1、crontab模块
[root@redis01-jp ~]# salt 'redis02-jp' cron.raw_cron root 查看指定用户的计划任务
redis02-jp:
[root@redis01-jp ~]# salt 'redis02-jp' cron.set_job root '55' '14' '*' '*' '*' '/bin/echo "xxx" > /tmp/test.log' 创建任务
redis02-jp:
new
[root@redis01-jp ~]# salt 'redis02-jp' cron.raw_cron root 再次查看任务
redis02-jp:
# Lines below here are managed by Salt, do not edit
55 14 * * * /bin/echo "xxx" > /tmp/test.log
[root@redis01-jp ~]# salt 'redis02-jp' cron.rm_job root '/bin/echo "xxx" > /tmp/test.log' 删除任务
redis02-jp:
removed
[root@redis01-jp ~]# salt 'redis02-jp' cron.raw_cron root 再次查看任务
redis02-jp:
# Lines below here are managed by Salt, do not edit
[root@redis01-jp ~]#
2、远程运行命令cmd.run模块和名称解析dnsutil模块
[root@redis01-jp ~]# salt 'redis02-jp' cmd.run 'cat /etc/hosts'
redis02-jp:
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost6 localhost6.localdomain6
172.31.24.139 redis01-jp
172.31.24.140 redis02-jp
172.31.24.141 redis03-jp
[root@redis01-jp ~]# salt 'redis02-jp' dnsutil.hosts_append /etc/hosts 1.1.1.1 www.example_salt.com 添加本地解析条目
redis02-jp:
The following line was added to /etc/hosts:
1.1.1.1 www.example_salt.com
[root@redis01-jp ~]# salt 'redis02-jp' cmd.run 'cat /etc/hosts' 查看/etc/hosts
redis02-jp:
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost6 localhost6.localdomain6
172.31.24.139 redis01-jp
172.31.24.140 redis02-jp
172.31.24.141 redis03-jp
1.1.1.1 www.example_salt.com
[root@redis01-jp ~]# salt 'redis02-jp' dnsutil.hosts_remove /etc/hosts www.example_salt.com 删除本地解析条目
redis02-jp:
None
[root@redis01-jp ~]# salt 'redis02-jp' cmd.run 'cat /etc/hosts' 再次查看/etc/hosts
redis02-jp:
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost6 localhost6.localdomain6
172.31.24.139 redis01-jp
172.31.24.140 redis02-jp
172.31.24.141 redis03-jp
[root@redis01-jp ~]#
3、网络模块network
[root@redis01-jp ~]# salt 'redis02-jp' network.dig www.qq.com 名称解析
redis02-jp:
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.47.rc1.51.amzn1 <<>> www.qq.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43004
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;www.qq.com. IN A
;; ANSWER SECTION:
www.qq.com. 60 IN CNAME qq.com.edgesuite.net.
qq.com.edgesuite.net. 60 IN CNAME a1574.b.akamai.net.
a1574.b.akamai.net. 11 IN A 96.17.151.16
a1574.b.akamai.net. 11 IN A 96.17.151.18
;; Query time: 5 msec
;; SERVER: 172.31.0.2#53(172.31.0.2)
;; WHEN: Mon Dec 19 07:24:33 2016
;; MSG SIZE rcvd: 123
[root@redis01-jp ~]# salt 'redis02-jp' network.ping www.baidu.com 网络连通性测试
redis02-jp:
PING www.a.shifen.com (103.235.46.39) 56(84) bytes of data.
64 bytes from 103.235.46.39: icmp_seq=1 ttl=50 time=84.0 ms
64 bytes from 103.235.46.39: icmp_seq=2 ttl=50 time=84.1 ms
64 bytes from 103.235.46.39: icmp_seq=3 ttl=50 time=84.1 ms
64 bytes from 103.235.46.39: icmp_seq=4 ttl=50 time=84.9 ms
--- www.a.shifen.com ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3003ms
rtt min/avg/max/mdev = 84.068/84.321/84.935/0.459 ms
[root@redis01-jp ~]# salt 'redis02-jp' network.traceroute www.qq.com 网络路径跟踪测试
......
