puppet yum模块、配置仓储、mount模块-阿里云开发者社区

开发者社区> 开发与运维> 正文

puppet yum模块、配置仓储、mount模块

简介: 转载:http://blog.51cto.com/ywzhou/1577335 作用:自动为客户端配置YUM源,为使用yum安装软件包提供便捷。 1、服务端配置yum模块 (1)模块清单 [root@puppet ~]# tree /etc/puppe...

转载:http://blog.51cto.com/ywzhou/1577335
作用:自动为客户端配置YUM源,为使用yum安装软件包提供便捷。

1、服务端配置yum模块

(1)模块清单

[root@puppet ~]# tree /etc/puppet/modules/yum/
/etc/puppet/modules/yum/
├── files
│ ├── yum.conf
│ └── RPM-GPG-KEY-CentOS-6
├── manifests
│ ├── config.pp
│ ├── init.pp
│ ├── install.pp
│ └── params.pp
└── templates
说明:这里只针对centos 6.5版本测试,其他的可以此类推,需要注意的就是本地源的光盘加载问题(见测试环节)

(2)定义参数类

[root@puppet ~]# vi /etc/puppet/modules/yum/manifests/params.pp
class yum::params {
case operatingsystemrelease{ 6.5: {yum_centos_descr = 'centos base rpm packages' #本地仓库描述信息
yum_centos_baseurl = 'file:///media/cdrom/' #IOS文件或光盘mount到本地的路径yum_centos_pki = 'file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6' #YUMREPO文件中指定PKI文件路径
yum_centos_pki_name = '/etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6' #PKI文件路径,复制一份到puppet的modules中yum_centos_pki_download = 'puppet:///modules/yum/RPM-GPG-KEY-CentOS-6'
yum_puppet_descr = 'puppet rpm packages for centos' #puppet仓库描述信息yum_puppet_baseurl = 'http://yum.puppetlabs.com/el/6/products/basearch' #puppet仓库路径yum_163_descr = '163 rpm packages for centos' #163仓库描述信息
yum_163_baseurl = 'http://mirrors.163.com/centos/releasever/contrib/basearch/' #163仓库路径 } default: { fail("Module yum is not supported on{::operatingsystem}") #6.5版本以外的会提示不支持,如有5.5、5.4这样的版本可按参考6.5进行参数定义
}
}
}
注意:PKI文件RPM-GPG-KEY-CentOS-6是光盘中的存在的,系统不一样,名称也不一样,需要确认。

说明:变量$operatingsystemrelease是通过facter获取计算机的信息的,运行下面的命令可查看计算机相关信息:

[root@puppet ~]# facter | grep operatingsystemrelease
operatingsystemrelease => 6.5
(3)定义安装类

[root@puppet ~]# vi /etc/puppet/modules/yum/manifests/install.pp
class yum::install{

1、确保yum被安装

package { 'yum':
ensure => installed,
}

2、创建光盘挂载目录

file { '/media/cdrom':
ensure => directory,
owner => root,
group => root,
}

3、确保光盘被挂载

方法一:EXEC

exec { "mount_cdrom":

path => "/usr/bin:/usr/sbin:/bin",

command => '/bin/mount /dev/cdrom /media/cdrom/',

creates => '/media/cdrom/RPM-GPG-KEY-CentOS-6',

require => File['/media/cdrom'],

}

方法二:MOUNT

mount { 'mount_cdrom':
name => "/media/cdrom", #挂载到的目标目录
ensure => mounted, #要求被挂载状态
fstype => "iso9660", #光盘的文件类型,使用mount命令或cat /etc/fstab查看
device => "/dev/cdrom", #光盘的设备,是个链接,实际指向/dev/sr0
options => "ro", #以只读方式挂载光盘
atboot => true, #允许开机启动时挂载上
remounts => true, #允许重新挂载
require => File['/media/cdrom'], #要求挂载目标目录存在
}

4、安装源前先备份

file { '/etc/yum.repos.d/bak':
ensure => directory,
owner => root,
group => root,
}
exec { "repos_bak":
path => "/usr/bin:/usr/sbin:/bin",
command => 'mv -f /etc/yum.repos.d/[^c].repo /etc/yum.repos.d/bak/', #将不是小写c开头的repo文件强制移动到备份目录
creates => '/etc/yum.repos.d/bak/CentOS-Base.repo', #当备份目录存在这个文件时不再执行此资源
require => File['/etc/yum.repos.d/bak'], #要求备份目录存在
}
}
说明:新生成的repo文件都是小写c开头的,因此将不是c开头([^c]
)的repo文件移至bak,

