SaltSatck-zabbix部署

部署zabbix

部署lamp

因为zabbix是用php语言开发的，所以必须先部署lamp架构，使其能够支持运行php网页

• lamp模块结构

[root@master ~]# tree /srv/salt/prod/modules/
/srv/salt/prod/modules/
├── application
│   └── php
│       ├── files
│       │   ├── init.d.php-fpm
│       │   ├── install.sh
│       │   ├── oniguruma-devel-6.8.2-2.el8.x86_64.rpm
│       │   ├── php-7.4.24.tar.xz
│       │   ├── php-8.0.11.tar.xz
│       │   ├── php-fpm.conf.default
│       │   ├── php-fpm.service
│       │   ├── php.ini-production
│       │   └── www.conf.default
│       └── install.sls
├── database
│   └── mysql
│       ├── files
│       │   ├── my.cnf
│       │   ├── mysql-5.7.34-linux-glibc2.12-x86_64.tar.gz
│       │   ├── mysqld.service
│       │   ├── mysqld.sh
│       │   └── mysql.server
│       └── install.sls
└── web
    └── apache
        ├── file
        │   ├── apr-1.7.0.tar.gz
        │   ├── apr-util-1.6.1.tar.gz
        │   ├── httpd-2.4.48.tar.gz
        │   ├── httpd.conf
        │   ├── httpd.service
        │   └── install.sh
        └── install.sls

• salt://modules.web.apache.install

[root@master apache]# cat install.sls 
"Development Tools":
  pkg.group_installed
   
httpd-dep-packages:
  pkg.installed:
    - pkgs:
      - openssl-devel
      - pcre-devel
      - expat-devel
      - libtool
      - gcc
      - gcc-c++
      - make

create-httpd-user:
  user.present:
    - name: apache
    - shell: /sbin/nologin
    - createhome: false
    - system: true

copy-software:
  file.managed:
    - names:
      - /usr/src/apr-1.7.0.tar.gz:
        - source: salt://modules/web/apache/file/apr-1.7.0.tar.gz
      - /usr/src/apr-util-1.6.1.tar.gz:
        - source: salt://modules/web/apache/file/apr-util-1.6.1.tar.gz
      - /usr/src/httpd-2.4.48.tar.gz:
        - source: salt://modules/web/apache/file/httpd-2.4.48.tar.gz

salt://modules/web/apache/file/install.sh:
  cmd.script

/usr/local/apache/conf/httpd.conf:
  file.managed:
    - source: salt://modules/web/apache/file/httpd.conf
    - user: root
    - group: root
    - mode: '0644'

/usr/lib/systemd/system/httpd.service:
  file.managed:
    - source: salt://modules/web/apache/file/httpd.service 
    - user: root
    - group: root
    - mode: '0644'

• salt://modules.database.mysql.install

[root@master mysql]# cat install.sls 
ncurses-compat-libs:
  pkg.installed

mysql:
  user.present:
    - system: true
    - createhome: false
    - shell: /sbin/nologin

/usr/local:
  archive.extracted:
    - source: salt://modules/database/mysql/files/mysql-5.7.34-linux-glibc2.12-x86_64.tar.gz
  file.symlink:
    - name: /usr/local/mysql
    - target: /usr/local/mysql-5.7.34-linux-glibc2.12-x86_64 

/usr/local/mysql:
  file.directory:
    - user: mysql
    - group: mysql
    - mode: '0755'
    - recurse:
      - user
      - group

/opt/data:
  file.directory:
    - user: mysql
    - group: mysql
    - mode: '0755'
    - makedirs: true
    - recurse:
      - user
      - group 

/etc/profile.d/mysqld.sh:
  file.managed:
    - source: salt://modules/database/mysql/files/mysqld.sh

/usr/local/mysql/support-files/mysql.server:
  file.managed:
    - source: salt://modules/database/mysql/files/mysql.server
    - user: mysql
    - group: mysql
    - mode: '0755'

