saltStack之zabbix部署状态文件编写

一、saltStack之zabbix部署状态文件编写

环境说明：

centos8

主机名	IP地址	部署功能	性能
master	192.168.143.101	salt-master salt-minion	4核8G
node2	192.168.143.103	salt-minion zabbix -server zabbix-age lamp	4核2G

.
[root@master prod]# tree
.
├── modules
│ ├── application
│ │ └── php
│ │ ├── files
│ │ │ ├── install.sh
│ │ │ ├── oniguruma-devel-6.8.2-2.el8.x86_64.rpm
│ │ │ ├── php-7.4.24.tar.xz
│ │ │ ├── php-fpm
│ │ │ ├── php-fpm.conf
│ │ │ ├── php-fpm.service
│ │ │ └── www.conf
│ │ └── install.sls
│ ├── database
│ │ └── mysql
│ │ ├── files
│ │ │ ├── install.sh
│ │ │ ├── my.cnf
│ │ │ ├── mysql-5.7.33-linux-glibc2.12-x86_64.tar.gz
│ │ │ ├── mysqld.service
│ │ │ └── mysql.server
│ │ └── install.sls
│ └── web
│ ├── apache
│ │ ├── files
│ │ │ ├── apr-1.7.0.tar.gz
│ │ │ ├── apr-util-1.6.1.tar.gz
│ │ │ ├── httpd-2.4.51.tar.gz
│ │ │ ├── httpd.conf
│ │ │ ├── httpd.service
│ │ │ └── install.sh
│ │ └── install.sls
│ └── nginx
│ ├── files
│ │ ├── install.sh
│ │ ├── nginx-1.20.1.tar.gz
│ │ └── nginx.service.j2
│ └── install.sls
└── zabbix
├── apache.sls
├── files
│ ├── index.php
│ ├── install.sh
│ ├── ldap.sh
│ ├── my.cnf
│ ├── mysql.conf
│ ├── php.ini
│ ├── vhosts.conf
│ ├── zabbix-5.4.4.tar.gz
│ └── zabbix_server.conf
├── install.sls
├── main.sls
└── mysql.sls

apache的安装状态

[root@master salt]# tree prod/modules/web/apache/
prod/modules/web/apache/
├── files
│   ├── apr-1.7.0.tar.gz
│   ├── apr-util-1.6.1.tar.gz
│   ├── httpd-2.4.51.tar.gz
│   ├── httpd.conf
│   ├── httpd.service
│   └── install.sh
└── install.sls

1 directory, 7 files

[root@master salt]# vim prod/modules/web/apache/install.sls 
apache-dep-package:
  pkg.installed:
    - pkgs:
      - epel-release
      - openssl-devel
      - pcre-devel
      - expat-devel
      - libtool
      - gcc
      - gcc-c++
      - make

apache:
  user.present:
    - shell: /sbin/nologin
    - createhome: false
    - system: true

apache-download:
  file.managed:
    - names:
      - /usr/src/apr-1.7.0.tar.gz:
        - source: salt://modules/web/apache/files/apr-1.7.0.tar.gz
      - /usr/src/apr-util-1.6.1.tar.gz:
        - source: salt://modules/web/apache/files/apr-util-1.6.1.tar.gz
      - /usr/src/httpd-2.4.51.tar.gz:
        - source: salt://modules/web/apache/files/httpd-2.4.51.tar.gz
      - /usr/lib/systemd/system/httpd.service:
        - source: salt://modules/web/apache/files/httpd.service

apache-install:
  cmd.script:
    - name: salt://modules/web/apache/files/install.sh
    - unless: test -d /usr/local/apache

/usr/local/apache/conf/httpd.conf:
  file.managed:
    - source: salt://modules/web/apache/files/httpd.conf
    - user: root
    - group: root
    - mode: '0644'
    - require:
      - cmd: apache-install
   
[root@master salt]# vim prod/modules/web/apache/files/install.sh 
#!/bin/bash

cd /usr/src
tar xf apr-1.7.0.tar.gz
tar xf apr-util-1.6.1.tar.gz
tar xf httpd-2.4.51.tar.gz

cd apr-1.7.0
if [ ! -d /usr/local/apr  ];then
	sed -i '/$RM "$cfgfile"/d' configure
	./configure --prefix=/usr/local/apr && make && make install
fi
cd ../apr-util-1.6.1
if [ ! -d /usr/local/apr-util  ];then
	./configure --prefix=/usr/local/apr-util --with-apr=/usr/local/apr && make && make install
fi
cd ../httpd-2.4.51
if [ ! -d /usr/local/apache  ];then
	 ./configure --prefix=/usr/local/apache \
		 --enable-so \
		 --enable-ssl \
		 --enable-cgi \
		 --enable-rewrite \
		 --with-zlib \
		 --with-pcre \
		 --with-apr=/usr/local/apr \
		 --with-apr-util=/usr/local/apr-util/ \
		 --enable-modules=most \
		 --enable-mpms-shared=all \
		 --with-mpm=prefork  && make && make install
fi

mysql的安装状态

[root@master salt]# tree prod/modules/database/mysql/
prod/modules/database/mysql/
├── files
│   ├── install.sh
│   ├── my.cnf
│   ├── mysql-5.7.33-linux-glibc2.12-x86_64.tar.gz
│   ├── mysqld.service
│   └── mysql.server
└── install.sls

