欢迎光临
我的个人博客网站

CentOS 8.2上安装部署SaltStack Master和 Minion

目录

CentOS 8.2上安装部署SaltStack Master和 Minion

在本文中,您将学习如何在CentOS 8上安装SaltStack Master和 SaltStack Minion。

环境规格:

SaltStack Master配置

  • CPU -3.4 GHz(2核)

  • 内存-4 GB

  • 储存空间-50 GB

  • 作业系统-CentOS 8.2

  • 主机名– saltstack-master.lianglab.cn

  • IP地址-192.168.6.175/24

    SaltStack Minion配置

  • CPU -3.4 GHz(2核)

  • 内存-4 GB

  • 储存空间-50 GB

  • 作业系统-CentOS 8.2

  • 主机名– saltstack-minion.lianglab.cn

  • IP地址-192.168.6.190/24

    SaltStack Master和Minion hostname修改

    [root@Master yum.repos.d]# hostnamectl set-hostname saltstack-master.lianglab.cn [root@Minion yum.repos.d]# hostnamectl set-hostname saltstack-minion.lianglab.cn  

    SaltStack Master和Minion hosts修改

    [root@saltstack-master yum.repos.d]# cat /etc/hosts 127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1         localhost localhost.localdomain localhost6 localhost6.localdomain6 192.168.6.175 saltstack-master.lianglab.cn 192.168.6.190 saltstack-minion.lianglab.cn   [root@saltstack-minion ~]# cat  /etc/hosts 127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1         localhost localhost.localdomain localhost6 localhost6.localdomain6 192.168.6.175 saltstack-master.lianglab.cn 192.168.6.190 saltstack-minion.lianglab.cn  

第一步:什么是SaltStack Master

SaltStack或Salt是基于Python的开源软件,用于基于事件的IT自动化,远程任务执行和配置管理。SaltStack支持“基础架构即代码”方法来进行数据中心系统和网络的部署和管理,配置自动化,SecOps编排,漏洞修复以及混合云控制。(维基百科提供

SaltStack Master是服务器节点,它是控制所有Salstack Minions的中央服务器。Saltstack Master拥有SaltStack奴才的清单和公钥,并对这些奴才执行远程执行。

第二步:更新SaltStack Master CentOS 8软件包

使用ssh工具以root用户身份与saltstack-master.lianglab.cn连接。

将所有现有软件包更新为最新的可用版本。

[root@saltstack-master ~]# dnf update -y ... Upgraded:   NetworkManager-1:1.22.8-5.el8_2.x86_64   NetworkManager-libnm-1:1.22.8-5.el8_2.x86_64   NetworkManager-team-1:1.22.8-5.el8_2.x86_64   NetworkManager-tui-1:1.22.8-5.el8_2.x86_64   bind-export-libs-32:9.11.13-5.el8_2.x86_64   dbus-1:1.12.8-10.el8_2.x86_64   dbus-common-1:1.12.8-10.el8_2.noarch   dbus-daemon-1:1.12.8-10.el8_2.x86_64   dbus-libs-1:1.12.8-10.el8_2.x86_64   dbus-tools-1:1.12.8-10.el8_2.x86_64   dnf-4.2.17-7.el8_2.noarch   dnf-data-4.2.17-7.el8_2.noarch   gnutls-3.6.8-11.el8_2.x86_64   grub2-common-1:2.02-87.el8_2.noarch   grub2-pc-1:2.02-87.el8_2.x86_64   grub2-pc-modules-1:2.02-87.el8_2.noarch   grub2-tools-1:2.02-87.el8_2.x86_64   grub2-tools-efi-1:2.02-87.el8_2.x86_64   grub2-tools-extra-1:2.02-87.el8_2.x86_64   grub2-tools-minimal-1:2.02-87.el8_2.x86_64   iptables-1.8.4-10.el8_2.1.x86_64   iptables-ebtables-1.8.4-10.el8_2.1.x86_64   iptables-libs-1.8.4-10.el8_2.1.x86_64   kernel-tools-4.18.0-193.14.2.el8_2.x86_64   kernel-tools-libs-4.18.0-193.14.2.el8_2.x86_64   libdnf-0.39.1-6.el8_2.x86_64   libnghttp2-1.33.0-3.el8_2.1.x86_64   microcode_ctl-4:20191115-4.20200609.1.el8_2.x86_64   open-vm-tools-11.0.5-3.el8.x86_64   python3-dnf-4.2.17-7.el8_2.noarch   python3-hawkey-0.39.1-6.el8_2.x86_64   python3-libdnf-0.39.1-6.el8_2.x86_64   python3-perf-4.18.0-193.14.2.el8_2.x86_64   selinux-policy-3.14.3-41.el8_2.5.noarch   selinux-policy-targeted-3.14.3-41.el8_2.5.noarch   systemd-239-31.el8_2.2.x86_64   systemd-libs-239-31.el8_2.2.x86_64   systemd-pam-239-31.el8_2.2.x86_64   systemd-udev-239-31.el8_2.2.x86_64   yum-4.2.17-7.el8_2.noarch  Installed:   kernel-4.18.0-193.14.2.el8_2.x86_64   kernel-core-4.18.0-193.14.2.el8_2.x86_64   kernel-modules-4.18.0-193.14.2.el8_2.x86_64  Removed:   kernel-4.18.0-147.5.1.el8_1.x86_64   kernel-core-4.18.0-147.5.1.el8_1.x86_64   kernel-modules-4.18.0-147.5.1.el8_1.x86_64  Complete! 

我们的CentOS 8软件包已成功更新。

第三步:SaltStack Master上安装Python

SaltStack用Python编写,因此,它需要Python语言支持才能编译和执行SaltStack命令。

Python3在默认的CentOS AppStream中可用,因此,我们可以使用dnf命令安装它。

[root@saltstack-master src]# dnf install -y python3 Last metadata expiration check: 0:16:42 ago on Tue 11 Aug 2020 12:07:17 AM PKT. Dependencies resolved. ================================================================================  Package            Arch   Version                              Repo       Size ================================================================================ Installing:  python36           x86_64 3.6.8-2.module_el8.1.0+245+c39af44f  AppStream  19 k Installing dependencies:  python3-pip        noarch 9.0.3-16.el8                         AppStream  19 k  python3-setuptools noarch 39.2.0-5.el8                         BaseOS    162 k Enabling module streams:  python36                  3.6  Transaction Summary ================================================================================ Install  3 Packages  Total download size: 201 k Installed size: 466 k Downloading Packages: (1/3): python3-setuptools-39.2.0-5.el8.noarch.r 658 kB/s | 162 kB     00:00 (2/3): python3-pip-9.0.3-16.el8.noarch.rpm      641  B/s |  19 kB     00:31 (3/3): python36-3.6.8-2.module_el8.1.0+245+c39a 627  B/s |  19 kB     00:31 -------------------------------------------------------------------------------- Total                                           6.2 kB/s | 201 kB     00:32 Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction   Preparing        :                                                        1/1   Installing       : python3-setuptools-39.2.0-5.el8.noarch                 1/3   Installing       : python36-3.6.8-2.module_el8.1.0+245+c39af44f.x86_64    2/3   Running scriptlet: python36-3.6.8-2.module_el8.1.0+245+c39af44f.x86_64    2/3   Installing       : python3-pip-9.0.3-16.el8.noarch                        3/3   Running scriptlet: python3-pip-9.0.3-16.el8.noarch                        3/3   Verifying        : python3-pip-9.0.3-16.el8.noarch                        1/3   Verifying        : python36-3.6.8-2.module_el8.1.0+245+c39af44f.x86_64    2/3   Verifying        : python3-setuptools-39.2.0-5.el8.noarch                 3/3  Installed:   python3-pip-9.0.3-16.el8.noarch   python3-setuptools-39.2.0-5.el8.noarch   python36-3.6.8-2.module_el8.1.0+245+c39af44f.x86_64  Complete! 

