puppet部署多台服务器

利用puppet实现自动化部署

配置前准备：

图中：蓝线表示各个服务器之间通信

红线表示puppetmaster主机向各个agent主机部署信道

A主机puppet-master主机：192.168.126.129

B主机做两种服务：keepalived高性能和nginx反代

192.168.126.130

C主机做两种服务：keepalived高性能和nginx反代

192.168.126.131

D主机tomcat服务：192.168.126.132

E主机tomcat服务：192.168.126.133

F主机memcached服务：192.168.126.134

G主机memcached服务：192.168.126.135

注意：各个主机必须时间同步

此次安装puppet版本为3.8.7

一、配置puppet：master/agent建立安全通信

1、将各个主机的主机名写入到/etc/hosts文件中，以便于域名解析

注意：将此文件内容分别写入各个主机的/etc/hosts文件中

2、安装puppet服务所需要的包

（1）在master主机上安装以下包

facter-2.4.6-1.el7.x86_64.rpm

puppet-3.8.7-1.el7.noarch.rpm

puppet-server-3.8.7-1.el7.noarch.rpm

（2）在各个agent主机上安装以下包

facter-2.4.6-1.el7.x86_64.rpm

puppet-3.8.7-1.el7.noarch.rpm

3、修改配置文件

（1）配置master主机：/etc/puppet/puppet.conf

 [main]
           …
           environmentpath = $confdir/environments（此配置文件只加上此句就行了）
           …
          [agent]
           …

（2）配置agent主机：/etc/puppet/puppet.conf

[main]
           …
           listen = true（开启监听端口默认为8139）
           environmet = production（运行于production环境,）
           …
          [agent]
           …
           server = node1.zq.com（设定以node1.zq.com主机位puppetmaster）
           …

注意： environmet指令有三个值分别为：production，testing，development

Agent主机设置的为那个环境，那么在master主机的/etc/puppet/environment/目录下必须有与环境名相同名字的目录。并且此目录下必须包含manifests和modules两个目录，在manitests目下有site.pp文件，里面包含向各个agent主机需要部署的服务，而modules目录下就各个服务的模块

（3）配置agent主机：/etc/puppet/auth.conf

加入以下段落：（表示允许master主机可以部署服务）

path /run
    method save
    auth any
    allow node1.zq.com  

注意：这几句指令必须在“path /”指令的前面

4、签署CA认证,建立安全通信

（1）master主机

启动服务

Systemctl start puppetmaster.service

查看8140端口已开启

（2）在agent主机

启动服务

Systemctl start puppetagent.service

（3）签署认证

在master主机上认证

执行：puppet cert list –all （查看agent的证书签署请求）

执行：puppet cert sign –all (（签署所有的请求）

二、创建模块

注意：我的此次试验是在production环境下作的

创建前配置：

创建目录文件

mkdir -pv /etc/puppet/environments/production /{manifests,modules}

1、创建模块memcached

(1)cd /etc/puppet/environments/production/modules

(2)mkdir ./memcached/memcached/{manifests,templates,files,spec.lib,tests}

(3)Vim ./manifests/init.pp(每一个模块中都必须含此文件)添加内容如下：

class memcached {
             package{‘memcached’:
                 ensure => latest,
                } ->
             service{‘memcached’:
                 ensure => running,
                 enable => true,
                 }
         }

2、创建tomcat模块

注意：为测试我为两台tomcat主机分别放了不同主页面

(1)cd /etc/puppet/environments/production/modules/

(2)mkdir ./tomcat/{manifests,templates,files,spec.lib,tests}

(3)Vim ./tomcat/manifests/init.pp添加内容如下：

class tomcat {
              package{[‘tomcat’,’tomcat-admin-webapps’,’tomcat-docs-webapp’,’tomcat-webapps’,’java-1.8.0-openjdk’]:
                   ensure => latest,
                  } ->
              exec{‘mkdir’:
                command => ‘mkdir -pv /var/lib/tomcat/webapps/test/{classes,lib,WEB_INF}’,
                path    => ‘/bin:/sbin:/usr/bin:/usr/sbin’,
                creats => ‘/var/lib/tomcat/webapps/test’,
                  } ->
              service{‘tomcat’:
                    ensure => running,
                    enable => true,
                  }
           }

（4）创建子类(子类文件名必须和子类名相同)

