saltstack部署zabbix

saltstack部署zabbix

环境：

主机	IP	服务
master	192.168.8.130	salt-matser
node1	192.168.8.131	salt-minion

[root@master salt]# tree prod/
prod/
├── modules
│   ├── app
│   │   └── php
│   │       ├── files
│   │       │   ├── install.sh
│   │       │   ├── oniguruma-devel-6.8.2-2.el8.x86_64.rpm
│   │       │   ├── php-7.4.24.tar.xz
│   │       │   ├── php-fpm
│   │       │   ├── php-fpm.conf
│   │       │   ├── php-fpm.service
│   │       │   └── www.conf
│   │       └── install.sls
│   ├── database
│   │   └── mysql
│   │       ├── files
│   │       │   ├── install.sh
│   │       │   ├── mysql-5.7.34-linux-glibc2.12-x86_64.tar.gz
│   │       │   ├── mysqld.service
│   │       │   └── mysql.server
│   │       └── install.sls
│   └── web
│       └── apache
│           ├── files
│           │   ├── apr-1.7.0.tar.gz
│           │   ├── apr-util-1.6.1.tar.gz
│           │   ├── httpd-2.4.48.tar.gz
│           │   ├── httpd.conf
│           │   ├── httpd.service
│           │   ├── index.php
│           │   └── install.sh
│           └── install.sls
└── zabbix
    ├── apache.sls
    ├── files
    │   ├── index.php
    │   ├── install.sh
    │   ├── my.cnf
    │   ├── mysql.conf
    │   ├── php.ini
    │   ├── vhosts.conf
    │   ├── zabbix-5.4.4.tar.gz
    │   └── zabbix_server.conf
    ├── install.sls
    ├── lamp.sls
    └── mysql.sls

安装httpd、mysql、php

安装httpd

[root@master salt]# cat prod/modules/web/apache/install.sls 
apache:
  user.present:
    - shell: /sbin/nologin
    - system: true
    - createhome: false

apache-dep-packages:
  pkg.installed:
    - pkgs:
      - make
      - openssl-devel
      - pcre-devel
      - expat-devel
      - libtool
      - gcc
      - gcc-c++

copy_package:
  file.managed:
    - names:
      - /usr/src/apr-1.7.0.tar.gz:
        - source: salt://modules/web/apache/files/apr-1.7.0.tar.gz
      - /usr/src/apr-util-1.6.1.tar.gz:
        - source: salt://modules/web/apache/files/apr-util-1.6.1.tar.gz
      - /usr/src/httpd-2.4.48.tar.gz:
        - source: salt://modules/web/apache/files/httpd-2.4.48.tar.gz
      - /usr/lib/systemd/system/httpd.service:
        - source: salt://modules/web/apache/files/httpd.service
        - user: root
        - group: root
        - mode: 0644

salt://modules/web/apache/files/install.sh:
  cmd.script

/usr/local/httpd/conf/httpd.conf:
  file.managed:
    - source: salt://modules/web/apache/files/httpd.conf
    - user: root
    - group: root
    - mode: 0644

[root@master salt]# cat prod/modules/web/apache/files/install.sh 
#!/bin/bash

cd /usr/src
rm -rf httpd-2.4.48 apr-util-1.6.1 apr-1.7.0
tar xf httpd-2.4.48.tar.gz -C /usr/src
tar xf apr-util-1.6.1.tar.gz -C /usr/src
tar xf apr-1.7.0.tar.gz -C /usr/src

cd /usr/src/apr-1.7.0
sed -i '/$RM "$cfgfile"/d' configure
./configure --prefix=/usr/local/apr && \
	 make && make install \

cd /usr/src/apr-util-1.6.1
./configure  --prefix=/usr/local/apr-util --with-apr=/usr/local/apr && \
       	make && make install \

cd /usr/src/httpd-2.4.48
./configure --prefix=/usr/local/httpd \
        --enable-so \
        --enable-ssl \
        --enable-cgi \
        --enable-rewrite \
        --with-zlib \
        --with-pcre \
        --with-apr=/usr/local/apr \
        --with-apr-util=/usr/local/apr-util \
        --enable-modules=most \
        --enable-mpms-shared=all \
        --with-mpm=prefork && \
       	make && make install \

