saltstack项目实战

项目架构规划

后端web服务器使用Nginx+Php作为站点，通过HAproxy做负载均衡，Keepalived做高可用

项目环境准备

说明： 关闭防火墙、selinux、时间同步等

host绑定

[root@salt-master ~]# cat /etc/hosts

127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4

::         localhost localhost.localdomain localhost6 localhost6.localdomain6

192.168.1.30    salt-master

192.168.1.31    salt-minion01

192.168.1.32    salt-minion02

192.168.1.33    salt-minion03

192.168.1.34    salt-minion04

[root@salt-master ~]# for i in `seq `; do scp /etc/hosts 192.168.1.3$i:/etc/hosts ; done

软件安装

参考地址

1）Master上软件安装

[root@salt-master ~]# yum -y install https://mirrors.aliyun.com/saltstack/yum/redhat/salt-repo-latest-2.el7.noarch.rpm

[root@salt-master ~]# sed -i "s/repo.saltstack.com/mirrors.aliyun.com\/saltstack/g" /etc/yum.repos.d/salt-latest.repo

[root@salt-master ~]# yum -y install salt-master

[root@salt-master ~]# systemctl enable salt-master

[root@salt-master ~]# systemctl start salt-master

2）Minion上软件安装并配置

# yum -y install https://mirrors.aliyun.com/saltstack/yum/redhat/salt-repo-latest-2.el7.noarch.rpm

# yum -y install salt-minion

# cp /etc/salt/minion{,.back}

# sed -i '/#master: /c\master: salt-master' /etc/salt/minion

# systemctl enable salt-minion

# systemctl start salt-minion

Master上认证

[root@salt-master ~]# systemctl restart salt-master

[root@salt-master ~]# salt-key -L

Accepted Keys:

Denied Keys:

Unaccepted Keys:

salt-minion01

salt-minion02

salt-minion03

salt-minion04

Rejected Keys:

[root@salt-master ~]# salt-key -A -y

The following keys are going to be accepted:

Unaccepted Keys:

salt-minion01

salt-minion02

salt-minion03

salt-minion04

Key for minion salt-minion01 accepted.

Key for minion salt-minion02 accepted.

Key for minion salt-minion03 accepted.

Key for minion salt-minion04 accepted.

[root@salt-master ~]# salt-key -L

Accepted Keys:

salt-minion01

salt-minion02

salt-minion03

salt-minion04

Denied Keys:

Unaccepted Keys:

Rejected Keys:

[root@salt-master ~]# salt '*' test.ping

salt-minion01:

    True

salt-minion02:

    True

salt-minion03:

    True

salt-minion04:

    True

Master上state编写

state环境设置

说明：该案例在prod环境下配置，在prod下面创建了一个modules的目录，所有的安装配置都放在这个目录下面了，里面分别又对应创建了对应的软件目录，每个软件目录下面的files目录用来存放的是软件包或者配置文件模板

[root@salt-master ~]# vim /etc/salt/master

file_roots:

  base:

    - /srv/salt/base

  test:

    - /srv/salt/test

  prod:

    - /srv/salt/prod

  dev:

    - /srv/salt/dev

[root@salt-master ~]# systemctl restart salt-master

[root@salt-master ~]# mkdir -p /srv/salt/{base,test,prod,dev}

[root@salt-master ~]# mkdir -p /srv/salt/prod/modules/{nginx,php,mysql,haproxy,keepalived,lnmp}/files

[root@salt-master ~]# mkdir /srv/salt/prod/modules/user

[root@salt-master ~]# tree /srv/salt/prod/modules/

/srv/salt/prod/modules/

├── haproxy

│   └── files

├── keepalived

│   └── files

├── lnmp

│   └── files

├── mysql

│   └── files

├── nginx

│   └── files

├── php

│   └── files

└── user

 directories,  files

sls文件编写

pkg基础包

安装源码编译所需要用到的基础软件包

[root@salt-master ~]# cat /srv/salt/prod/modules/pkg.sls

pkg-install:

  pkg.installed:

    - pkgs:

