1.2 Salt-ssh批量自动安装被控端minion

最新推荐文章于 2025-09-05 14:41:09 发布

转载最新推荐文章于 2025-09-05 14:41:09 发布 · 159 阅读

0 ·

CC 4.0 BY-SA版权

原文链接：https://yq.aliyun.com/articles/512181

文章标签：

#开发工具 #数据库 #运维

本文介绍如何使用SaltStack实现自动化部署流程，包括配置文件结构、安装salt-minion、配置minion节点及通过reactor实现自动接受密钥等关键步骤。

[root@bogon salt]# cat master
file_roots:

  base:

    - /srv/salt/base

  prod:

    - /srv/salt/prod

interface: 192.168.88.3
reactor:

    - 'salt/auth':

        - /srv/reactor/Minion.sls

    - 'salt/minion/*/start':

        - /srv/reactor/auto.sls

[root@bogon salt]# cat roster
m10:

   host: 192.168.88.6

   user: root

   passwd: 123456

/srv/salt目录结构      
conf  install.sls  yum.repos.d
 
[root@bogon minions]# cat install.sls 
minion_yum:

  file.recurse:

    - name: /etc/yum.repos.d

    - source: salt://minions/yum.repos.d

    - user: root

    - group: root

    - file_mode: 644

    - dir_mode: 755

    - include_empty: True
minion_install:

  pkg.installed:

    - pkgs:

      - salt-minion

    - require:

      - file: minion_yum

    - unless: rpm -qa | grep salt-minion
minion_conf:

  file.managed:

    - name: /etc/salt/minion

    - source: salt://minions/conf/minion 

    - user: root

    - group: root

    - mode: 640

    - require:

      - pkg: minion_install
minion_service:

  service.running:

    - name: salt-minion

    - enable: True

    - require:

      - file: minion_conf 

[root@bogon minions]# cat conf/minion 

master: 192.168.88.3

id: m10 

这样可以完成自动验证
 
[root@bogon salt]# cat master
file_roots:

  base:

    - /srv/salt/base

  prod:

    - /srv/salt/prod

interface: 192.168.88.3
reactor:

    - 'salt/auth':

        - /srv/reactor/Minion.sls

    - 'salt/minion/*/start':

        - /srv/reactor/auto.sls

[root@bogon salt]# cat /srv/reactor/Minion.sls 

{% if 'act' in data and data['act'] == 'pend' %}
minion_add:

  wheel.key.accept:

    - match: {{ data['id'] }}

{% endif %}

[root@bogon salt]# cat /srv/reactor/auto.sls 
run_state:

    local.state.sls:

        - tgt: {{ data['id'] }}

        - arg:

            - shencan
run_init:

    local.cmd.run:

        - tgt: {{ data['id'] }}

        - arg:

            - echo initsok >>/tmp/cpis

salt-ssh -i '*' state.sls minions.install

总是研究一个东西，被很多东西诱惑，搞到最后目标都没了。靠。

参考 http://zkhylt.blog.51cto.com/3638719/1782990

salt升级

https://repo.saltstack.com/yum

yum install salt-minion python26-zmq -y

#yum install --downloadonly --downloaddir=/home salt-2016

先决条件，全部在master操作

vim /etc/hosts

172.1.1.2 id1

vim /etc/salt/roster

id1:

host: 172.1.1.2

user: root

passwd: xx

master 172.1.1.1

[root@nginx minions]# tree
.
├── conf
│   └── minion
├── install.sls
└── yum.repos.d

    ├── Centos-Base-6.repo

    └── salt-latest.repo

[root@nginx minions]# cat /etc/salt/master

file_roots:

base:

- /srv/salt

prod:

- /srv/salt/prod

minion:

- /srv/salt/minions

interface: 172.1.1.1

nodegroups:

mysql: 'id1'

cd /srv/salt/minions

[root@nginx minions]# cat install.sls 
minion_yum:

  file.recurse:

    - name: /etc/yum.repos.d

    - source: salt://minions/yum.repos.d

    - user: root

    - group: root

    - file_mode: 644

    - dir_mode: 755

    - include_empty: True
minion_install:

  pkg.installed:

    - pkgs:

      - salt-minion

    - require:

      - file: minion_yum

    - unless: rpm -qa | grep salt-minion
minion_conf:

  file.managed:

    - name: /etc/salt/minion

    - source: salt://minions/conf/minion 

    - user: root

    - group: root

    - mode: 640

    - template: jinja

    - defaults:

      minion_id: {{ grains['fqdn_ip4'][0]}}

    - require:

      - pkg: minion_install
minion_service:

  service.running:

    - name: salt-minion

    - enable: True

    - require:

      - file: minion_conf