在安装Puppet环境之前需要配置好机器的基本配置,如规范网络地址IP、hostname,certname认证名称,ntp时间同步等配置完毕,完善的搭建自动化环境。
1.环境介绍
此处实现部署的环境是两台安装Linux Cento6.7 虚拟机,分别是Master,Agent端,实现简单的C/S架构部署
2.针对Master,Agent端配置网络地址
(1)设置网络IP地址
此处环境使用的内网网段172.16.29.0/24
【Master】
[root@puppet-master ~]# vim /etc/sysconfig/network-scripts/ifcfg-eth0
DEVICE=eth1
HWADDR=00:0C:29:C7:D6:71
TYPE=Ethernet
ONBOOT=yes
NM_CONTROLLED=yes
BOOTPROTO=static
IPADDR=172.16.29.130
NETMASK=255.255.255.0
DNS1=114.114.114.114
GATEWAY=172.16.29.2
【Agent】
[root@puppet-agent1 ~]# vim /etc/sysconfig/network-scripts/ifcfg-eth0
DEVICE=eth1
HWADDR=00:0c:29:14:6d:8a
TYPE=Ethernet
ONBOOT=yes
NM_CONTROLLED=yes
BOOTPROTO=static
IPADDR=172.16.29.129
NETMASK=255.255.255.0
DNS1=114.114.114.114
GATEWAY=172.16.29.2
(2)设置主机名称
【Master】端
[root@puppet-master ~]# vim /etc/hosts
172.16.29.130 puppet-master.nlf.com puppet-master
172.16.29.129 puppet-agent1.nlf.com puppet-agent1
【Agent】端
[root@puppet-agent1 ~]# vim /etc/hosts
172.16.29.130 puppet-master.nlf.com puppet-master
172.16.29.129 puppet-agent1.nlf.com puppet-agent1
3.安全设置
【Selinux】
[root@puppet-master ~]# sed -i 's/SELINUX=.*/SELINUX=disabled/g' /etc/selinux/config
[root@puppet-agent1 ~]# sed -i 's/SELINUX=.*/SELINUX=disabled/g' /etc/selinux/config
【IPtables】
[root@puppet-master ~]# /etc/init.d/iptables stop
iptables: Setting chains to policy ACCEPT: filter [ OK ]
iptables: Flushing firewall rules: [ OK ]
iptables: Unloading modules: [ OK ]
[root@puppet-master ~]# chkconfig iptables off
[root@puppet-agent1 ~]# /etc/init.d/iptables stop
iptables: Setting chains to policy ACCEPT: filter [ OK ]
iptables: Flushing firewall rules: [ OK ]
iptables: Unloading modules: [ OK ]
[root@puppet-agent1 ~]# chkconfig iptables off
4.配置本地YUM源
[root@puppet-master ~]# mkdir /mnt/iso
[root@puppet-master ~]# mount /dev/sr0 /mnt/iso/
[root@puppet-master ~]# vim /etc/yum.repos.d/puppet-yum.repo
[puppet-yum]
name="puppet yum for cenots6.7"
baseurl=file:///mnt/iso
enabled=1
gpgcheck=0
## Agent端配置同上!!
5.NTP服务器设置
(1)查看NTP是否安装
[root@puppet-master ~]# rpm -qa|grep ntp
ntpdate-4.2.6p5-10.el6.centos.1.x86_64
fontpackages-filesystem-1.41-1.1.el6.noarch
ntp-4.2.6p5-10.el6.centos.1.x86_64
## Agent端配置同上!!
[root@puppet-master ~]# vim /etc/ntp.conf
driftfile /var/lib/ntp/drift
restrict default kod nomodify notrap nopeer noquery
restrict -6 default kod nomodify notrap nopeer noquery
restrict 127.0.0.1
restrict -6 ::1
server ntp.sjtu.edu.cn iburst
includefile /etc/ntp/crypto/pw
keys /etc/ntp/keys
[root@puppet-master ~]# /etc/init.d/ntpd start
Starting ntpd: [ OK ]
[root@puppet-master ~]# ntpdate ntp.sjtu.edu.cn
21 Dec 11:40:32 ntpdate[22099]: the NTP socket is in use, exiting
[root@puppet-master ~]# chkconfig ntpd on
[root@puppet-master ~]# crontab -l ###设置同步频率
*/30 * * * * /usr/sbin/ntpdate ntp.sjtu.edu.cn
[root@puppet-master ~]# /etc/init.d/crond restart
Stopping crond: [ OK ]
Starting crond: [ OK ]
## Agent端配置同上!!
至此,Puppet初始环境部署完毕!