2. 程式人生 > >saltstack一鍵部署高可用

saltstack一鍵部署高可用

阿新 • • 發佈：2018-11-17

 

 

一健推送apache

[[email protected] minions]# cd /etc/salt/

[[email protected] salt]# vim master

 

[[email protected] salt]# mkdir /srv/salt

[[email protected] salt]# cd /srv/salt/

[[email protected] salt]# mkdir apache

[[email protected] salt]# cd  apache/

[[email protected] apache]# vim install.sls

apache-install:

  pkg.installed:

    - pkgs:

        - httpd

        - php

  file.managed:

    - name: /var/www/html/index.php

    - source: salt://apache/files/index.php

    - mode: 644

    - user: root

    - group: root

[[email protected] httpd]# salt server2 state.sls apache.install

 

 

[[email protected] apache]# vim service.sls

include:

  - apache.install

 

apache-service:

  file.managed:

    - name: /etc/httpd/conf/httpd.conf

    - source: salt://apache/files/httpd.conf

 

  service.running:

    - name: httpd

    - enable: True

    - reload: True

    - watch:

      - file: apache-service

 

[[email protected] apache]# cd  files/

[[email protected] files]# ls

httpd.conf(從server2（apache端）scp過來)  index.php

[[email protected] apache]# salt server2 state.sls apache.service

 

 

 

一健部署nginx

[[email protected] salt]# mkdir nginx

[[email protected] salt]# cd nginx

[[email protected] nginx]# mkdir files

[[email protected] nginx]# cd files

[[email protected] files]# ls

nginx-1.14.0.tar.gz    nginx(可以從網上找一個啟動指令碼) nginx.conf(從server3scp)

[[email protected] files]# cd ..

[[email protected] nginx]# vim install.sls

include:

  - pkgs.make

 

 

nginx-install:

 

  pkg.installed:

    - pkgs:

      - gcc

      - pcre-devel

      - openssl-devel

  file.managed:

    - name: /mnt/nginx-1.14.0.tar.gz

    - source: salt://nginx/files/nginx-1.14.0.tar.gz

 

  cmd.run:

    - name: cd /mnt && tar zxf nginx-1.14.0.tar.gz && cd nginx-1.14.0 && sed -i.bak 's/CFLAGS="$CFLAGS -g"/#CFLAGS="$CFLAGS -g"/g' auto/cc/gcc && sed -i.bak 's/#define NGINX_VER          "nginx\/" NGINX_VERSION/#define NGINX_VER          "nginx"/g' src/core/nginx.h && ./configure --prefix=/usr/local/nginx --with-http_ssl_module --with-http_stub_status_module --with-threads --with-file-aio &> /dev/null && make &> /dev/null && make install &> /dev/null

    - creates: /usr/local/nginx

[[email protected] nginx]# salt server3 state.sls nginx.install

 

[[email protected] nginx]# vim service.sls

include:

  - nginx.install

 

/usr/local/nginx/conf/nginx.conf:

  file.managed:

    - source: salt://nginx/files/nginx.conf

 

nginx-service:

  file.managed:

    - name: /etc/init.d/nginx

    - source: salt://nginx/files/nginx

    - mode: 755

  service.running:

    - name: nginx

    - enable: True

    - reload: True

    - watch:

      - file: /usr/local/nginx/conf/nginx.conf

[[email protected] nginx]# salt server3 state.sls nginx.service

 

[[email protected] nginx]# cd ..

[[email protected] salt]# mkdir pkgs

[[email protected] salt]# cd pkgs/

[[email protected] pkgs]# vim make.sls

gcc:

  pkg.installed:

    - pkgs:

      - gcc

      - pcre-devel

      - openssl-devel

 

一健推送haproxy，實現負載均衡

[[email protected] salt]# mkdir haproxy

[[email protected] haproxy]# mkdir files

[[email protected] haproxy]# cd files/

[[email protected] files]# ls

haproxy-1.6.11.tar.gz haproxy.cfg haproxy.init

[[email protected] files]# cd ..

[[email protected] haproxy]# cd ..

