面向云管理工具puppet的部署和测试
[root@rhel6u3-102 puppet]# uname -r
2.6.32-279.el6.x86_64
[root@rhel6u3-102 puppet]# cat /etc/redhat-release
Red Hat Enterprise Linux Server release 6.3 (Santiago)
yum install ruby ruby-libs ruby-shadow compat-readline5 libselinux-ruby augeas-libs
rpm -ivh facter-1.6.6-1.el6.x86_64.rpm puppet-2.6.18-3.el6.noarch.rpm puppet-server-2.6.18-3.el6.noarch.rpm ruby-augeas-0.4.1-1.el6.x86_64.rpm ruby-mysql-2.8.2-1.el6.x86_64.rpm ruby-shadow-1.4.1-13.el6.x86_64.rpm
yum install ruby ruby-libs ruby-shadow compat-readline5 libselinux-ruby augeas-libs
rpm -ivh facter-1.6.6-1.el6.x86_64.rpm puppet-2.6.18-3.el6.noarch.rpm ruby-augeas-0.4.1-1.el6.x86_64.rpm ruby-mysql-2.8.2-1.el6.x86_64.rpm ruby-shadow-1.4.1-13.el6.x86_64.rpm
sed -e '/#/d' -e '/^$/d' puppet.conf
#puppetmasterd --genconfig >puppet.conf.out
[root@rhel6u3-102 puppet]# sed -e '/#/d' -e '/^$/d' puppet.conf.out
[master]
ssldir = /var/lib/puppet/ssl
factdest = /var/lib/puppet/facts/
privatekeydir = /var/lib/puppet/ssl/private_keys
rundir = /var/run/puppet
hostcsr = /var/lib/puppet/ssl/csr_rhel6u3-102.rsyslog.org.pem
hostpubkey = /var/lib/puppet/ssl/public_keys/rhel6u3-102.rsyslog.org.pem
plugindest = /var/lib/puppet/lib
inventory_terminus = yaml
publickeydir = /var/lib/puppet/ssl/public_keys
factsource = puppet://puppet/facts/
privatedir = /var/lib/puppet/ssl/private
logdir = /var/log/puppet
libdir = /var/lib/puppet/lib
statedir = /var/lib/puppet/state
hostcert = /var/lib/puppet/ssl/certs/rhel6u3-102.rsyslog.org.pem
localcacert = /var/lib/puppet/ssl/certs/ca.pem
pluginsource = puppet://puppet/plugins
certdir = /var/lib/puppet/ssl/certs
factpath = /var/lib/puppet/lib/facter:/var/lib/puppet/facts
httplog = /var/log/puppet/http.log
requestdir = /var/lib/puppet/ssl/certificate_requests
passfile = /var/lib/puppet/ssl/private/password
hostprivkey = /var/lib/puppet/ssl/private_keys/rhel6u3-102.rsyslog.org.pem
hostcrl = /var/lib/puppet/ssl/crl.pem
authconfig = /etc/puppet/namespaceauth.conf
localconfig = /var/lib/puppet/state/localconfig
client_datadir = /var/lib/puppet/client_data
reportserver = puppet
inventory_server = puppet
ca_server = puppet
lastrunreport = /var/lib/puppet/state/last_run_report.yaml
node_name_value = rhel6u3-102.rsyslog.org
statefile = /var/lib/puppet/state/state.yaml
clientbucketdir = /var/lib/puppet/clientbucket
classfile = /var/lib/puppet/state/classes.txt
report_server = puppet
inventory_port = 8140
ca_port = 8140
puppetdlockfile = /var/lib/puppet/state/puppetdlock
splaylimit = 1800
clientyamldir = /var/lib/puppet/client_yaml
puppetdlog = /var/log/puppet/puppetd.log
report_port = 8140
lastrunfile = /var/lib/puppet/state/last_run_summary.yaml
graphdir = /var/lib/puppet/state/graphs
capub = /var/lib/puppet/ssl/ca/ca_pub.pem
csrdir = /var/lib/puppet/ssl/ca/requests
autosign = /etc/puppet/autosign.conf
cert_inventory = /var/lib/puppet/ssl/ca/inventory.txt
cacert = /var/lib/puppet/ssl/ca/ca_crt.pem
cacrl = /var/lib/puppet/ssl/ca/ca_crl.pem
signeddir = /var/lib/puppet/ssl/ca/signed
serial = /var/lib/puppet/ssl/ca/serial
ca_name = Puppet CA: rhel6u3-102.rsyslog.org
