginx.conf is in the correct state
     Started: 15:59:07.833296
    Duration: 37.33 ms
     Changes:   
----------
          ID: /etc/nginx/conf.d/default.conf
    Function: file.managed
      Result: True
     Comment: File /etc/nginx/conf.d/default.conf updated
     Started: 15:59:07.870829
    Duration: 19.161 ms
     Changes:   
              ----------
              diff:
                  New file
              mode:
                  0644
----------
          ID: nginx
    Function: service.running
      Result: True
     Comment: Service nginx has been enabled, and is running
     Started: 15:59:07.890284
    Duration: 313.406 ms
     Changes:   
              ----------
              nginx:
                  True

Summary for minion-test-xktest001-192.168.1.114
------------
Succeeded: 4 (changed=3)
Failed:    0
------------
Total states run:     4
Total run time: 113.594 s






3.检测是否安装nginx包


[root@zabbix nginx]# salt 'minion-test*'  cmd.run 'rpm -qa|grep nginx'
minion-testcat001-192.168.1.48:
    nginx-mod-mail-1.16.1-3.el7.x86_64
    nginx-1.16.1-3.el7.x86_64
    nginx-filesystem-1.16.1-3.el7.noarch
    nginx-mod-http-perl-1.16.1-3.el7.x86_64
    nginx-mod-stream-1.16.1-3.el7.x86_64
    nginx-mod-http-image-filter-1.16.1-3.el7.x86_64
    nginx-mod-http-xslt-filter-1.16.1-3.el7.x86_64
    nginx-all-modules-1.16.1-3.el7.noarch
minion-test-xktest001-192.168.1.114:
    nginx-mod-stream-1.16.1-3.el7.x86_64
    nginx-mod-mail-1.16.1-3.el7.x86_64
    nginx-mod-http-xslt-filter-1.16.1-3.el7.x86_64
    nginx-1.16.1-3.el7.x86_64
    nginx-all-modules-1.16.1-3.el7.noarch
    nginx-filesystem-1.16.1-3.el7.noarch
    nginx-mod-http-perl-1.16.1-3.el7.x86_64
    nginx-mod-http-image-filter-1.16.1-3.el7.x86_64






4.修改配置文件,让Minion端更新重启【定时更新重启】
	1):master:  
		cd /srv/salt/etc/nginx/conf.d
		vi  default.conf
		listen       8080 #8091改为8080



	2):minion端执行命令,更新master端修改后的配置,并重启nginx,去master查找nginx.sls文件,如果没有则执行init.sls文件:
		[root@test-xkcat001 ~]# salt-call state.sls  nginx 
		local:
		----------
		          ID: nginx
		    Function: pkg.installed
		      Result: True
		     Comment: All specified packages are already installed
		     Started: 10:16:01.410080
		    Duration: 1256.837 ms
		     Changes:   
		----------
		          ID: /etc/nginx/nginx.conf
		    Function: file.managed
		      Result: True
		     Comment: File /etc/nginx/nginx.conf is in the correct state
		     Started: 10:16:02.670970
		    Duration: 29.205 ms
		     Changes:   
		----------
		          ID: /etc/nginx/conf.d/default.conf
		    Function: file.managed
		      Result: True
		     Comment: File /etc/nginx/conf.d/default.conf updated
		     Started: 10:16:02.700376
		    Duration: 26.272 ms
		     Changes:   
		              ----------
		              diff:
		                  --- 
		                  +++ 
		                  @@ -4,7 +4,7 @@
		                   
		                   server {
		                   
		                  -    listen       8091;
		                  +    listen       8080;
		                       server_name  disconf.com;
		                   
		                       #charset koi8-r;
		----------
		          ID: nginx
		    Function: service.running
		      Result: True
		     Comment: Service reloaded
		     Started: 10:16:02.835062
		    Duration: 80.04 ms
		     Changes:   
		              ----------
		              nginx:
		                  True

		Summary for local
		------------
		Succeeded: 4 (changed=2)
		Failed:    0
		------------
		Total states run:     4
		Total run time:   1.392 s



	3):如果想要定时更新
		a.将salt-call state.sls  nginx 写入crontab中定时执行。


		b.pillar的schedule

		schedule:
		  highstate:
		    function:state.highstate
		    minutes:1



		  salt '*'   saltutil.refresh_pillar

		官方文档:http://docs.saltstack.cn/topics/jobs/index.html
		官方示例1:
		schedule:
		  log-loadavg:
		    function: cmd.run #函数运行一个命令
		    seconds: 3660
		    args: #传参数
		      - 'logger -t salt < /proc/loadavg'
		    kwargs: #传字典
		      stateful: False
		      shell: /bin/sh


		 #要是用pillar需要释放该模块vi /etc/salt/master  找到pillar_roots

		 mkdir /srv/pillar

		 #pillar模块必须添加top.sls 
		 vi top.sls
		 ---------------------------
		 base:  #匹配环境
		   '*': #匹配主机范围
		     - nginx #执行nginx这个动作,是pillar下nginx目录
		-----------------------------
		也可以,这种匹配方式有点问题:
		base:
		  test: #匹配master文件中nodegroups的test分组
		    - match: nodegroups
		    - nginx
		-------------------------------

		创建nginx.sls或者init.sls文件
		mkdir /srv/pillar/nginx 
		 vi init.sls
		 schedule:
		   nginx:
		     function: state.sls
		     minutes: 1
		     args:
		       - 'nginx' 
		       #因为我们在/srv/pillar/nginx/init.sls ,所以直接写nginx会默认找init.sls文件,如果没有init.sls则需要写nginx.nginx来找nginx.sls文件。




	
		 [root@zabbix pillar]# salt  '*'  pillar.data
			minion-testcat001-192.168.1.48:
			    ----------
			    schedule:
			        ----------
			        nginx:
			            ----------
			            args:
			                - nginx
			            function:
			                state.sls
			            minutes:
			                1
			minion-test-xktest001-192.168.1.114:
			    ----------
			    schedule:
			        ----------
			        nginx:
			            ----------
			            args:
			                - nginx
			            function:
			                state.sls
			            minutes:
			                1

	     #如果没有执行,则执行刷新操作!
		[root@zabbix nginx]# salt '*'  saltutil.refresh_pillar
		minion-dev12-192.168.1.173:
		    True
		minion-testcat001-192.168.1.48:
		    True
		minion-test-xktest001-192.168.1.114:
		    True



		#再次验证:修改master:vi /srv/salt/etc/nginx/conf.d/default.conf  中端口号8080-->>>>8091
		[root@cat-test ~]# netstat -tunpl|grep 8080
		[root@cat-test ~]# netstat -tunpl|grep 8080
		[root@cat-test ~]# netstat -tunpl|grep 8081
		[root@cat-test ~]# netstat -tunpl|grep 8091
		tcp        0      0 0.0.0.0:8091            0.0.0.0:*               LISTEN      23899/nginx: master 

		右上图看出,8080端口号消失了,出现了8091端口的nginx进程。

3.安装LAMP(Apache,Mysql,PHP)环境?

上述安装后,LAMP您会了麽,动手做一做。

标签:实战,入门,minion,192.168,nginx,test,----------,saltstack,salt
来源: https://blog.csdn.net/meijinmeng/article/details/116721687