欢迎您访问程序员文章站本站旨在为大家提供分享程序员计算机编程知识！
您现在的位置是： 首页

【Puppet】安装配置Puppet

程序员文章站 2024-01-02 23:40:46
...

一、参考链接

阿里巴巴开源镜像站-OPSX镜像站-阿里云开发者社区

puppet镜像-puppet下载地址-puppet安装教程-阿里巴巴开源镜像站

序 | Puppet运维实战 (gitbooks.io)

二、Puppet介绍

Puppet是IT自动化的行业标准。 以一种简单而强大的方式管理和自动化更多的基础架构和复杂的工作流。

三、Puppet安装

安装准备

master和node端

    

  1. # 修改主机名
    2. 

  2. hostnamectl set-hostname master
    3. 

    4. 

  4. #配置域名解析
    5. 

  5.  vim /etc/hosts
    6. 

  6. 192.168.200.11  master
    7. 

  7. 192.168.200.12  node
    8. 

    9. 

  9. #关闭防火墙
    10. 

  10. systemctl stop firewalld
    11. 

  11. systemctl disable firewalld
    12. 

    13. 

  13. #关闭SELinux安全模式
    14. 

  14. setenforce 0
    15. 

  15. sed -i 's/SELINUX=.*/SELINUX=disabled/g' /etc/selinux/config
    16. 

    17. 

  17. #配置时间同步
    18. 

  18. yum install -y ntpdate
    19. 

  19. ntpdate ntp1.aliyun.com
    20. 

    21. 

  21. #配置CentOS镜像源
    22. 

  22. curl -o /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-7.repo
    23. 

    24. 

  24. sed -i -e '/mirrors.cloud.aliyuncs.com/d' -e '/mirrors.aliyuncs.com/d' /etc/yum.repos.d/CentOS-Base.repo
    25. 

    26. 

  26. #更新YUM源
    27. 

  27. yum clean all
    28. 

  28. yum makecache
    29. 

    30. 

  30. #升级系统
    31. 

  31. yum update
    32.

安装master端

安装、配置并使用Puppet | Puppet运维实战

https://puppet.com/

    

  1. # 安装阿里云仓库
    2. 

  2. rpm -ivh https://mirrors.aliyun.com/puppet/yum/puppetlabs-release-el-7.noarch.rpm
    3. 

    4. 

  4. # 安装Puppet-server、puppet和facter
    5. 

  5. yum install -y puppet puppet-server facter
    6. 

    7. 

  7. # 备份配置文件
    8. 

  8. cp /etc/puppet/puppet.conf{,.bak} 
    9. 

    10. 

  10. # 配置puppet.conf
    11. 

  11. [root@master puppet]# vim puppet.conf
    12. 

  12. [root@master puppet]# cat puppet.conf
    13. 

  13. [main]
    14. 

  14.     # The Puppet log directory.
    15. 

  15.     # The default value is '$vardir/log'.
    16. 

  16.     logdir = /var/log/puppet
    17. 

    18. 

  18.     # Where Puppet PID files are kept.
    19. 

  19.     # The default value is '$vardir/run'.
    20. 

  20.     rundir = /var/run/puppet
    21. 

    22. 

  22.     # Where SSL certificates are kept.
    23. 

  23.     # The default value is '$confdir/ssl'.
    24. 

  24.     ssldir = $vardir/ssl
    25. 

    26. 

  26. [agent]
    27. 

  27.     # The file in which puppetd stores a list of the classes
    28. 

  28.     # associated with the retrieved configuratiion.  Can be loaded in
    29. 

  29.     # the separate ``puppet`` executable using the ``--loadclasses``
    30. 

  30.     # option.
    31. 

  31.     # The default value is '$confdir/classes.txt'.
    32. 

  32.     classfile = $vardir/classes.txt
    33. 

    34. 

  34.     # Where puppetd caches the local configuration.  An
    35. 

  35.     # extension indicating the cache format is added automatically.
    36. 

  36.     # The default value is '$confdir/localconfig'.
    37. 

  37.     localconfig = $vardir/localconfig
    38. 

  38.     server = master
    39. 

  39.     certname = node
    40. 

