saltstack部署zabbix

saltstack部署zabbix

目录结构

[root@master ~]# tree /srv/salt/prod/
/srv/salt/prod/
├── modules
│   ├── application
│   │   └── php
│   │       ├── files
│   │       │   ├── install.sh
│   │       │   ├── oniguruma-devel-6.8.2-2.el8.x86_64.rpm
│   │       │   ├── php-7.4.25.tar.gz
│   │       │   ├── php-fpm
│   │       │   ├── php-fpm.conf
│   │       │   ├── php-fpm.service
│   │       │   └── www.conf
│   │       └── install.sls
│   ├── database
│   │   └── mysql
│   │       ├── files
│   │       │   ├── install.sh
│   │       │   ├── mysql-5.7.34-linux-glibc2.12-x86_64.tar.gz
│   │       │   ├── mysqld.service
│   │       │   └── mysql.server
│   │       └── install.sls
│   └── web
│       └── apache
│           ├── files
│           │   ├── apr-1.7.0.tar.gz
│           │   ├── apr-util-1.6.1.tar.gz
│           │   ├── compile.sh
│           │   ├── httpd-2.4.49.tar.gz
│           │   ├── httpd.conf
│           │   ├── httpd.service
│           │   ├── index.php
│           │   └── install.sh
│           └── install.sls
└── zabbix
    ├── apache.sls
    ├── files
    │   ├── index.php
    │   ├── install.sh
    │   ├── my.cnf
    │   ├── mysql.conf
    │   ├── vhosts.conf
    │   ├── zabbix-5.4.4.tar.gz
    │   └── zabbix_server.conf
    ├── install.sls
    ├── lamp.sls
    └── mysql.sls

state.sls状态文件

apache
/srv/salt/prod/modules/web/apache/install.sls

[root@master ~]# cat /srv/salt/prod/modules/web/apache/install.sls

apache-dep-package:
  pkg.installed:
    - pkgs:
      - openssl-devel
      - pcre-devel
      - expat-devel
      - libtool
      - gcc
      - gcc-c++
      - make

apache:
  user.present:
    - shell: /sbin/nologin
    - createhome: false
    - system: true

apache-download:
  file.managed:
    - names:
      - /usr/src/apr-1.7.0.tar.gz:
        - source: salt://modules/web/apache/files/apr-1.7.0.tar.gz
      - /usr/src/apr-util-1.6.1.tar.gz:
        - source: salt://modules/web/apache/files/apr-util-1.6.1.tar.gz
      - /usr/src/httpd-2.4.49.tar.gz:
        - source: salt://modules/web/apache/files/httpd-2.4.49.tar.gz

salt://modules/web/apache/files/install.sh:
  cmd.script

salt://modules/web/apache/files/compile.sh:
  cmd.script

/usr/lib/systemd/system/httpd.service:
  file.managed:
    - source: salt://modules/web/apache/files/httpd.service
    - user: root
    - group: root
    - mode: '0644'

/usr/local/httpd/conf/httpd.conf:
  file.managed:
    - source: salt://modules/web/apache/files/httpd.conf
    - user: root
    - group: root
    - mode: '0644'

/srv/salt/prod/modules/web/apache/files/install.sh

[root@master ~]# cat  /srv/salt/prod/modules/web/apache/files/install.sh
#! /bin/bash

cd /usr/src
rm -rf apr-1.7.0 apr-util-1.6.1 httpd-2.4.49
tar xf apr-1.7.0.tar.gz
tar xf apr-util-1.6.1.tar.gz
tar xf httpd-2.4.49.tar.gz

/srv/salt/prod/modules/web/apache/files/compile.sh

/srv/salt/prod/modules/web/apache/files/compile.sh 
#! /bin/bash

cd /usr/src/apr-1.7.0
sed -i '/$RM "$cfgfile"/d' configure
./configure --prefix=/usr/local/apr && make && make install

cd ../apr-util-1.6.1
./configure --prefix=/usr/local/apr-util --with-apr=/usr/local/apr && make && make install

cd ../httpd-2.4.49
./configure --prefix=/usr/local/httpd --enable-so --enable-ssl --enable-cgi --enable-rewrite --with-zlib --with-pcre --with-apr=/usr/local/apr --with-apr-util=/usr/local/apr-util/ --enable-modules=most --enable-mpms-shared=all --with-mpm=prefork

make -j $(grep 'processor' /proc/cpuinfo | wc -l) && make install

Mysql

/srv/salt/prod/modules/database/mysql/install.sls

[root@master ~]# cat /srv/salt/prod/modules/database/mysql/install.sls

ncurses-compat-libs:
  pkg.installed

create-mysql-user:
  user.present:
    - name: mysql
    - system: true
    - createhome: false
    - shell: /sbin/nologin

create-datadir:
  file.directory:
    - name: /opt/data
    - user: mysql
    - group: mysql
    - mode: '0755'