[[email protected] salt]# mkdir users

[[email protected] salt]# cd users/

[[email protected] users]# vim haproxy.sls

haproxy-group:

  group.present:

    - name: haproxy

    - gid: 200

 

haproxy:

  user.present:

    - uid: 200

    - gid: 200

    - home: /usr/local/haproxy

    - createhome: False

    - shell: /sbin/nologin

[[email protected] salt]# cd /srv/salt/haproxy/

[[email protected] haproxy]# vim install.sls

include:

  - pkgs.make

  - users.haproxy

haproxy-install:

  file.managed:

    - name: /mnt/haproxy-1.6.11.tar.gz

    - source: salt://haproxy/files/haproxy-1.6.11.tar.gz

  cmd.run:

    - name: cd /mnt && tar zxf haproxy-1.6.11.tar.gz && cd haproxy-1.6.11 && make TARGET=linux2628 UES_PCRE=1 USE_OPENSSL=1 USE_ZLIB=1 PREFIX=/usr/local/haproxy && make TARGET=linux2628 UES_PCRE=1 USE_OPENSSL=1 USE_ZLIB=1 PREFIX=/usr/local/haproxy install

    - creates: usr/local/haproxy

/etc/haproxy:

  file.directory:

    - mode: 755

 

/usr/sbin/haproxy:

  file.symlink:

    - target: /usr/local/haproxy/sbin/haproxy

 

 

[[email protected] haproxy]# salt server1 state.sls haproxy.install

沒有報錯即成功

[[email protected] mnt]# cd haproxy-1.6.11/examples

[[email protected] examples]# cp haproxy.init /srv/salt/haproxy/files

[[email protected] examples]# cp content-sw-sample.cfg /srv/salt/haproxy/files

[[email protected] haproxy]# cd /srv/salt/haproxy/files/

[[email protected] files]# ls

[[email protected] files]# mv content-sw-sample.cfg haproxy.cfg

[[email protected] files]# vim haproxy.cfg

global

        maxconn         10000

        stats socket    /var/run/haproxy.stat mode 600 level admin

        log             127.0.0.1 local0

        uid             200

        gid             200

        chroot          /var/empty

        daemon

defaults

 

        mode            http

        log             global

        option          httplog

        option          dontlognull

        monitor-uri     /monitoruri

        maxconn         8000

        timeout client  30s

        stats uri       /admin/stats

        retries         2

        option redispatch

        timeout connect 5s

        timeout server  5s

        timeout queue   30s

# The public 'www' address in the DMZ

frontend public

        bind            *:80 name clear

        #bind            192.168.1.10:443 ssl crt /etc/haproxy/haproxy.pem

 

 

        #use_backend     static if { hdr_beg(host) -i img }

        #use_backend     static if { path_beg /img /css   }

        default_backend static

 

# The static backend backend for 'Host: img', /img and /css.

backend static

        balance         roundrobin

 

        #option httpchk  HEAD /favicon.ico

        server          statsrv1 172.25.8.2:80 check inter 1000

        server          statsrv2 172.25.8.3:80 check inter 1000

 

[[email protected] files]# cd ..

[[email protected] haproxy]# vim service.sls

include:

  - haproxy.install

 

/etc/haproxy/haproxy.cfg:

  file.managed:

    - source: salt://haproxy/files/haproxy.cfg

 

haproxy-service:

  file.managed:

    - name: /etc/init.d/haproxy

    - source: salt://haproxy/files/haproxy.init

    - mode: 755

 

  service.running:

    - name: haproxy

    - enable: True

    - reload: True

    - watch:

      - file: /etc/haproxy/haproxy.cfg

[[email protected] haproxy]# salt server1 state.sls haproxy.service

無報錯即可

 

一鍵全推送

[[email protected] haproxy]# cd ..

[[email protected] salt]# vim top.sls

base:

  'server2':

    - apache.service

  'server3':

    - nginx.service

  'server1':

    - haproxy.service

 

[email protected] salt]# salt '*' state.highstate

 

 

 

 

 

一鍵推送高可用

[[email protected] salt]# vim /etc/salt/master

取消註釋

pillar_roots:

  base:

    - /srv/pillar

[[email protected] salt]# /etc/init.d/salt-master restart

[[email protected] srv]# cd ..

[[email protected] srv]# mkdir pillar

[[email protected] srv]# cd pillar/

[[email protected] pillar]# vim top.sls

base:

  '*':

    - web.install

    - keepalived.install

[[email protected] pillar]# cd /srv/salt/apache/

[[email protected] apache]# vim service.sls

include:

  - apache.install

 

apache-service:

  file.managed:

    - name: /etc/httpd/conf/httpd.conf

    - source: salt://apache/files/httpd.conf

    - template: jinja

    - context:

      port: {{ pillar['port'] }}

      bind: {{ pillar['bind'] }}

 

  service.running:

    - name: httpd

    - enable: True

    - reload: True

    - watch:

      - file: apache-service

 

[[email protected] apache]# vim /srv/pillar/web/install.sls (web目錄自己建立)

{% if grains['fqdn'] == 'server2' %}

webserver: httpd

bind: 172.25.8.2

port: 80

{% elif grains['fqdn'] == 'server3' %}

webserver: nginx

{% elif grains['fqdn'] == 'server1' %}

webserver: haproxy

{% endif %}

[[email protected] apache]# vim files/httpd.conf

Listen {{ bind }}:{{ port }} 

 

 

 

 

推送keepalived

server4:

[[email protected] apache]# cd ..

