自动化运维工具puppet学习笔记之基础篇-CSDN博客

**************服务端安装软件******************
shell#touch /etc/puppet/manifests/site.pp
shell#cat /etc/hosts
192.168.1.254 nat.test.com
shell#/etc/init.d/puppetmaster start
shell#puppet cert --sign test.test.com
签发证书，需要为每一个域名单独签发
**************客户端配置服务******************
shell#cat /etc/hosts
192.168.1.254 nat.test.com
127.0.0.1 test.test.com
shell#echo "server = nat.test.com" >>/etc/puppet/puppet.conf
shell#puppet agent --no-daemonize --verbose
服务端文件
vim /etc/puppet/manifests/site.pp
node default{
file {"/tmp/a.txt":
content => "test\n",
ensure => present,
backup => ".bak",
mode => 500,
owner => root,
group => www,
}
}
*********************客户端测试****************************
puppet agent --verbose --test
*********************服务端创建模块**************************
shell#mkdir /etc/puppet/modules/snmpd/{files,manifests,templates} -p
shell#vim /etc/puppet/modules/snmpd/manifests
######################################################################################################################
class snmpd {
service {
"snmpd":
enable => "true",
ensure => "running",
require => File["snmpd.conf"],
subscribe => File["snmpd.conf"],
name => $operatingsystem ? {
default => "snmpd",
},
}
package {
"net-snmp":
ensure => present,
name => $operatingsystem ? {
debian => "snmpd",
ubuntu => "snmpd",
default => "net-snmp",
},
}
file {
"snmpd.conf":
# owner => root,
# group => root,
# mode => 644,
require => Package["net-snmp"],
path => $operatingsystem ?{
default => "/etc/snmp/snmpd.conf",
},
}
}
#####################################################################################################
vim /etc/puppet/manifests/site.pp
node default{
file {"/tmp/a.txt":
content => "This is a test file date\n",
ensure => present,
backup => ".back",
mode => 500,
owner => root,
group => www,
}
}
node 'test.test.com' {
file {"/tmp/b.txt":
content => "This is a test file\n",
ensure => present,
backup => ".back",
mode => 500,
owner => root,
group => root,
}
include snmpd #包含创建的类
}

http://docs.puppetlabs.com/guides/types/service.html 原文地址
service管理系统运行的服务进程,不幸的是不同的系统管理服务的方式是多样的. 有些系统上面对于服务管理很简单,有些系统提供复杂的强大的服务管理功能.puppet提供最基本的服务管理,你也可以指定provider,使用一些特性.
注意,当一个服务从另一个资源收到一个事件,服务会重启,例如配置文件修改,可以要求相应的服务重启.不同的平台重启命令不同,你也可以手工指定重启服务的命令.
特性
controllable provider 提供control 变量
enableable provider 可以enable和disable服务
refreshable provider 可以重启服务
例子service { "ssh": ensure => running; "nfs": ensure => stopped; }
参数binary
运行服务的命令的路径, 只用于不支持init的操作系统, 如果没有指定启动脚本,就用这个命令来启动服务.
enable
服务在开机的时候是否启动,可以设置的值是true和false,需要provider支持enableable
ensure
是否运行服务, running表示运行服务,stopped 表示停止服务
hasrestart
指出管理脚本是否支持restart参数,如果不支持,就用stop和start实现restart效果. 可以设置的值是true 或 false
hasstatus
指出管理脚本是否支持status参数,puppet用status参数来判断服务是否已经在运行了,如果不支持status参数,puppet利用查找运行进程列表里面是否有服务名来判断服务是否在运行. 可以设置的值是true或false
name
该资源的namevar, 服务的名字,通常就是在/etc/init.d/目录下的名字
path
启动脚本的搜索路径,可以用冒号分割多个路径,或者用数组指定.
pattern
设置搜索进程列表的匹配字符串,用于不支持init脚本的系统.当要停止一个服务的时候,通过查看进程运行列表来判断.
