saltstack--salt-cp、file模块的使用

SaltStack常用模块之file

//检查指定路径是否存在
[root@master ~]# salt '*' cmd.run 'ls /opt'
minion02:
    test2
minion01:
    test1

[root@master ~]# salt '*' file.access /opt/test1 f  //f检查是否为文件
minion02:
    False
minion01:
    True


//检查指定文件的权限
[root@master ~]# salt '*' file.access /opt/test1 r  //minion02上没有test01文件，判断是否有读权限
minion02:
    False
minion01:
    True

[root@master ~]# salt '*' file.access /opt/test1 w  //判断是否有写的权限
minion01:
    True
minion02:
    False


[root@master ~]# salt '*' file.access /opt/test1 x  //判断是否有写的权限
minion01:
    False
minion02:
    False


file.append
//往一个文件里追加内容，若此文件不存在则会报异常
[root@master ~]# salt '*' cmd.run 'ls /opt'
minion02:
minion01:

[root@master ~]# salt '*' file.append /opt/file 'hello world'
minion02:
    Wrote 1 lines to "/opt/file"
minion01:
    Wrote 1 lines to "/opt/file"

[root@master ~]# salt '*' cmd.run 'ls /opt/file' 
minion02:
    /opt/file
minion01:
    /opt/file

[root@master ~]# salt '*' cmd.run 'cat /opt/file' 
minion02:
    hello world
minion01:
    hello world

file.basename

获取指定路径的文件名
[root@master ~]# salt '*' file.basename '/opt/file'
minion02:
    file
minion01:
    file

file.dirname

获取指定路径的目录名
[root@master ~]# salt '*' file.dirname '/opt/file'
minion01:
    /opt
minion02:
    /opt

file.check_hash

检查指定的文件与hash字符串是否匹配，匹配则返回 True 否则返回 False
[root@master ~]# salt '*' cmd.run 'md5sum /opt/file'
minion02:
    0804a3a1f3d56e2ee5bac31620c63155  /opt/file
minion01:
    6f5902ac237024bdd0c176cb93063dc4  /opt/file

[root@master ~]# salt '*' file.check_hash /opt/file 0804a3a1f3d56e2ee5bac31620c63155
minion02:
    True
minion01:
    False

file.chattr
修改指定文件的属性

属性	对文件的意义	对目录的意义
a	只允许在这个文件之后追加数据，不允许任何进程覆盖或截断这个文件	只允许在这个目录下建立和修改文件，而不允许删除任何文件
i	不允许对这个文件进行任何的修改，不能删除、更改、移动	任何的进程只能修改目录之下的文件,不允许建立和删除文件

给指定文件添加属性

//查看当前属性
[root@master ~]# salt '*' cmd.run 'lsattr /opt'
minion01:
    -------------------- /opt/file
minion02:
    -------------------- /opt/file

//添加属性
[root@master ~]# salt '*' file.chattr /opt/file operator=add attributes=ai
minion02:
    True
minion01:
    True


[root@master ~]# salt '*' cmd.run 'lsattr /opt'
minion02:
    ----ia-------------- /opt/file
minion01:
    ----ia-------------- /opt/file

[root@minion01 opt]# rm -f file 
rm: 无法删除'file': 不允许的操作
[root@minion01 opt]# echo 'xxhh' >> file 
-bash: file: 不允许的操作

[root@minion01 opt]# echo 'xxhh' > file 
-bash: file: 不允许的操作

//给指定文件去除属性
[root@master ~]# salt '*' file.chattr /opt/file operator=remove attributes=ia
minion02:
    True
minion01:
    True

[root@master ~]# salt '*' cmd.run 'lsattr /opt/file'
minion02:
    -------------------- /opt/file
minion01:
    -------------------- /opt/file

file.chown

设置指定文件的属主、属组信息
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
minion01:
    total 4
    -rw-r--r-- 1 root root 12 Nov  5 07:40 file
minion02:
    total 4
    -rw-r--r-- 1 root root 12 Nov  5 07:40 file

