puppet 搭建

puppet 搭建总结
c/s结构，需要ssl验证，证书依赖主机名


server信息：

[root@test data0]# cat /etc/hosts
127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
#::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
10.210.71.145   test.145 
10.210.71.144   test.144
10.210.71.143   test.143

其中test.145 是server 端
需要的软件

1.puppet-server-2.7.25-2.el6.noarch
2.puppet-2.7.25-2.el6.noarch
3.facter-1.6.18-3.el6.x86_64

依赖的epl:http://yum.puppetlabs.com/el/6/products/x86_64/puppetlabs-release-6-6.noarch.rpm
1.puppermaster 端test.145 安装puppet-server facter

[root@test data0]# yum install puppet-server facter -y 
中间省略
Installed:
  facter.x86_64 0:1.6.18-7.el6                                   puppet-server.noarch 0:2.7.25-2.el6                                  


Dependency Installed:
  puppet.noarch 0:2.7.25-2.el6                                                                                                        


Complete!

2.puppet master 启动

[root@test data0]# /etc/init.d/puppetmaster restart
Stopping puppetmaster:                                     [FAILED]
Starting puppetmaster:                                     [  OK  ]

3.ca 查看

[root@test ~]# puppetca --list --all 
[root@test ~]# 

什么都没用，因为没人请求验证呢
-----------------------------------------------------------------------------
4.client 安装 

[root@test ~]# hostname 
test.143
[root@test ~]# yum install puppet facter -y
Loaded plugins: fastestmirror
省略
Installed:
  facter.x86_64 0:1.6.18-7.el6                                      puppet.noarch 0:2.7.25-2.el6                                     


Complete!
[root@test ~]#

安装完毕 
5.配置并且启动

[root@test puppet]# cat /etc/puppet/puppet.conf
[main]
    # The Puppet log directory.
    # The default value is '$vardir/log'.
    logdir = /var/log/puppet


    # Where Puppet PID files are kept.
    # The default value is '$vardir/run'.
    rundir = /var/run/puppet


    # Where SSL certificates are kept.
    # The default value is '$confdir/ssl'.
    ssldir = $vardir/ssl
    report = true


[agent]
    # The file in which puppetd stores a list of the classes
    # associated with the retrieved configuratiion.  Can be loaded in
    # the separate ``puppet`` executable using the ``--loadclasses``
    # option.
    # The default value is '$confdir/classes.txt'.
    classfile = $vardir/classes.txt


    # Where puppetd caches the local configuration.  An
    # extension indicating the cache format is added automatically.
    # The default value is '$confdir/localconfig'.
    localconfig = $vardir/localconfig
    listen = true
    server = test.145


[root@test puppet]# /etc/init.d/puppet start
Starting puppet:                                           [  OK  ]
[root@test puppet]# 

配置并且启动完毕，同时提出了验证请求。

6.puppetmaster 查看并且验证通过

[root@test ~]# puppetca --list --all 
[root@test ~]# puppetca --list --all 
[root@test ~]# puppetca --list --all 
  "test.143" (5B:2D:F4:B2:E6:C1:7D:F3:E7:5E:ED:69:E7:74:07:0B)
[root@test ~]# hostname 
test.145
[root@test ~]# puppetca -s -a 
notice: Signed certificate request for test.143
notice: Removing file Puppet::SSL::CertificateRequest test.143 at '/var/lib/puppet/ssl/ca/requests/test.143.pem'
[root@test ~]# puppetca --list --all 
+ "test.143" (D9:D5:89:D3:32:2C:CB:9D:50:F5:24:60:97:F5:C7:D7)
[root@test ~]#

变成加号了，验证通过，一个最简单的puppet cs 写完了。

写个简单的demo

[root@test ~]# cat /etc/puppet/manifests/site.pp 
node default {
    file {
        "/tmp/hello_puppet":
        content=>"hello_puppet nice to meet you";
    }   
}
[root@test ~]# hostname 
test.145
[root@test ~]# 

puppet的入口文件是site.pp 

然后去客户端验证一下。

[root@test puppet]# !pup
puppetd --test
notice: Ignoring --listen on onetime run
info: Caching catalog for test.143
info: Applying configuration version '1417590794'
notice: /Stage[main]//Node[default]/File[/tmp/hello_puppet]/ensure: defined content as '{md5}6152d048657a8a30d6894b3a6f164657'
notice: Finished catalog run in 0.23 seconds
[root@test puppet]# cat /tmp/hello_puppet 
hello_puppet nice to meet you[root@test puppet]# hostname 
test.143
[root@test puppet]# 

done 完成了。