[关闭]
@nalan90 2017-08-31T17:53:12.000000Z 字数 16050 阅读 883

SaltStack

自动化运维

基本概念与工作原理

SaltStack架构主要涉及到三个开源软件，分别是 Python 软件集，SaltStack 软件集和 ZeroMQ 消息队列软件。

SaltStack 客户端（Minion）在启动时，会自动生成一套密钥，包含私钥和公钥。之后将公钥发送给服务器端，服务器端验证并接受公钥，以此来建立可靠且加密的通信连接。同时通过消息队列 ZeroMQ 在客户端与服务端之间建立消息发布连接。具体通信原理图。

image_1boo9cl641j7819vp1gea1tbfirg9.png-49kB

专业术语说明：

image_1boo9f0hd16ts141a1nqh12741bemm.png-58.3kB

原理图说明：

架构设计

image_1boo9h74jmpfgig1ff3hm1qrh13.png-57.3kB

说明：

环境安装

预安装准备

  1. ## 开启防火墙
  2. [root@master zhangshuang]# firewall-cmd --permanent --zone=public --add-port=4505-4506/tcp
  3. success
  4. [root@master zhangshuang]# firewall-cmd --reload
  5. success
  7. ## 安装yum源
  8. [root@master zhangshuang]# yum install https://repo.saltstack.com/yum/redhat/salt-repo-latest-2.el7.noarch.rpm

Master 角色的安装

  1. ## 安装salt-master
  2. [root@master zhangshuang]# yum install -y salt-master
  4. ## 设置开机自启salt-master
  5. [root@master zhangshuang]# systemctl enable salt-master
  6. [root@master zhangshuang]# systemctl start salt-master
  8. ## 查看端口连接
  10. [root@master zhangshuang]# netstat -anltp
  11. Active Internet connections (servers and established)
  12. Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
  13. tcp        0      0 172.16.1.162:4505       172.16.1.165:58376      ESTABLISHED 22000/python
  14. tcp        0      0 172.16.1.162:4505       172.16.1.164:42518      ESTABLISHED 22000/python
  15. tcp        0      0 172.16.1.162:4506       172.16.1.165:41972      ESTABLISHED 22016/python
  16. tcp        0      0 172.16.1.162:4506       172.16.1.161:52710      ESTABLISHED 22016/python
  17. tcp        0      0 172.16.1.162:4506       172.16.1.163:39124      ESTABLISHED 22016/python
  18. tcp        0      0 172.16.1.162:4505       172.16.1.163:37832      ESTABLISHED 22000/python
  19. tcp        0      0 172.16.1.162:4506       172.16.1.164:60848      ESTABLISHED 22016/python
  20. tcp        0      0 172.16.1.162:4505       172.16.1.161:50256      ESTABLISHED 22000/python