      - gcc

      - gcc-c++

      - make

      - autoconf

      - glibc

      - glibc-devel

      - glib2

      - glib2-devel

      - pcre

      - pcre-devel

      - zlib

      - zlib-devel

      - openssl

      - openssl-devel

      - libpng

      - libpng-devel

      - freetype

      - freetype-devel

      - libxml2

      - libxml2-devel

      - bzip2

      - bzip2-devel

      - ncurses

      - curl

      - gdbm-devel

      - libXpm-devel

      - libX11-devel

      - gd-devel

      - gmp-devel

      - readline-devel

      - libxslt-devel

      - expat-devel

      - xmlrpc-c

      - xmlrpc-c-devel

useradd

创建网站运行用户

[root@salt-master ~]# cat /srv/salt/prod/modules/user/www.sls

www-user-group:

  group.present:

    - name: www

    - gid: 

  user.present:

    - name: www

    - fullname: www

    - shell: /sbin/nologin

    - uid:

    - gid:

    - unless: id www

nginx

1）软件包准备，及配置文件模板，启动文件模板

[root@salt-master ~]# cd /srv/salt/prod/modules/nginx/

[root@salt-master nginx]# tree

.

├── files

│   ├── nginx-1.12..tar.gz

│   ├── nginx-1.16..tar.gz

│   ├── nginx.conf.template

│   └── nginx.service.template

├── install.sls

└── service.sls

 directory,  files

2）install.sls

[root@salt-master nginx]# cat install.sls

{% set nginx_version = "1.16.0"%}

include:

  - modules.pkg

  - modules.user.www

nginx-install:

  file.managed:

    - name: /usr/local/src/nginx-{{ nginx_version }}.tar.gz

    - source: salt://modules/nginx/files/nginx-{{ nginx_version }}.tar.gz

    - user: root

    - group: root

    - mode: 

  cmd.run:

    - name: cd /usr/local/src/ && tar xf nginx-{{ nginx_version }}.tar.gz && cd nginx-{{ nginx_version }} && ./configure --prefix=/usr/local/nginx-{{ nginx_version }} --user=root --group=root --with-http_ssl_module --with-stream --with-http_stub_status_module --with-file-aio --with-http_gzip_static_module && make && make install && ln -s /usr/local/nginx-{{ nginx_version }} /usr/local/nginx

    - unless: test -d /usr/local/nginx-{{ nginx_version }} && test -L /usr/local/nginx

    - require:

      - file: nginx-install

      - pkg: pkg-install

3）service.sls

[root@salt-master nginx]# cat service.sls

#引入nginx安装sls

include:

  - modules.nginx.install

#添加systemctl

nginx-init:

  file.managed:

    - name: /usr/lib/systemd/system/nginx.service

    - source: salt://modules/nginx/files/nginx.service.template

    - user: root

    - group: root

    - mode:

    - unless: test -f /usr/lib/systemd/system/nginx.service

  cmd.run:

    - name: systemctl daemon-reload

    - require:

      - file: nginx-init

#配置文件

/usr/local/nginx/conf/nginx.conf:

  file.managed:

    - source: salt://modules/nginx/files/nginx.conf.template

    - user: root

    - group: root

    - mode: 

#启动nginx

nginx-service:

  file.directory:

    - name: /usr/local/nginx/conf/conf.d

    - user: root

    - group: root

    - mode:

    - require:

      - cmd: nginx-install

  service.running:

    - name: nginx

    - enable: True

    - reload: True

    - require:

      - cmd: nginx-init

    - watch:

      - file: /usr/local/nginx/conf/nginx.conf

      - file: nginx-service

php

1）软件包准备，及配置文件模板，启动文件模板

[root@salt-master ~]# cd /srv/salt/prod/modules/php/

[root@salt-master php]# tree

.