[root@master ~]# salt '*' file.chown /opt/file root apache
minion01:
    None
minion02:
    None

[root@master ~]# salt '*' cmd.run 'ls -l /opt/file'
minion01:
    -rw-r--r-- 1 root apache 12 Nov  5 07:40 /opt/file
minion02:
    -rw-r--r-- 1 root apache 12 Nov  5 07:40 /opt/file

file.copy

在远程主机上复制文件或目录

拷贝文件
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
minion02:
    total 4
    -rw-r--r-- 1 root root 12 Nov  5 07:40 file
minion01:
    total 4
    -rw-r--r-- 1 root root 12 Nov  5 07:40 file

[root@master ~]# salt '*' file.copy /opt/file /opt/file1
minion02:
    True
minion01:
    True

[root@master ~]# salt '*' cmd.run 'ls -l /opt'
minion01:
    total 8
    -rw-r--r-- 1 root root 12 Nov  5 07:40 file
    -rw-r--r-- 1 root root 12 Nov  5 08:01 file1
minion02:
    total 8
    -rw-r--r-- 1 root root 12 Nov  5 07:40 file
    -rw-r--r-- 1 root root 12 Nov  5 08:01 file1


覆盖并拷贝目录，将会覆盖同名文件或目录
[root@master ~]# salt '*' file.copy /opt/file1 /root/test recurse=true
minion02:
    True
minion01:
    True

[root@master ~]# salt '*' cmd.run 'ls -l /root'
minion02:
    total 8
    -rw-------. 1 root root 1188 Oct  5 10:27 anaconda-ks.cfg
    -rw-r--r--  1 root root   12 Nov  5 08:05 test
minion01:
    total 8
    -rw-------. 1 root root 1188 Oct  5 10:27 anaconda-ks.cfg
    -rw-r--r--  1 root root   12 Nov  4 09:05 test


删除目标目录中同名的文件或目录并拷贝新内容至其中
//拷贝文件
[root@master ~]# salt '*' file.copy /opt/file /root/file
minion02:
    True
minion01:
    True

[root@master ~]# salt '*' cmd.run 'cat /root/file'
minion01:
    this is minion01
minion02:
    this is minion02

file.ditectory_exists

判断指定目录是否存在，存在则返回 True ，否则返回 False
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
minion01:
    total 8
    -rw-r--r-- 1 root root 17 Nov  5 08:19 file
    -rw-r--r-- 1 root root 17 Nov  5 08:18 file1
minion02:
    total 8
    -rw-r--r-- 1 root root 17 Nov  5 08:19 file
    -rw-r--r-- 1 root root 17 Nov  5 08:18 file1

[root@master ~]# salt '*' file.directory_exists /opt/test
minion02:
    False
minion01:
    False

file.diskusage

递归计算指定路径的磁盘使用情况并以字节为单位返回
[root@master ~]# salt '*' cmd.run 'du -sb /opt' 
minion01:
    65  /opt
minion02:
    65  /opt
[root@master ~]# salt '*' cmd.run 'du -sb /opt/file' 
minion02:
    17  /opt/file
minion01:
    17  /opt/file

file.file_exists
判断指定文件是否存在

存在返回true，不存在返回为false，若判断的是文件也会返回false
[root@master ~]# salt '*' cmd.run 'ls -l /opt/'
minion01:
    total 8
    -rw-r--r-- 1 root root 17 Nov  5 08:19 file
    -rw-r--r-- 1 root root 17 Nov  5 08:18 file1
minion02:
    total 8
    -rw-r--r-- 1 root root 17 Nov  5 08:19 file
    -rw-r--r-- 1 root root 17 Nov  5 08:18 file1

[root@master ~]# salt '*' file.file_exists /opt/test
minion01:
    False
minion02:
    False
[root@master ~]# salt '*' file.file_exists /opt/file
minion01:
    True
minion02:
    True