Python 3.6已安装在CentOS 8服务器上。

第四步:CentOS 8上安装SaltStack官方Yum存储库

尽管可以通过EPEL(企业Linux的额外软件包) yum存储库获得SaltStack软件包。但是,如果要安装最新版本,则应安装SaltStack的官方yum存储库。

使用以下命令在CentOS 8上安装SaltStack官方yum存储库。

[root@saltstack-master yum.repos.d]# wget https://repo.saltstack.com/py3/redhat/salt-py3-repo-latest.el8.noarch.rpm [root@saltstack-master yum.repos.d]# dnf -y install salt-py3-repo-latest.el8.noarch.rpm Last metadata expiration check: 1 day, 1:25:58 ago on Tue 15 Dec 2020 08:46:52 PM CST. Dependencies resolved. ============================================================================================================================  Package                        Architecture            Version                         Repository                     Size ============================================================================================================================ Installing:  salt-py3-repo                  noarch                  latest-4.el8                    @commandline                  8.9 k  Transaction Summary ============================================================================================================================ Install  1 Package  Total size: 8.9 k Installed size: 2.0 k Downloading Packages: Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction   Preparing        :                                                                                                    1/1    Installing       : salt-py3-repo-latest-4.el8.noarch                                                                  1/1    Verifying        : salt-py3-repo-latest-4.el8.noarch                                                                  1/1  Installed products updated.  Installed:   salt-py3-repo-latest-4.el8.noarch                                                                                           Complete! [root@saltstack-master yum.repos.d]#   

为新安装的yum存储库构建缓存。

[root@saltstack-master yum.repos.d]# dnf makecache CentOS-8 - Base - mirrors.tongdun.cn                                                        2.1 MB/s | 3.9 kB     00:00     CentOS-8 - Extras - mirrors.tongdun.cn                                                      1.1 MB/s | 1.5 kB     00:00     CentOS-8 - AppStream - mirrors.tongdun.cn                                                   2.6 MB/s | 4.3 kB     00:00     Extra Packages for Enterprise Linux 8 - x86_64                                              3.0 MB/s | 4.7 kB     00:00     Extra Packages for Enterprise Linux 8 - x86_64 - Debug                                      1.6 MB/s | 3.0 kB     00:00 

