saltstack狀態文件設定：

編輯/etc/salt/master，修改其中關于“設置文件的目錄”的設置：

說明：注意語法格式，頂格/冒號/兩個空格

state_top:?top.sls #?The?state?system?uses?a?"top"?file?to?tell?the?minions?what?environment?to #?use?and?what?modules?to?use.?The?state_top?file?is?defined?relative?to?the #?root?of?the?base?environment?as?defined?in?"File?Server?settings"?below. #state_top:?top.sls [root@master?~]#?mkdir?-p?/etc/salt/states [root@master?~]#?vim?/etc/salt/states/top.sls [root@master?~]#?sed?-i?'329s/#//'?/etc/salt/master? state_top:?top.sls 說明：將329行的注釋取消

進入base環境下，并配置下top.sls

[root@master?~]#?cd?/etc/salt/states/ [root@master?states]#?mkdir?-p?init [root@master?states]#?mkdir?-p?prod [root@master?states]#?vim?top.sls [root@master?states]#?cat?top.sls? base:'node01.saltstack.com':-init.pkg

說明：base是指定一個名稱，init為文件夾的名稱，pkg為pkg.sls

[root@master?states]#?ll 總用量?12 drwxr-xr-x?2?root?root?4096?2月??15?14:16?init drwxr-xr-x?2?root?root?4096?2月??15?14:16?prod -rw-r--r--?1?root?root???46?2月??15?14:17?top.sls [root@master?states]#?cd?init/ [root@master?init]#?vim?pkg.sls [root@master?init]#?cat?pkg.sls? pkg.init:pkg.installed:-?names:-?lrzsz-?mtr-?nmap

案例1：使用salt初始化系統模塊：

[root@master?init]#?salt?'*'?state.sls?init.pkg node01.saltstack.com: ----------ID:?pkg.initFunction:?pkg.installedName:?mtrResult:?TrueComment:?Package?mtr?is?already?installed.Started:?14:56:02.574416Duration:?11389.014?msChanges:??? ----------ID:?pkg.initFunction:?pkg.installedName:?nmapResult:?TrueComment:?Package?nmap?is?already?installed.Started:?14:56:13.963968Duration:?3.619?msChanges:??? ----------ID:?pkg.initFunction:?pkg.installedName:?lrzszResult:?TrueComment:?Package?lrzsz?is?already?installed.Started:?14:56:13.967979Duration:?1.042?msChanges:??? Summary ------------ Succeeded:?3 Failed:????0 ------------ Total?states?run:?????3

案例2：saltstack修改內核參數：

[root@master?~]#?cd?/etc/salt/states/init/ [root@master?init]#?tree . └──?pkg.sls 0?directories,?1?file [root@master?init]#?mkdir?-p?files [root@master?init]#?cd?files/ [root@master?init]#?vim?limit.sls limit-conf-config:file.managed:-?name:?/etc/security/limits.conf-?source:?salt://init/files/limits.conf-?user:?root-?group:?root-?mode:?644 [root@master?files]#?cd?/etc/security/ [root@master?security]#?ls access.conf???????console.perms????limits.d????????opasswd???????????time.conf chroot.conf???????console.perms.d??namespace.conf??pam_env.conf console.apps??????group.conf???????namespace.d?????pam_winbind.conf console.handlers??limits.conf??????namespace.init??sepermit.conf [root@master?security]#?cp?limits.conf?/etc/salt/states/init/files/ [root@master?files]#?vim?limits.conf? *???????????????soft????core????????????0 *???????????????hard????rss?????????????10000 [root@master?states]#?pwd /etc/salt/states 注意：要將新的模塊添加到top.sls中，不然會有其它報錯 [root@master?states]#?cat?top.sls? base:'*':-?init.pkg-?init.limit [root@master?init]#?salt?'*'?state.highstate node01.saltstack.com: ----------ID:?pkg.initFunction:?pkg.installedName:?mtrResult:?TrueComment:?Package?mtr?is?already?installed.Started:?17:42:55.479576Duration:?7120.831?msChanges:??? ----------ID:?pkg.initFunction:?pkg.installedName:?nmapResult:?TrueComment:?Package?nmap?is?already?installed.Started:?17:43:02.601307Duration:?2.278?msChanges:??? ----------ID:?pkg.initFunction:?pkg.installedName:?lrzszResult:?TrueComment:?Package?lrzsz?is?already?installed.Started:?17:43:02.603841Duration:?0.952?msChanges:??? ----------ID:?limit-conf-configFunction:?file.managedName:?/etc/security/limits.confResult:?TrueComment:?File?/etc/security/limits.conf?updatedStarted:?17:43:02.612678Duration:?19.256?msChanges:???----------diff:---??+++??@@?-39,8?+39,8?@@#<domain>??????<type>??<item>?????????<value>#-#*???????????????soft????core????????????0-#*???????????????hard????rss?????????????10000+*???????????????soft????core????????????0+*???????????????hard????rss?????????????10000#@student????????hard????nproc???????????20#@faculty????????soft????nproc???????????20#@faculty????????hard????nproc???????????50 Summary ------------ Succeeded:?4?(changed=1) Failed:????0 ------------ Total?states?run:?????4 客戶端測試： [root@node01?security]#?egrep?-v?'#|^$'?limits.conf? *???????????????soft????core????????????0 *???????????????hard????rss?????????????10000

