零基础学习Puppet自动化配置管理系列文档
工欲善其事必先利其器
上一节讲解了puppet基础环境模块puppet，除此之外影响puppet基础环境的还有一个模块叫yum源，当然这个是相对于RedHat系统而言的，如果是SLES系统，就要配置zypper源了，其它Linux系统也是如此。那么配置yum源需要用到哪些资源呢？
之前写puppet模块的时候用到了file资源、service资源、package资源，那么这三个资源是否能满足yum模块的配置呢，答案是肯定的。然而官方给出了专用的yumrepo资源，管理可以精确到repo里面的每一行，使用还是非常方便的，接下来，我们使用官方给出的yumrepo资源来配置yum模块。
注：上一节教会大家如何一步步创建一个完整模块，为了避免重复，这一节就直接贴配置了。
一、配置之前需要考虑的问题：
1、yum包需要被安装；
2、yum主配置文件yum.conf需要配置正确；
3、每台主机至少有两个repo源，一个指向本地的ISO源，一个指向自定义的puppet源；
4、不同系统版本的repo源中的部分参数略有不同，比如baseurl。
二、创建yum模块
1、创建yum模块目录结构
|
1
2
3
4
5
6
|
[root@puppetmaster modules]# tree yum
yum
├── files
├── manifests
└── templates
3
directories,
0
files
|
2、创建package资源
|
1
2
3
4
5
6
|
[root@puppetmaster manifests]# vim install.pp
class
yum::install{
package
{
'yum'
:
ensure => installed, #要求yum这个包处于安装状态
}
}
|
3、创建params.pp
根据操作系统版本定义repo文件中的各项条目
|
1
2
3
|
eg.
[root@agent1 ~]# facter | grep operatingsystemrelease 系统版本fact
operatingsystemrelease =>
5.7
|
由于RedHat存在多个版本，不同版本yum源的指向不同，对应的pki认证文件也不同，因此应当设置一些变量，然后进行引用。以下只定义了系统版本为5.7、5.8、和6.4的变量，如果有其它版本效仿即可。
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
|
[root@puppetmaster manifests]# vim params.pp
class
yum::params {
case
$operatingsystemrelease{
5.7
: {
$yum_redhat_descr =
'rhel base rpm packages'
#定义redhat光盘源的描述信息
$yum_puppet_descr =
'puppet rpm packages for rhel'
#定义puppet源的描述信息
$yum_redhat_pki =
'file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release-rhel5'
#定义redhat光盘源的pki认证文件位置
$yum_redhat_baseurl =
'file:///media/cdrom/Server'
#定义redhat光盘源baseurl的下载位置
$yum_puppet_baseurl =
'ftp://puppetmaster.kisspuppet.com/RHEL5U7'
#定义puppet源baseurl的下载位置
$yum_redhat_pki_name =
'/etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release-rhel5'
#定义puppet源pki认证文件位置
$yum_redhat_pki_download =
'puppet:///modules/yum/PM-GPG-KEY/RPM-GPG-KEY-redhat-release-rhel5'
#定义pki文件的服务器下载地址
}
5.8
: {
$yum_redhat_descr =
'rhel base rpm packages'
$yum_puppet_descr =
'puppet rpm packages for rhel'
$yum_redhat_pki =
'file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release-rhel5'
$yum_redhat_baseurl =
'file:///media/cdrom/Server'
$yum_puppet_baseurl =
'ftp://puppetmaster.kisspuppet.com/RHEL5U8'
$yum_redhat_pki_name =
'/etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release-rhel5'
$yum_redhat_pki_download =
'puppet:///modules/yum/PM-GPG-KEY/RPM-GPG-KEY-redhat-release-rhel5'
}
6.4
: {
$yum_redhat_descr =
'rhel base rpm packages'
$yum_puppet_descr =
'puppet rpm packages for rhel'
$yum_redhat_pki =
'file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release-rhel6'
$yum_redhat_baseurl =
'file:///media/cdrom'
$yum_puppet_baseurl =
'ftp://puppetmaster.kisspuppet.com/RHEL6U4'
$yum_redhat_pki_name =
'/etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release-rhel6'
$yum_redhat_pki_download =
'puppet:///modules/yum/PM-GPG-KEY/RPM-GPG-KEY-redhat-release-rhel6'
}
default
: { #定义如果没有以上版本的系统，直接报以下错误，同时也是为了方便调试
fail(
"Module yum is not supported on ${::operatingsystem}"
)
}
}
}
|
4、创建config.pp文件
config.pp文件用于管理yum主配置文件yum.conf，repo文件的属性，pki文件的属性及下载地址和yumrepo源
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