/usr/lib/systemd/system/mysqld.service:
  file.managed:
    - source: salt://modules/database/mysql/files/mysqld.service
    - user: root
    - group: root
    - mode: '0644'

mysql-initialize:
  cmd.run:
    - name: '/usr/local/mysql/bin/mysqld --initialize-insecure --user=mysql --datadir=/opt/data/' 

• salt://modules.application.php.install

[root@master php]# cat install.sls 
/tmp/oniguruma-devel-6.8.2-2.el8.x86_64.rpm:
  file.managed:
    - source: salt://modules/application/php/files/oniguruma-devel-6.8.2-2.el8.x86_64.rpm
    - user: root
    - group: root
    - mode: '0644'
  cmd.run:
    - name: yum -y install /tmp/oniguruma-devel-6.8.2-2.el8.x86_64.rpm

php-dep-package:
  pkg.installed:
    - pkgs:
      - libxml2 
      - libxml2-devel 
      - libsqlite3x-devel
      - openssl 
      - openssl-devel 
      - bzip2 
      - bzip2-devel 
      - libcurl 
      - libcurl-devel 
      - libicu-devel 
      - libjpeg-turbo
      - libjpeg-turbo-devel 
      - libpng 
      - libpng-devel 
      - openldap-devel  
      - pcre-devel 
      - freetype 
      - freetype-devel 
      - gmp 
      - gmp-devel 
      - libmcrypt 
      - libmcrypt-devel 
      - readline 
      - readline-devel 
      - libxslt 
      - libxslt-devel 
      - libzip
      - libzip-devel
      - mhash 
      - mhash-devel 
      - php-mysqlnd
      - make
      - gcc
      - gcc-c++ 

/usr/src:
  archive.extracted:
    - source: salt://modules/application/php/files/php-7.4.24.tar.xz

salt://modules/application/php/files/install.sh:
  cmd.script

copy-file-php:
  file.managed:
    - names:
      - /usr/local/php7/etc/php-fpm.conf:
        - source: salt://modules/application/php/files/php-fpm.conf.default
      - /usr/local/php7/etc/php-fpm.d/www.conf:
        - source: salt://modules/application/php/files/www.conf.default
      - /etc/init.d/php-fpm:
        - source: salt://modules/application/php/files/init.d.php-fpm
        - user: root
        - group: root
        - mode: '0755'
      - /usr/lib/systemd/system/php-fpm.service:
        - source: salt://modules/application/php/files/php-fpm.service

• salt://zabbix

[root@master zabbix]# pwd
/srv/salt/prod/zabbix
[root@master zabbix]# ls 
apache.sls  files  install.sls  main.sls  mysql.sls
[root@master files]# ls 
index.php   mysql.conf   zabbix
install.sh  php.ini      zabbix-5.4.4.tar.gz
my.cnf      vhosts.conf  zabbix_server.conf

• salt://zabbix.apache

[root@master zabbix]# cat apache.sls 
include:
  - modules.web.apache.install

/usr/include/httpd:
  file.symlink:
    - target: /usr/local/apache/include

/usr/local/apache/htdocs/zabbix:
  file.directory:
    - user: root
    - group: root
    - mode: '0755'
    - makedirs: true

/usr/local/apache/conf/extra/vhosts.conf:
  file.managed:
    - source: salt://zabbix/files/vhosts.conf
    - user: root
    - group: root
    - mode: '0644'

/usr/local/apache/htdocs/zabbix/index.php:
  file.managed:
    - source: salt://zabbix/files/index.php
    - user: root
    - group: root
    - mode: '0644'
  
httpd.service:
  service.running:
    - enable: true

• salt://zabbix.mysql

[root@master zabbix]# cat mysql.sls
include:
  - modules.database.mysql.install

lamp-dep-package:
  pkg.installed:
    - pkgs:
      - ncurses-devel 
      - openssl-devel 
      - openssl 
      - cmake 
      - mariadb-devel