    41. 

  41. [master]
    42. 

  42.     certname = master
    43. 

  43. [root@master puppet]# 
    44. 

    45. 

  45. # 启动puppetmaster服务
    46. 

  46. systemctl start puppetmaster
    47. 

  47. systemctl enable puppetmaster
    48. 

  48. systemctl status puppetmaster
    49. 

    50. 

  50. # 查看本地证书情况
    51. 

  51. # puppetmaster第一次启动会自动生成证书自动注册自己
    52. 

  52. [root@master puppet]# tree /var/lib/puppet/ssl/
    53. 

  53. /var/lib/puppet/ssl/
    54. 

  54. ├── ca
    55. 

  55. │   ├── ca_crl.pem
    56. 

  56. │   ├── ca_crt.pem
    57. 

  57. │   ├── ca_key.pem
    58. 

  58. │   ├── ca_pub.pem
    59. 

  59. │   ├── inventory.txt
    60. 

  60. │   ├── private
    61. 

  61. │   │   └── ca.pass
    62. 

  62. │   ├── requests
    63. 

  63. │   ├── serial
    64. 

  64. │   └── signed
    65. 

  65. │       └── master.pem
    66. 

  66. ├── certificate_requests
    67. 

  67. ├── certs
    68. 

  68. │   ├── ca.pem
    69. 

  69. │   └── master.pem
    70. 

  70. ├── crl.pem
    71. 

  71. ├── private
    72. 

  72. ├── private_keys
    73. 

  73. │   └── master.pem
    74. 

  74. └── public_keys
    75. 

  75.     └── master.pem
    76. 

    77. 

  77. 9 directories, 13 files
    78. 

  78. [root@master puppet]# 
    79. 

    80. 

  80. # 查看监听状态
    81. 

  81. # puppetmaster服务开启后，默认监听TCP 8140端口
    82. 

  82. [root@master puppet]# netstat -nlatp | grep 8140
    83. 

  83. tcp        0      0 0.0.0.0:8140            0.0.0.0:*               LISTEN      1396/ruby 
    84. 

  84. [root@master puppet]# lsof -i:8140
    85. 

  85. COMMAND  PID   USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
    86. 

  86. puppet  1396 puppet    8u  IPv4  24447      0t0  TCP *:8140 (LISTEN)
    87.

安装node端

    

  1. # 安装准备步骤相同
    2. 

    3. 

  3. # 安装阿里云仓库
    4. 

  4. rpm -ivh https://mirrors.aliyun.com/puppet/yum/puppetlabs-release-el-7.noarch.rpm
    5. 

    6. 

  6. # 安装puppet和facter
    7. 

  7. yum install puppet facter
    8. 

    9. 

  9. # 配置puppet.conf
    10. 

  10. [root@node ~]# cp /etc/puppet/puppet.conf{,.bak}    #备份配置文件
    11. 

  11. [root@node ~]# cat /etc/puppet/puppet.conf        
    12. 

  12. [main]
    13. 

  13.     # The Puppet log directory.
    14. 

  14.     # The default value is '$vardir/log'.
    15. 

  15.     logdir = /var/log/puppet        #默认日志存放路径
    16. 

    17. 

  17.     # Where Puppet PID files are kept.
    18. 

  18.     # The default value is '$vardir/run'.
    19. 

  19.     rundir = /var/run/puppet        #pid存放路径
    20. 

    21. 

  21.     # Where SSL certificates are kept.
    22. 

  22.     # The default value is '$confdir/ssl'.
    23. 

  23.     ssldir = $vardir/ssl             #证书存放目录，默认$vardir为/var/lib/puppet
    24. 

    25. 

  25. [agent]
    26. 

  26.     # The file in which puppetd stores a list of the classes
    27. 

  27.     # associated with the retrieved configuratiion.  Can be loaded in
    28. 

  28.     # the separate ``puppet`` executable using the ``--loadclasses``
    29. 

  29.     # option.
    30. 

  30.     # The default value is '$confdir/classes.txt'.
    31. 

  31.     classfile = $vardir/classes.txt
    32. 

    33. 

  33.     # Where puppetd caches the local configuration.  An
    34. 