Minion 角色的安装

  1. ## 安装salt-minion
  2. [root@slave1 zhangshuang]# yum install -y salt-minion
  4. ## 修改Master主机地址
  5. [root@slave1 zhangshuang]# vim /etc/salt/minion
  6. master: 172.16.1.162
  8. ## 设置开机自启salt-minion
  9. [root@slave1 zhangshuang]# systemctl enable salt-minion
  10. [root@slave1 zhangshuang]# systemctl start salt-minion
  12. [root@slave1 zhangshuang]# netstat -anltp
  13. Active Internet connections (servers and established)
  14. Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
  15. tcp        0      0 172.16.1.163:39124      172.16.1.162:4506       ESTABLISHED 20560/python
  16. tcp        0      0 172.16.1.163:37832      172.16.1.162:4505       ESTABLISHED 20560/python
授权认证
  1. ## 接受所有minions的认证请求
  2. [root@master zhangshuang]# salt-key -A
  4. ## 查看所有minions的认证列表
  5. [root@master zhangshuang]# salt-key -L
  6. Accepted Keys:
  7. dev-161
  8. slave2
  9. slave3
  10. slave1
  11. Denied Keys:
  12. Unaccepted Keys:
  13. Rejected Keys:
Grains收集系统信息
  1. ## 查看grains模块的所有functions
  2. [root@master zhangshuang]# salt dev-161 sys.list_functions grains
  3. dev-161:
  4.     - grains.append
  5.     - grains.delval
  6.     - grains.filter_by
  7.     - grains.get
  8.     - grains.get_or_set_hash
  9.     - grains.has_value
  10.     - grains.item
  11.     - grains.items
  12.     - grains.ls
  13.     - grains.remove
  14.     - grains.setval
  15.     - grains.setvals
  17. ----------------------------------------
  19. ## 查看grains可以收集的所有系统项
  20. [root@master zhangshuang]# salt dev-161 grains.ls
  21. dev-161:
  22.     - SSDs
  23.     - biosreleasedate
  24.     - biosversion
  25.     - cpu_flags
  26.    .....
  27.     - os
  28.     - os_family
  29.     - osarch
  30.     - oscodename
  31.     - osfinger
  32.     - osfullname
  33.     - osmajorrelease
  34.     - osrelease
  35.     - osrelease_info
  37. ----------------------------------------
  39. ## 查看所有项的具体内容
  40. [root@master zhangshuang]# salt dev-161 grains.items
  42. ----------------------------------------
  44. ## 查看提定项的信息
  45. [root@master zhangshuang]# salt dev-161 grains.item os
  46. dev-161:
  47.     ----------
  48.     os:
  49.         CentOS
  51. ----------------------------------------
  53. ## 查看minions IP
  54. [root@master zhangshuang]# salt '*' grains.item ipv4
  55. slave2:
  56.     ----------
  57.     ipv4:
  58.         - 127.0.0.1
  59.         - 172.16.1.164
  60.         - 172.20.0.1
  61. dev-161:
  62.     ----------
  63.     ipv4:
  64.         - 127.0.0.1
  65.         - 172.16.1.161
  66.         - 172.20.0.1
  67. slave3:
  68.     ----------
  69.     ipv4:
  70.         - 127.0.0.1
  71.         - 172.16.1.165
  72.         - 172.20.0.1
  73. slave1:
  74.     ----------
  75.     ipv4:
  76.         - 127.0.0.1
  77.         - 172.16.1.163
  78.         - 172.20.0.1
minions名称匹配
  1. ## 全局匹配
  2. root@master zhangshuang]# salt '*' test.ping
  3. slave2:
  4.     True
  5. slave1:
  6.     True
  7. dev-161:
  8.     True
  9. slave3:
  10.     True
  11. [root@master zhangshuang]# salt dev-161 test.ping
  12. dev-161:
  13.     True
