Puppet学习--基础安装和配置

谁践踏了优雅 2022-01-13 18:47 287阅读 0赞

## 0. 安装环境 ##

<table> 
 <tbody> 
  <tr> 
   <td>客户端IP</td> 
   <td>puppet_client.example.net(192.168.1.10)</td> 
  </tr> 
  <tr> 
   <td>服务端IP</td> 
   <td>puppet_server.example.net(192.168.1.11)</td> 
  </tr> 
  <tr> 
   <td>OS版本</td> 
   <td>CentOS release 6.6 x86_64</td> 
  </tr> 
  <tr> 
   <td>puppet版本</td> 
   <td>3.7.5</td> 
  </tr> 
 </tbody> 
</table>

## 1.预安装配置 ##

需要在服务端和客户端进行一些必要的预安装配置，因此本节下面的命令需要在客户端和服务端均要执行。

(1) yum install ruby \#安装ruby

(2) 修改/etc/hosts，写入两行：

<table> 
 <tbody> 
  <tr> 
   <td>192.168.1.10&nbsp;&nbsp;&nbsp; puppet_client.example.net &nbsp; &nbsp; &nbsp; &nbsp; <br>192.168.1.11&nbsp;&nbsp;&nbsp; puppet_server.example.net</td> 
  </tr> 
 </tbody> 
</table>

(3) rpm -ivh [http://yum.puppetlabs.com/puppetlabs-release-el-6.noarch.rpm][http_yum.puppetlabs.com_puppetlabs-release-el-6.noarch.rpm] \#安装puppet仓库

## 2. 安装服务端 ##

登录puppet\_server.example.net，执行如下命令：

\[root@puppet\_server.example.net ~\]\# yum install puppet-server puppet –y \#安装puppet服务端和客户端  
\[root@puppet\_server.example.net ~\]\# puppet resource package puppet-server ensure=latest \#更新puppet服务端

\[root@puppet\_client.example.net ~\]\# mv /etc/puppet/puppet.conf /etc/puppet/puppet.conf\_bak \#备份原配置文件  
\[root@puppet\_client.example.net ~\]\# vim /etc/puppet/puppet.conf \# 重新写入文件，文件内容如下：

<table> 
 <tbody> 
  <tr> 
   <td><p>[main] &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br>&nbsp;&nbsp;&nbsp; logdir = /var/log/puppet &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<br>&nbsp;&nbsp;&nbsp; rundir = /var/run/puppet &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<br>&nbsp;&nbsp;&nbsp; ssldir = $vardir/ssl &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<br>[agent] &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<br>&nbsp;&nbsp;&nbsp; classfile = $vardir/classes.txt &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<br>&nbsp;&nbsp;&nbsp; localconfig = $vardir/localconfig &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<br>&nbsp;&nbsp;&nbsp; server = puppet_server.example.net &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<br>&nbsp;&nbsp;&nbsp; certname = puppetmaster_cert.example.net &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<br>[master] &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<br>&nbsp;&nbsp;&nbsp; certname = puppet_server.example.net</p></td> 
  </tr> 
 </tbody> 
</table>

\[root@puppet\_server.example.net ~\]\# chkconfig puppetmaster on \#设置puppetmaster服务开启启动  
\[root@puppet\_server.example.net ~\]\# service puppetmaster start \#启动puppetmaster

## 3. 安装客户端 ##

登录puppet\_client.example.net，执行如下命令：

\[root@puppet\_client.example.net ~\]\# yum install puppet –y \#安装puppet客户端  
\[root@puppet\_client.example.net ~\]\# puppet resource package puppet ensure=latest \#更新puppet

\[root@puppet\_client.example.net ~\]\# chkconfig puppet on \#设置puppet服务开启启动/etc/puppet/puppet.conf  
\[root@puppet\_client.example.net ~\]\# service puppet start \#启动puppet

## 4. 客户端与服务端进行认证 ##

客户端通过调试模式启动节点向puppetmaster端发起认证：

\[root@puppet\_client.example.net ~\]\# puppet agent –t

Info: Caching certificate for puppet\_client.example.net  
Info: Caching certificate for puppet\_client.example.net  
Info: Caching catalog for puppet\_client.example.net  
Info: Applying configuration version '1430120791'  
Notice: Finished catalog run in 0.02 seconds

服务端确定认证：

\[root@puppet\_server.example.net ~\]\# puppet cert --list -all \#查看所有证书，未认证的证书前面没有+号

\[root@puppet\_server.example.net ~\]\# puppet cert --sign -all \#对所有证书进行认证

或者只对指定的证书进行认证：

\[root@puppet\_server.example.net ~\]\# puppet cert --sign “puppet\_client.example.net” \#对指定的证书进行认证

\[root@puppet\_server.example.net ~\]\# puppet cert --list -all \#再次查看所有证书，证书前面已经有+号，表示已经认证通过

## 5. 客户端进行操作的一个简单例子 ##

现在举一个最简单的例子说明一下如何使用。

假如我们需要在客户端上安装lsof命令，常规情况下我们需要运行yum install lsof -y命令，这只是RHEL、CentOS系统上的命令，而在Debian、Ubuntu等系统上则是用apt-get命令。如果需要安装lsof命令的系统比较多的话，就需要编写脚本判断系统版本进行安装了。但是在puppet中，可以通过以下方式简单的实现上述需求。

首先，在puppet服务端创建一个/etc/puppet/manifests/site.pp文件，内容如下：

\[root@puppet\_server.example.net ~\]\# vim /etc/puppet/manifests/site.pp

<table> 
 <tbody> 
  <tr> 
   <td><p>package{ 'lsof': &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br>&nbsp;&nbsp;&nbsp; ensure =&gt; installed, &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<br>}</p></td> 
  </tr> 
 </tbody> 
</table>

然后，在client端执行puppet agent -t命令：

\[root@puppet\_client.example.net ~\]\# puppet agent -t  
Info: Caching catalog for puppet\_client.example.net  
Info: Applying configuration version '1430127711'  
Notice: /Stage\[main\]/Main/Package\[lsof\]/ensure: created  
Notice: Finished catalog run in 6.90 seconds

输出已经表明lsof包已经安装成功。查看一下：

\[root@puppet\_client.example.net ~\]\# rpm -q lsof  
lsof-4.82-4.el6.x86\_64

说明：puppet agent -t命令是在客户端手动运行agent程序。puppet客户端本身如果启动了puppet服务的话，puppet是可以自动间隔一段时间后去运行agent的，默认时间间隔为1800s。可以修改该时间间隔参数，修改客户端agent节点中的/etc/puppet/puppet.conf文件，修改\[agent\]下面的：runinterval = 100，单位为秒，然后重启puppet：service puppet restart。

转载于:https://blog.51cto.com/yuanhuan/1639392

[http_yum.puppetlabs.com_puppetlabs-release-el-6.noarch.rpm]: http://yum.puppetlabs.com/puppetlabs-release-el-6.noarch.rpm