SaltStack入门篇(四)之深入理解SaltStack远程执行
2024-10-18 02:31:07
1.目标
2.执行模块
3.返回
salt ‘*’ cmd.run ‘uptime’
命令 目标 执行模块 执行模块参数
1、SlatStack远程执行–目标
执行目标:https://docs.saltstack.com/en/latest/topics/targeting/index.html#advanced-targeting-methods
- (1)和Minion ID相关的目标匹配方式
、MinionID匹配
[root@linux-node1 ~]# salt 'linux-node1.example.com' service.status sshd
linux-node1.example.com:
True 、通配符* ? [-]等匹配
[root@linux-node1 ~]# salt 'linux*' service.status sshd
linux-node2.example.com:
True
linux-node1.example.com:
True
[root@linux-node1 ~]# salt 'linux-node?.example.com' service.status sshd
linux-node2.example.com:
True
linux-node1.example.com:
True
[root@linux-node1 ~]# salt 'linux-node[1-2].example.com' service.status sshd
linux-node2.example.com:
True
linux-node1.example.com:
True 、列表匹配
[root@linux-node1 ~]# salt -L 'linux-node1.example.com,linux-node2.example.com' test.ping
linux-node2.example.com:
True
linux-node1.example.com:
True 、正则表达式匹配
[root@linux-node1 ~]# salt -E 'linux-(node1|node2)*' test.ping
linux-node2.example.com:
True
linux-node1.example.com:
True
- (2)和Minion无关匹配
、Grains匹配
[root@linux-node1 ~]# salt -G 'os:CentOS' test.ping
linux-node2.example.com:
True
linux-node1.example.com:
True 、子网、IP地址匹配
[root@linux-node1 ~]# salt -S '192.168.56.0/24' test.ping
linux-node1.example.com:
True
linux-node2.example.com:
True 、Pillar匹配
#这里目标key:value,是在pillar系统中定义
[root@linux-node1 ~]# salt -I 'apache:httpd' test.ping
linux-node2.example.com:
True
linux-node1.example.com:
True - (3)混合匹配(少用)
- (4)Node Groups匹配
#在master配置文件进行定义node-groups
[root@linux-node1 ~]# vim /etc/salt/master
nodegroups:
web-group: 'L@linux-node1.example.com,linux-node2.example.com'
[root@linux-node1 ~]# systemctl restart salt-master
[root@linux-node1 ~]# salt -N web-group test.ping
linux-node2.example.com:
True
linux-node1.example.com:
True - (5)批处理执行–Batch size
#先执行1台完成后再执行一台,按比例去执行
[root@linux-node1 ~]# salt '*' -b test.ping Executing run on ['linux-node2.example.com'] jid: linux-node2.example.com:
True
retcode: Executing run on ['linux-node1.example.com'] jid: linux-node1.example.com:
True
retcode: #按比例匹配执行,好比在重启服务器时,为了不影响业务,可以先重启一部分,再重启后面一部分
[root@linux-node1 ~]# salt -G 'os:CentOS' --batch-size % test.ping Executing run on ['linux-node2.example.com'] jid: linux-node2.example.com:
True
retcode: Executing run on ['linux-node1.example.com'] jid: linux-node1.example.com:
True
retcode:
2、SlatStack远程执行–执行模块
执行模块:https://docs.saltstack.com/en/latest/ref/modules/all/index.html#all-salt-modules
3、SlatStack远程执行–返回
返回模块:https://docs.saltstack.com/en/latest/ref/returners/index.html
Return组件可以理解为SaltStack系统对执行Minion返回后的数据进行存储或者返回给其他程序,它支持多种存储方式,如MySQL、Redis、ELK、zabbix,通过Return我们可以对SaltStack的每次操作进行记录,对以后的日志审计提供了数据来源。
Return是在Master端触发任务,然后Minion接受处理任务直接与Return存储服务器建立链接,然后把数据存储到服务器。
返回是minion直接将命令执行结果写入到MySQL,需要的依赖包:MySQL-python
- (1)SATL.RETURNERS.MYSQL(minion返回MySQL)
()所有minion需要安装MySQL-python
[root@linux-node1 ~]# salt '*' cmd.run 'yum install -y MySQL-python'
[root@linux-node1 ~]# salt '*' pkg.install MySQL-python #使用pkg模块安装MySQL-python ()安装mariadb数据库
[root@linux-node1 ~]# yum install -y mariadb-server
[root@linux-node1 ~]# systemctl start mariadb ()创建salt库,创建jid、salt_returns、salt_events表,授权
[root@linux-node1 ~]# mysql -uroot -p
Enter password:
MariaDB [(none)]> CREATE DATABASE `salt`
-> DEFAULT CHARACTER SET utf8
-> DEFAULT COLLATE utf8_general_ci;
Query OK, row affected (0.00 sec) MariaDB [(none)]> USE `salt`;
Database changed MariaDB [salt]> CREATE TABLE `jids` (
-> `jid` varchar() NOT NULL,
-> `load` mediumtext NOT NULL,
-> UNIQUE KEY `jid` (`jid`)
-> ) ENGINE=InnoDB DEFAULT CHARSET=utf8;
Query OK, rows affected (0.00 sec) MariaDB [salt]> CREATE TABLE `salt_returns` (
-> `fun` varchar() NOT NULL,
-> `jid` varchar() NOT NULL,
-> `return` mediumtext NOT NULL,
-> `id` varchar() NOT NULL,
-> `success` varchar() NOT NULL,
-> `full_ret` mediumtext NOT NULL,
-> `alter_time` TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
-> KEY `id` (`id`),
-> KEY `jid` (`jid`),
-> KEY `fun` (`fun`)
-> ) ENGINE=InnoDB DEFAULT CHARSET=utf8;
Query OK, rows affected (0.03 sec) MariaDB [salt]> CREATE TABLE `salt_events` (
-> `id` BIGINT NOT NULL AUTO_INCREMENT,
-> `tag` varchar() NOT NULL,
-> `data` mediumtext NOT NULL,
