saltstack部署lnmp

saltstack部署lnmp

环境：

系统/主机	IP地址	服务
RedHat8/server1	192.168.244.131	salt-master salt-minion
RedHat8/node1	192.168.244.135	salt-minion nginx mysql php

树形结构

[root@server1 prod]# pwd
/srv/salt/prod
[root@server1 salt]# ls
base  dev  prod  test
[root@server1 salt]# tree prod/
prod/
|-- lnmp
|   |-- files
|   |   |-- index.php
|   |   |-- my.cnf
|   |   |-- mysql.conf
|   |   |-- nginx.conf
|   |-- lnmp.sls
|   |-- mysql.sls
|   `-- nginx.sls
|-- modules
|   |-- application
|   |   `-- php
|   |       |-- files
|   |       |   |-- httpd.conf
|   |       |   |-- index.php
|   |       |   |-- install.sh
|   |       |   |-- oniguruma-devel-6.8.2-2.el8.x86_64.rpm
|   |       |   |-- php-7.4.24.tar.bz2
|   |       |   |-- php-8.0.10.tar.xz
|   |       |   |-- php-fpm
|   |       |   |-- php-fpm.conf
|   |       |   |-- php-fpm.service
|   |       |   `-- www.conf
|   |       |-- files1
|   |       |   |-- php-fpm
|   |       |   |-- php-fpm.conf
|   |       |   `-- www.conf
|   |       `-- install.sls
|   |-- database
|   |   `-- mysql
|   |       |-- files
|   |       |   |-- install.sh
|   |       |   |-- mysql-5.7.34-linux-glibc2.12-x86_64.tar.gz
|   |       |   |-- mysql.server
|   |       |   `-- mysqld.service
|   |       `-- install.sls
|   `-- web
|       |-- apache
|       |   |-- bag
|       |   |   |-- apr-1.7.0.tar.bz2
|       |   |   |-- apr-util-1.6.1.tar.bz2
|       |   |   `-- httpd-2.4.51.tar.gz
|       |   |-- files
|       |   |   |-- httpd.conf
|       |   |   |-- httpd.service
|       |   |   `-- install.sh
|       |   `-- install.sls
|       `-- nginx
|           |-- files
|           |   |-- nginx-1.20.1.tar.gz
|           |   |-- nginx.service
|           |   `-- nginx.sh
|           `-- install.sls
`-- zabbix
    |-- apache.sls
    |-- files
    |   |-- index.php
    |   |-- my.cnf
    |   |-- mysql.conf
    |   |-- vhosts.conf
    |   |-- zabbix-5.4.7.tar.gz
    |   `-- zabbix.sh
    |-- lamp.sls
    |-- mysql.sls
    `-- zabbix.sls

部署nginx

nginx结构

[root@server1 web]# tree nginx/
nginx/
|-- files
|   |-- nginx-1.20.1.tar.gz
|   |-- nginx.service
|   `-- nginx.sh
`-- install.sls

编写install.sls文件

[root@server1 nginx]# pwd
/srv/salt/prod/modules/web/nginx
[root@server1 nginx]# cat install.sls 
create-user:
  user.present:
    - name: nginx
    - shell: /sbin/nologin
    - system: true
    - createhome: false

pkg-nginx:
  pkg.installed:
    - pkgs:
      - pcre-devel
      - openssl
      - openssl-devel
      - gd-devel
      - gcc
      - gcc-c++
      - make

copy-nginx-tar:
  file.managed:
    - names:
      - /usr/src/nginx-1.20.1.tar.gz:
        - source: salt://modules/web/nginx/files/nginx-1.20.1.tar.gz
      

nginx-install:
  cmd.script:
    - name: salt://modules/web/nginx/files/nginx.sh
    - unless: test -d /usr/local/nginx

copy-nginx-service:
  file.managed:
    - names:
      - /usr/lib/systemd/system/nginx.service:
        - source: salt://modules/web/nginx/files/nginx.service
    - require: 
      - cmd: nginx-install

nginx-service-reload:
  cmd.run:
    - name: systemctl daemon-reload
    - watch:
      - file: copy-nginx-service