案例3：同步某個計劃任務

最近發現很多服務器上沒有配置ntp服務器指向，簡單寫個計劃任務，然后通過狀態文件下發 思路： a）準備好需要下發的文件 b）編輯sls文件 c）修改top.sls，添加信息進去 [root@master?~]#?cat?/var/spool/cron/root? */5?*?*?*?*?/usr/sbin/ntpdate?-u?202.120.2.101>/dev/null?2>&1 [root@master?~]#?cd?/etc/salt/states/ [root@master?states]#?ls init??prod??top.sls [root@master?states]#?cd?init/ [root@master?init]#?ls files??limit.sls??pkg.sls [root@master?init]#?cp?limit.sls?ntp-crontab.sls [root@master?init]#?ls files??limit.sls??ntp-crontab.sls??pkg.sls [root@master?init]#?cd?files/ [root@master?files]#?cp?/var/spool/cron/root?. [root@master?files]#?pwd /etc/salt/states/init/files [root@master?files]#?cat?root? */5?*?*?*?*?/usr/sbin/ntpdate?-u?202.120.2.101>/dev/null?2>&1 [root@master?files]#?mv?root?ntp-crontab.conf [root@master?files]#?cat?ntp-crontab.conf? */5?*?*?*?*?/usr/sbin/ntpdate?-u?202.120.2.101>/dev/null?2>&1 [root@master?files]#?cd?.. [root@master?init]#?ls files??limit.sls??ntp-crontab.sls??pkg.sls [root@master?~]#?cat?/etc/salt/states/init/ntp-crontab.sls? ntp-crontab-config:file.managed:-?name:?/var/spool/cron/root-?source:?salt://init/files/ntp-crontab.conf-?user:?root-?group:?root-?mode:?644 計劃任務更新執行結果： [root@master?init]#?salt?'*'?state.highstate node01.saltstack.com: ----------ID:?pkg.initFunction:?pkg.installedName:?mtrResult:?TrueComment:?Package?mtr?is?already?installed.Started:?21:09:06.608808Duration:?4265.514?msChanges:??? ----------ID:?pkg.initFunction:?pkg.installedName:?nmapResult:?TrueComment:?Package?nmap?is?already?installed.Started:?21:09:10.874647Duration:?0.685?msChanges:??? ----------ID:?pkg.initFunction:?pkg.installedName:?lrzszResult:?TrueComment:?Package?lrzsz?is?already?installed.Started:?21:09:10.875446Duration:?0.583?msChanges:??? ----------ID:?limit-conf-configFunction:?file.managedName:?/etc/security/limits.confResult:?TrueComment:?File?/etc/security/limits.conf?is?in?the?correct?stateStarted:?21:09:10.879350Duration:?4.1?msChanges:??? ----------ID:?ntp-crontab-configFunction:?file.managedName:?/var/spool/cron/rootResult:?TrueComment:?File?/var/spool/cron/root?updatedStarted:?21:09:10.883639Duration:?9.342?msChanges:???----------diff:New?filemode:0644 Summary ------------ Succeeded:?5?(changed=1) Failed:????0 ------------ Total?states?run:?????5 node02.saltstack.com: ----------ID:?pkg.initFunction:?pkg.installedName:?mtrResult:?TrueComment:?Package?mtr?is?already?installed.Started:?21:09:07.831431Duration:?4292.2?msChanges:??? ----------ID:?pkg.initFunction:?pkg.installedName:?nmapResult:?TrueComment:?Package?nmap?is?already?installed.Started:?21:09:12.123977Duration:?0.714?msChanges:??? ----------ID:?pkg.initFunction:?pkg.installedName:?lrzszResult:?TrueComment:?Package?lrzsz?is?already?installed.Started:?21:09:12.124798Duration:?0.426?msChanges:??? ----------ID:?limit-conf-configFunction:?file.managedName:?/etc/security/limits.confResult:?TrueComment:?File?/etc/security/limits.conf?is?in?the?correct?stateStarted:?21:09:12.128235Duration:?5.165?msChanges:??? ----------ID:?ntp-crontab-configFunction:?file.managedName:?/var/spool/cron/rootResult:?TrueComment:?File?/var/spool/cron/root?updatedStarted:?21:09:12.133621Duration:?8.761?msChanges:???----------diff:New?filemode:0644 Summary ------------ Succeeded:?5?(changed=1) Failed:????0 ------------ Total?states?run:?????5 檢查結果： [root@node01?spool]#?cd?/var/spool/cron/ [root@node01?cron]#?ls root [root@node01?cron]#?cat?root */5?*?*?*?*?/usr/sbin/ntpdate?-u?202.120.2.101>/dev/null?2>&1 [root@node02?~]#?cat?/var/spool/cron/root? */5?*?*?*?*?/usr/sbin/ntpdate?-u?202.120.2.101>/dev/null?2>&1 通過對比會發現，與master的下發文件一致

