SaltStack部署实践一键部署Nginx、Redis_saltstack部署nginx、redis

最新推荐文章于 2024-07-09 23:34:47 发布

2301_78416543

最新推荐文章于 2024-07-09 23:34:47 发布

阅读量564

点赞数 17

分类专栏： 2024年程序员学习文章标签： saltstack nginx redis

本文链接：https://blog.csdn.net/2301_78416543/article/details/137742635

版权

2024年程序员学习专栏收录该内容

292 篇文章 0 订阅

订阅专栏

  - test -e /etc/redis/redis.conf

redis_enable:
cmd.run:
- names:
- systemctl enable redis-server
- systemctl start redis-server
- unless:
- systemctl status redis-server


## Nginx


我们在 salt-master 的家目录下创建 Nginx 目录来存放相关脚本文件

mkdir -pv /home/salt/nginx/files


* conf.sls：负责nginx的文件下发 init.sls：saltstack执行sls脚本顺序
* install.sls：负责nginx的安装前准备以及编译安装
* files：存放nginx配置文件以及注册服务文件，比如说nginx.conf、nginx.service


创建好之后，根据自己需要将定制的 Nginx 的配置文件和注册服务文件放在files目录下


编写 init.sls 文件

vim /home/salt/nginx/init.sls

include:

nginx.install
nginx.conf


下面开始进行 Nginx 的安装，这里我写了两个脚本，分别对应Nginx的不同安装方式：


1、一个源码编译安装 Nginx


2、一个是 yum 安装 Nginx


### 源码编译安装Nginx


首先编写安装脚本

vim /home/salt/nginx/install.sls


编译安装Nginx的话我们指定安装版本

{% set VERSION = ‘1.15.4’ %}


创建Nginx工作目录、日志目录

data_dir:
file.directory:
- name: /var/lib/nginx
- user: root
- group: root
- makedirs: True
- unless:
- test -e /var/lib/nginx

log_dir:
file.directory:
- name: /var/log/nginx
- user: root
- group: root
- makedirs: True
- require:
- file: data_dir
- unless:
- test -e /var/log/nginx


下发 Nginx 压缩包到minio，接着进行解压缩

nginx_source:
file.managed:
- name: /opt/nginx-{{VERSION}}.tar.gz
- source: salt://nginx/nginx-{{VERSION}}.tar.gz
- require:
- file: log_dir
- unless:
- test -e /opt/nginx-{{VERSION}}.tar.gz

nginx_extract:
cmd.run:
- cwd: /opt
- names:
- tar zxf nginx- {{VERSION}}.tar.gz
- require:
- file: nginx_source
- unless:
- test -e /opt/nginx-{{VERSION}}


安装编译安装时所需要的工具包

nginx_pkg:
pkg.installed:
- pkgs:
- gcc
- openssl-devel
- pcre-devel
- zlib-devel
- require:
- file: nginx_extract


编译安装Nginx


指定Nginx的工作目录为：/opt/nginx

nginx_compile:
cmd.run:
- cwd: /opt/nginx-{{version}}
- names:
- ./configure --prefix=/opt/nginx --with-http_stub_status_module --with-file-aio --with-http_ssl_module && make && make install
- require:
- pkg: nginx_pkg
- unless: test -d /opt/nginx


接着编写配置下发脚本

vim /home/salt/nginx/conf.sls


创建Nginx配置文件目录软连接（个人习惯）

nginx_softlink:
cmd.run:
- name: ln -s /opt/nginx/conf/ /etc/nginx


下发Nginx配置文件

nginx_conf:
file.managed:
- name: /etc/nginx/nginx.conf
- source: salt://nginx/files/nginx.conf
- require:
- cmd: nginx_softlink
- unless:
- test -e /etc/nginx/nginx.conf


下发Nginx注册服务文件，并重新加载

nginx_system:
file.managed:
- name: /usr/lib/systemd/system/nginx.service
- source: salt://nginx/files/nginx.service
- require:
- file: nginx_conf
- unless:
- test -e /usr/lib/systemd/system/nginx.service

nginx_systemreload:
cmd.run:
- name:
- systemctl daemon-reload
- require:
- file: nginx_system


Nginx内核参数调优

nginx_kernel:
cmd.run:
- cwd: /etc/sysctl.conf
file.append:
- text:
- #set nginx kernel args
- net.ipv4.tcp_keepalive_time = 30
- net.ipv4.ip_local_port_range = 1024 65000
- net.ipv4.tcp_max_tw_buckets = 15000
- net.ipv4.tcp_tw_reuse = 1
- net.ipv4.tcp_tw_recycle = 0
- net.ipv4.tcp_fin_timeout = 30
- net.core.somaxconn = 65535
- net.core.netdev_max_backlog = 262144
- net.ipv4.tcp_max_orphans = 262144
- net.ipv4.tcp_max_syn_backlog = 262144
- net.ipv4.tcp_timestamps = 0
- net.ipv4.tcp_synack_retries = 1
- net.ipv4.tcp_syn_retries = 1
- unless: grep “#set nginx kernel args” /etc/sysctl.conf
cmd.run:
- name: /sbin/sysctl -p


启动 Nginx 并加入到开机自启动中

nginx_start:
cmd.run:
- name:
- systemctl start nginx
- systemctl enable nginx
- require:
- cmd: nginx_systemreload
- unless:
- systemctl status nginx


编写完之后我们在 master 上执行 salt 命令

salt ip地址 state.sls nginx.init


完整脚本如下：


install.sls