SaltStack常用的模块
SaltStack模块介绍
Module是日常使用SaltStack接触最多的一个组件,其用于管理对象操作,这也是SaltStack通过Push的方式进行管理的入口,比如我们日常简单的执行命令、查看包安装情况、查看服务运行情况等工作都是通过SaltStack Module来实现的。
当安装好Master和Minion包后,系统上会安装很多Module,大家可以通过以下命令查看支持的所有Module列表:
查看所有module列表
[root@master ~]# salt 'node2' sys.list_modules
node2:
- acl
- aliases
- alternatives
- archive
- artifactory
- baredoc
- beacons
- bigip
- btrfs
- buildout
- chroot
- cloud
- cmd
- composer
- config
- consul
- container_resource
- cp
- cron
- cryptdev
- data
......此处省略n行
查看指定module的所有function
[root@master ~]# salt 'node2' sys.list_functions cmd
node2:
- cmd.exec_code
- cmd.exec_code_all
- cmd.has_exec
- cmd.powershell
- cmd.powershell_all
- cmd.retcode
- cmd.run
- cmd.run_all
- cmd.run_bg
- cmd.run_chroot
- cmd.run_stderr
- cmd.run_stdout
- cmd.script
- cmd.script_retcode
- cmd.shell
- cmd.shell_info
- cmd.shells
- cmd.tty
- cmd.which
- cmd.which_bin
查看指定module的用法
[root@master ~]# salt 'node2' sys.doc cmd.run
.....此处省略n行
CLI Example:
salt '*' cmd.run "ls -l | awk '/foo/{print \\$2}'"
.....此处省略n行
SaltStack默认也支持一次执行多个Module,Module之间通过逗号隔开,默认传参之间也是用逗号分隔,也支持指定传参分隔符号–args-separator=@即可
[root@master ~]# salt 'node2' test.echo,cmd.run,service.status hello,hostname,salt-minion
node2:
----------
cmd.run:
node2
service.status:
True
test.echo:
hello
network 模块
network.active_tcp
返回所有活动的tcp连接
[root@master ~]# salt '*' network.active_tcp
node3:
----------
0:
----------
local_addr:
192.168.58.30
local_port:
41924
remote_addr:
192.168.58.120
remote_port:
4505
1:
----------
local_addr:
192.168.58.30
local_port:
22
remote_addr:
192.168.58.1
remote_port:
62334
2:
----------
local_addr:
192.168.58.30
local_port:
22
remote_addr:
192.168.58.1
remote_port:
62333
node2:
----------
0:
----------
local_addr:
192.168.58.121
local_port:
33908
remote_addr:
192.168.58.120
remote_port:
4505
1:
----------
local_addr:
192.168.58.121
local_port:
22
remote_addr:
192.168.58.1
remote_port:
62326
2:
----------
local_addr:
192.168.58.121
local_port:
22
remote_addr:
192.168.58.1
remote_port:
62327
master:
----------
0:
----------
local_addr:
192.168.58.120
local_port:
4505
remote_addr:
192.168.58.120
remote_port:
43026
1:
----------
local_addr:
192.168.58.120
local_port:
4505
remote_addr:
192.168.58.121
remote_port:
33908
2:
----------
local_addr:
192.168.58.120
local_port:
22
remote_addr:
192.168.58.1
remote_port:
62324
3:
----------
local_addr:
192.168.58.120
local_port:
43026
remote_addr:
192.168.58.120
remote_port:
4505
4:
----------
local_addr:
192.168.58.120
local_port:
22
remote_addr:
192.168.58.1
remote_port:
62325
5:
----------
local_addr:
192.168.58.120
local_port:
4505
remote_addr:
192.168.58.30
remote_port:
41924
network.calc_net
通过IP和子网掩码计算出网段
[root@master ~]# salt '*' network.calc_net 192.168.58.120 255.255.255.0
node3:
192.168.58.0/24
node2:
192.168.58.0/24
master:
192.168.58.0/24
[root@master ~]# salt '*' network.calc_net 192.168.58.120 255.255.255.240
master:
192.168.58.112/28
node3:
192.168.58.112/28
node2:
192.168.58.112/28
network.connect
测试minion至某一台服务器的网络是否连通
[root@master ~]# salt 'node3' network.connect baidu.com 80
node3:
----------
comment:
Successfully connected to baidu.com (220.181.38.148) on tcp port 80
result:
True
network.default_route
查看默认路由
[root@master ~]# salt 'master' network.default_route
master:
|_
----------
addr_family:
inet
destination:
0.0.0.0
flags:
UG
gateway:
192.168.58.2
interface:
ens160
netmask:
0.0.0.0
network.get_fqdn
查看主机的fqdn(完全限定域名)
[root@master ~]# salt 'node2' network.get_fqdn
node2:
node2
[root@master ~]# salt 'node3' network.get_fqdn
node3:
node3
network.get_hostname
获取主机名
[root@master ~]# salt 'node2' network.get_hostname
node2:
node2
network.get_route
查询到一个目标网络的路由信息
[root@master ~]# salt 'master' network.get_route 192.168.58.30
master:
----------
destination:
192.168.58.30
gateway:
None
interface:
ens160
source:
192.168.58.120
network.hw_addr
返回指定网卡的MAC地址
[root@master ~]# salt 'node3' network.hw_addr ens160
node3:
00:0c:29:36:54:39
network.ifacestartswith
从特定CIDR检索接口名称
[root@master ~]# salt '*' network.ifacestartswith 192.168
master:
- ens160
node3:
- ens160
node2:
- ens160
network.in_subnet
判断当前主机是否在某一个网段内
[root@master ~]# salt '*' network.in_subnet 192.168.57.0/24
master:
False
node3:
False
node2:
False
[root@master ~]# salt '*' network.in_subnet 192.168.58.0/24
node3:
True
master:
True
node2:
True
network.interface
返回指定网卡的信息
[root@master ~]# salt 'master' network.interface ens160
master:
|_
----------
address:
192.168.58.120
broadcast:
192.168.58.255
label:
ens160
netmask:
255.255.255.0
network.interface_ip
返回指定网卡的IP地址
[root@master ~]# salt 'master' network.interface_ip ens160
master:
192.168.58.120
[root@master ~]# salt 'node3' network.interface_ip ens160
node3:
192.168.58.30
network.interfaces
返回当前系统中所有的网卡信息
ens160:
----------
hwaddr:
00:0c:29:1a:7b:18
inet:
|_
----------
address:
192.168.58.120
broadcast:
192.168.58.255
label:
ens160
netmask:
255.255.255.0
inet6:
|_
----------
address:
fe80::4e8b:3646:bac7:1c78
prefixlen:
64
scope:
link
up:
True
lo:
----------
hwaddr:
00:00:00:00:00:00
inet:
|_
----------
address:
127.0.0.1
broadcast:
None
label:
lo
netmask:
255.0.0.0
inet6:
|_
----------
address:
::1
prefixlen:
128
scope:
host
up:
True
node3:
----------
ens160:
----------
hwaddr:
00:0c:29:36:54:39
inet:
|_
----------
address:
192.168.58.30
broadcast:
192.168.58.255
label:
ens160
netmask:
255.255.255.0
inet6:
|_
----------
address:
fe80::25f4:93f8:9ef7:a097
prefixlen:
64
scope:
link
up:
True
lo:
----------
hwaddr:
00:00:00:00:00:00
inet:
|_
----------
address:
127.0.0.1
broadcast:
None
label:
lo
netmask:
255.0.0.0
inet6:
|_
----------
address:
::1
prefixlen:
128
scope:
host
up:
True
node2:
----------
ens160:
----------
hwaddr:
00:0c:29:e5:44:fe
inet:
|_
----------
address:
192.168.58.121
broadcast:
192.168.58.255
label:
ens160
netmask:
255.255.255.0
inet6:
|_
----------
address:
fe80::cfb9:ea79:ec31:a606
prefixlen:
64
scope:
link
up:
True
lo:
----------
hwaddr:
00:00:00:00:00:00
inet:
|_
----------
address:
127.0.0.1
broadcast:
None
label:
lo
netmask:
255.0.0.0
inet6:
|_
----------
address:
::1
prefixlen:
128
scope:
host
up:
True
network.ip_addrs
返回一个IPv4的地址列表
该函数将会忽略掉127.0.0.1的地址
[root@master ~]# salt '*' network.ip_addrs
node3:
- 192.168.58.30
master:
- 192.168.58.120
node2:
- 192.168.58.121
network.netstat
返回所有打开的端口和状态
[root@master ~]# salt 'master' network.netstat
master:
|_
----------
inode:
27253
local-address:
127.0.0.1:323
program:
chronyd
proto:
udp
recv-q:
0
remote-address:
0.0.0.0:*
send-q:
0
user:
0
|_
----------
inode:
27254
local-address:
[::1]:323
program:
chronyd
proto:
udp
recv-q:
0
remote-address:
[::]:*
send-q:
0
user:
0
|_
----------
inode:
28065
local-address:
0.0.0.0:22
program:
sshd
proto:
tcp
recv-q:
0
remote-address:
0.0.0.0:*
send-q:
128
state:
LISTEN
user:
0
|_
----------
inode:
30925
local-address:
0.0.0.0:4505
program:
salt-master
proto:
tcp
recv-q:
0
remote-address:
0.0.0.0:*
send-q:
128
state:
LISTEN
user:
0
|_
.....此处省略n行
network.ping
使用ping命令测试到某主机的连通性
[root@master ~]# salt 'master' network.ping baidu.com
master:
PING baidu.com (220.181.38.148) 56(84) bytes of data.
