saltstack之常用模块
- 1. saltstack的模块介绍
- 2. SaltStack常用模块
- 2.1 network模块
- 2.1.1 ping模块
- 2.1.2 get_hostname模块
- 2.1.3 get_fqdn模块
- 2.1.4 hw_addr模块
- 2.1.5 active_tcp模块
- 2.1.6 calc_net模块
- 2.1.7 connect模块
- 2.1.8 default_route模块
- 2.1.9 mod_hostname模块
- 2.1.10 get_route模块
- 2.1.11 ifacestartswith模块
- 2.1.12 in_subnet模块
- 2.1.13 interfaces模块
- 2.1.14 interface
- 2.1.15 interface_ip模块
- 2.1.16 ip_addrs模块
- 2.1.17 netstat模块
- 2.1.18 reverse_ip模块
- 2.2 SaltStack常用模块之service
- 2.2.2 get_all模块
- 2.3 SaltStack常用模块之pkg
- 2.4 SaltStack常用模块之state
- 2.5 SaltStack常用模块之cp模块
- 2.6 SaltStack常用模块之user模块
- 2.7 SaltStack常用模块之file
- 2.7.6 file.chattr模块
- 2.7.8 file.chown模块
- 2.7.9 file.copy模块
- 2.7.12 file.file_exists模块
- 2.7.13 file.find模块
- 2.7.14 file.get_gid模块
- 2.7.17 file.get_selinux_context模块
- 2.7.21 file.group_to_gid模块
- 2.7.22 file.grep模块
- 2.7.23 file.is_blkdev模块
- 2.7.24 file.lsattr模块
- 2.7.25 file.mkdir模块
- 2.7.26 file.move模块
- 2.7.27 file.prepend模块
- 2.7.28 file.sed模块
- 2.7.29 file.read模块
- 2.7.30 file.readdir模块
- 2.7.31 file.remove模块
- 2.7.32 file.rename模块
- 2.7.33 file.touch模块
- 2.7.34 file.set_mode模块
- 2.7.35 file.symlink模块
- 2.7.36 file.uid_to_user模块
- 2.7.37 file.user_to_uid模块
- 2.7.38 file.write模块
1. saltstack的模块介绍
Module是日常使用SaltStack接触最多的一个组件，其用于管理对象操作，这也是SaltStack通过Push的方式进行管理的入口，比如我们日常简单的执行命令、查看包安装情况、查看服务运行情况等工作都是通过SaltStack Module来实现的。
当安装好Master和Minion包后，系统上会安装很多Module，大家可以通过以下命令查看支持的所有Module列表：
//查看所有module列表
[root@master ~]# salt 'minion01' sys.list_modules
minion01:
- acl
- aliases
- alternatives
- apache
- archive
- artifactory
- baredoc
- beacons
- bigip
- btrfs
- buildout
- chroot
- cloud
- cmd
- composer
//查看指定module的所有function
[root@master ~]# salt 'minion01' sys.list_functions cmd
minion01:
- cmd.exec_code
- cmd.exec_code_all
- cmd.has_exec
- cmd.powershell
- cmd.powershell_all
- cmd.retcode
- cmd.run
- cmd.run_all
- cmd.run_bg
- cmd.run_chroot
- cmd.run_stderr
- cmd.run_stdout
- cmd.script
- cmd.script_retcode
- cmd.shell
- cmd.shell_info
- cmd.shells
- cmd.tty
//查看指定module的用法
[root@master ~]# salt 'minion01' sys.doc cmd
cmd.which:
Returns the path of an executable available on the minion, None otherwise
CLI Example:
salt '*' cmd.which cat
cmd.which_bin:
Returns the first command found in a list of commands
CLI Example:
salt '*' cmd.which_bin '[pip2, pip, pip-python]'
//SaltStack默认也支持一次执行多个Module，Module之间通过逗号隔开，默认传参之间也是用逗号分隔，也支持指定传参分隔符号--args-separator=@
[root@master ~]# salt 'minion01' service.status,cmd.run httpd,ls
minion01:
----------
cmd.run:
anaconda-ks.cfg
service.status:
True
2. SaltStack常用模块
2.1 network模块
| 使用方法 | 作用 |
|---|---|
| ping | 获取指定主机的ping域名 |
| get_hostname | 获取指定主机的主机名 |
| get_fqdn | 获取指定主机的完全限定域名 |
| hw_addr ens160 | 获取指定网络接口的mac地址 |
| active_tcp | 返回指定主机的活动的tcp连接 |
| calc_net | 通过IP和子网掩码计算出指定主机的网段 |
| connect | 测试指定主机至某一台服务器的网络是否连通 |
| default_route | 查看指定主机的默认路由 |
| mod_hostname | 修改指定主机的主机名 |
| get_route | 查询到一个目标网络的路由信息 |
| ifacestartswith | 从特定CIDR检索接口名称 |
| in_subnet | 判断当前主机是否在某一个网段内 |
| interfaces | 显示所有接口的详细信息 |
| interface ens160 | 返回指定网卡的信息 |
| interface_ip ens160 | 返回指定网卡的IP地址 |
| ip_addrs | 返回一个IPv4的地址列表，但是127.0.0.1会除外 |
| netstat | 返回所有打开的端口和状态 |
| reverse_ip | 返回一个指定的IP地址的反向地址 |
示例：
2.1.1 ping模块
//默认ping四次就会退出
[root@master ~]# salt 'minion01' network.ping www.baidu.com
minion01:
PING www.a.shifen.com (182.61.200.7) 56(84) bytes of data.