编写脚本nginx.sh

[root@server1 nginx]# cat files/nginx.sh 
#!/bin/bash

cd  /usr/src/
tar xf nginx-1.20.1.tar.gz   -C /usr/src/
cd  nginx-1.20.1
./configure \
        --prefix=/usr/local/nginx \
        --user=nginx \
        --group=nginx \
        --with-debug \
        --with-http_ssl_module \
        --with-http_realip_module \
        --with-http_image_filter_module \
        --with-http_gunzip_module \
        --with-http_gzip_static_module \
        --with-http_stub_status_module \
        --http-log-path=/var/log/nginx/access.log \
        --error-log-path=/var/log/nginx/error.log &&\
        make && make install

部署mysql

mysql结构

[root@server1 database]# tree mysql/
mysql/
|-- files
|   |-- install.sh
|   |-- mysql-5.7.34-linux-glibc2.12-x86_64.tar.gz
|   |-- mysql.server
|   `-- mysqld.service
`-- install.sls

编写install.sls文件

[root@server1 mysql]# cat install.sls 
pkg-install-mysql: 
  pkg.installed: 
    - pkgs: 
      - ncurses-compat-libs

create-mysql-user:
  user.present:
    - name: mysql
    - system: true
    - createhome: false
    - shell: /sbin/nologin


create-data:
  file.directory:
    - name: /opt/data
    - user: mysql
    - mode: '0755'
    - group: mysql
    - makedirs: True

/usr/src/mysql-5.7.34-linux-glibc2.12-x86_64.tar.gz:
  file.managed: 
    - source: salt://modules/database/mysql/files/mysql-5.7.34-linux-glibc2.12-x86_64.tar.gz
    - user: mysql
    - mode: '0755'
    - group: mysql

mysql-install:
  cmd.script: 
    - name: salt://modules/database/mysql/files/install.sh
    - unless: test -d /opt/data/mysql
 

copy-files:
  file.managed:
    - names:
      - /usr/local/mysql/support-files/mysql.server:
        - source: salt://modules/database/mysql/files/mysql.server
      - /usr/lib/systemd/system/mysqld.service:
        - source: salt://modules/database/mysql/files/mysqld.service
    - require:
      - cmd: mysql-install

编写脚本

[root@server1 mysql]# cat  files/install.sh 
#!/bin/bash

cd /usr/src
tar xf  mysql-5.7.34-linux-glibc2.12-x86_64.tar.gz -C  /usr/local

ln -s /usr/local/mysql-5.7.34-linux-glibc2.12-x86_64 /usr/local/mysql

chown  -R mysql.mysql  /usr/local/mysql*


/usr/local/mysql/bin/mysqld  --initialize-insecure --user=mysql --datadir=/opt/data

部署PHP

树形结构

[root@server1 application]# tree php/
php/
|-- files
|   |-- 1
|   |-- httpd.conf
|   |-- index.php
|   |-- install.sh
|   |-- oniguruma-devel-6.8.2-2.el8.x86_64.rpm
|   |-- php-7.4.24.tar.bz2
|   |-- php-8.0.10.tar.xz
|   |-- php-fpm
|   |-- php-fpm.conf
|   |-- php-fpm.service
|   `-- www.conf
|-- files1
|   |-- php-fpm
|   |-- php-fpm.conf
|   `-- www.conf
`-- install.sls

编写install.sls文件

[root@server1 php]# cat  install.sls 
pkg-install-php: 
  pkg.installed:
    - pkgs:
      - libxml2 
      - libxml2-devel 
      - openssl 
      - openssl-devel 
      - bzip2 
      - bzip2-devel 
      - libcurl 
      - libcurl-devel 
      - libicu-devel 
      - libjpeg-turbo 
      - libjpeg-turbo-devel 
      - libpng 
      - libpng-devel 
      - openldap-devel  
      - pcre-devel 
      - freetype 
      - freetype-devel 
      - gmp 
      - gmp-devel 
      - libmcrypt 
      - libmcrypt-devel 
      - readline 
      - readline-devel 
      - libxslt       
      - libxslt-devel 
      - mhash 
      - mhash-devel  
      - php-mysqlnd  
      - libsqlite3x-devel 
      - libzip-devel 
      - php-mysqlnd 
      - libzip-devel 
      - libsqlite3x-devel  