64 bytes from 220.181.38.148 (220.181.38.148): icmp_seq=1 ttl=128 time=66.5 ms
64 bytes from 220.181.38.148 (220.181.38.148): icmp_seq=2 ttl=128 time=43.8 ms
64 bytes from 220.181.38.148 (220.181.38.148): icmp_seq=3 ttl=128 time=43.9 ms
64 bytes from 220.181.38.148 (220.181.38.148): icmp_seq=4 ttl=128 time=50.3 ms
--- baidu.com ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 9ms
rtt min/avg/max/mdev = 43.771/51.124/66.515/9.266 ms
network.reverse_ip
返回一个指定的IP地址的反向地址
[root@master ~]# salt 'node2' network.reverse_ip 192.168.58.20
node2:
20.58.168.192.in-addr.arpa
service模块
service.available
判断指定的服务是否可用
[root@master ~]# salt 'node3' service.available sshd
node3:
True
[root@master ~]# salt 'node2' service.available vsftpd
node2:
False
service.get_all
获取所有正在运行的服务
[root@master ~]# salt 'master' service.get_all
master:
- NetworkManager
- NetworkManager-dispatcher
- NetworkManager-wait-online
- auditd
- autovt@
- basic.target
- blk-availability
- bluetooth.target
- chrony-dnssrv@
- chrony-dnssrv@.timer
- chrony-wait
- chronyd
- console-getty
- container-getty@
- cpupower
- crond
- cryptsetup-pre.target
- cryptsetup.target
- ctrl-alt-del.target
- dbus
- dbus-org.freedesktop.hostname1
- dbus-org.freedesktop.locale1
- dbus-org.freedesktop.login1
- dbus-org.freedesktop.nm-dispatcher
- dbus-org.freedesktop.portable1
- dbus-org.freedesktop.timedate1
- dbus.socket
- debug-shell
- default.target
- dev-hugepages.mount
- dev-mqueue.mount
- dm-event
- dm-event.socket
- dnf-makecache
......此处省略n行
service.disabled
检查指定服务是否开机不自动启动
[root@master ~]# salt 'master' service.disabled httpd
master:
False
service.enabled
检查指定服务是否开机自动启动
[root@master ~]# salt 'master' service.enabled httpd
master:
True
service.disable
设置指定服务开机不自动启动
[root@master ~]# salt 'master' service.disable httpd
master:
True
[root@master ~]# salt 'master' service.enabled httpd
master:
False
service.enable
设置指定服务开机自动启动
[root@master ~]# salt 'master' service.enable httpd
master:
True
[root@master ~]# salt 'master' service.enabled httpd
master:
True
service.reload
重新加载指定服务
[root@master ~]# salt 'master' service.reload httpd
master:
True
service.stop
停止指定服务
[root@master ~]# salt 'master' service.stop httpd
master:
True
service.start
启动指定服务
[root@master ~]# salt 'master' service.start httpd
master:
True
service.restart
重启指定服务
[root@master ~]# salt 'master' service.restart httpd
master:
True
service.status
查看指定服务的状态
[root@master ~]# salt '*' service.status httpd
master:
True
node2:
False //没有服务
node3:
False
pkg模块
pkg.download
只下载软件包但不安装
此功能将会下载指定的软件包,但是需要在minion端安装yum-utils,可以使用 cmd.run 进行远程安装
[root@master ~]# salt 'master' pkg.download wget
master:
----------
wget:
/var/cache/yum/packages/wget-1.19.5-10.el8.x86_64.rpm
pkg.file_list
列出指定包或系统中已安装的所有包的文件
[root@master ~]# salt 'master' service.get_all
master:
- NetworkManager
- NetworkManager-dispatcher
- NetworkManager-wait-online
- auditd
- autovt@
- basic.target
- blk-availability
- bluetooth.target
- chrony-dnssrv@
- chrony-dnssrv@.timer
- chrony-wait
- chronyd
- console-getty
- container-getty@
- cpupower
- crond
......此处省略n行
[root@master ~]# salt 'master' pkg.file_list
master:
----------
errors:
files:
VALUE_TRIMMED
pkg.group_install
下载指定包组
salt 'node3' pkg.group_install 'Development Tools'
node3:
----------
adobe-mappings-cmap:
----------
new:
20171205-3.el8
old:
adobe-mappings-cmap-deprecated:
----------
new:
20171205-3.el8
old:
adobe-mappings-pdf:
----------
new:
20180407-1.el8
old:
annobin:
----------
new:
9.50-1.el8
old:
asciidoc:
----------
new:
8.6.10-0.5.20180627gitf7c2274.el8
old:
atk:
----------
new:
2.28.1-1.el8
old:
autoconf:
----------
new:
2.69-27.el8
old:
automake:
....此处省略n行
pkg.group_info
查看包组的信息
[root@master ~]# salt 'master' pkg.group_info 'Development Tools'
master:
----------
conditional:
default:
- asciidoc
- byacc
- ctags
- diffstat
- elfutils-libelf-devel
- git
- intltool
- jna
- ltrace
- patchutils
- perl-Fedora-VSP
- perl-Sys-Syslog
- perl-generators
- pesign
- source-highlight
- systemtap
- valgrind
- valgrind-devel
description:
A basic development environment.