├── files

│   ├── php-5.6..tar.gz

│   ├── php-fpm.conf.template

│   ├── php-fpm.service.template

│   ├── php-fpm.template

│   └── php.ini.template

├── install.sls

└── service.sls

 directory,  files

2）install.sls

[root@salt-master php]# cat install.sls

{% set php_version = "5.6.40" %}

include:

  - modules.pkg

php-install:

  file.managed:

    - name: /usr/local/src/php-{{ php_version }}.tar.gz

    - source: salt://modules/php/files/php-{{ php_version }}.tar.gz

    - user: root

    - group: root

    - mode: 

  cmd.run:

    - name: cd /usr/local/src/ && tar xf php-{{ php_version }}.tar.gz && cd php-{{ php_version }} && ./configure --prefix=/usr/local/php-{{ php_version }} --with-curl --with-freetype-dir --with-gd --with-gettext --with-iconv-dir --with-jpeg-dir --with-kerberos --with-libdir=lib64 --with-libxml-dir --with-mysql --with-mysqli --with-openssl --with-pcre-regex --with-pdo-mysql --with-dpo-sqlite --with-pear --with-png-dir --with-openssl --with-xmlrpc --with-xsl --with-zlib --enable-fpm --enable-bcmath --enable-libxml --enable-inline-optimization --enable-gd-native-ttf --enable-mbregex --enable-mbstring --enable-opcache --enable-pcntl --enable-shmop --enable-soap --enable-sockets --enable-sysvsem --enable-xml --enable-zip && make && make install && ln -s /usr/local/php-{{ php_version }} /usr/local/php

    - unless: test -d /usr/local/php-{{ php_version }} && test -L /usr/local/php

    - require:

      - file: php-install

      - pkg: pkg-install

3）service.sls

[root@salt-master php]# cat service.sls

#引入php安装的sls

include:

  - modules.php.install

#php-ini配置文件配置

php-ini:

  file.managed:

    - name: /usr/local/php/etc/php.ini

    - source: salt://modules/php/files/php.ini.template

    - user: root

    - group: root

    - mode:

    - require:

      - cmd: php-install

  cmd.run:

    - name: ln -s /usr/local/php/etc/php.ini /etc/php.ini

    - unless: test -L /etc/php.ini

    - require:

      - file: php-ini

#php-fpm配置文件配置

php-fpm:

  file.managed:

    - name: /usr/local/php/etc/php-fpm.conf

    - source: salt://modules/php/files/php-fpm.conf.template

    - user: root

    - group: root

    - mode:

    - require:

      - cmd: php-install

  cmd.run:

    - name: ln -s /usr/local/php/etc/php-fpm.conf /etc/php-fpm.conf

    - unless: test -L /etc/php-fpm.conf

    - require:

      - file: php-fpm

#加入system启动

php-systemd:

  file.managed:

    - name: /usr/lib/systemd/system/php-fpm.service

    - source: salt://modules/php/files/php-fpm.service.template

    - user: root

    - group: root

    - mode:

    - require:

      - cmd: php-install

#加入/etc/init.d/启动

php-init:

  file.managed:

    - name: /etc/init.d/php-fpm

    - source: salt://modules/php/files/php-fpm.template

    - user: root

    - group: root

    - mode:

    - require:

      - cmd: php-install

#启动php-fpm

php-service:

  service.running:

    - name: php-fpm

    - enable: True

    - require:

      - file: php-systemd

    - watch:

      - file: php-fpm

      - file: php-ini

mysql

1）配置文件模板准备

[root@salt-master ~]# cd /srv/salt/prod/modules/mysql/

[root@salt-master mysql]# tree

.

├── files

│   └── my.cnf

├── install.sls

└── service.sls

 directory,  files

2）install.sls

[root@salt-master mysql]# cat install.sls

mariadb-install:

  pkg.installed:

    - pkgs:

      - mariadb-server

      - mariadb

3）service.sls

[root@salt-master mysql]# cat service.sls

#引入mysql安装的sls

include:

  - modules.mysql.install

#my.cnf配置文件

mariadb-config:

  file.managed:

    - name: /etc/my.cnf

    - source: salt://modules/mysql/files/my.cnf

    - user: root

    - group: root

    - mode:

    - require:

      - pkg: mariadb-install

#启动mariadb

mariadb-service:

  service.running:

    - name: mariadb

    - enable: True

    - watch:

      - file: mariadb-config

    - require:

      - pkg: mariadb-install

      - file: mariadb-config

lnmp

1）准备测试文件php info 和nginx虚拟主机配置文件

[root@salt-master ~]# cd /srv/salt/prod/modules/lnmp/

[root@salt-master lnmp]# tree

.

