puppet初探

需要软件包：ruby,facter，puppet

创新互联是一家专注网站建设、网络营销策划、微信平台小程序开发、电子商务建设、网络推广、移动互联开发、研究、服务为一体的技术型公司。公司成立10余年以来，已经为成百上千成都垃圾桶各业的企业公司提供互联网服务。现在，服务的成百上千客户与我们一路同行，见证我们的成长；未来，我们一起分享成功的喜悦。

前提要求客户端能解析到服务端的hostname

puppet服务端配置：

fileserver.conf文件的配置：

[files]
path /opt/
allow *
[yum]
path /etc/yum/
allow *

site.pp文件的配置：

node default {     #m所有客户端都同步，单独客户端同步：node hostname
        file {
                "test":
                name => "/tmp/1.txt",
                content => template("/etc/passwd"),
        }
        file {
        "/opt/install.log":
        content => "test,my first puppetmaster",
        ensure => present,
        mode => 666,
        owner => puppet,
        group => puppet,
        }
        file {
        "/tmp/install.log":
        source => "puppet://node3.wanghaihao.cn/files/install.log",
        ensure => present,
        owner => puppet,
        group => puppet,
        mode => 666,
        }
        file {
        "/tmp/puppet-2.6.17.tar.gz":
        source => "puppet://node3.wanghaihao.cn/files/puppet-2.6.17.tar.gz",
        }
# tian jia group
        group {
        "haihao":
        gid=>1000,
        ensure => present,
        }
#tian jia user
        user {
        "haihao":
        uid => 1000,
        gid => 1000,
        home => "/home/haihao",
        shell => "/bin/bash",
        password => "123456",
        ensure => present,
        }
#yum an zhuang ruan jian
        package {
                "httpd":
                ensure => installed,
        }
#yum xie zai ruan jian
        package {
                "ftpd":
                ensure => absent,
        }
        service {
                "httpd":
                ensure => running,              #kai qi fu wu
                enable => false,                #kai ji bu zi qi dong
        }
        service {
                "atd":
                ensure => stopped,              #guan bi fu wu
                enable => true,                 #kai ji zi qi dong
        }
        cron { "ntpdate":
                command => "/usr/sbin/ntpdate 192.168.1.103",
                user => root,
                minute => 0,
                hour => 1,
        }
        exec { "build-Nagios Plugins":
                cwd => "/root",
                command => "/bin/tar xzf nagios-plugins-1.4.15.tar.gz && cd nagios-plugins-1.4.15 && sh configure && make && make install",
                creates => "/usr/local/nagios",
                logoutput => on_failure,
                timeout => 0,
        }

        exec { "exec-mkdir":

          cwd => "/opt",

          command => "sh /opt/hh.sh",

          user => "root",

         path => "/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin",

        }

#tong bu mu lu
        file { "/tmp/test":
                owner => puppet,
                group => puppet,
                purge => true,
                recurse => true,
                force => true,
                source => "puppet://node3.wanghaihao.cn/yum/",
        }
}

客户端的配置：

namespaceauth.conf文件的配置：

[fileserver]
    allow *

[puppetmaster]
    allow *

[puppetrunner]
    allow *

[puppetbucket]
    allow *

[puppetreports]
    allow *

[resource]
    allow *

测试：

认证：

认证报错：时间问题，处理办法：

客户端：pppet --genconfig | grep certdir

rm -rf  /var/lib/puppet/ssl

puppetd --test -server  $hostname

服务端：

puppetca -l

puppetca -s $hostname