一、SaltStack简介
二、特点
1.快;多线程并发执行
2.底层基于python
3.丰富的api
4.运行模式:本地运行;master/minion;salt SSH
5.三大功能:远程执行;配置管理;云管理
6.支持的操作系统比较丰富
三、SaltStack安装基础环境准备
1.server1:安装saltstack
[root@server1 2018]# cd /root/saltstack/rhel7/2018
[root@server1 2018]# ls
PyYAML-3.11-1.el7.x86_64.rpm python2-libcloud-2.0.0-2.el7.noarch.rpm
libsodium-1.0.16-1.el7.x86_64.rpm repodata
openpgm-5.2.122-2.el7.x86_64.rpm salt-2018.3.3-1.el7.noarch.rpm
python-cherrypy-5.6.0-2.el7.noarch.rpm salt-api-2018.3.3-1.el7.noarch.rpm
python-crypto-2.6.1-2.el7.x86_64.rpm salt-cloud-2018.3.3-1.el7.noarch.rpm
python-futures-3.0.3-1.el7.noarch.rpm salt-master-2018.3.3-1.el7.noarch.rpm
python-msgpack-0.4.6-1.el7.x86_64.rpm salt-minion-2018.3.3-1.el7.noarch.rpm
python-psutil-2.2.1-1.el7.x86_64.rpm salt-ssh-2018.3.3-1.el7.noarch.rpm
python-tornado-4.2.1-1.el7.x86_64.rpm salt-syndic-2018.3.3-1.el7.noarch.rpm
python-zmq-15.3.0-3.el7.x86_64.rpm zeromq-4.1.4-7.el7.x86_64.rpm
[root@server1 2018]# yum install -y *
设置iserver1为主master:
[root@server1 ~]# cd /etc/salt/
[root@server1 salt]# ls
cloud cloud.maps.d master minion.d proxy.d
cloud.conf.d cloud.profiles.d master.d pki roster
cloud.deploy.d cloud.providers.d minion proxy
[root@server1 salt]# vim minion
16 master: 172.25.60.1
开启服务:
[root@server1 salt]# systemctl start salt-master.service
[root@server1 salt]# systemctl start salt-minion.service
查看端口是否开启:
[root@server1 salt]# netstat -antlp
4505端口:用来链接slave,发布订阅
4506端口:请求响应,模式为:zmq(消息队列)
server2操作与1相同,但只需要开启salt-minion.service服务即可
安装saltstack
[root@server2 2018]# cd /etc/salt/
[root@server2 salt]# vim minion
16 master: 172.25.60.1
[root@server2 salt]# systemctl start salt-minion.service
2.Salt秘钥认证设置
[root@server1 salt]# salt-key -L
[root@server1 salt]# salt-key -A
Proceed? [n/Y] Y
[root@server1 salt]# salt-key -L
3.编辑执行文件
[root@server1 ~]# mkdir /srv/salt
[root@server1 ~]# cd /srv/salt/
[root@server1 salt]# mkdir keepalived
[root@server1 salt]# cd keepalived/
[root@server1 keepalived]# mkdir files
[root@server1 keepalived]# vim install.sls
kp-install:
pkg.installed:
- pkgs:
- keepalived
file.managed:
- name: /etc/keepalived/keepalived.conf
- source: salt://keepalived/files/keepalived.conf
- template: jinja
{% if grains['fqdn'] == 'server1' %}
STATE: MASTER
VRID: 51
PRIORITY: 100
{% elif grains['fqdn'] == 'server2' %}
STATE: BACKUP
VRID: 51
PRIORITY: 50
{% endif %}
service.running:
- name: keepalived
- reload: True
- watch:
- file: kp-install
[root@server1 keepalived]# cd files/
[root@server1 files]# vim keepalived.conf
! Configuration File for keepalived
global_defs {
notification_email {
root@localhost
}
notification_email_from keepalived@localhost
smtp_server 127.0.0.1
smtp_connect_timeout 30
router_id LVS_DEVEL
}
vrrp_instance VI_1 {
state {{ STATE }}
interface eth0
virtual_router_id {{ VRID }}
priority {{ PRIORITY }}
advert_int 1
authentication {
auth_type PASS
auth_pass 1111
}
virtual_ipaddress {
172.25.60.100
}
}
[root@server1 salt]# cd /srv/salt/
[root@server1 salt]# vim top.sls
base:
'server1':
- keepalived.install
'server2':
- keepalived.install
4.执行top.sls文件,向所有节点安装部署服务
[root@server1 salt]# salt '*' state.highstate
5.测试:
[root@server1 salt]# ip addr
vip在server1上,关闭keepalived服务再次查看:
[root@server1 salt]# systemctl stop keepalived.service
[root@server1 salt]# ip addr
[root@server2 ~]# ip a
当server1宕机时,vip漂移到server2上。
再次打开keepalived,vip又回到server1上:
[root@server1 salt]# systemctl start keepalived.service
[root@server1 salt]# ip addr