|
[root@puppetmaster manifests]# vim config.pp
class
yum::config{
include
yum::params #引用
class
yum::params
include
yum::config_file,yum::config_key,yum::config_repo
}
class
yum::config_file{
file {
'/etc/yum.conf'
: #创建file资源管理yum主配置文件yum.conf
ensure => present, #要求文件处于存在状态
owner =>
'root'
, #属主为root
group =>
'root'
, #属组为root
mode =>
'0644'
, #文件权限为
644
source =>
'puppet:///modules/yum/etc/yum.conf'
, #要求从puppetmaster服务器指定目录去下载
require => Class[
'yum::install'
], #要求在配置之前先安装yum软件包
}
file {
'/etc/yum.repos.d/rhel-base.repo'
: #设置光盘repo的一些属性
ensure => present,
owner =>
'root'
,
group =>
'root'
,
mode =>
'0644'
,
require => Class[
'yum::config_repo'
], #要求设置之前yumrepo资源rhel-base必须存在
}
file {
'/etc/yum.repos.d/rhel-puppet.repo'
: #设置puppet repo的一些属性
ensure => present,
owner =>
'root'
,
group =>
'root'
,
mode =>
'0644'
,
require => Class[
'yum::config_repo'
], #要求设置之前yumrepo资源puppet必须存在
}
}
class
yum::config_key{ #设置pki证书的一些属性及下载位置
file { $yum::params::yum_redhat_pki_name:
ensure => present,
owner =>
'root'
,
group =>
'root'
,
mode =>
'0644'
,
source => $yum::params::yum_redhat_pki_download,
}
}
class
yum::config_repo{
yumrepo { rhel-base: #创建yumrepo资源rhel-base
descr => $yum::params::yum_redhat_descr, #设置描述信息
baseurl => $yum::params::yum_redhat_baseurl, #设置yum源下载地址
enabled =>
1
, #激活yum源
gpgcheck =>
1
, #设置要求通过pki校验
gpgkey => $yum::params::yum_redhat_pki, #设置pki文件的下载位置
require => Class[
'yum::config_key'
], #要求这个文件必须存在
priority =>
1
, #设置repo的优先级为
1
(数字越小优先级越高)
}
yumrepo { rhel-puppet:
descr => $yum::params::yum_puppet_descr,
baseurl => $yum::params::yum_puppet_baseurl,
enabled =>
1
,
gpgcheck =>
0
,
priority =>
2
,
}
}
|
5、创建init.pp文件
由于params.pp文件中设置的变量名称引用太长，这里可以在init.pp中将变量名简化，方便引用。
|
1
2
3
4
5
6
7
8
9
10
11
|
class
yum(
$yum_redhat_descr = $yum::params::yum_redhat_descr, #
$yum_puppet_descr = $yum::params::yum_puppet_descr,
$yum_redhat_pki = $yum::params::yum_redhat_pki,
$yum_redhat_baseurl = $yum::params::yum_redhat_baseurl,
$yum_puppet_baseurl = $yum::params::yum_puppet_baseurl,
$yum_redhat_pki_name = $yum::params::yum_redhat_pki_name,
$yum_redhat_pki_download = $yum::params::yum_redhat_pki_download
) inherits yum::params { #设置这些变量依赖于yum::params类
include
yum::config,yum::install #包含所有子
class
}
|
因此、上面定义的class yum::config_key和yum::config_repo可以写成以下格式
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
|
class
yum::config_key{ #设置pki证书的一些属性及下载位置
file { $yum_redhat_pki_name:
ensure => present,
owner =>
'root'
,
group =>
'root'
,
mode =>
'0644'
,
source => $yum_redhat_pki_download,
}
}
class
yum::config_repo{
yumrepo { rhel-base: #创建yumrepo资源rhel-base
descr => $yum_redhat_descr, #设置描述信息
baseurl => $yum_redhat_baseurl, #设置yum源下载地址
enabled =>
1
, #激活yum源
gpgcheck =>
1
, #设置要求通过pki校验
gpgkey => $yum_redhat_pki, #设置pki文件的下载位置
require => Class[
'yum::config_key'
], #要求这个文件必须存在
priority =>
1
, #设置repo的优先级为
1
(数字越小优先级越高)
}
yumrepo { rhel-puppet:
descr => $yum_puppet_descr,
baseurl => $yum_puppet_baseurl,
enabled =>
1
,
gpgcheck =>
0
,
priority =>
2
,
}
}
|
6、创建puppet.conf和pki文件
|
1
2
3
4
5
6