第五步:CentOS 8上安装SaltStack Master

我们添加了SaltStack yum存储库,现在我们可以使用dnf命令轻松安装SaltStack软件包的最新版本。

安装SaltStack主服务器所需的必要的SaltStack软件包。

[root@saltstack-master yum.repos.d]# dnf install -y salt-master salt-minion salt-ssh salt-syndic salt-cloud salt-api Last metadata expiration check: 0:00:58 ago on Wed 16 Dec 2020 10:22:18 PM CST. Dependencies resolved. ============================================================================================================================  Package                          Architecture   Version                                      Repository               Size ============================================================================================================================ Installing:  salt-api                         noarch         3002.2-1.el8                                 salt-py3-latest          24 k  salt-cloud                       noarch         3002.2-1.el8                                 salt-py3-latest          27 k  salt-master                      noarch         3002.2-1.el8                                 salt-py3-latest         3.1 M  salt-minion                      noarch         3002.2-1.el8                                 salt-py3-latest          43 k  salt-ssh                         noarch         3002.2-1.el8                                 salt-py3-latest          25 k  salt-syndic                      noarch         3002.2-1.el8                                 salt-py3-latest          24 k Upgrading:  dnf-plugins-core                 noarch         4.0.12-4.el8_2                               base                     64 k  python3-dnf-plugins-core         noarch         4.0.12-4.el8_2                               base                    204 k Installing dependencies:  libsodium                        x86_64         1.0.18-2.el8                                 epel                    162 k  libunwind                        x86_64         1.3.1-3.el8                                  epel                     75 k  openpgm                          x86_64         5.2.122-21.el8                               epel                    180 k  python3-babel                    noarch         2.5.1-5.el8                                  AppStream               4.8 M  python3-cheroot                  noarch         8.2.1-1.el8                                  epel                    145 k  python3-cherrypy                 noarch         18.4.0-1.el8                                 epel                    384 k  python3-distro                   noarch         1.4.0-2.module_el8.1.0+245+c39af44f          AppStream                37 k  python3-jaraco                   noarch         6.2-6.el8                                    epel                     11 k  python3-jaraco-functools         noarch         2.0-4.el8                                    epel                     18 k  python3-jinja2                   noarch         2.10.1-2.el8_0                               AppStream               538 k  python3-libcloud                 noarch         2.4.0-1.el8                                  salt-py3-latest         1.4 M  python3-m2crypto                 x86_64         0.35.2-5.el8                                 epel                    303 k  python3-markupsafe               x86_64         0.23-19.el8                                  AppStream                39 k  python3-more-itertools           noarch         7.2.0-3.el8                                  epel                     59 k  python3-msgpack                  x86_64         0.6.2-1.el8                                  epel                     92 k  python3-portend                  noarch         2.6-1.el8                                    epel                     16 k  python3-psutil                   x86_64         5.6.3-5.el8                                  epel                    396 k  python3-tempora                  noarch         1.14.1-5.el8                                 epel                     29 k  python3-trustme                  noarch         0.6.0-4.el8                                  epel                     27 k  python3-zc-lockfile              noarch         2.0-2.el8                                    epel                     23 k  python3-zmq                      x86_64         19.0.0-1.el8                                 epel                    418 k  salt                             noarch         3002.2-1.el8                                 salt-py3-latest          10 M  yum-utils                        noarch         4.0.12-4.el8_2                               base                     66 k  zeromq                           x86_64         4.3.3-1.el8                                  epel                    478 k  Transaction Summary ============================================================================================================================ Install  30 Packages Upgrade   2 Packages  Total download size: 24 M Downloading Packages: (1/32): yum-utils-4.0.12-4.el8_2.noarch.rpm                                                 3.5 MB/s |  66 kB     00:00     (2/32): python3-distro-1.4.0-2.module_el8.1.0+245+c39af44f.noarch.rpm                       937 kB/s |  37 kB     00:00     (3/32): python3-jinja2-2.10.1-2.el8_0.noarch.rpm                                             14 MB/s | 538 kB     00:00     (4/32): python3-markupsafe-0.23-19.el8.x86_64.rpm                                           2.2 MB/s |  39 kB     00:00     (5/32): libunwind-1.3.1-3.el8.x86_64.rpm                                                    5.0 MB/s |  75 kB     00:00     (6/32): libsodium-1.0.18-2.el8.x86_64.rpm                                                   6.6 MB/s | 162 kB     00:00     (7/32): openpgm-5.2.122-21.el8.x86_64.rpm                                                   7.6 MB/s | 180 kB     00:00     (8/32): python3-babel-2.5.1-5.el8.noarch.rpm                                                 38 MB/s | 4.8 MB     00:00     (9/32): python3-cheroot-8.2.1-1.el8.noarch.rpm                                              2.9 MB/s | 145 kB     00:00     (10/32): python3-jaraco-6.2-6.el8.noarch.rpm                                                5.5 MB/s |  11 kB     00:00     (11/32): python3-jaraco-functools-2.0-4.el8.noarch.rpm                                      8.3 MB/s |  18 kB     00:00     (12/32): python3-cherrypy-18.4.0-1.el8.noarch.rpm                                           9.9 MB/s | 384 kB     00:00     (13/32): python3-msgpack-0.6.2-1.el8.x86_64.rpm                                             7.8 MB/s |  92 kB     00:00     (14/32): python3-portend-2.6-1.el8.noarch.rpm                                               4.6 MB/s |  16 kB     00:00     (15/32): python3-more-itertools-7.2.0-3.el8.noarch.rpm                                      2.9 MB/s |  59 kB     00:00     (16/32): python3-m2crypto-0.35.2-5.el8.x86_64.rpm                                            13 MB/s | 303 kB     00:00     (17/32): python3-tempora-1.14.1-5.el8.noarch.rpm                                             11 MB/s |  29 kB     00:00     (18/32): python3-zc-lockfile-2.0-2.el8.noarch.rpm                                           1.7 MB/s |  23 kB     00:00     (19/32): python3-trustme-0.6.0-4.el8.noarch.rpm                                             1.8 MB/s |  27 kB     00:00     (20/32): python3-psutil-5.6.3-5.el8.x86_64.rpm                                               16 MB/s | 396 kB     00:00     (21/32): python3-zmq-19.0.0-1.el8.x86_64.rpm                                                 18 MB/s | 418 kB     00:00     (22/32): zeromq-4.3.3-1.el8.x86_64.rpm                                                       13 MB/s | 478 kB     00:00     (23/32): salt-api-3002.2-1.el8.noarch.rpm                                                    12 kB/s |  24 kB     00:01     (24/32): salt-cloud-3002.2-1.el8.noarch.rpm                                                  22 kB/s |  27 kB     00:01     (25/32): python3-libcloud-2.4.0-1.el8.noarch.rpm                                               124 kB/s | 1.4 MB     00:11     (26/32): salt-minion-3002.2-1.el8.noarch.rpm                                                    33 kB/s |  43 kB     00:01     (27/32): salt-master-3002.2-1.el8.noarch.rpm                                                   322 kB/s | 3.1 MB     00:09     (28/32): salt-ssh-3002.2-1.el8.noarch.rpm                                                       55 kB/s |  25 kB     00:00     (29/32): dnf-plugins-core-4.0.12-4.el8_2.noarch.rpm                                             21 MB/s |  64 kB     00:00     (30/32): python3-dnf-plugins-core-4.0.12-4.el8_2.noarch.rpm                                     38 MB/s | 204 kB     00:00     (31/32): salt-syndic-3002.2-1.el8.noarch.rpm                                                    40 kB/s |  24 kB     00:00     (32/32): salt-3002.2-1.el8.noarch.rpm                                                          373 kB/s |  10 MB     00:28     ------------------------------------------------------------------------------------------------------------------------------- Total                                                                                          833 kB/s |  24 MB     00:29      warning: /var/cache/dnf/salt-py3-latest-ab32c742cbd8c211/packages/python3-libcloud-2.4.0-1.el8.noarch.rpm: Header V4 RSA/SHA256 Signature, key ID de57bfbe: NOKEY SaltStack Latest Release Channel Python 3 for RHEL/Centos 8                                    1.7 MB/s | 1.7 kB     00:00     Importing GPG key 0xDE57BFBE:  Userid     : "SaltStack Packaging Team <packaging@saltstack.com>"  Fingerprint: 754A 1A7A E731 F165 D5E6 D4BD 0E08 A149 DE57 BFBE  From       : /etc/pki/rpm-gpg/saltstack-signing-key Key imported successfully Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction   Preparing        :                                                                                                       1/1    Installing       : python3-more-itertools-7.2.0-3.el8.noarch                                                            1/34    Installing       : python3-markupsafe-0.23-19.el8.x86_64                                                                2/34    Upgrading        : python3-dnf-plugins-core-4.0.12-4.el8_2.noarch                                                       3/34    Upgrading        : dnf-plugins-core-4.0.12-4.el8_2.noarch                                                               4/34    Installing       : yum-utils-4.0.12-4.el8_2.noarch                                                                      5/34    Installing       : python3-libcloud-2.4.0-1.el8.noarch                                                                  6/34    Installing       : python3-zc-lockfile-2.0-2.el8.noarch                                                                 7/34    Installing       : python3-trustme-0.6.0-4.el8.noarch                                                                   8/34    Installing       : python3-psutil-5.6.3-5.el8.x86_64                                                                    9/34    Installing       : python3-msgpack-0.6.2-1.el8.x86_64                                                                  10/34    Installing       : python3-m2crypto-0.35.2-5.el8.x86_64                                                                11/34    Installing       : python3-jaraco-6.2-6.el8.noarch                                                                     12/34    Installing       : python3-jaraco-functools-2.0-4.el8.noarch                                                           13/34    Installing       : python3-cheroot-8.2.1-1.el8.noarch                                                                  14/34    Installing       : python3-tempora-1.14.1-5.el8.noarch                                                                 15/34    Installing       : python3-portend-2.6-1.el8.noarch                                                                    16/34    Installing       : python3-cherrypy-18.4.0-1.el8.noarch                                                                17/34    Installing       : openpgm-5.2.122-21.el8.x86_64                                                                       18/34    Installing       : libunwind-1.3.1-3.el8.x86_64                                                                        19/34    Installing       : libsodium-1.0.18-2.el8.x86_64                                                                       20/34    Installing       : zeromq-4.3.3-1.el8.x86_64                                                                           21/34    Installing       : python3-zmq-19.0.0-1.el8.x86_64                                                                     22/34    Installing       : python3-distro-1.4.0-2.module_el8.1.0+245+c39af44f.noarch                                           23/34    Installing       : python3-babel-2.5.1-5.el8.noarch                                                                    24/34    Installing       : python3-jinja2-2.10.1-2.el8_0.noarch                                                                25/34    Installing       : salt-3002.2-1.el8.noarch                                                                            26/34    Installing       : salt-master-3002.2-1.el8.noarch                                                                     27/34    Running scriptlet: salt-master-3002.2-1.el8.noarch                                                                     27/34    Installing       : salt-api-3002.2-1.el8.noarch                                                                        28/34    Running scriptlet: salt-api-3002.2-1.el8.noarch                                                                        28/34    Installing       : salt-cloud-3002.2-1.el8.noarch                                                                      29/34    Installing       : salt-syndic-3002.2-1.el8.noarch                                                                     30/34    Running scriptlet: salt-syndic-3002.2-1.el8.noarch                                                                     30/34    Installing       : salt-minion-3002.2-1.el8.noarch                                                                     31/34    Running scriptlet: salt-minion-3002.2-1.el8.noarch                                                                     31/34    Installing       : salt-ssh-3002.2-1.el8.noarch                                                                        32/34    Cleanup          : dnf-plugins-core-4.0.12-3.el8.noarch                                                                33/34    Cleanup          : python3-dnf-plugins-core-4.0.12-3.el8.noarch                                                        34/34    Running scriptlet: python3-dnf-plugins-core-4.0.12-3.el8.noarch                                                        34/34    Verifying        : yum-utils-4.0.12-4.el8_2.noarch                                                                      1/34    Verifying        : python3-babel-2.5.1-5.el8.noarch                                                                     2/34    Verifying        : python3-distro-1.4.0-2.module_el8.1.0+245+c39af44f.noarch                                            3/34    Verifying        : python3-jinja2-2.10.1-2.el8_0.noarch                                                                 4/34    Verifying        : python3-markupsafe-0.23-19.el8.x86_64                                                                5/34    Verifying        : libsodium-1.0.18-2.el8.x86_64                                                                        6/34    Verifying        : libunwind-1.3.1-3.el8.x86_64                                                                         7/34    Verifying        : openpgm-5.2.122-21.el8.x86_64                                                                        8/34    Verifying        : python3-cheroot-8.2.1-1.el8.noarch                                                                   9/34    Verifying        : python3-cherrypy-18.4.0-1.el8.noarch                                                                10/34    Verifying        : python3-jaraco-6.2-6.el8.noarch                                                                     11/34    Verifying        : python3-jaraco-functools-2.0-4.el8.noarch                                                           12/34    Verifying        : python3-m2crypto-0.35.2-5.el8.x86_64                                                                13/34    Verifying        : python3-more-itertools-7.2.0-3.el8.noarch                                                           14/34    Verifying        : python3-msgpack-0.6.2-1.el8.x86_64                                                                  15/34    Verifying        : python3-portend-2.6-1.el8.noarch                                                                    16/34    Verifying        : python3-psutil-5.6.3-5.el8.x86_64                                                                   17/34    Verifying        : python3-tempora-1.14.1-5.el8.noarch                                                                 18/34    Verifying        : python3-trustme-0.6.0-4.el8.noarch                                                                  19/34    Verifying        : python3-zc-lockfile-2.0-2.el8.noarch                                                                20/34    Verifying        : python3-zmq-19.0.0-1.el8.x86_64                                                                     21/34    Verifying        : zeromq-4.3.3-1.el8.x86_64                                                                           22/34    Verifying        : python3-libcloud-2.4.0-1.el8.noarch                                                                 23/34    Verifying        : salt-3002.2-1.el8.noarch                                                                            24/34    Verifying        : salt-api-3002.2-1.el8.noarch                                                                        25/34    Verifying        : salt-cloud-3002.2-1.el8.noarch                                                                      26/34    Verifying        : salt-master-3002.2-1.el8.noarch                                                                     27/34    Verifying        : salt-minion-3002.2-1.el8.noarch                                                                     28/34    Verifying        : salt-ssh-3002.2-1.el8.noarch                                                                        29/34    Verifying        : salt-syndic-3002.2-1.el8.noarch                                                                     30/34    Verifying        : dnf-plugins-core-4.0.12-4.el8_2.noarch                                                              31/34    Verifying        : dnf-plugins-core-4.0.12-3.el8.noarch                                                                32/34    Verifying        : python3-dnf-plugins-core-4.0.12-4.el8_2.noarch                                                      33/34    Verifying        : python3-dnf-plugins-core-4.0.12-3.el8.noarch                                                        34/34  Installed products updated.  Upgraded:   dnf-plugins-core-4.0.12-4.el8_2.noarch                     python3-dnf-plugins-core-4.0.12-4.el8_2.noarch                      Installed:   libsodium-1.0.18-2.el8.x86_64                                          libunwind-1.3.1-3.el8.x86_64                             openpgm-5.2.122-21.el8.x86_64                                          python3-babel-2.5.1-5.el8.noarch                         python3-cheroot-8.2.1-1.el8.noarch                                     python3-cherrypy-18.4.0-1.el8.noarch                     python3-distro-1.4.0-2.module_el8.1.0+245+c39af44f.noarch              python3-jaraco-6.2-6.el8.noarch                          python3-jaraco-functools-2.0-4.el8.noarch                              python3-jinja2-2.10.1-2.el8_0.noarch                     python3-libcloud-2.4.0-1.el8.noarch                                    python3-m2crypto-0.35.2-5.el8.x86_64                     python3-markupsafe-0.23-19.el8.x86_64                                  python3-more-itertools-7.2.0-3.el8.noarch                python3-msgpack-0.6.2-1.el8.x86_64                                     python3-portend-2.6-1.el8.noarch                         python3-psutil-5.6.3-5.el8.x86_64                                      python3-tempora-1.14.1-5.el8.noarch                      python3-trustme-0.6.0-4.el8.noarch                                     python3-zc-lockfile-2.0-2.el8.noarch                     python3-zmq-19.0.0-1.el8.x86_64                                        salt-3002.2-1.el8.noarch                                 salt-api-3002.2-1.el8.noarch                                           salt-cloud-3002.2-1.el8.noarch                           salt-master-3002.2-1.el8.noarch                                        salt-minion-3002.2-1.el8.noarch                          salt-ssh-3002.2-1.el8.noarch                                           salt-syndic-3002.2-1.el8.noarch                          yum-utils-4.0.12-4.el8_2.noarch                                        zeromq-4.3.3-1.el8.x86_64                               Complete! [root@saltstack-master yum.repos.d]#   

