Saltstack - Sim Wiki

最后修改人	sim
最后修改时间	2021-09-29 14:07:35
创建人	sim
创建时间	2021-09-28 15:40:35

该文档由 sim 创建于 2021-09-28 15:40:35 ， sim 在 2021-09-29 14:07:35 修改了该文档。

[TOCM]

- Saltstack是一个基于Python的批量自动化管理工具，服务器端叫做Master，客户端叫做Minio；默认没有web管理界面，这次主要撰写Saltstack与web管理端的整合安装，网上很多基于阿里云的yum方式安装其实都已经失效了，所有我直接把几个rpm包下载到本地进行安装

##### 安装部署Saltstack：

1. 部署环境：
```shell
Centos7 x64
Python 2.6 >= 2.6 < 3.0
yum install -y wget net-tools openssl openssl-devel gcc-c++ pcre pcre-devel ntp autoconf libaio python-devel
```

1. 下载安装包：
```shell
mkdir /usr/local/src/salt && cd /usr/local/src/salt
wget http://wiki.wangyanhan.com.cn/download/Saltstack/salt-2015.tar.gz
tar zxvf salt-2015.zip
```

1. 安装Salt-master（服务端）：
```shell
yum -y install epel-release
yum localinstall -y salt-2015.5.10-2.el7.noarch.rpm
yum localinstall -y salt-master-2015.5.10-2.el7.noarch.rpm
```

1. 修改Salt-master配置（服务端）：
```shell
mkdir -p /salt/runners && chmod 777 -R /salt
vi /etc/salt/master
									## 
auto_accept: True 			   ## 自动验证接受从机的连接
runner_dirs: [/salt/runners] 	## 指定一个runner的文件夹
```

1. 启动Salt-master（服务端）：
```shell
systemctl start salt-master
systemctl enable salt-master
```

1. 安装Salt-minion（客户端）：
```shell
wget http://wiki.wangyanhan.com.cn/download/Saltstack/salt-2015.5.10-2.el7.noarch.rpm
wget http://wiki.wangyanhan.com.cn/download/Saltstack/salt-minion-2015.5.10-2.el7.noarch.rpm
yum -y install epel-release
yum localinstall -y salt-2015.5.10-2.el7.noarch.rpm
yum localinstall -y salt-minion-2015.5.10-2.el7.noarch.rpm 
```

1. 修改Salt-minion配置（客户端）：
```shell
vi /etc/salt/minion
									##
master: 192.168.2.81			 ## 设置为master的IP地址
id: 192.168.2.71				 ## 默认为客户端主机的主机名，为了方便管理，统一改成客户端本机IP地址
```

1. 启动Salt-minion（客户端）：
```shell
systemctl start salt-minion
systemctl enable salt-minion
```

##### 简单测试（在master上操作）：
- 查看验证接受的从机：
```xml
salt-key -L	## 会出现四个验证的状态，由于上面打开了自动验证接受，所以会在Accepted Keys:下面有一台minion机
salt-key -d k8s-master-01		## 删除已经接受验证的从机
```
![size:800,1000](/storage/2021/09-28/dRr4D1r2bBFeiXz9kNWY9bjiVD9WfVOlsc4WQgUY.png "salt-key -L")

- 测试minion机是否连通：
```shell
salt 192.168.2.71 test.ping	## tese是指test模块，ping是这个模块的方法，对应python的话，test是一个python文件，ping是这个文件里定义的函数
																												salt '*' cmd.run 'date'		## 在所有客户端上执行shell命令“date”
```
![size:800,1000](/storage/2021/09-28/3BjUrXT7C9f6Tg5napoXkqStDSZJtPCEQ1AQFXtm.png "test.ping")

![size:800,1000](/storage/2021/09-28/h9zTwm22R0Hz0OzCQLmq5p1rkJaTjZBWqP2ZO9CA.png "cmd.run")

- 复制分发文件，不支持目录分发：
```shell
salt-cp '192.168.2.71' /opt/local/master.txt /srv/remote/		## $1为本地目录 $2为远端目录
```

##### Web管理端（saltshaker）安装
- 安装API接口（Master）：
```shell
cd /usr/local/src/salt
wget http://wiki.wangyanhan.com.cn/download/Saltstack/salt-api-2015.5.10-2.el7.noarch.rpm
yum localinstall -y salt-api-2015.5.10-2.el7.noarch.rpm
```