  14. [root@master zhangshuang]# salt '*-161' test.ping
  15. dev-161:
  16.     True
  18. [root@master zhangshuang]# salt 'dev-???' test.ping
  19. dev-161:
  20.     True
  22. [root@master zhangshuang]# salt 'slave[0-9]' test.ping
  23. slave1:
  24.     True
  25. slave2:
  26.     True
  27. slave3:
  28.     True
  30. ----------------------------------------
  32. ## 正则匹配
  34. [root@master zhangshuang]# salt -E 'dev' test.ping
  35. dev-161:
  36.     True
  38. [root@master zhangshuang]# salt -E 'slave' test.ping
  39. slave1:
  40.     True
  41. slave2:
  42.     True
  43. slave3:
  44.     True
  46. [root@master zhangshuang]# salt -E ".*" test.ping
  47. slave2:
  48.     True
  49. slave1:
  50.     True
  51. dev-161:
  52.     True
  53. slave3:
  54.     True
  56. [root@master zhangshuang]# salt -E 'dev-[0-9]{3}' test.ping
  57. dev-161:
  58.     True
  59. ----------------------------------------
  61. ## 列表匹配
  62. [root@master zhangshuang]# salt -L 'slave1,slave2,slave3' test.ping
  63. slave1:
  64.     True
  65. slave2:
  66.     True
  67. slave3:
  68.     True
  70. ## 配置/etc/salt/master nodegroups字段，暂未配置
  71. [root@master zhangshuang]# salt -N minions test.ping
  72. Node group minions unavailable in /etc/salt/master
常用命令
  1. ## 列出dev-161 minion的所有模块
  2. [root@master zhangshuang]# salt dev-161 sys.list_modules
  3. dev-161:
  4.     - acl
  5.     - aliases
  6.     - apache
  7.     - artifactory
  8.     ......
  9.     - xfs
  11. ## 列出dev-161 minion test module的所有function
  12. [root@master zhangshuang]# salt dev-161 sys.list_functions test
  13. dev-161:
  14.     - test.arg
  15.     - test.echo
  16.     .....
  17.     - test.version
  18.     - test.versions_report
  20. ----------------------------------------
  22. ## 查看test.ping的使用文档
  24. [root@master zhangshuang]# salt dev-161 sys.doc test.ping
  25. 'test.ping:'
  27.     Used to make sure the minion is up and responding. Not an ICMP ping.
  29.     Returns ``True``.
  31.     CLI Example:
  33.         salt '*' test.ping
  35. ----------------------------------------
  37. ## 查看所有minions的系统版本信息
  39. [root@master zhangshuang]# salt '*' cmd.run 'uname -r'
  40. slave1:
  41.     3.10.0-514.el7.x86_64
  42. dev-161:
  43.     3.10.0-514.el7.x86_64
  44. slave2:
  45.     3.10.0-514.el7.x86_64
  46. slave3:
  47.     3.10.0-514.el7.x86_64
  49. ----------------------------------------
  51. ## 包管理
  53. [root@master zhangshuang]# salt dev-161 pkg.install httpd
  54. dev-161:
  55.     ----------
  56. [root@master zhangshuang]# salt dev-161 pkg.version httpd
  57. dev-161:
  58.     2.4.6-45.el7.centos.4
  59. [root@master zhangshuang]# salt dev-161 service.status httpd
  60. dev-161:
  61.     True
  62. [root@master zhangshuang]# salt dev-161 service.stop  httpd
  63. dev-161:
  64.     True
  65. [root@master zhangshuang]# salt dev-161 service.status httpd
  66. dev-161:
  67.     False
  68. [root@master zhangshuang]# salt dev-161 pkg.remove httpd
  69. dev-161:
  70.     ----------
  71.     httpd:
  72.         ----------
  73.         new:
  74.         old:
  75.             2.4.6-45.el7.centos.4