[[email protected] salt]# mkdir keepalived

[[email protected] salt]# cd keepalived/

[[email protected] keepalived]# mkdir files

[[email protected] keepalived]# cd files/

[[email protected] files]# ls

keepalived-2.0.6.tar.gz

[[email protected] files]# cd ..

[[email protected] keepalived]# vim install.sls

include:

  - pkgs.make

 

kp-install:

  file.managed:

    - name: /mnt/keepalived-2.0.6.tar.gz

    - source: salt://keepalived/files/keepalived-2.0.6.tar.gz

  cmd.run:

    - name: cd /mnt && tar zxf keepalived-2.0.6.tar.gz && cd keepalived-2.0.6 && ./configure --prefix=/usr/local/keepalived --with-init=SYSV &> /dev/null && make &> /dev/null && make install &> /dev/null

    - creates: /usr/local/keepalived

tu

[[email protected] keepalived]# salt server4 state.sls keepalived.install

 

 

 

 

[[email protected] keepalived]# cd files/

[[email protected] files]# ls

keepalived  keepalived-2.0.6.tar.gz  keepalived.conf

[[email protected] files]# cd ..

vim service.sls

[[email protected] keepalived]# cd files/

[[email protected] files]# vim keepalived.conf

global_defs {

   notification_email {

      [email protected]

   }

   notification_email_from [email protected]

   smtp_server 127.0.0.1

   smtp_connect_timeout 30

   router_id LVS_DEVEL

   vrrp_skip_check_adv_addr

   #vrrp_strict

   vrrp_garp_interval 0

   vrrp_gna_interval 0

}

 

vrrp_instance VI_1 {

    state {{ STATE }}

    interface eth0

    virtual_router_id {{ VRID }}

    priority {{ PRIORITY }}

    advert_int 1

    authentication {

        auth_type PASS

        auth_pass 1111

    }

    virtual_ipaddress {

        172.25.8.100

   }

}

 

 

[[email protected] salt]# cd ..

[[email protected] keepalived]# vim service.sls

 

 

[[email protected] keepalived]# cd ..

[[email protected] salt]# cd ..

[[email protected] srv]# cd pillar/

[[email protected] pillar]# mkdir keepalived

[[email protected] pillar]# cd keepalived/

[[email protected] keepalived]# vim install.sls

{% if grains['fqdn'] == 'server1' %}

state: MASTER

vrid: 88

priority: 100

{% elif grains['fqdn'] == 'server4' %}

state:  MASTER

vrid: 88

priority: 1

{% endif %}

tu

[[email protected] keepalived]# cd ..

[[email protected] salt]# vim top.sls

base:

  'server4':

    - haproxy.service

    - keepalived.service

  'server2':

    - apache.service

  'server3':

    - nginx.service

  'server1':

    - haproxy.service

    - keepalived.service

[[email protected] salt]# salt '*' state.highstate

 

 

相關推薦

saltstack一鍵部署高可用

    一健推送apache [[email protected] minions]# cd /etc/salt/ [[email protected] salt]# vim master   [[email protected] s

利用saltstack一鍵部署高可用負載均衡叢集

實驗環境： Server1 172.25.254.1 maseter/minion keepalived/haproxy Server2 172.25.254.2 minion httpd Server3 172.25.254.3 minion

Saltstack自動化運維工具（一鍵部署高可用負載均衡叢集）

在上篇部落格中我們利用salt推送了一臺主機上的haproxy為了實現高可用和負載均衡，我們再使用一臺虛擬機器server4搭建叢集 server1和server4組成高可用和負載均衡叢集 在server4 做好底層配置： 在server4上安裝minion，更改配置檔

一鍵部署高可用etcd叢集（TLS，ubuntu）（freetoo、碼客、盧益貴）

一鍵部署高可用etcd叢集（TLS，ubuntu）（freetoo、碼客、盧益貴）   這是一個便捷高效的部署高可用etcd叢集（TLS）的指令碼工具。 下載連結： https://download.csdn.net/download/guestcode/1079847

SaltStack一鍵部署負載均衡和高可用

一、負載均衡的部署 server1    haproxy (排程器) server2    nginx server3    apache 1)在server1上首先安裝salt-minion服務。並把自身新增在節點中（交換金鑰） 2）啟動serv

一鍵配置高可用Hadoop叢集（hdfs HA+zookeeper HA）

準備環境 3臺節點，主節點 建議 2G 記憶體，兩個從節點 1.5G記憶體， 橋接網路    關閉防火牆 配置ssh，讓節點之間能夠相互 ping 通 準備  軟體放到 autoInstall  目錄下，已存放 hadoop-2.9.0.tar.g

saltstack實現一鍵部署keepalived+haproxy的高可用負載均衡叢集

配置環境 主機名 ip 服務 server1 172.25.1.1 salt-master、salt-minion haproxy、keepalived server2 172.25.1.2 salt-minion