- 添加登录用户
```shell
useradd -M sim
passwd sim
```

- 修改api的配置文件	
vi /etc/salt/master.d/api.conf
```shell
rest_tornado:
    port: 8888
    #ssl_crt: /etc/pki/tls/certs/localhost.crt
    #ssl_key: /etc/pki/tls/private/localhost_nopass.key
    debug: True
    disable_ssl: True
rest_cherrypy:
    port: 8889
    #ssl_crt: /etc/pki/tls/certs/localhost.crt
    #ssl_key: /etc/pki/tls/private/localhost_nopass.key
    debug: True
    disable_ssl: True
```
vi /etc/salt/master.d/eauth.conf
```shell
external_auth:
  pam:
    sim:
      - .*
      - '@runner'  
      - '@wheel'
```

- 启动salt-api：
```shell
systemctl start salt-api
systemctl enable salt-api
```

- 验证API调用：
```shell
curl -si http://192.168.2.81:8889/login \
        -H "Accept: application/json" \
        -d username='sim' \
        -d password='J1pwd123' \
        -d eauth='pam'
```

- 安装pip及web相关依赖包
```shell
yum install python-pip
pip install Django==1.8.4
pip install django-crontab
pip install django-celery
pip install celery
pip install uwsgi 
pip install django-uwsgi
pip install python-devel
pip install MySQL-python
```

- 安装rabbitmq，打开rabbitmq的管理插件
```shell
yum install rabbitmq-server
rabbitmq-plugins enable rabbitmq_management
```

- 启动rabbitmq
```shell
rabbitmq-server -detached	##后台启动
rabbitmq-server stop		 ##关闭
```

- 创建存放日志目录
```shell
mkdir -pv /var/log/saltshaker/
```

- 下载saltshaker代码到本地
```shell
git clone https://github.com/yueyongyue/saltshaker.git
```

- 安装mysql	
```shell
groupadd mysql ; useradd -g mysql mysql
cd /usr/local/mysql
scripts/mysql_install_db --user=mysql
chown -R root .
chown -R mysql data
chgrp -R mysql .
/usr/local/mysql/bin/mysqld_safe --skip-name-resolve --user=mysql &
```

- 初始化数据库
在源码目录中的saltshaker-init.sql.txt为初始数据，导入并设置权限
```shell
/usr/local/mysql/bin/mysql -uroot salt < saltshaker-init.sql.txt
GRANT ALL PRIVILEGES ON salt.* TO salt@127.0.0.1 IDENTIFIED BY '123456' WITH GRANT OPTION;
```

- 修改配置文件的数据库连接和salt-api连接,rabbitmq+celery配置	
`vi saltshaker/settings.py`
```shell
DATABASES = {
    'default': {
        'ENGINE': 'django.db.backends.mysql', # Add 'postgresql_psycopg2', 'mysql', 'sqlite3' or 'oracle'.
        'NAME': 'salt', # Or path to database file if using sqlite3.
        'USER': 'salt', # Not used with sqlite3.
        'PASSWORD': '123456', # Not used with sqlite3.
        'HOST': '127.0.0.1', # Set to empty string for localhost. Not used with sqlite3.
        'PORT': '3306', # Set to empty string for default. Not used with sqlite3.
    }
}
```
```shell
# SaltStack API
SALT_API_URL = 'http://127.0.0.1:8889'
SALT_API_USER = 'sim'
SALT_API_PASSWD = 'J1pwd123'
```
```shell
# celery + rabbitmq
platforms.C_FORCE_ROOT = True   # Running a worker with superuser privileges
djcelery.setup_loader()
BROKER_HOST = "127.0.0.1"
BROKER_PORT = 5672
BROKER_USER = "guest"
BROKER_PASSWORD = "guest"
BROKER_VHOST = "/"
```

- 后台启动celery worker
```shell
ln -sf /usr/local/mysql/lib/libmysqlclient.so.18 /usr/lib64/
```
```shell
nohup python manage.py celery worker --loglevel=info -c 5 &
```

- 添加计划任务用于获取queue队列数
```shell
python manage.py crontab add
```

- 启动web服务
```shell
nohup python manage.py runserver 0.0.0.0:9000 &
```
默认用户名密码均为 admin

##### web管理
- 进入web界面后先定义group，然后将需要管理的服务器加入对应的各个group
![size:800,1000](/storage/2021/09-29/hyXXuJLMRPpArtohur6K0rxEWuy3Cjw5yLM7QkuP.png "g1")
![size:800,1000](/storage/2021/09-29/HbzfJ8mtWUlBl4PWXTPqIbQvXmCBDExdHINLUq8C.png "g2")
![size:800,1000](/storage/2021/09-29/xlKoyxKRUag03rjiM67gcKPAkcAdd4IqanpA5f3V.png "g3")