自动化运维管理平台puppet安装

puppet的安装

服务端:
首先我们需要下载好puppetlabs的安装包,并且解压

wget  https://yum.puppetlabs.com/el/7/products/x86_64/puppetlabs-release-7-10.noarch.rpm

rpm -ivh puppetlabs-release-7-10.noarch.rpm

安装好依赖性软件

yum install mysql mysql-devel ruby ruby-devel ruby-irb  ruby-ri puppet-server -y

然后将puppetmaster的服务配置为开机自启动并将其开启

systemctl start puppet.service 
systemctl enable puppetmaster.service 

随后检查puppet服务的启动情况

puppet master --verbose --no-daemonize

查看端口的使用情况，puppet使用的是8140情况

 lsof -i:8140

输出结果如下

COMMAND  PID   USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
puppet  6723 puppet    8u  IPv4  63949      0t0  TCP *:8140 (LISTEN)

随后即可进行安装puppet
客户端：

 yum install puppet-3.8.7-1.el7.noarch.rpm -y

期间可能会出现依赖性问题，需要到一些镜像站上下载相关的软件包
接下来需要申请证书

puppet agent --test --server zyc

返回的结果如下

Info: Creating a new SSL key for saltstack
Info: Caching certificate for ca
Info: csr_attributes file loading from /etc/puppet/csr_attributes.yaml
Info: Creating a new SSL certificate request for saltstack
Info: Certificate Request fingerprint (SHA256): 08:63:DF:18:93:40:C2:D1:0B:0E:CB:FD:09:80:C7:3E:81:97:51:7A:E0:AD:95:09:D1:C4:CE:D8:AA:28:30:82
Info: Caching certificate for ca
Exiting; no certificate found and waitforcert is disabled

可以通过命令在主机端查看正在申请证书的客户端

 puppet cert --list -all

结果如下

 "saltstack" (SHA256) 08:63:DF:18:93:40:C2:D1:0B:0E:CB:FD:09:80:C7:3E:81:97:51:7A:E0:AD:95:09:D1:C4:CE:D8:AA:28:30:82
+ "zyc.dhcp"  (SHA256) 99:5F:66:B7:73:F1:48:E1:44:76:4C:BC:18:67:1F:A1:95:7C:0C:10:00:2A:E8:93:79:40:0A:60:04:AE:57:0E (alt names: "DNS:puppet", "DNS:puppet.DHCP", "DNS:zyc.DHCP", "DNS:zyc.dhcp")

然后在主机端需要来接受这个请求

puppet cert sign saltstack

然后结果如下

Notice: Signed certificate request for saltstack
Notice: Removing file Puppet::SSL::CertificateRequest saltstack at '/var/lib/puppet/ssl/ca/requests/saltstack.pem'

在客户端再发一次认证请求，命令如下

puppet agent --test --server zyc

开启服务即可