Saltstack常用的模块
- 1.SaltStack模块介绍
- 2.SaltStack常用模块
- 2.1 SaltStack常用模块之network
- 2.1.1 network.active_tcp
- 2.1.2 network.calc_net
- 2.1.3 network.connect
- 2.1.4 network.default_route
- 2.1.5 network.get_fqdn
- 2.1.6 network.get_hostname
- 2.1.7 network.get_route
- 2.1.8 network.hw_addr
- 2.1.9 network.ifacestartswith
- 2.1.10 network.in_subnet
- 2.1.11 network.interface
- 2.1.12 network.interface_ip
- 2.1.13 network.interfaces
- 2.1.14network.ip_addrs
- 2.1.15network.netstat
- 2.1.16network.ping
- 2.1.17network.reverse_ip
- 2.2 SaltStack常用模块之service
- 2.3 SaltStack常用模块之pkg
- 2.4 SaltStack常用模块之state
- 2.5 SaltStack常用模块之salt-cp
- 2.6 SaltStack常用模块之file
- 2.6.1 file.access
- 2.6.2 file.append
- 2.6.3 file.basename
- 2.6.4 file.dirname
- 2.6.5 file.check_hash
- 2.6.6 file.chattr
- 2.6.7 file.chown
- 2.6.8 file.copy
- 2.6.9 file.ditectory_exists
- 2.6.10 file.diskusage
- 2.6.11 file.file_exists
- 2.6.12 file.find
- 2.6.13 file.get_gid
- 2.6.14 file.get_group
- 2.6.15 file.get_hash
- 2.6.16 file.get_mode
- 2.6.17 file.get_selinux_context
- 2.6.18 file.get_sum
- 2.6.19 file.get_uid与file.get_user
- 2.6.20 file.gid_to_group
- 2.6.21 file.group_to_gid
- 2.6.22 file.grep
- 2.6.23 file.is_blkdev
- 2.6.24 file.lsattr
- 2.6.25 file.mkdir
- 2.6.26 file.move
- 2.6.27 file.prepend
- 2.6.28 file.sed
- 2.6.29 file.read
- 2.6.30 file.readdir
- 2.6.31 file.remove
- 2.6.32 file.rename
- 2.6.33 file.set_mode
- 2.6.34 file.symlink
- 2.6.35 file.touch
- 2.6.36 file.uid_to_user
- 2.6.37 file.user_to_uid
- 2.6.38 file.write
- 2.7 SaltStack模板之user及group相关模块
- 2.8 Saltstack常用模板之cron
- 2.9 SaltStack常用模块之acl
1.SaltStack模块介绍
Module是日常使用SaltStack接触最多的一个组件，其用于管理对象操作，这也是SaltStack通过Push的方式进行管理的入口，比如我们日常简单的执行命令、查看包安装情况、查看服务运行情况等工作都是通过SaltStack Module来实现的。
当安装好Master和Minion包后，系统上会安装很多Module，大家可以通过以下命令查看支持的所有Module列表：
//查看所有module列表
[root@master ~]# salt 'node1' sys.list_modules
node1:
- acl
- aliases
- alternatives
- ansible
- archive
- artifactory
- at
- baredoc
- beacons
- bigip
- btrfs
- buildout
- chroot
- cloud
- cmd
- composer
- config
-此处省略n行
//查看指定module的所有function
[root@master ~]# salt 'node1' sys.list_functions cmd
node1:
- cmd.exec_code
- cmd.exec_code_all
- cmd.has_exec
- cmd.powershell
- cmd.powershell_all
- cmd.retcode
- cmd.run
- cmd.run_all
- cmd.run_bg
- cmd.run_chroot
- cmd.run_stderr
- cmd.run_stdout
- cmd.script
- cmd.script_retcode
- cmd.shell
- cmd.shell_info
- cmd.shells
- cmd.tty
- cmd.which
- cmd.which_bin
//查看指定module的用法
[root@master ~]# salt 'node1' sys.doc cmd
'cmd.exec_code:'
Pass in two strings, the first naming the executable language, aka -
python2, python3, ruby, perl, lua, etc. the second string containing
the code you wish to execute. The stdout will be returned.
CLI Example:
salt '*' cmd.exec_code ruby 'puts "cheese"'
...此处省略N行...
///SaltStack默认也支持一次执行多个Module，Module之间通过逗号隔开，默认传参之间也是用逗号分隔，也支持指定传参分隔符号--args-separator=@即可
[root@master ~]# salt 'node1' test.echo,cmd.run,service.status hello,hostname,salt-minion
node1:
----------
cmd.run:
node1
service.status:
True
test.echo:
hello
2.SaltStack常用模块
2.1 SaltStack常用模块之network
2.1.1 network.active_tcp
返回所有活动的tcp连接
node1:
----------
0:
----------
local_addr:
192.168.147.55
local_port:
54108
remote_addr:
192.168.147.33
remote_port:
4505
1:
----------
local_addr:
192.168.147.55
local_port:
22
remote_addr:
192.168.147.1
remote_port:
13269
----此处省略n行
master:
----------
0:
----------
local_addr:
192.168.147.33
local_port:
22
remote_addr:
192.168.147.1
remote_port:
5451
1:
----------
local_addr:
192.168.147.33
local_port:
4505
remote_addr:
192.168.147.33
remote_port:
40872
----此处省略n行
2.1.2 network.calc_net
通过IP和子网掩码计算出网段
[root@master ~]# salt '*' network.calc_net 192.168.147.33 255.255.255.0
node1:
192.168.147.0/24
master:
192.168.147.0/24
[root@master ~]# salt '*' network.calc_net 192.168.147.33 255.255.255.240
node1:
192.168.147.32/28
master:
192.168.147.32/28
2.1.3 network.connect
测试minion至某一台服务器的网络是否连通
[root@master ~]# salt '*' network.connect baidu.com 80
master:
----------
comment:
Successfully connected to baidu.com (39.156.69.79) on tcp port 80
result:
True
node1:
----------
comment:
Successfully connected to baidu.com (39.156.69.79) on tcp port 80
result:
True
2.1.4 network.default_route
查看默认路由
[root@master ~]# salt '*' network.default_route
master:
|_
----------
addr_family:
inet
destination:
0.0.0.0
flags:
UG
gateway:
192.168.147.2
interface:
ens33
netmask:
0.0.0.0
|_
----------
addr_family:
inet6
destination:
::/0
flags:
!n
gateway:
::
interface:
lo
netmask:
|_
----------
addr_family:
inet6
destination:
::/0
flags:
!n
gateway:
::
interface:
lo
netmask:
node1:
|_
----------
addr_family:
inet
destination:
0.0.0.0
flags:
UG
gateway:
192.168.147.2
interface:
ens33
netmask:
0.0.0.0
|_
----------
addr_family:
inet6
destination:
::/0
flags:
!n
gateway:
::
interface:
lo
netmask:
|_
----------
addr_family:
inet6
destination:
::/0
flags:
!n
gateway:
::
interface:
lo
netmask:
2.1.5 network.get_fqdn
查看主机的fqdn（完全限定域名）
[root@master ~]# salt '*' network.get_fqdn
master:
master
node1:
node1
2.1.6 network.get_hostname
获取主机名
[root@master ~]# salt '*' network.get_hostname
master:
master
node1:
node1
2.1.7 network.get_route
查询到一个目标网络的路由信息
[root@master ~]# salt '*' network.get_route 192.168.147.55
node1:
----------
destination:
192.168.147.55
gateway:
None
interface:
lo
source:
192.168.147.55
master:
----------
destination:
192.168.147.55
gateway:
None
interface:
ens33
source:
192.168.147.33
2.1.8 network.hw_addr
返回指定网卡的MAC地址
[root@master ~]# salt '*' network.hw_addr ens33
node1:
00:0c:29:e1:dd:18
master:
00:0c:29:02:ac:c7
2.1.9 network.ifacestartswith
从特定CIDR检索接口名称
[root@master ~]# salt '*' network.ifacestartswith 192.168
master:
- ens33
node1:
- ens33
2.1.10 network.in_subnet