在这里,我们还将在SaltStack Master上安装salt- minion软件包,因为Minion会收集和发送SaltStack Master服务器的系统指标,即使在同一服务器上也是如此。请参考我们的下一篇文章,[如何在CentOS 8上安装SaltStack Minion]

第六步:CentOS 8上配置SaltStack Master

SaltStack的配置文件位于/etc/salt目录中。

默认配置足够安静,无法启动SaltStack Master服务器,但是我们需要在启动服务之前调整SaltStack Minion配置。

编辑SaltStack Minion配置文件。

[root@saltstack-master-01 ~]# vi /etc/salt/minion 

在此文件中找到以下指令。

#master: salt 

并用以下指令替换它。

master: saltstack-master.lianglab.cn 

master指令向SaltStack Minion告知正在使用的SaltStack Master服务器。SaltStack主主机名必须是可解析的。您可以通过使用本地DNS解析器(即/ etc / hosts文件)来执行此操作,也可以为网络配置权威的DNS服务器

启用并启动SaltStack Master和Minion服务。

[root@saltstack-master yum.repos.d]# systemctl enable --now salt-master salt-minion Created symlink /etc/systemd/system/multi-user.target.wants/salt-master.service → /usr/lib/systemd/system/salt-master.service. Created symlink /etc/systemd/system/multi-user.target.wants/salt-minion.service → /usr/lib/systemd/system/salt-minion.service. [root@saltstack-master yum.repos.d]#  [root@saltstack-master yum.repos.d]# systemctl status  salt-master salt-minion ● salt-master.service - The Salt Master Server    Loaded: loaded (/usr/lib/systemd/system/salt-master.service; enabled; vendor preset: disabled)    Active: active (running) since Wed 2020-12-16 22:37:51 CST; 11s ago      Docs: man:salt-master(1)            file:///usr/share/doc/salt/html/contents.html            https://docs.saltstack.com/en/latest/contents.html  Main PID: 320436 (salt-master)     Tasks: 32 (limit: 23840)    Memory: 200.3M    CGroup: /system.slice/salt-master.service            ├─320436 /usr/bin/python3.6 /usr/bin/salt-master            ├─320442 /usr/bin/python3.6 /usr/bin/salt-master            ├─320474 /usr/bin/python3.6 /usr/bin/salt-master            ├─320475 /usr/bin/python3.6 /usr/bin/salt-master            ├─320478 /usr/bin/python3.6 /usr/bin/salt-master            ├─320479 /usr/bin/python3.6 /usr/bin/salt-master            ├─320480 /usr/bin/python3.6 /usr/bin/salt-master            ├─320481 /usr/bin/python3.6 /usr/bin/salt-master            ├─320482 /usr/bin/python3.6 /usr/bin/salt-master            ├─320483 /usr/bin/python3.6 /usr/bin/salt-master            ├─320484 /usr/bin/python3.6 /usr/bin/salt-master            ├─320485 /usr/bin/python3.6 /usr/bin/salt-master            └─320492 /usr/bin/python3.6 /usr/bin/salt-master  Dec 16 22:37:50 saltstack-master.lianglab.cn systemd[1]: Starting The Salt Master Server... Dec 16 22:37:51 saltstack-master.lianglab.cn systemd[1]: Started The Salt Master Server.  ● salt-minion.service - The Salt Minion    Loaded: loaded (/usr/lib/systemd/system/salt-minion.service; enabled; vendor preset: disabled)    Active: active (running) since Wed 2020-12-16 22:37:52 CST; 10s ago      Docs: man:salt-minion(1)            file:///usr/share/doc/salt/html/contents.html            https://docs.saltstack.com/en/latest/contents.html  Main PID: 320473 (salt-minion)     Tasks: 8 (limit: 23840)    Memory: 69.1M    CGroup: /system.slice/salt-minion.service            ├─320473 /usr/bin/python3.6 /usr/bin/salt-minion            ├─320616 /usr/bin/python3.6 /usr/bin/salt-minion            └─320677 /usr/bin/python3.6 /usr/bin/salt-minion  Dec 16 22:37:51 saltstack-master.lianglab.cn systemd[1]: Starting The Salt Minion... Dec 16 22:37:52 saltstack-master.lianglab.cn systemd[1]: Started The Salt Minion  [root@saltstack-master yum.repos.d]# netstat -anplt| grep 45 tcp        0      0 0.0.0.0:4505            0.0.0.0:*               LISTEN      320474/python3.6     tcp        0      0 0.0.0.0:4506            0.0.0.0:*               LISTEN      320480/python3.6   

