saltstack中的ssh模块（不通过从节点，直接通过ssh控制）

本文链接：https://blog.youkuaiyun.com/qwqq233/article/details/92799196

博客介绍了节点部署过程，包括关闭节点服务以消除实验影响、新建ssh节点信息、修改配置文件并重启。测试查看发现，即便server2和server3关闭了minion节点，server1仍可通过ssh控制它们。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

部署过程

1.关闭节点服务（消除实验影响）

[root@server2 minion]# systemctl stop salt-minion
[root@server3 minion]# systemctl stop salt-minion

2.新建ssh节点信息

[root@server1 ~]# cd /etc/salt/
[root@server1 salt]# cat roster 
# Sample salt-ssh config file
#web1:
#  host: 192.168.42.1 # The IP addr or DNS hostname
#  user: fred         # Remote executions will be executed as user fred
#  passwd: foobarbaz  # The password to use for login, if omitted, keys are used
#  sudo: True         # Whether to sudo to root, not enabled by default
#web2:
#  host: 192.168.42.2

server2:
  host: 172.25.4.2
  user: root
  passwd: redhat

server3:						##添加所要控制的节点ip及用户名和密码
  host: 172.25.4.3
  user: root
  passwd: redhat

3.修改配置文件并重启

[root@server1 salt]# vim master		##注释掉推送功能，否则无法测试
1262 #mysql.user: 'salt'
1263 #mysql.pass: 'westos'
1264 #mysql.db: 'salt'
1265 #mysql.port: 3306
1266 
1267 #master_job_cache: mysql
[root@server1 salt]# systemctl restart salt-master

测试查看

[root@server1 salt]# salt-ssh '*' cmd.run df
server2:
    Filesystem            1K-blocks    Used Available Use% Mounted on
    /dev/mapper/rhel-root  17811456 3157708  14653748  18% /
    devtmpfs                 497280       0    497280   0% /dev
    tmpfs                    508252       0    508252   0% /dev/shm
    tmpfs                    508252    6780    501472   2% /run
    tmpfs                    508252       0    508252   0% /sys/fs/cgroup
    /dev/sda1               1038336  141508    896828  14% /boot
    tmpfs                    101652       0    101652   0% /run/user/0
server3:
    Filesystem            1K-blocks    Used Available Use% Mounted on
    /dev/mapper/rhel-root  17811456 4552796  13258660  26% /
    devtmpfs                 497292       0    497292   0% /dev
    tmpfs                    508264       0    508264   0% /dev/shm
    tmpfs                    508264   51264    457000  11% /run
    tmpfs                    508264       0    508264   0% /sys/fs/cgroup
    /dev/sda1               1038336  141500    896836  14% /boot
    tmpfs                    101656       0    101656   0% /run/user/0
[root@server1 salt]# salt-ssh '*' test.ping 
server3:
    True
server2:
    True

我们可以看出来，尽管server2和server3关闭了minion节点，但所server1仍然可以通过ssh去控制他们