判断当前主机是否在某一个网段内
[root@master ~]# salt '*' network.in_subnet 192.168.147.0/24
master:
True
node1:
True
2.1.11 network.interface
返回指定网卡的信息
[root@master ~]# salt '*' network.interface ens33
master:
|_
----------
address:
192.168.147.33
broadcast:
192.168.147.255
label:
ens33
netmask:
255.255.255.0
node1:
|_
----------
address:
192.168.147.55
broadcast:
192.168.147.255
label:
ens33
netmask:
255.255.255.0
2.1.12 network.interface_ip
返回指定网卡的IP地址
[root@master ~]# salt '*' network.interface_ip ens33
master:
192.168.147.33
node1:
192.168.147.55
2.1.13 network.interfaces
返回当前系统中所有的网卡信息
[root@master ~]# salt '*' network.interfaces
master:
----------
ens33:
----------
hwaddr:
00:0c:29:02:ac:c7
inet:
|_
----------
address:
192.168.147.33
broadcast:
192.168.147.255
label:
ens33
netmask:
255.255.255.0
inet6:
|_
----------
address:
fe80::b1d6:f0c4:330a:bd51
prefixlen:
64
scope:
link
up:
True
lo:
----------
hwaddr:
00:00:00:00:00:00
inet:
|_
----------
address:
127.0.0.1
broadcast:
None
label:
lo
netmask:
255.0.0.0
inet6:
|_
----------
address:
::1
prefixlen:
128
scope:
host
up:
True
node1:
----------
ens33:
----------
hwaddr:
00:0c:29:e1:dd:18
inet:
|_
----------
address:
192.168.147.55
broadcast:
192.168.147.255
label:
ens33
netmask:
255.255.255.0
inet6:
|_
----------
address:
fe80::bbf3:80da:49bd:f61b
prefixlen:
64
scope:
link
up:
True
lo:
----------
hwaddr:
00:00:00:00:00:00
inet:
|_
----------
address:
127.0.0.1
broadcast:
None
label:
lo
netmask:
255.0.0.0
inet6:
|_
----------
address:
::1
prefixlen:
128
scope:
host
up:
True
2.1.14network.ip_addrs
返回一个IP v4的地址列表
该函数将会忽略掉127.0.0.1的地址
[root@master ~]# salt '*' network.ip_addrs
node1:
- 192.168.147.55
master:
- 192.168.147.33
2.1.15network.netstat
返回所有打开的端口和状态
[root@master ~]# salt '*' network.netstat
master:
|_
----------
inode:
28578
local-address:
0.0.0.0:22
program:
1027/sshd
proto:
tcp
recv-q:
0
remote-address:
0.0.0.0:*
send-q:
0
state:
LISTEN
---此处省略n行
node1:
|_
----------
inode:
29090
local-address:
0.0.0.0:22
program:
1029/sshd
proto:
tcp
recv-q:
0
remote-address:
0.0.0.0:*
send-q:
0
state:
----此处省略n行
2.1.16network.ping
使用ping命令测试到某主机的连通性
[root@master ~]# salt '*' network.ping baidu.com
node1:
PING baidu.com (39.156.69.79) 56(84) bytes of data.
64 bytes from 39.156.69.79 (39.156.69.79): icmp_seq=1 ttl=128 time=25.9 ms
64 bytes from 39.156.69.79 (39.156.69.79): icmp_seq=2 ttl=128 time=33.1 ms
64 bytes from 39.156.69.79 (39.156.69.79): icmp_seq=3 ttl=128 time=28.2 ms
64 bytes from 39.156.69.79 (39.156.69.79): icmp_seq=4 ttl=128 time=26.5 ms
--- baidu.com ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3006ms
rtt min/avg/max/mdev = 25.882/28.444/33.123/2.838 ms
master:
PING baidu.com (39.156.69.79) 56(84) bytes of data.
64 bytes from 39.156.69.79 (39.156.69.79): icmp_seq=1 ttl=128 time=25.7 ms
64 bytes from 39.156.69.79 (39.156.69.79): icmp_seq=2 ttl=128 time=30.3 ms
64 bytes from 39.156.69.79 (39.156.69.79): icmp_seq=3 ttl=128 time=27.4 ms
64 bytes from 39.156.69.79 (39.156.69.79): icmp_seq=4 ttl=128 time=26.4 ms
--- baidu.com ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3006ms
rtt min/avg/max/mdev = 25.665/27.430/30.296/1.763 ms
2.1.17network.reverse_ip
返回一个指定的IP地址的反向地址
[root@master ~]# salt '*' network.reverse_ip 192.168.147.55
master:
55.147.168.192.in-addr.arpa
node1:
55.147.168.192.in-addr.arpa
2.2 SaltStack常用模块之service
2.2.1 service.available
判断指定的服务是否可用
[root@master ~]# salt '*' service.available sshd
node1:
True
master:
True
[root@master ~]# salt '*' service.available vsftpd
master:
False
node1:
False
2.2.2 service.get_all
获取所有正在运行的服务
[root@master ~]# salt '*' service.get_all
node1:
- NetworkManager
- NetworkManager-dispatcher
- NetworkManager-wait-online
- arp-ethers
- atd
- auditd
- autovt@
- basic.target
- blk-availability
- bluetooth.target
- bolt
----此处省略n行
master:
- NetworkManager
- NetworkManager-dispatcher
- NetworkManager-wait-online
- arp-ethers
- atd
- auditd
- autovt@
- basic.target
- blk-availability
- bluetooth.target
- bolt
- boot-complete.target
- chrony-dnssrv@
- chrony-dnssrv@.timer
---此处省略n行
2.2.3 service.disabled
检测指定服务是否开机不自动启动
[root@master ~]# salt '*' service.disabled httpd
node1:
False
master:
True
2.2.4 service.enabled
检查指定服务是否开机自动启动
[root@master ~]# salt '*' service.enabled httpd
node1:
True
master:
False
2.2.5 service.disable
设置指定服务开机不自动启动
[root@master ~]# salt '*' service.disable httpd
node1:
True
master:
False
[root@master ~]# salt '*' service.enabled httpd
master:
False
node1:
False
2.2.6 service.enable
设置指定服务开机自动启动
[root@master ~]# salt '*' service.enable httpd
node1:
True
[root@master ~]# salt '*' service.enabled httpd
master:
False
node1:
True
2.2.7 service.reload
重新加载指定服务
[root@master ~]# salt '*' service.reload httpd
node1:
True
2.2.8 service.stop
停止指定服务
[root@master ~]# salt '*' service.stop httpd
node1:
True
[root@node1 ~]# systemctl status httpd
● httpd.service - The Apache HTTP Server
Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vendor preset: disabled)
Active: inactive (dead) since Tue 2021-07-06 08:25:14 EDT; 39s ago
Docs: man:httpd.service(8)
2.2.9 service.start
启动指定服务
[root@master ~]# salt '*' service.start httpd
node1:
True
[root@node1 ~]# systemctl status httpd
● httpd.service - The Apache HTTP Server
Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vendor preset: disabled)
Active: active (running) since Tue 2021-07-06 08:26:37 EDT; 12s ago
Docs: man:httpd.service(8)
2.2.10 service.restart
重启指定服务
[root@master ~]# salt '*' service.restart httpd
node1:
True
2.2.11 service.status
查看指定服务的状态
[root@master ~]# salt '*' service.status httpd
node1:
True
master:
False
2.3 SaltStack常用模块之pkg
2.3.1 pkg.download
只下载软件包但不安装
此功能将会下载指定的软件包，但是需要在minion端安装yum-utils，可以使用 cmd.run 进行远程安装
[root@master ~]# salt '*' pkg.download wget