├── files

│   ├── index.php

│   └── www.conf

└── www.sls

 directory,  files

2）www.sls

[root@salt-master lnmp]# cat www.sls

#引入nginx、php、mysql的安装

include:

  - modules.nginx.service

  - modules.php.service

  - modules.mysql.service

#虚拟主机web站点目录创建

web-www:

  file.directory:

    - name: /opt/www

    - user: www

    - group: www

    - mode: 

#虚拟主机配置文件配置

web-www-conf:

  file.managed:

    - name: /usr/local/nginx/conf/conf.d/www.conf

    - source: salt://modules/lnmp/files/www.conf

    - user: root

    - group: root

    - mode:

    - require:

      - file: web-www

    - watch_in:

      - service: nginx-service

    - template: jinja

    - defaults:

      PORT:

      IPADDR: {{ grains['fqdn_ip4'][] }}

#phpinfo测试文件准备

web-index:

  file.managed:

    - name: /opt/www/index.php

    - source: salt://modules/lnmp/files/index.php

    - user: www

    - group: www

    - mode:

测试lnmp是否OK

1）Top file编写

[root@salt-master ~]# cat /srv/salt/base/top.sls

prod:

  "salt-minion0[3-4]":

    - modules.lnmp.www

2）执行高级状态

[root@salt-master ~]# salt '*' state.highstate

3）访问测试

haproxy

1）配置文件准备

[root@salt-master ~]# cd /srv/salt/prod/modules/haproxy/

[root@salt-master haproxy]# tree

.

├── files

│   └── haproxy.cfg

├── install.sls

└── service.sls

 directory,  files

2）install.sls

[root@salt-master haproxy]# cat install.sls

haproxy-install:

  pkg.installed:

    - name: haproxy

3）service.sls

[root@salt-master haproxy]# cat service.sls

#引入haproxy安装的sls

include:

  - modules.haproxy.install

#配置文件

haproxy-config:

  file.managed:

    - name: /etc/haproxy/haproxy.cfg

    - source: salt://modules/haproxy/files/haproxy.cfg

    - user: root

    - group: root

    - mode:

    - require:

      - pkg: haproxy-install

#启动haproxy

haproxy-service:

  service.running:

    - name: haproxy

    - enable: True

    - require:

      - pkg: haproxy-install

      - file: haproxy-config

    - watch:

      - file: haproxy-config

keepalived

1）配置文件准备

[root@salt-master ~]# cd /srv/salt/prod/modules/keepalived/

[root@salt-master keepalived]# tree

.

├── files

│   └── keepalived.conf

├── install.sls

└── service.sls

 directory,  files

2）install.sls

[root@salt-master keepalived]# cat install.sls

keepalived-install:

  pkg.installed:

    - name: keepalived

3）service.sls

[root@salt-master keepalived]# cat service.sls

#引入keepalived安装的sls

include:

  - modules.keepalived.install

#keepalived配置文件

keepalived-config:

  file.managed:

    - name: /etc/keepalived/keepalived.conf

    - source: salt://modules/keepalived/files/keepalived.conf

    - user: root

    - group: root

    - mode:

    - require:

      - pkg: keepalived-install

    - template: jinja

    - defaults:

{% if grains['fqdn'] == "salt-minion01" %}

      ROUTER_ID: saltstack01

      STATE: MASTER

      PRIORITY:

{% elif grains['fqdn'] == "salt-minion02" %}

      ROUTER_ID: saltstack02

      STATE: BACKUP

      PRIORITY:

{% endif %}

#启动keepalived

keepalived-service:

  service.running:

    - name: keepalived

    - enable: True

    - require:

      - pkg: keepalived-install

      - file: keepalived-config

    - watch:

      - file: keepalived-config

整体部署

1）top file 编写

[root@salt-master ~]# cat /srv/salt/base/top.sls

prod:

  "salt-minion0[3-4]":