64 bytes from localhost (182.61.200.7): icmp_seq=1 ttl=128 time=37.3 ms
64 bytes from localhost (182.61.200.7): icmp_seq=2 ttl=128 time=33.4 ms
64 bytes from localhost (182.61.200.7): icmp_seq=3 ttl=128 time=49.9 ms
64 bytes from localhost (182.61.200.7): icmp_seq=4 ttl=128 time=39.10 ms
--- www.a.shifen.com ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 9ms
rtt min/avg/max/mdev = 33.418/40.159/49.920/6.101 ms
2.1.2 get_hostname模块
[root@master ~]# salt 'minion01' network.get_hostname // 获取主机名
minion01:
minion01
2.1.3 get_fqdn模块
[root@master ~]# salt 'minion01' network.get_fqdn //获取指定主机的完全限定域名
minion01:
minion01
2.1.4 hw_addr模块
[root@master ~]# salt 'minion01' network.hw_addr ens160 // 获取指定网络接口的mac地址
minion01:
00:0c:29:f4:b4:a9
2.1.5 active_tcp模块
[root@master ~]# salt 'minion01' network.active_tcp // 返回指定主机的活动的tcp连接
minion01:
----------
0:
----------
local_addr:
192.168.182.142
local_port:
22
remote_addr:
192.168.182.1
remote_port:
59115
1:
----------
local_addr:
192.168.182.142
local_port:
37228
remote_addr:
192.168.182.141
remote_port:
4505
2.1.6 calc_net模块
// 通过IP和子网掩码计算出指定主机的网段
[root@master ~]# salt 'minion01' network.calc_net 192.168.182.142 255.255.255.0
minion01:
192.168.182.0/24
2.1.7 connect模块
// 测试指定主机至某一台服务器的网络是否连通
[root@master ~]# salt 'minion01' network.connect baidu.com 80
minion01:
----------
comment:
Successfully connected to baidu.com (220.181.38.251) on tcp port 80
result:
True
2.1.8 default_route模块
// 查看指定主机的默认路由
[root@master ~]# salt 'minion01' network.default_route
minion01:
|_
----------
addr_family:
inet
destination:
0.0.0.0
flags:
UG
gateway:
192.168.182.2
interface:
ens160
netmask:
0.0.0.0
2.1.9 mod_hostname模块
这一步显然只适用于初始化且不适合执行所有主机
// 修改指定主机的主机名
这里没有执行，只是写了用法所以没有结果输出
[root@master ~]# salt 'minion01' network.mod_hostname minion02
2.1.10 get_route模块
// 查询到一个目标网络的路由信息
[root@master ~]# salt 'minion01' network.get_route 192.168.182.142
minion01:
----------
destination:
192.168.182.142
gateway:
None
interface:
lo
source:
192.168.182.142
2.1.11 ifacestartswith模块
// 从特定CIDR检索接口名称
[root@master ~]# salt 'minion01' network.ifacestartswith 192.168.182
minion01:
- ens160
2.1.12 in_subnet模块
// 判断当前主机是否在某一个网段内
[root@master ~]# salt 'minion01' network.in_subnet 192.168.182.0/24
minion01:
True
2.1.13 interfaces模块
// 显示所有接口的详细信息
[root@master ~]# salt 'minion01' network.interfaces
minion01:
----------
ens160:
----------
hwaddr:
00:0c:29:f4:b4:a9
inet:
|_
----------
address:
192.168.182.142
broadcast:
192.168.182.255
label:
ens160
netmask:
255.255.255.0
inet6:
|_
----------
address:
fe80::20c:29ff:fef4:b4a9
prefixlen:
64
scope:
link
up:
True
lo:
----------
hwaddr:
00:00:00:00:00:00
inet:
|_
----------
address:
127.0.0.1
broadcast:
None
label:
lo
netmask:
255.0.0.0
inet6:
|_
----------
address:
::1
prefixlen:
128
scope:
host
up:
True
2.1.14 interface
// 返回指定网卡的信息
[root@master ~]# salt 'minion01' network.interface ens160
minion01:
|_
----------
address:
192.168.182.142
broadcast:
192.168.182.255
label:
ens160
netmask:
255.255.255.0
2.1.15 interface_ip模块
// 返回指定网卡的IP地址
[root@master ~]# salt 'minion01' network.interface_ip ens160
minion01:
192.168.182.142
2.1.16 ip_addrs模块
// 返回一个IPv4的地址列表，但是127.0.0.1会除外
[root@master ~]# salt 'minion01' network.ip_addrs
minion01:
- 192.168.182.142
2.1.17 netstat模块
// 返回所有打开的端口和状态
[root@master ~]# salt 'minion01' network.netstat
minion01:
|_
----------
inode:
28918
local-address:
0.0.0.0:22
program:
sshd
proto:
tcp
recv-q:
0
remote-address:
0.0.0.0:*
send-q:
128
state:
LISTEN
user:
0
|_
----------
inode:
0
local-address:
192.168.182.142:41186
program:
proto:
tcp
recv-q:
0
remote-address:
192.168.182.141:4506
send-q:
0
state:
TIME-WAIT
user:
0
|_
----------
inode:
49528
local-address:
192.168.182.142:22
program:
sshd
proto:
tcp
recv-q:
0
remote-address:
192.168.182.1:59115
send-q:
0
state:
ESTABLISHED
user:
0
|_
----------
inode:
30398
local-address:
192.168.182.142:37228
program:
salt-minion
proto:
tcp
recv-q:
0
remote-address:
192.168.182.141:4505
send-q:
0
state:
ESTABLISHED
user:
0
|_
----------
inode:
28758
local-address:
*:80
program:
httpd
proto:
tcp
recv-q:
0
remote-address:
*:*
send-q:
128
state:
LISTEN
user:
0
|_
----------
inode:
28920
local-address:
[::]:22
program:
sshd
proto:
tcp
recv-q:
0
remote-address:
[::]:*
send-q:
128
state:
LISTEN
user:
0
2.1.18 reverse_ip模块
// 返回一个指定的IP地址的反向地址
[root@master ~]# salt 'minion01' network.reverse_ip 192.168.182.141
minion01:
141.182.168.192.in-addr.arpa
2.2 SaltStack常用模块之service
| 使用方法 | 作用 |
|---|---|
| available | 判断指定的服务是否可用 |
| get_all | 获取所有正在运行的服务 |
| disabled | 检查指定服务是否开机不自动启动 |
| enabled | 检查指定服务是否开机自动启动 |
| disable | 设置指定服务开机不自动启动 |
| enable | 设置指定服务开机自动启动 |
| reload | 重新加载指定服务 |
| stop | 停止指定服务 |
| start | 启动指定服务 |
| restart | 重启指定服务 |
| status | 查看指定服务的状态 |
示例:
2.2.1available模块
// 判断指定的服务是否可用
[root@master ~]# salt 'minion01' service.available httpd //表示服务可以正常使用
minion01:
True
[root@minion01 ~]# systemctl stop httpd.service
[root@master ~]# salt 'minion01' service.available httpd //表示只要服务存在就会显示true
minion01:
True
2.2.2 get_all模块
此处只显示部分
[root@master ~]# salt 'minion01' service.get_all //获取所有正在运行的服务
minion01:
- NetworkManager
- NetworkManager-dispatcher
- NetworkManager-wait-online
- auditd
- autovt@
- basic.target
- blk-availability
- bluetooth.target
- console-getty
- container-getty@
- cpupower
- crond
- cryptsetup-pre.target
- cryptsetup.target
- ctrl-alt-del.target
2.2.3 disabled模块
//检查开机是否不自动启动
[root@minion01 ~]# systemctl status httpd
● httpd.service - The Apache HTTP Server
Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vend>
Active: inactive (dead) since Wed 2021-11-03 18:14:59 CST; 2min 30s >
Docs: man:httpd.service(8)
因为我们设置的使开机自启动所以，这里显示的是false
[root@master ~]# salt 'minion01' service.disabled httpd
minion01:
False
2.2.4 enabled模块
//设置指定服务开机自动启动
[root@master ~]# salt 'minion01' service.enable httpd
[root@master ~]# salt 'minion01' service.enabled httpd
minion01:
True
2.2.5 disable模块
// 设置指定服务开机不自动启动
这里没有运行，只写了用法。所以没有显示运行结果
[root@master ~]# salt 'minion01' service.disable httpd
2.2.6 enable模块
// 设置指定服务开机自动启动
因为这里没有运行，只写了用法，所以没有显示运行结果。
[root@master ~]# salt 'minion01' service.enable httpd
2.2.7 reload模块
//重新加载指定的服务
因为httpd服务处于关闭状态所以重新加载会报错
[root@master ~]# salt 'minion01' service.reload httpd
minion01:
ERROR: httpd.service is not active, cannot reload.
