Puppet入门一

 什么是Puppet

1. 一种集中管理配置和服务的工具；
2. 语法简单，易学易用，基于Ruby开发，但Ruby不是必备技能；
3. C/S模式         

        Puppet工作原理  
        puppet工作细节分以下几个步骤：

1. Node节点将Facts和本机信息发送给Master
2. Master告诉Node节点应该如何配置，将这些信息写入Catalog后传给Node
3. Node节点在本机进行代码解析验证并执行，将结果反馈给Master
4. Master将Node的执行结果写入日志

        Puppet安装和配置
安装

wget http://yum.puppetlabs.com/el/6/products/x86_64/puppetlabs-release-6-7.noarch.rpm
yum localinstall puppetlabs-release-6-7.noarch.rpm
yum update
rpm -qa |grep puppet
puppetlabs-release-6-11.noarch
yum search puppet
yum install puppet-server.noarch   puppet.noarch
vi puppet.conf
service puppetmaster start
    Starting puppetmaster: [  OK  ]

puppet目录结构

tree
.
├── auth.conf              #ACL权限控制文件
├── environments    #
│   └── example_env
│       ├── manifests
│       ├── modules
│       └── README.environment
├── fileserver.conf    #文件服务配置文件
├── manifests        #节点存储目录
│   ├── bashrc.pp
│   └── nginx.pp
├── modules        #模块配置目录
└── puppet.conf    #puppet主配置文件

puppet核心配置文件详解

cat /etc/puppet/puppet.conf
[main]
vardir = /var/lib/puppet
confdir = /etc/puppet
logdir        = /var/log/puppet
rundir = /var/run/puppet
modulepath    = $confdir/modules:/etc/puppet/modules
autoflush     = true
ssldir           = $vardir/ssl
report        = true
configtimeout = 360
pluginsync    = true       #插件同步配置对facter自定义有效
[master]
manifestdir   = /etc/puppet/manifests
manifest      = /etc/puppet/manifests/site.pp
user = puppet
reports       = log, store   #报告的方式与类型
reportdir     = /etc/puppet/report #报告文件生产目录

[agent]
classfile     = $vardir/classes.txt
localconfig   = $vardir/localconfig
authconfig = $confdir/namespaceauth.conf
user = root
runinterval   = 1800        #客户端默认探测时间
listen           = true        #是否监听，执行puppet kick时需要配置
server           = master.test.com

cat /etc/puppet/auth.conf

path /facts
auth yes
method find, search
allow agent01.test.com

#允许主机名为”agent01.test.com”的客户端在facts目录进行find和search操作

   
     Puppet命令

puppet resource file /root/.bashrc
file { '/root/.bashrc':
  ensure => 'file',
  content => '{md5}c36f10fd0ff59c3b222228d7a7a6c410',
  ctime => 'Tue Mar 05 16:58:33 +0800 2013',
  group => '0',
  mode => '644',
  mtime => 'Thu Sep 23 11:59:52 +0800 2004',
  owner => '0',
  type => 'file',
}

vi bashrc.pp
file { '/tmp/bashrc':
  ensure => 'file',
  content => "123\n",
  group => '0',
  mode => '644',
  owner => '0',
}

puppet apply bashrc.pp

puppet resource package ntp
package { 'ntp':
  ensure => '4.2.6p5-1.el6',
}



puppet resource service sshd
service { 'sshd':
  ensure => 'running',
  enable => 'true',
}

        创建第一个Puppet配置

rpm -qa |grep nginx

ps -ef |grep nginx
root      6554  4188  0 15:43 pts/0    00:00:00 grep nginx

vi nginx.pp
package { 'nginx':
  ensure => 'present',
}

service { 'nginx':
  ensure => 'running',
  enable => 'true',
}

puppet apply nginx.pp
Notice: Compiled catalog for master.test.com in environment production in 0.31 seconds
Notice: /Stage[main]/Main/Package[nginx]/ensure: created
Notice: /Stage[main]/Main/Service[nginx]/ensure: ensure changed 'stopped' to 'running'
Notice: Finished catalog run in 14.87 seconds

ps -ef |grep nginx
root      6789     1  0 15:45 ? 00:00:00 nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
nginx     6790  6789  0 15:45 ? 00:00:00 nginx: worker process
root      6795  4188  0 15:45 pts/0    00:00:00 grep nginx