    - modules.lnmp.www

  "salt-minion0[1-2]":

    - modules.haproxy.service

    - modules.keepalived.service

2）高级状态执行

[root@salt-master ~]# salt '*' state.highstate

3）测试

访问192.168.1.31和192.168.1.32的状态页

访问VIP192.168.1.100

通过上面测试可看到可以成功访问lnmp站点，并且haproxy也ok。访问所有四台服务器都可以得到phpinfo页面，而在生产环境中，我们只是对外提供vip即可。

项目总结

1）整体环境查看

[root@salt-master ~]# tree /srv/salt/prod/modules/

/srv/salt/prod/modules/

├── haproxy

│   ├── files

│   │   └── haproxy.cfg

│   ├── install.sls

│   └── service.sls

├── keepalived

│   ├── files

│   │   └── keepalived.conf

│   ├── install.sls

│   └── service.sls

├── lnmp

│   ├── files

│   │   ├── index.php

│   │   └── www.conf

│   └── www.sls

├── mysql

│   ├── files

│   │   └── my.cnf

│   ├── install.sls

│   └── service.sls

├── nginx

│   ├── files

│   │   ├── nginx-1.12..tar.gz

│   │   ├── nginx-1.16..tar.gz

│   │   ├── nginx.conf.template

│   │   └── nginx.service.template

│   ├── install.sls

│   └── service.sls

├── php

│   ├── files

│   │   ├── php-5.6..tar.gz

│   │   ├── php-fpm.conf.template

│   │   ├── php-fpm.service.template

│   │   ├── php-fpm.template

│   │   └── php.ini.template

│   ├── install.sls

│   └── service.sls

├── pkg.sls

└── user

    └── www.sls

 directories,  files

2）如果需要在某台服务器上面单独部署某一部分，参考以下写法：

[root@salt-master ~]# cat /srv/salt/base/top.sls

#部署lnmp及haproxy+keepalived

prod:

  "salt-minion0[3-4]":

    - modules.lnmp.www

  "salt-minion0[1-2]":

    - modules.haproxy.service

    - modules.keepalived.service

#单实例操作说明：

prod:

  "salt-minion04":

    - modules.nginx.service    #单独安装nginx时

    - modules.mysql.service     #单独安装mysql时

    - modules.php.service       #单独安装php时

    - modules.keepalived.service  #单独安装keepalived时

    - modules.haproxy.service   #单独安装haproxy时

  "salt-minion03":

    - modules.lnmp.www     #单独部署lnmp环境时

如需配置文件模板及软件包联系我

SaltStack--项目实战的更多相关文章

  1. SaltStack项目实战（六）

    SaltStack项目实战 系统架构图 一.初始化 1.salt环境配置,定义基础环境.生产环境(base.prod) vim /etc/salt/master 修改file_roots file_r ...

  2. SaltStack项目实战（二）

    架构图: 配置思路 (1).系统初始化 Base环境下存放所有系统都要执行的状态,调整内核参数,dns,装zabbix-agent等 (2).功能模块(如:上面的haproxy) 如上面的haprox ...

  3. SaltStack项目实战（一）

      系统架构图 一.初始化 1.salt环境配置,定义基础环境.生产环境(base.prod) ? 1 2 3 4 5 6 7 8 9 10 vim /etc/salt/master 修改file_r ...

  4. SaltStack项目实战（七）

    上文 http://www.cnblogs.com/shhnwangjian/p/6027992.html 四.memcached 1)创建www用户 mkdir -p /srv/salt/prod/ ...

  5. Asp.Net Core 项目实战之权限管理系统（4） 依赖注入、仓储、服务的多项目分层实现

    0 Asp.Net Core 项目实战之权限管理系统(0) 无中生有 1 Asp.Net Core 项目实战之权限管理系统(1) 使用AdminLTE搭建前端 2 Asp.Net Core 项目实战之 ...

  6. 给缺少Python项目实战经验的人

    我们在学习过程中最容易犯的一个错误就是:看的多动手的少,特别是对于一些项目的开发学习就更少了! 没有一个完整的项目开发过程,是不会对整个开发流程以及理论知识有牢固的认知的,对于怎样将所学的理论知识应用 ...

