SaltStack常用的模块

SaltStack常用的模块

SaltStack模块介绍

Module是日常使用SaltStack接触最多的一个组件，其用于管理对象操作，这也是SaltStack通过Push的方式进行管理的入口，比如我们日常简单的执行命令、查看包安装情况、查看服务运行情况等工作都是通过SaltStack Module来实现的。

当安装好Master和Minion包后，系统上会安装很多Module，可以通过以下命令查看支持的所有Module列表：

查看所有module列表
[root@master ~]# salt 'node1' sys.list_modules |wc -l
171
[root@master ~]# salt 'node1' sys.list_modules
node1:
    - acl
    - aliases
    - alternatives
    - apache
    - archive
    - artifactory
    - baredoc
    - beacons
    - bigip
    - btrfs
    - buildout
    - chroot
    - cloud
    - cmd
    - composer
    - config
......

查看指定module的所有function
[root@master ~]# salt 'node1' sys.list_functions cmd
node1:
    - cmd.exec_code
    - cmd.exec_code_all
    - cmd.has_exec
    - cmd.powershell
    - cmd.powershell_all
    - cmd.retcode
    - cmd.run
    - cmd.run_all
    - cmd.run_bg
    - cmd.run_chroot
    - cmd.run_stderr
    - cmd.run_stdout
    - cmd.script
    - cmd.script_retcode
    - cmd.shell
    - cmd.shell_info
    - cmd.shells
    - cmd.tty
    - cmd.which
    - cmd.which_bin


查看指定module的用法
[root@master ~]# salt 'node1' sys.doc cmd
cmd.exec_code:

    Pass in two strings, the first naming the executable language, aka -
    python2, python3, ruby, perl, lua, etc. the second string containing
    the code you wish to execute. The stdout will be returned.

    All parameters from :mod:`cmd.run_all <salt.modules.cmdmod.run_all>` except python_shell can be used.

    CLI Example:

        salt '*' cmd.exec_code ruby 'puts "cheese"'
        salt '*' cmd.exec_code ruby 'puts "cheese"' args='["arg1", "arg2"]' env='{"FOO": "bar"}'
......
可以加入less命令 查看方便
[root@master ~]# salt 'node1' sys.doc cmd |less


SaltStack默认也支持一次执行多个Module，Module之间通过逗号隔开，默认传参之间也是用逗号分隔，也支持指定传参分隔符号--args-separator=@即可
[root@master ~]# salt 'node1' test.echo,cmd.run,service.status 'shijie nihao',hostname,salt-minion
node1:
    ----------
    cmd.run:
        node1
    service.status:
        True
    test.echo:
        shijie nihao

saltsatack常用模块

1 network模块

1.1 network.active_tcp

放回所有活动的tcp连接

[root@master ~]# salt 'node1' network.active_tcp
node1:
    ----------
    0:
        ----------
        local_addr:
            192.168.136.132
        local_port:
            22
        remote_addr:
            192.168.136.1
        remote_port:
            52343
    1:
        ----------
        local_addr:
            192.168.136.132
        local_port:
            22
        remote_addr:
            192.168.136.1
        remote_port:
            52342
    2:
        ----------
        local_addr:
            192.168.136.132
        local_port:
            47434
        remote_addr:
            192.168.136.131
        remote_port:
            4505

1.2 network.calc_net

通过IP和子网掩码计算出网段

[root@master ~]# salt 'node1' network.calc_net 192.168.136.131 255.255.255.0
node1:
    192.168.136.0/24

1.3 network.connect

测试minion至某一台服务器的网络是否连通

[root@master ~]# salt 'node1' network.connect aliyun.com 80
node1:
    ----------
    comment:
        Successfully connected to aliyun.com (106.11.172.51) on tcp port 80
    result:
        True

1.4 network.default_route

查看默认路由

[root@master ~]# salt 'node1' network.default_route
node1:
    |_
      ----------
      addr_family:
          inet
      destination:
          0.0.0.0
      flags:
          UG
      gateway:
          192.168.136.2
      interface:
          ens33
      netmask:
          0.0.0.0
    |_
      ----------
      addr_family:
          inet6
      destination:
          ::/0
      flags:
          !n
      gateway:
          ::
      interface:
          lo
      netmask:
    |_
      ----------
      addr_family:
          inet6
      destination:
          ::/0
      flags:
          !n
      gateway:
          ::
      interface:
          lo
      netmask:

1.5 network.get_fqdn

查看主机的fqdn（完全限定域名）

[root@master ~]# salt 'node1' network.get_fqdn
node1:
    node1

1.6 network.get_hostname

获取主机名

[root@master ~]# salt 'node1' network.get_hostname
node1:
    node1

1.7 network.get_route

查询到一个目标网络的路由信息

[root@master ~]# salt 'node1' network.get_route 192.168.136.131
node1:
    ----------
    destination:
        192.168.136.131
    gateway:
        None
    interface:
        ens33
    source:
        192.168.136.132

1.8 network.hw_addr

返回指定网卡的mac地址

[root@master ~]# salt 'node1' network.hw_addr ens33
node1:
    00:0c:29:ed:86:9e

1.9 network.ifacestartswith

从特定CIDR检索接口名称

[root@master ~]# salt 'node1' network.ifacestartswith 192
node1:
    - ens33

1.10 network.in_subnet

判断当前主机是否在某一个网段内

[root@master ~]# salt 'node1' network.in_subnet 192.168.136.0/24
node1:
    True

1.11 network.interface

返回指定网卡的信息

[root@master ~]# salt 'node1' network.interface ens33
node1:
    |_
      ----------
      address:
          192.168.136.132
      broadcast:
          192.168.136.255
      label:
          ens33
      netmask:
          255.255.255.0

