安装Puppet

╰半夏微凉° 2022-09-22 15:59 246阅读 0赞

**一、准备环境**  
1、设置主机名和hosts文件  
Master  
![这里写图片描述][20160702185404217]  
Agent  
![这里写图片描述][20160702185413733]  
2、启动节点ntpd服务  
3、制作本地yum仓库  
http://blog.csdn.net/celeste7777/article/details/51811788  
4、搭建FTP服务器，提供自定义yum仓库访问接口

[root@master ~]# cat /etc/vsftpd/vsftpd.conf
    listen=YES
    anonymous_enable=YES
    local_enable=YES
    write_enable=YES
    local_umask=022
    anon_upload_enable=YES
    anon_mkdir_write_enable=YES
    anon_other_write_enable=YES
    dirmessage_enable=YES
    xferlog_enable=YES
    xferlog_file=/etc/vsftpd/vsftpd.log
    xferlog_std_format=YES
    ftpd_banner=Welcome to Ftp(installed by DQ)
    pam_service_name=vsftpd
    userlist_enable=YES
    tcp_wrappers=YES

5、将生成好的yum源copy到FTP共享目录中

[root@master ~]# cp -arv /home/puppet /var/ftp/pub/

6、agent上配置远程yum仓库

[root@agent ~]# cat /etc/yum.repos.d/puppet.repo 
    [centos-puppet]
    name=puppetlabs epel gems for centos
    baseurl=ftp://master.puppet.com/pub/puppet/
    enabled=1
    gpgcheck=0
    priority=1

测试puppet yum是否可用  
![这里写图片描述][20160702190814728]

*  说明puppet安装依赖ruby-shadow和ruby-augeas，ruby相关的软件包通过EPEL源获取，但是需要设置Master和Agent上EPEL源的优先级比自行制作的puppet低，否则puppet会获取EPEL中高版本安装
 *  可参照步骤3，制作本地yum仓库中的设置，这里不再赘述

**二、Master端yum安装配置puppet**  
1、安装Puppet-server、puppet和facter

[root@master ~]# yum install puppet puppet-server facter -y

![这里写图片描述][20160702192056066]  
2、配置puppet.conf 注意：配置文件中有两个certname，\[master\]中配置的certname是为所有节点认证用的master名称，\[agent\]中配置的certname是其本身agent的名称，当然不配置默认是和master的名称是一样的。

[root@master ~]# cp /etc/puppet/puppet.conf{,.bak}
    [root@master ~]# cat /etc/puppet/puppet.conf |grep "^\s*[^# \t].*$"
    [main]
        logdir = /var/log/puppet
        rundir = /var/run/puppet
        ssldir = $vardir/ssl #证书存放目录，默认$vardir为/var/lib/puppet
    [agent]
        classfile = $vardir/classes.txt
        server = master.puppet.com #设置agent认证连接master端的服务器名称，注意这个名字必须能够被节点解析
        certname = agent.puppet.com #设置agent端certname名称
        localconfig = $vardir/localconfig
    [master]
        certname = master.puppet.com #设置puppetmaster认证服务器名

3、创建site.pp文件 site.pp文件是puppet读取所有模块pp文件的开始，在3.0版本以前必须设置，否则服务无法启动。

[root@master ~]# touch /etc/puppet/manifests/site.pp

4、启动puppetmaster服务

[root@master ~]# /etc/init.d/puppetmaster start
    Starting puppetmaster:                                     [  OK  ]

5、查看本地证书情况 puppetmaster第一次启动会自动生成证书自动注册自己

[root@master ~]# tree /var/lib/puppet/ssl/
    /var/lib/puppet/ssl/
    ├── ca
    │   ├── ca_crl.pem
    │   ├── ca_crt.pem
    │   ├── ca_key.pem
    │   ├── ca_pub.pem
    │   ├── inventory.txt
    │   ├── private
    │   │   └── ca.pass
    │   ├── requests
    │   ├── serial
    │   └── signed
    │       └── master.puppet.com.pem  #已注册
    ├── certificate_requests
    ├── certs
    │   ├── ca.pem
    │   └── master.puppet.com.pem
    ├── crl.pem
    ├── private
    ├── private_keys
    │   └── master.puppet.com.pem
    └── public_keys
        └── master.puppet.com.pem
    
    9 directories, 13 files
    [root@master ~]# puppet cert --list --all
    + "master.puppet.com" #带+标示已经注册成功(CF:74:C7:C7:91:DB:F5:82:3A:5E:01:93:E8:23:64:C4) 
    + (alt names: "DNS:master.puppet.com", "DNS:puppet", "DNS:puppet.puppet.com")

6、查看监听状态 puppetmaster服务开启后，默认监听TCP 8140端口  
![这里写图片描述][20160703150143380]  
**二、Agent端yum安装配置puppet**  
1、安装puppet和facter

[root@agent ~]# yum install puppet facter -y

![这里写图片描述][20160702192103404]  
2、配置puppet.conf  
![这里写图片描述][20160703150820774]  
3、agent通过调试模式启动节点向master端发起认证  
![这里写图片描述][20160703151106010]  
4、master端确定认证

[root@master ~]# puppet cert --list --all
    [root@master ~]# puppet cert --sign agent.puppet.com
    [root@master ~]# tree /var/lib/puppet/ssl/

查看认证情况，agent未认证  
![这里写图片描述][20160703151543714]  
注册agent  
![这里写图片描述][20160703151643044]  
再次查看认证情况，agent已认证  
![这里写图片描述][20160703151833280]  
![这里写图片描述][20160703151955532]  
参考文档  
[https://kisspuppet.gitbooks.io/puppet/content/puppet\_learning\_base4.html][https_kisspuppet.gitbooks.io_puppet_content_puppet_learning_base4.html]

[20160702185404217]: /images/20220721/45fedbcd3ecb4e6ca10fc22235e80a02.png
[20160702185413733]: /images/20220721/7821a24e48764db3b680c6650b875a7f.png
[20160702190814728]: /images/20220721/d05e443a6f7341678479f0e10131e372.png
[20160702192056066]: /images/20220721/c4a2e0204c23413f9607bc3ef74908be.png
[20160703150143380]: /images/20220721/aa2937db341447959b4afd1d2a391318.png
[20160702192103404]: /images/20220721/24b94763101642879d859abddcc1bc05.png
[20160703150820774]: /images/20220721/f2c2dbde20604aaa946e6845e028f399.png
[20160703151106010]: /images/20220721/36f8a8002bc244c0a655f707e4079c24.png
[20160703151543714]: /images/20220721/27ed4032e04c45d3a568c754ee34c654.png
[20160703151643044]: /images/20220721/cc9d7ebb75ae492f840608e9c102e254.png
[20160703151833280]: /images/20220721/0e1ddc44159d47e09b140253d54e4168.png
[20160703151955532]: /images/20220721/d5b273293a974625a50c02eeb23e1584.png
[https_kisspuppet.gitbooks.io_puppet_content_puppet_learning_base4.html]: https://kisspuppet.gitbooks.io/puppet/content/puppet_learning_base4.html