文章目录
- 1. SaltStack模块介绍
- 2. SaltStack常用模块
- 2.1 SaltStack常用模块之network
- 2.1.1 network.active_tcp
- 2.1.2 network.calc_net 通过IP和子网掩码计算出网段
- 2.1.3 network.connect 测试minion至某一台服务器的网络是否连通
- 2.1.4 network.default_route 查看默认路由
- 2.1.5 network.get_fqdn 查看主机的fqdn(完全限定域名)
- 2.1.6 network.get_hostname 获取主机名
- 2.1.7 network.get_route 查询到一个目标网络的路由信息
- 2.1.8 network.hw_addr 返回指定网卡的MAC地址
- 2.1.9 network.ifacestartswith 从特定CIDR检索接口名称
- 2.1.10 network.in_subnet 判断当前主机是否在某一个网段内
- 2.1.11 network.interface 返回指定网卡的信息
- 2.1.13 network.interfaces 返回当前系统中所有的网卡信息
- 2.1.14 network.ip_addrs 返回一个IPv4的地址列表
- 2.1.15 network.netstat 返回所有打开的端口和状态
- 2.1.16 network.ping 使用ping命令测试到某主机的连通性
- 2.1.17 network.reverse_ip 返回一个指定的IP地址的反向地址
- 2.2 SaltStack常用模块之service
- 2.2.1 service.available 判断指定的服务是否可用
- 2.2.2 service.get_all 获取所有正在运行的服务
- 2.2.3 service.disabled 检查指定服务是否开机不自动启动
- 2.2.4 service.enabled 检查指定服务是否开机自动启动
- 2.2.5 service.disable 设置指定服务开机不自动启动
- 2.2.6 service.enable 设置指定服务开机自动启动
- 2.2.7 service.reload 重新加载指定服务
- 2.2.8 service.stop 停止指定服务
- 2.2.9 service.start 启动指定服务
- 2.2.10 service.restart 重启指定服务
- 2.2.11 service.status 查看指定服务的状态
- 2.3 SaltStack常用模块之pkg
- 2.3.1 pkg.download 只下载软件包但不安装
- 2.3.2 pkg.file_list 列出指定包或系统中已安装的所有包的文件
- 2.3.3 pkg.group_info 查看包组的信息
- 2.3.4 pkg.group_list 列出系统中所有的包组
- 2.3.5 pkg.install 安装软件
- 2.3.6 pkg.list_downloaded 列出已下载到本地的软件包
- 2.3.7 pkg.list_pkgs 以字典的方式列出当前已安装的软件包
- 2.3.8 pkg.owner 列出指定文件是由哪个包提供的
- 2.3.9 pkg.remove 卸载指定软件
- 2.3.10 pkg.upgrade 升级系统中所有的软件包或升级指定的软件包
- 2.4 SaltStack常用模块之state
- 2.5 用户管理
- 2.6 cp
- 2.6.1 cp.cache_dest
- 2.6.2 cp.cache_dir
- 2.6.3 cp.cache_file
- 2.6.4 cp.cache_files
- 2.6.5 cp.cache_master 检索 master 上的所有文件并在本地缓存它们
- 2.6.6 cp.envs 列出文件服务器的可用环境
- 2.6.7 cp.get_dir 用于从 salt master 递归复制目录
- 2.6.8 cp.get_file 用于从 salt master 获取单个文件
- 2.6.9 cp.get_template
- 2.6.10 cp.get_file_str 从 URL 下载文件到 Minion 缓存目录并返回该文件的内容
- 2.5 SaltStack常用模块之salt-cp
- 2.6 SaltStack常用模块之file
- 2.6.1 file.access 检查指定路径是否存在
- 2.6.2 file.append 往一个文件里追加内容，若此文件不存在则会报异常
- 2.6.3 file.basename 获取指定路径的基名
- 2.6.4 file.dirname 获取指定路径的目录名
- 2.6.5 file.check_hash 检查指定的文件与hash字符串是否匹配，匹配则返回 True 否则返回 False
- 2.6.6 file.chattr 修改指定文件的属性
- 2.6.7 file.chown 设置指定文件的属主、属组信息
- 2.6.8 file.copy 在远程主机上复制文件或目录
- 2.6.9 file.ditectory_exists 判断指定目录是否存在，存在则返回 True ，否则返回 False
- 2.6.10 file.diskusage 递归计算指定路径的磁盘使用情况并以字节为单位返回
- 2.6.12 file.find
- 2.6.13 file.get_gid 获取指定文件的gid
- 2.6.14 file.get_group 获取指定文件的组名
- 2.6.15 file.get_hash 获取指定文件的hash值，该值通过 sha256 算法得来
- 2.6.16 file.get_mode 获取指定文件的权限，以数字方式显示
- 2.6.17 file.get_selinux_context 获取指定文件的 SELINUX 上下文信息
- 2.6.18 file.get_sum 按照指定的算法计算指定文件的特征码并显示，默认使用的sha256算法。
- 2.6.19 file.get_uid与file.get_user 获取指定文件的 uid 或 用户名
- 2.6.20 file.gid_to_group 将指定的 gid 转换为组名并显示
- 2.6.21 file.group_to_gid 将指定的组名转换为 gid 并显示
- 2.6.22 file.grep 在指定文件中检索指定内容
- 2.6.23 file.is_blkdev 判断指定的文件是否是块设备文件
- 2.6.24 file.lsattr 检查并显示出指定文件的属性信息
- 2.6.25 file.mkdir 创建目录并设置属主、属组及权限
- 2.6.26 file.move 移动或重命名
- 2.6.27 file.prepend 把文本插入指定文件的开头
- 2.6.28 file.sed 修改文本文件的内容
- 2.6.29 file.read 读取文件内容
- 2.6.30 file.readdir 列出指定目录下的所有文件或目录，包括隐藏文件
- 2.6.31 file.remove 删除指定的文件或目录，若给出的是目录，将递归删除
- 2.6.32 file.rename 重命名文件或目录
- 2.6.33 file.set_mode 给指定文件设置权限
- 2.6.34 file.symlink 给指定的文件创建软链接
- 2.6.35 file.touch
- 2.6.36 file.uid_to_user 将指定的 uid 转换成用户名显示出来
- 2.6.37 file.user_to_uid 将指定的用户转换成 uid 并显示出来
- 2.6.38 file.write 往一个指定的文件里覆盖写入指定内容
1. SaltStack模块介绍
Module是日常使用SaltStack接触最多的一个组件，其用于管理对象操作，这也是SaltStack通过Push的方式进行管理的入口，比如我们日常简单的执行命令、查看包安装情况、查看服务运行情况等工作都是通过SaltStack Module来实现的。
当安装好Master和Minion包后，系统上会安装很多Module，大家可以通过以下命令查看支持的所有Module列表：
//查看所有module列表
[root@master ~]# salt 'minion1' sys.list_modules
minion1:
- acl
- aliases
- alternatives
- archive
- artifactory
- baredoc
```````````
[root@master ~]# salt 'minion1' sys.list_modules|wc -l
169
//查看指定module的所有function
[root@master ~]# salt 'minion1' sys.list_functions cmd
minion1:
- cmd.exec_code
- cmd.exec_code_all
- cmd.has_exec
- cmd.powershell
- cmd.powershell_all
- cmd.retcode
- cmd.run
- cmd.run_all
- cmd.run_bg
- cmd.run_chroot
- cmd.run_stderr
- cmd.run_stdout
- cmd.script
- cmd.script_retcode
- cmd.shell
- cmd.shell_info
- cmd.shells
- cmd.tty
- cmd.which
- cmd.which_bin
//查看指定module的用法
[root@master ~]# salt 'minion1' sys.doc cmd
cmd.exec_code:
Pass in two strings, the first naming the executable language, aka -
python2, python3, ruby, perl, lua, etc. the second string containing
the code you wish to execute. The stdout will be returned.
All parameters from :mod:`cmd.run_all <salt.modules.cmdmod.run_all>` except python_shell can be used.
