puppet部署手册.docVIP

puppet部署手册 一、安装puppet服务端与客户端 添加外部源 rpm -Uhv /pub/epel/5/x86_64/epel-release-5-3.noarch.rpm 服务器端 yum install puppet-server yum install git git clone git:///example42modules /etc/puppet/modules git clone git:///example42infrastructures /etc/puppet/manifests 安装客户端 yum install puppet 开放防火墙端口 tcp 8140 udp 8140 配置DNSzoomi-10-21 a 1 (服务器) zoomi-10-22 a 2 (客户端) cname nsswitch.conf文件 /etc/ nsswitch.conf hosts: dns 启动服务器 service puppetmaster restart启动客户端/etc/sysconfig/puppet PUPPET_SERVER= PUPPET_PORT=8140 PUPPET_LOG=/var/log/puppet/puppet.log PUPPET_EXTRA_OPTS=--waitforcert=500 service puppeter start 服务器注册 puppetca --list puppetca --sign notice: Signed certificate request for notice: Removing file Puppet::SSL::CertificateRequest at /etc/puppet/ssl/ca/requests/.pem 二、puppet模板 Puppet文件服务 vim /etc/puppet/fileserver.conf [files] path /etc/puppet/files allow *. [squid] path /etc/puppet/modules/squid/files allow *. [mysql] path /etc/puppet/modules/mysql/files allow *. [puppet] path /etc/puppet/modules/puppet/files allow *. [ssh] path /etc/puppet/modules/ssh/files allow *. [syslog-ng] path /etc/puppet/modules/syslog-ng/files allow *. [yum] path /etc/puppet/modules/yum/files allow *. [iptables] path /etc/puppet/modules/iptables/files allow *. [jdk] path /etc/puppet/modules/jdk/files allow *. puppet主文件 vim /etc/puppet/manifests/site.pp Exec { path = /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin } File { ignore = .svn, ensure = present, mode = 0644, owner = root, group = root, } $fileserver = 2 $puppetserver = $svnserver = $timeserver = 4 # mysql password # $password = zoomi-init node default inherits basenode { } import modules.pp import nodes/*.pp puppet模块文件 vim /etc/puppet/manifests/modules.pp # import modules import cron import iptables import syslog-ng import vim import yum import jdk import nrpe base节点 vim /etc/puppet/manifests/nodes/basenode.pp node basenode { include syslog-ng, cron::nt