原文件都是CentOS开头的,外加一个puppetlabs.repo,可以将[^c].repo改成CentOS.repo,只将原文件备份。

(4)定义配置类

[root@puppet ~]# vi /etc/puppet/modules/yum/manifests/config.pp
class yum::config{
include yum::params
include yum::config_file,yum::config_key,yum::config_repo
}

1、定义配置文件

class yum::config_file{
file { '/etc/yum.conf': #yum主配置文件yum.conf路径
ensure => present, #要求文件处于存在状态
owner => 'root', #属主为root
group => 'root', #属组为root
mode => '0644', #文件权限为644
source => 'puppet:///modules/yum/yum.conf', #自动搜索yum模块下的files目录,因此省略/files
require => Class['yum::install'], #要求在配置之前先安装yum软件包
}
file { '/etc/yum.repos.d/centos-base.repo': #设置光盘repo的一些属性,文件名是yumrepo中的标题名定义的,必须一致
ensure => present,
owner => 'root',
group => 'root',
mode => '0644',
require => Class['yum::config_repo'], #要求设置之前yumrepo资源centos-base必须存在
}
file { '/etc/yum.repos.d/centos-puppet.repo':
ensure => present,
owner => 'root',
group => 'root',
mode => '0644',
require => Class['yum::config_repo'],
}
file { '/etc/yum.repos.d/centos-163.repo':
ensure => present,
owner => 'root',
group => 'root',
mode => '0644',
require => Class['yum::config_repo'],
}
}

2、定义pki证书文件

class yum::config_key{ #设置pki证书的一些属性及下载位置
file { yum::params::yum_centos_pki_name: #证书名称在参数类中定义 ensure => present, owner => 'root', group => 'root', mode => '0644', source =>yum::params::yum_centos_pki_download, #证书下载地址在参数类中定义
}
}

3、定义基本yum仓库、puppet仓库和163仓库

class yum::config_repo{
yumrepo { centos-base: #创建yumrepo资源cenos-base
descr => yum::params::yum_centos_descr, #设置描述信息 baseurl =>yum::params::yum_centos_baseurl, #设置yum源下载地址
enabled => 1, #激活yum源
gpgcheck => 1, #设置要求通过pki校验
gpgkey => yum::params::yum_centos_pki, #设置pki文件的位置 require => Class['yum::config_key'], #要求pki文件必须存在 priority => 1, #设置repo的优先级为1(越小越高) } yumrepo { centos-puppet: descr =>yum::params::yum_puppet_descr,
baseurl => yum::params::yum_puppet_baseurl, enabled => 1, gpgcheck => 0, #不要求通过pki校验 priority => 2, } yumrepo { centos-163: descr =>yum::params::yum_163_descr,
baseurl => $yum::params::yum_163_baseurl,
enabled => 1,
gpgcheck => 0,
priority => 3,
}
}
说明:创建了三个YUM源,都以centos(小写)开头的,客户端安装puppet时生成了puppetlabs.repo源,因此这里的centos-puppet源也可以省略。

(7)定义yum主类

[root@puppet ~]# vi /etc/puppet/modules/yum/manifests/init.pp
class yum {
include yum::params,yum::install,yum::config
}
(8)定义节点文件,调用模块

[root@puppet ~]# vi /etc/puppet/manifests/centostest.pp
node "centostest.ewin.com" {
include ntp, yum
}
(9)应用节点文件

[root@puppet ~]# vi /etc/puppet/manifests/site.pp
import "centostest.pp"
(10)复制文件

将以下两个文件从客户端复制一份到服务端/etc/puppet/modules/yum/files下

/etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6

/etc/yum.conf

注意在文件头部加上以***释,测试的时候方便分辨

config by puppet

2、测试

(1)客户端执行测试

[root@centostest ~]# puppet agent --server puppet.ewin.com -test --noop
Info: Caching catalog for centostest.ewin.com
Info: Applying configuration version '1415332221'
Notice: Finished catalog run in 1.09 seconds
(2)查看客户端日志