1 directory, 6 files

[root@master salt]# vim prod/modules/database/mysql/install.sls 
ncurses-compat-libs:
  pkg.installed

create-mysql-user:
  user.present:
    - name: mysql
    - system: true
    - createhome: fales
    - shell: /sbin/nologin

create_datadir:
  file.directory:
    - name: /opt/data
    - user: mysql
    - group: mysql
    - mode: '0755'
    - makedirs: true

/usr/src/mysql-5.7.33-linux-glibc2.12-x86_64.tar.gz:
  file.managed:
    - source: salt://modules/database/mysql/files/mysql-5.7.33-linux-glibc2.12-x86_64.tar.gz
    - user: root
    - group: root
    - mode: '0644'

mysql-install:
  cmd.script:
    - name: salt://modules/database/mysql/files/install.sh
    - unless: test -d /usr/local/mysql

trasfer-files:
  file.managed:
    - names:
      - /usr/local/mysql/support-files/mysql.server:
        - source: salt://modules/database/mysql/files/mysql.server
      - /usr/lib/systemd/system/mysqld.service:
        - source: salt://modules/database/mysql/files/mysqld.service
    - require:
      - cmd: mysql-install
 
[root@master salt]# vim prod/modules/database/mysql/files/install.sh 
#!/bin/bash

cd /usr/src
tar xf mysql-5.7.33-linux-glibc2.12-x86_64.tar.gz -C /usr/local
ln -s /usr/local/mysql-5.7.33-linux-glibc2.12-x86_64 /usr/local/mysql
chown -R mysql.mysql /usr/local/mysql*
/usr/local/mysql/bin/mysqld --initialize-insecure --user=mysql --datadir=/opt/data/
echo "export PATH=/usr/local/mysql/bin:\$PATH" > /etc/profile.d/mysql.sh

php的安装状态

[root@master salt]# tree prod/modules/application/php/
prod/modules/application/php/
├── files
│   ├── install.sh
│   ├── oniguruma-devel-6.8.2-2.el8.x86_64.rpm
│   ├── php-7.4.24.tar.xz
│   ├── php-fpm
│   ├── php-fpm.conf
│   ├── php-fpm.service
│   └── www.conf
└── install.sls

[root@master prod]# vim modules/application/php/install.sls 
dep-package-install:
  pkg.installed:
    - pkgs:
      - libxml2
      - libxml2-devel
      - openssl
      - openssl-devel
      - bzip2
      - bzip2-devel
      - libcurl
      - libcurl-devel
      - libicu-devel
      - libpng
      - libpng-devel
      - openldap-devel
      - pcre-devel
      - freetype
      - freetype-devel
      - gmp
      - gmp-devel
      - libmcrypt
      - libmcrypt-devel
      - readline
      - readline-devel
      - libxslt
      - libxslt-devel
      - mhash
      - mhash-devel
      - php-mysqlnd
      - libsqlite3x
      - libsqlite3x-devel
      - libzip-devel
      - libjpeg-turbo-devel 

/usr/src/oniguruma-devel-6.8.2-2.el8.x86_64.rpm:
  file.managed:
    - source: salt://modules/application/php/files/oniguruma-devel-6.8.2-2.el8.x86_64.rpm
    - user: root
    - group: root
    - mode: '0644'
  cmd.run:
    - name: yum install -y /usr/src/oniguruma-devel-6.8.2-2.el8.x86_64.rpm
    - unless: rpm -q oniguruma-devel

/usr/src/php-7.4.24.tar.xz:
  file.managed:
    - source: salt://modules/application/php/files/php-7.4.24.tar.xz
    - user: root
    - group: root
    - mode: '0644'
php-install:
  cmd.script:
    - name: salt://modules/application/php/files/install.sh
    - unless: test -d /usr/local/php7

copysoft:
  file.managed:
    - names:
      - /etc/init.d/php-fpm:
        - source: salt://modules/application/php/files/php-fpm
        - user: root
        - group: root
        - mode: '0755'
      - /usr/local/php7/etc/php-fpm.conf:
        - source: salt://modules/application/php/files/php-fpm.conf
      - /usr/local/php7/etc/php-fpm.d/www.conf:
        - source: salt://modules/application/php/files/www.conf
      - /usr/lib/systemd/system/php-fpm.service:
        - source: salt://modules/application/php/files/php-fpm.service
    - require:
      - cmd: php-install

php-fpm.service:
  service.running:
    - enable: true
    - reload: true
    - require:
      - cmd: php-install
      - file: copysoft
    - watch:
      - file: copysoft  
   