[root@redis01-jp ~]# salt 'redis02-jp' network.hwaddr eth0 查看MAC地址
redis02-jp:
06:cf:b1:b8:61:bf
[root@redis01-jp ~]# salt 'redis02-jp' network.in_subnet 172.31.0.0/16 测试接口所在子网
redis02-jp:
True
[root@redis01-jp ~]# salt 'redis02-jp' network.interfaces 查看指定机器的网络接口
[root@redis01-jp ~]# salt 'redis02-jp' network.ip_addrs 查看指定机器的IP地址
redis02-jp:
- 172.31.24.141
[root@redis01-jp ~]# salt 'redis02-jp' network.subnets 查看指定机器的子网网段
redis02-jp:
- 172.31.16.0/20
[root@redis01-jp ~]#
4、复制模块cp
[root@redis01-jp ~]# salt 'redis02-jp' cp.get_file salt://files/file1 /tmp/file1 文件复制
redis02-jp:
/tmp/file1
[root@redis01-jp ~]# salt 'redis02-jp' cp.get_file salt://files/file2 /tmp/file2
redis02-jp:
/tmp/file2
[root@redis01-jp ~]# ls /srv/salt/files/
file1 file2 file3
[root@redis01-jp ~]#
[root@redis01-jp ~]# salt 'redis02-jp' cp.get_dir salt://files /tmp/ #将主控端file_roots指定位置下的目录复制到被控主机/tmp/目录下
redis02-jp:
- /tmp//files/file1
- /tmp//files/file2
- /tmp//files/file3
[root@redis01-jp ~]#
[root@redis01-jp ~]# salt '*' cp.get_url http://www.slashdot.ort /tmp/index.html #下载URL内容到被控主机指定位置(/tmp/index.html)
[root@redis01-jp ~]# salt '*' cp.get_file salt://vimrc /etc/vimrc gzip=5 #传输时压缩文件
Valid values are integers from 1 to 9, where 1 is the lightest compression and 9 the heaviest. In other words, 1 uses the least CPU on the master (and minion), while 9 uses the most.
[root@redis01-jp ~]# salt '*' cp.get_file salt://vimrc /etc/vim/vimrc makedirs=True #如果没有目标目录，则创建
5、文件操作模块file
参考：http://docs.saltstack.cn/ref/modules/all/salt.modules.file.html#module-salt.modules.file
[root@redis01-jp ~]# salt 'redis02-jp' file.get_sum /etc/fstab md5 # 查看文件md5值
redis02-jp:
44c60b006413b0fc1b98c061d4b339ff
[root@redis01-jp ~]# salt 'redis02-jp' file.check_hash /etc/fstab md5:'44c60b006413b0fc1b98c061d4b339ff'
redis02-jp:
True
[root@redis01-jp ~]#
[root@redis01-jp ~]# salt 'redis02-jp' file.chown /tmp/file1 push push #修改文件属主、属组
redis02-jp:
None
[root@redis01-jp ~]# salt 'redis02-jp' cmd.run 'ls -l /tmp/file1'
redis02-jp:
-rw-r--r-- 1 push push 0 Dec 19 04:12 /tmp/file1
[root@redis01-jp ~]#
[root@redis01-jp ~]# salt 'redis02-jp' file.copy /etc/passwd /tmp/passwd #远程主机复制文件
redis02-jp:
True
[root@redis01-jp ~]# salt 'redis02-jp' cmd.run 'ls /tmp/passwd'
redis02-jp:
/tmp/passwd
[root@redis01-jp ~]# salt 'redis02-jp' file.file_exists /tmp/passwd #测试文件是否存在
redis02-jp:
True
[root@redis01-jp ~]# salt 'redis02-jp' file.directory_exists /tmp/files # 测试目录是否存在
redis02-jp:
True
[root@redis01-jp ~]#
[root@redis01-jp ~]# salt 'redis02-jp' file.stats /tmp/passwd #查看文件meta信息
redis02-jp:
----------
atime:
1482131501.34
ctime:
1482131501.34
gid:
0
group:
root
inode:
281103
mode:
0644
mtime:
1482131501.34
size:
1321
target:
/tmp/passwd
type:
file
uid:
0
user:
root
[root@redis01-jp ~]# salt 'redis02-jp' file.access /etc/passwd r #测试文件是否有r权限
redis02-jp:
True
[root@redis01-jp ~]# salt 'redis02-jp' file.access /etc/passwd x #测试文件是否有x权限
redis02-jp:
False
[root@redis01-jp ~]#
[root@redis01-jp ~]# salt 'redis02-jp' file.get_mode /tmp/passwd #查看文件权限
redis02-jp:
0644