案例4：同步內網的hosts文件（適用于內網沒有建立獨立DNS的情況）

[root@master?~]#?cd?/etc/salt/states/init/ [root@master?init]#?ll 總用量?16 drwxr-xr-x?2?root?root?4096?2月??18?21:01?files -rw-r--r--?1?root?root??168?2月??18?17:42?limit.sls -rw-r--r--?1?root?root??169?2月??18?21:08?ntp-crontab.sls -rw-r--r--?1?root?root???79?2月??15?14:55?pkg.sls [root@master?init]#?cd?files/ [root@master?files]#?vim?hosts.conf? 127.0.0.1???localhost?localhost.localdomain?localhost4?localhost4.localdomain4 ::1?????????localhost?localhost.localdomain?localhost6?localhost6.localdomain6 10.10.10.140????master??master.saltstack.com 10.10.10.141????node01??node01.saltstack.com 10.10.10.142????node02??node02.saltstack.com 10.10.10.143????node03??node03.saltstack.com [root@master?init]#?cat?hosts.sls? hosts-config:file.managed:-?name:?/etc/hosts-?source:?salt://init/files/hosts.conf-?user:?root-?group:?root-?mode:?644 說明：下發文件到/etc/hosts，源文件 [root@master?states]#?cat?/etc/salt/states/top.sls? base:'*':-?init.pkg-?init.limit-?init.ntp-crontab-?init.hosts [root@master?states]#?salt?'*'?state.highstate ----------前面的部分我直接省略了-------------- ----------ID:?hosts-configFunction:?file.managedName:?/etc/hostsResult:?TrueComment:?File?/etc/hosts?updatedStarted:?21:31:43.644962Duration:?13.119?msChanges:???----------diff:---??+++??@@?-3,3?+3,4?@@10.10.10.140?mastermaster.saltstack.com10.10.10.141?node01node01.saltstack.com10.10.10.142?node02node02.saltstack.com+10.10.10.143??node03node03.saltstack.com Summary ------------ Succeeded:?6?(changed=1) Failed:????0 ------------ Total?states?run:?????6 客戶端進行測試： [root@node01?cron]#?cat?/etc/hosts 127.0.0.1???localhost?localhost.localdomain?localhost4?localhost4.localdomain4 ::1?????????localhost?localhost.localdomain?localhost6?localhost6.localdomain6 10.10.10.140?master?master.saltstack.com 10.10.10.141?node01?node01.saltstack.com 10.10.10.142?node02?node02.saltstack.com 10.10.10.143?node03?node03.saltstack.com [root@node02?~]#?cat?/etc/hosts 127.0.0.1???localhost?localhost.localdomain?localhost4?localhost4.localdomain4 ::1?????????localhost?localhost.localdomain?localhost6?localhost6.localdomain6 10.10.10.140?master?master.saltstack.com 10.10.10.141?node01?node01.saltstack.com 10.10.10.142?node02?node02.saltstack.com 10.10.10.143?node03?node03.saltstack.com 如果此時我在master端修改hosts.conf文件 [root@master?init]#?pwd /etc/salt/states/init [root@master?init]#?cat?files/hosts.conf? 127.0.0.1???localhost?localhost.localdomain?localhost4?localhost4.localdomain4 ::1?????????localhost?localhost.localdomain?localhost6?localhost6.localdomain6 10.10.10.140?master?master.saltstack.com 10.10.10.141?node01?node01.saltstack.com 10.10.10.142?node02?node02.saltstack.com 10.10.10.143?node03?node03.saltstack.com 10.10.10.144?openstack01?openstack01.saltstack.com 10.10.10.145?openstack02?openstack02.saltstack.com [root@master?init]#?salt?'