CLI Example:
//SaltStack默认也支持一次执行多个Module，Module之间通过逗号隔开，默认传参之间也是用逗号分隔，也支持指定传参分隔符号--args-separator=@即可
[root@master ~]# salt 'minion1' test.echo,cmd.run,service.status "hello awm",date,sshd
minion1:
----------
cmd.run:
Wed Nov 3 18:24:42 CST 2021
service.status:
True
test.echo:
hello awm
2. SaltStack常用模块
2.1 SaltStack常用模块之network
2.1.1 network.active_tcp
返回所有活动的tcp连接
[root@master ~]# salt 'minion1' network.active_tcp
minion1:
----------
0:
----------
local_addr:
192.168.47.164
local_port:
22
remote_addr:
192.168.47.1
remote_port:
62855
1:
----------
local_addr:
192.168.47.164
local_port:
39762
remote_addr:
192.168.47.163
remote_port:
4505
2:
----------
local_addr:
192.168.47.164
local_port:
22
remote_addr:
192.168.47.1
remote_port:
62853
2.1.2 network.calc_net 通过IP和子网掩码计算出网段
[root@master ~]# salt 'minion1' network.calc_net 192.168.47.164 255.255.255.0
minion1:
192.168.47.0/24
[root@master ~]# salt 'minion1' network.calc_net 192.168.1.1 255.255.0.0
minion1:
192.168.0.0/16
[root@master ~]# salt 'minion1' network.calc_net 192.168.1.1 255.255.248.0
minion1:
192.168.0.0/21
2.1.3 network.connect 测试minion至某一台服务器的网络是否连通
[root@master ~]# salt 'minion1' network.connect www.baidu.com 80
minion1:
----------
comment:
Successfully connected to www.baidu.com (182.61.200.7) on tcp port 80
result:
True
2.1.4 network.default_route 查看默认路由
[root@master ~]# salt 'minion1' network.default_route
minion1:
|_
----------
addr_family:
inet
destination:
0.0.0.0
flags:
UG
gateway:
192.168.47.2
interface:
ens33
netmask:
0.0.0.0
2.1.5 network.get_fqdn 查看主机的fqdn(完全限定域名)
[root@master ~]# salt 'minion1' network.get_fqdn
minion1:
minion1
2.1.6 network.get_hostname 获取主机名
[root@master ~]# salt 'minion1' network.get_hostname
minion1:
minion1
2.1.7 network.get_route 查询到一个目标网络的路由信息
[root@master ~]# salt 'minion1' network.get_route 192.168.162.43
minion1:
----------
destination:
192.168.162.43
gateway:
192.168.47.2
interface:
ens33
source:
192.168.47.164
2.1.8 network.hw_addr 返回指定网卡的MAC地址
[root@master ~]# salt 'minion1' network.hw_addr ens33
minion1:
00:0c:29:0d:28:93
2.1.9 network.ifacestartswith 从特定CIDR检索接口名称
[root@master ~]# salt '*' network.ifacestartswith 192.168
minion1:
- ens32
2.1.10 network.in_subnet 判断当前主机是否在某一个网段内
[root@master ~]# salt 'minion1' network.in_subnet 192.168.47.0/24
minion1:
True
2.1.11 network.interface 返回指定网卡的信息
[root@master ~]# salt 'minion1' network.interface ens33
minion1:
|_
----------
address:
192.168.47.164
broadcast:
192.168.47.255
label:
ens33
netmask:
255.255.255.0
[root@master ~]# salt 'minion1' network.interface_ip ens33
minion1:
192.168.47.164
2.1.13 network.interfaces 返回当前系统中所有的网卡信息
[root@master ~]# salt 'minion1' network.interfaces
minion1:
----------
ens33:
----------
hwaddr:
00:0c:29:0d:28:93
inet:
|_
----------
address:
192.168.47.164
broadcast:
192.168.47.255
label:
ens33
netmask:
255.255.255.0
inet6:
|_
----------
address:
fe80::7f17:7566:4adf:f2cd
prefixlen:
64
scope:
link
up:
True
lo:
----------
hwaddr:
00:00:00:00:00:00
inet:
|_
----------
address:
127.0.0.1
broadcast:
None
label:
lo
netmask:
255.0.0.0
inet6:
|_
----------
address:
::1
prefixlen:
128
scope:
host
up:
True
2.1.14 network.ip_addrs 返回一个IPv4的地址列表
该函数将会忽略掉127.0.0.1的地址
[root@master ~]# salt 'minion1' network.ip_addrs
minion1:
- 192.168.47.164
2.1.15 network.netstat 返回所有打开的端口和状态
[root@master ~]# salt 'minion1' network.netstat
minion1:
|_
----------
inode:
28120
local-address:
192.168.47.164%ens33:68
program:
NetworkManager
proto:
udp
recv-q:
0
remote-address:
192.168.47.254:67
send-q:
0
user:
0
|_
----------
inode:
27273
local-address:
0.0.0.0:22
program:
sshd
proto:
tcp
recv-q:
0
remote-address:
0.0.0.0:*
send-q:
128
state:
LISTEN
user:
0
|_
----------
inode:
27460
local-address:
0.0.0.0:80
program:
nginx
proto:
tcp
recv-q:
0
remote-address:
0.0.0.0:*
send-q:
128
state:
LISTEN
user:
0
|_
----------
inode:
29029
local-address:
192.168.47.164:22
program:
sshd
proto:
tcp
recv-q:
0
remote-address:
192.168.47.1:62855
send-q:
0
state:
ESTABLISHED
user:
0
|_
----------
inode:
0
local-address:
192.168.47.164:57650
program:
proto:
tcp
recv-q:
0
remote-address:
192.168.47.163:4506
send-q:
0
state:
TIME-WAIT
user:
0
|_
----------
inode:
44131
local-address:
192.168.47.164:39762
program:
salt-minion
proto:
tcp
recv-q:
0
remote-address:
192.168.47.163:4505
send-q:
0
state:
ESTABLISHED
user:
0
|_
----------
inode:
28637
local-address:
192.168.47.164:22
program:
sshd
proto:
tcp
recv-q:
0
remote-address:
192.168.47.1:62853
send-q:
0
state:
ESTABLISHED
user:
0
|_
----------
inode:
27284
local-address:
[::]:22
program:
sshd
proto:
tcp
recv-q:
0
remote-address:
[::]:*
send-q:
128
state:
LISTEN
user:
0
|_
----------
inode:
27461
local-address:
[::]:80
program:
nginx
proto:
tcp
recv-q:
0
remote-address:
[::]:*
send-q:
128
state:
LISTEN
user:
0
2.1.16 network.ping 使用ping命令测试到某主机的连通性
[root@master ~]# salt 'minion1' network.ping baidu.com
minion1:
PING baidu.com (220.181.38.148) 56(84) bytes of data.
64 bytes from 220.181.38.148 (220.181.38.148): icmp_seq=1 ttl=128 time=40.7 ms
64 bytes from 220.181.38.148 (220.181.38.148): icmp_seq=2 ttl=128 time=39.9 ms
64 bytes from 220.181.38.148 (220.181.38.148): icmp_seq=3 ttl=128 time=41.1 ms
64 bytes from 220.181.38.148 (220.181.38.148): icmp_seq=4 ttl=128 time=39.1 ms
--- baidu.com ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3005ms
rtt min/avg/max/mdev = 39.104/40.211/41.144/0.818 ms
2.1.17 network.reverse_ip 返回一个指定的IP地址的反向地址
[root@master ~]# salt 'minion1' network.reverse_ip 192.168.47.163
minion1:
163.47.168.192.in-addr.arpa
2.2 SaltStack常用模块之service
2.2.1 service.available 判断指定的服务是否可用
[root@master ~]# salt 'minion1' service.available sshd
minion1:
True
[root@master ~]# salt 'minion1' service.available vsftpd
minion1:
False
2.2.2 service.get_all 获取所有正在运行的服务
[root@master ~]# salt 'minion1' service.get_all
minion1:
- NetworkManager
- NetworkManager-dispatcher
- NetworkManager-wait-online
- auditd
- autovt@
- basic.target
- blk-availability
- bluetooth.target
- boot-complete.target
- console-getty
- container-getty@
........