ERROR: Minions returned with non-zero exit code
[root@minion01 ~]# systemctl status httpd
● httpd.service - The Apache HTTP Server
Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vend>
Active: inactive (dead) since Wed 2021-11-03 18:14:59 CST; 9min ago
Docs: man:httpd.service(8)
当我们开启httpd服务后即可正常加载
[root@minion01 ~]# systemctl start httpd
[root@master ~]# salt 'minion01' service.reload httpd
minion01:
True
2.2.8 stop模块
//停止指定的服务
[root@master ~]# salt 'minion01' service.stop httpd
minion01:
True
[root@minion01 ~]# systemctl status httpd
● httpd.service - The Apache HTTP Server
Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vend>
Active: inactive (dead) since Wed 2021-11-03 18:27:30 CST; 11s ago
Docs: man:httpd.service(8)
2.2.9 start模块
//启动指定服务
[root@master ~]# salt 'minion01' service.start httpd
minion01:
True
[root@minion01 ~]# systemctl status httpd
● httpd.service - The Apache HTTP Server
Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vend>
Active: inactive (dead) since Wed 2021-11-03 18:29:26 CST; 26s ago
Docs: man:httpd.service(8)
[root@minion01 ~]# systemctl status httpd
● httpd.service - The Apache HTTP Server
Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vend>
Active: active (running) since Wed 2021-11-03 18:30:06 CST; 4s ago
Docs: man:httpd.service(8)
2.2.10 restart模块
//重启指定服务
[root@minion01 ~]# systemctl status httpd
● httpd.service - The Apache HTTP Server
Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vend>
Active: inactive (dead) since Wed 2021-11-03 18:30:52 CST; 9s ago
Docs: man:httpd.service(8)
[root@master ~]# salt 'minion01' service.restart httpd
minion01:
True
[root@minion01 ~]# systemctl status httpd
● httpd.service - The Apache HTTP Server
Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vend>
Active: active (running) since Wed 2021-11-03 18:31:35 CST; 12s ago
Docs: man:httpd.service(8)
2.2.11 status模块
//查看指定服务的状态
[root@master ~]# salt 'minion01' service.status httpd
minion01:
True
2.3 SaltStack常用模块之pkg
| 使用方法 | 作用 |
|---|---|
| download | 只下载软件包但不安装，此功能将会下载指定的软件包，但是需要在minion端安装yum-utils，可以使用 cmd.run 进行远程安装 |
| file_list | 列出指定包或系统中已安装的所有包的文件 |
| group_info | 查看包组的信息 |
| pkg.group_list | 列出系统中所有的包组 |
| install | 安装软件 |
| list_downloaded | 列出已下载到本地的软件包 |
| list_pkgs | 以字典的方式列出当前已安装的软件包 |
| pkg.owner | 列出指定文件是由哪个包提供的 |
| pkg.remove | 卸载指定软件 |
| upgrade | 升级系统中所有的软件包或升级指定的软件包 |
示例：
2.3.1 download模块
// 执行在命令行执行的命令，不可以交互。如：vim等命令不可用
[root@master ~]# salt 'minion01' cmd.run "yum -y install yum-utils"
minion01:
Updating Subscription Management repositories.
Unable to read consumer identity
This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.
Last metadata expiration check: 1:47:38 ago on Wed Nov 3 16:54:18 2021.
Package yum-utils-4.0.12-3.el8.noarch is already installed.
Dependencies resolved.
Nothing to do.
Complete!
// 只下载软件包但不安装，此功能将会下载指定的软件包，需要在minion端安装
[root@master ~]# salt 'minion01' pkg.download wget
minion01:
----------
wget:
/var/cache/yum/packages/wget-1.19.5-8.el8_1.1.x86_64.rpm //下载完成之后的软件存放的位置
[root@minion01 packages]# pwd
/var/cache/yum/packages
[root@minion01 packages]# ls
wget-1.19.5-8.el8_1.1.x86_64.rpm
2.3.2 file_list模块
//列出已安装的openssh软件包提供的所有文件
[root@master ~]# salt 'minion01' pkg.file_list openssh
minion01:
----------
errors:
files:
- /etc/ssh
- /etc/ssh/moduli
- /usr/bin/ssh-keygen
- /usr/lib/.build-id
- /usr/lib/.build-id/2f
- /usr/lib/.build-id/2f/1003f2ae760afaa60d4478f423bebad9d810ff
- /usr/lib/.build-id/fc
- /usr/lib/.build-id/fc/c8618d81f866567bcfe0ebebb5d79c0183dbb9
- /usr/libexec/openssh
- /usr/libexec/openssh/ssh-keysign
- /usr/share/doc/openssh
- /usr/share/doc/openssh/CREDITS
//若不指定则会列出所有的以安装的软件
[root@master ~]# salt 'minion01' pkg.file_list
2.3.3 group_info模块
//查看包组的信息
[root@master ~]# salt 'minion01' pkg.group_info 'Development Tools'
minion01:
----------
conditional:
default:
- asciidoc
- byacc
- ctags
- diffstat
- git
- intltool
- jna
- ltrace
- patchutils
- perl-Fedora-VSP
- perl-generators
- pesign
- source-highlight
- systemtap
- valgrind
- valgrind-devel
description:
A basic development environment.
group:
Development Tools
id:
None
mandatory:
- autoconf
- automake
- binutils
- bison
- flex
- gcc
- gcc-c++
- gdb
- glibc-devel
- libtool
- make
- pkgconf
- pkgconf-m4
- pkgconf-pkg-config
- redhat-rpm-config
- rpm-build
- rpm-sign
- strace
optional:
- cmake
- expect
- rpmdevtools
- rpmlint
type:
package group
2.3.4 group_list模块
//列出系统中所有的包组
[root@master ~]# salt 'minion01' pkg.group_list
minion01:
----------
available:
- Conflicts BaseOS
- Dial-up Networking Support
- Hardware Monitoring Utilities
- Hardware Support
- Large Systems Performance
- Legacy UNIX Compatibility
- Python Web
- Server product core
- Windows File Server
- Additional Development
- Anaconda tools
- Backup Client
- Base
- base-x
- Conflicts AppStream
2.3.5 install模块
//安装软件
[root@master ~]# salt 'minion01' pkg.install wget
minion01:
----------
wget:
----------
new:
1.19.5-8.el8_1.1
old:
2.3.6 list_downloaded模块
//列出已下载到本地的软件包
因为使用pkg安装完成之后会将软件包给删除掉所以这里我们看不到
[root@master ~]# salt 'minion01' pkg.list_downloaded
minion01:
----------
2.3.7 list_pkgs模块
//以字典的方式列出当前已安装的软件包
[root@master ~]# salt 'minion01' pkg.list_pkgs
minion01:
----------
NetworkManager:
1:1.22.8-4.el8
NetworkManager-libnm:
1:1.22.8-4.el8
NetworkManager-team:
1:1.22.8-4.el8
NetworkManager-tui:
1:1.22.8-4.el8
acl:
2.2.53-1.el8
apr:
1.6.3-9.el8
apr-util:
1.6.1-6.el8
apr-util-bdb:
1.6.1-6.el8
apr-util-openssl:
1.6.1-6.el8
2.3.8 pkg.owner模块
//列出指定文件是由哪个包提供的
[root@master ~]# salt 'minion01' pkg.owner /var/www/html //等同于rpm -qf
minion01:
httpd-filesystem
2.3.9 pkg.remove模块
//卸载指定软件
[root@master ~]# salt 'minion01' cmd.run "rpm -qa | grep wget"
minion01:
wget-1.19.5-8.el8_1.1.x86_64
[root@master ~]# salt 'minion01' pkg.remove wget
minion01:
----------
wget:
----------
new:
old:
1.19.5-8.el8_1.1
//若要卸载多个文件，中间需要用逗号隔开