1.12 network.interface_ip

返回指定网卡的IP地址

[root@master ~]# salt 'node1' network.interface_ip ens33
node1:
    192.168.136.132

1.13 network.interfaces

返回当前系统中所有的网卡信息

[root@master ~]# salt 'node1' network.interfaces
node1:
    ----------
    ens33:
        ----------
        hwaddr:
            00:0c:29:ed:86:9e
        inet:
            |_
              ----------
              address:
                  192.168.136.132
              broadcast:
                  192.168.136.255
              label:
                  ens33
              netmask:
                  255.255.255.0
        inet6:
            |_
              ----------
              address:
                  fe80::20c:29ff:feed:869e
              prefixlen:
                  64
              scope:
                  link
        up:
            True
    lo:
        ----------
        hwaddr:
            00:00:00:00:00:00
        inet:
            |_
              ----------
              address:
                  127.0.0.1
              broadcast:
                  None
              label:
                  lo
              netmask:
                  255.0.0.0
        inet6:
            |_
              ----------
              address:
                  ::1
              prefixlen:
                  128
              scope:
                  host
        up:
            True

1.14 network.ip_addrs

返回一个IPv4的地址列表
该函数将会忽略掉127.0.0.1的地址

[root@master ~]# salt 'node1' network.ip_addrs
node1:
    - 192.168.136.132

1.15 network.netstat

返回所有打开的端口和状态

[root@master ~]# salt 'node1' network.netstat
node1:
    |_
      ----------
      inode:
          26445
      local-address:
          0.0.0.0:22
      program:
          967/sshd
      proto:
          tcp
      recv-q:
          0
      remote-address:
          0.0.0.0:*
      send-q:
          0
      state:
          LISTEN
      user:
          0
    |_
      ----------
      inode:
          30041
      local-address:
          192.168.136.132:22
      program:
          1640/sshd:
      proto:
          tcp
      recv-q:
          0
      remote-address:
          192.168.136.1:52343
      send-q:
          0
      state:
          ESTABLISHED
      user:
          0
    |_
      ----------
      inode:
          31011
      local-address:
          192.168.136.132:22
      program:
          1606/sshd:
      proto:
          tcp
      recv-q:
          0
      remote-address:
          192.168.136.1:52342
      send-q:
          0
      state:
          ESTABLISHED
      user:
          0
    |_
      ----------
      inode:
          29520
      local-address:
          192.168.136.132:47434
      program:
          1403/python3.6
      proto:
          tcp
      recv-q:
          0
      remote-address:
          192.168.136.131:4505
      send-q:
          0
      state:
          ESTABLISHED
      user:
          0
    |_
      ----------
      inode:
          0
      local-address:
          192.168.136.132:33238
      program:
          -
      proto:
          tcp
      recv-q:
          0
      remote-address:
          192.168.136.131:4506
      send-q:
          0
      state:
          TIME_WAIT
      user:
          0
    |_
      ----------
      inode:
          26456
      local-address:
          :::22
      program:
          967/sshd
      proto:
          tcp6
      recv-q:
          0
      remote-address:
          :::*
      send-q:
          0
      state:
          LISTEN
      user:
          0
    |_
      ----------
      inode:
          0
      local-address:
          192.168.136.132:68
      program:
          28776
      proto:
          udp
      recv-q:
          0
      remote-address:
          192.168.136.254:67
      send-q:
          0
      user:
          ESTABLISHED

1.16 network.ping

使用ping命令测试到某主机的连通性

[root@master ~]# salt 'node1' network.ping 192.168.136.131
node1:
    PING 192.168.136.131 (192.168.136.131) 56(84) bytes of data.
    64 bytes from 192.168.136.131: icmp_seq=1 ttl=64 time=0.354 ms
    64 bytes from 192.168.136.131: icmp_seq=2 ttl=64 time=0.431 ms
    64 bytes from 192.168.136.131: icmp_seq=3 ttl=64 time=0.409 ms
    64 bytes from 192.168.136.131: icmp_seq=4 ttl=64 time=1.39 ms
    
    --- 192.168.136.131 ping statistics ---
    4 packets transmitted, 4 received, 0% packet loss, time 3107ms
    rtt min/avg/max/mdev = 0.354/0.646/1.393/0.432 ms
// 默认ping4次

1.17 network.reverse_ip

返回一个指定的IP地址的反向地址

[root@master ~]# salt 'node1' network.reverse_ip 192.168.136.131
node1:
    131.136.168.192.in-addr.arpa

2 service模块

2.1 service.available

判断指定的服务是否可用

[root@master ~]# salt 'node1' service.available sshd
node1:
    True
[root@master ~]# salt 'node1' service.available wget
node1:
    False

2.2 service.get_all

获取所有正在运行的服务

[root@master ~]# salt 'node1' service.get_all
node1:
    - NetworkManager
    - NetworkManager-dispatcher
    - NetworkManager-wait-online
    - arp-ethers
    - auditd
    - autovt@
    - basic.target
    - blk-availability
    - bluetooth.target
    - boot-complete.target
    - console-getty
......

2.3 service.disabled

检查指定服务是否开机不自动启动

[root@master ~]# salt 'node1' service.disabled httpd
node1:
    True

2.4 service.enabled

检查指定服务是否开机自动启动

[root@master ~]# salt 'node1' service.enabled httpd
node1:
    False

2.5 service.disable

设置指定服务开机不自动启动

[root@master ~]# salt 'node1' service.disable nginx
node1:
    True
[root@master ~]# salt 'node1' service.enabled nginx
node1:
    False

2.6 service.enable

设置指定服务开机自动启动

[root@master ~]# salt 'node1' service.enable httpd
node1:
    True
[root@master ~]# salt 'node1' service.enabled httpd
node1:
    True

2.7 service.reload

重新加载指定服务

[root@mas