2.2.3 service.disabled 检查指定服务是否开机不自动启动
[root@master ~]# salt 'minion1' service.disabled httpd
minion1:
True
2.2.4 service.enabled 检查指定服务是否开机自动启动
[root@master ~]# salt 'minion1' service.enabled nginx
minion1:
True
2.2.5 service.disable 设置指定服务开机不自动启动
[root@master ~]# salt 'minion1' service.disable httpd
minion1:
True
[root@master ~]# salt 'minion1' service.enabled httpd
minion1:
False
2.2.6 service.enable 设置指定服务开机自动启动
[root@master ~]# salt 'minion1' service.enable httpd
minion1:
True
[root@master ~]# salt 'minion1' service.enabled httpd
minion1:
True
[root@maste
2.2.7 service.reload 重新加载指定服务
服务开启了才能加载，不开启不能加载
[root@master ~]# salt 'minion1' service.disabled nginx
minion1:
False
[root@master ~]# salt 'minion1' service.reload nginx
minion1:
True
2.2.8 service.stop 停止指定服务
[root@master ~]# salt 'minion1' service.stop nginx
minion1:
True
2.2.9 service.start 启动指定服务
[root@master ~]# salt 'minion1' service.start nginx
minion1:
True
2.2.10 service.restart 重启指定服务
[root@master ~]# salt 'minion1' service.restart nginx
minion1:
True
2.2.11 service.status 查看指定服务的状态
[root@master ~]# salt 'minion1' service.status nginx
minion1:
True
2.3 SaltStack常用模块之pkg
2.3.1 pkg.download 只下载软件包但不安装
此功能将会下载指定的软件包，但是需要在minion端安装yum-utils，可以使用 cmd.run 进行远程安装
[root@master ~]# salt 'minion1' cmd.run 'yum -y install yum-utils'
minion1:
Last metadata expiration check: 6:43:21 ago on Wed Nov 3 12:32:04 2021.
Package yum-utils-4.0.21-3.el8.noarch is already installed.
Dependencies resolved.
Nothing to do.
Complete!
[root@master ~]# salt 'minion1' pkg.download wget
minion1:
----------
wget:
/var/cache/yum/packages/wget-1.19.5-10.el8.x86_64.rpm //下载好的软件放在这里
[root@minion1 ~]# cd /var/cache/yum/packages/
[root@minion1 packages]# ls
wget-1.19.5-10.el8.x86_64.rpm
2.3.2 pkg.file_list 列出指定包或系统中已安装的所有包的文件
//列出已安装的nginx软件包提供的所有文件
[root@master ~]# salt 'minion1' pkg.file_list nginx
minion1:
----------
errors:
files:
- /etc/logrotate.d/nginx
- /etc/nginx/fastcgi.conf
- /etc/nginx/fastcgi.conf.default
- /etc/nginx/fastcgi_params
- /etc/nginx/fastcgi_params.default
- /etc/nginx/koi-utf
- /etc/nginx/koi-win
- /etc/nginx/mime.types
- /etc/nginx/mime.types.default
- /etc/nginx/nginx.conf
- /etc/nginx/nginx.conf.default
- /etc/nginx/scgi_params
- /etc/nginx/scgi_params.default
- /etc/nginx/uwsgi_params
- /etc/nginx/uwsgi_params.default
- /etc/nginx/win-utf
- /usr/bin/nginx-upgrade
- /usr/lib/.build-id
- /usr/lib/.build-id/2d
- /usr/lib/.build-id/2d/da6018ae12edb856ad3d2cf61bf586b6b4873c
- /usr/lib/systemd/system/nginx.service
- /usr/lib64/nginx/modules
- /usr/sbin/nginx
- /usr/share/doc/nginx
- /usr/share/doc/nginx/CHANGES
- /usr/share/doc/nginx/README
- /usr/share/doc/nginx/README.dynamic
- /usr/share/licenses/nginx
- /usr/share/licenses/nginx/LICENSE
- /usr/share/man/man3/nginx.3pm.gz
- /usr/share/man/man8/nginx-upgrade.8.gz
- /usr/share/man/man8/nginx.8.gz
- /usr/share/nginx/html/404.html
- /usr/share/nginx/html/50x.html
- /usr/share/nginx/html/index.html
- /usr/share/nginx/html/nginx-logo.png
- /usr/share/nginx/html/poweredby.png
- /usr/share/vim/vimfiles/ftdetect/nginx.vim
- /usr/share/vim/vimfiles/indent/nginx.vim
- /usr/share/vim/vimfiles/syntax/nginx.vim
- /var/lib/nginx
- /var/lib/nginx/tmp
- /var/log/nginx
//当不提供参数时，将会列出当前系统中所有已安装软件的文件列表
[root@master ~]# salt 'minion1' pkg.file_list
minion1:
----------
errors:
files:
VALUE_TRIMMED
2.3.3 pkg.group_info 查看包组的信息
[root@master ~]# salt 'minion1' pkg.group_info 'Development Tools'
minion1:
----------
conditional:
default:
- asciidoc
- byacc
- ctags
- diffstat
- elfutils-libelf-devel
- git
- intltool
- jna
- ltrace
- patchutils
- perl-Fedora-VSP
- perl-Sys-Syslog
- perl-generators
- pesign
- source-highlight
- systemtap
- valgrind
- valgrind-devel
description:
A basic development environment.
group:
Development Tools
id:
None
mandatory:
- autoconf
- automake
- binutils
- bison
- flex
- gcc
- gcc-c++
- gdb
- glibc-devel
- libtool
- make
- pkgconf
- pkgconf-m4
- pkgconf-pkg-config
- redhat-rpm-config
- rpm-build
- rpm-sign
- strace
optional:
- cmake
- expect
- rpmdevtools
- rpmlint
type:
package group
2.3.4 pkg.group_list 列出系统中所有的包组
[root@master ~]# salt 'minion1' pkg.group_list
minion1:
----------
available:
- Backup Client
- base-x
- Conflicts AppStream
- Container Management
- Debugging Tools
- Desktop Debugging and Performance Tools
- .NET Core Development
- FTP Server
- GNOME Applications
- Graphics Creation Tools
- Guest Agents
- Guest Desktop Agents
- Input Methods
- Internet Applications
- Internet Browser
- Java Platform
- Legacy X Window System Compatibility
- Multimedia
- Office Suite and Productivity
- Atomic Host ostree support
- KVM platform specific packages
- Hyper-v platform specific packages
- Printing Client
- Remote Desktop Clients
- RPM Development Tools
- TeX formatting system
- Virtualization Client
- Virtualization Hypervisor
- Virtualization Platform
- Virtualization Tools
- Basic Web Server
- Additional Development
- Anaconda tools
- Base
- Conflicts BaseOS
- Development Tools
- Dial-up Networking Support
- File and Storage Server
- Fonts
- GNOME
- Graphical Administration Tools
- Hardware Monitoring Utilities
- Hardware Support
- Headless Management
- Infiniband Support
- Large Systems Performance
- Legacy UNIX Compatibility
- Mail Server
- Mainframe Access
- Network File System Client
- Network Servers
- Networking Tools
- Common NetworkManager submodules
- Performance Tools
- Platform Development
- Python Web
- Remote Management for Linux
- Scientific Support
- Security Tools
- Server product core
- Smart Card Support
- Windows File Server
- Standard
- System Tools
- Workstation product core
available environments:
- Server with GUI
- Server
- Workstation
- Virtualization Host
- Custom Operating System
available languages:
----------
installed:
- VMware platform specific packages
- Core
installed environments:
- Minimal Install
2.3.5 pkg.install 安装软件
[root@master ~]# salt 'minion1' pkg.install wget
minion1:
----------
wget:
----------
new:
1.19.5-10.el8
old:
2.3.6 pkg.list_downloaded 列出已下载到本地的软件包
[root@master ~]# salt 'minion1' pkg.list_downloaded
minion1:
----------
2.3.7 pkg.list_pkgs 以字典的方式列出当前已安装的软件包
[root@master ~]# salt 'minion1' pkg.list_pkgs
minion1:
----------
NetworkManager:
1:1.30.0-0.3.el8
NetworkManager-libnm:
1:1.30.0-0.3.el8
NetworkManager-team:
1:1.30.0-0.3.el8
NetworkManager-tui:
1:1.30.0-0.3.el8
abattis-cantarell-fonts:
0.0.25-4.el8
acl:
2.2.53-1.el8
adwaita-cursor-theme:
3.28.0-2.el8
adwaita-icon-theme:
3.28.0-2.el8
at-spi2-atk:
2.26.2-1.el8
at-spi2-core:
2.28.0-1.el8
atk:
2.28.1-1.el8
audit:
3.0-0.17.20191104git1c2f876.el8
audit-libs:
3.0-0.17.20191104git1c2f876.el8
authselect:
1.2.2-1.el8
authselect-libs:
1.2.2-1.el8
avahi-libs:
0.7-20.el8
basesystem:
11-5.el8
bash:
4.4.19-12.el8
bind-export-libs:
32:9.11.20-6.el8
biosdevname:
0.7.3-2.el8
brotli:
1.0.6-2.el8
bzip2-libs:
1.0.6-26.el8
c-ares:
1.13.0-5.el8
ca-certificates:
2020.2.41-80.0.el8_2
cairo:
1.15.12-3.el8
cairo-gobject:
2.3.8 pkg.owner 列出指定文件是由哪个包提供的
[root@master ~]# salt 'minion1' pkg.owner /usr/bin/ls
minion1:
coreutils
[root@master ~]# salt 'minion1' pkg.owner /etc/passwd
minion1:
setup
2.3.9 pkg.remove 卸载指定软件
//若要卸载多个文件，中间需要用逗号隔开
[root@master ~]# salt 'minion1' pkg.remove wget
minion1:
----------
wget:
----------
new:
old:
1.19.5-10.el8
2.3.10 pkg.upgrade 升级系统中所有的软件包或升级指定的软件包
[root@master ~]# salt 'minion1' pkg.upgrade name=openssl
minion1:
----------
openssl:
----------
new:
1:1.0.2k-16.el7
old:
1:1.0.2k-8.el7
openssl-libs:
----------
new:
1:1.0.2k-16.el7
old:
1:1.0.2k-8.el7
//若想升级系统中所有的软件包则把 name 参数去掉即可
2.4 SaltStack常用模块之state
2.4.1 state.show_highstate
显示当前系统中有哪些高级状态
[root@master ~]# salt 'minion1' state.show_highstate
minion1:
----------
nginx-install:
----------
__env__:
base
__sls__:
web.nginx.install
pkg:
|_
----------
name:
nginx
- installed
|_
----------
order:
10000
nginx-service:
----------
__env__:
base
__sls__:
web.nginx.install
service:
|_
----------
name:
nginx
|_
----------
enable:
True
- running
|_
----------
order:
10001
2.4.2 state.highstate 执行高级状态
[root@master ~]# tree /srv/
/srv/
├── pillar
│ └── base
│ ├── apache.sls
│ └── top.sls
└── salt
├── base
│ ├── top.sls
│ └── web
│ ├── apache
│ │ └── install.sls
│ └── nginx
│ └── install.sls
├── dev
├── prod
└── test
[root@master ~]# salt 'minion1' state.highstate web.apache.install
minion1:
----------
ID: nginx-install
Function: pkg.installed
Name: nginx
Result: True
Comment: All specified packages are already installed
Started: 20:24:35.434412
Duration: 740.114 ms
Changes:
----------
ID: nginx-service
Function: service.running
Name: nginx
Result: True
Comment: The service nginx is already running
Started: 20:24:36.179003
Duration: 45.316 ms
Changes:
Summary for minion1
------------
Succeeded: 2
Failed: 0
------------
Total states run: 2
Total run time: 785.430 ms
2.4.3 state.show_state_usage 显示当前系统中的高级状态执行情况
[root@master ~]# salt 'minion1' state.show_state_usage
minion1:
----------
base:
----------
count_all:
3
count_unused:
2
count_used:
1
unused:
- top
- web.apache.install
used:
- web.nginx.install
dev:
----------
count_all:
0
count_unused:
0
count_used:
0
unused:
used:
prod:
----------
count_all:
0
count_unused:
0
count_used:
0
unused:
used:
test:
----------
count_all:
0
count_unused:
0
count_used:
0
unused:
used:
2.4.4 state.show_top 返回minion将用于highstate的顶级数据
[root@master ~]# salt 'minion1' state.show_top
minion1:
----------
base:
- web.nginx.install
2.4.5 state.top 执行指定的top file，而不是默认的
[root@master base]# pwd
/srv/salt/base
[root@master base]# ls
top.sls web
[root@master base]# mv top.sls awm.sls
[root@master base]# ls
awm.sls web
[root@master base]# salt 'minion1' state.top awm.sls
minion1:
----------
ID: nginx-install
Function: pkg.installed
Name: nginx
Result: True
Comment: All specified packages are already installed
Started: 20:30:01.205082
Duration: 732.675 ms
Changes:
----------
ID: nginx-service
Function: service.running
Name: nginx
Result: True
Comment: The service nginx is already running
Started: 20:30:01.939871
Duration: 42.622 ms
Changes:
Summary for minion1
------------
Succeeded: 2
Failed: 0
------------
Total states run: 2
Total run time: 775.297 ms
2.4.6 state.show_sls 显示 master 上特定sls或sls文件列表中的状态数据
[root@master ~]# cat /srv/pillar/base/apache.sls
{% if grains['os'] == 'CentOS' %}
package: httpd
{% elif grains['os'] == 'CentOS Stream' %}
package: nginx
{% endif %}
[root@master base]# salt 'minion1' state.show_sls web.apache.install
minion1:
----------
apache-install:
----------
__env__:
base
__sls__:
web.apache.install
pkg:
|_
----------
name:
httpd
- installed
|_
----------
order:
10000
apache-service:
----------
__env__:
base
__sls__:
web.apache.install
service:
|_
----------
name:
httpd
|_
----------
enable:
True
- running
|_
----------
order:
10001
2.5 用户管理
2.5.1 user.add
在minion1主机上创建一个用户
[root@master base]# salt 'minion1' user.add awm
minion1:
True
[root@minion1 ~]# id awm
uid=1000(awm) gid=1000(awm) 组=1000(awm)
//创建用户时指定shell
[root@master base]# salt 'minion1' user.add soft shell=/sbin/nologin
minion1:
True
[root@minion1 ~]# tail -1 /etc/passwd
soft:x:1003:1003::/home/soft:/sbin/nologin
//创建用户时指定不创建家目录
[root@master base]# salt 'minion1' user.add soft1 createhome=False
minion1:
True
[root@minion1 ~]# tail -1 /etc/passwd
soft1:x:1004:1004::/home/soft1:/bin/bash
[root@minion1 home]# ls
awm soft #没有soft1
2.5.2user.chuid 更改用户UID
[root@master base]# salt 'minion1' user.chuid awm 1002
minion1:
True
[root@minion1 ~]# id awm
uid=1002(awm) gid=1000(awm) 组=1000(awm)
2.5.3user.chgid 更改用户GID
[root@master base]# salt 'minion1' user.chgid awm 999
minion1:
True
[root@minion1 ~]# id awm
uid=1002(awm) gid=999(input) 组=999(input)
2.5.4 user.chshell 修改用户的shell
[root@minion1 ~]# cat /etc/passwd
awm:x:1002:997::/home/awm:/bin/bash
[root@master base]# salt 'minion1' user.chshell awm /sbin/nologin
minion1:
True
[root@minion1 ~]# tail -1 /etc/passwd
awm:x:1002:997::/home/awm:/sbin/nologin
2.5.5 user.list_users 查看所有用户
[root@master base]# salt 'minion1' user.list_users
minion1:
- adm
- apache
- awm
- bin
- daemon
- dbus
- ftp
- games
- halt
- lp
- mail
- nginx
- nobody
- operator
- polkitd
- rngd
- root
- shutdown
- sshd
- sssd
- sync
- systemd-coredump
- systemd-resolve
- tss
- unbound
2.5.6 user.info 返回用户信息
[root@master base]# salt 'minion1' user.info awm
minion1:
----------
fullname:
gid:
997
groups:
- systemd-coredump
home:
/home/awm
homephone:
name:
awm
other:
passwd:
x
roomnumber:
shell:
/sbin/nologin
uid:
1002
workphone:
2.5.7 user.getent 返回所有系统用户信息的列表
[root@master base]# salt 'minion1' user.getent
minion1:
|_
----------
fullname:
root
gid:
0
groups:
- root
home:
/root
homephone:
name:
root
other:
passwd:
x
roomnumber:
shell:
/bin/bash
uid:
0
workphone:
|_
----------
fullname:
bin
gid:
1
groups:
- bin
home:
/bin
homephone:
name:
bin
other:
passwd:
x
roomnumber:
shell:
/sbin/nologin
uid:
1
workphone:
|_
----------
fullname:
daemon
gid:
2
groups:
- daemon
home:
/sbin
homephone:
name:
daemon
other:
passwd:
x
roomnumber:
shell:
/sbin/nologin
uid:
2
workphone:
|_
----------
fullname:
adm
gid:
4
groups:
- adm
home:
/var/adm
homephone:
name:
adm
other:
passwd:
x
roomnumber:
shell:
/sbin/nologin
uid:
3
workphone:
|_
----------
fullname:
lp
gid:
7
groups:
- lp
home:
...........