node1:
----------
wget:
/var/cache/yum/packages/wget-1.19.5-10.el8.x86_64.rpm
2.3.2 pkg.file_list
列出指定包或系统中已安装的所有包的文件
[root@master ~]# salt '*' pkg.file_list httpd
node1:
----------
errors:
files:
- /etc/httpd/conf
- /etc/httpd/conf.d/autoindex.conf
- /etc/httpd/conf.d/userdir.conf
- /etc/httpd/conf.d/welcome.conf
- /etc/httpd/conf.modules.d
- /etc/httpd/conf.modules.d/00-base.conf
- /etc/httpd/conf.modules.d/00-dav.conf
- /etc/httpd/conf.modules.d/00-lua.conf
---此处省略n行
//当不提供参数时，将会列出当前系统中所有已安装软件
[root@master ~]# salt '*' pkg.file_list
node1:
----------
errors:
files:
VALUE_TRIMMED
master:
----------
errors:
files:
VALUE_TRIMMED
2.3.3 pkg.group_info
查看包组的信息
[root@master ~]# salt '*' pkg.group_info 'Development Tools'
node1:
----------
conditional:
default:
- asciidoc
- byacc
- ctags
- diffstat
- elfutils-libelf-devel
- git
- intltool
- jna
- ltrace
- patchutils
----此处省略n行
2.3.4 pkg.group_list
列出系统中所有的包组
[root@master ~]# salt '*' pkg.group_list
master:
----------
available:
- Backup Client
- base-x
- Conflicts AppStream
- Debugging Tools
- Desktop Debugging and Performance Tools
- .NET Core Development
- FTP Server
- GNOME Applications
- Graphics Creation Tools
- Guest Agents
- Guest Desktop Agents
- Input Methods
- Internet Applications
- Internet Browser
----此处省略n行
2.3.5 pkg.install
安装软件
[root@master ~]# salt '*' pkg.install wget
node1:
----------
master:
----------
[root@master ~]# which wget
/usr/bin/wget
2.3.6 pkg.list_downloaded
列出已下载到本地的软件包
[root@master ~]# salt '*' pkg.list_downloaded
node1:
----------
master:
----------
2.3.7 pkg.list_pkgs
以字典的方式列出当前已安装的软件包
[root@master ~]# salt '*' pkg.list_pkgs
master:
----------
gmp:
1:6.1.2-10.el8
gnupg2:
2.2.20-2.el8
gnupg2-smime:
2.2.20-2.el8
gnutls:
3.6.14-6.el8
gobject-introspection:
1.56.1-1.el8
gpg-pubkey.(none):
8483c65d-5ccc5b19,de57bfbe-53a9be98
gpgme:
1.13.1-6.el8
----此处省略n行
2.3.8 pkg.owner
列出指定文件是由哪个包提供的
[root@master ~]# salt '*' pkg.owner /usr/sbin/apachectl
node1:
httpd
[root@master ~]# salt '*' pkg.owner /usr/sbin/apachectl /etc/httpd/conf/httpd.conf
node1:
----------
/etc/httpd/conf/httpd.conf:
httpd
/usr/sbin/apachectl:
httpd
2.3.9 pkg.remove
卸载指定软件
[root@master ~]# salt '*' cmd.run 'rpm -qa|grep wget'
master:
wget-1.19.5-10.el8.x86_64
node1:
wget-1.19.5-10.el8.x86_64
[root@master ~]# salt '*' pkg.remove wget
master:
----------
wget:
----------
new:
old:
1.19.5-10.el8
node1:
----------
wget:
----------
new:
old:
1.19.5-10.el8
[root@master ~]# which wget
/usr/bin/which: no wget in (/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/root/bin)
2.3.10 pkg.upgrade
升级系统中所有的软件包或升级指定的软件包
[root@master ~]# salt '*' pkg.upgrade name=openssl
master:
----------
openssl:
----------
new:
1:1.1.1k-1.el8
old:
1:1.1.1g-11.el8
openssl-libs:
----------
new:
1:1.1.1k-1.el8
old:
1:1.1.1g-11.el8
node1:
----------
openssl:
----------
new:
1:1.1.1k-1.el8
old:
1:1.1.1g-11.el8
openssl-libs:
----------
new:
1:1.1.1k-1.el8
old:
1:1.1.1g-11.el8
2.4 SaltStack常用模块之state
2.4.1 state.show_highstate
显示当前系统中有哪些高级状态
在这里插入代码片
2.4.2 state.highstate
执行高级状态
node1:
----------
ID: apache-install
Function: pkg.installed
Name: httpd
Result: True
Comment: All specified packages are already installed
Started: 20:07:37.012733
Duration: 1050.73 ms
Changes:
----------
ID: apache-service
Function: service.running
Name: httpd
Result: True
Comment: The service httpd is already running
Started: 20:07:38.065796
Duration: 94.747 ms
Changes:
Summary for node1
------------
Succeeded: 2
Failed: 0
------------
Total states run: 2
Total run time: 1.145 s
2.4.3 state.show_state_usage
显示当前系统中的高级状态执行情况
node1:
----------
base:
----------
count_all:
2
count_unused:
1
count_used:
1
unused:
- top
used:
- web.apache.install
dev:
----------
count_all:
0
count_unused:
0
count_used:
0
unused:
used:
prod:
----------
count_all:
0
count_unused:
0
count_used:
0
unused:
used:
test:
----------
count_all:
0
count_unused:
0
count_used:
0
unused:
used:
2.4.4 state.show_top
返回minion将用于highstate的顶级数据
node1:
----------
base:
- web.apache.install
2.4.5 state.top
执行指定的top file，而不是默认的
[root@master ~]# salt '*' state.top install.sls
node1:
----------
ID: apache-install
Function: pkg.installed
Name: httpd
Result: True
Comment: All specified packages are already installed
Started: 20:17:20.129390
Duration: 917.659 ms
Changes:
----------
ID: apache-service
Function: service.running
Name: httpd
Result: True
Comment: The service httpd is already running
Started: 20:17:21.048144
Duration: 46.958 ms
Changes:
Summary for 192.168.69.202
------------
Succeeded: 2
Failed: 0
------------
Total states run: 2
Total run time: 964.617 ms
2.4.6 state.show_sls
显示 master 上特定sls或sls文件列表中的状态数据
[root@master ~]# salt '*' state.show_sls web.apache.install
node1:
----------
apache-install:
----------
__env__:
base
__sls__:
web.apache.install
pkg:
|_
----------
name:
httpd
- installed
|_
----------
order:
10000
apache-service:
----------
__env__:
base
__sls__:
web.apache.install
service:
|_
----------
name:
httpd
|_
----------
enable:
True
- running
|_
----------
order:
10001
master:
----------
apache-install:
----------
__env__:
base
__sls__:
web.apache.install
pkg:
|_
----------
name:
httpd
- installed
|_
----------
order:
10000
apache-service:
----------
__env__:
base
__sls__:
web.apache.install
service:
|_
----------
name:
httpd
|_
----------
enable:
True
- running
|_
----------
order:
10001
2.5 SaltStack常用模块之salt-cp
salt-cp能够很方便的把 master 上的文件批量传到 minion上
//拷贝单个文件到目标主机的/usr/src目录下
[root@master ~]# salt '*' cmd.run 'ls /usr/src/'
master:
debug
kernels
node1:
debug
kernels
[root@master ~]# touch yy
[root@master ~]# echo '123456' > yy
[root@master ~]# cat yy
123456
[root@master ~]# salt-cp '*' /root/yy /root/hh
master:
----------
/root/hh:
True
node1:
----------
/root/hh:
True
[root@node1 ~]# cat hh
123456
2.6 SaltStack常用模块之file
2.6.1 file.access
检查指定路径是否存在
[root@master ~]# salt '*' cmd.run 'ls /usr/src'
node1:
debug
kernels
[root@master ~]# salt '*' file.access /usr/src/debug f
node1:
True
[root@master ~]# salt '*' file.access /usr/src/abc f
node1:
False
检查指定文件的权限信息
[root@node1 ~]# cd /usr/src/
[root@node1 src]# touch abc
[root@node1 src]# ls
abc debug kernels
[root@master src]# salt '*' cmd.run 'ls -l /usr/src/'
node1:
total 0
-rw-r--r--. 1 root root 0 Jul 7 02:31 abc
drwxr-xr-x. 2 root root 6 May 18 2020 debug
drwxr-xr-x. 2 root root 6 May 18 2020 kernels
[root@master src]# salt '*' file.access /usr/src/abc r //是否有读权限
node1:
True
[root@master src]# salt '*' file.access /usr/src/abc w //是否有写权限
node1:
True
[root@master src]# salt '*' file.access /usr/src/abc x //是否有执行权限
node1:
False
2.6.2 file.append
往一个文件里追加内容，若此文件不存在则会报异常
[root@master ~]# salt '*' cmd.run 'ls -l /root/oo'
node1:
-rw-r--r--. 1 root root 0 Jul 7 02:34 /root/oo
[root@master ~]# salt '*' file.append /root/oo "hello world" "jjyy"
node1:
Wrote 2 lines to "/root/oo"
[root@master ~]# salt '*' cmd.run 'ls -l /root/oo'
node1:
-rw-r--r--. 1 root root 17 Jul 7 02:36 /root/oo
[root@master ~]# salt '*' cmd.run 'cat /root/oo'
node1:
hello world
jjyy
//没有qqww文件，就报错了
[root@master ~]# salt '*' file.append /root/qqww "hello world" "jjyy"
node1:
The minion function caused an exception: Traceback (most recent call last):
File "/usr/lib/python3.6/site-packages/salt/minion.py", line 1905, in _thread_return
function_name, function_args, executors, opts, data
File "/usr/lib/python3.6/site-packages/salt/minion.py", line 1861, in _execute_job_function
return_data = self.executors[fname](opts, data, func, args, kwargs)
File "/usr/lib/python3.6/site-packages/salt/loader.py", line 1241, in __call__
return self.loader.run(run_func, *args, **kwargs)
File "/usr/lib/python3.6/site-packages/salt/loader.py", line 2274, in run
return self._last_context.run(self._run_as, _func_or_method,
-------此处省略n行
2.6.3 file.basename
获取指定路径的基名
[root@master ~]# salt '*' file.basename '/root/oo'
node1:
oo
2.6.4 file.dirname
获取指定路径的目录名
[root@master ~]# salt '*' file.dirname '/root/oo'
node1:
/root
2.6.5 file.check_hash
检查指定的文件与hash字符串是否匹配，匹配则返回 True 否则返回 False
[root@master ~]# salt '*' cmd.run 'md5sum /etc/yy'
node1:
d41d8cd98f00b204e9800998ecf8427e /etc/yy
[root@master ~]# salt '*' file.check_hash /etc/yy d41d8cd98f00b204e9800998ecf8427e
node1:
True
2.6.6 file.chattr
修改指定文件的属性
| 属性 | 对文件的意义 | 对目录的意义 |
|---|---|---|
| a | 只允许在这个文件之后追加数据，不允许任何进程覆盖或截断这个文件 | 只允许在这个目录下建立和修改文件，而不允许删除任何文件 |
| i | 不允许对这个文件进行任何的修改，不能删除、更改、移动 | 任何的进程只能修改目录之下的文件， 不允许建立和删除文件 |
给指定文件添加属性
//查看当前属性
[root@master ~]# salt '*' cmd.run 'lsattr /root'
node1:
-------------------- /root/anaconda-ks.cfg
-------------------- /root/mysql
-------------------- /root/hh
-------------------- /root/httpd
-------------------- /root/oo
[root@master ~]# salt '*' file.chattr /root/oo operator=add attributes=ai
node1:
True
//添加属性
[root@master ~]# salt '*' cmd.run 'lsattr /root'
node1:
-------------------- /root/anaconda-ks.cfg
-------------------- /root/mysql
-------------------- /root/hh
-------------------- /root/httpd
----ia-------------- /root/oo
[root@node1 ~]# rm -rf oo
rm: 无法删除'oo': 不允许的操作
[root@node1 ~]# echo '123' > oo
-bash: oo: 不允许的操作
[root@node1 ~]# echo '123' >> oo
-bash: oo: 不允许的操作
给指定目录添加属性
[root@master ~]# salt '*' file.chattr /root/ww operator=add attributes=ai
node1:
True
[root@node1 ww]# echo "qweer" > jj
[root@node1 ww]# rm -rf jj
rm: 无法删除'jj': 不允许的操作
给指定文件去除属性
[root@master ~]# salt '*' file.chattr /root/oo operator=remove attributes=i
node1:
True
[root@master ~]# salt '*' cmd.run 'lsattr /root'
node1:
-------------------- /root/anaconda-ks.cfg
-------------------- /root/mysql
-------------------- /root/hh
-------------------- /root/httpd
-----a-------------- /root/oo
[root@node1 ~]# rm -rf oo
rm: 无法删除'oo': 不允许的操作
2.6.7 file.chown
设置指定文件的属主、属组信息
[root@node1 ~]# chown -R apache.apache /root/hh
[root@node1 ~]# ll
总用量 12
-rw-------. 1 root root 1030 6月 3 14:36 anaconda-ks.cfg
-rw-r--r--. 1 apache apache 7 7月 6 09:20 hh
-rw-r--r--. 1 root root 17 7月 7 02:36 oo
drwxr-xr-x. 2 root root 16 7月 7 03:04 ww
[root@master ~]# salt '*' file.chown /root/hh root root
node1:
None
[root@master ~]# salt '*' cmd.run 'ls -l /root/'
node1:
total 12
-rw-------. 1 root root 1030 Jun 3 14:36 anaconda-ks.cfg
-rw-r--r--. 1 root root 7 Jul 6 09:20 hh
-rw-r--r--. 1 root root 17 Jul 7 02:36 oo
drwxr-xr-x. 2 root root 16 Jul 7 03:04 ww
2.6.8 file.copy
在远程主机上复制文件或目录
拷贝文件
[root@node1 ~]# cat oo
hello world
jjyy
[root@master ~]# salt '*' cmd.run 'ls -l /root'
node1:
total 12
-rw-------. 1 root root 1030 Jun 3 14:36 anaconda-ks.cfg
-rw-r--r--. 1 root root 7 Jul 6 09:20 hh
-rw-r--r--. 1 root root 17 Jul 7 02:36 oo
drwxr-xr-x. 2 root root 16 Jul 7 03:04 ww
[root@master ~]# salt '*' file.copy /root/oo /root/aa
node1:
True
[root@master ~]# salt '*' cmd.run 'ls -l /root'
node1:
total 16
-rw-r--r--. 1 root root 17 Jul 7 03:14 aa
-rw-------. 1 root root 1030 Jun 3 14:36 anaconda-ks.cfg
-rw-r--r--. 1 root root 7 Jul 6 09:20 hh
-rw-r--r--. 1 root root 17 Jul 7 02:36 oo
drwxr-xr-x. 2 root root 16 Jul 7 03:04 ww
[root@node1 ~]# cat aa
hello world
jjyy
覆盖并拷贝目录，将会覆盖同名文件或目录
[root@node1 opt]# ls
pp
[root@master ~]# salt '*' file.copy /opt/ /root/ii recurse=True
node1:
True
[root@master ~]# salt '*' cmd.run 'ls -l /root'
node1:
total 16
-rw-r--r--. 1 root root 17 Jul 7 03:14 aa
-rw-------. 1 root root 1030 Jun 3 14:36 anaconda-ks.cfg
-rw-r--r--. 1 root root 7 Jul 6 09:20 hh
drwxr-xr-x. 2 root root 16 Jul 7 03:19 ii
-rw-r--r--. 1 root root 17 Jul 7 02:36 oo
drwxr-xr-x. 2 root root 16 Jul 7 03:04 ww
