puppet 原理和工作流程

puppet 一个为实现数据中心自动化管理而设计的配置管理软件

基于C/S架构

原理：S服务端保存着所有的对客户端服务器的配置代码，puppet里叫清单（manifest)；c客户端下载清单后，根据清单对服务器进行配置

工作流程：客户端调用facter facter探测出主机的一些变量，puppetd 把这些信息通过SSL连接发送到服务器puppetmaster

服务器puppetmaster 检测客户端的主机名，然后找到manifest里面对应主机的配置，对其解析，让客户端执行。客户端每隔30分钟同步一次配置文件。

puppet安装

centos6.5 安装puppet


    OS: Centos 6.5 x86_64

    Puppet master: master.com (192.168.116.135)

    Puppet clients: client1.com (192.168.116.136)

    Puppet clients: client2.com (192.168.116.137)


一、先做好安装的准备工作：


1. 在master和client均关闭selinux，iptables：


停止iptables

[root@master ~]# service iptables stop

[root@master ~]# chkconfig  ptables off

关闭selinux

[root@master ~]# vim /etc/selinux/config

改成 SELINUX=disabled


2. 为了保证能向master主机申请到正确的有效证书，建议master和client设置ntp：


[root@master ~]#  yum -y install ntp

[root@master ~]#  ntpdate pool.ntp.org

[root@master ~]#  chkconfig ntpd on

[root@master ~]# chkconfig --list|grep ntp

[root@master ~]# service ntpd start




3. 在master和client端设置主机名和hosts


Puppet 要求所有机器有完整的域名，如果没有 DNS 服务器提供域名的话，可以在机器上设置主机名

[root@master ~]# vim /etc/sysconfig/network

master.com


[root@master ~]# vim /etc/hosts

127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4

 ::1         localhost localhost.localdomain localhost6 localhost6.localdomain6

 192.168.116.135 master.com

 192.168.116.136 client1.com

 192.168.116.137 client2.com



4.  安装puppet官方源(都安装后，克隆改主机名)

[root@master ~]# wget http://yum.puppetlabs.com/el/6/products/x86_64/puppetlabs-release-6-7.noarch.rpm

[root@master ~]# rpm -ivh puppetlabs-release-6-7.noarch.rpm

[root@master ~]# yum update


之上C/S都安装

二、Master端安装配置


1. 安装 puppet-server


[root@master ~]# yum -y install puppet-server



2. 添加自动签发证书


编辑 /etc/puppet/puppet.conf 文件， 在[main]段内加入 autosign = true，server = master.com


[root@master ~]# vim /etc/puppet/puppet.conf


[main]

     # The Puppet log directory.

     # The default value is '$vardir/log'.

     logdir = /var/log/puppet


     # Where Puppet PID files are kept.

     # The default value is '$vardir/run'.

     rundir = /var/run/puppet


     # Where SSL certificates are kept.

     # The default value is '$confdir/ssl'.

     ssldir = $vardir/ssl

     autosign = true

     server = master.com



3. 启动Puppetmaster


[root@master ~]# service puppetmaster start


[root@master ~]#  netstat -tunlp | grep :8140


tcp        0      0 0.0.0.0:8140                0.0.0.0:*                   LISTEN      9148/ruby



4. 开机启动

[root@master ~]# chkconfig --list |grep puppet

[root@master ~]# chkconfig puppetmaster on

[root@master ~]# chkconfig --list |grep puppet

 

三、客户端安装配置


1.  puppet 安装


[root@client1 ~]# yum -y install puppet



2. 为客户端指定puppet服务器,并开启Master的推送功能


编辑 /etc/puppet/puppet.conf 文件，在[agent]段内加入 listen = true，server = master.com


[root@client1 ~]# vim /etc/puppet/puppet.conf


[agent]

     # The file in which puppetd stores a list of the classes

     # associated with the retrieved configuratiion.  Can be loaded in

     # the separate ``puppet`` executable using the ``--loadclasses``

     # option.

     # The default value is '$confdir/classes.txt'.

     classfile = $vardir/classes.txt


     # Where puppetd caches the local configuration.  An

     # extension indicating the cache format is added automatically.

     # The default value is '$confdir/localconfig'.

     localconfig = $vardir/localconfig

     listen = true

     server = master.com


编辑 /etc/puppet/auth.conf 文件， 在 auth / 最下面加入以下语句


[root@client1 ~]# vim /etc/puppet/auth.conf


path /run

 method save

 allow master.com



3. 启动client


[root@client1 ~]# service puppet start

[root@client1 ~]#  netstat -tunlp | grep :8139


4. 开机启动


[root@client1 ~]# chkconfig puppet on

[root@client1 ~]# chkconfig --list |grep puppet

测试

[root@client1 ~]#puppet agent --test

[root@master ~]#puppet cert list --all


在服务端安装puppet的dashboard


安装mysql

 [root@master ~]# yum install  ruby-mysql mysql-server puppet-dashboard


优化mysql设置

[root@master ~]# cp /usr/share/mysql/my-large.cnf  /etc/my.cnf

[root@master ~]# vim /etc/my.cnf

[mysqld]

max_allowed_packet = 32M

启动Mysql服务


[root@master ~]# service mysqld start


[root@master ~]# chkconfig mysqld on


[root@master ~]# chkconfig --list |grep mysqld

[root@master ~]# mysqladmin -u root password '123456'


创建一个dashboard数据库

[root@master ~]# mysql -uroot -p123456 <<EOF

 > CREATE DATABASE dashboard CHARACTER SET utf8;

 > CREATE USER 'dashboard'@'localhost' IDENTIFIED BY '123456';