2.5.8 user.rename 修改指定用户的用户名
[root@master base]# salt 'minion1' user.rename awm my
minion1:
False
[root@minion1 home]# id awm
id: “awm”：无此用户
[root@minion1 home]# id my
uid=1002(my) gid=997(systemd-coredump) 组=997(systemd-coredump)
2.5.9 user.delete 删除用户
[root@master base]# salt 'minion1' user.delete my
minion1:
True
[root@minion1 home]# id my
id: “my”：无此用户
2.6 cp
2.6.1 cp.cache_dest
文件结构
[root@master salt]# tree /srv/
/srv/
├── pillar
│ └── base
│ ├── apache.sls
│ └── top.sls
└── salt
├── base
│ ├── awm.sls
│ ├── test
│ │ ├── testfile
│ │ ├── testfile1
│ │ └── testfile2
│ │ ├── testfile3
│ │ └── testfile4
│ └── web
│ ├── apache
│ │ └── install.sls
│ └── nginx
│ └── install.sls
├── dev
├── prod
└── test
12 directories, 9 files
如果使用 缓存，则返回文件的预期缓存路径 cp.cache_file
[root@master salt]# salt 'minion1' cp.cache_dest salt://test/testfile1
minion1:
/var/cache/salt/minion/files/base/test/testfile1
这仅返回 expected 路径，它不会告诉您 URL 是否真的被缓存。要检查 URL 是否已缓存，请 cp.is_cached改用。
2.6.2 cp.cache_dir
从 master 下载并缓存目录下的所有内容
[root@master salt]# salt 'minion1' cp.cache_dir salt://test/testfile2
minion1:
- /var/cache/salt/minion/files/base/test/testfile2/testfile3
- /var/cache/salt/minion/files/base/test/testfile2/testfile4
[root@minion1 ~]# ls /var/cache/salt/minion/files/base/test/testfile2/
testfile3 testfile4
2.6.3 cp.cache_file
用于在 Minion 上缓存单个文件
返回 Minion 上新缓存文件的位置
[root@master salt]# salt 'minion1' cp.cache_file salt://test/testfile1
minion1:
/var/cache/salt/minion/files/base/test/testfile1
[root@minion1 ~]# ls /var/cache/salt/minion/files/base/test/
testfile1 testfile2
2.6.4 cp.cache_files
用于从Master收集许多文件，收集的文件将保存在反映从Master检索到的路径的minion cachedir中
//先清空node1上的testfile，防止文件重名
[root@minion1 ~]# cd /var/cache/salt/minion/files/base/test/
[root@minion1 test]# rm -rf *
[root@minion1 test]# ls
[root@master salt]# salt 'minion1' cp.cache_files salt://test/testfile,salt://test/testfile2
minion1:
- /var/cache/salt/minion/files/base/test/testfile
- False #所以不能cp整个目录
[root@master salt]# salt 'minion1' cp.cache_files salt://test/testfile,salt://test/testfile2/testfile3
minion1:
- /var/cache/salt/minion/files/base/test/testfile
- /var/cache/salt/minion/files/base/test/testfile2/testfile3
[root@minion1 test]# ls
testfile testfile2
[root@minion1 test]# ls testfile2
testfile3
2.6.5 cp.cache_master 检索 master 上的所有文件并在本地缓存它们
[root@master salt]# salt 'minion1' cp.cache_master
minion1:
- /var/cache/salt/minion/files/base/awm.sls
- /var/cache/salt/minion/files/base/test/testfile
- /var/cache/salt/minion/files/base/test/testfile1
- /var/cache/salt/minion/files/base/test/testfile2/testfile3
- /var/cache/salt/minion/files/base/test/testfile2/testfile4
- /var/cache/salt/minion/files/base/web/apache/install.sls
- /var/cache/salt/minion/files/base/web/nginx/install.sls
2.6.6 cp.envs 列出文件服务器的可用环境
[root@master salt]# salt 'minion1' cp.envs
minion1:
- test
- dev
- prod
- base
2.6.7 cp.get_dir 用于从 salt master 递归复制目录
[root@master salt]# salt 'minion1' cp.get_dir salt://web/apache /minion1/dest
minion1:
- /minion1/dest/apache/install.sls
[root@minion1 ~]# ls /minion1/dest/apache/
install.sls
2.6.8 cp.get_file 用于从 salt master 获取单个文件
这个命令只会获取那一个文件，而不是像cp.get_dir一样包括目录一起获取
[root@master salt]# salt 'minion1' cp.get_file salt://test/testfile2/testfile4 /minion1/dest
minion1:
/minion1/dest/testfile4
[root@minion1 ~]# ls /minion1/dest/testfile4
/minion1/dest/testfile4
2.6.9 cp.get_template
在设置之前将文件渲染为模板。警告，对于非破坏旧 API，顺序与 fileclient.cp 中的顺序不同。
[root@master salt]# salt 'minion1' cp.get_template salt://test/testfile2/testfile3 /minion1/dest
minion1:
/minion1/dest
[root@minion1 ~]# ls /minion1/dest/
apache __salt.tmp.x15t7p9z testfile4
2.6.10 cp.get_file_str 从 URL 下载文件到 Minion 缓存目录并返回该文件的内容
//文件内容为空，则打印空
[root@master salt]# salt 'minion1' cp.get_file_str salt://test/testfile
minion1:
//有文字就会显示文字
[root@master test]# vim testfile
[root@master test]# cat testfile
穿过挪威的森林，让我走进你的梦里，夕阳落在我的铠甲，王子不一定骑白马，我不是马思唯，我只要你陪
[root@master salt]# salt 'minion1' cp.get_file_str salt://test/testfile
minion1:
穿过挪威的森林，让我走进你的梦里，夕阳落在我的铠甲，王子不一定骑白马，我不是马思唯，我只要你陪
2.5 SaltStack常用模块之salt-cp
salt-cp能够很方便的把 master 上的文件批量传到 minion上
//拷贝单个文件到目标主机的/usr/src目录下
[root@master ~]# salt '*' cmd.run 'rm -rf /opt/*'
minion1:
minion2:
[root@master ~]# vim test.sh
[root@master ~]# cat test.sh
#!/bin/bash
echo "hello awm"
[root@master ~]# salt-cp '*' /root/test.sh /opt/
minion1:
----------
/opt/test.sh:
True
minion2:
----------
/opt/test.sh:
True
[root@master ~]# salt '*' cmd.run 'ls -l /opt/*'
minion2:
-rw-r--r-- 1 root root 29 Nov 4 18:18 /opt/test.sh
minion1:
-rw-r--r-- 1 root root 29 Nov 4 18:18 /opt/test.sh
//脚本无论本地有没有执行权限，cp过去都没有执行权限，得用一下方法执行
[root@master ~]# salt '*' cmd.run '/bin/bash /opt/test.sh'
minion2:
hello awm
minion1:
hello awm
2.6 SaltStack常用模块之file
2.6.1 file.access 检查指定路径是否存在
[root@master ~]# salt '*' file.access /opt/test.sh f
minion2:
True
minion1:
True
[root@master ~]# salt '*' file.access /opt/test.sh x
minion1:
False
minion2:
False
[root@master ~]# salt '*' file.access /opt/test.sh r
minion1:
True
minion2:
True
[root@master ~]# salt '*' file.access /opt/test.sh w
minion2:
True
minion1:
True
2.6.2 file.append 往一个文件里追加内容，若此文件不存在则会报异常
[root@master ~]# salt '*' file.append /opt/test.sh date '+%Y%m%d'
minion2:
Wrote 2 lines to "/opt/test.sh" #追加了两行
minion1:
Wrote 2 lines to "/opt/test.sh"
[root@master ~]# salt '*' file.append /opt/test.sh "date '+%Y%m%d'" "soft"
minion2:
Wrote 2 lines to "/opt/test.sh" #有空格的情况下，追加一行用引号引起来，这里追加了两行
minion1:
Wrote 2 lines to "/opt/test.sh"
[root@master ~]# salt '*' cmd.run 'cat /opt/test.sh'
minion2:
#!/bin/bash
echo "hello awm"
date
+%Y%m%d
date '+%Y%m%d'
soft
minion1:
#!/bin/bash
echo "hello awm"
date
+%Y%m%d
date '+%Y%m%d'
soft
2.6.3 file.basename 获取指定路径的基名
//区别
[root@master ~]# basename /a/s/d/f/f
f
[root@master ~]# dirname /a/d/v/f/r
/a/d/v/f
//在脚本中可以这么使用
[root@master ~]# software=/usr/src/nginx.tar.xz
[root@master ~]# basename $software
nginx.tar.xz
[root@master ~]# dirname $software
/usr/src
[root@master ~]# salt '*' file.basename /usr/src/nginx.tar.xz
minion2:
nginx.tar.xz
minion1:
nginx.tar.xz
2.6.4 file.dirname 获取指定路径的目录名
[root@master ~]# salt '*' file.dirname /usr/src/nginx.tar.xz
minion2:
/usr/src
minion1:
/usr/src
2.6.5 file.check_hash 检查指定的文件与hash字符串是否匹配，匹配则返回 True 否则返回 False
[root@master ~]# salt '*' cmd.run 'md5sum /opt/test.sh'
minion1:
83afffe4a96454936e65af792036c277 /opt/test.sh
minion2:
83afffe4a96454936e65af792036c277 /opt/test.sh