[root@node1 ii]# ls
pp
删除目标目录中同名的文件或目录并拷贝新内容至其中
[root@master ~]# salt '*' cmd.run 'ls -l /root/abc'
node1:
total 0
-rw-r--r--. 1 root root 0 Jul 7 03:36 jerry
-rw-r--r--. 1 root root 0 Jul 7 03:36 lisi
-rw-r--r--. 1 root root 0 Jul 7 03:36 tom
-rw-r--r--. 1 root root 0 Jul 7 03:36 wangwu
-rw-r--r--. 1 root root 0 Jul 7 03:36 zhangsan
[root@master ~]# salt '*' cmd.run 'ls -l /opt/abc'
node1:
total 0
-rw-r--r--. 1 root root 0 Jul 7 03:38 jerry
-rw-r--r--. 1 root root 0 Jul 7 03:38 tom
[root@master ~]# salt '*' file.copy /opt/abc/ /root/abc/ recurse=True remove_existing=True
node1:
True
[root@master ~]# salt '*' cmd.run 'ls -l /root/abc'
node1:
total 0
-rw-r--r--. 1 root root 0 Jul 7 03:38 jerry
-rw-r--r--. 1 root root 0 Jul 7 03:38 tom
2.6.9 file.ditectory_exists
判断指定目录是否存在，存在则返回 True ，否则返回 False
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
node1:
total 0
-rw-r--r--. 1 root root 0 Jul 7 03:22 ii
-rw-r--r--. 1 root root 0 Jul 7 03:18 pp
[root@master ~]# salt '*' file.directory_exists /opt/ii
node1:
True
2.6.10 file.diskusage
递归计算指定路径的磁盘使用情况并以字节为单位返回
[root@master ~]# salt '*' cmd.run 'du -sb /opt'
node1:
26 /opt
[root@master ~]# salt '*' file.diskusage /opt
node1:
0
2.6.11 file.file_exists
判断指定文件是否存在
[root@master ~]# salt '*' cmd.run 'ls -l /root/'
node1:
total 16
-rw-r--r--. 1 root root 17 Jul 7 03:14 aa
-rw-------. 1 root root 1030 Jun 3 14:36 anaconda-ks.cfg
-rw-r--r--. 1 root root 7 Jul 6 09:20 hh
drwxr-xr-x. 2 root root 26 Jul 7 03:22 ii
-rw-r--r--. 1 root root 17 Jul 7 02:36 oo
drwxr-xr-x. 2 root root 16 Jul 7 03:04 ww
[root@master ~]# salt '*' file.file_exists /root/aa
node1:
True
[root@master ~]# salt '*' file.file_exists /root/oo
node1:
True
2.6.12 file.find
类似 find 命令并返回符合指定条件的路径列表
The options include match criteria:
name = path-glob # case sensitive
iname = path-glob # case insensitive
regex = path-regex # case sensitive
iregex = path-regex # case insensitive
type = file-types # match any listed type
user = users # match any listed user
group = groups # match any listed group
size = [+-]number[size-unit] # default unit = byte
mtime = interval # modified since date
grep = regex # search file contents
and/or actions:
delete [= file-types] # default type = 'f'
exec = command [arg ...] # where {} is replaced by pathname
print [= print-opts]
and/or depth criteria:
maxdepth = maximum depth to transverse in path
mindepth = minimum depth to transverse before checking files or directories
The default action is print=path
path-glob:
* = match zero or more chars
? = match any char
[abc] = match a, b, or c
[!abc] or [^abc] = match anything except a, b, and c
[x-y] = match chars x through y
[!x-y] or [^x-y] = match anything except chars x through y
{a,b,c} = match a or b or c
path-regex: a Python Regex (regular expression) pattern to match pathnames
file-types: a string of one or more of the following:
a: all file types
b: block device
c: character device
d: directory
p: FIFO (named pipe)
f: plain file
l: symlink
s: socket
users: a space and/or comma separated list of user names and/or uids
groups: a space and/or comma separated list of group names and/or gids
size-unit:
b: bytes
k: kilobytes
m: megabytes
g: gigabytes
t: terabytes
interval:
[<num>w] [<num>d] [<num>h] [<num>m] [<num>s]
where:
w: week
d: day
h: hour
m: minute
s: second
print-opts: a comma and/or space separated list of one or more of the following:
group: group name
md5: MD5 digest of file contents
mode: file permissions (as integer)
mtime: last modification time (as time_t)
name: file basename
path: file absolute path
size: file size in bytes
type: file type
user: user name
示例：
[root@node1 ~]# ls
abc anaconda-ks.cfg hh ii oo ww
[root@master ~]# salt '*' file.find /root name=hh type=f delete
node1:
- /root/hh
[root@master ~]# salt '*' file.find /root name=hh type=f delete
node1:
- /root/hh
//删除目录
[root@node1 ~]# ls
abc anaconda-ks.cfg ii oo ww
salt '*' file.find / type=f name=\*.bak size=+10m
2.6.13 file.get_gid
获取指定文件的gid
[root@master ~]# salt '*' cmd.run 'ls -l /root/oo'
node1:
-rw-r--r--. 1 root root 17 Jul 7 02:36 /root/oo
[root@master ~]# salt '*' file.get_gid /root/oo
node1:
0
2.6.14 file.get_group
获取指定文件的组名
[root@master ~]# salt '*' cmd.run 'ls -l /root/oo'
node1:
-rw-r--r--. 1 root root 17 Jul 7 02:36 /root/oo
[root@master ~]# salt '*' file.get_group /root/oo
node1:
root
2.6.15 file.get_hash
获取指定文件的hash值，该值通过 sha256 算法得来
[root@master ~]# salt '*' cmd.run 'sha256sum /root/oo'
node1:
2290bf9e8d970b94f7a1bdbdf0778f070155f4a3ac733634297965fd7734e97a /root/oo
[root@master ~]# salt '*' file.get_hash /root/oo
node1:
2290bf9e8d970b94f7a1bdbdf0778f070155f4a3ac733634297965fd7734e97a
2.6.16 file.get_mode
获取指定文件的权限，以数字方式显示
[root@master ~]# salt '*' cmd.run 'ls -l /root/oo'
node1:
-rw-r--r--. 1 root root 17 Jul 7 02:36 /root/oo
[root@master ~]# salt '*' file.get_mode /root/oo
node1:
0644
2.6.17 file.get_selinux_context
获取指定文件的 SELINUX 上下文信息
[root@master ~]# salt '*' cmd.run 'ls -Z /root/oo'
node1:
unconfined_u:object_r:admin_home_t:s0 /root/oo
[root@master ~]# salt '*' file.get_selinux_context /root/oo
node1:
unconfined_u:object_r:admin_home_t:s0
2.6.18 file.get_sum
按照指定的算法计算指定文件的特征码并显示，默认使用的sha256算法。
该函数可使用的算法参数有：
- md5
- sha1
- sha224
- sha256 (default)
- sha384
- sha512
[root@master ~]# salt '*' cmd.run 'sha256sum /root/oo'
node1:
2290bf9e8d970b94f7a1bdbdf0778f070155f4a3ac733634297965fd7734e97a /root/oo
[root@master ~]# salt '*' file.get_sum /root/oo
node1:
2290bf9e8d970b94f7a1bdbdf0778f070155f4a3ac733634297965fd7734e97a
[root@master ~]# salt '*' cmd.run 'md5sum /root/oo'
node1:
4e8a818b3dbbbe05ab32fad3fa5aa514 /root/oo
[root@master ~]# salt '*' file.get_sum /root/oo md5
node1:
4e8a818b3dbbbe05ab32fad3fa5aa514
2.6.19 file.get_uid与file.get_user
