SaltStack常用的模块
1. SaltStack模块介绍
Module是日常使用SaltStack接触最多的一个组件,其用于管理对象操作,这也是SaltStack通过Push的方式进行管理的入口,比如我们日常简单的执行命令、查看包安装情况、查看服务运行情况等工作都是通过SaltStack Module来实现的。
当安装好Master和Minion包后,系统上会安装很多Module,大家可以通过以下命令查看支持的所有Module列表:
//查看所有module列表
[root@master ~]# salt 'node1' sys.list_modules
node1:
- acl
- aliases
- alternatives
- apache
- archive
- artifactory
- baredoc
- beacons
- bigip
- btrfs
- buildout
- chroot
- cloud
- cmd
- composer
- config
- consul
- container_resource
- cp
- cron
- cryptdev
- data
- defaults
- devinfo
- devmap
- disk
..........................
//查看指定module的所有function
[root@master ~]# salt 'node1' sys.list_functions cmd
node1:
- cmd.exec_code
- cmd.exec_code_all
- cmd.has_exec
- cmd.powershell
- cmd.powershell_all
- cmd.retcode
- cmd.run
- cmd.run_all
- cmd.run_bg
- cmd.run_chroot
- cmd.run_stderr
- cmd.run_stdout
- cmd.script
- cmd.script_retcode
- cmd.shell
- cmd.shell_info
- cmd.shells
- cmd.tty
- cmd.which
- cmd.which_bin
//查看指定module的用法
[root@master ~]# salt 'node1' sys.doc service
service.available:
New in version 0.10.4
Check that the given service is available taking into account template
units.
CLI Example:
salt '*' service.available sshd
//SaltStack默认也支持一次执行多个Module,Module之间通过逗号隔开,默认传参之间也是用逗号分隔,也支持指定传参分隔符号--args-separator=@即可
[root@master ~]# salt 'node1' test.echo,cmd.run,service.status hello,hostname,salt-minion
node1:
----------
cmd.run:
node1
service.status:
True
test.echo:
hello
2. SaltStack常用模块
2.1 SaltStack常用模块之network
2.1.1 network.active_tcp
返回所有活动的tcp连接
[root@master ~]# salt 'node1' network.active_tcp
node1:
----------
0:
----------
local_addr:
192.168.72.139
local_port:
22
remote_addr:
192.168.72.1
remote_port:
56504
1:
----------
local_addr:
192.168.72.139
local_port:
22
remote_addr:
192.168.72.1
remote_port:
56502
2:
----------
local_addr:
192.168.72.139
local_port:
58618
remote_addr:
192.168.72.141
remote_port:
4505
2.1.2 network.calc_net
通过IP和子网掩码计算出网段
[root@master ~]# salt 'node1' network.calc_net 192.168.72.139 255.255.255.0
node1:
192.168.72.0/24
[root@master ~]# salt 'node1' network.calc_net 192.168.72.139 255.255.255.240
node1:
192.168.72.128/28
2.1.3 network.connect
测试minion至某一台服务器的网络是否连通
[root@master ~]# salt 'node1' network.connect lol.qq.com 80
node1:
----------
comment:
Successfully connected to lol.qq.com (211.162.179.144) on tcp port 80
result:
True
2.1.4 network.default_route
查看默认路由
[root@master ~]# salt 'node1' network.default_route
node1:
|_
----------
addr_family:
inet
destination:
0.0.0.0
flags:
UG
gateway:
192.168.72.2
interface:
ens33
netmask:
0.0.0.0
2.1.5 network.get_fqdn
查看主机的fqdn(完全限定域名)
[root@master ~]# salt 'node1' network.get_fqdn
node1:
node1
2.1.6 network.get_hostname
获取主机名
[root@master ~]# salt 'node1' network.get_hostname
node1:
node1
2.1.7 network.get_route
查询到一个目标网络的路由信息
[root@master ~]# salt 'node1' network.get_route 192.168.70.240
node1:
----------
destination:
192.168.70.240
gateway:
192.168.72.2
interface:
ens33
source:
192.168.72.139
2.1.8 network.hw_addr
返回指定网卡的MAC地址
[root@master ~]# salt 'node1' network.hw_addr ens33
node1:
00:0c:29:4c:c0:b2
2.1.9 network.ifacestartswith
从特定CIDR检索接口名称
[root@master ~]# salt 'node1' network.ifacestartswith 192.168
node1:
- ens33
2.1.10 network.in_subnet
判断当前主机是否在某一个网段内
[root@master ~]# salt 'node1' network.in_subnet 192.168.72.0/24
node1:
True
2.1.11 network.interface