[root@master prod]# vim modules/application/php/files/install.sh 
#!/bin/bash

cd /usr/src
rm -rf php-7.4.24
tar xf php-7.4.24.tar.xz
cd php-7.4.24
./configure --prefix=/usr/local/php7  \
	--with-config-file-path=/etc \
	--enable-fpm \
	--disable-debug \
	--disable-rpath \
	--enable-shared \
	--enable-soap \
	--with-openssl \
	--enable-bcmath \
	--with-iconv \
	--with-bz2 \
	--enable-calendar \
	--with-curl \
	--enable-exif  \
	--enable-ftp \
	--enable-gd \
	--with-jpeg \
	--with-zlib-dir \
	--with-freetype \
	--with-gettext \
	--enable-mbstring \
	--enable-pdo \
	--with-mysqli=mysqlnd \
	--with-pdo-mysql=mysqlnd \
	--with-readline \
	--enable-shmop \
	--enable-simplexml \
	--enable-sockets \
	--with-zip \
	--enable-mysqlnd-compression-support \
	--with-pear \
	--enable-pcntl \
	--enable-posix &&  
	make -j $(cat /proc/cpuinfo |grep processor|wc -l) && make install
	

apache的配置状态

[root@master zabbix]# vim apache.sls 
"Development Tools":
  pkg.group_installed

include:
  - modules.web.apache.install

/usr/include/httpd:
  file.symlink:
    - target: /usr/local/apache/include
    - require:
      - cmd: apache-install

/usr/local/apache/htdocs/:
  file.directory:
    - user: apache
    - group: apache
    - mode: '0755'
    - makedirs: True
    - require:
      - cmd: apache-install

mkdir /usr/local/apache/htdocs/zabbix:
  cmd.run:
    - creates: /usr/local/apache/htdocs/zabbix
    - require:
      - cmd: apache-install
#测试页面与zabbix.php有冲突
#/usr/local/apache/htdocs/zabbix/index.php:
#  file.managed:
#    - source: salt://zabbix/files/index.php
#    - user: root
#    - group: root
#    - mode: '0644'
#    - require:
#      - cmd: apache-install

/usr/local/apache/conf/extra/vhosts.conf:
  file.managed:
    - source: salt://zabbix/files/vhosts.conf
    - user: root
    - group: root
    - mode: '0644'
    - require:
      - cmd: apache-install

zabbix-apache-service:
  service.running:
    - name: httpd
    - enable: true
    - reload: true
    - require:
      - file: /usr/local/apache/conf/extra/vhosts.conf
    - watch:
      - file: /usr/local/apache/conf/extra/vhosts.conf
      - 

mysqld的配置状态

[root@master zabbix]# vim mysql.sls 
include:
  - modules.database.mysql.install

provides-mysql-file:
  file.managed:
    - user: root
    - group: root
    - mode: '0644'
    - names:
      - /etc/my.cnf:
        - source: salt://zabbix/files/my.cnf
      - /etc/ld.so.conf.d/mysql.conf:
        - source: salt://zabbix/files/mysql.conf

/usr/local/include/mysql:
  file.symlink:
    - target: /usr/local/mysql/include/

mysqld.service:
  service.running:
    - enable: true
    - reload: true
    - require:
      - cmd: mysql-install
      - file: trasfer-files
    - watch:
      - file: provides-mysql-file

set-password:
  cmd.run:
    - name: /usr/local/mysql/bin/mysql -e "set password=password('123456');"
    - require:
      - service: mysqld.service
    - unless: /usr/local/mysql/bin/mysql -uroot -p123456 -e " exit"
    

lamp的安装状态文件

[root@master zabbix]# vim main.sls 
include:
  - zabbix.apache
  - zabbix.mysql
  - modules.application.php.install

zabbix的安装状态文件

[root@master zabbix]# tree
.
├── apache.sls
├── files
│   ├── index.php
│   ├── install.sh
│   ├── ldap.sh
│   ├── my.cnf
│   ├── mysql.conf
│   ├── php.ini
│   ├── vhosts.conf
│   ├── zabbix-5.4.4.tar.gz
│   └── zabbix_server.conf
├── install.sls
├── main.sls
└── mysql.sls