[root@minion01 opt]# mkdir directory
[root@minion02 opt]# mkdir directory
[root@master ~]# salt '*' file.file_exists /opt/directory
minion01:
    False
minion02:
    False

file.find

类似 find 命令并返回符合指定条件的路径列表
name    = path-glob                 # case sensitive
iname   = path-glob                 # case insensitive
regex   = path-regex                # case sensitive
iregex  = path-regex                # case insensitive
type    = file-types                # match any listed type
user    = users                     # match any listed user
group   = groups                    # match any listed group
size    = [+-]number[size-unit]     # default unit = byte
mtime   = interval                  # modified since date
grep    = regex                     # search file contents


delete [= file-types]               # default type = 'f'
exec    = command [arg ...]         # where {} is replaced by pathname
print  [= print-opts]

maxdepth = maximum depth to transverse in path
mindepth = minimum depth to transverse before checking files or directories


*                = match zero or more chars
?                = match any char
[abc]            = match a, b, or c
[!abc] or [^abc] = match anything except a, b, and c
[x-y]            = match chars x through y
[!x-y] or [^x-y] = match anything except chars x through y
{a,b,c}          = match a or b or c

path-regex：匹配路径名的 Python Regex（正则表达式）模式
file-types：由以下一项或多项组成的字符串：
a: all file types
b: block device
c: character device
d: directory
p: FIFO (named pipe)
f: plain file
l: symlink
s: socket

where:
    w: week
    d: day
    h: hour
    m: minute
    s: second

print-opts：逗号和/或空格分隔的以下一项或多项列表：
group: group name
md5:   MD5 digest of file contents
mode:  file permissions (as integer)
mtime: last modification time (as time_t)
name:  file basename
path:  file absolute path
size:  file size in bytes
type:  file type
user:  user name

salt '*' file.find / type=f name=\*.bak size=+10m  //表示在/找以.bak结尾的大小超过10MB的文件
salt '*' file.find /var mtime=+30d size=+10m print=path,size,mtime  //在/var下找日期超过30天，大小超过10MB，并打印出路径、大小、时间
salt '*' file.find /var/log name=\*.[0-9] mtime=+30d size=+10m delete  //表示在/var/log下找后面.0-9的文件且文件创建的日期超过30天，大小超过10MB

file.get_gid

获取指定文件的gid
[root@master ~]# salt '*' cmd.run 'ls -l /opt/file'
minion02:
    -rw-r--r-- 1 root root 17 Nov 5 08:19 /opt/file
minion01:
    -rw-r--r-- 1 root root 17 Nov  5 08:19 /opt/file

[root@master ~]# salt '*' file.get_gid '/opt/file'
minion02:
    0
minion01:
    0

file.get_group

获取指定文件的组名
[root@master ~]# salt '*' cmd.run 'sha256sum /opt/file'
minion01:
    b60cde94fd00e4c9844e270c12a16508d6661ab74df6c52630f4b8426e0a1ab0  /opt/file
minion02:
    97a43b455166fdce251101ef7b8ab9246af5d8399efa7acd5b3dbdfdf0fdfe82  /opt/file

[root@master ~]# salt '*' file.get_hash /opt/file
minion01:
    b60cde94fd00e4c9844e270c12a16508d6661ab74df6c52630f4b8426e0a1ab0
minion02:
    97a43b455166fdce251101ef7b8ab9246af5d8399efa7acd5b3dbdfdf0fdfe82

file.get_mode

获取指定文件的权限，以数字方式显示
[root@master ~]# salt '*' cmd.run 'ls -l /opt/file'
minion01:
    -rw-r--r-- 1 root root 17 Nov  5 08:19 /opt/file
minion02:
    -rw-r--r-- 1 root root 17 Nov  5 08:19 /opt/file
[root@master ~]# salt '*' file.get_mode '/opt/file'
minion01:
    0644
minion02:
    0644

file.get_selinux_context

获取指定文件的 SELINUX 上下文信息
[root@master ~]# salt '*' cmd.run 'ls -Z /opt/file'
minion02:
    system_u:object_r:unlabeled_t:s0 /opt/file
minion01:
    system_u:object_r:unlabeled_t:s0 /opt/file

