Puppet部署SSH

Puppet部署SSH

资源配置

一、基础环境

• 关闭防火墙，内核安全机制

systemctl stop firewalld
systemctl disable firewalld

sed -i "s/^SELINUX=.*/SELINUX=disabled/g" /etc/selinux/config

• 时间同步,由于 Puppet 使用的 SSL 证书依赖时间同步

yum -y install chrony
systemctl start chronyd
systemctl enable chronyd
chronyc sources -v

• 修改主机名

hostnamectl set-hostname master.puppet.com
hostnamectl set-hostname client01.puppet.com
hostnamectl set-hostname client02.puppet.com

• 添加hosts映射

cat >> /etc/hosts << EOF
192.168.93.128 master.puppet.com
192.168.93.129 client01.puppet.com 
192.168.93.130 client02.puppet.com 
EOF

二、Puppet 安装与部署

• 安装 Puppet Master,从 官 网 https://yum.puppetlabs.com/el/7/products/x86_64/ 下 载 Puppet 源 puppetlabs-release-7-12.noarch.rpm 软件包，上传到 master.puppet.com 服务器上

rpm -ivh puppetlabs-release-7-12.noarch.rpm

• 安装并启动 Puppet 服务端

yum install -y puppet-server
systemctl start puppetmaster
systemctl enable puppetmaster

• 安装 Pu