2.3.10 upgrade模块
//升级系统中所有的软件包或升级指定的软件包
因为yum默认下载最新版所以为了演示效果在minion01上安装一个旧版的wget
[root@minion01 ~]# wget http://mirror.centos.org/centos/7/os/x86_64/Packages/wget-1.14-18.el7_6.1.x86_64.rpm
[root@master ~]# salt 'minion01' pkg.upgrade name=wget
minion01:
----------
wget:
----------
new:
1.19.5-10.el8
old:
1.14-18.el7_6.1
2.4 SaltStack常用模块之state
| 使用方法 | 作用 |
|---|---|
| show_highstate | 显示当前系统中有哪些高级状态 |
| highstate | 执行高级状态 |
| show_state_usage | 显示当前系统中的高级状态执行情况 |
| show_top | 返回minion将用于highstate的顶级数据 |
| top | 执行指定的top file，而不是默认的 |
| show_sls | 显示 master 上特定sls或sls文件列表中的状态数据 |
示例：
2.4.1 show_highstate模块
//显示当前系统中有哪些高级状态
[root@master ~]# salt 'minion01' state.show_highstate
minion01:
----------
apache-install:
----------
__env__:
base
__sls__:
web.apache.apache
pkg:
|_
----------
name:
httpd
- installed
|_
----------
order:
10000
apache-service:
----------
__env__:
base
__sls__:
web.apache.apache
service:
|_
----------
name:
httpd
|_
----------
enable:
True
- running
|_
----------
order:
10001
2.4.2 highstate模块
//执行高级状态
[root@master ~]# salt 'minion01' state.highstate web.apache.apache
minion01:
----------
ID: apache-install
Function: pkg.installed
Name: httpd
Result: True
Comment: All specified packages are already installed
Started: 21:06:40.043040
Duration: 420.586 ms
Changes:
----------
ID: apache-service
Function: service.running
Name: httpd
Result: True
Comment: The service httpd is already running
Started: 21:06:40.465880
Duration: 57.015 ms
Changes:
Summary for minion01
------------
Succeeded: 2
Failed: 0
------------
Total states run: 2
Total run time: 477.601 ms
2.4.3 show_state_usage模块
//显示当前系统中的高级状态执行情况
[root@master ~]# salt 'minion01' state.show_state_usage
minion01:
----------
base:
----------
count_all:
3
count_unused:
2
count_used:
1
unused:
- top
- web.nginx.nginx
used:
- web.apache.apache
dev:
----------
count_all:
0
count_unused:
0
count_used:
0
unused:
used:
prod:
----------
count_all:
0
count_unused:
0
count_used:
0
unused:
used:
test:
----------
count_all:
0
count_unused:
0
count_used:
0
unused:
used:
2.4.4 show_top模块
//返回minion将用于highstate的顶级数据
[root@master ~]# salt 'minion01' state.show_top
minion01:
----------
base:
- web.apache.apache
2.4.5 top模块
//执行指定的top file，而不是默认的
[root@master ~]# salt 'minion01' state.top top.sls //这里的top.sls是/srv/salt/base/定义的。根据自己的实际情况填写。
minion01:
----------
ID: apache-install
Function: pkg.installed
Name: httpd
Result: True
Comment: All specified packages are already installed
Started: 21:09:25.319193
Duration: 435.958 ms
Changes:
----------
ID: apache-service
Function: service.running
Name: httpd
Result: True
Comment: The service httpd is already running
Started: 21:09:25.757198
Duration: 59.471 ms
Changes:
Summary for minion01
------------
Succeeded: 2
Failed: 0
------------
Total states run: 2
Total run time: 495.429 ms
2.4.6 show_sls模块
//显示 master 上特定sls或sls文件列表中的状态数据
[root@master base]# salt 'minion01' state.show_sls web.apache.apache
minion01:
----------
apache-install:
----------
__env__:
base
__sls__:
web.apache.apache
pkg:
|_
----------
name:
httpd
- installed
|_
----------
order:
10000
apache-service:
----------
__env__:
base
__sls__:
web.apache.apache
service:
|_
----------
name:
httpd
|_
----------
enable:
True
- running
|_
----------
order:
10001
2.5 SaltStack常用模块之cp模块
示例：
2.5.1 list_master模块
列出存储在 master 上的所有文件
[root@master ~]# salt 'master' cp.list_master
master:
- top.sls
- web/apache/apache.sls
- web/nginx/nginx.sls
2.5.2 list_master_dirs模块
列出存储在 master 上的所有目录
[root@master ~]# salt 'master' cp.list_master_dirs
master:
- web
- web/apache
- web/nginx
2.5.3 list_master_symlinks模块
// 列出存储在 master 上的所有符号链接
[root@master ~]# salt 'master' cp.list_master_symlinks
master:
----------
2.5.4 list_minion模块
// 列出minion上缓存的所有文件
[root@master ~]# salt 'minion01' cp.list_minion
minion01:
- /var/cache/salt/minion/files/base/top.sls
- /var/cache/salt/minion/files/base/web/apache/apache.sls
- /var/cache/salt/minion/highstate.cache.p
- /var/cache/salt/minion/module_refresh
- /var/cache/salt/minion/pkg_refresh
- /var/cache/salt/minion/proc/20211103155513426434
- /var/cache/salt/minion/sls.p
2.5.5 list_states模块
列出环境中所有可用的状态模块
[root@master ~]# salt 'minion01' cp.list_states
minion01:
- top
- web.apache.apache
- web.nginx.nginx
2.5.6 cache_local_file模块
在 localfiles 缓存中缓存 minion 上的本地文件
[root@master ~]# salt 'minion01' cp.cache_local_file /opt/123
minion01:
/var/cache/salt/minion/localfiles/opt/123
2.5.7 cache_master模块
检索 master 上的所有文件并在本地缓存它们
[root@master ~]# salt 'master' cp.cache_master
master:
- /var/cache/salt/minion/files/base/top.sls
- /var/cache/salt/minion/files/base/web/apache/apache.sls
- /var/cache/salt/minion/files/base/web/nginx/nginx.sls
2.5.8 envs模块
列出文件服务器的可用环境
[root@master ~]# salt 'minion01' cp.envs
minion01:
- base
- test
- dev
- prod
//拷贝单个文件到目标主机的/opt目录下
[root@master ~]# salt 'minion01' cmd.run 'ls /opt'
minion01:
123
[root@master ~]# salt-cp 'minion01' /opt/123 /opt/123
minion01:
----------
/opt/123:
True
[root@minion01 opt]# cat 123
hello linux
[root@master opt]# cat 123
hello world
[root@master opt]# cat /opt/123
hello world
[root@minion01 opt]# cat /opt/123
hello world
2.5.9 get_file模块
// 用于从 salt master 获取单个文件
salt://默认是:/srv/salt
//master下载文件到客户端:
[root@master ~]# salt '*' cp.get_file salt://base/top.sls /etc/salt/test
minion01:
/etc/salt/test
master:
/etc/salt/test
[root@minion01 salt]# pwd
/etc/salt
[root@minion01 salt]# cat test
base:
'minion01':
- web.apache.apache
'minion02':
- match: grain
- web.nginx.nginx
[root@master ~]# salt 'minion01' cp.get_file salt://base/top.sls /srv/ makedirs=True
minion01:
/srv/top.sls
[root@minion01 salt]# cat /srv/top.sls
base:
'minion01':
- web.apache.apache
'minion02':
- match: grain
- web.nginx.nginx
2.5.10 get_dir模块
//从master下载整个目录：
[root@master ~]# salt 'minion01' cp.get_dir salt://base/web /opt
minion01:
- /opt/web/apache/apache.sls