group:
Development Tools
id:
None
mandatory:
- autoconf
- automake
- binutils
- bison
- flex
- gcc
- gcc-c++
- gdb
- glibc-devel
- libtool
- make
- pkgconf
- pkgconf-m4
- pkgconf-pkg-config
- redhat-rpm-config
- rpm-build
- rpm-sign
- strace
optional:
- cmake
- expect
- rpmdevtools
- rpmlint
type:
package group
pkg.group_list
列出系统中所有的包组
[root@master ~]# salt 'master' pkg.group_list
master:
----------
available:
- Conflicts BaseOS
- Dial-up Networking Support
- Hardware Monitoring Utilities
- Hardware Support
- Large Systems Performance
- Legacy UNIX Compatibility
- Python Web
- Server product core
- Windows File Server
- Additional Development
- Anaconda tools
- Backup Client
- Base
- base-x
- Conflicts AppStream
- Container Management
- Debugging Tools
- Desktop Debugging and Performance Tools
- Development Tools
- .NET Core Development
- File and Storage Server
- Fonts
- FTP Server
- GNOME Applications
- GNOME
- Graphical Administration Tools
- Graphics Creation Tools
- Guest Agents
- Guest Desktop Agents
- Headless Management
- Infiniband Support
- Input Methods
- Internet Applications
- Internet Browser
- Java Platform
- Legacy X Window System Compatibility
- Mail Server
- Mainframe Access
- Multimedia
- Network File System Client
- Network Servers
- Networking Tools
- Common NetworkManager submodules
- Office Suite and Productivity
- Atomic Host ostree support
- Performance Tools
- Platform Development
- KVM platform specific packages
- Hyper-v platform specific packages
- Printing Client
- Remote Desktop Clients
- Remote Management for Linux
- RPM Development Tools
- Scientific Support
- Security Tools
- Smart Card Support
- Standard
- System Tools
- TeX formatting system
- Virtualization Client
- Virtualization Hypervisor
- Virtualization Platform
- Virtualization Tools
- Basic Web Server
- Workstation product core
available environments:
- Server with GUI
- Server
- Workstation
- Custom Operating System
- Virtualization Host
available languages:
----------
installed:
- Core
- VMware platform specific packages
installed environments:
- Minimal Install
pkg.install
安装软件
[root@master ~]# salt 'master' pkg.install make
master:
----------
make:
----------
new:
1:4.2.1-10.el8
old:
pkg.list_downloaded
列出已下载到本地的软件包
[root@master ~]# salt 'node2' pkg.list_downloaded
node2:
----------
wget:
----------
1.14-18.el7:
----------
creation_date_time:
2021-11-03T13:11:53
creation_date_time_t:
1550826712
path:
/var/cache/yum/packages/wget-1.14-18.el7.x86_64.rpm
size:
560152
pkg.list_pkgs
以字典的方式列出当前已安装的软件包
[root@master ~]# salt 'master' pkg.list_pkgs
master:
----------
NetworkManager:
1:1.22.8-4.el8
NetworkManager-libnm:
1:1.22.8-4.el8
NetworkManager-team:
1:1.22.8-4.el8
NetworkManager-tui:
1:1.22.8-4.el8
acl:
2.2.53-1.el8
apr:
1.6.3-11.el8
apr-util:
1.6.1-6.el8
apr-util-bdb:
1.6.1-6.el8
apr-util-openssl:
1.6.1-6.el8
此处省略n行
pkg.owner
列出指定文件是由哪个包提供的
[root@master ~]# salt 'master' pkg.owner /usr/sbin/apachectl
master:
httpd
[root@master ~]# salt 'master' pkg.owner /usr/sbin/apachectl /etc/httpd/conf/httpd.conf
master:
----------
/etc/httpd/conf/httpd.conf:
httpd
/usr/sbin/apachectl:
httpd
pkg.remove
卸载指定软件
[root@master ~]# salt 'master' cmd.run 'rpm -qa|grep httpd'
master:
centos-logos-httpd-85.8-1.el8.noarch
httpd-tools-2.4.37-39.module_el8.4.0+950+0577e6ac.1.x86_64
httpd-filesystem-2.4.37-39.module_el8.4.0+950+0577e6ac.1.noarch
httpd-2.4.37-39.module_el8.4.0+950+0577e6ac.1.x86_64
[root@master ~]# salt 'master' pkg.remove httpd
master:
----------
apr:
----------
new:
old:
1.6.3-11.el8
apr-util:
----------
new:
old:
1.6.1-6.el8
apr-util-bdb:
----------
new:
old:
1.6.1-6.el8
apr-util-openssl:
----------
new:
old:
1.6.1-6.el8
centos-logos-httpd:
----------
new:
old:
85.8-1.el8
httpd:
----------
new:
old:
2.4.37-39.module_el8.4.0+950+0577e6ac.1
httpd-filesystem:
----------
new:
old:
2.4.37-39.module_el8.4.0+950+0577e6ac.1
httpd-tools:
----------
new:
old:
2.4.37-39.module_el8.4.0+950+0577e6ac.1
mailcap:
----------
new:
old:
2.1.48-3.el8
mod_http2:
----------
new:
old:
1.15.7-3.module_el8.4.0+778+c970deab
查看
[root@master ~]# rpm -qa|grep httpd
[root@master ~]#
pkg.upgrade
升级系统中所有的软件包或升级指定的软件包
[root@master ~]# salt 'master' pkg.upgrade name=openssl
master:
----------
openssl:
----------
new:
1:1.1.1g-15.el8_3
old:
1:1.1.1c-15.el8
openssl-libs:
----------
new:
1:1.1.1g-15.el8_3
old:
1:1.1.1c-15.el8
注意: 上面的例子只是升级openssl,若想将系统文件全部升级,只需取消name字段
state模块
state.show_highstate
显示当前系统中有哪些高级状态
[root@master ~]# salt 'master' state.show_highstate
master:
----------
apache-install:
----------
__env__:
base
__sls__:
web.apache.install_a
pkg:
|_
----------
name:
httpd
- installed
|_
----------
order:
10000
apache-service:
----------
__env__:
base
__sls__:
web.apache.install_a
service:
|_
----------
name:
httpd
|_
----------
enable:
True
- running
|_
----------
order:
10001
state.highstate
执行高级状态
[root@master ~]# salt 'master' state.highstate web.nginx.install_n
master:
----------
ID: apache-install
Function: pkg.installed
Name: httpd
Result: None
Comment: The following packages would be installed/updated: httpd
Started: 15:24:17.760067
Duration: 886.63 ms
Changes:
----------
installed:
----------
httpd:
----------
new:
installed
old:
----------
ID: apache-service
Function: service.running
Name: httpd
Result: None
Comment: Service httpd not present; if created in this state run, it would have been started
Started: 15:24:18.675923
Duration: 34.274 ms
Changes:
Summary for master
------------
Succeeded: 2 (unchanged=2, changed=1)
Failed: 0
------------
Total states run: 2
Total run time: 920.904 ms
service.missing
查看指定目标是否安装指定服务
[root@master ~]# salt 'node2' service.missing httpd
node2:
True
[root@master ~]# salt 'node2' service.missing nginx
node2:
False
state.show_state_usage