/usr/src/mysql-5.7.34-linux-glibc2.12-x86_64.tar.gz:
  file.managed:
    - source: salt://modules/database/mysql/files/mysql-5.7.34-linux-glibc2.12-x86_64.tar.gz
    - user: root
    - group: root
    - mode: '0644'

salt://modules/database/mysql/files/install.sh:
  cmd.script

trasfer-files:
  file.managed:
    - names:
      - /usr/local/mysql/support-files/mysql.server:
        - source: salt://modules/database/mysql/files/mysql.server
      - /usr/lib/systemd/system/mysqld.service:
        - source: salt://modules/database/mysql/files/mysqld.service

/srv/salt/prod/modules/database/mysql/files/install.sh

[root@master ~]#cat/srv/salt/prod/modules/database/mysql/files/install.sh
#! /bin/bash

cd /usr/src
rm -rf mysql-5.7.34-linux-glibc2.12-x86_64
tar xf mysql-5.7.34-linux-glibc2.12-x86_64.tar.gz -C /usr/local
ln -s /usr/local/mysql-5.7.34-linux-glibc2.12-x86_64 /usr/local/mysql
chown -R mysql.mysql /usr/local/mysql*
echo 'export PATH=/usr/local/mysql/bin:$PATH' > /etc/profile.d/mysqld.sh
/usr/local/mysql/bin/mysqld --initialize-insecure --user=mysql --datadir=/opt/

/srv/salt/prod/modules/application/php/files/install.sh

[root@master ~]# cat /srv/salt/prod/modules/application/php/files/install.sh
#!/bin/bash

cd /usr/src
rm -rf php-7.4.25
tar xf php-7.4.25.tar.gz
cd php-7.4.25
./configure --prefix=/usr/local/php7  \
        --with-config-file-path=/etc \
        --enable-fpm \
        --disable-debug \
        --disable-rpath \
        --enable-shared \
        --enable-soap \
        --with-openssl \
        --enable-bcmath \
        --with-iconv \
        --with-bz2 \
        --enable-calendar \
        --with-curl \
        --enable-exif  \
        --enable-ftp \
        --enable-gd \
        --with-jpeg \
        --with-zlib-dir \
        --with-freetype \
        --with-gettext \
        --enable-mbstring \
        --enable-pdo \
        --with-mysqli=mysqlnd \
        --with-pdo-mysql=mysqlnd \
        --with-readline \
        --enable-shmop \
        --enable-simplexml \
        --enable-sockets \
        --with-zip \
        --enable-mysqlnd-compression-support \
        --with-pear \
        --enable-pcntl \
        --enable-posix && \
        make && make install

/srv/salt/prod/modules/application/php/install.sls

[root@master ~]# cat /srv/salt/prod/modules/application/php/install.sls
/usr/src/oniguruma-devel-6.8.2-2.el8.x86_64.rpm:
  file.managed:
    - source: salt://modules/application/php/files/oniguruma-devel-6.8.2-2.el8.x86_64.rpm
    - user: root
    - group: root
    - mode: '0644'
  cmd.run:
    - name: yum -y install /usr/src/oniguruma-devel-6.8.2-2.el8.x86_64.rpm

depend-package-install:
  pkg.installed:
    - pkgs:
      - libxml2
      - libxml2-devel
      - openssl
      - openssl-devel
      - bzip2
      - bzip2-devel
      - libcurl
      - libcurl-devel
      - libicu-devel
      - libjpeg-turbo
      - libjpeg-turbo-devel
      - libpng
      - libpng-devel
      - openldap-devel
      - pcre-devel
      - freetype
      - freetype-devel
      - gmp
      - gmp-devel
      - libmcrypt
      - libmcrypt-devel
      - readline
      - readline-devel
      - libxslt
      - libxslt-devel
      - mhash
      - mhash-devel
      - php-mysqlnd
      - libsqlite3x-devel
      - libzip-devel

/usr/src/php-7.4.25.tar.gz:
  file.managed:
    - source: salt://modules/application/php/files/php-7.4.25.tar.gz
    - user: root
    - group: root
    - mode: '0644'

salt://modules/application/php/files/install.sh:
  cmd.script

copy_config:
  file.managed:
    - names: 
       - /etc/init.d/php-fpm:
         - source: salt://modules/application/php/files/php-fpm
         - user: root
         - group: root
         - mode: '0755'
       - /usr/local/php7/etc/php-fpm.conf:
         - source: salt://modules/application/php/files/php-fpm.conf
         - user: root
         - group: root
         - mode: '0644'
       - /usr/local/php7/etc/php-fpm.d/www.conf:
         - source: salt://modules/application/php/files/www.conf
         - user: root
         - group: root
         - mode: '0644'
       - /usr/lib/systemd/system/php-fpm.service:
         - source: salt://modules/application/php/files/php-fpm.service
         - user: root
         - group: root
         - mode: '0644' 

php-fpm.service:
  service.running:
    - enable: true  

zabbix

/srv/salt/prod/zabbix/apache.sls

[root@master ~]# cat /srv/salt/prod/zabbix/apache.sls
"Development Tools":
  pkg.group_installed

include:
  - modules.web.apache.install

/usr/include/httpd:
  file.symlink:
    - target: /usr/local/httpd/include

/usr/local/httpd/htdocs/zabbix:
  file.direcotry:
    - user: root
    - group: root 
    - mode: '0755'
    - makedirs: true

