Community Learn Tools Library Leisure
search
English
Home > List of blog posts > 【Puppet】安装配置Puppet
Blogger Information
Blog 60
fans 0
comment 0
visits 66700
Special Recommendation
More>
Related recommendations
Popular Tutorials
More>
Related Tutorials
Popular Recommendations
Latest courses
Latest Downloads
More>
Web Effects
Website Source Code
Website Materials
Front End Template
【Puppet】安装配置Puppet
大宝
Original
813 people have browsed it

一、参考链接

阿里巴巴开源镜像站-OPSX镜像站-阿里云开发者社区

puppet镜像-puppet下载地址-puppet安装教程-阿里巴巴开源镜像站

序 | Puppet运维实战 (gitbooks.io)

二、Puppet介绍

Puppet是IT自动化的行业标准。 以一种简单而强大的方式管理和自动化更多的基础架构和复杂的工作流。

三、Puppet安装

安装准备

master和node端

  1. # 修改主机名
  2. hostnamectl set-hostname master
  4. #配置域名解析
  5.  vim /etc/hosts
  6. 192.168.200.11  master
  7. 192.168.200.12  node
  9. #关闭防火墙
  10. systemctl stop firewalld
  11. systemctl disable firewalld
  13. #关闭SELinux安全模式
  14. setenforce 0
  15. sed -i 's/SELINUX=.*/SELINUX=disabled/g' /etc/selinux/config
  17. #配置时间同步
  18. yum install -y ntpdate
  19. ntpdate ntp1.aliyun.com
  21. #配置CentOS镜像源
  22. curl -o /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-7.repo
  24. sed -i -e '/mirrors.cloud.aliyuncs.com/d' -e '/mirrors.aliyuncs.com/d' /etc/yum.repos.d/CentOS-Base.repo
  26. #更新YUM源
  27. yum clean all
  28. yum makecache
  30. #升级系统
  31. yum update

安装master端

安装、配置并使用Puppet | Puppet运维实战

https://puppet.com/

  1. # 安装阿里云仓库
  2. rpm -ivh https://mirrors.aliyun.com/puppet/yum/puppetlabs-release-el-7.noarch.rpm
  4. # 安装Puppet-server、puppet和facter
  5. yum install -y puppet puppet-server facter
  7. # 备份配置文件
  8. cp /etc/puppet/puppet.conf{,.bak} 
  10. # 配置puppet.conf
  11. [root@master puppet]# vim puppet.conf
  12. [root@master puppet]# cat puppet.conf
  13. [main]
  14.     # The Puppet log directory.
  15.     # The default value is '$vardir/log'.
  16.     logdir = /var/log/puppet
  18.     # Where Puppet PID files are kept.
  19.     # The default value is '$vardir/run'.
  20.     rundir = /var/run/puppet
  22.     # Where SSL certificates are kept.
  23.     # The default value is '$confdir/ssl'.
  24.     ssldir = $vardir/ssl
  26. [agent]
  27.     # The file in which puppetd stores a list of the classes
  28.     # associated with the retrieved configuratiion.  Can be loaded in
  29.     # the separate ``puppet`` executable using the ``--loadclasses``
  30.     # option.
  31.     # The default value is '$confdir/classes.txt'.
  32.     classfile = $vardir/classes.txt
  34.     # Where puppetd caches the local configuration.  An
  35.     # extension indicating the cache format is added automatically.
  36.     # The default value is '$confdir/localconfig'.
  37.     localconfig = $vardir/localconfig
  38.     server = master
  39.     certname = node
  41. [master]
  42.     certname = master
  43. [root@master puppet]# 
  45. # 启动puppetmaster服务
  46. systemctl start puppetmaster
  47. systemctl enable puppetmaster
  48. systemctl status puppetmaster
  50. # 查看本地证书情况
  51. # puppetmaster第一次启动会自动生成证书自动注册自己
  52. [root@master puppet]# tree /var/lib/puppet/ssl/
  53. /var/lib/puppet/ssl/
  54. ├── ca
  55. │   ├── ca_crl.pem
  56. │   ├── ca_crt.pem
  57. │   ├── ca_key.pem
  58. │   ├── ca_pub.pem
  59. │   ├── inventory.txt
  60. │   ├── private
  61. │   │   └── ca.pass
  62. │   ├── requests
  63. │   ├── serial
  64. │   └── signed
  65. │       └── master.pem
  66. ├── certificate_requests
  67. ├── certs
  68. │   ├── ca.pem
  69. │   └── master.pem
  70. ├── crl.pem
  71. ├── private
  72. ├── private_keys
  73. │   └── master.pem
  74. └── public_keys
  75.     └── master.pem
  77. 9 directories, 13 files
  78. [root@master puppet]# 
  80. # 查看监听状态
  81. # puppetmaster服务开启后，默认监听TCP 8140端口
  82. [root@master puppet]# netstat -nlatp | grep 8140
  83. tcp        0      0 0.0.0.0:8140            0.0.0.0:*               LISTEN      1396/ruby 
  84. [root@master puppet]# lsof -i:8140
  85. COMMAND  PID   USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
  86. puppet  1396 puppet    8u  IPv4  24447      0t0  TCP *:8140 (LISTEN)