返回指定网卡的信息
[root@master ~]# salt 'node1' network.interface ens33
node1:
|_
----------
address:
192.168.72.139
broadcast:
192.168.72.255
label:
ens33
netmask:
255.255.255.0
2.1.12 network.interface_ip
返回指定网卡的IP地址
[root@master ~]# salt 'node1' network.interface_ip ens33
node1:
192.168.72.139
2.1.13 network.interfaces
返回当前系统中所有的网卡信息
[root@master ~]# salt 'node1' network.interfaces
node1:
----------
ens33:
----------
hwaddr:
00:0c:29:4c:c0:b2
inet:
|_
----------
address:
192.168.72.139
broadcast:
192.168.72.255
label:
ens33
netmask:
255.255.255.0
inet6:
|_
----------
address:
fe80::8c5a:fae4:e5a7:a2b7
prefixlen:
64
scope:
link
up:
True
lo:
----------
hwaddr:
00:00:00:00:00:00
inet:
|_
----------
address:
127.0.0.1
broadcast:
None
label:
lo
netmask:
255.0.0.0
inet6:
|_
----------
address:
::1
prefixlen:
128
scope:
host
up:
True
2.1.14 network.ip_addrs
返回一个IPv4的地址列表
该函数将会忽略掉127.0.0.1的地址
[root@master ~]# salt 'node1' network.ip_addrs
node1:
- 192.168.72.139
2.1.15 network.netstat
返回所有打开的端口和状态
[root@master ~]# salt 'node1' network.netstat
node1:
|_
----------
inode:
25399
local-address:
127.0.0.1:323
program:
chronyd
proto:
udp
recv-q:
0
remote-address:
0.0.0.0:*
send-q:
0
user:
0
|_
----------
inode:
146716
local-address:
192.168.72.139%ens33:68
program:
NetworkManager
proto:
udp
recv-q:
0
remote-address:
192.168.72.254:67
send-q:
0
user:
0
|_
----------
inode:
25400
local-address:
[::1]:323
program:
chronyd
proto:
udp
recv-q:
0
remote-address:
[::]:*
send-q:
0
user:
0
|_
----------
inode:
28594
local-address:
0.0.0.0:22
program:
sshd
proto:
tcp
recv-q:
0
remote-address:
0.0.0.0:*
send-q:
128
state:
LISTEN
user:
0
|_
----------
inode:
150157
local-address:
192.168.72.139:22
program:
sshd
proto:
tcp
recv-q:
0
remote-address:
192.168.72.1:56504
send-q:
0
state:
ESTABLISHED
user:
0
|_
----------
inode:
0
local-address:
192.168.72.139:39688
program:
proto:
tcp
recv-q:
0
remote-address:
192.168.72.141:4506
send-q:
0
state:
TIME-WAIT
user:
0
|_
----------
inode:
150018
local-address:
192.168.72.139:22
program:
sshd
proto:
tcp
recv-q:
0
remote-address:
192.168.72.1:56502
send-q:
0
state:
ESTABLISHED
user:
0
|_
----------
inode:
49256
local-address:
192.168.72.139:58618
program:
salt-minion
proto:
tcp
recv-q:
0
remote-address:
192.168.72.141:4505
send-q:
0
state:
ESTABLISHED
user:
0
|_
----------
inode:
28596
local-address:
[::]:22
program:
sshd
proto:
tcp
recv-q:
0
remote-address:
[::]:*
send-q:
128
state:
LISTEN
user:
0
|_
----------
inode:
30729
local-address:
*:3306
program:
mysqld
proto:
tcp
recv-q:
0
remote-address:
*:*
send-q:
80
state:
LISTEN
user:
993
|_
----------
inode:
74372
local-address:
*:80
program:
httpd
proto:
tcp
recv-q:
0
remote-address:
*:*
send-q:
128
state:
LISTEN
user:
0
2.1.16 network.ping
使用ping命令测试到某主机的连通性
[root@master ~]# salt 'node1' network.ping lol.qq.com
node1:
PING lol.qq.com.x2.sched.dcloudstc.com (211.162.179.143) 56(84) bytes of data.
64 bytes from 211.162.179.143 (211.162.179.143): icmp_seq=1 ttl=128 time=194 ms
64 bytes from 211.162.179.143 (211.162.179.143): icmp_seq=2 ttl=128 time=40.0 ms
64 bytes from 211.162.179.143 (211.162.179.143): icmp_seq=3 ttl=128 time=28.10 ms
64 bytes from 211.162.179.143 (211.162.179.143): icmp_seq=4 ttl=128 time=32.1 ms
--- lol.qq.com.x2.sched.dcloudstc.com ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3003ms
rtt mi