伺服器端：192.168.3.87
客戶端：192.168.3.86、192.168.3.108


1.salt伺服器端安裝 192.168.3.87

rpm -Uvh http://mirrors.yun-idc.com/epel/6Server/x86_64/epel-release-6-8.noarch.rpm
yum install -y salt-master

2.安裝minion客戶端
rpm -Uvh http://mirrors.yun-idc.com/epel/6Server/x86_64/epel-release-6-8.noarch.rpm
yum install -y salt-minion


報錯：
--> Finished Dependency Resolution
Error: Package: salt-2015.5.10-2.el6.noarch (epel)
           Requires: PyYAML
Error: Package: salt-2015.5.10-2.el6.noarch (epel)
           Requires: m2crypto
Error: Package: salt-2015.5.10-2.el6.noarch (epel)
           Requires: python-requests
Error: Package: salt-2015.5.10-2.el6.noarch (epel)
           Requires: python-jinja2
 You could try using --skip-broken to work around the problem
 You could try running: rpm -Va --nofiles --nodigest


解決辦法：
將所有的本地源刪除，只保留系統和epel源，重新安裝即可

3.客戶端配置salt master dns解析
echo "192.168.3.87 salt" >>/etc/hosts

啟動服務端
service salt-master start


可以將服務端debug功能開啟
vim /etc/salt/master
log_level: debug


netstat -lnt
可以看到4506和4505兩個埠已經開始監聽
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address               Foreign Address             State      
tcp        0      0 0.0.0.0:111                 0.0.0.0:*                   LISTEN      
tcp        0      0 0.0.0.0:22                  0.0.0.0:*                   LISTEN      
tcp        0      0 0.0.0.0:57718               0.0.0.0:*                   LISTEN      
tcp        0      0 127.0.0.1:631               0.0.0.0:*                   LISTEN      
tcp        0      0 0.0.0.0:4505                0.0.0.0:*                   LISTEN      
tcp        0      0 127.0.0.1:25                0.0.0.0:*                   LISTEN      
tcp        0      0 0.0.0.0:4506                0.0.0.0:*                   LISTEN      
tcp        0      0 0.0.0.0:10050               0.0.0.0:*                   LISTEN      
tcp        0      0 0.0.0.0:3306                0.0.0.0:*                   LISTEN 


客戶端的salt檔案列表
tree /etc/salt
/etc/salt
├── minion
├── minion.d
│   └── _schedule.conf
├── minion_id
└── pki
    └── minion
        ├── minion_master.pub
        ├── minion.pem
        └── minion.pub




列出所有的客戶端
salt-key -L
Accepted Keys:
Denied Keys:
Unaccepted Keys:
centossz008
Rejected Keys:
新增指定客戶端
[

[email protected] test]# salt-key -a centossz008 
The following keys are going to be accepted:
Unaccepted Keys:
centossz008
Proceed? [n/Y] y
Key for minion centossz008 accepted.


新增指定客戶端無需確認
salt-key -A 192.168.3.108 -y
The following keys are going to be accepted:
Unaccepted Keys:
192.168.3.108
Key for minion 192.168.3.108 accepted.


測試連通性
salt '*' test.ping
192.168.3.108:
    True
centossz008:
    True


批量執行命令：
檢視時間
salt '*' cmd.run date
時間同步
salt '*' cmd.run 'ntpdate -u ntp.org'


舉例
1.修改客戶端的主機名由centossz008更名為minion_client01
hostname minion_client01


vim /etc/sysconfig/network
HOSTNAME=minion_client01


刪除客戶端之前儲存的相關認證資訊
rm -rf minion_id pki


服務端刪除原有認證
salt-key -d centossz008 -y
Deleting the following keys:
Accepted Keys:
centossz008
Key for minion centossz008 deleted.


重啟客戶端後在服務端重新認證
salt-key -A -y
The following keys are going to be accepted:
Unaccepted Keys:
minion_client01.DHCP
Key for minion minion_client01.DHCP accepted.


salt '*' cmd.run 'grep salt /etc/hosts'
minion_client01.DHCP:
    192.168.3.87 salt
192.168.3.108:
    192.168.3.87 salt


2.更換salt-master主機
當master主機效能承載不了大批量機器的的時候，需要更換主機
原有主機：192.168.3.87
目標主機：192.168.3.54


①在目標master主機3.54上安裝salt-master


rpm -Uvh http://mirrors.yun-idc.com/epel/6Server/x86_64/epel-release-6-8.noarch.rpm
yum install -y salt-master
Loaded plugins: fastestmirror, security
Determining fastest mirrors


報錯：
Error: Cannot retrieve metalink for repository: epel. Please verify its path and try again


執行：
yum-config-manager --disable epel-testing
把epel-testing這個庫從yum庫裡面禁用掉
發現是啟用了/etc/yum.conf中的代理，取消即可


②將原主機中/etc/salt下的pki目錄打包拷貝到目標機3.54的/etc/salt目錄下
tar zcvf pki.tar.gz pki
scp pki.tar.gz

[email protected]:/etc/salt


③目標master中解壓pki目錄
tar -zxvf pki.tar.gz


tree pki
pki
└── master
    ├── master.pem
    ├── master.pub
    ├── minions
    │   ├── 192.168.3.108
    │   └── minion_client01.DHCP
    ├── minions_autosign
    ├── minions_denied
    ├── minions_pre
    └── minions_rejected


啟動服務
service salt-master star


④在原master主機中執行命令將minion客戶端中的hosts檔案改為新的master主機
# salt '*' cmd.run "grep salt /etc/hosts"
minion_client01.DHCP:
    192.168.3.87 salt
192.168.3.108:
    192.168.3.87 salt


salt '*' cmd.run "sed -i 's#192.168.3.87#192.168.3.54#' /etc/hosts"
minion_client01.DHCP:
192.168.3.108:


重啟minion服務
salt '*' service.restart salt-minion
此時發現原主機已經無法執行命令了
[

[email protected] salt]# salt '*' cmd.run "grep salt /etc/hosts"
192.168.3.108:
    Minion did not return. [No response]
minion_client01.DHCP:
    Minion did not return. [No response]


在新的master上執行命令測試，發現ok，說明主機成功遷移


salt '*' cmd.run date
192.168.3.108:
    Sun Aug  7 10:43:04 CST 2016
minion_client01.DHCP:
    Sun Aug  7 10:43:04 CST 2016


伺服器端修改埠


syndic_master_port: 8506
publish_port: 9036