第七步:SaltStack Master配置CentOS 8防火墙

SaltStack master使用默认端口4505/tcp4506/tcp。因此,我们需要允许传入流量进入CentOS 8防火墙中的这两个端口。

[root@saltstack-master yum.repos.d]# firewall-cmd --permanent --add-port={4505,4506}/tcp success [root@saltstack-master yum.repos.d]# firewall-cmd --reload success 

第八步:管理SaltStack公钥

初始连接时,SaltStack奴才将其公共密钥发送给SaltStack主服务器。主人必须接受此公钥,以允许Minion与SaltStack主人进行通信。

列出所有SaltStack公共密钥。

[root@saltstack-master ~]# salt-key -L Accepted Keys: Denied Keys: Unaccepted Keys: saltstack-master.lianglab.cn Rejected Keys: [root@saltstack-master ~]#   

当前,只有一个不接受的公共密钥。使用以下命令接受此公钥。

[root@saltstack-master ~]# salt-key -A The following keys are going to be accepted: Unaccepted Keys: saltstack-master.lianglab.cn Proceed? [n/Y] y Key for minion saltstack-master.lianglab.cn accepted. [root@saltstack-master ~]#  

在所有SaltStack奴才上执行ping命令。

[root@saltstack-master ~]# salt '*' test.ping saltstack-master.lianglab.cn:     True [root@saltstack-master ~]#   

检查所有SaltStackd当前的版本。

[root@saltstack-master ~]# salt '*' test.version saltstack-master.lianglab.cn:     3002.2  

CentOS 8.2上安装部署SaltStack Master和 Minion

如何在CentOS 8上安装SaltStack minion。

第九步:什么是SaltStack Minion

SaltStackSalt是基于Python的开源软件,用于基于事件的IT自动化,远程任务执行和配置管理。SaltStack支持“基础架构即代码”方法来进行数据中心系统和网络的部署和管理,配置自动化,SecOps编排,漏洞修复以及混合云控制。(礼貌:维基百科

SaltStack minion是安装在受管节点上的代理软件,用于在该节点上执行命令并将其报告回SaltStack主服务器。

第十步:更新SaltStack MinionCentOS 8软件包

使用ssh工具以root用户身份与saltstack-minion.lianglab.cn连接。

最佳做法是在安装新组件之前更新CentOS 8上的软件包。因此,执行以下dnf命令来更新所有CentOS 8软件包。

[root@saltstack-minion ~]# dnf update -y ... Upgraded:   NetworkManager-1:1.22.8-5.el8_2.x86_64   NetworkManager-libnm-1:1.22.8-5.el8_2.x86_64   NetworkManager-team-1:1.22.8-5.el8_2.x86_64   NetworkManager-tui-1:1.22.8-5.el8_2.x86_64   bind-export-libs-32:9.11.13-5.el8_2.x86_64   dbus-1:1.12.8-10.el8_2.x86_64   dbus-common-1:1.12.8-10.el8_2.noarch   dbus-daemon-1:1.12.8-10.el8_2.x86_64   dbus-libs-1:1.12.8-10.el8_2.x86_64   dbus-tools-1:1.12.8-10.el8_2.x86_64   dnf-4.2.17-7.el8_2.noarch   dnf-data-4.2.17-7.el8_2.noarch   gnutls-3.6.8-11.el8_2.x86_64   grub2-common-1:2.02-87.el8_2.noarch   grub2-pc-1:2.02-87.el8_2.x86_64   grub2-pc-modules-1:2.02-87.el8_2.noarch   grub2-tools-1:2.02-87.el8_2.x86_64   grub2-tools-efi-1:2.02-87.el8_2.x86_64   grub2-tools-extra-1:2.02-87.el8_2.x86_64   grub2-tools-minimal-1:2.02-87.el8_2.x86_64   iptables-1.8.4-10.el8_2.1.x86_64   iptables-ebtables-1.8.4-10.el8_2.1.x86_64   iptables-libs-1.8.4-10.el8_2.1.x86_64   kernel-tools-4.18.0-193.14.2.el8_2.x86_64   kernel-tools-libs-4.18.0-193.14.2.el8_2.x86_64   libdnf-0.39.1-6.el8_2.x86_64   libnghttp2-1.33.0-3.el8_2.1.x86_64   microcode_ctl-4:20191115-4.20200609.1.el8_2.x86_64   open-vm-tools-11.0.5-3.el8.x86_64   python3-dnf-4.2.17-7.el8_2.noarch   python3-hawkey-0.39.1-6.el8_2.x86_64   python3-libdnf-0.39.1-6.el8_2.x86_64   python3-perf-4.18.0-193.14.2.el8_2.x86_64   selinux-policy-3.14.3-41.el8_2.5.noarch   selinux-policy-targeted-3.14.3-41.el8_2.5.noarch   systemd-239-31.el8_2.2.x86_64   systemd-libs-239-31.el8_2.2.x86_64   systemd-pam-239-31.el8_2.2.x86_64   systemd-udev-239-31.el8_2.2.x86_64   yum-4.2.17-7.el8_2.noarch  Installed:   kernel-4.18.0-193.14.2.el8_2.x86_64   kernel-core-4.18.0-193.14.2.el8_2.x86_64   kernel-modules-4.18.0-193.14.2.el8_2.x86_64  Removed:   kernel-4.18.0-147.5.1.el8_1.x86_64   kernel-core-4.18.0-147.5.1.el8_1.x86_64   kernel-modules-4.18.0-147.5.1.el8_1.x86_64  Complete! 

第十一步:SaltStack Minion上安装Python

SaltStack是基于Python的软件,因此它需要Python语言支持才能编译和执行SaltStack命令。

Python 3.6在默认的CentOS 8 AppStream中可用,因此,我们可以使用dnf命令轻松安装它。

[root@saltstack-minion ~]# dnf install -y python3 Last metadata expiration check: 0:13:43 ago on Tue 11 Aug 2020 11:59:50 PM PKT. Dependencies resolved. ================================================================================  Package            Arch   Version                              Repo       Size ================================================================================ Installing:  python36           x86_64 3.6.8-2.module_el8.1.0+245+c39af44f  AppStream  19 k Installing dependencies:  python3-pip        noarch 9.0.3-16.el8                         AppStream  19 k  python3-setuptools noarch 39.2.0-5.el8                         BaseOS    162 k Enabling module streams:  python36                  3.6  Transaction Summary ================================================================================ Install  3 Packages  Total download size: 201 k Installed size: 466 k Downloading Packages: (1/3): python3-setuptools-39.2.0-5.el8.noarch.r 553 kB/s | 162 kB     00:00 (2/3): python3-pip-9.0.3-16.el8.noarch.rpm       50 kB/s |  19 kB     00:00 (3/3): python36-3.6.8-2.module_el8.1.0+245+c39a  38 kB/s |  19 kB     00:00 -------------------------------------------------------------------------------- Total                                           121 kB/s | 201 kB     00:01 Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction   Preparing        :                                                        1/1   Installing       : python3-setuptools-39.2.0-5.el8.noarch                 1/3   Installing       : python36-3.6.8-2.module_el8.1.0+245+c39af44f.x86_64    2/3   Running scriptlet: python36-3.6.8-2.module_el8.1.0+245+c39af44f.x86_64    2/3   Installing       : python3-pip-9.0.3-16.el8.noarch                        3/3   Running scriptlet: python3-pip-9.0.3-16.el8.noarch                        3/3   Verifying        : python3-pip-9.0.3-16.el8.noarch                        1/3   Verifying        : python36-3.6.8-2.module_el8.1.0+245+c39af44f.x86_64    2/3   Verifying        : python3-setuptools-39.2.0-5.el8.noarch                 3/3  Installed:   python3-pip-9.0.3-16.el8.noarch   python3-setuptools-39.2.0-5.el8.noarch   python36-3.6.8-2.module_el8.1.0+245+c39af44f.x86_64  Complete! 