显示当前系统中的高级状态执行情况
[root@master ~]# salt 'master' state.show_state_usage
master:
----------
base:
----------
count_all:
3
count_unused:
2
count_used:
1
unused:
- top
- web.nginx.install_n
used:
- web.apache.install_a
dev:
----------
count_all:
0
count_unused:
0
count_used:
0
unused:
used:
prod:
----------
count_all:
0
count_unused:
0
count_used:
0
unused:
used:
test:
----------
count_all:
0
count_unused:
0
count_used:
0
unused:
used:
state.show_top
返回minion将用于highstate的顶级数据
[root@master ~]# salt 'master' state.show_top
master:
----------
base:
- web.apache.install_a
state.top
执行指定的top file,而不是默认的
[root@master ~]# salt 'master' state.top top.sls
master:
----------
ID: apache-install
Function: pkg.installed
Name: httpd
Result: True
Comment: The following packages were installed/updated: httpd
Started: 15:28:41.501317
Duration: 14118.044 ms
Changes:
----------
apr:
----------
new:
1.6.3-11.el8
old:
apr-util:
----------
new:
1.6.1-6.el8
old:
apr-util-bdb:
----------
new:
1.6.1-6.el8
old:
apr-util-openssl:
----------
new:
1.6.1-6.el8
old:
centos-logos-httpd:
----------
new:
85.8-1.el8
old:
httpd:
----------
new:
2.4.37-39.module_el8.4.0+950+0577e6ac.1
old:
httpd-filesystem:
----------
new:
2.4.37-39.module_el8.4.0+950+0577e6ac.1
old:
httpd-tools:
----------
new:
2.4.37-39.module_el8.4.0+950+0577e6ac.1
old:
mailcap:
----------
new:
2.1.48-3.el8
old:
mod_http2:
----------
new:
1.15.7-3.module_el8.4.0+778+c970deab
old:
----------
ID: apache-service
Function: service.running
Name: httpd
Result: True
Comment: Service httpd has been enabled, and is running
Started: 15:28:55.637956
Duration: 1854.874 ms
Changes:
----------
httpd:
True
Summary for master
------------
Succeeded: 2 (changed=2)
Failed: 0
------------
Total states run: 2
Total run time: 15.973 s
state.show_sls
显示 master 上特定sls或sls文件列表中的状态数据
[root@master ~]# salt 'master' state.show_sls web.nginx.install_n
master:
----------
nginx-install:
----------
__env__:
base
__sls__:
web.nginx.install_n
pkg:
|_
----------
name:
nginx
- installed
|_
----------
order:
10000
nginx-service:
----------
__env__:
base
__sls__:
web.nginx.install_n
service:
|_
----------
name:
nginx
|_
----------
enable:
True
- running
|_
----------
order:
10001
User模块
语法:
CLI Example:
salt '*' user.add name <uid> <gid> <groups> <home> <shell>
user.add
创建一个用户
[root@master ~]# salt 'master' user.add name=zhoujielun
master:
True
//验证
[root@master ~]# salt 'master' cmd.run 'id zhoujielun'
master:
uid=1000(zhoujielun) gid=1000(zhoujielun) groups=1000(zhoujielun)
user.chfullname
更改用户描述
[root@master ~]# salt 'master' user.chfullname zhoujielun 'liuyifei'
master:
True
user.chgid
修改用户Gid
//创建用户
[root@master ~]# salt 'master' user.add name=liuyifei
master:
True
[root@master ~]# salt 'master' cmd.run 'id liuyifei'
master:
uid=1001(liuyifei) gid=1001(liuyifei) groups=1001(liuyifei)
//修改用户gid
[root@master ~]# salt 'master' user.chgid 'liuyifei' 999
master:
True
[root@master ~]# salt 'master' cmd.run 'id liuyifei'
master:
uid=1001(liuyifei) gid=999(input) groups=999(input)
注意:修改组GID之前得先有这个组
user.chuid
修改用户UID
[root@master ~]# salt 'master' user.chuid liuyifei 1201
master:
True
[root@master ~]# salt 'master' cmd.run 'id liuyifei'
master:
uid=1201(liuyifei) gid=999(input) groups=999(input)
user.chgroups
添加附属组
[root@master ~]# salt 'master' user.chgroups liuyifei root,zhoujielun Ture
master:
True
[root@master ~]# salt 'master' cmd.run 'id liuyifei '
master:
uid=1201(liuyifei) gid=999(input) groups=999(input),1000(zhoujielun),0(root)
user.chhome
修改用户的家目录
[root@master ~]# salt 'master' user.chhome zhoujielun /home/users/zhoujielun True
master:
True
user.list_groups
返回指定用户所属的组列表
[root@master ~]# salt 'master' user.list_groups liuyifei
master:
- input
- root
- zhoujielun
user.list_users
返回所有用户的列表
[root@master ~]# salt 'master' user.list_users
master:
- adm
- apache
- bin
- chrony
- daemon
- dbus
- ftp
- games
- halt
- liuyifei
- lp
- mail
- nobody
- operator
- polkitd
- rngd
- root
- shutdown
- sshd
- sssd
- sync
- systemd-coredump
- systemd-resolve
- tss
- unbound
- zhoujielun
user.rename
修改用户名
[root@master ~]# salt 'master' user.rename zhoujielun xym
master:
False
[root@master ~]# salt 'master' cmd.run 'id xym'
master:
uid=1000(xym) gid=1000(zhoujielun) groups=1000(zhoujielun)
user.info
返回用户详细信息
[root@master ~]# salt 'master' user.info liuyifei
master:
----------
fullname:
gid:
999
groups:
- input
- root
- zhoujielun
home:
/home/liuyifei
homephone:
name:
liuyifei
other:
passwd:
x
roomnumber:
shell:
/bin/bash
uid:
1201
workphone:
user.delete
删除用户
[root@master ~]# salt 'master' user.delete xym remove=True force=True (强制)
master:
True
[root@master ~]# salt 'master' cmd.run 'id xym '
master:
id: 'xym': no such user
ERROR: Minions returned with non-zero exit code
salt-cp 命令
salt-cp能够很方便的把 master 上的文件批量传到 minion上
[root@master ~]# ls /opt/ //查看master端的文件
test
[root@master ~]# salt '*' cmd.run 'ls /usr/src/' //查看各个minion目录下文件
node3:
debug
kernels
node2:
debug
kernels
master:
debug
kernels
[root@master ~]# salt-cp '*' /opt/test /usr/src/ 将test文件传输到minion端
master:
----------
/usr/src/test:
True
node2:
----------
/usr/src/test:
True
node3:
----------
/usr/src/test:
True
[root@master ~]# salt '*' cmd.run 'ls /usr/src' //使用cmd模块查看目标目录
node3:
debug
kernels
test
node2:
debug
kernels
test
master:
debug
kernels
test
#拷贝多个文件到目标主机的/usr/src目录下
[root@master ~]# salt-cp '*' /etc/passwd /etc/group /usr/src
master:
----------
/usr/src/group:
True
/usr/src/passwd:
True
node2:
----------
/usr/src/group:
True
/usr/src/passwd:
True
node3:
----------
/usr/src/group:
True
/usr/src/passwd:
True
[root@master ~]# salt '*' cmd.run 'ls /usr/src'
node3:
debug
group
kernels
passwd
test
master:
debug
group
kernels
passwd
test
node2:
debug
group
kernels
passwd
test