 > GRANT ALL PRIVILEGES ON dashboard.* TO 'dashboard'@'localhost';

 > FLUSH PRIVILEGES;

 > EOF


配置Dashboard


[root@master ~]# vim /usr/share/puppet-dashboard/config/database.yml

production:

database: dashboard

username: dashboard

password: 123456

encoding: utf8

adapter: mysql


修改时区


[root@master ~]# vim /usr/share/puppet-dashboard/config/environment.rb


config.time_zone='Beijing'

初始化数据库


[root@master ~]# cd /usr/share/puppet-dashboard/

 [root@master puppet-dashboard]# rake RAILS_ENV=production db:migrate



[root@master ~]# service httpd stop

[root@master ~]# service puppetmaster start 

[root@master ~]# service puppet-dashboard start

 访问http://master.com:3000 


导入报告

cd /usr/share/puppet-dashboard

rake RAILS_ENV=production reports:import

执行报告

cd /usr/share/puppet-dashboard

rake jobs:work RAILS_ENV="production"


例子：

[root@master ~]# mkdir -p /etc/puppet/modules/motd{files,manifests,templates}


[root@master ~]# cd /etc/puppet/modules/motd/files

[root@master ~]# mkdir etc

[root@master ~]# vim motd

---puppet test ----

[root@master ~]# vim /etc/puppet/modules/motd/manifests/init.pp

class motd{                 #定义一个类叫motd


  package{ 'setup':    #定义package资源


    ensure => present,  #要求setup这个包处于被安装状态


  }


  file{ '/etc/motd':  #定义file资源


    ensure  => present,  #要求file文件处于存在状态


    owner   => 'root', #要求file文件属主为root


    group   => 'root', #要求file文件属组为root


    mode    => '0644', #要求file文件权限为644


    source  => "puppet://$puppetserver/modules/motd/etc/motd", #要求file文件从puppetmaster端服务器下载


    require => Package['setup'], #要求文件被配置之前先执行package资源


  }


}


[root@master ~]# vim /etc/puppet/manifests/site.pp


$puppetserver = 'master.com' #设置全局变量


node 'client1.com'{


  include  motd


}


[root@client1 ~]#puppet agent --test



puppet 部署tomcat

[root@master ~]#mkdir –vp /etc/puppet/modules/java7/{files,templates,manifests}

[root@master ~]# cd /etc/puppet/modules/java7/files

[root@master files]# wget http://download.oracle.com/otn-pub/java/jdk/7u71-b14/jdk-7u71-linux-x64.tar.gz  


[root@master modules]vim java7/manifests/init.pp

   class java7 {

      include java7::install,java7::env

       }

       

 [root@master modules]vim java7/manifests/install.pp

 class java7::install {

     file {

       "/usr/jdk-7u79-linux-x64.tar.gz": #指明文件下载到客户端的哪个路径

       source=> "puppet:///modules/java7/jdk-7u79-linux-x64.tar.gz", #服务器上被下载的源文件

       owner => root,

        group => root,

        mode => 755

     }

   exec { "install jdk":

     cwd => "/usr",

     command => "tar -zxvf jdk-7u79-linux-x64.tar.gz",

     user => "root",

     group => "root",

     path =>["/usr/bin:/usr/sbin:/bin:/sbin"],

     creates =>"/usr/jdk1.7.0_79",

     require =>File["/usr/jdk-7u79-linux-x64.tar.gz"]

     }

 }

 

 files/env

 export JAVA_HOME=/usr/jdk1.7.0_79

 exprot PATH=$JAVA_HOME/bin:$PATH

 export CLASSPATH=.:$JAVA_HOME/lib/dt.jar:$JAVA_HOME/lib/tools.jar

 

[root@master modules]Vim java7/manifests/env.pp

class java7::env {

 file {

    "/usr/java/env":

    owner => "root",

    group => "root",

    source =>"puppet:///modules/java7/env"


}

exec {

    "set env": #set JAVA_HOME

    command =>"cat /usr/java/env>>/etc/profile && source /etc/profile",

    user => "root",

    group => "root",

    path =>["/usr/local/sbin","/usr/local/bin","/sbin","/bin","/usr/sbin","/usr/bin"],

    unless => "grep -i java_home /etc/profile",#if the return value is 1,do this command.

    require =>File["/usr/java/env"]

    }

 }

vi  /etc/puppet/manifests/nodes.pp


   node 'client1.com' {


   include java7


   }


   site.pp导入 节点配置文件node.pp

    vi   /etc/puppet/manifests/site.pp

           import "nodes.pp"


配置完成后，客户端执行puppet agent --test ,查看结果

vim  /etc/puppet/modules/tomcat7/manifests/init.pp

       class tomcat7 {

         include tomcat7::install


}


class tomcat7::install {


file {


"/usr/apache-tomcat-7.0.63.tar.gz":


source =>"puppet:///modules/tomcat7/apache-tomcat-7.0.63.tar.gz",


owner => "root",


group => "root",


mode => 755


        }


exec {"install tomcat":


cwd => "/usr",


command => "tar zxvfapache-tomcat-7.0.63.tar.gz && mv apache-tomcat-7.0.63 tomcat7",


user => "root",


group => "root",


path =>["/usr/bin:/usr/sbin:/bin:/sbin"],


creates => "/usr/tomcat7",


require => File["/usr/apache-tomcat-7.0.63.tar.gz"]


     }


}


vi  /etc/puppet/manifests/nodes.pp


   node 'client1.com' {


   include java7,tocamt7


   }


配置完成后，客户端执行puppet agent --test ,查看结果