- /opt/web/nginx/nginx.sls
[root@minion01 salt]# ls /opt/
web
2.5.11 push模块
//将minion端的文件传到master，也可以用来传目录
[root@master opt]# vim /etc/salt/master
431 file_recv: True //取消注释将false
重启服务
[root@master opt]# systemctl restart salt-master.service
[root@master opt]# systemctl restart salt-minion.service
[root@master ~]# salt 'minion01' cp.push /opt/test
minion01:
True
会存放在此目录下
[root@master opt]# pwd
/var/cache/salt/master/minions/minion01/files/opt
[root@minion01 opt]# cat test
RHCE
[root@master opt]# ls
test
[root@master opt]# cat test
RHCE
2.6 SaltStack常用模块之user模块
2.6.1 add模块
// 在minion01端上创建一个tom用户
[root@minion01 ~]# id tom
id: “tom”：无此用户
[root@master ~]# salt 'minion01' user.add tom
minion01:
True
[root@minion01 ~]# id tom
uid=1000(tom) gid=1000(tom) 组=1000(tom)
//创建用户时指定 shell
[root@master ~]#
[root@master ~]# salt 'minion01' user.add tom shell=/sbin/nologin
minion01:
True
[root@minion01 ~]# tail -1 /etc/passwd
tom:x:1000:1000::/home/tom:/sbin/nologin
//更改用户uid
[root@master ~]# salt 'minion01' user.chuid tom 1024
minion01:
True
[root@minion01 ~]# id tom
uid=1024(tom) gid=1000(tom) 组=1000(tom)
//更改用户的gid
[root@master ~]# salt minion01 user.add wzw
minion01:
True
[root@minion01 ~]# id wzw
uid=1025(wzw) gid=1025(wzw) 组=1025(wzw)
[root@master ~]# salt minion01 user.chgid tom 1025
minion01:
True
2.6.2 chgid模块
// 修改gid
[root@master ~]# salt 'minion01' user.chgid tom 999
minion01:
True
[root@minion01 ~]# id tom
uid=1000(tom) gid=999(input) 组=999(input)
2.6.3 delete模块
// 删除用户，remove删除家目录，force强制删除
[root@master ~]# salt 'minion01' user.delete tom remove=True force=True
minion01:
True
[root@minion01 ~]# id tom
id: “tom”：无此用户
2.6.4 getent模块
// 强制刷新指定主机的用户的信息
[root@master ~]# salt 'minion01' user.getent
minion01:
|_
----------
fullname:
root
gid:
0
groups:
- root
home:
/root
homephone:
name:
root
other:
passwd:
x
roomnumber:
shell:
/bin/bash
2.6.5 list_groups模块
//返回指定用户所属的组列表
[root@master ~]# salt 'minion01' user.list_groups apache
minion01:
- apache
2.6.6 list_users模块
//返回所有用户的列表
[root@master ~]# salt 'minion01' user.list_users
minion01:
- adm
- apache
- bin
- daemon
- dbus
- ftp
- games
- halt
- lp
- mail
- nobody
- operator
- polkitd
- rngd
- root
- shutdown
- sshd
- sssd
- sync
- systemd-coredump
- systemd-resolve
- tss
- unbound
2.6.7 primary_group模块
//返回指定用户的主要组
[root@master ~]# salt 'minion01' user.primary_group apache
minion01:
apache
2.6.8 chgid模块
//更改用户的默认组
[root@master ~]# salt 'minion01' user.chgid tom 996
minion01:
True
[root@minion01 ~]# id tom
uid=1000(tom) gid=996(polkitd) 组=996(polkitd)
2.6.9 info模块
//返回用户信息
[root@master ~]# salt 'minion01' user.info tom
minion01:
----------
fullname:
gid:
996
groups:
- polkitd
home:
/home/tom
homephone:
name:
tom
other:
passwd:
x
roomnumber:
shell:
/bin/bash
uid:
1000
workphone:
2.6.10 chfullname模块
//更改用户名
[root@master ~]# salt 'minion01' user.chfullname tom "jerry"
minion01:
True
[root@minion01 ~]# tail -1 /etc/passwd
tom:x:1000:1000:jerry:/home/tom:/bin/bash
2.7 SaltStack常用模块之file
2.7.1 access模块
//检查指定路径是否存在
[root@master ~]# salt '*' cmd.run 'ls /opt'
minion02:
test2
minion01:
test1
[root@master ~]# salt '*' file.access /opt/test1 f //f检查是否为文件
minion02:
False
minion01:
True
//检查指定文件的权限
[root@master ~]# salt '*' file.access /opt/test1 r //minion02上没有test01文件，判断是否有读权限
minion02:
False
minion01:
True
[root@master ~]# salt '*' file.access /opt/test1 w //判断是否有写的权限
minion01:
True
minion02:
False
[root@master ~]# salt '*' file.access /opt/test1 x //判断是否有写的权限
minion01:
False
minion02:
False
2.7.2 file.append模块
//往一个文件里追加内容，若此文件不存在则会报异常
[root@master ~]# salt '*' cmd.run 'ls /opt'
minion02:
minion01:
[root@master ~]# salt '*' file.append /opt/file 'hello world'
minion02:
Wrote 1 lines to "/opt/file"
minion01:
Wrote 1 lines to "/opt/file"
[root@master ~]# salt '*' cmd.run 'ls /opt/file'
minion02:
/opt/file
minion01:
/opt/file
[root@master ~]# salt '*' cmd.run 'cat /opt/file'
minion02:
hello world
minion01:
hello world
2.7.3 file.basename模块
// 获取指定路径的文件名
[root@master ~]# salt '*' file.basename '/opt/file'
minion02:
file
minion01:
file
2.7.4 file.dirname
// 获取指定路径的目录名
[root@master ~]# salt '*' file.dirname '/opt/file'
minion01:
/opt
minion02:
/opt
2.7.5 file.check_hash模块
// 检查指定的文件与hash字符串是否匹配，匹配则返回 True 否则返回 False
[root@master ~]# salt '*' cmd.run 'md5sum /opt/file'
minion02:
0804a3a1f3d56e2ee5bac31620c63155 /opt/file
minion01:
6f5902ac237024bdd0c176cb93063dc4 /opt/file
[root@master ~]# salt '*' file.check_hash /opt/file 0804a3a1f3d56e2ee5bac31620c63155
minion02:
True
minion01:
False
2.7.6 file.chattr模块
//修改指定文件的属性
| 属性 | 对文件的意义 | 对目录的意义 |
|---|---|---|
| a | 只允许在这个文件之后追加数据，不允许任何进程覆盖或截断这个文件 | 只允许在这个目录下建立和修改文件，而不允许删除任何文件 |
| i | 不允许对这个文件进行任何的修改，不能删除、更改、移动 | 任何的进程只能修改目录之下的文件,不允许建立和删除文件 |
2.7.7 file.chattr模块
//查看当前属性
// 给指定文件添加属性
[root@master ~]# salt '*' cmd.run 'lsattr /opt'
minion01:
-------------------- /opt/file
minion02:
-------------------- /opt/file
//添加属性
[root@master ~]# salt '*' file.chattr /opt/file operator=add attributes=ai
minion02:
True
minion01:
True
[root@master ~]# salt '*' cmd.run 'lsattr /opt'
minion02:
----ia-------------- /opt/file
minion01:
----ia-------------- /opt/file
[root@minion01 opt]# rm -f file
rm: 无法删除'file': 不允许的操作
[root@minion01 opt]# echo 'xxhh' >> file
-bash: file: 不允许的操作
[root@minion01 opt]# echo 'xxhh' > file
-bash: file: 不允许的操作
//给指定文件去除属性
[root@master ~]# salt '*' file.chattr /opt/file operator=remove attributes=ia
minion02:
True
minion01:
True
[root@master ~]# salt '*' cmd.run 'lsattr /opt/file'
minion02:
-------------------- /opt/file
minion01:
-------------------- /opt/file
2.7.8 file.chown模块
// 设置指定文件的属主、属组信息
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
minion01:
total 4
-rw-r--r-- 1 root root 12 Nov 4 17:40 file
minion02:
total 4
-rw-r--r-- 1 root root 12 Nov 4 17:40 file
[root@master ~]# salt '*' file.chown /opt/file root apache
minion01:
None
minion02:
None
[root@master ~]# salt '*' cmd.run 'ls -l /opt/file'
minion01:
-rw-r--r-- 1 root apache 12 Nov 4 17:40 /opt/file
minion02:
-rw-r--r-- 1 root apache 12 Nov 4 17:40 /opt/file
2.7.9 file.copy模块
// 在远程主机上复制文件或目录
拷贝文件
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
minion02:
total 4
-rw-r--r-- 1 root root 12 Nov 4 17:40 file
minion01:
total 4
-rw-r--r-- 1 root root 12 Nov 4 17:40 file
[root@master ~]# salt '*' file.copy /opt/file /opt/file1
minion02:
True
minion01:
True
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
minion01:
total 8
-rw-r--r-- 1 root root 12 Nov 4 17:40 file
-rw-r--r-- 1 root root 12 Nov 4 18:01 file1
minion02:
total 8
-rw-r--r-- 1 root root 12 Nov 4 17:40 file
-rw-r--r-- 1 root root 12 Nov 4 18:01 file1
覆盖并拷贝目录，将会覆盖同名文件或目录
[root@master ~]# salt '*' file.copy /opt/file1 /root/test recurse=true
minion02:
True
minion01:
True
[root@master ~]# salt '*' cmd.run 'ls -l /root'
minion02:
total 8
-rw-------. 1 root root 1188 Oct 4 22:27 anaconda-ks.cfg
-rw-r--r-- 1 root root 12 Nov 4 18:05 test
minion01:
total 8
-rw-------. 1 root root 1188 Oct 4 22:27 anaconda-ks.cfg
-rw-r--r-- 1 root root 12 Nov 4 18:05 test
删除目标目录中同名的文件或目录并拷贝新内容至其中
//拷贝文件
[root@master ~]# salt '*' file.copy /opt/file /root/file
minion02:
True
minion01:
True
[root@master ~]# salt '*' cmd.run 'cat /root/file'
minion01:
this is minion01
minion02:
this is minion02
2.7.10 file.ditectory_exists模块
判断指定目录是否存在，存在则返回 True ，否则返回 False
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
minion01:
total 8
-rw-r--r-- 1 root root 17 Nov 4 18:19 file
-rw-r--r-- 1 root root 17 Nov 4 18:18 file1
minion02:
total 8
-rw-r--r-- 1 root root 17 Nov 4 18:19 file
-rw-r--r-- 1 root root 17 Nov 4 18:18 file1
[root@master ~]# salt '*' file.directory_exists /opt/test
minion02:
False
minion01:
False
2.7.11 file.diskusage模块
递归计算指定路径的磁盘使用情况并以字节为单位返回
[root@master ~]# salt '*' cmd.run 'du -sb /opt'
minion01:
65 /opt
minion02:
65 /opt
[root@master ~]# salt '*' cmd.run 'du -sb /opt/file'
minion02:
17 /opt/file
minion01:
17 /opt/file
2.7.12 file.file_exists模块
// 判断指定文件是否存在
存在返回true，不存在返回为false，若判断的是文件也会返回false
[root@master ~]# salt '*' cmd.run 'ls -l /opt/'
minion01:
total 8
-rw-r--r-- 1 root root 17 Nov 4 18:19 file
-rw-r--r-- 1 root root 17 Nov 4 18:18 file1
minion02:
total 8
-rw-r--r-- 1 root root 17 Nov 4 18:19 file
-rw-r--r-- 1 root root 17 Nov 4 18:18 file1
[root@master ~]# salt '*' file.file_exists /opt/test
minion01:
False
minion02:
False
[root@master ~]# salt '*' file.file_exists /opt/file
minion01:
True
minion02:
True
[root@minion01 opt]# mkdir directory
[root@minion02 opt]# mkdir directory
[root@master ~]# salt '*' file.file_exists /opt/directory
minion01:
False
minion02:
False
2.7.13 file.find模块
// 类似 find 命令并返回符合指定条件的路径列表
name = path-glob # case sensitive
iname = path-glob # case insensitive
regex = path-regex # case sensitive
iregex = path-regex # case insensitive
type = file-types # match any listed type
user = users # match any listed user
group = groups # match any listed group
size = [+-]number[size-unit] # default unit = byte
mtime = interval # modified since date
grep = regex # search file contents
delete [= file-types] # default type = 'f'
exec = command [arg ...] # where {} is replaced by pathname
print [= print-opts]
maxdepth = maximum depth to transverse in path
mindepth = minimum depth to transverse before checking files or directories
* = match zero or more chars
? = match any char
[abc] = match a, b, or c
[!abc] or [^abc] = match anything except a, b, and c
[x-y] = match chars x through y
[!x-y] or [^x-y] = match anything except chars x through y
{a,b,c} = match a or b or c
path-regex：匹配路径名的 Python Regex（正则表达式）模式
file-types：由以下一项或多项组成的字符串：
a: all file types
b: block device
c: character device
d: directory
p: FIFO (named pipe)
f: plain file
l: symlink
s: socket
where:
w: week
d: day
h: hour
m: minute
s: second
print-opts：逗号和/或空格分隔的以下一项或多项列表：
group: group name
md5: MD5 digest of file contents
mode: file permissions (as integer)
mtime: last modification time (as time_t)
name: file basename
path: file absolute path
size: file size in bytes
type: file type
user: user name
salt '*' file.find / type=f name=\*.bak size=+10m //表示在/找以.bak结尾的大小超过10MB的文件
salt '*' file.find /var mtime=+30d size=+10m print=path,size,mtime //在/var下找日期超过30天，大小超过10MB，并打印出路径、大小、时间
salt '*' file.find /var/log name=\*.[0-9] mtime=+30d size=+10m delete //表示在/var/log下找后面.0-9的文件且文件创建的日期超过30天，大小超过10MB
2.7.14 file.get_gid模块
// 获取指定文件的gid
[root@master ~]# salt '*' cmd.run 'ls -l /opt/file'
minion02:
-rw-r--r-- 1 root root 17 Nov 4 18:19 /opt/file
minion01:
-rw-r--r-- 1 root root 17 Nov 4 18:19 /opt/file
[root@master ~]# salt '*' file.get_gid '/opt/file'
minion02:
0
minion01:
0
2.7.15 file.get_group模块
获取指定文件的组名
[root@master ~]# salt '*' cmd.run 'sha256sum /opt/file'
minion01:
b60cde94fd00e4c9844e270c12a16508d6661ab74df6c52630f4b8426e0a1ab0 /opt/file
minion02:
97a43b455166fdce251101ef7b8ab9246af5d8399efa7acd5b3dbdfdf0fdfe82 /opt/file
[root@master ~]# salt '*' file.get_hash /opt/file
minion01:
b60cde94fd00e4c9844e270c12a16508d6661ab74df6c52630f4b8426e0a1ab0
minion02:
97a43b455166fdce251101ef7b8ab9246af5d8399efa7acd5b3dbdfdf0fdfe82
2.7.16 file.get_mode模块
// 获取指定文件的权限，以数字方式显示
[root@master ~]# salt '*' cmd.run 'ls -l /opt/file'
minion01:
-rw-r--r-- 1 root root 17 Nov 4 18:19 /opt/file
minion02:
-rw-r--r-- 1 root root 17 Nov 4 18:19 /opt/file
[root@master ~]# salt '*' file.get_mode '/opt/file'
minion01:
0644
minion02:
0644
2.7.17 file.get_selinux_context模块
// 获取指定文件的 SELINUX 上下文信息
[root@master ~]# salt '*' cmd.run 'ls -Z /opt/file'
minion02:
system_u:object_r:unlabeled_t:s0 /opt/file
minion01:
system_u:object_r:unlabeled_t:s0 /opt/file
[root@master ~]# salt '*' file.get_selinux_context /opt/file
minion02:
system_u:object_r:unlabeled_t:s0
minion01:
system_u:object_r:unlabeled_t:s0