  77. ----------------------------------------       
  79. ## 文件管理 
  81. [root@master zhangshuang]# salt dev-161 file.stats /etc/yum.conf
  82. dev-161:
  83.     ----------
  84.     atime:
  85.         1503995808.45
  86.     ctime:
  87.         1487821839.52
  88.     gid:
  89.         0
  90.     group:
  91.         root
  92.     inode:
  93.         67191933
  94.     mode:
  95.         0644
  96.     mtime:
  97.         1479223823.0
  98.     size:
  99.         970
  100.     target:
  101.         /etc/yum.conf
  102.     type:
  103.         file
  104.     uid:
  105.         0
  106.     user:
  107.         root
  109. [root@master zhangshuang]# salt dev-161 file.chown /etc/passwd root root
  110. dev-161:
  111.     None
  114. ----------------------------------------       
  116. ## 用户管理
  118. [root@master zhangshuang]# salt dev-161 user.add mysql
  119. dev-161:
  120.     True
  121. [root@master zhangshuang]# salt dev-161 cmd.run 'ls -l /home'
  122. dev-161:
  123.     total 0
  124.     drwx------. 3 gitlab-runner gitlab-runner  74 Mar  8 08:27 gitlab-runner
  125.     drwx------  5 hadoop        hadoop        137 Aug 25 09:40 hadoop
  126.     drwx------. 3          1000          1000  74 Mar  8 08:27 jenkins
  127.     drwx------  2 mysql         mysql          62 Aug 30 13:47 mysql
  128.     drwx------. 4 shensi        shensi        112 Mar 27 13:00 shensi
  129.     drwx------. 4          2004          2004 112 Mar 27 13:00 shuran
  130.     drwx------  2 mysql         mysql          62 Aug 29 17:57 test
  131.     drwx------. 5 zhangshuang   zhangshuang   147 Mar 27 13:09 zhangshuang
  132.     drwx------. 4          2007          2007 112 Mar 27 13:00 zhanxin
  133. [root@master zhangshuang]# salt dev-161 user.info mysql
  134. dev-161:
  135.     ----------
  136.     fullname:
  137.     gid:
  138.         2010
  139.     groups:
  140.         - mysql
  141.     home:
  142.         /home/mysql
  143.     homephone:
  144.     name:
  145.         mysql
  146.     passwd:
  147.         x
  148.     roomnumber:
  149.     shell:
  150.         /bin/bash
  151.     uid:
  152.         2010
  153.     workphone:
  154. [root@master zhangshuang]# salt dev-161 user.delete mysql
  155. dev-161:
  156.     True
模块管理
  1. ## 编写自定义的模块
  3. [root@master zhangshuang]# mkdir -p /srv/salt/_modules
  4. [root@master zhangshuang]# vim /srv/salt/_modules/hello.py
  5. [root@master zhangshuang]# cat /srv/salt/_modules/hello.py
  6. def world():
  7.     """
  8.     This is my first function.
  9.     CLI Example::
  10.         salt '*' hello.world
  11.     """
  12.     return 'Hello, world!'
  14. ## 推送模块至minions
  16. [root@master zhangshuang]# salt '*' saltutil.sync_modules
  17. slave1:
  18.     - modules.hello
  19. salve2:
  20.     - modules.hello
  21. dev-161:
  22.     - modules.hello
  23. salve3:
  24.     - modules.hello
  25. [root@master zhangshuang]# salt '*' hello.world
  26. salve3:
  27.     Hello, world!
  28. dev-161:
  29.     Hello, world!
  30. salve2:
  31.     Hello, world!
  32. slave1:
  33.     Hello, world!