第十二步:CentOS 8上安装SaltStack官方Yum存储库

尽管SaltStack软件包可通过EPEL(企业Linux的额外软件包) yum存储库获得。但是,如果您想安装最新版本的SaltStack软件包,则必须按照以下步骤安装SaltStack官方yum存储库。

[root@saltstack-minion ~]# wget https://repo.saltstack.com/py3/redhat/salt-py3-repo-latest.el8.noarch.rpm  [root@saltstack-minion ~]# dnf -y install  salt-py3-repo-latest.el8.noarch.rpm [root@saltstack-minion ~]# dnf -y install  salt-py3-repo-latest.el8.noarch.rpm Last metadata expiration check: 0:26:49 ago on Wed 16 Dec 2020 10:19:04 PM CST. Dependencies resolved. ===============================================================================================================================  Package                         Architecture             Version                         Repository                      Size =============================================================================================================================== Installing:  salt-py3-repo                   noarch                   latest-4.el8                    @commandline                   8.9 k  Transaction Summary =============================================================================================================================== Install  1 Package  Total size: 8.9 k Installed size: 2.0 k Downloading Packages: Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction   Preparing        :                                                                                                       1/1    Installing       : salt-py3-repo-latest-4.el8.noarch                                                                     1/1    Verifying        : salt-py3-repo-latest-4.el8.noarch                                                                     1/1  Installed products updated.  Installed:   salt-py3-repo-latest-4.el8.noarch                                                                                              Complete!  

为新安装的yum存储库构建缓存。

[root@saltstack-minion ~]# dnf makecache CentOS-8 - Base - mirrors.tongdun.cn                                                           1.6 MB/s | 3.9 kB     00:00     CentOS-8 - Extras - mirrors.tongdun.cn                                                         865 kB/s | 1.5 kB     00:00     CentOS-8 - AppStream - mirrors.tongdun.cn                                                      2.5 MB/s | 4.3 kB     00:00     Extra Packages for Enterprise Linux 8 - x86_64                                                 2.5 MB/s | 4.7 kB     00:00     Extra Packages for Enterprise Linux 8 - x86_64 - Debug                                         1.6 MB/s | 3.0 kB     00:00     Extra Packages for Enterprise Linux 8 - x86_64 - Source                                        1.9 MB/s | 3.5 kB     00:00     SaltStack Latest Release Channel Python 3 for RHEL/Centos 8                                     26 kB/s | 224 kB     00:08     Metadata cache created. [root@saltstack-minion ~]#  