/usr/local/include/mysql:
  file.symlink:
    - target: /usr/local/mysql/include

/etc/ld.so.conf.d/mysql.conf:
  file.managed:
    - source: salt://zabbix/files/mysql.conf
    - user: root
    - group: root
    - mode: '0644'

/etc/my.cnf:
  file.managed:
    - source: salt://zabbix/files/my.cnf
    - user: root
    - group: root
    - mode: '0644'

mysqld.service:
  service.running:
    - enable: true

set-password-mysql:
  cmd.run: 
    - name: /usr/local/mysql/bin/mysql -e "set password = password('123456');"

• salt://zabbix.main

[root@master zabbix]# cat main.sls 
include:
  - zabbix.apache
  - zabbix.mysql
  - modules.application.php.install

//执行main.sls安装lamp架构

• zabbix部署

//脚本内容
[root@master files]# pwd
/srv/salt/prod/zabbix/files
[root@master files]# ls 
index.php   mysql.conf   zabbix
install.sh  php.ini      zabbix-5.4.4.tar.gz
my.cnf      vhosts.conf  zabbix_server.conf

[root@master files]# cat install.sh 
#!/bin/bash

/usr/local/mysql/bin/mysql -uroot -p123456 -e "create database zabbix character set utf8 collate utf8_bin;" && \
/usr/local/mysql/bin/mysql -uroot -p123456 -e "grant all privileges on zabbix.* to 'zabbix'@'localhost' identified by 'zabbix123';" && \
cd /usr/src/zabbix-5.4.4/database/mysql/
/usr/local/mysql/bin/mysql -uroot -p123456 zabbix < schema.sql && \
/usr/local/mysql/bin/mysql -uroot -p123456 zabbix < images.sql && \
/usr/local/mysql/bin/mysql -uroot -p123456 zabbix < data.sql && \
cd /usr/src/zabbix-5.4.4 && \
./configure --enable-server \
 --enable-agent \
 --with-mysql \
 --with-net-snmp \
 --with-libcurl \
 --with-libxml2 && \
 make install 

//zabbix安装状态文件
[root@master zabbix]# pwd
/srv/salt/prod/zabbix
[root@master zabbix]# ls 
apache.sls  files  install.sls  main.sls  mysql.sls

[root@master zabbix]# cat install.sls 
zabbix-dep-package:
  pkg.installed:
    - pkgs:
      - net-snmp-devel
      - libevent-devel

/usr/src:
  archive.extracted:
    - source: salt://zabbix/files/zabbix-5.4.4.tar.gz
    
zabbix:
  user.present:
    - system: true
    - createhome: false
    - shell: /sbin/nologin

salt://zabbix/files/install.sh:
  cmd.script

/usr/local/etc/zabbix_server.conf:
  file.managed:
    - source: salt://zabbix/files/zabbix_server.conf
    - user: root
    - group: root
    - mode: '0644'
 
/var/lib/mysql:
  file.directory:
    - user: root
    - group: root
    - mode: '0755'
    - makedirs: true

/var/lib/mysql/mysql.sock:
  file.symlink:
    - target: /tmp/mysql.sock

/usr/local/apache/htdocs/zabbix:
  file.recurse:
    - source: salt://zabbix/files/zabbix
    - include_empty: true
   
/usr/local/apache/htdocs:
  file.directory:
    - user: apache
    - group: apache
    - mode: '0755'
    - recurse:
      - user
      - group

/etc/php.ini:
  file.managed:
    - source: salt://zabbix/files/php.ini    

/usr/local/apache/htdocs/zabbix/conf:
  file.directory:
    - user: apache
    - group: apache
    - mode: '0777'
  
php-fpm.service:
  service.running:
    - enable: true

start-zabbix-server:
  cmd.run:
    - name: zabbix_server
 
start-zabbix-agentd:
  cmd.run:
    - name: zabbix_agentd

mysqld.service:
  service.running:
    - enable: true
    - reload: true

httpd.service:
  service.running:
    - enable: true
    - reload: true

//执行install.sls