provider
puppet提供下面的provider(只列出常见的系统)
debian debian系统的init模式的管理脚本,支持 enableable, refreshable.
freebsd init模式,支持enableable, refreshable.
init 标准的init模式,支持refreshable
redhat redhat的init模式,支持enableable, refreshable.
smf solaris新的服务管理框架,支持enableable, refreshable
restart
指定重启脚本,否则就先停止该服务再启动该服务
start
指定启动服务的命令,通常init模式的管理脚本都支持,不需要手工指定
status
指定status命令,如果不指定,就从进程列表查询该服务
stop
指定停止服务的脚本.

http://nocap.blog.163.com/blog/static/19052507420121030113615705/

官方文档
http://docs.puppetlabs.com/puppetdocs-latest.tar.gz
http://www.puppetlabs.com/downloads/docs/puppet_labs_docs_pdfs.zip
puppet cert sign mytestagent.example.com
puppet cert sign --all
puppet master --no-daemonize --verbose
puppet --genconfig
puppet agent --server myserver.example.com --waitforcert 60 --test
puppet master --configprint modulepath
puppet config print modulepath --mode master
auth.conf
autosign.conf
==========================================
rebuilt.example.com
*.scratch.example.com
*.local
==========================================
device.conf
==========================================
[device certname]
type <type>
url <url>
[router6.example.com]
type cisco
url ssh://admin:password@ef03c87a.local
fileserver.conf
===========================================
# Files in the /path/to/files directory will be served
# at puppet:///mount_point/.
[mount_point]
path /path/to/files
allow *.example.com
deny *.wireless.example.com
===========================================
tagmail.conf
require
Set report=true on your agent nodes
Set reports=tagmail
Set the reportfrom email address and either the smtpserver or sendmail setting on the puppet master
Create a tagmail.conf file at the location specified in the tagmap setting
ocated at /etc/puppet/tagmail.conf by default
A comma-separated list of tags and !negated tags; valid tags include:
Explicit tags
Class names
Puppet Documentation ? Configuring Puppet 40/411
“ all ”
Any valid Puppet log level ( debug , info , notice , warning , err , alert , emerg , crit , or
verbose )
A colon
A comma-separated list of email addresses
The list of tags on a line builds the set of resources whose messages will be included in the mailing;
each additional tag adds to the set, and each !negated tag subtracts from the set.
So, for example:
==============================================================================================
all: log-archive@example.com
webserver, !mailserver: httpadmins@example.com
emerg, crit: james@example.com, zach@example.com, ben@example.com
==============================================================================================
service { 'sshd':
subscribe => File['sshdconfig'],
}
define svn_repo($path) {
exec { "/usr/bin/svnadmin create ${path}/${title}":
unless => "/bin/test -d ${path}",
}
}
svn_repo { 'puppet_repo': path => '/var/svn_puppet' }
svn_repo { 'other_repo': path => '/var/svn_other' }
define svn_repo($path) {
exec { "create_repo_${name}":
command => "/usr/bin/svnadmin create ${path}/${title}",
unless => "/bin/test -d ${path}",
}
if $require {
Exec["create_repo_${name}"] {
require +> $require,
}
}
}
svn_repo { 'puppet':
path => '/var/svn',
Puppet Documentation ? Language Guide 50/411
require => Package['subversion'],
}
变量赋值
$value = "${one}${two}"
数组
$foo =[ 'one', 'two', 'three' ]
notice $foo[1]
将返回 two
host { 'one.example.com':
ensure => present,
alias => [ 'satu','dua', 'tiga' ],
ip => '192.168.100.1',
}
哈希
$myhash ={ key1 => 'myval', key2 => $b }
访问hash元素
$myhash ={ key => { subkey => 'b' }}
notice($myhash[key][subkey])
节点赋不同的值
=========================================================
node a {
$setting = 'this'
include class_using_setting
}
node b {
$setting = 'that'
include class_using_setting
}
=========================================================
calss的设置
=========================================================================================
$test = 'top'
class myclass {
exec { "/bin/echo ${test}": logoutput => true }
}
class other {
$test = 'other'
include myclass
}
include other
===========================================================================================
访问class里面的值
========================================================
class myclass {
$test = 'content'
}
class anotherclass {
$other = $myclass::test
}
========================================================