/usr/local/httpd/htdocs/zabbix/index.php:
  file.managed:
    - source: salt://zabbix/files/index.php
    - user: root
    - group: root
    - mode: '0644'

/usr/local/httpd/conf/extra/vhosts.conf:
  file.managed:
    - source: salt://zabbix/files/vhosts.conf

zabbix-apache-service:
  service.running:
    - name: httpd
    - enable: true

/srv/salt/prod/zabbix/mysql.sls

[root@master ~]# cat /srv/salt/prod/zabbix/mysql.sls
lamp-dep-pkg:
  pkg.installed:
    - pkgs:
      - ncurses-devel
      - openssl-devel
      - openssl
      - cmake  
      - mariadb-devel

include:
  - modules.database.mysql.install

provides-mysql-file:
  file.managed:
    - user: root
    - group: root
    - mode: '0644'
    - names: 
      - /etc/my.cnf:
        - source: salt://zabbix/files/my.cnf
      - /etc/ld.so.conf.d/mysql.conf:
        - source: salt://zabbix/files/mysql.conf

/usr/local/include/mysql:
  file.symlink:
    - target: /usr/local/mysql/include

mysqld.service:
  service.running:
    - enable: true

mysql-set-password:
  cmd.run:
    - name: /usr/local/mysql/bin/mysql -e "set password = password('1')"

/srv/salt/prod/zabbix/lamp.sls

[root@master ~]# cat /srv/salt/prod/zabbix/lamp.sls
include:
  - zabbix.apache
  - zabbix.mysql
  - modules.application.php.install

/srv/salt/prod/zabbix/files/install.sh

[root@master zabbix]# cat files/install.sh 
#!/bin/bash

cd /usr/src/
tar xf zabbix-5.4.4.tar.gz

mysql -uroot -p1 -e "create database zabbix character set utf8 collate utf8_bin;"

mysql -uroot -p1 -e "grant all privileges on zabbix.* to zabbix@localhost identified by 'zabbix123!';"

mysql -uroot -p1 -e "flush privileges;"

cd zabbix-5.4.4
mysql -uzabbix -pzabbix123! zabbix < schema.sql
mysql -uzabbix -pzabbix123! zabbix < images.sql
mysql -uzabbix -pzabbix123! zabbix < data.sql

./configure --enable-server \
        --enable-agent \
        --with-mysql \
        --with-net-snmp \
        --with-libcurl \
        --with-libxml2 && \
        make install

cp -r ui/* /usr/local/apache/htdocs/zabbix/
chown -R apache.apache /usr/local/apache/htdocs
chmod 777 /usr/local/apache/htdocs/zabbix/conf
ln -s /tmp/mysql.sock /var/lib/mysql/

/srv/salt/prod/zabbix/install.sls

[root@master zabbix]# cat install.sls 
include:
  - zabbix.lamp

zabbix-dep-pkgs:
  pkg.installed:
    - pkgs:
      - net-snmp-devel
      - libevent-devel

zabbix:
  user.present:
    - shell: /sbin/nologin
    - createhome: false
    - system: true

/usr/src/zabbix-5.4.4.tar.gz:
  file.managed:
    - source: salt://zabbix/files/zabbix-5.4.4.tar.gz

salt://zabbix/files/install.sh:
  cmd.script

/usr/local/etc/zabbix_server.conf:
  file.managed:
    - salt://zabbix/files/zabbix_server.conf


//开始执行
salt '*' state.sls zabbix.lamp saltenv=prod


[root@master zabbix]# salt 'node2' state.sls zabbix.lamp saltenv=prod
node2:
    Minion did not return. [No response]
    The minions may not have all finished running and any remaining minions will return upon completion. To look up the return data for this job later, run the following command:
    
    salt-run jobs.lookup_jid 20211112114141293447
ERROR: Minions returned with non-zero exit code
[root@master zabbix]# salt 'node2' state.sls zabbix.lamp saltenv=prod
node2:
    Data failed to compile:
----------
    The function "state.sls" is running as PID 87570 and was started at 2021, Nov 12 11:41:41.293447 with jid 20211112114141293447

重启后再次执行

[root@node2 ~]# ss -anlt
State           Recv-Q          Send-Q                   Local Address:Port                    Peer Address:Port          
LISTEN          0               128                          127.0.0.1:9000                         0.0.0.0:*             
LISTEN          0               128                            0.0.0.0:22                           0.0.0.0:*             
LISTEN          0               80                                   *:3306                               *:*             
LISTEN          0               128                                  *:80                                 *:*             
LISTEN          0               128                               [::]:22                              [::]:*