cakey = /var/lib/puppet/ssl/ca/ca_key.pem
caprivatedir = /var/lib/puppet/ssl/ca/private
capass = /var/lib/puppet/ssl/ca/private/ca.pass
cadir = /var/lib/puppet/ssl/ca
railslog = /var/log/puppet/rails.log
dblocation = /var/lib/puppet/state/clientconfigs.sqlite3
rest_authconfig = /etc/puppet/auth.conf
modulepath = /etc/puppet/modules:/usr/share/puppet/modules
yamldir = /var/lib/puppet/yaml
reportdir = /var/lib/puppet/reports
masterlog = /var/log/puppet/puppetmaster.log
server_datadir = /var/lib/puppet/server_data
config = /etc/puppet/puppet.conf
pidfile = /var/run/puppet/master.pid
manifestdir = /etc/puppet/manifests
masterhttplog = /var/log/puppet/masterhttp.log
bucketdir = /var/lib/puppet/bucket
fileserverconfig = /etc/puppet/fileserver.conf
manifest = /etc/puppet/manifests/site.pp
templatedir = /var/lib/puppet/templates
tagmap = /etc/puppet/tagmail.conf
archive_file_server = puppet
rrddir = /var/lib/puppet/rrd
rrdinterval = 1800
vim /etc/puppet/puppet.conf
[master]
certname=rhel6u3-102.rsyslog.org \\设置puppet认证服务器主机名
# touch /etc/puppet/manifests/site.pp
# /etc/rc.d/init.d/puppetmaster start
#puppet master --verbose --no-daemonize --debug
vim /etc/puppet/puppet.conf
[main]
server=rhel6u3-102.rsyslog.org
# /etc/rc.d/init.d/puppet start
# puppet agent --verbose –no-daemonize
#puppet cert --list \\查看等待注册的节点
#puppet cert --sign rhel6u3-207.rsyslog.org \\注册指定节点
# puppet cert --sign all \\注册所有等待注册的节点
# vim /etc/puppet/manifests/site.pp
$puppetserver = 'rhel6u3-102.rsyslog.org'
import 'nodes/*'
#mkdir /etc/puppet/manifests/nodes -p
# vim /etc/puppet/manifests/nodes/nodes.pp
node 'rhel6u3-207.rsyslog.org'{
include myfile
package { 'vim-enhanced': ensure => present }
}
#node /^rhel6u3-\d+\.rsyslog.org'{
# include myfile
#}
vim /etc/puppet/puppet.conf
[main]
modulepath=/etc/puppet/modules:/var/lib/puppet/modules:/usr/local/lib/puppet/modules
# mkdir /etc/puppet/modules -p
#mkdir -vp /etc/puppet/modules/myfile/{files,templates,manifests}
manifests目录存放模块配置文件,files目录存放模块包含的文件,templates目录存
放模块中的模板
vim /etc/puppet/modules/myfile/manifests/init.pp
class myfile {
package{ setup:
ensure => present,
}
file{ "/etc/myfile":
owner => "root",
group => "root",
mode => 644,
source => "puppet://$puppetserver/modules/myfile/files/etc/myfile",
require => Package["setup"],
}
}
# mkdir /etc/puppet/modules/myfile/files/etc -p
#echo "Hello Puppet" >/etc/puppet/modules/myfile/files/etc/myfile
[root@rhel6u3-207 puppet]# cat /etc/myfile
Hello Puppet
#puppet agent --server=rhel6u3-102.rsyslog.org --no-daemonize --verbose
--noop --onetime
# puppet agent --server=rhel6u3-102.rsyslog.org --no-daemonize --verbose --noop --onetime
info: Caching catalog for rhel6u3-207.rsyslog.org
info: Applying configuration version '1366705990'
notice: Finished catalog run in 0.20 seconds
vim /etc/puppet/puppet.conf 添加以下字段
[agent]
runinterval=5
# date >>/etc/puppet/modules/myfile/files/etc/myfile
cat /etc/myfile
Hello Puppet
2013年 04月 23日 星期二 16:52:58 CST
免责声明:本站发布的内容(图片、视频和文字)以原创、转载和分享为主,文章观点不代表本网站立场,如果涉及侵权请联系站长邮箱:is@yisu.com进行举报,并提供相关证据,一经查实,将立刻删除涉嫌侵权内容。