file模块
file.access
检查指定路径是否存在
[root@master ~]# salt 'node2' cmd.run 'ls /usr/src' //查看指定主机中所存在的文件
node2:
debug
group
kernels
passwd
test
[root@master ~]# salt 'node2' file.access /usr/src/passwd f
node2:
True
[root@master ~]# salt '*' file.access /usr/src/xu f
node2:
False
检查指定文件的权限信息
[root@master ~]# salt 'node2' cmd.run 'ls -l /usr/src/'
node2:
total 8
drwxr-xr-x. 2 root root 6 Aug 12 2018 debug
-rw-r--r-- 1 root root 578 Nov 4 14:54 group
drwxr-xr-x. 2 root root 6 Aug 12 2018 kernels
-rw-r--r-- 1 root root 1253 Nov 4 14:54 passwd
-rw-r--r-- 1 root root 0 Nov 4 14:29 test
[root@master ~]# salt 'node2' file.access /usr/src/passwd r #是否有读权限
node2:
True
[root@master ~]# salt 'node2' file.access /usr/src/passwd w #是否有写权限
node2:
True
[root@master ~]# salt 'node2' file.access /usr/src/passwd x #是否有执行权限
node2:
False
file.append
往一个文件里追加内容,若此文件不存在则会报异常
# 创建一个文件
[root@master ~]# touch xu.sh
[root@master ~]# chmod +x xu.sh
[root@master ~]# ls
anaconda-ks.cfg xu.sh
[root@master ~]# salt 'master' cmd.run 'ls -l /root/xu.sh' //查看文件权限
master:
-rwxr-xr-x 1 root root 0 Nov 4 15:08 /root/xu.sh
[root@master ~]# salt 'master' file.append /root/xu.sh "hello wuyifan" "hh" "xx" //追加内容
master:
Wrote 3 lines to "/root/xu.sh"
[root@master ~]# salt 'master' cmd.run 'ls -l /root/xu.sh'
master:
-rwxr-xr-x 1 root root 40 Nov 4 15:13 /root/xu.sh
[root@master ~]# salt 'master' cmd.run 'cat /root/xu.sh' //查看内容
master:
hello wuyifan
hh
xx
hello wuyifan
hh
xx
file.basename
获取指定路径的基名
[root@master ~]# salt 'master' file.basename '/root/xu'
master:
xu
file.check_hash
检查指定的文件与hash字符串是否匹配,匹配则返回 True 否则返回 False
[root@master ~]# salt 'master' cmd.run 'md5sum /etc/passwd'
master:
35166216435a1218838614b0e3be5dee /etc/passwd
[root@master ~]# salt 'master' file.check_hash /etc/passwd 35166216435a1218838614b0e3be5dee
master:
True
file.chattr
修改指定文件的属性
属性 | 对文件的意义 | 对目录的意义 |
---|---|---|
a | 只允许在这个文件之后追加数据 不允许任何进程覆盖或截断这个文件 | 只允许在这个目录下建立和修改文件 而不允许删除任何文件 |
i | 不允许对这个文件进行任何的修改 不能删除、更改、移动 | 任何的进程只能修改目录之下的文件 不允许建立和删除文件 |
给指定文件添加属性
[root@master ~]# salt 'master' cmd.run 'lsattr /root'
master:
-------------------- /root/anaconda-ks.cfg
-------------------- /root/xu.sh
[root@master ~]# salt 'master' file.chattr /root/xu.sh operator=add attributes=ai
master:
True
[root@master ~]# salt 'master' cmd.run 'lsattr /root'
master:
-------------------- /root/anaconda-ks.cfg
----ia-------------- /root/xu.sh
给指定文件去除属性
[root@master ~]# salt 'master' file.chattr /root/xu.sh operator=remove attributes=ia
master:
True
[root@master ~]# salt 'master' cmd.run 'lsattr /root'
master:
-------------------- /root/anaconda-ks.cfg
-------------------- /root/xu.sh
file.chown
设置指定文件的属主、属组信息
[root@master ~]# salt 'master' cmd.run 'ls -l /root/' //查看文件原属性
master:
total 8
-rw-------. 1 root root 1277 Sep 2 09:44 anaconda-ks.cfg
-rwxr-xr-x 1 root root 40 Nov 4 15:13 xu.sh
[root@master ~]# salt 'master' file.chown /root/xu.sh liuyifei root //修改所主
master:
None
[root@master ~]# salt 'master' cmd.run 'ls -l /root/'
master:
total 8
-rw-------. 1 root root 1277 Sep 2 09:44 anaconda-ks.cfg
-rwxr-xr-x 1 liuyifei root 40 Nov 4 15:13 xu.sh
file.copy
在远程主机上复制文件或目录
拷贝文件
[root@master ~]# salt 'node2' cmd.run 'ls -l /root/' //查看目标主机/root目录下的文件
node2:
total 4
-rw-------. 1 root root 1277 Sep 2 09:45 anaconda-ks.cfg
-rw-r--r-- 1 root root 0 Nov 4 15:49 meng.txt
[root@master ~]# salt 'node2' file.copy /root/meng.txt /root/xu.txt //将目标主机的指定文件 cp重命名
node2:
True
[root@master ~]# salt 'node2' cmd.run 'ls -l /root/' //查看
node2:
total 4
-rw-------. 1 root root 1277 Sep 2 09:45 anaconda-ks.cfg
-rw-r--r-- 1 root root 0 Nov 4 15:49 meng.txt
-rw-r--r-- 1 root root 0 Nov 4 16:01 xu.txt
覆盖并拷贝目录,将会覆盖同名文件或目录
[root@master ~]# salt 'node2' cmd.run 'ls -l /root/' //查看
node2:
total 4
-rw-------. 1 root root 1277 Sep 2 09:45 anaconda-ks.cfg
-rw-r--r-- 1 root root 0 Nov 4 15:49 meng.txt
-rw-r--r-- 1 root root 0 Nov 4 16:01 xu.txt
[root@master ~]# salt 'node2' file.copy /opt/ /root/web recurse=True
node2:
True
[root@master ~]# salt 'node2' cmd.run 'ls -l /root/'
node2:
total 4
-rw-------. 1 root root 1277 Sep 2 09:45 anaconda-ks.cfg
-rw-r--r-- 1 root root 0 Nov 4 15:49 meng.txt
drwxr-xr-x 2 root root 6 Nov 4 16:05 web
-rw-r--r-- 1 root root 0 Nov 4 16:01 xu.txt
删除目标目录中同名的文件或目录并拷贝新内容至其中
[root@master ~]# salt 'node2' cmd.run 'ls -l /root/web' //查看web目录文件 (无)
node2:
total 0
[root@master ~]# salt 'node2' cmd.run 'ls -l /usr/src' 查看/usr/src/目录文件
node2:
total 8
drwxr-xr-x. 2 root root 6 Aug 12 2018 debug
-rw-r--r-- 1 root root 578 Nov 4 14:54 group
drwxr-xr-x. 2 root root 6 Aug 12 2018 kernels
-rw-r--r-- 1 root root 1253 Nov 4 14:54 passwd
-rw-r--r-- 1 root root 0 Nov 4 14:29 test
[root@master ~]# salt 'node2' file.copy /usr/src/ /root/web/ recurse=True //在目标主机将指定目录 追加或者覆盖 目标目录 remove_existing=True
node2:
True
[root@master ~]# salt 'node2' cmd.run 'ls -l /root/web'
node2:
total 8
drwxr-xr-x. 2 root root 6 Aug 12 2018 debug
-rw-r--r-- 1 root root 578 Nov 4 14:54 group
drwxr-xr-x. 2 root root 6 Aug 12 2018 kernels
-rw-r--r-- 1 root root 1253 Nov 4 14:54 passwd
-rw-r--r-- 1 root root 0 Nov 4 14:29 test
file.ditectory_exists
判断指定目录是否存在,存在则返回 True ,否则返回 False
[root@master ~]# salt 'node2' cmd.run 'ls -l /root/'
node2:
total 4
-rw-------. 1 root root 1277 Sep 2 09:45 anaconda-ks.cfg
-rw-r--r-- 1 root root 0 Nov 4 15:49 meng.txt
drwxr-xr-x. 4 root root 73 Nov 4 14:54 web
-rw-r--r-- 1 root root 0 Nov 4 16:01 xu.txt
[root@master ~]# salt 'node2' file.directory_exists /root/abc
node2:
False
[root@master ~]# salt 'node2' file.directory_exists /root/web
node2:
True
file.diskusage
递归计算指定路径的磁盘使用情况并以字节为单位返回
[root@master ~]# salt '*' cmd.run 'du -sb /usr/src'
master:
1916 /usr/src
node2:
1916 /usr/src
node3:
51386524 /usr/src
[root@master ~]# salt '*' file.diskusage /usr/src/