[root@redis01-jp ~]# salt 'redis02-jp' file.set_mode /tmp/passwd 755 #设置文件权限
redis02-jp:
0755
[root@redis01-jp ~]# salt 'redis02-jp' file.mkdir /tmp/dir1 #创建目录
redis02-jp:
True
[root@redis01-jp ~]# salt 'redis02-jp' file.sed /tmp/passwd 'push' 'work' #替换文件内容
redis02-jp:
----------
pid:
4621
retcode:
0
stderr:
stdout:
[root@redis01-jp ~]# salt 'redis02-jp' cmd.run 'tail -1 /tmp/passwd'
redis02-jp:
work:x:501:501::/home/work:/bin/bash
[root@redis01-jp ~]# salt 'redis02-jp' file.append /tmp/passwd 'saltstack file append test' #追回文件内容
redis02-jp:
Wrote 1 lines to "/tmp/passwd"
[root@redis01-jp ~]# salt 'redis02-jp' cmd.run 'tail -2 /tmp/passwd'
redis02-jp:
work:x:501:501::/home/work:/bin/bash
saltstack file append test
[root@redis01-jp ~]# salt 'redis02-jp' file.remove /tmp/file1 # 可以删除指定文件
redis02-jp:
True
[root@redis01-jp ~]#
[root@redis01-jp ~]# salt 'redis02-jp' file.remove /tmp/dir1 #可以删除空目录
redis02-jp:
True
[root@redis01-jp ~]# salt 'redis02-jp' file.remove /tmp/files # 可以删除非空目录
redis02-jp:
True
[root@redis01-jp ~]# salt 'redis02-jp' file.contains /etc/passwd 'push' # 测试文件中是否包含push字符串
redis02-jp:
True
[root@redis01-jp ~]# salt 'redis02-jp' file.contains /etc/passwd 'work'
redis02-jp:
False
[root@redis01-jp ~]#
[root@redis01-jp ~]# cp /etc/passwd /srv/salt/files/
[root@redis01-jp ~]# salt 'redis02-jp' file.get_diff /etc/passwd salt://files/passwd #比较文件内容差异
redis02-jp:
--- /etc/passwd
+++ salt://files/passwd
@@ -23,6 +23,3 @@
sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin
dbus:x:81:81:System message bus:/:/sbin/nologin
ec2-user:x:500:500:EC2 Default User:/home/ec2-user:/bin/bash
-apache:x:48:48:Apache:/var/www:/sbin/nologin
-nginx:x:498:497:Nginx web server:/var/lib/nginx:/sbin/nologin
-push:x:501:501::/home/push:/bin/bash
[root@redis01-jp ~]#
[root@redis01-jp ~]# salt 'redis02-jp' file.grep /etc/passwd push #过滤内容
redis02-jp:
----------
pid:
5124
retcode:
0
stderr:
stdout:
push:x:501:501::/home/push:/bin/bash
[root@redis01-jp ~]#
6、包管理模块pkg与服务管理模块service
[root@redis01-jp ~]# salt 'redis02-jp' pkg.install php #安装指定的软件包
redis02-jp:
----------
compat-gmp4:
----------
new:
4.3.2-1.14.amzn1
old:
httpd:
----------
new:
2.2.31-1.8.amzn1
old:
php:
----------
new:
5.3.29-1.8.amzn1
old:
php-cli:
----------
new:
5.3.29-1.8.amzn1
old:
php-common:
----------
new:
5.3.29-1.8.amzn1
old:
[root@redis01-jp ~]#
[root@redis01-jp ~]# salt 'redis02-jp' pkg.remove nginx #卸载包
redis02-jp:
----------
[root@redis01-jp ~]# salt 'redis02-jp' pkg.upgrade #系统更新
[root@redis01-jp ~]# salt 'redis02-jp' service.enable httpd #设置服务开机自启动
redis02-jp:
True
[root@redis01-jp ~]# salt 'redis02-jp' service.disable httpd #禁止服务开机自启动
redis02-jp:
True
[root@redis01-jp ~]# salt 'redis02-jp' service.start httpd #启动服务
redis02-jp:
True
[root@redis01-jp ~]# salt 'redis02-jp' service.reload httpd
redis02-jp:
True
[root@redis01-jp ~]# salt 'redis02-jp' service.restart httpd
redis02-jp:
True
[root@redis01-jp ~]# salt 'redis02-jp' service.status httpd
redis02-jp:
True
[root@redis01-jp ~]# salt 'redis02-jp' service.stop httpd
redis02-jp:
True
[root@redis01-jp ~]#