  34.     # extension indicating the cache format is added automatically.
    35. 

  35.     # The default value is '$confdir/localconfig'.
    36. 

  36.     localconfig = $vardir/localconfig
    37. 

  37.     server = master        #指向puppetmaster端
    38. 

  38.     certname = node        #设置自己的certname名
    39. 

    40. 

    41. 

  41. # 开启puppet服务
    42. 

  42. systemctl start puppet
    43. 

  43. systemctl enable puppet
    44.

Node端向Master端发起认证

    

  1. # 通过调试模式启动节点向Puppetmaster端发起认证
    2. 

  2. [root@node ~]# puppet agent --test
    3. 

  3. Info: Retrieving pluginfacts
    4. 

  4. Info: Retrieving plugin
    5. 

  5. Info: Caching catalog for node
    6. 

  6. Info: Applying configuration version '1645352953'
    7. 

  7. Notice: Finished catalog run in 0.01 seconds
    8. 

    9. 

  9. # 服务器端确定认证
    10. 

  10. [root@master ~]# puppet cert --list --all    #查看认证情况
    11. 

  11.   "node"   (SHA256) 6F:FC:CF:DB:1F:F1:B4:91:C7:8B:48:DE:64:A1:8D:D9:24:27:4B:B9:A9:72:5C:0E:6D:3F:A3:0B:B7:37:87:AE #未认证
    12. 

  12. + "master" (SHA256) 87:C4:5B:16:2A:13:E1:D0:B0:58:63:2F:F1:87:98:6D:B6:A4:5D:9B:65:92:D8:72:38:45:FF:2A:18:FD:BA:41    #带+表示已经注册成功
    13. 

  13. [root@master ~]#
    14. 

    15. 

  15. [root@master ~]# puppet cert --sign node    #注册node
    16. 

  16. Notice: Signed certificate request for node
    17. 

  17. Notice: Removing file Puppet::SSL::CertificateRequest node at '/var/lib/puppet/ssl/ca/requests/node.pem'
    18. 

  18. [root@master ~]#
    19. 

    20. 

  20. [root@master ~]# puppet cert --list --all   #再次查看认证情况
    21. 

  21. + "master" (SHA256) 87:C4:5B:16:2A:13:E1:D0:B0:58:63:2F:F1:87:98:6D:B6:A4:5D:9B:65:92:D8:72:38:45:FF:2A:18:FD:BA:41
    22. 

  22. + "node"   (SHA256) 35:B1:01:AA:28:DF:76:AA:B2:67:BE:D4:5C:C1:90:3C:C2:68:44:9A:BA:F3:DD:96:2B:37:6E:9E:85:11:E3:E1
    23. 

    24. 

    25. 

  25. [root@master ~]# tree /var/lib/puppet/ssl/    #另外一种查看认证的方式
    26. 

  26. /var/lib/puppet/ssl/
    27. 

  27. ├── ca
    28. 

  28. │   ├── ca_crl.pem
    29. 

  29. │   ├── ca_crt.pem
    30. 

  30. │   ├── ca_key.pem
    31. 

  31. │   ├── ca_pub.pem
    32. 

  32. │   ├── inventory.txt
    33. 

  33. │   ├── private
    34. 

  34. │   │   └── ca.pass
    35. 

  35. │   ├── requests
    36. 

  36. │   ├── serial
    37. 

  37. │   └── signed
    38. 

  38. │       ├── master.pem
    39. 

  39. │       └── node.pem
    40. 

  40. ├── certificate_requests
    41. 

  41. │   └── node.pem
    42. 

  42. ├── certs
    43. 

  43. │   ├── ca.pem
    44. 

  44. │   ├── master.pem
    45. 

  45. │   └── node.pem
    46. 

  46. ├── crl.pem
    47. 

  47. ├── private
    48. 

  48. ├── private_keys
    49. 

  49. │   ├── master.pem
    50. 

  50. │   └── node.pem
    51. 

  51. └── public_keys
    52. 

  52.     ├── master.pem
    53. 

  53.     └── node.pem
    54. 

    55. 

  55. 9 directories, 18 files
    56.

上一篇：

下一篇：

推荐阅读