安装mysql

[root@master salt]# cat prod/modules/database/mysql/install.sls 
mysql:
  user.present:
    - shell: /sbin/nologin
    - system: true
    - createhome: false

ncurses-compat-libs:
  pkg.installed

/usr/src/mysql-5.7.34-linux-glibc2.12-x86_64.tar.gz:
  file.managed:
    - source: salt://modules/database/mysql/files/mysql-5.7.34-linux-glibc2.12-x86_64.tar.gz


/opt/data:
  file.directory:
    - user: mysql
    - group: mysql
    - mode: '755'

salt://modules/database/mysql/files/install.sh:
  cmd.script

copy-mysql-soft:
  file.managed:
    - names:
      - /usr/lib/systemd/system/mysqld.service:
        - source: salt://modules/database/mysql/files/mysqld.service
      - /usr/local/mysql/support-files/mysql.server:
        - source: salt://modules/database/mysql/files/mysql.server

[root@master salt]# cat prod/modules/database/mysql/files/install.sh 
#!/bin/bash

tar xf /usr/src/mysql-5.7.34-linux-glibc2.12-x86_64.tar.gz -C /usr/local
ln -s /usr/local/mysql-5.7.34-linux-glibc2.12-x86_64/ /usr/local/mysql
chown -R mysql.mysql /usr/local/mysql*
echo 'export PATH=/usr/local/mysql/bin:$PATH' > /etc/profile.d/mysql.sh
/usr/local/mysql/bin/mysqld --initialize-insecure --user=mysql --datadir=/opt/data

安装php

[root@master salt]# cat prod/modules/app/php/install.sls 
php-dep-packages:
  pkg.installed:
    - pkgs:
      - libxml2
      - libxml2-devel
      - openssl
      - openssl-devel
      - bzip2
      - bzip2-devel
      - libcurl
      - libcurl-devel
      - libicu-devel
      - libjpeg-turbo
      - libjpeg-turbo-devel
      - libpng
      - libpng-devel
      - openldap-devel
      - pcre-devel
      - freetype
      - freetype-devel
      - gmp
      - gmp-devel
      - libmcrypt
      - libmcrypt-devel
      - readline
      - readline-devel
      - libxslt
      - libxslt-devel
      - mhash
      - mhash-devel
      - php-mysqlnd
      - libsqlite3x-devel
      - libzip-devel

/usr/src/oniguruma-devel-6.8.2-2.el8.x86_64.rpm:
  file.managed:
    - source: salt://modules/app/php/files/oniguruma-devel-6.8.2-2.el8.x86_64.rpm
    - user: root
    - group: root
    - mode: '0644'
  cmd.run: 
    - name: yum -y install /usr/src/oniguruma-devel-6.8.2-2.el8.x86_64.rpm

/usr/src/php-7.4.24.tar.xz:
  file.managed:
    - source: salt://modules/app/php/files/php-7.4.24.tar.xz

salt://modules/app/php/files/install.sh:
  cmd.script

copysoft:
  file.managed:
    - names:
      - /etc/init.d/php-fpm:
        - source: salt://modules/app/php/files/php-fpm
        - user: root
        - group: root
        - mode: '0755'
      - /usr/local/php/etc/php-fpm.conf:
        - source: salt://modules/app/php/files/php-fpm.conf
      - /usr/local/php/etc/php-fpm.d/www.conf:
        - source: salt://modules/app/php/files/www.conf
      - /usr/lib/systemd/system/php-fpm.service:
        - source: salt://modules/app/php/files/php-fpm.service

php-fpm.service:
  service.running:
    - enable: true

[root@master salt]# cat prod/modules/app/php/files/install.sh 
#!/bin/bash

cd /usr/src
tar xf  php-7.4.24.tar.xz -C /usr/src
cd php-7.4.24
./configure --prefix=/usr/local/php \--with-config-file-path=/etc --enable-fpm --enable-inline-optimization --disable-debug --disable-rpath --enable-shared --enable-soap --with-openssl --enable-bcmath --with-iconv --with-bz2 --enable-calendar --with-curl --enable-exif  --enable-ftp --enable-gd --with-jpeg  --with-zlib-dir --with-freetype --with-gettext --enable-json --enable-mbstring --enable-pdo --with-mysqli=mysqlnd --with-pdo-mysql=mysqlnd --with-readline --enable-shmop --enable-simplexml --enable-sockets --with-zip --enable-mysqlnd-compression-support --with-pear --enable-pcntl --enable-posix && \
	make &&  make install \