  7. 【腾讯Bugly干货分享】React Native项目实战总结

    本文来自于腾讯bugly开发者社区,非经作者同意,请勿转载,原文地址:http://dev.qq.com/topic/577e16a7640ad7b4682c64a7 “8小时内拼工作,8小时外拼成长 ...

  8. Asp.Net Core 项目实战之权限管理系统（0） 无中生有

    0 Asp.Net Core 项目实战之权限管理系统(0) 无中生有 1 Asp.Net Core 项目实战之权限管理系统(1) 使用AdminLTE搭建前端 2 Asp.Net Core 项目实战之 ...

  9. Asp.Net Core 项目实战之权限管理系统（1） 使用AdminLTE搭建前端

    0 Asp.Net Core 项目实战之权限管理系统(0) 无中生有 1 Asp.Net Core 项目实战之权限管理系统(1) 使用AdminLTE搭建前端 2 Asp.Net Core 项目实战之 ...

  10. Asp.Net Core 项目实战之权限管理系统（2） 功能及实体设计

    0 Asp.Net Core 项目实战之权限管理系统(0) 无中生有 1 Asp.Net Core 项目实战之权限管理系统(1) 使用AdminLTE搭建前端 2 Asp.Net Core 项目实战之 ...

随机推荐

  1. 基于web公交查询系统---站点信息管理

    界面设计: 界面设计代码获取: 搭建好框架获取信息: 核心代码: var users = [ ];//获取到的bus所有站点信息 var rowIndex = -1; $.ajax({ url: &q ...

  2. bat无线热点设置

    netsh wlan set hostednetwork mode=allow ssid=happyla key=1234567890netsh wlan start hostednetwork

  3. c# word 插入图片问题

    情景描述: 在之前文本框中加标签,代码直接addPicture出现了意外.不起作用,怀疑是文档模板的问题,因为生成的PDF和word格式总时不时有差异,左右捣鼓下,更换文本框,更换图片形式,形状形式, ...

  4. 微信小程序在苹果手机的New Date坑

    new Date(“2017-06-16”) 在IOS会出现NAN的情况,必须改为new Date(“2017/06/16”) 才能兼容

  5. 连上Microbit板

    我们是在自己电脑上,用Mu编程,最终程序要烧录到Microbi板子的控制芯片中去,还记得这款芯片是哪家公司生产的?是多少位的?呵呵. 因此,我们要把板子和电脑连起来,用常见的一大一小的USB线就可以了 ...

  6. Sitecore安全：访问权限

    由于Sitecore使用Core数据库中的项来定义其用户界面,因此您可以对该数据库中的项应用访问权限,以控制对CMS功能的访问.最常见的是,将用户置于预定义的Sitecore客户端角色中 Siteco ...

  7. SpringBoot：3.SpringBoot使用Spring-data-jpa实现数据库访问

    做Web开发,首先要能将数据渲染到网页中展示,其次是要获取数据库数据展示到视图层,在前面的文章SpringBoot整合Thymeleaf模板引擎渲染web视图,我们实现了从后端数据展示到视图层,那么下 ...

  8. Java学习：数据类型转换注意事项

    数据类型的转换 当数据类型不一样时,将会发生数据类型转换. 自动类型转换(隐式) 1.特点 :代码不需要进行特殊处理,自动完成. 2.规则 :数据范围从小到大. //左边是long类型,右边是默认的i ...

  9. golang 学习笔记 --基本类型

    字符串值表示了一个一个字符值的集合,在底层,一个字符串值即一个包含了若干字节的序列,长度为0的序列与一个空字符串对应.字符串的长度即底层字节列中字节的个数. 字符串值是不可变的,对字符串的操作只会返回 ...

  10. golang学习笔记--接口

    go 的接口类型用于定义一组行为,其中每个行为都由一个方法声明表示. 接口类型中的方法声明只有方法签名而没有方法实体,而方法签名包括且仅包括方法的名称.参数列表和结果列表. 只要一种数据类型的方法集合 ...