saltstack-的日常使用 (二)

更多关注：http://www.mknight.cn/
注意在6和7不同的系统版本，执行的命令是不一样的，比如salt '*' service.restart salt-minion只支持6.

常用命令

查看IP
salt '*' network.interface_ip eth0

管理Key

复制Key

将authorized_keys创建软链到salt://files/keys/。

keys:
  file.managed:
    - name: /root/.ssh/authorized_keys
    - source: salt://files/keys/authorized_keys
    - mode: 600
    - user: root
    - backup: minion

backup 将在minion备份，以时间命名，保存在/var/cache/salt/minion/file_backup。如果没有就新建。

file.list_backups 检查备份信息

 salt '*' file.list_backups /root/.ssh/authorized_keys
 [root@test keys]# salt '*' file.list_backups /root/.ssh/authorized_keys
xx-1:
    ----------
    0:
        ----------
        Backup Time:
            Wed Aug 30 2017 15:34:51.097279
        Location:
            /var/cache/salt/minion/file_backup/root/.ssh/authorized_keys_Wed_Aug_30_15:34:51_097279_2017
        Size:
            1479
xx-2:
    ----------
    0:
        ----------
        Backup Time:
            Wed Aug 30 2017 15:34:50.605990
        Location:
            /var/cache/salt/minion/file_backup/root/.ssh/authorized_keys_Wed_Aug_30_15:34:50_605990_2017
        Size:
            1479
    1:
        ----------
        Backup Time:
            Wed Aug 30 2017 15:10:25.541514
        Location:
            /var/cache/salt/minion/file_backup/root/.ssh/authorized_keys_Wed_Aug_30_15:10:25_541514_2017
        Size:
            1219

如果不需要，则可以删除+ 序列号

# salt foo.bar.com file.delete_backup /tmp/foo.txt 0

salt '*' state.sls services.keys.keys

管理其他用户的Key

user_add:
  user.present:
    - name: devlog
    - shell: /bin/bash
    - home: /home/devlog
    - system: True
    - groups:
      - wheel
user_ssh:
  file.directory:
    - name: /home/devlog/.ssh/
    - require:
      - user: user_add
user_keys:
  file.managed:
    - name: /home/devlog/.ssh/authorized_keys
    - source: salt://files/keys/devlog_authorized_keys
    - mode: 600
    - user: devlog
    - require:
      - file: user_ssh

安装服务

yum安装

salt 'docker' state.sls services.redis.redis

redis-install:
  pkg:
    - name: redis
    - installed
redis-data:
  file.directory:
    - name: /opt/redis/data6380
    - makedirs: True
redis-config-dir:
  file.directory:
    - name: /etc/redis
    - makedirs: True
redis-config:
  file.managed:
    - name: /etc/redis/6380.conf
    - source: salt://services/redis/files/6380.conf
redis-service:
  cmd.run:
    - name:  /usr/bin/redis-server /etc/redis/6380.conf

注意：

• file.directory 是对目录的管理；
• file.managed是对文件的管理

解压安装

redis_source:
  file.managed:
    - name: /usr/src/redis.2.8.tar.gz
    - unless: test -f /usr/src/redis.2.8.tar.gz
    - source: salt://services/redis/files/redis.2.8.tar.gz
redis_tar:
  cmd.run:
    - cwd: /usr/src
    - name: mkdir /usr/local/redis && tar zxvf redis.2.8.tar.gz -C /usr/local/
    - unless: test -f /usr/src/redis.2.8.tar.gz
    - require:
      - file: redis_source
redis_data:
  file.directory:
    - name: /opt/redis/data6380
    - unless: test -d /opt/redis/data6380
    - makedirs: True
redis_config_dir:
  file.directory:
    - name: /etc/redis
    - unless: test -d /etc/redis
    - makedirs: True
redis_config:
  file.managed:
    - name: /etc/redis/6380.conf
    - source: salt://services/redis/files/6380.conf
redis_service:
  cmd.run:
    - name:  /usr/local/redis/bin/redis-server /etc/redis/6380.conf
    - require:
      - file: redis_data
      - file: redis_config

注意：

• require 依赖某个state，在运行此state前，先运行依赖的state，依赖可以有多个。满足条件后才执行

模板

配置piller

/srv/pillar
top.sls

base:
 '*':
  - redis

redis.sls

redis:
  HOST: {{ grains['fqdn_ip4'][1] }}
  PORT: 6380

配置文件

daemonize yes
pidfile /var/run/redis/redis{{ PORT }}.pid
port {{ PORT  }}
bind {{ HOST  }}
dir                         /opt/redis/data{{ PORT }}
timeout 0
requirepass                 'XXXXXXXXX'

sls

redis_source:
  file.managed:
    - name: /usr/src/redis.2.8.tar.gz
    - unless: test -f /usr/src/redis.2.8.tar.gz
    - source: salt://services/redis/files/redis.2.8.tar.gz
redis_tar:
  cmd.run:
    - cwd: /usr/src
    - name: mkdir /usr/local/redis && tar zxvf redis.2.8.tar.gz -C /usr/local/
    - unless: test -f /usr/src/redis.2.8.tar.gz
    - require:
      - file: redis_source
redis_data:
  file.directory:
    - name: /opt/redis/data{{ pillar['redis']['PORT'] }}
    - unless: test -d /opt/redis/data{{pillar['redis']['PORT']}}
    - makedirs: True
redis_config_dir:
  file.directory:
    - name: /etc/redis
    - unless: test -d /etc/redis
    - makedirs: True
redis_config:
  file.managed:
    - name: /etc/redis/{{pillar['redis']['PORT']}}.conf
    - source: salt://services/redis/files/redis.conf
    - template: jinja #渲染配置文件，引用变量
    - PORT: {{ pillar['redis']['PORT'] }}
    - HOST: {{ pillar['redis']['HOST'] }}
redis_service:
  cmd.run:
    - name:  /usr/local/redis/bin/redis-server /etc/redis/{{ pillar['redis']['PORT'] }}.conf
    - require:
      - file: redis_data
      - file: redis_config

更多关注：http://www.mknight.cn/