-> `alter_time` TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
-> `master_id` varchar() NOT NULL,
-> PRIMARY KEY (`id`),
-> KEY `tag` (`tag`)
-> ) ENGINE=InnoDB DEFAULT CHARSET=utf8;
Query OK, rows affected (0.02 sec) MariaDB [salt]> show tables;
+----------------+
| Tables_in_salt |
+----------------+
| jids |
| salt_events |
| salt_returns |
+----------------+
rows in set (0.00 sec) MariaDB [salt]> grant all on salt.* to salt@'%' identified by 'salt';
Query OK, rows affected (0.00 sec) ()修改salt-minion,配置MySQL链接
[root@linux-node2 ~]# vim /etc/salt/minion
###### Returner settings ######
############################################
mysql.host: '192.168.56.11'
mysql.user: 'salt'
mysql.pass: 'salt'
mysql.db: 'salt'
mysql.port:
[root@linux-node2 ~]# systemctl restart salt-minion
[root@linux-node1 ~]# vim /etc/salt/minion
###### Returner settings ######
############################################
mysql.host: '192.168.56.11'
mysql.user: 'salt'
mysql.pass: 'salt'
mysql.db: 'salt'
mysql.port:
[root@linux-node1 ~]# systemctl restart salt-minion ()测试,并在数据库查看返回结果
[root@linux-node1 ~]# salt '*' test.ping --return mysql
linux-node2.example.com:
True
linux-node1.example.com:
True
MariaDB [salt]> select * from salt_returns;
+-----------+----------------------+--------+-------------------------+---------+-----------------------------------------------------------------------------------------------------------------------------------------------------+---------------------+
| fun | jid | return | id | success | full_ret | alter_time |
+-----------+----------------------+--------+-------------------------+---------+-----------------------------------------------------------------------------------------------------------------------------------------------------+---------------------+
| test.ping | | true | linux-node2.example.com | | {"fun_args": [], "jid": "", "return": true, "retcode": , "success": true, "fun": "test.ping", "id": "linux-node2.example.com"} | -- :: |
| test.ping | | true | linux-node1.example.com | | {"fun_args": [], "jid": "", "return": true, "retcode": , "success": true, "fun": "test.ping", "id": "linux-node1.example.com"} | -- :: |
+-----------+----------------------+--------+-------------------------+---------+-----------------------------------------------------------------------------------------------------------------------------------------------------+---------------------+
rows in set (0.00 sec)
- 使用salt的job_cache机制将命令写入mysql(常用方法)
- 执行的所有命令都会写入mysql,不用使用return,把cache写在mysql
[root@linux-node1 ~]# vim /etc/salt/master
master_job_cache: mysql
mysql.host: '192.168.56.11'
mysql.user: 'salt'
mysql.pass: 'salt'
mysql.db: 'salt'
mysql.port:
[root@linux-node1 ~]# systemctl restart salt-master
[root@linux-node1 ~]# salt '*' cmd.run 'w'
[root@linux-node1 ~]# mysql -uroot -p123456 -e "select * from salt.salt_returns;" #加上-v参数可以看到jid,并且通过jid可以查看运行的结果
[root@linux-node1 ~]# salt '*' cmd.run 'uptime' -v
Executing job with jid
------------------------------------------- linux-node2.example.com:
:: up days, :, users, load average: 0.00, 0.01, 0.05
linux-node1.example.com:
:: up days, :, users, load average: 0.00, 0.06, 0.18
[root@linux-node1 ~]# salt-run jobs.lookup_jid
linux-node1.example.com:
:: up days, :, users, load average: 0.00, 0.06, 0.18
linux-node2.example.com:
:: up days, :, users, load average: 0.00, 0.01, 0.05
最新文章
- mysql +ibatis
- window.innerWidth、document.body.clientWidth和html的大小的区别
- 以16进制打印出一块内存buff
- Java核心知识点学习----线程中如何创建锁和使用锁 Lock,设计一个缓存系统
- js截取字符串显示引号两种方法
- JavaScript中的数组详解
- Maven-002-eclipse 插件安装及实例
- android开发之路06(浅谈单例设计模式)
- php中封装的curl函数(抓取数据)
- Node.js系列:Buffer类的使用
- k8s搭建rook-ceph
- Java 异常处理流程
- Composer 的学习
- 20155204 2016-2017-2 《Java程序设计》第1周学习总结
- Linux(CentOS6.X)安装mysql
- linux 调用shell脚本传参
- eclipse中使用maven的 maven install
- Windows下编译YouCompleteMe流程
- 【转】iphone - ios app maximum memory budget
- SCU - 4439 Vertex Cover (图的最小点覆盖集)
热门文章
- Java类修饰符的使用与作用以及常见问题
- Vuex、Flux、Redux、Redux-saga、Dva、MobX
- Maven构建项目报No compiler is provided in this environment. Perhaps you are running on a JRE rather than a JDK? 问题的解决方案
- 随手练——HDU 1251 统计难题
- JavaScript脚本的执行原理?
- 6、Spring Cloud -熔断器Hystrix
- Django实战(二)之模板语言
- 查看mysql中所有表的数据记录
- ubuntu下USB口插入USB转TTL查看串口号
- 【js】javaScript 执行机制