Vim ./tomcat/manfests/mem.pp内容如下：

class tomcat::mem inherits tomcat{
                  file{‘server.xml’:
                    path   => ‘/etc/tomcat/server.xml’,
                    source => ‘puppet:///modules/tomcat/server_memcached.xml’,
                    } ->
                  file{‘javolution-5.4.3.1.jar’:
                    path   => ‘/usr/share/tomcat/lib/javolution-5.4.3.1.jar’,
                    source => ‘puppet:///modules/tomcat/javolution-5.4.3.1.jar’,
                    } ->
                  file{‘memcached-session-manager-tc7-2.1.1.jar’:
                    path   => ‘/usr/share/tomcat/lib/memcached-session-manager-tc7-2.1.1.jar’,
                    source => ‘puppet:///modules/tomcat/memcached-session-manager-tc7-2.1.1.jar’,
                    } ->
                  file{‘spymemcached-2.11.1.jar’:
                    path   => ‘/usr/share/tomcat/lib/spymemcached-2.11.1.jar’,
                    source => ‘puppet:///modules/tomcat/spymemcached-2.11.1.jar’,
                   } ->
                  file{‘memcached-session-manager-2.1.1.jar’:
                    path   => ‘/usr/share/tomcat/lib/memcached-session-manager-2.1.1.jar’,
                    source => ‘puppet:///modules/tomcat/memcached-session-manager-2.1.1.jar’,
                    } ->
                  file{‘msm-javolution-serializer-2.1.1.jar’:
                    path   => ‘/usr/share/tomcat/lib/msm-javolution-serializer-2.1.1.jar’,
                    source => ‘puppet:///modules/tomcat/msm-javolution-serializer-2.1.1.jar’,
                    }
                  case $ipaddress_ens32 {
                    ‘192.168.126.132’: { $i = tomcata.jsp }
                    ‘192.168.126.133’: { $i = tomcatb.jsp }
                     default: { $i = tomcata.jsp }
                    } ->
                  file{‘index.jsp’:
                     path   => ‘/var/lib/tomcat/webapps/test/index.jsp’,
                     source => “puppet:///modules/tomcat/$i”,
                    }
            }

（5）放置文件cd ./tomcat/files/

javolution-5.4.3.1.jar

msm-javolution-serializer-2.1.1.jar

spymemcached-2.11.1.jar

memcached-session-manager-2.1.1.jar

memcached-session-manager-tc7-2.1.1.jar

上面的文件问做session-server所需要的类文件

server_memcached.xml（主配置文件）在此文件中加入session配置

tomcata.jsp(tomcat1主机上的主页面)内容如下：

tomcatb.jsp（tomcat2主机上的主页面）

3、创建nginx模块

(1)cd /etc/puppet/environments/production/modules/

(2)mkdir ./nginx/{manifests,templates,files,spec.lib,tests}

(3)Vim ./nginx/manifests/init.pp添加内容如下：

class nginx {
               package{‘nginx’:
                  ensure => latest,
                 } ->
              service{‘nginx’:
                  ensure => running,
                  enable => true,
                 }
           }

(4)创建子类Vim ./nginx/manifests/proxy.pp添加内容如下：

class nginx::proxy inherits nginx{
                file{‘nginx.conf’:
                  path   => ‘/etc/nginx/nginx.conf’,
                  source => ‘puppet:///modules/nginx/proxy.conf’,
                 }
               Package[‘nginx’] -> File[‘nginx.conf’] ~> Service[‘nginx’]
         }

(5)放置文件

cd ./nginx/files/

proxy.conf

4、创建keepalived模块（设置其虚拟IP：192.168.126.110）

(1)cd /etc/puppet/environments/production/modules/

(2)mkdir ./keepalived/{manifests,templates,files,spec.lib,tests}

(3)Vim ./keepalived/manifests/init.pp添加内容如下：

class keepalived {
                package{‘keepalived’:
                    ensure => latest,
                  } ->
               service{‘keepalived’:
                    ensure => running,
                    enable => true,
                  }
           }

(4)子类 vim ./keepalived/manifests/vip.pp内容如下：

class keepalived::vip inherits keepalived{
                  if $ipaddress_ens32 == ‘192.168.126.130’ {
                 file{‘keepalived.conf’:
                      path   => ‘/etc/keepalived/keepalived.conf’,
                    source => “puppet:///modules/keepalived/keepaliveda.conf”,
                   }
                } else {
                 file{‘keepalived.conf’:
                    path   => ‘/etc/keepalived/keepalived.conf’,
                    source => “puppet:///modules/keepalived/keepalivedb.conf”,
                   }
                }
                file{‘notify.sh’:
                   path   => ‘/etc/keepalived/notify.sh’,
                  source => ‘puppet:///modules/keepalived/notify.sh’,
                 }
           }

(5)放置文件

keepaliveda.conf（keepalived主节点配置文件）

keepalivedb.conf （keepalived次节点配置文件）

notify.sh（通知脚本）

三、在puppet-master主机部署

1、创建部署文件

vim /etc/puppet/environment/production/manifets/site.pp内容如下：

node ‘node2.zq.com’ {
           include nginx::proxy
           include keepalived::vip
           }
        node ‘node3.zq.com’ {
           include nginx::proxy
           include keepalived::vip
           }
        node ‘node4.zq.com’ {
           include tomcat::mem
            }
        node ‘node5.zq.com’ {
          include  tomcat::mem
           }
        node ‘node6.zq.com’ {
          include memcached
          }
        node ‘node7.zq.com’ {
          include memcached
          }

2、执行部署

puppet kick node2.zq.com

puppet kick node3.zq.com

puppet kick node4.zq.com

puppet kick node5.zq.com

puppet kick node6.zq.com

puppet kick node7.zq.com

四、测试：

在测试主机的hosts文件中加入一条解析：

192.168.126.110 www.zq.com

输入URL：www.zq.com/test

puppet部署成功