saltstack之(九)配置管理源码部署Nginx

场景：rpm包安装的nginx服务，无法满足定制模块的需求，故线上环境使用nginx源码进行安装。本片文章详细介绍如何使用saltstack的配置管理功能实现nginx软件的源码安装。

下载源码:pcre

　　http://exim.mirror.fr/pcre/pcre-8.38.tar.gz

下载源码:nginx

　　http://nginx.org/download/nginx-1.9.12.tar.gz

1.修改master配置文件,指定环境为prod。

[root@node1 prod]# egrep -A  ^file_roots /etc/salt/master

file_roots:

  base:

    - /srv/salt/base

  dev:

    - /srv/salt/dev

  prod:

    - /srv/salt/prod

2.编写state文件，最终的目录树如下所示：

[root@node1 prod]# tree

.

├── initpkg

│   └── install.sls

├── nginx

│   ├── files

│   │   ├── nginx

│   │   └── nginx-1.9..tar.gz

│   └── install.sls

├── pcre

│   ├── files

│   │   └── pcre-8.38.tar.gz

│   └── install.sls

└── top.sls

 directories,  files

3.state文件的详细内容如下：

[root@node1 prod]# cat initpkg/install.sls

init-pkg-install:

  pkg.installed:

    - names:

      - gcc

      - gcc-c++

      - make

      - autoconf

      - openssl

      - openssl-devel

      - lsof

      - tree

      - lrzsz

[root@node1 prod]# cat pcre/install.sls

include:

  - initpkg.install

pcre-source-install:

  file.managed:

    - name: /usr/local/src/pcre-8.38.tar.gz

    - source: salt://pcre/files/pcre-8.38.tar.gz

    - user: root

    - group: root

    - mode:

  cmd.run:

    - name: cd /usr/local/src && tar xf pcre-8.38.tar.gz && cd pcre-8.38 && ./configure --prefix=/usr/local/pcre && make && make install

    - unless: test -d /usr/local/pcre

    - reuqire:

      - file: pcre-source-install

[root@node1 prod]# cat nginx/install.sls

include:

  - initpkg.install

  - pcre.install

nginx-source-install:

  file.managed:

    - name: /usr/local/src/nginx-1.9..tar.gz

    - source: salt://nginx/files/nginx-1.9.12.tar.gz

    - user: root

    - group: root

    - mode:

  cmd.run:

    - name: cd /usr/local/src && tar xf nginx-1.9..tar.gz && cd nginx-1.9. && ./configure --prefix=/usr/local/nginx --with-http_ssl_module --with-http_stub_status_module --with-file-aio --with-http_dav_module --with-pcre=/usr/local/src/pcre-8.38 && make && make install

    - unless: test -d /usr/local/nginx

    - require:

      - file: nginx-source-install

      - pkg: init-pkg-install

      - file: pcre-source-install

nginx-init:

  file.managed:

    - name: /etc/init.d/nginx

    - source: salt://nginx/files/nginx

    - user: root

    - group: root

    - mode:

  cmd.run:

    - name: chkconfig --add nginx

    - unless: chkconfig --list |grep nginx

    - reuqire:

      - cmd: nginx-source-install

      - file: nginx-init

nginx-service:

  service.running:

    - name: nginx

    - enable: nginx

    - reload: true

    - require:

      - cmd: nginx-init

[root@node1 prod]# cat top.sls

prod:

  'node2.xkops.com':

    - nginx.install

    - pcre.install

    - initpkg.install

4.执行state模块在node2.xkopa.com客户端源码安装nginx。
[root@node1 prod]# salt '*' state.highstate env=prod test
[root@node1 prod]# salt '*' state.highstate env=prod

5.在node2检查客户端是否完成nginx安装
[root@node2 ~]# service nginx status

提示：此处列出的为state文件的编写内容，记得查看一下tree的结果，在pcre和nginx目录下还各自有files目录，存放着pcre-8.38.tar.gz、nginx-1.9.12.tar.gz源码包以及nginx启动服务脚本文件。

附录：
nginx启动脚本文件内容。

[root@node1 prod]# cat nginx/files/nginx

#!/bin/sh

#

# nginx - this script starts and stops the nginx daemin

#

# chkconfig:   - 85 15

# description:  Nginx is an HTTP(S) server, HTTP(S) reverse \

#               proxy and IMAP/POP3 proxy server

# processname: nginx

# config:      /usr/local/nginx/conf/nginx.conf

# pidfile:     /usr/local/nginx/logs/nginx.pid

# Source function library.

. /etc/rc.d/init.d/functions

# Source networking configuration.

. /etc/sysconfig/network

# Check that networking is up.

[ "$NETWORKING" = "no" ] && exit 0

nginx="/usr/local/nginx/sbin/nginx"

prog=$(basename $nginx)

NGINX_CONF_FILE="/usr/local/nginx/conf/nginx.conf"

lockfile=/var/lock/subsys/nginx

start() {

    [ -x $nginx ] || exit 5

    [ -f $NGINX_CONF_FILE ] || exit 6

    echo -n $"Starting $prog: "

    daemon $nginx -c $NGINX_CONF_FILE

    retval=$?

    echo

    [ $retval -eq 0 ] && touch $lockfile

    return $retval

}

stop() {

    echo -n $"Stopping $prog: "

    killproc $prog -QUIT

    retval=$?

    echo

    [ $retval -eq 0 ] && rm -f $lockfile

    return $retval

}

restart() {

    configtest || return $?

    stop

    start

}

reload() {

    configtest || return $?

    echo -n $"Reloading $prog: "

    killproc $nginx -HUP

    RETVAL=$?

    echo

}

force_reload() {

    restart

}

configtest() {

  $nginx -t -c $NGINX_CONF_FILE

}

rh_status() {

    status $prog

}

rh_status_q() {

    rh_status >/dev/null 2>&1

}

case "$1" in

    start)

        rh_status_q && exit 0

        $1

        ;;

    stop)

        rh_status_q || exit 0

        $1

        ;;

    restart|configtest)

        $1

        ;;

    reload)

        rh_status_q || exit 7

        $1

        ;;

    force-reload)

        force_reload

        ;;

    status)

        rh_status

        ;;

    condrestart|try-restart)

        rh_status_q || exit 0

            ;;

    *)

        echo $"Usage: $0 {start|stop|status|restart|condrestart|try-restart|reload|force-reload|configtest}"

        exit 2

esac

巴特西

saltstack之(九)配置管理源码部署Nginx

最新文章

热门文章