[root@master ~]# salt '*' file.get_selinux_context /opt/file
minion02:
    system_u:object_r:unlabeled_t:s0
minion01:
    system_u:object_r:unlabeled_t:s0

file.get_sum
按照指定的算法计算指定文件的特征码并显示，默认使用的sha256算法。
该函数可使用的算法参数有：

md5
sha1
sha224
sha256 (default)
sha384
sha512

[root@master ~]# salt '*' cmd.run 'sha256sum /opt/file'
minion02:
    97a43b455166fdce251101ef7b8ab9246af5d8399efa7acd5b3dbdfdf0fdfe82  /opt/file
minion01:
    b60cde94fd00e4c9844e270c12a16508d6661ab74df6c52630f4b8426e0a1ab0  /opt/file
[root@master ~]# salt '*' file.get_sum /opt/file
minion01:
    b60cde94fd00e4c9844e270c12a16508d6661ab74df6c52630f4b8426e0a1ab0
minion02:
    97a43b455166fdce251101ef7b8ab9246af5d8399efa7acd5b3dbdfdf0fdfe82
[root@master ~]# salt '*' cmd.run 'md5sum /opt/file'
minion02:
    9431282eea409598c0579f35091482c3  /opt/file
minion01:
    a2885ae14d3891a2b8f83150e0530b07  /opt/file

[root@master ~]# salt '*' file.get_sum /opt/file md5
minion01:
    a2885ae14d3891a2b8f83150e0530b07
minion02:
    9431282eea409598c0579f35091482c3

file.get_uid与file.get_user

[root@master ~]# salt '*' cmd.run 'ls -l /opt/file'
minion02:
    -rw-r--r--. 1 root root 17 Nov  5 08:19 /opt/file
minion01:
    -rw-r--r--. 1 root root 17 Nov  5 08:19 /opt/file


[root@master ~]# salt '*' file.get_uid /opt/file
minion02:
    0
minion01:
    0

[root@master ~]# salt '*' file.get_user /opt/file
minion02:
    root
minion01:
    root

file.gid_to_group
将指定的 gid 转换为组名并显示

[root@master ~]# salt '*' file.gid_to_group 0
minion02:
    root
minion01:
    root

file.group_to_gid
将指定的组名转换为 gid 并显示

[root@master ~]# salt '*' file.group_to_gid root
minion02:
    0
minion01:
    0

[root@master ~]# salt '*' file.group_to_gid tom
minion01:
    1000
minion02:
[root@master ~]# salt '*' file.group_to_gid wzw
minion01:
    1025
minion02:

file.grep
在指定文件中检索指定内容
该函数支持通配符，若在指定的路径中用通配符则必须用双引号引起来

[root@master ~]# salt '*' file.grep /etc/passwd nobody  //过滤/etc/passwd文件中含有nobody的关键字
minion02:
    ----------
    pid:
        1890
    retcode:
        0
    stderr:
    stdout:
        nobody:x:65534:65534:Kernel Overflow User:/:/sbin/nologin
minion01:
    ----------
    pid:
        2101
    retcode:
        0
    stderr:
    stdout:
        nobody:x:65534:65534:Kernel Overflow User:/:/sbin/nologin


[root@master ~]# salt '*' file.grep /etc/sysconfig/network-scripts/ifcfg-ens160 ipaddr -- -i  //过滤网卡文件中的ipaddr并忽略大小写
minion02:
    ----------
    pid:
        1900
    retcode:
        0
    stderr:
    stdout:
        IPADDR=192.168.71.135
minion01:
    ----------
    pid:
        2112
    retcode:
        0
    stderr:
    stdout:
        IPADDR=192.168.71.140

[root@master ~]# salt '*' file.grep /etc/sysconfig/network-scripts/ifcfg-ens160 ipaddr -- -i -B2  //过滤网卡文件的ipaddr的内容，并取ipaddr的前两行内容忽略大小写
minion01:
    ----------
    pid:
        2117
    retcode:
        0
    stderr:
    stdout:
        DEVICE=ens160
        NAME=ens160
        IPADDR=192.168.71.140
minion02:
    ----------
    pid:
        1905
    retcode:
        0
    stderr:
    stdout:
        DEVICE=ens160
        NAME=ens160
        IPADDR=192.168.71.135