state 模块使用

  1. [root@master salt]# salt dev-161 sys.list_functions state
  2. dev-161:
  3.     - state.apply
  4.     - state.check_request
  5.     - state.clear_cache
  6.     - state.clear_request
  7.     - state.disable
  8.     - state.enable
  9.     - state.high
  10.     - state.highstate
  11.     - state.list_disabled
  12.     - state.low
  13.     - state.pkg
  14.     - state.request
  15.     - state.run_request
  16.     - state.running
  17.     - state.show_highstate
  18.     - state.show_low_sls
  19.     - state.show_lowstate
  20.     - state.show_sls
  21.     - state.show_top
  22.     - state.single
  23.     - state.sls
  24.     - state.sls_id
  25.     - state.template
  26.     - state.template_str
  27.     - state.top
  29. ----------------------------------------       
  31. ## 编写SLS文件
  32. [root@master salt]# pwd
  33. /srv/salt
  34. [root@master salt]# vim apache.sls
  35. [root@master salt]# cat apache.sls
  36. install_httpd:
  37.   pkg.installed:
  38.     - name: httpd
  41. ## 安装httpd
  42. [root@master salt]# salt '*' state.sls apache
  43. salve2:
  44. ----------
  45.           ID: install_httpd
  46.     Function: pkg.installed
  47.         Name: httpd
  48.       Result: True
  49.      Comment: The following packages were installed/updated: httpd
  50.      Started: 14:43:44.602919
  51.     Duration: 49646.909 ms
  52.      Changes:
  53.               ----------
  54.               apr:
  55.                   ----------
  56.                   new:
  57.                       1.4.8-3.el7
  58.                   old:
  59.               apr-util:
  60.                   ----------
  61.                   new:
  62.                       1.5.2-6.el7
  63.                   old:
  64.               httpd:
  65.                   ----------
  66.                   new:
  67.                       2.4.6-45.el7.centos.4
  68.                   old:
  69.               httpd-tools:
  70.                   ----------
  71.                   new:
  72.                       2.4.6-45.el7.centos.4
  73.                   old:
  74.               mailcap:
  75.                   ----------
  76.                   new:
  77.                       2.1.41-2.el7
  78.                   old:
  80. Summary
  81. ------------
  82. Succeeded: 1 (changed=1)
  83. Failed:    0
  84. ------------
  85. Total states run:     1
  87. ----------------------------------------       
  89. ## 查看所有state模块
  91. [root@master salt]# salt dev-161 sys.list_state_modules
  92. dev-161:
  93.     - acl
  94.     - alias
  95.     - alternatives
  96.     - apache
  97.     ......
  98.     - winrepo
  100. [root@master salt]# salt dev-161 sys.list_state_functions pkg
  101. dev-161:
  102.     - pkg.installed
  103.     - pkg.latest
  104.     - pkg.mod_aggregate
  105.     - pkg.mod_init
  106.     - pkg.purged
  107.     - pkg.removed
  108.     - pkg.uptodate
  110. ----------------------------------------       
  112. [root@master ~]# tree /srv/salt/
  113. /srv/salt/
  114. ├── apache.sls
  115. ├── httpd.conf
  116. └── _modules
  117.     ├── hello.py
  118.     └── prank.py
  120. 1 directory, 4 files
  122. [root@master ~]# tree /srv/salt/
  123. /srv/salt/
  124. ├── apache.sls
  125. ├── httpd.conf
  126. └── _modules
  127.     ├── hello.py
  128.     └── prank.py
  130. 1 directory, 4 files
  132. ## apache.sls内容
  134. [root@master ~]# cat /srv/salt/apache.sls
  135. install_httpd:
  136.   pkg.installed:
  137.     - name: httpd
  139. httpd_running:
  140.   service.running:
  141.     - name: httpd
  142.     - enable: True
  143.     - require:
  144.       - pkg: install_httpd
  145.     - watch:
  146.       - file: httpd_conf
  148. httpd_conf:
  149.   file.managed:
  150.     - name: /etc/httpd/conf/httpd.conf
  151.     - source: salt://httpd.conf
  152.     - user: root
  153.     - group: root
  154.     - mode: 600
  156. ----------------------------------------       
  158. ## 执行SLS文件命令
  160. [root@master ~]# salt dev-161 state.sls apache
  161. dev-161:
  162. ----------
  163.           ID: install_httpd
  164.     Function: pkg.installed
  165.         Name: httpd
  166.       Result: True
  167.      Comment: Package httpd is already installed.
  168.      Started: 15:03:07.779195
  169.     Duration: 547.207 ms
  170.      Changes:
  171. ----------
  172.           ID: httpd_conf
  173.     Function: file.managed
  174.         Name: /etc/httpd/conf/httpd.conf
  175.       Result: True
  176.      Comment: File /etc/httpd/conf/httpd.conf updated
  177.      Started: 15:03:08.328355
  178.     Duration: 3.764 ms
  179.      Changes:
  180.               ----------
  181.               mode:
  182.                   0600
  183. ----------
  184.           ID: httpd_running
  185.     Function: service.running