[root@master ~]# salt '*' file.check_hash /opt/test.sh 83afffe4a96454936e65af792036c277
minion2:
True
minion1:
True
2.6.6 file.chattr 修改指定文件的属性
| 属性 | 对文件的意义 | 对目录的意义 |
|---|---|---|
| a | 只允许在这个文件之后追加数据， 不允许任何进程覆盖或截断这个文件 | 只允许在这个目录下建立和修改文件， 而不允许删除任何文件 |
| i | 不允许对这个文件进行任何的修改， 不能删除、更改、移动 | 任何的进程只能修改目录之下的文件， 不允许建立和删除文件 |
给指定文件添加属性
//查看当前属性
[root@master ~]# salt '*' cmd.run 'lsattr /root'
minion1:
-------------------- /root/anaconda-ks.cfg
-------------------- /root/aaa
minion2:
-------------------- /root/anaconda-ks.cfg
-------------------- /root/aaa
//添加属性
[root@master ~]# salt '*' file.chattr /root/aaa operator=add attributes=ai
minion2:
True
minion1:
True
[root@master ~]# salt '*' cmd.run 'lsattr /root'
minion2:
-------------------- /root/anaconda-ks.cfg
----ia-------------- /root/aaa
minion1:
-------------------- /root/anaconda-ks.cfg
----ia-------------- /root/aaa
给指定文件去除属性
//删除i属性
[root@master ~]# salt '*' file.chattr /root/aaa operator=remove attributes=i
minion2:
True
minion1:
True
[root@master ~]# salt '*' cmd.run 'lsattr /root'
minion2:
-------------------- /root/anaconda-ks.cfg
-----a-------------- /root/aaa
minion1:
-------------------- /root/anaconda-ks.cfg
-----a-------------- /root/aaa
2.6.7 file.chown 设置指定文件的属主、属组信息
[root@master ~]# salt '*' cmd.run 'id tom'
minion2:
uid=1000(tom) gid=1000(tom) groups=1000(tom)
minion1:
uid=1005(tom) gid=1005(tom) groups=1005(tom)
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
minion2:
total 4
-rw-r--r-- 1 root root 62 Nov 4 18:26 test.sh
minion1:
total 4
-rw-r--r-- 1 root root 62 Nov 4 18:26 test.sh
[root@master ~]# salt '*' file.chown /opt/test.sh tom root
minion1:
None
minion2:
None
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
minion2:
total 4
-rw-r--r-- 1 tom root 62 Nov 4 18:26 test.sh
minion1:
total 4
-rw-r--r-- 1 tom root 62 Nov 4 18:26 test.sh
2.6.8 file.copy 在远程主机上复制文件或目录
拷贝文件
[root@master ~]# salt '*' cmd.run 'ls /root'
minion2:
aaa
anaconda-ks.cfg
minion1:
aaa
anaconda-ks.cfg
[root@master ~]# salt '*' file.copy /root/aaa /root/bbb
minion2:
True
minion1:
True
覆盖并拷贝目录，将会覆盖同名文件或目录
[root@minion1 ~]# tree test/
test/
└── test1
[root@master ~]# salt 'minion1' file.copy /root/test /opt/ recurse=true
minion1:
True
[root@minion1 ~]# ls /opt/
test1 test.sh #copy了目录里的文件过来
2.6.9 file.ditectory_exists 判断指定目录是否存在，存在则返回 True ，否则返回 False
[root@master ~]# salt 'minion1' cmd.run 'ls -l /opt'
minion1:
total 8
-rw-r--r-- 1 tom root 62 Nov 4 18:26 test.sh
-rw-r--r-- 1 root root 10 Nov 4 18:58 test1
[root@master ~]# salt '*' file.directory_exists /opt
minion2:
True
minion1:
True
//判断文件是否存在
[root@master ~]# salt '*' file.file_exists /opt/test.sh
minion2:
True
minion1:
True
2.6.10 file.diskusage 递归计算指定路径的磁盘使用情况并以字节为单位返回
[root@master ~]# salt '*' file.diskusage /opt/test.sh
minion2:
62
minion1:
62
[root@minion1 ~]# ll /opt/
总用量 8
-rw-r--r-- 1 root root 10 11月 4 18:58 test1
-rw-r--r-- 1 tom root 62 11月 4 18:26 test.sh
2.6.12 file.find
类似 find 命令并返回符合指定条件的路径列表
The options include match criteria:
name = path-glob # case sensitive
iname = path-glob # case insensitive
regex = path-regex # case sensitive
iregex = path-regex # case insensitive
type = file-types # match any listed type
user = users # match any listed user
group = groups # match any listed group
size = [+-]number[size-unit] # default unit = byte
mtime = interval # modified since date
grep = regex # search file contents
and/or actions:
delete [= file-types] # default type = 'f'
exec = command [arg ...] # where {} is replaced by pathname
print [= print-opts]
and/or depth criteria:
maxdepth = maximum depth to transverse in path
mindepth = minimum depth to transverse before checking files or directories
The default action is print=path
path-glob:
* = match zero or more chars
? = match any char
[abc] = match a, b, or c
[!abc] or [^abc] = match anything except a, b, and c
[x-y] = match chars x through y
[!x-y] or [^x-y] = match anything except chars x through y
{a,b,c} = match a or b or c
path-regex: a Python Regex (regular expression) pattern to match pathnames
file-types: a string of one or more of the following:
a: all file types
b: block device
c: character device
d: directory
p: FIFO (named pipe)
f: plain file
l: symlink
s: socket
users: a space and/or comma separated list of user names and/or uids
groups: a space and/or comma separated list of group names and/or gids
size-unit:
b: bytes
k: kilobytes
m: megabytes
g: gigabytes
t: terabytes
interval:
[<num>w] [<num>d] [<num>h] [<num>m] [<num>s]
where:
w: week
d: day
h: hour
m: minute
s: second
print-opts: a comma and/or space separated list of one or more of the following:
group: group name
md5: MD5 digest of file contents
mode: file permissions (as integer)
mtime: last modification time (as time_t)
name: file basename
path: file absolute path
size: file size in bytes
type: file type
user: user name
示例：
salt '*' file.find / type=f name=\*.bak size=+10m
salt '*' file.find /var mtime=+30d size=+10m print=path,size,mtime
salt '*' file.find /var/log name=\*.[0-9] mtime=+30d size=+10m delete
2.6.13 file.get_gid 获取指定文件的gid
[root@master ~]# salt '*' cmd.run 'ls -l /root/aaa'
minion2:
-rw-r--r-- 1 root root 0 Nov 4 18:44 /root/aaa
minion1:
-rw-r--r-- 1 root root 0 Nov 4 18:44 /root/aaa
[root@master ~]# salt '*' file.get_gid /root/aaa
minion2:
0
minion1:
0
2.6.14 file.get_group 获取指定文件的组名
[root@master ~]# salt '*' file.get_group /opt/test.sh
minion2:
root
minion1:
root
2.6.15 file.get_hash 获取指定文件的hash值，该值通过 sha256 算法得来
[root@master ~]# salt '*' cmd.run 'sha256sum /root/aaa'
minion2:
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 /root/aaa
minion1:
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 /root/aaa
[root@master ~]# salt '*' file.get_hash /root/aaa
minion2:
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
minion1:
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
2.6.16 file.get_mode 获取指定文件的权限，以数字方式显示
[root@master ~]# salt 'minion1' cmd.run 'ls -l /root/aaa'
minion1:
-rw-r--r-- 1 root root 0 Nov 4 18:44 /root/aaa
[root@master ~]# salt 'minion1' file.get_mode /root/aaa
minion1:
0644
2.6.17 file.get_selinux_context 获取指定文件的 SELINUX 上下文信息
[root@master ~]# salt 'minion1' cmd.run 'ls -Z /root/anaconda-ks.cfg'
minion1:
system_u:object_r:admin_home_t:s0 /root/anaconda-ks.cfg
[root@master ~]# salt 'minion1' file.get_selinux_context /root/anaconda-ks.cfg
minion1:
system_u:object_r:admin_home_t:s0
2.6.18 file.get_sum 按照指定的算法计算指定文件的特征码并显示，默认使用的sha256算法。
该函数可使用的算法参数有：
- md5
- sha1
- sha224