2.7.18 file.get_sum模块
按照指定的算法计算指定文件的特征码并显示，默认使用的sha256算法。
该函数可使用的算法参数有：
- md5
- sha1
- sha224
- sha256 (default)
- sha384
- sha512
[root@master ~]# salt '*' cmd.run 'sha256sum /opt/file'
minion02:
97a43b455166fdce251101ef7b8ab9246af5d8399efa7acd5b3dbdfdf0fdfe82 /opt/file
minion01:
b60cde94fd00e4c9844e270c12a16508d6661ab74df6c52630f4b8426e0a1ab0 /opt/file
[root@master ~]# salt '*' file.get_sum /opt/file
minion01:
b60cde94fd00e4c9844e270c12a16508d6661ab74df6c52630f4b8426e0a1ab0
minion02:
97a43b455166fdce251101ef7b8ab9246af5d8399efa7acd5b3dbdfdf0fdfe82
[root@master ~]# salt '*' cmd.run 'md5sum /opt/file'
minion02:
9431282eea409598c0579f35091482c3 /opt/file
minion01:
a2885ae14d3891a2b8f83150e0530b07 /opt/file
[root@master ~]# salt '*' file.get_sum /opt/file md5
minion01:
a2885ae14d3891a2b8f83150e0530b07
minion02:
9431282eea409598c0579f35091482c3
2.7.19 file.get_uid与file.get_user模块
[root@master ~]# salt '*' cmd.run 'ls -l /opt/file'
minion02:
-rw-r--r--. 1 root root 17 Nov 4 18:19 /opt/file
minion01:
-rw-r--r--. 1 root root 17 Nov 4 18:19 /opt/file
[root@master ~]# salt '*' file.get_uid /opt/file
minion02:
0
minion01:
0
[root@master ~]# salt '*' file.get_user /opt/file
minion02:
root
minion01:
root
2.7.20 file.gid_to_group模块
// 将指定的 gid 转换为组名并显示
[root@master ~]# salt '*' file.gid_to_group 0
minion02:
root
minion01:
root
2.7.21 file.group_to_gid模块
// 将指定的组名转换为 gid 并显示
[root@master ~]# salt '*' file.group_to_gid root
minion02:
0
minion01:
0
[root@master ~]# salt '*' file.group_to_gid tom
minion01:
1000
minion02:
[root@master ~]# salt '*' file.group_to_gid wzw
minion01:
1025
minion02:
2.7.22 file.grep模块
在指定文件中检索指定内容
该函数支持通配符，若在指定的路径中用通配符则必须用双引号引起来
[root@master ~]# salt '*' file.grep /etc/passwd nobody //过滤/etc/passwd文件中含有nobody的关键字
minion02:
----------
pid:
1890
retcode:
0
stderr:
stdout:
nobody:x:65534:65534:Kernel Overflow User:/:/sbin/nologin
minion01:
----------
pid:
2101
retcode:
0
stderr:
stdout:
nobody:x:65534:65534:Kernel Overflow User:/:/sbin/nologin
[root@master ~]# salt '*' file.grep /etc/sysconfig/network-scripts/ifcfg-ens160 ipaddr -- -i //过滤网卡文件中的ipaddr并忽略大小写
minion02:
----------
pid:
1900
retcode:
0
stderr:
stdout:
IPADDR=192.168.182.143
minion01:
----------
pid:
2112
retcode:
0
stderr:
stdout:
IPADDR=192.168.182.142
[root@master ~]# salt '*' file.grep /etc/sysconfig/network-scripts/ifcfg-ens160 ipaddr -- -i -B2 //过滤网卡文件的ipaddr的内容，并取ipaddr的前两行内容忽略大小写
minion01:
----------
pid:
2117
retcode:
0
stderr:
stdout:
DEVICE=ens160
NAME=ens160
IPADDR=192.168.182.142
minion02:
----------
pid:
1905
retcode:
0
stderr:
stdout:
DEVICE=ens160
NAME=ens160
IPADDR=192.168.182.143
[root@master ~]# salt '*' file.grep "/etc/sysconfig/network-scripts/*" ipaddr -- -i -l //打印出/etc/sysconfig/network-scripts/*加所有文件的文件名，忽略大小写
minion01:
----------
pid:
2122
retcode:
0
stderr:
stdout:
/etc/sysconfig/network-scripts/ifcfg-ens160
minion02:
----------
pid:
1911
retcode:
0
stderr:
stdout:
/etc/sysconfig/network-scripts/ifcfg-ens160
2.7.23 file.is_blkdev模块
// 判断指定的文件是否是块设备文件
[root@master ~]# salt '*' cmd.run 'ls -l /dev/sr0'
minion01:
brw-rw----. 1 root cdrom 11, 0 Nov 4 19:01 /dev/sr0
minion02:
brw-rw----. 1 root cdrom 11, 0 Nov 4 19:01 /dev/sr0
[root@master ~]# salt '*' file.is_blkdev /dev/sr0
minion02:
True
minion01:
True
2.7.24 file.lsattr模块
// 检查并显示出指定文件的属性信息
[root@master ~]# salt '*' cmd.run 'lsattr /opt/file'
minion02:
-------------------- /opt/file
minion01:
-------------------- /opt/file
[root@master ~]# salt '*' cmd.run 'chattr +i /opt/file'
minion02:
minion01:
[root@master ~]# salt '*' cmd.run 'lsattr /opt/file'
minion02:
----i--------------- /opt/file
minion01:
----i--------------- /opt/file
[root@master ~]# salt '*' cmd.run 'chattr =ia /opt/file' //=就是只让文件有ia属性
minion02:
minion01:
[root@master ~]# salt '*' cmd.run 'lsattr /opt/file'
minion02:
----ia-------------- /opt/file
minion01:
----ia-------------- /opt/file
[root@master ~]# salt '*' file.lsattr /opt/file
minion01:
----------
/opt/file:
- i
- a
minion02:
----------
/opt/file:
- i
- a
[root@master ~]# salt '*' cmd.run 'chattr -ia /opt/file' //取消文件的ia属性
minion01:
minion02:
[root@master ~]# salt '*' cmd.run 'lsattr /opt/file'
minion02:
-------------------- /opt/file
minion01:
-------------------- /opt/file
2.7.25 file.mkdir模块
// 创建目录并设置属主、属组及权限
[root@master ~]# salt '*' cmd.run 'ls -l /opt/file'
minion01:
-rw-r--r--. 1 root root 17 Nov 4 18:19 /opt/file
minion02:
-rw-r--r--. 1 root root 17 Nov 4 18:19 /opt/file
[root@master ~]# salt '*' file.mkdir /opt/test
minion01:
True
minion02:
True
[root@minion01 opt]# ls
file file1 test
[root@minion02 opt]# ls
file file1 test
[root@master ~]# salt '*' file.mkdir /opt/123 wzw wzw 755
minion01:
True
minion02:
True
[root@master ~]# salt '*' cmd.run 'ls -l /opt' //minion02上没有wzw用户所以没有改变
minion01:
total 8
drwxr-xr-x 2 wzw wzw 6 Nov 4 21:59 123
-rw-r--r-- 1 root root 17 Nov 4 18:19 file
-rw-r--r-- 1 root root 17 Nov 4 18:18 file1
drwxr-xr-x 2 root root 6 Nov 4 21:48 test
minion02:
total 8
drwxr-xr-x 2 root root 6 Nov 4 21:59 123
-rw-r--r-- 1 root root 17 Nov 4 18:19 file
-rw-r--r-- 1 root root 17 Nov 4 18:18 file1
drwxr-xr-x 2 root root 6 Nov 4 21:48 test
2.7.26 file.move模块
//重命名
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
minion01:
total 4
-rw-r--r-- 1 root root 17 Nov 4 18:19 file
drwxr-xr-x 2 root root 6 Nov 5 20:39 test
minion02:
total 4
-rw-r--r-- 1 root root 17 Nov 4 18:19 file
drwxr-xr-x 2 root root 6 Nov 4 21:48 test
[root@master ~]# salt '*' file.move /opt/test /opt/test01
minion01:
----------
comment:
'/opt/test' moved to '/opt/test01'
result:
True
minion02:
----------
comment:
'/opt/test' moved to '/opt/test01'
result:
True
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
minion01:
total 4
-rw-r--r-- 1 root root 17 Nov 4 18:19 file
drwxr-xr-x 2 root root 6 Nov 5 20:39 test01
minion02:
total 4
-rw-r--r-- 1 root root 17 Nov 4 18:19 file