  186.         Name: httpd
  187.       Result: True
  188.      Comment: Service httpd has been enabled, and is running
  189.      Started: 15:03:08.332237
  190.     Duration: 527.233 ms
  191.      Changes:
  192.               ----------
  193.               httpd:
  194.                   True
  196. Summary
  197. ------------
  198. Succeeded: 3 (changed=2)
  199. Failed:    0
  200. ------------
  201. Total states run:     3
state 实例
  1. ## 安装Nginx并启动
  3. ## SLS文件
  4. [root@master ~]# cat /srv/salt/nginx/init.sls
  5. [root@master ~]# cat /srv/salt/nginx/init.sls
  6. nginx:
  7.   pkg:
  8.     - installed
  9.   service:
  10.     - running
  11.     - enable: True
  12.     - user: nginx
  13.     - require:
  14.       - user: nginx
  15.     - watch:
  16.       - file: /etc/nginx/nginx.conf
  17.       - file: /etc/nginx/sites-enabled/default
  18.   user.present:
  19.     - home: /home/nginx
  20.     - shell: /bin/bash
  21.     - gid: nginx
  22.     - require:
  23.       - group: nginx
  24.   group.present:
  25.     - require:
  26.       - pkg: nginx
  28. configure_nginx:
  29.   file.managed:
  30.     - name: /etc/nginx/nginx.conf
  31.     - source: salt://nginx/files/nginx.conf
  32.     - user: nginx
  33.     - group: nginx
  35. /etc/nginx/sites-enabled/default:
  36.   file.absent
  38. ----------------------------------------       
  40. ## 文件结构
  42. [root@master ~]# tree /srv/salt/nginx/
  43. /srv/salt/nginx/
  44. ├── files
  45. │   └── nginx.conf
  46. └── init.sls
  48. 1 directory, 2 files
  50. ----------------------------------------       
  52. ## 执行结果
  54. [root@master ~]# salt dev-161 state.sls nginx
  55. dev-161:
  57. ## 1、安装nginx
  58. ----------
  59.           ID: nginx
  60.     Function: pkg.installed
  61.       Result: True
  62.      Comment: Package nginx is already installed.
  63.      Started: 17:02:02.257036
  64.     Duration: 669.776 ms
  65.      Changes:
  67. ## 2、创建nginx组
  68. ----------
  69.           ID: nginx
  70.     Function: group.present
  71.       Result: True
  72.      Comment: Group nginx is present and up to date
  73.      Started: 17:02:02.928639
  74.     Duration: 0.36 ms
  75.      Changes:
  77. ## 3、创建nginx用户
  78. ----------
  79.           ID: nginx
  80.     Function: user.present
  81.       Result: True
  82.      Comment: User nginx is present and up to date
  83.      Started: 17:02:02.929107
  84.     Duration: 0.741 ms
  85.      Changes:
  87. ## 4、复制本地nginx.conf到指定服务器
  88. ----------
  89.           ID: configure_nginx
  90.     Function: file.managed
  91.         Name: /etc/nginx/nginx.conf
  92.       Result: True
  93.      Comment: File /etc/nginx/nginx.conf is in the correct state
  94.      Started: 17:02:02.931000
  95.     Duration: 3.591 ms
  96.      Changes:
  98. ## 5、删除/etc/nginx/sites-enabled/default文件
  99. ----------
  100.           ID: /etc/nginx/sites-enabled/default
  101.     Function: file.absent
  102.       Result: True
  103.      Comment: File /etc/nginx/sites-enabled/default is not present
  104.      Started: 17:02:02.934678
  105.     Duration: 0.205 ms
  106.      Changes:
  108. ## 6、启动nginx服务
  109. ----------
  110.           ID: nginx
  111.     Function: service.running
  112.       Result: True
  113.      Comment: Service nginx is already enabled, and is running
  114.      Started: 17:02:02.935036
  115.     Duration: 336.938 ms
  116.      Changes:
  117.               ----------
  118.               nginx:
  119.                   True
  121. Summary
  122. ------------
  123. Succeeded: 6 (changed=1)
  124. Failed:    0
  125. ------------
  126. Total states run:     6
  1. ## 创建wilson用户并拷贝公钥
  3. ## SLS文件
  4. [root@master ~]# cat /srv/salt/useradd/init.sls
  5. wilson:
  6.   user.present:
  7.     - home: /home/wilson
  8.     - shell: /bin/bash
  9.     - gid: wilson
  10.     - require:
  11.       - group: wilson
  12.   group.present:
  13.     - name: wilson
  15. /home/wilson/.ssh/authorized_keys:
  16.   file.managed:
  17.     - source: salt://useradd/authorized_keys
  18.     - user: wilson
  19.     - group: wilson
  20.     - mode: 600
  21.     - require:
  22.       - user: wilson
  23.       - file: /home/wilson/.ssh
  25. /home/wilson/.ssh:
  26.   file.directory:
  27.     - user: wilson
  28.     - group: wilson
  29.     - mode: 700
  30.     - require:
  31.       - user: wilson
  33. ----------------------------------------       
  35. ## 文件结构
  37. [root@master ~]# tree /srv/salt/useradd/
  38. /srv/salt/useradd/
  39. ├── authorized_keys
  40. └── init.sls
  42. 0 directories, 2 files
  44. ----------------------------------------       
  46. ## 执行结果
  48. [root@master ~]# salt dev-161 state.sls useradd
  49. dev-161:
  50. ----------
  51.           ID: wilson
  52.     Function: group.present