- sha256 (default)
- sha384
- sha512
[root@master ~]# salt 'minion1' cmd.run 'sha256sum /root/aaa'
minion1:
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 /root/aaa
[root@master ~]# salt 'minion1' file.get_sum /root/aaa
minion1:
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
[root@master ~]# salt 'minion1' cmd.run 'md5sum /root/aaa'
minion1:
d41d8cd98f00b204e9800998ecf8427e /root/aaa
[root@master ~]# salt 'minion1' file.get_sum /root/aaa md5
minion1:
d41d8cd98f00b204e9800998ecf8427e
2.6.19 file.get_uid与file.get_user 获取指定文件的 uid 或 用户名
[root@master ~]# salt 'minion1' cmd.run 'ls -l /root/aaa'
minion1:
-rw-r--r-- 1 root root 0 Nov 4 18:44 /root/aaa
[root@master ~]# salt 'minion1' file.get_uid /root/aaa
minion1:
0
[root@master ~]# salt 'minion1' file.get_user /root/aaa
minion1:
root
2.6.20 file.gid_to_group 将指定的 gid 转换为组名并显示
[root@master ~]# salt 'minion1' file.gid_to_group 1000
minion1:
awm
2.6.21 file.group_to_gid 将指定的组名转换为 gid 并显示
[root@master ~]# salt 'minion1' file.group_to_gid tom
minion1:
1005
2.6.22 file.grep 在指定文件中检索指定内容
该函数支持通配符，若在指定的路径中用通配符则必须用双引号引起来
[root@master ~]# salt 'minion1' file.grep /etc/passwd nobody
minion1:
----------
pid:
199198
retcode:
0
stderr:
stdout:
nobody:x:65534:65534:Kernel Overflow User:/:/sbin/nologin
salt '*' file.grep /etc/sysconfig/network-scripts/ifcfg-eth0 ipaddr -- -i
salt '*' file.grep /etc/sysconfig/network-scripts/ifcfg-eth0 ipaddr -- -i -B2
salt '*' file.grep "/etc/sysconfig/network-scripts/*" ipaddr -- -i -l
2.6.23 file.is_blkdev 判断指定的文件是否是块设备文件
[root@master ~]# salt 'minion1' cmd.run 'ls -l /dev/sr0'
minion1:
brw-rw---- 1 root cdrom 11, 0 Nov 4 18:08 /dev/sr0
[root@master ~]# salt 'minion1' file.is_blkdev /dev/sr0
minion1:
True
2.6.24 file.lsattr 检查并显示出指定文件的属性信息
[root@master ~]# salt 'minion1' cmd.run 'lsattr /root/aaa'
minion1:
-----a-------------- /root/aaa
[root@master ~]# salt 'minion1' cmd.run 'chattr +i /root/aaa'
minion1:
[root@master ~]# salt 'minion1' cmd.run 'lsattr /root/aaa'
minion1:
----ia-------------- /root/aaa
[root@master ~]# salt 'minion1' file.lsattr /root/aaa
minion1:
----------
/root/aaa:
- i
- a
2.6.25 file.mkdir 创建目录并设置属主、属组及权限
[root@master ~]# salt 'minion1' cmd.run 'ls -l /root'
minion1:
total 4
-rw-r--r-- 1 root root 0 Nov 4 18:44 aaa
-rw-------. 1 root root 1092 Oct 14 18:39 anaconda-ks.cfg
-rw-r--r-- 1 root root 0 Nov 4 18:50 bbb
drwxr-xr-x 2 root root 19 Nov 4 18:55 test
[root@master ~]# salt 'minion1' file.mkdir /root/ccc
minion1:
True
[root@master ~]# salt 'minion1' cmd.run 'ls -l /root'
minion1:
total 4
-rw-r--r-- 1 root root 0 Nov 4 18:44 aaa
-rw-------. 1 root root 1092 Oct 14 18:39 anaconda-ks.cfg
-rw-r--r-- 1 root root 0 Nov 4 18:50 bbb
drwxr-xr-x 2 root root 6 Nov 5 00:25 ccc
drwxr-xr-x 2 root root 19 Nov 4 18:55 test
[root@master ~]# salt 'minion1' file.mkdir /root/ddd tom tom 400
minion1:
True
[root@master ~]# salt 'minion1' cmd.run 'ls -l /root'
minion1:
total 4
-rw-r--r-- 1 root root 0 Nov 4 18:44 aaa
-rw-------. 1 root root 1092 Oct 14 18:39 anaconda-ks.cfg
-rw-r--r-- 1 root root 0 Nov 4 18:50 bbb
drwxr-xr-x 2 root root 6 Nov 5 00:25 ccc
dr-------- 2 tom tom 6 Nov 5 00:26 ddd
drwxr-xr-x 2 root root 19 Nov 4 18:55 test
2.6.26 file.move 移动或重命名
//重命名
[root@master ~]# salt 'minion1' cmd.run 'ls -l /root'
minion1:
total 12
drwxr-xr-x. 2 root root 66 Nov 4 02:54 123
drwxr-xr-x. 2 root root 6 Nov 4 03:38 aaa
-rw-r--r--. 1 root root 14 Nov 4 02:49 abc
-rw-------. 1 root root 1181 Sep 27 05:27 anaconda-ks.cfg
drwxrwxrwx. 2 tom tom 6 Nov 4 03:38 bbb
-rw-r--r--. 1 root root 14 Nov 4 02:27 test
[root@master ~]# salt 'minion1' file.move /root/bbb /root/ccc
minion1:
----------
comment:
'/root/bbb' moved to '/root/ccc'
result:
True
[root@master ~]# salt 'minion1' cmd.run 'ls -l /root'
minion1:
total 12
drwxr-xr-x. 2 root root 66 Nov 4 02:54 123
drwxr-xr-x. 2 root root 6 Nov 4 03:38 aaa
-rw-r--r--. 1 root root 14 Nov 4 02:49 abc
-rw-------. 1 root root 1181 Sep 27 05:27 anaconda-ks.cfg
drwxrwxrwx. 2 tom tom 6 Nov 4 03:38 ccc
-rw-r--r--. 1 root root 14 Nov 4 02:27 test
//移动
[root@master ~]# salt 'minion1' cmd.run 'ls -l /root'
minion1:
total 12
drwxr-xr-x. 2 root root 66 Nov 4 02:54 123
drwxr-xr-x. 2 root root 6 Nov 4 03:38 aaa
-rw-r--r--. 1 root root 14 Nov 4 02:49 abc
-rw-------. 1 root root 1181 Sep 27 05:27 anaconda-ks.cfg
drwxrwxrwx. 2 tom tom 6 Nov 4 03:38 ccc
-rw-r--r--. 1 root root 14 Nov 4 02:27 test
[root@master ~]# salt 'minion1' cmd.run 'ls -l /opt'
minion1:
total 0
drwxr-xr-x. 2 root root 66 Nov 4 02:54 123
[root@master ~]# salt 'minion1' file.move /root/ccc /opt/
minion1:
----------
comment:
'/root/ccc' moved to '/opt/'
result:
True
[root@master ~]# salt 'minion1' cmd.run 'ls -l /opt'
minion1:
total 0
drwxr-xr-x. 2 root root 66 Nov 4 02:54 123
drwxrwxrwx. 2 tom tom 6 Nov 4 03:38 ccc
2.6.27 file.prepend 把文本插入指定文件的开头
[root@master ~]# salt 'minion1' cmd.run 'cat /root/aaa'
minion1:
夕阳落在我的铠甲
[root@master ~]# salt 'minion1' file.prepend /root/aaa "王子不一定骑白马" "黑马王子 四海为家"
minion1:
Prepended 2 lines to "/root/aaa"
[root@master ~]# salt 'minion1' cmd.run 'cat /root/aaa'minion1:
王子不一定骑白马
黑马王子四海为家
夕阳落在我的铠甲
2.6.28 file.sed 修改文本文件的内容
[root@master ~]# salt 'minion1' cmd.run 'cat /root/bbb'minion1:
haha xixi oo
awm awm soft soft pp
pp qq
[root@master ~]# salt 'minion1' file.sed /root/bbb 'awm' 'xaw'
minion1:
----------
pid:
25149
retcode:
0
stderr:
stdout:
[root@master ~]# salt 'minion1' cmd.run 'cat /root/bbb'
minion1:
haha xixi oo
xaw xaw soft soft pp
pp qq
//会替换每一行的第二的
[root@master ~]# salt 'minion1' cmd.run 'cat /root/bbb'
minion1:
haha xaw oo
xaw xaw soft soft pp
pp qq
[root@master ~]# salt 'minion1' file.sed /root/bbb 'xaw' 'awm' flags=2
minion1:
----------
pid:
28943
retcode:
0
stderr:
stdout:
[root@master ~]# salt 'minion1' cmd.run 'cat /root/bbb'
minion1:
haha xaw oo
xaw awm soft soft pp
pp qq
//
[root@master ~]# salt 'minion1' cmd.run 'cat /root/bbb'
minion1:
xaw xaw oo
xaw xaw soft soft pp
pp qq
[root@master ~]# salt 'minion1' file.sed /root/bbb 'xaw' 'awm' flags=2
minion1:
----------
pid:
30598
retcode:
0
stderr:
stdout:
[root@master ~]# salt 'minion1' cmd.run 'cat /root/bbb'
minion1:
xaw awm oo
xaw awm soft soft pp
pp qq
2.6.29 file.read 读取文件内容
[root@master ~]# salt 'minion1' cmd.run 'cat /root/aaa'
minion1:
王子不一定骑白马
黑马王子四海为家
夕阳落在我的铠甲
[root@master ~]# salt minion1 file.read /root/aaa
minion1:
王子不一定骑白马
黑马王子四海为家
夕阳落在我的铠甲
2.6.30 file.readdir 列出指定目录下的所有文件或目录，包括隐藏文件
//相当于ls -a
[root@master ~]# salt 'minion1' file.readdir /root
minion1:
- .