获取指定文件的 uid 或 用户名
[root@master ~]# salt '*' cmd.run 'ls -l /root/oo'
node1:
-rw-r--r--. 1 root root 17 Jul 7 02:36 /root/oo
[root@master ~]# salt '*' file.get_uid /root/oo
node1:
0
[root@master ~]# salt '*' file.get_user /root/oo
node1:
root
2.6.20 file.gid_to_group
将指定的 gid 转换为组名并显示
[root@master ~]# salt '*' file.gid_to_group 1
node1:
bin
[root@master ~]# salt '*' file.gid_to_group 2
node1:
daemon
[root@master ~]# salt '*' file.gid_to_group 0
node1:
root
2.6.21 file.group_to_gid
将指定的组名转换为 gid 并显示
[root@master ~]# salt '*' file.group_to_gid root
node1:
0
[root@master ~]# salt '*' file.group_to_gid bin
node1:
1
2.6.22 file.grep
在指定文件中检索指定内容
该函数支持通配符，若在指定的路径中用通配符则必须用双引号引起来
[root@master ~]# salt '*' file.grep /etc/passwd nobody
node1:
----------
pid:
40055
retcode:
0
stderr:
stdout:
nobody:x:65534:65534:Kernel Overflow User:/:/sbin/nologin
[root@master ~]# salt '*' file.grep /etc/sysconfig/network-scripts/ifcfg-ens33 ipaddr -- -i
node1:
----------
pid:
40060
retcode:
0
stderr:
stdout:
IPADDR=192.168.147.55
[root@master ~]# salt '*' file.grep /etc/sysconfig/network-scripts/ifcfg-ens33 ipaddr -- -i -B2
node1:
----------
pid:
40066
retcode:
0
stderr:
stdout:
DEVICE=ens33
ONBOOT=yes
IPADDR=192.168.147.55
[root@master ~]# salt '*' file.grep /etc/sysconfig/network-scripts/ifcfg-ens33 ipaddr -- -i -A2
node1:
----------
pid:
40071
retcode:
0
stderr:
stdout:
IPADDR=192.168.147.55
NETMASK=255.255.255.0
GATEWAY=192.168.147.2
[root@master ~]# salt '*' file.grep /etc/sysconfig/network-scripts/ifcfg-ens33 ipaddr -- -i -C2
node1:
----------
pid:
40076
retcode:
0
stderr:
stdout:
DEVICE=ens33
ONBOOT=yes
IPADDR=192.168.147.55
NETMASK=255.255.255.0
GATEWAY=192.168.147.2
[root@master ~]# salt '*' file.grep "/etc/sysconfig/network-scripts/*" ipaddr -- -i -l
node1:
----------
pid:
40081
retcode:
0
stderr:
stdout:
/etc/sysconfig/network-scripts/ifcfg-ens33
2.6.23 file.is_blkdev
判断指定的文件是否是块设备文件
[root@master ~]# salt '*' cmd.run 'ls -l /dev/sr0'
node1:
brw-rw----. 1 root cdrom 11, 0 Jun 3 14:38 /dev/sr0
[root@master ~]# salt '*' file.is_blkdev /dev/sr0
node1:
True
2.6.24 file.lsattr
检查并显示出指定文件的属性信息
[root@master ~]# salt '*' cmd.run 'lsattr /root/oo'
node1:
-------------------- /root/oo
[root@master ~]# salt '*' cmd.run 'chattr +i /root/oo'
node1:
[root@master ~]# salt '*' cmd.run 'lsattr /root/oo'
node1:
----i--------------- /root/oo
[root@master ~]# salt '*' file.lsattr /root/oo
node1:
----------
/root/oo:
- i
2.6.25 file.mkdir
创建目录并设置属主、属组及权限
[root@master ~]# salt '*' file.mkdir /root/jjyy
node1:
True
[root@master ~]# salt '*' cmd.run 'ls -l /root'
node1:
total 8
drwxr-xr-x. 2 root root 30 Jul 7 03:38 abc
-rw-------. 1 root root 1030 Jun 3 14:36 anaconda-ks.cfg
drwxr-xr-x. 2 root root 26 Jul 7 03:22 ii
drwxr-xr-x. 2 root root 6 Jul 7 04:21 jjyy
-rw-r--r--. 1 root root 17 Jul 7 02:36 oo
[root@master ~]# salt '*' file.mkdir /root/xixi tom tom 077
node1:
True
[root@master ~]# salt '*' cmd.run 'ls -l /root/'
node1:
total 8
drwxr-xr-x. 2 root root 30 Jul 7 03:38 abc
-rw-------. 1 root root 1030 Jun 3 14:36 anaconda-ks.cfg
drwxr-xr-x. 2 root root 26 Jul 7 03:22 ii
drwxr-xr-x. 2 root root 6 Jul 7 04:21 jjyy
-rw-r--r--. 1 root root 17 Jul 7 02:36 oo
d---rwxrwx. 2 root root 6 Jul 7 04:22 xixi
2.6.26 file.move
移动或重命名
//重命名
[root@master ~]# salt '*' cmd.run 'ls -l /root'
node1:
total 8
drwxr-xr-x. 2 root root 30 Jul 7 03:38 abc
-rw-------. 1 root root 1030 Jun 3 14:36 anaconda-ks.cfg
drwxr-xr-x. 2 root root 6 Jul 7 04:21 jjyy
-rw-r--r--. 1 root root 17 Jul 7 02:36 oo
drwxr-xr-x. 2 root root 26 Jul 7 03:22 uu
d---rwxrwx. 2 root root 6 Jul 7 04:22 xixi
//移动
[root@master ~]# salt '*' cmd.run 'ls -l /root'
node1:
total 8
drwxr-xr-x. 2 root root 30 Jul 7 03:38 abc
-rw-------. 1 root root 1030 Jun 3 14:36 anaconda-ks.cfg
drwxr-xr-x. 2 root root 6 Jul 7 04:21 jjyy
-rw-r--r--. 1 root root 17 Jul 7 02:36 oo
drwxr-xr-x. 2 root root 26 Jul 7 03:22 uu
d---rwxrwx. 2 root root 6 Jul 7 04:22 xixi
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
node1:
total 0
drwxr-xr-x. 2 root root 30 Jul 7 03:38 abc
-rw-r--r--. 1 root root 0 Jul 7 03:22 ii
-rw-r--r--. 1 root root 0 Jul 7 03:18 pp
[root@master ~]# salt '*' file.move /root/uu /opt/
node1:
----------
comment:
'/root/uu' moved to '/opt/'
result:
True
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
node1:
total 0
drwxr-xr-x. 2 root root 30 Jul 7 03:38 abc
-rw-r--r--. 1 root root 0 Jul 7 03:22 ii
-rw-r--r--. 1 root root 0 Jul 7 03:18 pp
drwxr-xr-x. 2 root root 26 Jul 7 03:22 uu
2.6.27 file.prepend
把文本插入指定文件的开头
[root@master ~]# salt '*' cmd.run 'cat /root/oo'
node1:
hello world
jjyy
[root@master ~]# salt '*' file.prepend /root/oo "hehe" "xixi" "haha"
node1:
Prepended 3 lines to "/root/oo"
[root@master ~]# salt '*' cmd.run 'cat /root/oo'
node1:
hehe
xixi
haha
hello world
jjyy
2.6.28 file.sed
修改文本文件的内容
[root@master ~]# salt '*' cmd.run 'cat /root/qqww'
node1:
haha
123
xixi
hello hello hello
[root@master ~]# salt '*' file.sed /root/qqww 'hello' 'runtime'
node1:
----------
pid:
40308
retcode:
0
stderr:
stdout:
[root@master ~]# salt '*' cmd.run 'cat /root/qqww'
node1:
haha
123
xixi
runtime runtime runtime
[root@master ~]# salt '*' cmd.run 'cat /root/qqww'
node1:
haha
123
xixi
hello hello hello
[root@master ~]# salt '*' file.sed /root/qqww 'hello' 'runtime' flags=2
node1:
----------
pid:
40338
retcode:
0
stderr:
stdout:
[root@master ~]# salt '*' cmd.run 'cat /root/qqww'
node1:
haha
123
xixi
hello runtime hello
2.6.29 file.read
读取文件内容
[root@master ~]# salt '*' cmd.run 'cat /root/qqww'
node1:
haha
123
xixi
hello runtime hello
[root@master ~]# salt '*' file.read /root/qqww
node1:
haha
123
xixi
hello runtime hello
2.6.30 file.readdir
列出指定目录下的所有文件或目录，包括隐藏文件
[root@master ~]# salt '*' file.readdir /root
node1:
- .
- ..