安装node端

  1. # 安装准备步骤相同
  3. # 安装阿里云仓库
  4. rpm -ivh https://mirrors.aliyun.com/puppet/yum/puppetlabs-release-el-7.noarch.rpm
  6. # 安装puppet和facter
  7. yum install puppet facter
  9. # 配置puppet.conf
  10. [root@node ~]# cp /etc/puppet/puppet.conf{,.bak}    #备份配置文件
  11. [root@node ~]# cat /etc/puppet/puppet.conf        
  12. [main]
  13.     # The Puppet log directory.
  14.     # The default value is '$vardir/log'.
  15.     logdir = /var/log/puppet        #默认日志存放路径
  17.     # Where Puppet PID files are kept.
  18.     # The default value is '$vardir/run'.
  19.     rundir = /var/run/puppet        #pid存放路径
  21.     # Where SSL certificates are kept.
  22.     # The default value is '$confdir/ssl'.
  23.     ssldir = $vardir/ssl             #证书存放目录，默认$vardir为/var/lib/puppet
  25. [agent]
  26.     # The file in which puppetd stores a list of the classes
  27.     # associated with the retrieved configuratiion.  Can be loaded in
  28.     # the separate ``puppet`` executable using the ``--loadclasses``
  29.     # option.
  30.     # The default value is '$confdir/classes.txt'.
  31.     classfile = $vardir/classes.txt
  33.     # Where puppetd caches the local configuration.  An
  34.     # extension indicating the cache format is added automatically.
  35.     # The default value is '$confdir/localconfig'.
  36.     localconfig = $vardir/localconfig
  37.     server = master        #指向puppetmaster端
  38.     certname = node        #设置自己的certname名
  41. # 开启puppet服务
  42. systemctl start puppet
  43. systemctl enable puppet

Node端向Master端发起认证

  1. # 通过调试模式启动节点向Puppetmaster端发起认证
  2. [root@node ~]# puppet agent --test
  3. Info: Retrieving pluginfacts
  4. Info: Retrieving plugin
  5. Info: Caching catalog for node
  6. Info: Applying configuration version '1645352953'
  7. Notice: Finished catalog run in 0.01 seconds
  9. # 服务器端确定认证
  10. [root@master ~]# puppet cert --list --all    #查看认证情况
  11.   "node"   (SHA256) 6F:FC:CF:DB:1F:F1:B4:91:C7:8B:48:DE:64:A1:8D:D9:24:27:4B:B9:A9:72:5C:0E:6D:3F:A3:0B:B7:37:87:AE #未认证
  12. + "master" (SHA256) 87:C4:5B:16:2A:13:E1:D0:B0:58:63:2F:F1:87:98:6D:B6:A4:5D:9B:65:92:D8:72:38:45:FF:2A:18:FD:BA:41    #带+表示已经注册成功
  13. [root@master ~]#
  15. [root@master ~]# puppet cert --sign node    #注册node
  16. Notice: Signed certificate request for node
  17. Notice: Removing file Puppet::SSL::CertificateRequest node at '/var/lib/puppet/ssl/ca/requests/node.pem'
  18. [root@master ~]#
  20. [root@master ~]# puppet cert --list --all   #再次查看认证情况
  21. + "master" (SHA256) 87:C4:5B:16:2A:13:E1:D0:B0:58:63:2F:F1:87:98:6D:B6:A4:5D:9B:65:92:D8:72:38:45:FF:2A:18:FD:BA:41
  22. + "node"   (SHA256) 35:B1:01:AA:28:DF:76:AA:B2:67:BE:D4:5C:C1:90:3C:C2:68:44:9A:BA:F3:DD:96:2B:37:6E:9E:85:11:E3:E1
  25. [root@master ~]# tree /var/lib/puppet/ssl/    #另外一种查看认证的方式
  26. /var/lib/puppet/ssl/
  27. ├── ca
  28. │   ├── ca_crl.pem
  29. │   ├── ca_crt.pem
  30. │   ├── ca_key.pem
  31. │   ├── ca_pub.pem
  32. │   ├── inventory.txt
  33. │   ├── private
  34. │   │   └── ca.pass
  35. │   ├── requests
  36. │   ├── serial
  37. │   └── signed
  38. │       ├── master.pem
  39. │       └── node.pem
  40. ├── certificate_requests
  41. │   └── node.pem
  42. ├── certs
  43. │   ├── ca.pem
  44. │   ├── master.pem
  45. │   └── node.pem
  46. ├── crl.pem
  47. ├── private
  48. ├── private_keys
  49. │   ├── master.pem
  50. │   └── node.pem
  51. └── public_keys
  52.     ├── master.pem
  53.     └── node.pem
  55. 9 directories, 18 files
Statement of this Website
The copyright of this blog article belongs to the blogger. Please specify the address when reprinting! If there is any infringement or violation of the law, please contact admin@php.cn Report processing!
All comments Speak rationally on civilized internet, please comply with News Comment Service Agreement
0 comments
Author's latest blog post