*'?state.highstate ----------前面的部分我直接省略了-------------- ----------ID:?hosts-configFunction:?file.managedName:?/etc/hostsResult:?TrueComment:?File?/etc/hosts?updatedStarted:?21:37:50.679328Duration:?78.269?msChanges:???----------diff:---??+++??@@?-4,3?+4,5?@@10.10.10.141node01node01.saltstack.com10.10.10.142node02node02.saltstack.com10.10.10.143node03node03.saltstack.com+10.10.10.144openstack01openstack01.saltstack.com+10.10.10.145openstack02openstack02.saltstack.com Summary ------------ Succeeded:?6?(changed=1) Failed:????0 ------------ Total?states?run:?????6 客戶端進行測試： [root@node01?cron]#?cat?/etc/hosts 127.0.0.1???localhost?localhost.localdomain?localhost4?localhost4.localdomain4 ::1?????????localhost?localhost.localdomain?localhost6?localhost6.localdomain6 10.10.10.140?master?master.saltstack.com 10.10.10.141?node01?node01.saltstack.com 10.10.10.142?node02?node02.saltstack.com 10.10.10.143?node03?node03.saltstack.com 10.10.10.144?openstack01?openstack01.saltstack.com 10.10.10.145?openstack02?openstack02.saltstack.com [root@node02?~]#?cat?/etc/hosts 127.0.0.1???localhost?localhost.localdomain?localhost4?localhost4.localdomain4 ::1?????????localhost?localhost.localdomain?localhost6?localhost6.localdomain6 10.10.10.140?master?master.saltstack.com 10.10.10.141?node01?node01.saltstack.com 10.10.10.142?node02?node02.saltstack.com 10.10.10.143?node03?node03.saltstack.com

關于salt批量配置hosts文件：http://www.ttlsa.com/linux/salt-modules-hosts/

這里我只寫一個添加hosts文件的例子，更多內容可以參考上面的鏈接（干貨很多）

[root@master?~]#?salt?'*'?hosts.set_host?10.10.10.145?openstack02.saltstack.com node02.saltstack.com:True node01.saltstack.com:True [root@master?~]#?salt?'*'?hosts.set_host?10.10.10.143?openstack03.saltstack.com node02.saltstack.com:True node01.saltstack.com:True [root@master?~]#?salt-ssh?'*'?cmd.run?'tail?-2?/etc/hosts' node02:10.10.10.144?openstack01?openstack01.saltstack.com10.10.10.145?openstack02.saltstack.com node01:10.10.10.144?openstack01?openstack01.saltstack.com10.10.10.145?openstack02.saltstack.com

轉載于:https://blog.51cto.com/molewan/1899125

總結

以上是生活随笔為你收集整理的saltstack的状态文件的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。