部署zabbix所需的lamp架构环境

[root@master salt]# cat prod/zabbix/apache.sls 
"Development Tools":
  pkg.group_installed

include:
  - modules.web.apache.install

/usr/include/httpd:
  file.symlink:
    - target: /usr/local/httpd/include

/usr/local/httpd/htdocs/zabbix:
  file.directory:
    - user: root
    - group: root
    - mode: 0755

/usr/local/httpd/htdocs:
  file.directory:
    - user: apache
    - group: apache

/usr/local/httpd/htdocs/zabbix/index.php:
  file.managed:
    - source: salt://zabbix/files/index.php
    - user: root
    - group: root
    - mode: 0644

/usr/local/httpd/conf/extra/vhosts.conf:
  file.managed:
    - source: salt://zabbix/files/vhosts.conf
    - user: root
    - group: root
    - mode: 644

zabbix-apache.service:
  service.running:
    - name: httpd
    - enable: true

[root@master salt]# cat prod/zabbix/mysql.sls 
include:
  - modules.database.mysql.install

lamp-mysql-packages:
  pkg.installed:
    - pkgs:
      - ncurses-devel
      - openssl-devel
      - openssl
      - cmake
      - mariadb-devel

copy-mysql-file:
  file.managed:
    - user: root
    - group: root
    - mode: 0644
    - names:
      - /etc/my.cnf:
        - source: salt://zabbix/files/my.cnf
      - /etc/ld.so.conf.d/mysql.conf:
        - source: salt://zabbix/files/mysql.conf

/usr/local/include/mysql:
  file.symlink:
    - target: /usr/local/mysql/include

mysqld:
  service.running:
    - enable: true

set-mysql-passwd:
  cmd.run:
    - name: /usr/local/mysql/bin/mysql -e "set password=password('123');"

[root@master salt]# cat prod/zabbix/lamp.sls 
include:
  - zabbix.apache
  - zabbix.mysql
  - modules.app.php.install

安装zabbix

[root@master salt]# cat prod/zabbix/install.sls 
include:
  - zabbix.lamp

zabbix-dep-packages:
  pkg.installed:
    - pkgs:
      - net-snmp-devel
      - libevent-devel

zabbix:
  user.present:
    - shell: /sbin/nologin
    - system: true
    - createhome: false

/usr/src/zabbix-5.4.4.tar.gz:
  file.managed:
    - source: salt://zabbix/files/zabbix-5.4.4.tar.gz

salt://zabbix/files/install.sh:
  cmd.script

/usr/local/etc/zabbix_server.conf:
  file.managed:
    - source: salt://zabbix/files/zabbix_server.conf



/var/lib/mysql:
  file.directory:
    - user: root
    - group: root      
    - mode: 755

/var/lib/mysql/mysql.sock:
  file.symlink:
    - target: /tmp/mysql.sock



zabbix_server:
  cmd.run:
    - names:
      - cp -r /usr/src/zabbix-5.4.4/ui/*  /usr/local/httpd/htdocs/zabbix/
      - zabbix_server
      - zabbix_agentd

/etc/php.ini:
  file.managed:
    - source: salt://zabbix/files/php.ini
    - user: root
    - group: root
    - mode: 644

reload-apache-service:
  service.running:
    - reload: true
    - name: httpd
    - watch:
      - file: /usr/local/httpd/conf/extra/vhosts.conf
reload-php-service:
  service.running:
    - reload: true
    - name: php-fpm
    - watch:
      - file: /etc/php.ini

[root@master salt]# cat prod/zabbix/files/install.sh 
#!/bin/bash

cd /usr/src
tar xf zabbix-5.4.4.tar.gz -C /usr/src

/usr/local/mysql/bin/mysql -uroot -p123 -e "create database zabbix character set utf8 collate utf8_bin;"
/usr/local/mysql/bin/mysql -uroot -p123 -e "grant all privileges on zabbix.* to zabbix@localhost identified by '123';"
/usr/local/mysql/bin/mysql -uroot -p123 -e "flush privileges;"

cd /usr/src/zabbix-5.4.4/database/mysql/
/usr/local/mysql/bin/mysql -uroot -p123 zabbix < schema.sql
/usr/local/mysql/bin/mysql -uroot -p123 zabbix < images.sql
/usr/local/mysql/bin/mysql -uroot -p123 zabbix < data.sql

cd /usr/src/zabbix-5.4.4
./configure --enable-server \
	--enable-agent \
	--with-mysql \
	--with-net-snmp \
	--with-libcurl \
	--with-libxml2 && \
	make install \

使用satl命令安装zabbix

[root@master salt]# salt node1  state.sls zabbix.install saltenv=prod