master:
1831
node2:
1831
node3:
50607948
file.file_exists
判断指定文件是否存在
[root@master ~]# salt 'node2' cmd.run 'ls -l /root/'
node2:
total 4
-rw-------. 1 root root 1277 Sep 2 09:45 anaconda-ks.cfg
-rw-r--r-- 1 root root 0 Nov 4 15:49 meng.txt
drwxr-xr-x. 4 root root 73 Nov 4 14:54 web
-rw-r--r-- 1 root root 0 Nov 4 16:01 xu.txt
[root@master ~]# salt 'node2' file.file_exists /root/xu.txt
node2:
True
[root@master ~]# salt 'node2' file.file_exists /root/web
node2:
False //此处失败是因为匹配的目标是目录
file.find
类似 find 命令并返回符合指定条件的路径列表
The options include match criteria:
name = path-glob # case sensitive
iname = path-glob # case insensitive
regex = path-regex # case sensitive
iregex = path-regex # case insensitive
type = file-types # match any listed type
user = users # match any listed user
group = groups # match any listed group
size = [+-]number[size-unit] # default unit = byte
mtime = interval # modified since date
grep = regex # search file contents
and/or actions:
delete [= file-types] # default type = 'f'
exec = command [arg ...] # where {} is replaced by pathname
print [= print-opts]
and/or depth criteria:
maxdepth = maximum depth to transverse in path
mindepth = minimum depth to transverse before checking files or directories
The default action is print=path
path-glob:
* = match zero or more chars
? = match any char
[abc] = match a, b, or c
[!abc] or [^abc] = match anything except a, b, and c
[x-y] = match chars x through y
[!x-y] or [^x-y] = match anything except chars x through y
{a,b,c} = match a or b or c
path-regex: a Python Regex (regular expression) pattern to match pathnames
file-types: a string of one or more of the following:
a: all file types
b: block device
c: character device
d: directory
p: FIFO (named pipe)
f: plain file
l: symlink
s: socket
users: a space and/or comma separated list of user names and/or uids
groups: a space and/or comma separated list of group names and/or gids
size-unit:
b: bytes
k: kilobytes
m: megabytes
g: gigabytes
t: terabytes
interval:
[<num>w] [<num>d] [<num>h] [<num>m] [<num>s]
where:
w: week
d: day
h: hour
m: minute
s: second
print-opts: a comma and/or space separated list of one or more of the following:
group: group name
md5: MD5 digest of file contents
mode: file permissions (as integer)
mtime: last modification time (as time_t)
name: file basename
path: file absolute path
size: file size in bytes
type: file type
user: user name
示例:
查找目标主机中的指定 目录中 扩展名为txt且大小在10M以内的文件
[root@master ~]# salt 'node2' file.find /root/ name=\*.txt size=-10m
node2:
- /root/meng.txt
- /root/xu.txt
file.get_gid
获取指定文件的gid
[root@master ~]# salt 'node2' cmd.run 'ls -l /root/'
node2:
total 4
-rw-------. 1 root root 1277 Sep 2 09:45 anaconda-ks.cfg
-rw-r--r-- 1 root root 0 Nov 4 15:49 meng.txt
drwxr-xr-x. 4 root root 73 Nov 4 14:54 web
-rw-r--r-- 1 root root 0 Nov 4 16:01 xu.txt
[root@master ~]# salt 'node2' cmd.run 'ls -l /root/xu.txt'
node2:
-rw-r--r-- 1 root root 0 Nov 4 16:01 /root/xu.txt
[root@master ~]# salt 'node2' file.get_gid /root/xu.txt
node2:
0
file.get_group
获取指定文件的组名
[root@master ~]# salt 'node2' cmd.run 'ls -l /root/xu.txt'
node2:
-rw-r--r-- 1 root root 0 Nov 4 16:01 /root/xu.txt
[root@master ~]# salt 'node2' file.get_group /root/xu.txt
node2:
root
file.get_hash
获取指定文件的hash值,该值通过 sha256 算法得来
[root@master ~]# salt 'master' cmd.run 'sha256sum /root/xu.sh'
master:
b09df4034d1f30d16baf92cfba8fb562d622e396f6023206ac3cf7e00eaa040c /root/xu.sh
[root@master ~]# salt 'master' file.get_hash /root/xu.sh
master:
b09df4034d1f30d16baf92cfba8fb562d622e396f6023206ac3cf7e00eaa040c
file.get_mode
获取指定文件的权限,以数字方式显示
[root@master ~]# salt 'master' cmd.run 'ls -l /root/xu.sh'
master:
-rwxr-xr-x 1 liuyifei root 40 Nov 4 15:13 /root/xu.sh
[root@master ~]# salt 'master' file.get_mode /root/xu.sh
master:
0755
file.get_selinux_context
获取指定文件的 SELINUX 上下文信息
[root@master ~]# salt 'node2' cmd.run 'ls -Z /root/anaconda-ks.cfg'
node2:
system_u:object_r:admin_home_t:s0 /root/anaconda-ks.cfg
[root@master ~]# salt 'node2' file.get_selinux_context /root/anaconda-ks.cfg
node2:
system_u:object_r:admin_home_t:s0
file.get_sum
按照指定的算法计算指定文件的特征码并显示,默认使用的sha256算法。
该函数可使用的算法参数有:
- md5
- sha1
- sha224
- sha256 (default)
- sha384
- sha512
[root@master ~]# salt 'master' cmd.run 'sha256sum /root/xu.sh'
master:
b09df4034d1f30d16baf92cfba8fb562d622e396f6023206ac3cf7e00eaa040c /root/xu.sh
[root@master ~]# salt 'master' file.get_sum /root/xu.sh
master:
b09df4034d1f30d16baf92cfba8fb562d622e396f6023206ac3cf7e00eaa040c
[root@master ~]# salt 'master' cmd.run 'md5sum /root/xu.sh'
master:
8a77de6c020baf58b3448f192dd1aae1 /root/xu.sh
[root@master ~]# salt 'master' file.get_sum /root/xu.sh md5
master:
8a77de6c020baf58b3448f192dd1aae1
file.get_uid与file.get_user
获取指定文件的 uid 或 用户名
[root@master ~]# salt 'master' cmd.run 'ls -l /root/xu.sh'
master:
-rwxr-xr-x 1 liuyifei root 40 Nov 4 15:13 /root/xu.sh
[root@master ~]# salt 'master' file.get_uid /root/xu.sh
master:
1201
[root@master ~]# salt 'master' file.get_user /root/xu.sh
master:
liuyifei
file.gid_to_group
将指定的 gid 转换为组名并显示
[root@master ~]# salt 'master' user.info apache //查看目标主机指定用户详细信息
master:
----------
fullname:
Apache
gid:
48
groups:
- apache
home:
/usr/share/httpd
homephone:
name:
apache
other:
passwd:
x
roomnumber:
shell:
/sbin/nologin
uid:
48
workphone:
[root@master ~]# salt 'master' file.gid_to_group 48
master:
apache
file.group_to_gid
将指定的组名转换为 gid 并显示
[root@master ~]# salt 'master' file.group_to_gid liuyifei
master:
1001
[root@master ~]# salt 'master' file.group_to_gid apache
master:
48
file.grep
在指定文件中检索指定内容
该函数支持通配符,若在指定的路径中用通配符则必须用双引号引起来
[root@master ~]# salt 'master' file.grep /etc/sysconfig/network-scripts/ifcfg-ens160 ipaddr -- -i //省略大小写
master:
----------
pid:
328996
retcode:
0
stderr:
stdout:
IPADDR="192.168.58.120"
[root@master ~]# salt 'master' file.grep /etc/sysconfig/network-scripts/ifcfg-ens160 ipaddr -- -i -A2 //ipaddr 此行的上面两行
master:
----------
pid:
329967
retcode:
0
stderr:
stdout:
IPADDR="192.168.58.120"
PREFIX="24"
GATEWAY="192.168.58.2"
[root@master ~]# salt 'master' file.grep /etc/sysconfig/network-scripts/ifcfg-ens160 ipaddr -- -i -B2 //ipaddr 下两行
master:
----------
pid:
329604
retcode:
0
stderr:
stdout:
DEVICE="ens160"
ONBOOT="yes"
IPADDR="192.168.58.120"
[root@master ~]# salt 'master' file.grep /etc/sysconfig/network-scripts/ifcfg-ens160 ipaddr -- -i -C2 //ipaddr上下两行
master:
----------
pid:
330105
retcode:
0
stderr:
stdout:
DEVICE="ens160"
ONBOOT="yes"
IPADDR="192.168.58.120"
PREFIX="24"
GATEWAY="192.168.58.2"
file.is_blkdev
判断指定的文件是否是块设备文件
[root@master ~]# salt '*' cmd.run 'ls -l /dev/sr0'
master:
brw-rw---- 1 root cdrom 11, 0 Nov 4 14:15 /dev/sr0
node3:
brw-rw---- 1 root cdrom 11, 0 Nov 4 14:16 /dev/sr0
node2:
brw-rw---- 1 root cdrom 11, 0 Nov 4 14:15 /dev/sr0
[root@master ~]# salt '*' file.is_blkdev /dev/sr0
node2:
True
node3:
True
master:
True
file.lsattr
检查并显示出指定文件的属性信息
[root@master ~]# salt 'master' cmd.run 'lsattr /root/xu.sh'
master:
-------------------- /root/xu.sh
[root@master ~]# salt 'master' cmd.run 'chattr +i /root/xu.sh'
master:
[root@master ~]# salt 'master' cmd.run 'lsattr /root/xu.sh'
master:
----i--------------- /root/xu.sh
[root@master ~]# salt 'master' file.lsattr /root/xu.sh
master:
----------
/root/xu.sh:
- i
file.mkdir
创建目录并设置属主、属组及权限
[root@master ~]# salt 'master' cmd.run 'ls -l /root'
master:
total 8
-rw-------. 1 root root 1277 Sep 2 09:44 anaconda-ks.cfg
-rwxr-xr-x 1 liuyifei root 40 Nov 4 15:13 xu.sh
[root@master ~]# salt 'master' file.mkdir /root/bbc
master:
True
[root@master ~]# salt 'master' cmd.run 'ls -l /root'
master:
total 8
-rw-------. 1 root root 1277 Sep 2 09:44 anaconda-ks.cfg
drwxr-xr-x 2 root root 6 Nov 4 17:22 bbc
-rwxr-xr-x 1 liuyifei root 40 Nov 4 15:13 xu.sh
[root@master ~]# salt 'master' file.mkdir /root/buff apache apache 456
master:
True
[root@master ~]# salt 'master' cmd.run 'ls -l /root'
master:
total 8
-rw-------. 1 root root 1277 Sep 2 09:44 anaconda-ks.cfg
drwxr-xr-x 2 root root 6 Nov 4 17:22 bbc
dr--r-xrw- 2 apache apache 6 Nov 4 17:24 buff
-rwxr-xr-x 1 liuyifei root 40 Nov 4 15:13 xu.sh
file.move
移动或重命名
[root@master ~]# salt 'master' cmd.run 'ls -l /root' //查看目录下的文件
master:
total 16
-rw-------. 1 root root 1277 Sep 2 09:44 anaconda-ks.cfg
drwxr-xr-x 2 root root 6 Nov 4 17:22 bbc
dr--r-xrw- 2 apache apache 6 Nov 4 17:24 buff
-rwxr-xr-x 1 root root 40 Nov 4 15:13 web
-rwxr-xr-x 1 root root 40 Nov 4 15:13 x.sh
-rwxr-xr-x 1 liuyifei root 40 Nov 4 15:13 xu.sh
[root@master ~]# salt 'master' file.move /root/web /root/me //对目标主机的指定目录进行重命名
master:
----------
comment:
'/root/web' moved to '/root/me'
result:
True
[root@master ~]# salt 'master' cmd.run 'ls -l /root' //检验
master:
total 16
-rw-------. 1 root root 1277 Sep 2 09:44 anaconda-ks.cfg
drwxr-xr-x 2 root root 6 Nov 4 17:22 bbc
dr--r-xrw- 2 apache apache 6 Nov 4 17:24 buff
-rwxr-xr-x 1 root root 40 Nov 4 15:13 me
-rwxr-xr-x 1 root root 40 Nov 4 15:13 x.sh
-rwxr-xr-x 1 liuyifei root 40 Nov 4 15:13 xu.sh
[root@master ~]#
#移动
[root@master ~]# salt 'master' cmd.run 'ls -l /opt'
master:
total 0
-rw-r--r-- 1 root root 0 Nov 4 09:44 test
[root@master ~]# salt 'master' cmd.run 'ls -l /usr/src'
master:
total 8
drwxr-xr-x. 2 root root 6 Aug 12 2018 debug
-rw-r--r-- 1 root root 578 Nov 4 14:54 group
drwxr-xr-x. 2 root root 6 Aug 12 2018 kernels
-rw-r--r-- 1 root root 1253 Nov 4 14:54 passwd
-rw-r--r-- 1 root root 0 Nov 4 14:29 test
[root@master ~]# salt 'master' file.move /usr/src/ /opt/
master:
----------
comment:
'/usr/src/' moved to '/opt/'
result:
True
[root@master ~]# salt 'master' cmd.run 'ls -l /opt'
master:
total 0
drwxr-xr-x. 4 root root 73 Nov 4 14:54 src
-rw-r--r-- 1 root root 0 Nov 4 09:44 test
file.prepend
把文本插入指定文件的开头
[root@master ~]# salt 'master' cmd.run 'ls -l /root'
master:
total 16
-rw-------. 1 root root 1277 Sep 2 09:44 anaconda-ks.cfg
drwxr-xr-x 2 root root 6 Nov 4 17:22 bbc
dr--r-xrw- 2 apache apache 6 Nov 4 17:24 buff
-rwxr-xr-x 1 root root 40 Nov 4 15:13 me
-rwxr-xr-x 1 root root 40 Nov 4 15:13 x.sh
-rwxr-xr-x 1 liuyifei root 40 Nov 4 15:13 xu.sh
[root@master ~]# salt 'master' cmd.run 'cat /root/x.sh'
master:
hello wuyifan
hh
xx
hello wuyifan
hh
xx
[root@master ~]# salt 'master' file.prepend /root/x.sh 'fast' 'last'
master:
Prepended 2 lines to "/root/x.sh"
[root@master ~]# salt 'master' cmd.run 'cat /root/x.sh'
master:
fast
last
hello wuyifan
hh
xx
hello wuyifan
hh
xx
file.sed
修改文本文件的内容
[root@master ~]# salt 'master' cmd.run 'cat /root/x.sh'
master:
fast
last
hello wuyifan
hh
xx
hello wuyifan
hh
xx
[root@master ~]# salt 'master' file.sed /root/x.sh 'last' 'name'
master:
----------
pid:
33795
retcode:
0
stderr:
stdout:
[root@master ~]# salt 'master' cmd.run 'cat /root/x.sh'
master:
fast
name
hello wuyifan
hh
xx
hello wuyifan
hh
xx
file.read
读取文件内容
[root@master ~]# salt 'master' cmd.run 'cat /root/xu.sh'
master:
hello wuyifan
hh
xx
hello wuyifan
hh
xx
[root@master ~]# salt 'master' file.read /root/xu.sh
master:
hello wuyifan
hh
xx
hello wuyifan
hh
xx
file.readdir
列出指定目录下的所有文件或目录,包括隐藏文件
[root@master ~]# salt 'master' file.touch /root/.pass.conf
master:
True
[root@master ~]# salt 'master' cmd.run 'ls -l /root'
master:
total 20
-rw-------. 1 root root 1277 Sep 2 09:44 anaconda-ks.cfg
drwxr-xr-x 2 root root 6 Nov 4 17:22 bbc
dr--r-xrw- 2 apache apache 6 Nov 4 17:24 buff
-rwxr-xr-x 1 root root 40 Nov 4 15:13 me
-rwxr-xr-x 1 root root 50 Nov 5 09:31 x.sh
-rwxr-xr-x 1 root root 50 Nov 5 09:30 x.sh.bak
-rwxr-xr-x 1 liuyifei root 40 Nov 4 15:13 xu.sh
[root@master ~]# salt 'master' file.readdir /root/
master:
- .