[root@centostest ~]# tailf /var/log/messages
Nov 7 11:50:20 centostest puppet-agent[8809]: (/Stage[main]/Yum::Install/File[/media/cdrom]/ensure) created
Nov 7 11:50:20 centostest puppet-agent[8809]: (/Stage[main]/Yum::Install/Exec[mount_cdrom]/returns) executed successfully
Nov 7 11:50:22 centostest puppet-agent[8809]: (/Stage[main]/Yum::Install/File[/etc/yum.repos.d/bak]/ensure) created
Nov 7 11:50:22 centostest puppet-agent[8809]: (/Stage[main]/Yum::Install/Exec[repos_bak]/returns) executed successfully
Nov 7 11:50:23 centostest puppet-agent[8809]: (/Stage[main]/Yum::Config_key/File[/etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6]/content) content changed '{md5}e8e57fd1a55dc5c6d82e60a444781b96' to '{md5}a27c559bf7660f101317ac3b41a7600b'
Nov 7 11:50:23 centostest puppet-agent[8809]: (/Stage[main]/Yum::Config_repo/Yumrepo[centos-base]/ensure) created
Nov 7 11:50:24 centostest puppet-agent[8809]: (/Stage[main]/Yum::Config_repo/Yumrepo[centos-puppet]/ensure) created
Nov 7 11:50:24 centostest puppet-agent[8809]: (/Stage[main]/Yum::Config_repo/Yumrepo[centos-163]/ensure) created
Nov 7 11:50:24 centostest puppet-agent[8809]: (/Stage[main]/Yum::Config_file/File[/etc/yum.conf]/content) content changed '{md5}5d8b0bf30a8ee9d66a9cb2642186ac37' to '{md5}8c1fab4142147877a3f77f89eb8ccb7c'
Nov 7 11:50:24 centostest puppet-agent[8809]: Finished catalog run in 4.27 seconds
结论:可看到cdrom目录创建、挂载命令执行成功、备份命令成功、同步了PKI文件和CON文件、创建了三个YUMREPO

(3)查看客户端挂载的光盘目录

[root@centostest ~]# ls /media/cdrom/
CentOS_BuildTag isolinux RPM-GPG-KEY-CentOS-Debug-6
EFI Packages RPM-GPG-KEY-CentOS-Security-6
EULA RELEASE-NOTES-en-US.html RPM-GPG-KEY-CentOS-Testing-6
GPL repodata TRANS.TBL
images RPM-GPG-KEY-CentOS-6
结论:挂载成功,如果用的EXEC方法将会判断RPM-GPG-KEY-CentOS-6存在时不会再执行Exec,而且此文件是原文件,不是新建的空文件。

经测试umount /media/cdrom卸载光盘后会自动重启挂载上,甚至卸载再删除/media/cdrom目录,也会恢复,有兴趣的可以试试。

(4)查看YUM源备份

[root@centostest ~]# ls /etc/yum.repos.d/bak/
CentOS-Base.repo CentOS-Media.repo CentOS-Vault.repo
CentOS-Debuginfo.repo puppetlabs.repo
(5)查看客户端同步的文件

[root@centostest ~]# cat /etc/yum.conf

config by puppet

[main]
...
[root@centostest ~]# cat /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6

config by puppet

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.5 (GNU/Linux)
...
结论:从文件头部注释信息可以确认文件同步成功

(6)查看YUM list

[root@centostest ~]# yum clean all
Loaded plugins: fastestmirror, refresh-packagekit, security
Cleaning repos: base puppetlabs-deps puppetlabs-products
Cleaning up Everything
Cleaning up list of fastest mirrors
[root@centostest ~]# yum list
Loaded plugins: fastestmirror, refresh-packagekit, security
Determining fastest mirrors
centos-163 | 2.9 kB 00:00
centos-163/primary_db | 1.2 kB 00:00
centos-base | 4.0 kB 00:00 ...
centos-base/primary_db | 4.4 MB 00:00 ...
centos-puppet | 2.5 kB 00:00
centos-puppet/primary_db 13% [=- ] 5.9 B/s | 17 kB --:-- ETA
结论:YUM三个仓库都能成功加载,通过yum clean all再yum list可观察。