给变量中的数组增加元素
==========================================================================
$ssh_users = [ 'myself', 'someone' ]
class test {
$ssh_users += ['someone_else']
}
===========================================================================
这里的+=是给数组增加值
变量选择相关
file{ '/etc/config':
owner => $operatingsystem ? {
'sunos' => 'adm',
'redhat' => 'bin',
default => undef,
},
}
默认值为undef，
$owner=$operatingsystem ? {
/(redhat|debian)/=>'bin',
default =>undef,
}
$system=$operatingsystem ? {
/(redhat|debian)/ => "our system is $1",
default => "our system is unknown",
}
这里的$1将会返回redhat或者debian
$0将会返回整行
case
=====================================================================================================
case $operatingsystem {
'sunos': { include solaris } # apply the solaris class
'redhat': { include redhat } # apply the redhat class
default: { include generic } # apply the generic class
}
====================================================================================================
=======================================================================================================
case $hostname {
'jack','jill': { include hill } # apply the hill class
'humpty','dumpty': { include wall } # apply the wall class
default: { include generic } # apply the generic class
}
========================================================================================================
如果v$hostname fact里面含有jack或者jill，那么将会include hill
========================================================================================================
case $hostname {
/^j(ack|ill)$/: { include hill } # apply the hill class
/^[hd]umpty$/: { include wall } # apply the wall class
default: { include generic } # apply the generic class
}
===========================================================================================================
case $hostname {
/^j(ack|ill)$/: { notice("Welcome $1!") }
default: { notice("Welcome stranger") }
}
===========================================================================================================
if $variable {
file { '/some/file': ensure => present }
} else {
file { '/some/other/file': ensure => present }
}
============================================================================================================
if $server == 'mongrel' {
include mongrel
} elsif $server == 'nginx' {
include nginx
} else {
include thin
}
if $ram > 1024 {
$maxclient = 500
}
=============================================================================================================
if ( $processor_count > 2 ) and (( $ram >= 16 * $gigabyte ) or ( $disksize > 1000 )) {
include for_big_irons
} else {
include for_small_box
}
================================================================================================================
unless $memorysize > 1024 {
$maxclient = 500
}
================================================================================================================
虚拟资源
@user { 'luke': ensure => present }
User <| title == luke |>
realize User['luke']
#将虚拟资源实例化
class ssh {
@@sshkey { $hostname: type => dsa, key => $sshdsakey }
Sshkey <<| |>>
}
正则表达式
安装module
puppet module install puppetlabs-apache --version 0.0.2
puppet module list
puppet module search apache
puppet module uninstall puppetlabs-apache
puppet module upgrade puppetlabs-apache --version 0.0.3
https://forge.puppetlabs.com
当一个文件改变的时候如何运行一个命令
===============================================================================================
file { "/etc/bind": source => "/dist/apps/bind" }
exec { "/usr/bin/ndc reload":
subscribe => File["/etc/bind"],
refreshonly => true
}
==============================================================================================
如何确保创建一个用户之前另一个组已经存在
group { "fearme":
ensure => present,
gid => 1000
}
user { "tim":
ensure => present,
gid => "fearme",
groups => ["adm", "staff", "root"],
membership => minimum,
shell => "/bin/bash",
require => Group["fearme"]
}
class base_class {
define testvar_file($myvar="bob") {
file { $name:
content => template("john.erb"),
}
}
testvar_file { "/tmp/testvar": }
}
class child_class inherits base_class {
Base_class::Testvar_file["/tmp/testvar"] { myvar => fred }
}
gem install rack
gem install passenger
passenger-install-apache2-module