- .bash_logout
- .bash_profile
- .bashrc
- .cshrc
- .tcshrc
- anaconda-ks.cfg
- .config
- .bash_history
- oo
- abc
- jjyy
- xixi
- b.bak
- b
- qqww.bak
- .viminfo
- qqww
2.6.31 file.remove
删除指定的文件或目录，若给出的是目录，将递归删除
[root@master ~]# salt '*' cmd.run 'ls -l /root/'
node1:
total 24
drwxr-xr-x. 2 root root 30 Jul 7 03:38 abc
-rw-------. 1 root root 1030 Jun 3 14:36 anaconda-ks.cfg
-rw-r--r--. 1 root root 15 Jul 7 04:46 b
-rw-r--r--. 1 root root 15 Jul 7 04:45 b.bak
drwxr-xr-x. 2 root root 6 Jul 7 04:21 jjyy
-rw-r--r--. 1 root root 17 Jul 7 02:36 oo
-rw-r--r--. 1 root root 34 Jul 7 04:50 qqww
-rw-r--r--. 1 root root 32 Jul 7 04:50 qqww.bak
d---rwxrwx. 2 root root 6 Jul 7 04:22 xixi
[root@master ~]# salt '*' file.remove /root/b
node1:
True
[root@master ~]# salt '*' file.remove /root/b.bak
node1:
True
[root@master ~]# salt '*' cmd.run 'ls -l /root/'
node1:
total 16
drwxr-xr-x. 2 root root 30 Jul 7 03:38 abc
-rw-------. 1 root root 1030 Jun 3 14:36 anaconda-ks.cfg
drwxr-xr-x. 2 root root 6 Jul 7 04:21 jjyy
-rw-r--r--. 1 root root 17 Jul 7 02:36 oo
-rw-r--r--. 1 root root 34 Jul 7 04:50 qqww
-rw-r--r--. 1 root root 32 Jul 7 04:50 qqww.bak
d---rwxrwx. 2 root root 6 Jul 7 04:22 xixi
2.6.32 file.rename
重命名文件或目录
[root@master ~]# salt '*' cmd.run 'ls -l /root/'
node1:
total 16
drwxr-xr-x. 2 root root 30 Jul 7 03:38 abc
-rw-------. 1 root root 1030 Jun 3 14:36 anaconda-ks.cfg
drwxr-xr-x. 2 root root 6 Jul 7 04:21 jjyy
-rw-r--r--. 1 root root 17 Jul 7 02:36 oo
-rw-r--r--. 1 root root 34 Jul 7 04:50 qqww
-rw-r--r--. 1 root root 32 Jul 7 04:50 qqww.bak
d---rwxrwx. 2 root root 6 Jul 7 04:22 xixi
[root@master ~]#
[root@master ~]# salt '*' file.rename /root/qqww.bak /root/uu
node1:
True
[root@master ~]# salt '*' cmd.run 'ls -l /root/'
node1:
total 16
drwxr-xr-x. 2 root root 30 Jul 7 03:38 abc
-rw-------. 1 root root 1030 Jun 3 14:36 anaconda-ks.cfg
drwxr-xr-x. 2 root root 6 Jul 7 04:21 jjyy
-rw-r--r--. 1 root root 17 Jul 7 02:36 oo
-rw-r--r--. 1 root root 34 Jul 7 04:50 qqww
-rw-r--r--. 1 root root 32 Jul 7 04:50 uu
d---rwxrwx. 2 root root 6 Jul 7 04:22 xixi
2.6.33 file.set_mode
给指定文件设置权限
[root@master ~]# salt '*' cmd.run 'ls -l /root/'
node1:
total 16
drwxr-xr-x. 2 root root 30 Jul 7 03:38 abc
-rw-------. 1 root root 1030 Jun 3 14:36 anaconda-ks.cfg
drwxr-xr-x. 2 root root 6 Jul 7 04:21 jjyy
-rw-r--r--. 1 root root 17 Jul 7 02:36 oo
-rw-r--r--. 1 root root 34 Jul 7 04:50 qqww
-rw-r--r--. 1 root root 32 Jul 7 04:50 uu
d---rwxrwx. 2 root root 6 Jul 7 04:22 xixi
[root@master ~]# salt '*' file.set_mode /root/uu 755
node1:
0755
[root@master ~]# salt '*' cmd.run 'ls -l /root/'
node1:
total 16
drwxr-xr-x. 2 root root 30 Jul 7 03:38 abc
-rw-------. 1 root root 1030 Jun 3 14:36 anaconda-ks.cfg
drwxr-xr-x. 2 root root 6 Jul 7 04:21 jjyy
-rw-r--r--. 1 root root 17 Jul 7 02:36 oo
-rw-r--r--. 1 root root 34 Jul 7 04:50 qqww
-rwxr-xr-x. 1 root root 32 Jul 7 04:50 uu
d---rwxrwx. 2 root root 6 Jul 7 04:22 xixi
2.6.34 file.symlink
给指定的文件创建软链接
[root@master ~]# salt '*' cmd.run 'ls -l /root/'
node1:
total 16
drwxr-xr-x. 2 root root 30 Jul 7 03:38 abc
-rw-------. 1 root root 1030 Jun 3 14:36 anaconda-ks.cfg
drwxr-xr-x. 2 root root 6 Jul 7 04:21 jjyy
-rw-r--r--. 1 root root 17 Jul 7 02:36 oo
-rw-r--r--. 1 root root 34 Jul 7 04:50 qqww
-rwxr-xr-x. 1 root root 32 Jul 7 04:50 uu
d---rwxrwx. 2 root root 6 Jul 7 04:22 xixi
[root@master ~]# salt '*' file.symlink /root/uu /opt/tt
node1:
True
[root@master ~]# salt '*' cmd.run 'ls -l /root;ls -l /opt/'
node1:
total 16
drwxr-xr-x. 2 root root 30 Jul 7 03:38 abc
-rw-------. 1 root root 1030 Jun 3 14:36 anaconda-ks.cfg
drwxr-xr-x. 2 root root 6 Jul 7 04:21 jjyy
-rw-r--r--. 1 root root 17 Jul 7 02:36 oo
-rw-r--r--. 1 root root 34 Jul 7 04:50 qqww
-rwxr-xr-x. 1 root root 32 Jul 7 04:50 uu
d---rwxrwx. 2 root root 6 Jul 7 04:22 xixi
total 0
drwxr-xr-x. 2 root root 30 Jul 7 03:38 abc
-rw-r--r--. 1 root root 0 Jul 7 03:22 ii
-rw-r--r--. 1 root root 0 Jul 7 03:18 pp
lrwxrwxrwx. 1 root root 8 Jul 7 04:59 tt -> /root/uu
drwxr-xr-x. 2 root root 26 Jul 7 03:22 uu
2.6.35 file.touch
创建空文件或更新时间戳
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
node1:
total 0
drwxr-xr-x. 2 root root 30 Jul 7 03:38 abc
-rw-r--r--. 1 root root 0 Jul 7 03:22 ii
-rw-r--r--. 1 root root 0 Jul 7 03:18 pp
lrwxrwxrwx. 1 root root 8 Jul 7 04:59 tt -> /root/uu
drwxr-xr-x. 2 root root 26 Jul 7 03:22 uu
[root@master ~]# salt '*' file.touch /opt/cc
node1:
True
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
node1:
total 0
drwxr-xr-x. 2 root root 30 Jul 7 03:38 abc
-rw-r--r--. 1 root root 0 Jul 7 05:00 cc
-rw-r--r--. 1 root root 0 Jul 7 03:22 ii
-rw-r--r--. 1 root root 0 Jul 7 03:18 pp
lrwxrwxrwx. 1 root root 8 Jul 7 04:59 tt -> /root/uu
drwxr-xr-x. 2 root root 26 Jul 7 03:22 uu
2.6.36 file.uid_to_user
将指定的 uid 转换成用户名显示出来
[root@master ~]# salt '*' file.uid_to_user 0
node1:
root
[root@master ~]# salt '*' file.uid_to_user 1
node1:
bin
2.6.37 file.user_to_uid
将指定的用户转换成 uid 并显示出来
[root@master ~]# salt '*' file.user_to_uid apache
node1:
48
[root@master ~]# salt '*' file.user_to_uid root
node1:
0
2.6.38 file.write
往一个指定的文件里覆盖写入指定内容
[root@master ~]# salt '*' cmd.run 'cat /root/qqww'
node1:
haha
123
xixi
hello runtime hello
[root@master ~]# salt '*' file.write /root/qqww "I'm fine"
node1:
Wrote 1 lines to "/root/qqww"
[root@master ~]# salt '*' cmd.run 'cat /root/qqww'
node1:
I'm fine
2.7 SaltStack模板之user及group相关模块
2.7.1 useradd
在minion端上创建一个用户
[root@master ~]# salt 'node1' user.add yh
node1:
True
[root@node1 ~]# id yh
uid=1000(yh) gid=1001(yh) 组=1001(yh)
2.7.2 user.info