  53.       Result: True
  54.      Comment: Group wilson is present and up to date
  55.      Started: 17:37:47.683562
  56.     Duration: 1.205 ms
  57.      Changes:
  58. ----------
  59.           ID: wilson
  60.     Function: user.present
  61.       Result: True
  62.      Comment: User wilson is present and up to date
  63.      Started: 17:37:47.684946
  64.     Duration: 37.578 ms
  65.      Changes:
  66. ----------
  67.           ID: /home/wilson/.ssh
  68.     Function: file.directory
  69.       Result: True
  70.      Comment: Directory /home/wilson/.ssh updated
  71.      Started: 17:37:47.726595
  72.     Duration: 1.553 ms
  73.      Changes:
  74.               ----------
  75.               /home/wilson/.ssh:
  76.                   New Dir
  77. ----------
  78.           ID: /home/wilson/.ssh/authorized_keys
  79.     Function: file.managed
  80.       Result: True
  81.      Comment: File /home/wilson/.ssh/authorized_keys updated
  82.      Started: 17:37:47.728318
  83.     Duration: 8.479 ms
  84.      Changes:
  85.               ----------
  86.               diff:
  87.                   New file
  88.               group:
  89.                   wilson
  90.               user:
  91.                   wilson
  93. Summary
  94. ------------
  95. Succeeded: 4 (changed=2)
  96. Failed:    0
  97. ------------
  98. Total states run:     4
  100. ----------------------------------------       
  102. ## SLS使用变量
  104. [root@master useradd]# cat init.sls
  105. useradd:
  106.   user.present:
  107.     {% set name = pillar['name'] %}
  108.     - name: {{ name }}
  109.     - home: /home/{{ name }}
  110.     - shell: /bin/bash
  111.     - gid: {{ name }}
  112.     - groups:
  113.       - docker
  114.       - {{ name }}
  115.     - require:
  116.       - group: {{ name }}
  117.   group.present:
  118.     - name: {{ name }}
  120. /home/{{ name }}/.ssh/authorized_keys:
  121.   file.managed:
  122.     - source: salt://useradd/authorized_keys
  123.     - user: {{ name }}
  124.     - group: {{ name }}
  125.     - mode: 600
  126.     - require:
  127.       - user: {{ name }}
  128.       - file: /home/{{ name }}/.ssh
  130. /home/{{ name }}/.ssh:
  131.   file.directory:
  132.     - user: {{ name }}
  133.     - group: {{ name }}
  134.     - mode: 700
  135.     - require:
  136.       - user: {{ name }}
  138. ## 执行结果
  140. [root@master useradd]# salt dev-161 state.sls useradd pillar='{"name":"jack"}'
  141. dev-161:
  142. ----------
  143.           ID: useradd
  144.     Function: group.present
  145.         Name: jack
  146.       Result: True
  147.      Comment: New group jack created
  148.      Started: 18:02:01.274312
  149.     Duration: 60.186 ms
  150.      Changes:
  151.               ----------
  152.               gid:
  153.                   2011
  154.               members:
  155.               name:
  156.                   jack
  157.               passwd:
  158.                   x
  159. ----------
  160.           ID: useradd
  161.     Function: user.present
  162.         Name: jack
  163.       Result: True
  164.      Comment: New user jack created
  165.      Started: 18:02:01.334737
  166.     Duration: 46.215 ms
  167.      Changes:
  168.               ----------
  169.               fullname:
  170.               gid:
  171.                   2011
  172.               groups:
  173.                   - jack
  174.               home:
  175.                   /home/jack
  176.               homephone:
  177.               name:
  178.                   jack
  179.               passwd:
  180.                   x
  181.               roomnumber:
  182.               shell:
  183.                   /bin/bash
  184.               uid:
  185.                   2011
  186.               workphone:
  187. ----------
  188.           ID: /home/jack/.ssh
  189.     Function: file.directory
  190.       Result: True
  191.      Comment: Directory /home/jack/.ssh updated
  192.      Started: 18:02:01.384423
  193.     Duration: 8.189 ms
  194.      Changes:
  195.               ----------
  196.               /home/jack/.ssh:
  197.                   New Dir
  198. ----------
  199.           ID: /home/jack/.ssh/authorized_keys
  200.     Function: file.managed
  201.       Result: True
  202.      Comment: File /home/jack/.ssh/authorized_keys updated
  203.      Started: 18:02:01.392797
  204.     Duration: 7.8 ms
  205.      Changes:
  206.               ----------
  207.               diff:
  208.                   New file
  209.               group:
  210.                   jack
  211.               user:
  212.                   jack
  214. Summary
  215. ------------
  216. Succeeded: 4 (changed=4)
  217. Failed:    0
  218. ------------
  219. Total states run:     4
添加新批注
在作者公开此批注前，只有你和作者可见。
回复批注