1 directory, 13 files

[root@master zabbix]# vim install.sls 
include:
  - zabbix.main

dep-zabbix-install:
  pkg.installed:
    - pkgs:
      - net-snmp-devel
      - libevent-devel

zabbix:
  user.present:
    - shell: /sbin/nologin
    - createhome: false
    - system: true

/usr/src/zabbix-5.4.4.tar.gz:
  file.managed:
    - source: salt://zabbix/files/zabbix-5.4.4.tar.gz
    - user: root
    - group: root
    - mode: '0644'

zabbix_install:
  cmd.script:
    - name: salt://zabbix/files/install.sh
    - unless: test -d /usr/local/etc/zabbix_agentd.conf.d
  
/usr/local/etc/zabbix_server.conf:
  file.managed:
    - source: salt://zabbix/files/zabbix_server.conf
    - user: root
    - group: root
    - mode: '0644'

/var/lib/mysql:
  file.directory:
    - user: root
    - group: root
    - mode: '0755'
    - makedirs: True

/var/lib/mysql/mysql.sock:
  file.symlink:
    - target: /tmp/mysql.sock

'zabbix_server':
  cmd.run

'zabbix_agentd':
  cmd.run

/etc/php.ini:
  file.managed:
    - source: salt://zabbix/files/php.ini
    - user: root
    - group: root
    - mode: '0644'

zabbix.file:
  cmd.run:
    - name: cp -a /usr/src/zabbix-5.4.4/ui/* /usr/local/apache/htdocs/zabbix/
    - unless: test -d /usr/local/apache/htdocs/zabbix/conf

/usr/local/apache/htdocs:
  file.directory:
    - user: apache
    - group: apache
    - mode: '0755'
    - makedirs: True

/usr/local/apache/htdocs/zabbix/conf:
  file.directory:
    - user: apache
    - group: apache
    - mode: '0777'




#缺少ldap模块补充的配置
zabbix_ldap:
  cmd.script:
    - name: salt://zabbix/files/ldap.sh
    - unless: test -f /usr/lib/libldap.so

extend:
  zabbix-apache-service:
    service.running:
      - watch:
        - file: /etc/php.ini


restart php:
  cmd.run:
    - name: systemctl restart php-fpm

#开机自启server端
servier-zabbix:
  file.managed:
    - names: 
      - /etc/init.d/zabbix_agentd:
        - source: salt://zabbix/files/zabbix_agentd
        - user: root
        - group: root
        - mode: '0755'
      - /etc/init.d/zabbix_server:
        - source: salt://zabbix/files/zabbix_server
        - user: root
        - group: root
        - mode: '0755'
      - /usr/lib/systemd/system/zabbix_server.service:
        - source: salt://zabbix/files/zabbix_server.service
        - user: root
        - group: root
        - mode: '0644'

'pkill -9 zabbix_server':
  cmd.run

zabbix-server-service:
  service.running:
    - name: zabbix_server.service
    - enable: True
    - reload: True
    - watch:
      - file: /usr/local/etc/zabbix_server.conf

'/etc/init.d/zabbix_server start':
  cmd.run

'chkconfig zabbix_server on':
  cmd.run

/etc/profile:
  file.append:
    - text: 'systemctl daemon-reload'


[root@master zabbix]# vim files/php.ini
。。。。
; syntax:
//添加此行
        extension=ldap.so
;
。。。。

[root@master zabbix]# vim files/install.sh 
#!/bin/bash

mysql -uroot -p123456 -e "create database zabbix character set utf8 collate utf8_bin;"
mysql -uroot -p123456 -e "grant all privileges on zabbix.* to zabbix@localhost identified by 'zabbix123!';"
mysql -uroot -p123456 -e "flush privileges;"

cd /usr/src
tar xf zabbix-5.4.4.tar.gz

cd /usr/src/zabbix-5.4.4/database/mysql
mysql -uzabbix -pzabbix123! zabbix < schema.sql
mysql -uzabbix -pzabbix123! zabbix < images.sql
mysql -uzabbix -pzabbix123! zabbix < data.sql

cd /usr/src/zabbix-5.4.4
./configure --enable-server \
	--enable-agent \
	--with-mysql=/usr/local/mysql/bin/mysql_config \
	--with-net-snmp \
	--with-libcurl \
	--with-libxml2 && make install


[root@master zabbix]# vim files/ldap.sh 
#!/bin/bash

cp -a /usr/lib64/libldap* /usr/lib/
cd /usr/src/php-7.4.24/ext/ldap
/usr/local/php7/bin/phpize
./configure  --with-php-config=/usr/local/php7/bin/php-config  --with-ldap && make && make install

二、实现效果

注意apache配置状态中注释了，php.index,如果只部署lamp,可以取消注释