[root@master ~]# salt '*' file.grep "/etc/sysconfig/network-scripts/*" ipaddr -- -i -l  //打印出/etc/sysconfig/network-scripts/*加所有文件的文件名，忽略大小写
minion01:
    ----------
    pid:
        2122
    retcode:
        0
    stderr:
    stdout:
        /etc/sysconfig/network-scripts/ifcfg-ens160
minion02:
    ----------
    pid:
        1911
    retcode:
        0
    stderr:
    stdout:
        /etc/sysconfig/network-scripts/ifcfg-ens160

file.is_blkdev

判断指定的文件是否是块设备文件
[root@master ~]# salt '*' cmd.run 'ls -l /dev/sr0'
minion01:
    brw-rw----. 1 root cdrom 11, 0 Nov  5 09:01 /dev/sr0
minion02:
    brw-rw----. 1 root cdrom 11, 0 Nov  5 09:01 /dev/sr0

[root@master ~]# salt '*' file.is_blkdev /dev/sr0
minion02:
    True
minion01:
    True

file.lsattr

检查并显示出指定文件的属性信息
[root@master ~]# salt '*' cmd.run 'lsattr /opt/file'
minion02:
    -------------------- /opt/file
minion01:
    -------------------- /opt/file
[root@master ~]# salt '*' cmd.run 'chattr +i /opt/file'
minion02:
minion01:
[root@master ~]# salt '*' cmd.run 'lsattr /opt/file'
minion02:
    ----i--------------- /opt/file
minion01:
    ----i--------------- /opt/file

[root@master ~]# salt '*' cmd.run 'chattr =ia /opt/file'  //=就是只让文件有ia属性
minion02:
minion01:
[root@master ~]# salt '*' cmd.run 'lsattr /opt/file'
minion02:
    ----ia-------------- /opt/file
minion01:
    ----ia-------------- /opt/file

[root@master ~]# salt '*' file.lsattr /opt/file
minion01:
    ----------
    /opt/file:
        - i
        - a
minion02:
    ----------
    /opt/file:
        - i
        - a


[root@master ~]# salt '*' cmd.run 'chattr -ia /opt/file'  //取消文件的ia属性
minion01:
minion02:

[root@master ~]# salt '*' cmd.run 'lsattr /opt/file'
minion02:
    -------------------- /opt/file
minion01:
    -------------------- /opt/file

file.mkdir

创建目录并设置属主、属组及权限
[root@master ~]# salt '*' cmd.run 'ls -l /opt/file'
minion01:
    -rw-r--r--. 1 root root 17 Nov  5 08:19 /opt/file
minion02:
    -rw-r--r--. 1 root root 17 Nov  5 08:19 /opt/file

[root@master ~]# salt '*' file.mkdir /opt/test
minion01:
    True
minion02:
    True

[root@minion01 opt]# ls
file  file1  test

[root@minion02 opt]# ls
file  file1  test


[root@master ~]# salt '*' file.mkdir /opt/123 lzx lzx 755
minion01:
    True
minion02:
    True
[root@master ~]# salt '*' cmd.run 'ls -l /opt'   //minion02上没有lzx用户所以没有改变
minion01:
    total 8
    drwxr-xr-x 2 lzx  lzx   6 Nov  5 09:59 123
    -rw-r--r-- 1 root root 17 Nov  5 08:19 file
    -rw-r--r-- 1 root root 17 Nov  5 08:18 file1
    drwxr-xr-x 2 root root  6 Nov  5 09:48 test
minion02:
    total 8
    drwxr-xr-x 2 root root  6 Nov  5 09:59 123
    -rw-r--r-- 1 root root 17 Nov  5 08:19 file
    -rw-r--r-- 1 root root 17 Nov  5 08:18 file1
    drwxr-xr-x 2 root root  6 Nov  5 09:48 test