环境:3台主机,
IP分别为10.211.55.11、12、13
puppet master安装在10.211.55.11
puppet agent安装在10.211.55.11、12、13
1、安装EPEL库 后面安装puppet Dashboard需要
yum install yum-priorities rpm -ivh https://dl.fedoraproject.org/pub/epel/epel-release-latest-6.noarch.rpm rpm —import https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-6
其中源可以替换为国内镜像
http://mirrors.ustc.edu.cn/fedora/epel/epel-release-latest-6.noarch.rpm http://mirrors.ustc.edu.cn/fedora/epel/RPM-GPG-KEY-EPEL-6
修改/etc/yum.repos.d/epel.repo文件
在[epel]最后添加一条属性
priority=11
意思是yum先去官方源查,官方没有再去epel的源找
2、在10.211.55.11上安装dnsmasq域名解析服务
yum install dnsmasq chkconfig dnsmasq on service dnsmasq start lokkit -p 53:udp(打开iptables 53端口) echo "10.211.55.11 node01.myhost.com" >> /etc/hosts
修改dnsmasq.conf
interface=eth0 listen-address=10.211.55.11 bind-interfaces resolv-file=/etc/resolv.conf addn-hosts=/etc/hosts
三台主机上分别输入
echo “nameserver 10.211.55.11” >> /etc/resolv.conf
改主机名
vi /etc/sysconfig/network 分别改为node01.myhost.com、node02.myhost.com、node03.myhost.com
验证DNS是否成功
netstat -tunlp|grep 53 dig node02.myhost.com
3、在10.211.55.11安装时间同步服务器
yum install ntp chkconfig ntpd on service ntpd start
(待完善)
4、安装Puppet
安装官方源
rpm -ivh http://yum.puppetlabs.com/puppetlabs-release-el-6.noarch.rpm
导入GPG密钥(验证包的完整性)
rpm --import http://yum.puppetlabs.com/RPM-GPG-KEY-puppetlabs
安装
yum install puppet-server service puppetmaster start service puppet start chkconfig puppetmaster on chkconfig puppet on
编辑/etc/puppet/puppet.conf
[agent] server = node01.myhost.com
自动签名
cat > /etc/puppet/autosign.conf <
*.myhost.com
EOF
测试连接
puppet agent -t
删除证书
find /var/lib/puppet/ssl -name localhost.pem -delete
常用信息
puppet cert list -all(查看所有证书) cat /etc/sysconfig/puppet(默认配置) /var/lib/puppet (agent证书位置) /etc/puppet/puppet.conf (配置文件) /usr/share/puppet (安装位置) puppet config print modulepath(查看模块位置) puppet agent -t --summarize(查看报告)
5、安装Dashboard 安装
yum install -y mysql mysql-devel mysql-server httpd mod_passenger puppet-dashboard
mod_passenger是让apache支持ruby
配置:
/etc/my.cnf,
在[mysqld]字段,增加最后一行
# Allowing 32MB allows an occasional 17MB row with plenty of spare room max_allowed_packet = 32M
/etc/init.d/mysqld start chkconfig mysqld on chkconfig httpd on service httpd start mysqladmin -u root password 'password'
创建一个dashboard数据库
mysql -uroot -ppassword <<EOF
CREATE DATABASE dashboard CHARACTER SET utf8;
CREATE USER 'dashboard'@'localhost' IDENTIFIED BY 'password';
GRANT ALL PRIVILEGES ON dashboard.* TO 'dashboard'@'localhost';
FLUSH PRIVILEGES;
EOF
编辑 /usr/share/puppet-dashboard/config/database.yml
production: database: dashboard username: dashboard password: password encoding: utf8 adapter: mysql
修改时区 /usr/share/puppet-dashboard/config/environment.rb
#config.time_zone = 'UTC' config.time_zone = 'Beijing'
初始化数据库
cd /usr/share/puppet-dashboard/ rake RAILS_ENV=production db:migrate
配置Apache
cat > /etc/httpd/conf.d/passenger.conf << EOF LoadModule passenger_module modules/mod_passenger.so PassengerRoot /usr/share/rubygems/gems/passenger-3.0.17 PassengerRuby /usr/bin/ruby PassengerHighPerformance on PassengerMaxPoolSize 12 PassengerPoolIdleTime 1500 PassengerStatThrottleRate 120 RailsAutoDetect On ServerName node01.myhost.com DocumentRoot "/usr/share/puppet-dashboard/public/" <Directory "/usr/share/puppet-dashboard/public/"> Options None AllowOverride AuthConfig Order allow,deny allow from all ErrorLog /var/log/httpd/node01.myhost.com_error.log LogLevel warn CustomLog /var/log/httpd/node06.chenshake.com_access.log combined ServerSignature On EOF /etc/init.d/httpd start chkconfig httpd on lokkit -p 80:tcp
配置puppet
# puppet.conf (on puppet master) [master] reports = store, http reporturl = http://node06.chenshake.com:80/reports/upload
/etc/init.d/puppetmaster restart
导入报告
cd /usr/share/puppet-dashboard rake gems:refresh_specs rake RAILS_ENV=production reports:import Delayed Job Workers env RAILS_ENV=production /usr/share/puppet-dashboard/script/delayed_job -p dashboard -n 4 -m start ps -ef|grep delayed_job|grep -v grep env RAILS_ENV=production /usr/share/puppet-dashboard/script/delayed_job -p dashboard -n 4 -m stop
这个时候你才能在Dashbaord里看到数据
6、安装Foreman (待完善)
参考:
http://www.chenshake.com/puppet-study-notes/
http://acooly.iteye.com/blog/1993484