7
8
9
|
[root@puppetmaster yum]# tree files
files
├── etc
│ └── yum.conf #可以从节点/etc/目录下copy一个yum.conf文件进行配置管理
└── PM-GPG-KEY
├── RPM-GPG-KEY-puppet-release #自己做一个pki文件，如何做，请google
├── RPM-GPG-KEY-redhat-release-rhel5 #在RHEL5系统/etc/pki/rpm-gpg/目录下面有对应的pki文件，将其命个别名即可
└── RPM-GPG-KEY-redhat-release-rhel6 #在RHEL6系统/etc/pki/rpm-gpg/目录下面有对应的pki文件，将其命个别名即可
2
directories,
4
files
|
7、应用到节点上
|
1
2
3
4
5
6
7
8
|
[root@puppetmaster modules]# vim /etc/puppet/manifests/site.pp
$puppetmaster =
'puppetmaster.kisspuppet.com'
class
environments{
include
motd,puppet,yum
}
node
default
{
include
environments
}
|
8、在agent1上进行测试
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
|
[root@agent1 yum.repos.d]# mv * /tmp/ #将所有的repo文件移动到/tmp目录下
[root@agent1 yum.repos.d]# puppet agent -t #运行一次puppet更新动作，可以通过以下日志看出更新
info: Caching catalog
for
agent1_cert.kisspuppet.com
info: Applying configuration version
'1395696487'
info: create
new
repo rhel-puppet
in
file /etc/yum.repos.d/rhel-puppet.repo
notice: /Stage[main]/Yum::Config_repo/Yumrepo[rhel-puppet]/descr: descr changed
''
to
'puppet rpm packages for rhel'
notice: /Stage[main]/Yum::Config_repo/Yumrepo[rhel-puppet]/baseurl: baseurl changed
''
to
'ftp://puppetmaster.kisspuppet.com/RHEL5U7'
notice: /Stage[main]/Yum::Config_repo/Yumrepo[rhel-puppet]/enabled: enabled changed
''
to
'1'
notice: /Stage[main]/Yum::Config_repo/Yumrepo[rhel-puppet]/gpgcheck: gpgcheck changed
''
to
'0'
notice: /Stage[main]/Yum::Config_repo/Yumrepo[rhel-puppet]/priority: priority changed
''
to
'2'
info: changing mode of /etc/yum.repos.d/rhel-puppet.repo from
600
to
644
info: create
new
repo rhel-base
in
file /etc/yum.repos.d/rhel-base.repo
notice: /Stage[main]/Yum::Config_repo/Yumrepo[rhel-base]/descr: descr changed
''
to
'rhel base rpm packages'
notice: /Stage[main]/Yum::Config_repo/Yumrepo[rhel-base]/baseurl: baseurl changed
''
to
'file:///media/cdrom/Server'
notice: /Stage[main]/Yum::Config_repo/Yumrepo[rhel-base]/enabled: enabled changed
''
to
'1'
notice: /Stage[main]/Yum::Config_repo/Yumrepo[rhel-base]/gpgcheck: gpgcheck changed
''
to
'1'
notice: /Stage[main]/Yum::Config_repo/Yumrepo[rhel-base]/gpgkey: gpgkey changed
''
to
'file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release-rhel5'
notice: /Stage[main]/Yum::Config_repo/Yumrepo[rhel-base]/priority: priority changed
''
to
'1'
info: changing mode of /etc/yum.repos.d/rhel-base.repo from
600
to
644
notice: Finished catalog run
in
0.51
seconds
[root@agent1 yum.repos.d]# ls
rhel-base.repo rhel-puppet.repo
[root@agent1 yum.repos.d]# cat rhel-base.repo #查看更新的光盘源文件
[rhel-base]
name=rhel base rpm packages
baseurl=file:
///media/cdrom/Server
enabled=
1
gpgcheck=
1
gpgkey=file:
///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release-rhel5
priority=
1
[root@agent1 yum.repos.d]# cat rhel-puppet.repo #插件更新的puppet源文件
[rhel-puppet]
name=puppet rpm packages
for
rhel
baseurl=ftp:
//puppetmaster.kisspuppet.com/RHEL5U7
enabled=
1
gpgcheck=
0
priority=
2
|
说明：关于puppet的资源目前大概有48种，这里就不一一介绍了
本文转自凌激冰51CTO博客，原文链接：http://blog.51cto.com/dreamfire/1382868，如需转载请自行联系原作者