- ..
- .bash_logout
- .bash_profile
- .bashrc
- .cshrc
- .tcshrc
- anaconda-ks.cfg
- .config
- .bash_history
- xu.sh
- bbc
- buff
- me
- .viminfo
- x.sh.bak
- x.sh
- .pass.conf
file.remove
删除指定的文件或目录,若给出的是目录,将递归删除
[root@master ~]# salt 'master' cmd.run 'ls -l /root'
master:
total 20
-rw-------. 1 root root 1277 Sep 2 09:44 anaconda-ks.cfg
drwxr-xr-x 2 root root 6 Nov 4 17:22 bbc
dr--r-xrw- 2 apache apache 6 Nov 4 17:24 buff
-rwxr-xr-x 1 root root 40 Nov 4 15:13 me
-rwxr-xr-x 1 root root 50 Nov 5 09:31 x.sh
-rwxr-xr-x 1 root root 50 Nov 5 09:30 x.sh.bak
-rwxr-xr-x 1 liuyifei root 40 Nov 4 15:13 xu.sh
[root@master ~]# salt 'master' file.remove /root/x.sh
master:
True
[root@master ~]# salt 'master' file.remove /root/bbc/
master:
True
[root@master ~]# salt 'master' cmd.run 'ls -l /root'
master:
total 16
-rw-------. 1 root root 1277 Sep 2 09:44 anaconda-ks.cfg
dr--r-xrw- 2 apache apache 6 Nov 4 17:24 buff
-rwxr-xr-x 1 root root 40 Nov 4 15:13 me
-rwxr-xr-x 1 root root 50 Nov 5 09:30 x.sh.bak
-rwxr-xr-x 1 liuyifei root 40 Nov 4 15:13 xu.sh
file.rename
重命名文件或目录
[root@master ~]# salt 'master' cmd.run 'ls -l /root'
master:
total 16
-rw-------. 1 root root 1277 Sep 2 09:44 anaconda-ks.cfg
dr--r-xrw- 2 apache apache 6 Nov 4 17:24 buff
-rwxr-xr-x 1 root root 40 Nov 4 15:13 me
-rwxr-xr-x 1 root root 50 Nov 5 09:30 x.sh.bak
-rwxr-xr-x 1 liuyifei root 40 Nov 4 15:13 xu.sh
[root@master ~]# salt 'master' file.rename /root/me /root/my
master:
True
[root@master ~]# salt 'master' cmd.run 'ls -l /root'
master:
total 16
-rw-------. 1 root root 1277 Sep 2 09:44 anaconda-ks.cfg
dr--r-xrw- 2 apache apache 6 Nov 4 17:24 buff
-rwxr-xr-x 1 root root 40 Nov 4 15:13 my
-rwxr-xr-x 1 root root 50 Nov 5 09:30 x.sh.bak
-rwxr-xr-x 1 liuyifei root 40 Nov 4 15:13 xu.sh
file.set_mode
给指定文件设置权限
[root@master ~]# salt 'master' cmd.run 'ls -l /root'
master:
total 16
-rw-------. 1 root root 1277 Sep 2 09:44 anaconda-ks.cfg
dr--r-xrw- 2 apache apache 6 Nov 4 17:24 buff
-rwxr-xr-x 1 root root 40 Nov 4 15:13 my
-rwxr-xr-x 1 root root 50 Nov 5 09:30 x.sh.bak
-rwxr-xr-x 1 liuyifei root 40 Nov 4 15:13 xu.sh
[root@master ~]# salt 'master' file.set_mode /root/buff/ 2644
master:
2644
[root@master ~]# salt 'master' cmd.run 'ls -l /root'
master:
total 16
-rw-------. 1 root root 1277 Sep 2 09:44 anaconda-ks.cfg
drw-r-Sr-- 2 apache apache 6 Nov 4 17:24 buff
-rwxr-xr-x 1 root root 40 Nov 4 15:13 my
-rwxr-xr-x 1 root root 50 Nov 5 09:30 x.sh.bak
-rwxr-xr-x 1 liuyifei root 40 Nov 4 15:13 xu.sh
file.symlink
给指定的文件创建软链接
[root@master ~]# salt 'master' cmd.run 'ls -l /root'
master:
total 16
-rw-------. 1 root root 1277 Sep 2 09:44 anaconda-ks.cfg
drw-r-Sr-- 2 apache apache 6 Nov 4 17:24 buff
-rwxr-xr-x 1 root root 40 Nov 4 15:13 my
-rwxr-xr-x 1 root root 50 Nov 5 09:30 x.sh.bak
-rwxr-xr-x 1 liuyifei root 40 Nov 4 15:13 xu.sh
[root@master ~]# salt 'master' file.symlink /root/buff/ /opt/b
master:
True
[root@master ~]# salt 'master' cmd.run 'root;ls -l /opt'
master:
/bin/sh: root: command not found
total 0
lrwxrwxrwx 1 root root 11 Nov 5 09:44 b -> /root/buff/
drwxr-xr-x. 4 root root 73 Nov 4 14:54 src
-rw-r--r-- 1 root root 0 Nov 4 09:44 test
file.touch
创建空文件或更新时间戳
[root@master ~]# salt 'master' cmd.run 'root;ls -l /opt'
master:
/bin/sh: root: command not found
total 0
lrwxrwxrwx 1 root root 11 Nov 5 09:44 b -> /root/buff/
drwxr-xr-x. 4 root root 73 Nov 4 14:54 src
-rw-r--r-- 1 root root 0 Nov 4 09:44 test
[root@master ~]# salt 'master' file.touch /opt/ok
master:
True
[root@master ~]# salt 'master' file.touch /opt/test
master:
True
[root@master ~]# salt 'master' cmd.run 'root;ls -l /opt'
master:
/bin/sh: root: command not found
total 0
lrwxrwxrwx 1 root root 11 Nov 5 09:44 b -> /root/buff/
-rw-r--r-- 1 root root 0 Nov 5 09:46 ok
drwxr-xr-x. 4 root root 73 Nov 4 14:54 src
-rw-r--r-- 1 root root 0 Nov 5 09:49 test
file.uid_to_user
将指定的 uid 转换成用户名显示出来
[root@master ~]# salt 'master' file.uid_to_user 1201
master:
liuyifei
[root@master ~]# salt 'master' file.uid_to_user 0
master:
root
file.user_to_uid
将指定的用户转换成 uid 并显示出来
[root@master ~]# salt 'master' file.user_to_uid apache
master:
48
[root@master ~]# salt 'master' file.user_to_uid sync
master:
5
file.write
往一个指定的文件里覆盖写入指定内容
[root@master ~]# salt 'master' cmd.run 'cat /root/redhat.txt'
master:
bug
[root@master ~]# salt '*' file.write /root/redhat.txt "debug" "imges" "hubei"
master:
Wrote 3 lines to "/root/redhat.txt"
node3:
Wrote 3 lines to "/root/redhat.txt"
node2:
Wrote 3 lines to "/root/redhat.txt"
[root@master ~]# salt 'master' cmd.run 'cat /root/redhat.txt'
master:
debug
imges
hubei