一. 安装

1. 安装源

#163系统基础源

wget http://mirrors.163.com/.help/CentOS6-Base-163.repo -P /etc/yum.repos.d/

rhel 6.0 sohu源

[sohu]

name = sohu

baseurl = http://mirrors.sohu.com/centos/6/os/x86_64/

enabled = 1

gpgcheck = 0

http://mirrors.sohu.com/centos/7.0.1406/os/x86_64/

#puppet官方源

rhel7 :

rpm -Uvh http://yum.puppetlabs.com/puppetlabs-release-el-7.noarch.rpm

rhel 6:

rpm -Uvh http://yum.puppetlabs.com/el/6/products/x86_64/puppetlabs-release-6-10.noarch.rpm


rhel 5:

rpm -Uvh http://yum.puppetlabs.com/el/5/products/x86_64/puppetlabs-release-5-1.noarch.rpm


安装中报错及解决：

1.Requires: ruby（selinux）

wget http://download.longgeek.com/Puppet_for_rhel6.2/libselinux-ruby-2.0.94-5.2.el6.x86_64.rpm

wget http://people.redhat.com/dwalsh/SELinux/RHEL6/x86_64/libselinux-ruby-2.0.94-5.2.el6.x86_64.rpm

2.Requires: rubygems

wget http://rpmfind.net/linux/centos/6.3/os/x86_64/Packages/rubygems-1.3.7-1.el6.noarch.rpm

3.Requires: ruby-rdoc

wget http://download.longgeek.com/Puppet_for_rhel6.2/ruby-rdoc-1.8.7.352-3.el6.x86_64.rpm

#以下网站可统一下载所有依赖包：

http://download.longgeek.com/Puppet_for_rhel6.2/

#服务端安装

yum install puppet puppet-server

#客户端安装

yum install puppet

二. 客户端连接测试：

1.服务端配置：

#新建主配置文件：

cat /etc/puppet/manifests/site.pp 

import "nodes.pp"

#新建节点默认配置文件（用于连接客户端测试）：

#以下配置文件，将在所有客户端上新建一个/tmp/test 文件，内容为“hello\n”,文件权限为“ 0644”

cat /etc/puppet/manifests/nodes.pp 

node default {

file{

        "/tmp/test":

        content=>"hello\n",

        mode=>0644;

}

}

#开启puppet服务：

/etc/init.d/puppetmaster start


#启动后会开启8140端口
netstat –ntlp 
tcp  0  0   0.0.0.0:8140     0.0.0.0:*     LISTEN      3127/ruby  

#让puppet服务开机启动
chkconfig puppetmaster on

2.客户端

#申请连接到服务端的SSL证书

puppet agent --server master_hostname --test
Info: Caching certificate for ca
Info: Creating a new SSL certificate request for client.com
Info: Certificate Request fingerprint (SHA256): 2E:7F:F1:FA:43:FC:B7:6B:7CE:15:31:C0:73:46:A6:40:02:E9:74:FF:1B9C:C283:2B:6E:29:45:64
Exiting; no certificate found and waitforcert is disabled

#这时在服务端查看客户端申请请求：

 puppet cert –-list


#服务端向客户端颁发证书 

puppet cert –s clinet_hostname


4. 证书颁发后可在/var/lib/puppet/ssl/ca/signed 中 可以看到颁发的证书

3. 验证服务端与客户端是连接是否正常：在客户端执行：

[root@node2 /]# puppet agent --server puppet.paidui.cn --test

Info: Caching certificate for node2.paidui.cn

Info: Caching certificate_revocation_list for ca

Info: Retrieving plugin

Info: Caching catalog for node2.paidui.cn

Info: Applying configuration version '1363779682'

Notice: /Stage[main]//Node[default]/File[/tmp/test]/ensure: defined content as '{md5}b1946ac92492d2347c6235b4d2611184'

Info: Creating state file /var/lib/puppet/state/state.yaml

Notice: Finished catalog run in 0.06 seconds

#执行完成后，/etc/tmp/test  文件已经建立，表示成功。

Error: Could not request certificate: Could not write C:/ProgramData/PuppetLabs/

puppet/etc/ssl/private_keys/web-211.pem to privatekeydir: invalid byte sequence

in US-ASCII


PF大神分享：

http://note.youdao.com/share/?id=a0ba9354124551e375116bede22774f6&type=note