- ..
- .bash_logout
- .bash_profile
- .bashrc
- .cshrc
- .tcshrc
- anaconda-ks.cfg
- .config
- .ssh
- .bash_history
- aaa
- bbb.bak
- .viminfo
- bbb
2.6.31 file.remove 删除指定的文件或目录，若给出的是目录，将递归删除
[root@master ~]# salt minion1 cmd.run 'ls -l /root/'
minion1:
total 16
-rw-r--r-- 1 root root 75 Nov 5 21:02 aaa
-rw-------. 1 root root 1092 Oct 14 18:39 anaconda-ks.cfg
-rw-r--r-- 1 root root 38 Nov 5 21:08 bbb
-rw-r--r-- 1 root root 38 Nov 5 21:08 bbb.bak
drwxr-xr-x 2 root root 6 Nov 5 21:16 test
[root@master ~]# salt minion1 file.remove /root/bbb
minion1:
True
[root@master ~]# salt minion1 file.remove /root/test
minion1:
True
[root@master ~]# salt minion1 cmd.run 'ls -l /root/'
minion1:
total 12
-rw-r--r-- 1 root root 75 Nov 5 21:02 aaa
-rw-------. 1 root root 1092 Oct 14 18:39 anaconda-ks.cfg
-rw-r--r-- 1 root root 38 Nov 5 21:08 bbb.bak
2.6.32 file.rename 重命名文件或目录
[root@master ~]# salt minion1 cmd.run 'ls -l /root/'
minion1:
total 12
-rw-r--r-- 1 root root 75 Nov 5 21:02 aaa
-rw-------. 1 root root 1092 Oct 14 18:39 anaconda-ks.cfg
-rw-r--r-- 1 root root 38 Nov 5 21:08 bbb.bak
[root@master ~]# salt minion1 file.rename /root/bbb.bak /root/ccc
minion1:
True
[root@master ~]# salt minion1 cmd.run 'ls -l /root/'
minion1:
total 12
-rw-r--r-- 1 root root 75 Nov 5 21:02 aaa
-rw-------. 1 root root 1092 Oct 14 18:39 anaconda-ks.cfg
-rw-r--r-- 1 root root 38 Nov 5 21:08 ccc
2.6.33 file.set_mode 给指定文件设置权限
[root@master ~]# salt minion1 cmd.run 'ls -l /root/'
minion1:
total 12
-rw-r--r-- 1 root root 75 Nov 5 21:02 aaa
-rw-------. 1 root root 1092 Oct 14 18:39 anaconda-ks.cfg
-rw-r--r-- 1 root root 38 Nov 5 21:08 ccc
[root@master ~]# salt minion1 file.set_mode /root/ccc 0444
minion1:
0444
[root@master ~]# salt minion1 cmd.run 'ls -l /root/'
minion1:
total 12
-rw-r--r-- 1 root root 75 Nov 5 21:02 aaa
-rw-------. 1 root root 1092 Oct 14 18:39 anaconda-ks.cfg
-r--r--r-- 1 root root 38 Nov 5 21:08 ccc
2.6.34 file.symlink 给指定的文件创建软链接
[root@master ~]# salt minion1 cmd.run 'ls -l /root/'
minion1:
total 12
-rw-r--r-- 1 root root 75 Nov 5 21:02 aaa
-rw-------. 1 root root 1092 Oct 14 18:39 anaconda-ks.cfg
-r--r--r-- 1 root root 38 Nov 5 21:08 ccc
[root@master ~]# salt minion1 file.symlink /root/ccc /opt/awm
minion1:
True
[root@master ~]# salt minion1 cmd.run 'ls -l /root/;ls -l /opt/'
minion1:
total 12
-rw-r--r-- 1 root root 75 Nov 5 21:02 aaa
-rw-------. 1 root root 1092 Oct 14 18:39 anaconda-ks.cfg
-r--r--r-- 1 root root 38 Nov 5 21:08 ccc
total 8
lrwxrwxrwx 1 root root 9 Nov 5 21:24 awm -> /root/ccc
-rw-r--r-- 1 tom root 62 Nov 4 18:26 test.sh
-rw-r--r-- 1 root root 10 Nov 4 18:58 test1
2.6.35 file.touch
创建空文件或更新时间戳
[root@master ~]# salt minion1 cmd.run 'ls -l /root/'
minion1:
total 12
-rw-r--r-- 1 root root 75 Nov 5 21:02 aaa
-rw-------. 1 root root 1092 Oct 14 18:39 anaconda-ks.cfg
-r--r--r-- 1 root root 38 Nov 5 21:08 ccc
[root@master ~]# salt minion1 file.touch /root/bbb
minion1:
True
[root@master ~]# salt minion1 file.touch /root/ccc
minion1:
True
[root@master ~]# salt minion1 cmd.run 'ls -l /root/'
minion1:
total 12
-rw-r--r-- 1 root root 75 Nov 5 21:02 aaa
-rw-------. 1 root root 1092 Oct 14 18:39 anaconda-ks.cfg
-rw-r--r-- 1 root root 0 Nov 5 21:36 bbb
-r--r--r-- 1 root root 38 Nov 5 21:36 ccc
2.6.36 file.uid_to_user 将指定的 uid 转换成用户名显示出来
[root@master ~]# salt minion1 file.uid_to_user 0
minion1:
root
2.6.37 file.user_to_uid 将指定的用户转换成 uid 并显示出来
[root@master ~]# salt minion1 file.user_to_uid root
minion1:
0
2.6.38 file.write 往一个指定的文件里覆盖写入指定内容
[root@master ~]# salt minion1 cmd.run 'cat /root/aaa'
minion1:
王子不一定骑白马
黑马王子四海为家
夕阳落在我的铠甲
[root@master ~]# salt minion1 file.write /root/aaa "世界灿烂盛大" "欢迎回家"
minion1:
Wrote 2 lines to "/root/aaa"
[root@master ~]# salt minion1 cmd.run 'cat /root/aaa'
minion1:
世界灿烂盛大
欢迎回家
扫一扫
983
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