/usr/src/oniguruma-devel-6.8.2-2.el8.x86_64.rpm:
  file.managed:
    - source: salt://modules/application/php/files/oniguruma-devel-6.8.2-2.el8.x86_64.rpm
    - user: root
    - group: root
    - mode: '0644'
  cmd.run:
    - name: yum -y install /usr/src/oniguruma-devel-6.8.2-2.el8.x86_64.rpm 
    - unless: rpm -q oniguruma-devel

/usr/src/php-7.4.24.tar.bz2:
  file.managed:
    - source: salt://modules/application/php/files/php-7.4.24.tar.bz2
    - user: root
    - group: root
    - mode: '0644'

php-install:
  cmd.script:
    - name: salt://modules/application/php/files/install.sh
    - unless: test -d /usr/local/php7

copy-files-php:
  file.managed:
    - names:
      - /etc/init.d/php-fpm:
        - source: salt://modules/application/php/files1/php-fpm
        - user: root
        - group: root
        - mode: '0755'
      - /usr/local/php7/etc/php-fpm.conf:
        - source: salt://modules/application/php/files1/php-fpm.conf
      - /usr/local/php7/etc/php-fpm.d/www.conf:
        - source: salt://modules/application/php/files1/www.conf
      - /usr/lib/systemd/system/php-fpm.service:
        - source: salt://modules/application/php/files/php-fpm.service
    - require:
      - cmd: php-install  


systemctl daemon-reload:
  cmd.run

php-service:
  service.running:
    - name: php-fpm
    - enable: true
    - require:
      - cmd: php-install
      - file: copy-files-php
    - watch:
      - file: copy-files-php

编写脚本

[root@server1 php]# cat  files/install.sh 
#!/bin/bash

cd /usr/src/
tar xf php-7.4.24.tar.bz2  -C /usr/src/
cd  php-7.4.24
./configure --prefix=/usr/local/php7 \
        --with-config-file-path=/etc \
        --enable-fpm \
        --disable-debug \
        --disable-rpath \
        --enable-shared \
        --enable-soap  \
        --with-openssl \
        --enable-bcmath \
        --with-iconv \
        --with-bz2 \
        --enable-calendar \
        --with-curl \
        --enable-exif  \
        --enable-ftp \
        --enable-gd  \
        --with-jpeg  \
        --with-zlib-dir \
        --with-freetype \
        --with-gettext  \
        --enable-mbstring \
        --enable-pdo \
        --with-mysqli=mysqlnd \
        --with-pdo-mysql=mysqlnd \
        --with-readline \
        --enable-shmop \
        --enable-simplexml \
        --enable-sockets \
        --with-zip \
        --enable-mysqlnd-compression-support \
        --with-pear \
        --enable-pcntl \
        --enable-posix && \
        make && make install

组合

结构

[root@server1 prod]# tree lnmp/
lnmp/
|-- 1
|-- apache.sls
|-- files
|   |-- index.php
|   |-- my.cnf
|   |-- mysql.conf
|   `-- nginx.conf
|-- lnmp.sls
|-- mysql.sls
`-- nginx.sls

[root@server1 lnmp]# cat lnmp.sls 
include:
  - lnmp.nginx
  - lnmp.mysql
  - modules.application.php.install
  
  
[root@server1 lnmp]# cat nginx.sls 
mkdir-log-nginx:
  file.directory:
    - name: /var/log/nginx
    - user: root
    - grep: root
    - mode: 755
    - makedirs: True
    - unless: test -d /var/log/nginx

include:
  - modules.web.nginx.install
 
  
copy-nginx-conf:
  file.managed:
    - names:
      - /usr/local/nginx/conf/nginx.conf:
        - source: salt://lnmp/files/nginx.conf
      - /usr/local/nginx/html/index.php:
        - source: salt://lnmp/files/index.php
    - require:
      - cmd: nginx-install

nginx-service:
  service.running:
    - name: nginx
    - enable: True
    - reload: true
    - require:
      - cmd: nginx-install
    - watch:
      - file: copy-nginx-conf 

执行

[root@server1 lnmp]# salt node1 state.sls lnmp.lnmp  saltenv=prod

访问