[root@centostest ~]# yum list puppet
Loaded plugins: fastestmirror, refresh-packagekit, security
Loading mirror speeds from cached hostfile
http://mirrors.163.com/centos/6/contrib/x86_64/repodata/repomd.xml:
[Errno 12] Timeout on http://mirrors.163.com/centos/6/contrib/x86_64/repodata/repomd.xml:
(28, 'Operation too slow. Less than 1 bytes/sec transfered the last 30 seconds')
Trying other mirror.
Installed Packages
puppet.noarch 3.7.1-1.el6 @puppetlabs-products
Available Packages
puppet.noarch 3.7.3-1.el6 centos-puppet
结论:可以看到从163的源查找puppet超时,已安装的包是从@puppetlabs安装的,有效的包是在centos-puppet源中。

3、yum仓库资源

yumrepo { "repo163": #YUM源文件.repo的文件名
descr => "163 repo", #仓库的描述
baseurl => "http://mirrors.163.com/centos/releasever/contrib/basearch/", #仓库的url
gpgcheck => "0", #是否检查仓库中的软件包GPG签名,可设置的值为0或者1.
enabled => "1", #是否开启或者禁用仓库,可设置的值为1或者0.1为开启,0为禁用
}
{
enablegroups => , #是否可以使用yumgroup参数,如yumgroup list,yumgroup install等
exclude => , #排除那些软件的安装与更新,支持shell通配符。
failovermethod => , #可设置的值为priority,roundrobin.
gpgkey => , #仓库的软件包签名,GPG密钥的URL。
include => , #包含配置url.
includepkgs => , #只有匹配的软件包才能安装或者更新。
keepalive => , #设置http/1.1选项,可设置的为0或者1.
metadata_expire => , #元组数据的过期时间,单位时间为秒。
miirorlist => , #仓库的镜像列表。
name => , #仓库名字。
priority => , #优先级,可设置的是从1-99.
protect => , #启用或者禁用对这个仓库的保护。可设置的值为0或者1.
proxy => , #设置代理
}

4、mount挂载资源

挂载共享文件夹

mount { "/mount": #挂载的目标目录,等同于name参数
device => "192.168.0.1:/share/nfs", #挂载的来源设备
fstype => "nfs", #文件系统类型
options => "_netdev,vers=3,tcp,rsize=8192,wsize=8192,noauto", #其他选项
}
挂载samba

mount {"/media":
ensure => mounted,
device => "//172.22.2.89/public",
fstype => cifs,
options => "username=perofu,password=123456";
}
参数说明

mount { 'mount_cdrom':
name => "/media/cdrom", #挂载到的目标目录
ensure => mounted, #要求被挂载状态
fstype => "iso9660", #光盘的文件类型
device => "/dev/cdrom", #光盘的设备,是个链接,指向/dev/sr0
options => "ro", #以只读方式挂载光盘
atboot => true, #允许开机启动时挂载上
remounts => true, #允许重新挂载
require => File['/media/cdrom'], #要求挂载目标目录存在
}
查看文件系统类型:

[root@centostest ~]# mount
/dev/mapper/vg_centostest-lv_root on / type ext4 (rw)
/dev/sda1 on /boot type ext4 (rw)
/dev/mapper/vg_centostest-lv_home on /home type ext4 (rw)
/dev/sr0 on /media/cdrom type iso9660 (ro)
发现以下报错,是因为没有加上options => "ro",因为光盘是只读的。

[mount_cdrom]) Could not evaluate: Execution of '/bin/mount /media/cdrom' returned 32:
mount: block device /dev/sr0 is write-protected, mounting read-only

版权声明:本文内容由阿里云实名注册用户自发贡献,版权归原作者所有,阿里云开发者社区不拥有其著作权,亦不承担相应法律责任。具体规则请查看《阿里云开发者社区用户服务协议》和《阿里云开发者社区知识产权保护指引》。如果您发现本社区中有涉嫌抄袭的内容,填写侵权投诉表单进行举报,一经查实,本社区将立刻删除涉嫌侵权内容。

分享:
开发与运维
使用钉钉扫一扫加入圈子
+ 订阅

集结各类场景实战经验,助你开发运维畅行无忧

其他文章