drwxr-xr-x 2 root root 6 Nov 4 21:48 test01
//移动
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
minion01:
total 4
-rw-r--r-- 1 root root 17 Nov 4 18:19 file
drwxr-xr-x 2 root root 6 Nov 5 20:39 test01
minion02:
total 4
-rw-r--r-- 1 root root 17 Nov 4 18:19 file
drwxr-xr-x 2 root root 6 Nov 4 21:48 test01
[root@master ~]# salt '*' file.move /opt/file /opt/test01
minion01:
----------
comment:
'/opt/file' moved to '/opt/test01'
result:
True
minion02:
----------
comment:
'/opt/file' moved to '/opt/test01'
result:
True
[root@master ~]# salt '*' cmd.run 'ls -l /opt/test01'
minion01:
total 4
-rw-r--r-- 1 root root 17 Nov 4 18:19 file
minion02:
total 4
-rw-r--r-- 1 root root 17 Nov 4 18:19 file
2.7.27 file.prepend模块
把文本插入指定文件的开头
[root@master ~]# salt "*" cmd.run 'cat /opt/test01/file'
minion01:
this is minion01
minion02:
this is minion02
[root@master ~]# salt '*' file.prepend /opt/test01/file "RHCSA"
minion01:
Prepended 1 lines to "/opt/test01/file"
minion02:
Prepended 1 lines to "/opt/test01/file"
[root@master ~]# salt '*' cmd.run "cat /opt/test01/file"
minion01:
RHCSA
this is minion01
minion02:
RHCSA
this is minion02
2.7.28 file.sed模块
[root@master ~]# salt '*' cmd.run "cat /opt/test01/file"
minion01:
RHCSA
this is minion01
minion02:
RHCSA
this is minion02
[root@master ~]# salt '*' file.sed /opt/test01/file 'RHCSA' 'RHCA'
minion01:
----------
pid:
25579
retcode:
0
stderr:
stdout:
minion02:
----------
pid:
1902
retcode:
0
stderr:
stdout:
[root@master ~]# salt '*' cmd.run 'cat /opt/test01/file'
minion01:
RHCA
this is minion01
minion02:
RHCA
this is minion02
[root@master ~]# salt '*' file.read /opt/file01
minion01:
123 456 123 123 456 123
minion02:
123 456 123 123 456 123
[root@master ~]# salt '*' file.sed /opt/file01 456 666 flags=2 //将第二个456改为666
minion01:
----------
pid:
25750
retcode:
0
stderr:
stdout:
minion02:
----------
pid:
2050
retcode:
0
stderr:
stdout:
[root@master ~]# salt '*' file.read /opt/file01
minion01:
123 456 123 123 666 123
minion02:
123 456 123 123 666 123
2.7.29 file.read模块
// 读取文件内容
[root@master ~]# salt '*' cmd.run 'cat /opt/test01/file'
minion01:
RHCA
this is minion01
minion02:
RHCA
this is minion02
[root@master ~]# salt '*' file.read /opt/test01/file
minion01:
RHCA
this is minion01
minion02:
RHCA
this is minion02
2.7.30 file.readdir模块
// 列出指定目录下的所有文件或目录，包括隐藏文件
[root@master ~]# salt '*' file.readdir /opt
minion01:
- .
- ..
- test01
minion02:
- .
- ..
- test01
2.7.31 file.remove模块
// 删除指定的文件或目录，若给出的是目录，将递归删除
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
minion01:
total 0
drwxr-xr-x 2 root root 34 Nov 5 20:52 test01
drwxr-xr-x 2 root root 6 Nov 5 21:03 test02
minion02:
total 0
drwxr-xr-x 2 root root 34 Nov 5 20:52 test01
drwxr-xr-x 2 root root 6 Nov 5 21:03 test02
[root@master ~]# salt '*' file.remove /opt/test02
minion01:
True
minion02:
True
[root@master ~]# salt '*' cmd.run 'ls -l /opt/'
minion01:
total 0
drwxr-xr-x 2 root root 34 Nov 5 20:52 test01
minion02:
total 0
drwxr-xr-x 2 root root 34 Nov 5 20:52 test01
2.7.32 file.rename模块
重命名文件或目录
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
minion01:
total 0
drwxr-xr-x 2 root root 34 Nov 5 20:52 test01
minion02:
total 0
drwxr-xr-x 2 root root 34 Nov 5 20:52 test01
[root@master ~]# salt '*' file.rename /opt/test01 /opt/test
minion01:
True
minion02:
True
[root@master ~]# salt '*' cmd.run 'ls -l /opt/'
minion01:
total 0
drwxr-xr-x 2 root root 34 Nov 5 20:52 test
minion02:
total 0
drwxr-xr-x 2 root root 34 Nov 5 20:52 test
2.7.33 file.touch模块
// 创建空文件或更新时间戳
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
minion01:
total 0
drwxr-xr-x 2 root root 34 Nov 5 20:52 test
minion02:
total 0
drwxr-xr-x 2 root root 34 Nov 5 20:52 test
[root@master ~]# salt '*' file.touch /opt/file01
minion01:
True
minion02:
True
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
minion01:
total 0
-rw-r--r-- 1 root root 0 Nov 5 21:10 file01
drwxr-xr-x 2 root root 34 Nov 5 20:52 test
minion02:
total 0
-rw-r--r-- 1 root root 0 Nov 5 21:10 file01
drwxr-xr-x 2 root root 34 Nov 5 20:52 test
2.7.34 file.set_mode模块
// 给指定文件设置权限
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
minion01:
total 0
-rw-r--r-- 1 root root 0 Nov 5 21:10 file01
drwxr-xr-x 2 root root 34 Nov 5 20:52 test
minion02:
total 0
-rw-r--r-- 1 root root 0 Nov 5 21:10 file01
drwxr-xr-x 2 root root 34 Nov 5 20:52 test
[root@master ~]# salt '*' file.set_mode /opt/file01 655 //r是4，w是2，x是1
minion01:
0655
minion02:
0655
2.7.35 file.symlink模块
// 给指定的文件创建软链接
[root@master ~]# salt '*' cmd.run 'ls -l /opt/file01'
minion01:
-rw-r-xr-x 1 root root 24 Nov 5 21:23 /opt/file01
minion02:
-rw-r-xr-x 1 root root 24 Nov 5 21:23 /opt/file01
[root@master ~]# salt '*' file.symlink /opt/file01 /opt/file
minion02:
True
minion01:
True
[root@master ~]# salt '*' cmd.run 'ls -l /opt/file'
minion01:
lrwxrwxrwx 1 root root 11 Nov 5 21:39 /opt/file -> /opt/file01
minion02:
lrwxrwxrwx 1 root root 11 Nov 5 21:39 /opt/file -> /opt/file01
2.7.36 file.uid_to_user模块
// 将指定的 uid 转换成用户名显示出来
[root@master ~]# salt '*' file.uid_to_user 5
minion01:
sync
minion02:
sync
[root@master ~]# salt '*' file.uid_to_user 0
minion01:
root
minion02:
root
2.7.37 file.user_to_uid模块
// 将指定的用户转换成 uid 并显示出来
[root@master ~]# salt '*' file.user_to_uid tom
minion01:
1024
minion02:
[root@master ~]# salt '*' file.user_to_uid wzw
minion01:
1025
minion02:
[root@master ~]# salt '*' file.user_to_uid root
minion02:
0
minion01:
0
2.7.38 file.write模块
// 往一个指定的文件里覆盖写入指定内容
[root@master ~]# salt '*' file.read /opt/file01
minion02:
123 456 123 123 666 123
minion01:
123 456 123 123 666 123
[root@master ~]# salt '*' file.write /opt/file01 'my name is file'
minion01:
Wrote 1 lines to "/opt/file01"
minion02:
Wrote 1 lines to "/opt/file01"
[root@master ~]# salt '*' file.read /opt/file01
minion02:
my name is file
minion01:
my name is file
231
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