第十三步:CentOS 8上安装SaltStack Minion

我们已经添加了SaltStack官方yum存储库,现在我们可以使用dnf命令安装SaltStack软件包。

[root@saltstack-minion ~]# dnf install -y salt-minion Last metadata expiration check: 0:00:22 ago on Wed 16 Dec 2020 10:46:31 PM CST. Dependencies resolved. ===============================================================================================================================  Package                           Architecture    Version                                      Repository                Size =============================================================================================================================== Installing:  salt-minion                       noarch          3002.2-1.el8                                 salt-py3-latest           43 k Upgrading:  dnf-plugins-core                  noarch          4.0.12-4.el8_2                               base                      64 k  python3-dnf-plugins-core          noarch          4.0.12-4.el8_2                               base                     204 k Installing dependencies:  libsodium                         x86_64          1.0.18-2.el8                                 epel                     162 k  libunwind                         x86_64          1.3.1-3.el8                                  epel                      75 k  openpgm                           x86_64          5.2.122-21.el8                               epel                     180 k  python3-babel                     noarch          2.5.1-5.el8                                  AppStream                4.8 M  python3-distro                    noarch          1.4.0-2.module_el8.1.0+245+c39af44f          AppStream                 37 k  python3-jinja2                    noarch          2.10.1-2.el8_0                               AppStream                538 k  python3-m2crypto                  x86_64          0.35.2-5.el8                                 epel                     303 k  python3-markupsafe                x86_64          0.23-19.el8                                  AppStream                 39 k  python3-msgpack                   x86_64          0.6.2-1.el8                                  epel                      92 k  python3-psutil                    x86_64          5.6.3-5.el8                                  epel                     396 k  python3-zmq                       x86_64          19.0.0-1.el8                                 epel                     418 k  salt                              noarch          3002.2-1.el8                                 salt-py3-latest           10 M  yum-utils                         noarch          4.0.12-4.el8_2                               base                      66 k  zeromq                            x86_64          4.3.3-1.el8                                  epel                     478 k  Transaction Summary =============================================================================================================================== Install  15 Packages Upgrade   2 Packages  Total download size: 18 M Downloading Packages: (1/17): python3-distro-1.4.0-2.module_el8.1.0+245+c39af44f.noarch.rpm                           13 MB/s |  37 kB     00:00     (2/17): yum-utils-4.0.12-4.el8_2.noarch.rpm                                                     15 MB/s |  66 kB     00:00     (3/17): python3-markupsafe-0.23-19.el8.x86_64.rpm                                               18 MB/s |  39 kB     00:00     (4/17): libsodium-1.0.18-2.el8.x86_64.rpm                                                       23 MB/s | 162 kB     00:00     (5/17): libunwind-1.3.1-3.el8.x86_64.rpm                                                        18 MB/s |  75 kB     00:00     (6/17): python3-jinja2-2.10.1-2.el8_0.noarch.rpm                                                21 MB/s | 538 kB     00:00     (7/17): openpgm-5.2.122-21.el8.x86_64.rpm                                                       16 MB/s | 180 kB     00:00     (8/17): python3-msgpack-0.6.2-1.el8.x86_64.rpm                                                  11 MB/s |  92 kB     00:00     (9/17): python3-m2crypto-0.35.2-5.el8.x86_64.rpm                                                20 MB/s | 303 kB     00:00     (10/17): python3-psutil-5.6.3-5.el8.x86_64.rpm                                                  18 MB/s | 396 kB     00:00     (11/17): python3-zmq-19.0.0-1.el8.x86_64.rpm                                                    17 MB/s | 418 kB     00:00     (12/17): python3-babel-2.5.1-5.el8.noarch.rpm                                                   45 MB/s | 4.8 MB     00:00     (13/17): zeromq-4.3.3-1.el8.x86_64.rpm                                                         9.4 MB/s | 478 kB     00:00     (14/17): dnf-plugins-core-4.0.12-4.el8_2.noarch.rpm                                             28 MB/s |  64 kB     00:00     (15/17): python3-dnf-plugins-core-4.0.12-4.el8_2.noarch.rpm                                     54 MB/s | 204 kB     00:00     (16/17): salt-minion-3002.2-1.el8.noarch.rpm                                                   6.2 kB/s |  43 kB     00:06     [MIRROR] salt-3002.2-1.el8.noarch.rpm: Curl error (28): Timeout was reached for https://repo.saltstack.com/py3/redhat/8/x86_64/latest/salt-3002.2-1.el8.noarch.rpm [Operation too slow. Less than 1000 bytes/sec transferred the last 30 seconds] [MIRROR] salt-3002.2-1.el8.noarch.rpm: Curl error (28): Timeout was reached for https://repo.saltstack.com/py3/redhat/8/x86_64/latest/salt-3002.2-1.el8.noarch.rpm [Operation too slow. Less than 1000 bytes/sec transferred the last 30 seconds] (17/17): salt-3002.2-1.el8.noarch.rpm                                                           23 kB/s |  10 MB     07:54     ------------------------------------------------------------------------------------------------------------------------------- Total                                                                                           40 kB/s |  18 MB     07:54      warning: /var/cache/dnf/salt-py3-latest-ab32c742cbd8c211/packages/salt-3002.2-1.el8.noarch.rpm: Header V4 RSA/SHA256 Signature, key ID de57bfbe: NOKEY SaltStack Latest Release Channel Python 3 for RHEL/Centos 8                                    1.7 MB/s | 1.7 kB     00:00     Importing GPG key 0xDE57BFBE:  Userid     : "SaltStack Packaging Team <packaging@saltstack.com>"  Fingerprint: 754A 1A7A E731 F165 D5E6 D4BD 0E08 A149 DE57 BFBE  From       : /etc/pki/rpm-gpg/saltstack-signing-key Key imported successfully Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction   Preparing        :                                                                                                       1/1    Installing       : python3-markupsafe-0.23-19.el8.x86_64                                                                1/19    Upgrading        : python3-dnf-plugins-core-4.0.12-4.el8_2.noarch                                                       2/19    Upgrading        : dnf-plugins-core-4.0.12-4.el8_2.noarch                                                               3/19    Installing       : yum-utils-4.0.12-4.el8_2.noarch                                                                      4/19    Installing       : python3-psutil-5.6.3-5.el8.x86_64                                                                    5/19    Installing       : python3-msgpack-0.6.2-1.el8.x86_64                                                                   6/19    Installing       : python3-m2crypto-0.35.2-5.el8.x86_64                                                                 7/19    Installing       : openpgm-5.2.122-21.el8.x86_64                                                                        8/19    Installing       : libunwind-1.3.1-3.el8.x86_64                                                                         9/19    Installing       : libsodium-1.0.18-2.el8.x86_64                                                                       10/19    Installing       : zeromq-4.3.3-1.el8.x86_64                                                                           11/19    Installing       : python3-zmq-19.0.0-1.el8.x86_64                                                                     12/19    Installing       : python3-distro-1.4.0-2.module_el8.1.0+245+c39af44f.noarch                                           13/19    Installing       : python3-babel-2.5.1-5.el8.noarch                                                                    14/19    Installing       : python3-jinja2-2.10.1-2.el8_0.noarch                                                                15/19    Installing       : salt-3002.2-1.el8.noarch                                                                            16/19    Installing       : salt-minion-3002.2-1.el8.noarch                                                                     17/19    Running scriptlet: salt-minion-3002.2-1.el8.noarch                                                                     17/19    Cleanup          : dnf-plugins-core-4.0.12-3.el8.noarch                                                                18/19    Cleanup          : python3-dnf-plugins-core-4.0.12-3.el8.noarch                                                        19/19    Running scriptlet: python3-dnf-plugins-core-4.0.12-3.el8.noarch                                                        19/19    Verifying        : yum-utils-4.0.12-4.el8_2.noarch                                                                      1/19    Verifying        : python3-babel-2.5.1-5.el8.noarch                                                                     2/19    Verifying        : python3-distro-1.4.0-2.module_el8.1.0+245+c39af44f.noarch                                            3/19    Verifying        : python3-jinja2-2.10.1-2.el8_0.noarch                                                                 4/19    Verifying        : python3-markupsafe-0.23-19.el8.x86_64                                                                5/19    Verifying        : libsodium-1.0.18-2.el8.x86_64                                                                        6/19    Verifying        : libunwind-1.3.1-3.el8.x86_64                                                                         7/19    Verifying        : openpgm-5.2.122-21.el8.x86_64                                                                        8/19    Verifying        : python3-m2crypto-0.35.2-5.el8.x86_64                                                                 9/19    Verifying        : python3-msgpack-0.6.2-1.el8.x86_64                                                                  10/19    Verifying        : python3-psutil-5.6.3-5.el8.x86_64                                                                   11/19    Verifying        : python3-zmq-19.0.0-1.el8.x86_64                                                                     12/19    Verifying        : zeromq-4.3.3-1.el8.x86_64                                                                           13/19    Verifying        : salt-3002.2-1.el8.noarch                                                                            14/19    Verifying        : salt-minion-3002.2-1.el8.noarch                                                                     15/19    Verifying        : dnf-plugins-core-4.0.12-4.el8_2.noarch                                                              16/19    Verifying        : dnf-plugins-core-4.0.12-3.el8.noarch                                                                17/19    Verifying        : python3-dnf-plugins-core-4.0.12-4.el8_2.noarch                                                      18/19    Verifying        : python3-dnf-plugins-core-4.0.12-3.el8.noarch                                                        19/19  Installed products updated.  Upgraded:   dnf-plugins-core-4.0.12-4.el8_2.noarch                     python3-dnf-plugins-core-4.0.12-4.el8_2.noarch                      Installed:   libsodium-1.0.18-2.el8.x86_64                                            libunwind-1.3.1-3.el8.x86_64                           openpgm-5.2.122-21.el8.x86_64                                            python3-babel-2.5.1-5.el8.noarch                       python3-distro-1.4.0-2.module_el8.1.0+245+c39af44f.noarch                python3-jinja2-2.10.1-2.el8_0.noarch                   python3-m2crypto-0.35.2-5.el8.x86_64                                     python3-markupsafe-0.23-19.el8.x86_64                  python3-msgpack-0.6.2-1.el8.x86_64                                       python3-psutil-5.6.3-5.el8.x86_64                      python3-zmq-19.0.0-1.el8.x86_64                                          salt-3002.2-1.el8.noarch                               salt-minion-3002.2-1.el8.noarch                                          yum-utils-4.0.12-4.el8_2.noarch                        zeromq-4.3.3-1.el8.x86_64                                                 Complete! [root@saltstack-minion ~]#   

第十四步:CentOS 8上配置SaltStack Minion

SaltStack minion的默认配置可以正常工作,除了我们需要告诉Minion有关SaltStack Master服务器。

因此,使用vim编辑器编辑SaltStack minion配置文件。

[root@saltstack-minion ~]# vi /etc/salt/minion 

在其中找到以下指令。

#master: salt 

并将上述指令替换为以下指令。

master: saltstack-master.lianglab.cn 

其中saltstack-master.lianglab.cn是我们前面中配置的SaltStack主服务器。

启用并启动salt-minion服务。

[root@saltstack-minion ~]# systemctl enable --now salt-minion Created symlink /etc/systemd/system/multi-user.target.wants/salt-minion.service → /usr/lib/systemd/system/salt-minion.service. [root@saltstack-minion ~]#  

第十五步:SaltStack主服务器中添加SaltStack Minion

使用PuTTYroot用户身份与saltstack-master.lianglab.cn连接。

显示SaltStack主服务器已知的所有公共密钥的列表。

[root@saltstack-master ~]# salt-key -L Accepted Keys: saltstack-master.lianglab.cn Denied Keys: Unaccepted Keys: saltstack-minion.lianglab.cn Rejected Keys: [root@saltstack-master ~]#   

您会看到,有一个不可接受的密钥,即saltstack-minion.lianglab.cn。这是我们的SaltStack的公钥。

使用以下命令接受此密钥。

[root@saltstack-master ~]# salt-key -A The following keys are going to be accepted: Unaccepted Keys: saltstack-minion.lianglab.cn Proceed? [n/Y] y Key for minion saltstack-minion.lianglab.cn accepted. [root@saltstack-master ~]#   