返回用户信息
[root@master ~]# salt 'node1' user.info yh
node1:
----------
fullname:
gid:
1001
groups:
- yh
home:
/home/yh
homephone:
name:
yh
other:
passwd:
x
roomnumber:
shell:
/bin/bash
uid:
1000
workphone:
2.7.3 user.getent
返回所有系统用户信息的列表
[root@master ~]# salt 'node1' user.getent yh
node1:
|_
----------
fullname:
root
gid:
0
groups:
- root
home:
/root
homephone:
name:
root
other:
passwd:
x
roomnumber:
shell:
/bin/bash
uid:
-----此处省略n行
2.7.4 user.list_groups
列出指定用户所属组的列表
[root@master ~]# salt 'node1' user.list_groups root
node1:
- root
2.7.5 user.rename
修改指定用户的用户名
[root@master ~]# salt 'node1' user.rename yh qqww
node1:
False
//虽然显示是false，但是是成功修改了
[root@node1 ~]# id yh
id: “yh”：无此用户
[root@node1 ~]# id qqww
uid=1000(qqww) gid=1001(yh) 组=1001(yh)
2.7.6 user.delete
在minion端删除一个用户
[root@master ~]# salt 'node1' user.delete qqww
node1:
True
[root@node1 ~]# id qqww
id: “qqww”：无此用户
2.7.7 user.chuid
修改指定用户的uid
[root@master ~]# salt 'node1' user.add oo
node1:
True
[root@node1 ~]# id oo
uid=1000(oo) gid=1002(oo) 组=1002(oo)
[root@master ~]# salt 'node1' user.chuid oo 988
node1:
True
[root@node1 ~]# id oo
uid=988(oo) gid=1002(oo) 组=1002(oo)
2.7.8 user.chgid
修改指定用户的gid
[root@master ~]# salt 'node1' user.chgid oo 988
node1:
True
[root@node1 ~]# id oo
uid=988(oo) gid=988(setroubleshoot) 组=988(setroubleshoot)
2.7.9 group.add
添加指定用户组
[root@master ~]# salt 'node1' group.add zz 605
node1:
True
2.7.10 group.info
返回用户组信息
[root@master ~]# salt 'node1' group.info zz
node1:
----------
gid:
605
members:
name:
zz
passwd:
x
2.7.11 group.getent
返回所有用户组的信息
[root@master ~]# salt 'node1' group.getent
node1:
|_
----------
gid:
0
members:
name:
root
passwd:
x
|_
----------
gid:
1
members:
name:
bin
passwd:
x
|_
----------
gid:
2
members:
name:
daemon
passwd:
------此处省略n行
2.7.12 group.adduser
添加一个用户到指定组中。（必须是一个已经存在的组和已存在的用户）
[root@master ~]# salt 'node1' group.adduser zz oo
node1:
True
[root@master ~]# salt 'node1' user.info oo
node1:
----------
fullname:
gid:
988
groups:
- setroubleshoot
- zz //有zz组
home:
/home/oo
homephone:
name:
oo
other:
passwd:
x
roomnumber:
shell:
/bin/bash
uid:
604
workphone:
2.7.13 group.deluser
将用户从用户组中移除
[root@master ~]# salt 'node1' group.deluser zz oo
node1:
True
[root@master ~]# salt 'node1' user.info oo
node1:
----------
fullname:
gid:
988
groups:
- setroubleshoot //已从zz组 中移除
home:
/home/oo
homephone:
name:
oo
other:
passwd:
x
roomnumber:
shell:
/bin/bash
uid:
604
workphone:
2.7.14 group.delete
移除指定用户组
[root@master ~]# salt 'node1' group.delete zz
node1:
True
[root@master ~]# salt 'node1' group.info zz
node1:
----------
//组zz已无数据
2.8 Saltstack常用模板之cron
2.8.1 cron.set_job
为指定用户设置计划任务
[root@master ~]# salt '*' cron.set_job root 20 10 '*' '*' 7 /bin/bash /scripts/apache_install.sh
master:
new
node1:
new
#如果这个用户存在任务，则变成更改任务
[root@master ~]# salt '*' cron.set_job root 20 10 '*' '*' 7 /bin/bash /scripts/nginx_install.sh
master:
updated
node1:
updated
[root@master ~]# salt '*' cron.set_job root 20 10 '*' '*' 6 /bin/bash /scripts/nginx_install.sh
master:
updated
node1:
updated
2.8.2 cron.list_tab
查看指定用户的计划任务
[root@master ~]# salt '*' cron.list_tab root
minion1:
----------
crons:
|_
----------
cmd:
/bin/bash
comment:
None
commented:
False
daymonth:
*
dayweek:
7
hour:
10
identifier:
None
minute:
20
month:
*
env:
pre:
special:
master:
----------
crons:
|_
----------
cmd:
/bin/bash
comment:
None
commented:
False
daymonth:
*
dayweek:
7
hour:
10
identifier:
None
minute:
20
month:
*
env:
pre:
special:
2.8.3 cron.raw_cron
查看指定用户的计划任务
[root@master ~]# salt '*' cron.raw_cron root
minion1:
# Lines below here are managed by Salt, do not edit
20 10 * * 7 /bin/bash
master:
# Lines below here are managed by Salt, do not edit
20 10 * * 7 /bin/bash
2.8.4 cron.rm_job
删除指定用户的计划任务、如果这个计划任务指定了时间，则需要指定的参数匹配的时候才会删除
[root@master ~]# salt '*' cron.rm_job root /bin/bash dayweek=7
minion1:
removed
master:
removed
[root@master ~]# salt '*' cron.rm_job root /bin/bash
master:
removed
minion1:
removed
2.9 SaltStack常用模块之acl
2.9.1 acl.modfacl
为指定的文件添加或修改FACL
[root@master ~]# salt '*' acl.modfacl user test2 rwx /tmp/yy
master:
True
node1:
True
[root@master ~]# getfacl /tmp/yy
getfacl: Removing leading '/' from absolute path names
# file: tmp/aa
# owner: root
# group: root
user::rw-
user:test2:rwx
group::r--
mask::rwx
other::r--
[root@master ~]# salt '*' acl.modfacl user test3 7 /tmp/yy
master:
True
node1:
True
[root@master ~]# getfacl /tmp/yy
getfacl: Removing leading '/' from absolute path names
# file: tmp/aa
# owner: root
# group: root
user::rw-
user:test2:rwx
user:test3:rwx
group::r--
mask::rwx
other::r--
2.9.2 acl.getfacl
查看指定文件的访问控制列表（FACL）
[root@master ~]# salt '*' acl.getfacl /tmp/aa
master:
----------
/tmp/yy:
----------
comment:
----------
file:
/tmp/yy
group:
root
owner:
root
group:
|_
----------
root:
----------
octal:
4
-----此处省略n行
minion1:
----------
/tmp/yy:
----------
comment:
----------
file:
/tmp/yy
group:
root
owner:
root
2.9.3 acl.selfacl
从指定的文件中删除特定的FACL
[root@master ~]# salt '*' acl.delfacl user test2 /tmp/yy
node1:
True
master:
True
[root@master ~]# getfacl /tmp/yy
getfacl: Removing leading '/' from absolute path names
# file: tmp/yy
# owner: root
# group: root
user::rw-
user:test3:rwx
group::r--
mask::rwx
other::r--
2.9.4 acl.wipefacls
从指定的文件中删除所有facl
[root@master ~]# salt '*' acl.wipefacls /tmp/yy
node1:
True
master:
True
[root@master ~]# getfacl /tmp/yy
getfacl: Removing leading '/' from absolute path names
# file: tmp/yy
# owner: root
# group: root
user::rw-
group::r--
other::r--
扫一扫
1305
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