SaltStack一鍵自動化部署高可用負載均衡叢集

本節內容涉及的saltstack配置以及各服務的安裝包和配置檔案均打包上傳到了百度雲，可自由下載使用 實驗環境（rhel6.5 x86_64bit virtual machine） 172.25.5.91 salt-master rhel65-lockey1

利用ansible來做kubernetes 1.10.3集群高可用的一鍵部署

true com gem child sed files compiler 主機信息 著作權 請讀者務必保持環境一致 安裝過程中需要下載所需系統包，請務必使所有節點連上互聯網。 本次安裝的集群節點信息 實驗環境：VMware的虛擬機 IP地址主機名CPU內

Saltstack自動化運維工具 ---- Salt一鍵部署 、一鍵部署原始碼安裝ngixn

Salt，,一種全新的基礎設施管理方式，部署輕鬆，在幾分鐘內可執行起來，擴充套件性好，很容易管理上萬臺伺服器，速度夠快，伺服器之間秒級通訊。 salt底層採用動態的連線匯流排, 使其可以用於編配, 遠端執行, 配置管理等等. 1、安裝配置 [[email&

自動化運維saltstack 安裝部署以及一鍵部署實現負載均衡

saltstack介紹 SaltStack是一個伺服器基礎架構集中化管理平臺，SaltStack基於Python語言實現，也是基於C/S架構，結合輕量級訊息佇列（ZeroMQ）與Python第三方模組（Pyzmq、PyCrypto、Pyjinjia2、pyth

基於saltstack自動化部署高可用kubernetes集群

內核模塊 .com state.sls nio nginx 插件 perl oot mono SaltStack自動化部署HA-Kubernetes 本項目在GitHub上，會不定期更新，大家也可以提交ISSUE，地址為：https://github.com/skym

CentOS 6 apache源碼編譯一鍵部署腳本

apache源碼編譯腳本需求：源碼編譯apache環境：CentOS 6 64位系統安裝的桌面版軟件：httpd-2.4.12.tar.gz、pcre-8.31.tar.bz2、apr-util-1.5.3、apr-1.5.1.tar.gz備註：目前只在centos 6環境下測試過，如果有報錯可能是依賴包安裝

Docker-Compose一鍵部署Ningx+.Net Core+Redis集群

ext 地址 error app應用 十分 鏡像 max blank 問題 在看該文章前，你需要對Docker有所了解。 1、創建WebApp應用程序 我使用的是.Net Core 1.0.1版本，創建一個MVC應用程序，並添加對Redis的引用。因為這些很基礎，也很簡單

一鍵部署rysnc實現全網備份

web服務器 管理工具 配置文件 server 客戶機 需要的工具：ansible 批量管理工具思路：實現一鍵自動化安裝好rysnc備份服務器,實現全網備份rysnc配置文件，是在管理機上，推送到我們的rysnc服務器上的，所以我們可以隨時可以在管理機修改我們的rysnc服務器上的配置文件

lvs+keepalived部署高可用集群

lvs+keepalived本環境基於centos7部署，基本架構圖：client ip: 192.168.1.101lvs1 ip: 192.168.1.173lvs2 ip: 192.168.1.110web1: 192.168.1.114web2: 192.168.1.119VIP: 192.168.1

keepalived+nginx-upstream部署高可用反向代理

proxy route 服務器 宕機 127.0.0.1 trac 訪問 代理 _id 實驗拓撲 實驗要求 兩個web server提供httpd服務，ip地址分別是172.18.27.201、202，掩碼是16 兩個nginx proxy提供高可用反向代理，ip地

fabric本地一鍵部署LAMP

systemctl strong sql 普通用戶 and pre port tar oca 一、添加普通用戶jeff執行sudo時無需輸入密碼 $ sudo vim /etc/sudoers --------------------------------------

ansible一鍵部署NFS掛載

ansible-nfs 第1章 創建配置文件1.1 編寫創建密鑰對和分發腳本[[email protected] scripts]# cat /server/scripts/fenfa.sh#!/bin/bash## create key pair ##創建密鑰對ssh-keygen -t dsa

服務器日誌 之 一鍵部署log服務器

log服務器 一鍵部署1 概述服務器上的日誌，處理記錄在本機上，也可以搭建專門收集log的服務器，方便分析。本文將介紹如何啟用rsyslog的TCP和UDP的514端口進行網絡日誌收集，並通過rsyslog-mysql這個工具將日誌記錄到mysql數據庫中， 再通過loganalyzer工具將日誌用頁面的形