CentOS 8.2上安装部署SaltStack Master和 Minion

第十六步:SaltStack Minion上的命令的远程执行安装HTTP服务

我们已添加到SaltStack Master库存中。我们现在可以执行命令了。

【1】为了演示,我们正在saltstack-minion.lianglab.cn上远程安装Apache Web服务器。

[root@saltstack-master ~]# salt 'saltstack-minion.lianglab.cn' cmd.run 'dnf install -y httpd' saltstack-minion.lianglab.cn:     Last metadata expiration check: 0:15:45 ago on Wed Dec 16 22:46:31 2020.     Dependencies resolved.     ================================================================================      Package          Arch   Version                                Repo       Size     ================================================================================     Installing:      httpd            x86_64 2.4.37-21.module_el8.2.0+494+1df74eae  AppStream 1.7 M     Installing dependencies:      apr              x86_64 1.6.3-9.el8                            AppStream 125 k      apr-util         x86_64 1.6.1-6.el8                            AppStream 105 k      centos-logos-httpd                       noarch 80.5-2.el8                             base       24 k      httpd-filesystem noarch 2.4.37-21.module_el8.2.0+494+1df74eae  AppStream  36 k      httpd-tools      x86_64 2.4.37-21.module_el8.2.0+494+1df74eae  AppStream 103 k      mod_http2        x86_64 1.11.3-3.module_el8.2.0+486+c01050f0.1 AppStream 156 k     Installing weak dependencies:      apr-util-bdb     x86_64 1.6.1-6.el8                            AppStream  25 k      apr-util-openssl x86_64 1.6.1-6.el8                            AppStream  27 k     Enabling module streams:      httpd                   2.4                                                             Transaction Summary     ================================================================================     Install  9 Packages          Total download size: 2.3 M     Installed size: 6.0 M     Downloading Packages:     (1/9): centos-logos-httpd-80.5-2.el8.noarch.rpm 1.8 MB/s |  24 kB     00:00         (2/9): apr-util-bdb-1.6.1-6.el8.x86_64.rpm      5.6 MB/s |  25 kB     00:00         (3/9): apr-1.6.3-9.el8.x86_64.rpm               6.5 MB/s | 125 kB     00:00         (4/9): apr-util-1.6.1-6.el8.x86_64.rpm          4.9 MB/s | 105 kB     00:00         (5/9): apr-util-openssl-1.6.1-6.el8.x86_64.rpm  6.0 MB/s |  27 kB     00:00         (6/9): httpd-filesystem-2.4.37-21.module_el8.2. 3.4 MB/s |  36 kB     00:00         (7/9): httpd-tools-2.4.37-21.module_el8.2.0+494 5.6 MB/s | 103 kB     00:00         (8/9): mod_http2-1.11.3-3.module_el8.2.0+486+c0  11 MB/s | 156 kB     00:00         (9/9): httpd-2.4.37-21.module_el8.2.0+494+1df74  35 MB/s | 1.7 MB     00:00         --------------------------------------------------------------------------------     Total                                            33 MB/s | 2.3 MB     00:00          Running transaction check     Transaction check succeeded.     Running transaction test     Transaction test succeeded.     Running transaction       Preparing        :                                                        1/1        Installing       : apr-1.6.3-9.el8.x86_64                                 1/9        Running scriptlet: apr-1.6.3-9.el8.x86_64                                 1/9        Installing       : apr-util-bdb-1.6.1-6.el8.x86_64                        2/9        Installing       : apr-util-openssl-1.6.1-6.el8.x86_64                    3/9        Installing       : apr-util-1.6.1-6.el8.x86_64                            4/9        Running scriptlet: apr-util-1.6.1-6.el8.x86_64                            4/9        Installing       : httpd-tools-2.4.37-21.module_el8.2.0+494+1df74eae.x8   5/9        Running scriptlet: httpd-filesystem-2.4.37-21.module_el8.2.0+494+1df74e   6/9        Installing       : httpd-filesystem-2.4.37-21.module_el8.2.0+494+1df74e   6/9        Installing       : centos-logos-httpd-80.5-2.el8.noarch                   7/9        Installing       : mod_http2-1.11.3-3.module_el8.2.0+486+c01050f0.1.x86   8/9        Installing       : httpd-2.4.37-21.module_el8.2.0+494+1df74eae.x86_64     9/9        Running scriptlet: httpd-2.4.37-21.module_el8.2.0+494+1df74eae.x86_64     9/9        Verifying        : centos-logos-httpd-80.5-2.el8.noarch                   1/9        Verifying        : apr-1.6.3-9.el8.x86_64                                 2/9        Verifying        : apr-util-1.6.1-6.el8.x86_64                            3/9        Verifying        : apr-util-bdb-1.6.1-6.el8.x86_64                        4/9        Verifying        : apr-util-openssl-1.6.1-6.el8.x86_64                    5/9        Verifying        : httpd-2.4.37-21.module_el8.2.0+494+1df74eae.x86_64     6/9        Verifying        : httpd-filesystem-2.4.37-21.module_el8.2.0+494+1df74e   7/9        Verifying        : httpd-tools-2.4.37-21.module_el8.2.0+494+1df74eae.x8   8/9        Verifying        : mod_http2-1.11.3-3.module_el8.2.0+486+c01050f0.1.x86   9/9      Installed products updated.          Installed:       apr-1.6.3-9.el8.x86_64                                                               apr-util-1.6.1-6.el8.x86_64                                                          apr-util-bdb-1.6.1-6.el8.x86_64                                                      apr-util-openssl-1.6.1-6.el8.x86_64                                                  centos-logos-httpd-80.5-2.el8.noarch                                                 httpd-2.4.37-21.module_el8.2.0+494+1df74eae.x86_64                                   httpd-filesystem-2.4.37-21.module_el8.2.0+494+1df74eae.noarch                        httpd-tools-2.4.37-21.module_el8.2.0+494+1df74eae.x86_64                             mod_http2-1.11.3-3.module_el8.2.0+486+c01050f0.1.x86_64                                 Complete! 

【2】在saltstack-minion上启用并启动Apache服务。

[root@saltstack-master ~]# salt 'saltstack-minion.lianglab.cn' cmd.run 'systemctl enable --now httpd.service' saltstack-minion.lianglab.cn:     Created symlink /etc/systemd/system/multi-user.target.wants/httpd.service -> /usr/lib/systemd/system/httpd.service. [root@saltstack-master ~]#  

【3】在saltstack-minion-01的Linux防火墙中允许http服务。

[root@saltstack-master ~]#salt 'saltstack-minion.lianglab.cn' cmd.run 'firewall-cmd --add-service=http' saltstack-minion.lianglab.cn:     success 

【4】使用curl命令访问新配置的Web服务器。

[root@saltstack-master ~]# curl -I http://saltstack-minion.lianglab.cn HTTP/1.1 403 Forbidden Date: Wed, 16 Dec 2020 15:07:32 GMT Server: Apache/2.4.37 (centos) Content-Location: index.html.zh-CN Vary: negotiate,accept-language TCN: choice Last-Modified: Fri, 14 Jun 2019 03:37:43 GMT ETag: "fa6-58b405e7d6fc0;5b696296e2c08" Accept-Ranges: bytes Content-Length: 4006 Content-Type: text/html; charset=UTF-8 Content-Language: zh-cn  [root@saltstack-master ~]# curl -I http://192.168.6.190 HTTP/1.1 403 Forbidden Date: Wed, 16 Dec 2020 15:08:07 GMT Server: Apache/2.4.37 (centos) Content-Location: index.html.zh-CN Vary: negotiate,accept-language TCN: choice Last-Modified: Fri, 14 Jun 2019 03:37:43 GMT ETag: "fa6-58b405e7d6fc0;5b696296e2c08" Accept-Ranges: bytes Content-Length: 4006 Content-Type: text/html; charset=UTF-8 Content-Language: zh-cn   

CentOS 8.2上安装部署SaltStack Master和 Minion

Apache Web服务器已安装在我们的SaltStack minion上。

这是我们本文章的结尾。您已成功安装并SaltStack Master和Minion 配置了,如果在阅读中遇到问题请及时留言,如果感觉文章对您有帮助请与朋友分享文章。

赞(0) 打赏
未经允许不得转载:张拓的天空 » CentOS 8.2上安装部署SaltStack Master和 Minion
分享到: 更多 (0)

评论 抢沙发

  • 昵称 (必填)
  • 邮箱 (必填)
  • 网址

专业的IT技术经验分享 更专业 更方便

联系我们本站主机

觉得文章有用就打赏一下文章作者

支付宝扫一扫打赏

微信扫一扫打赏