puppet硬件需求

搭建本地镜像源
搭建svn+apache ，搭建dnsmasq

/etc/puppet
auth.conf 认证
autosign.conf 自动签名
fileserver.conf 同步静态文件
manifests.......module
puppet.conf
tagmail.conf
namespaceauth.conf

puppet.conf main,master,agent

生成配置文件puppet.conf puppet master --genconfig
服务端常用配置项

auth.conf访问控制

acl控制

fileserver.conf 挂载点 使用方式

puppet help puppet help ca
puppet master puppet agent puppet cert puppet module puppet resource puppet describe puppet parser validate

---

site.pp是导航文件：/etc/puppet/manifests/site.pp
notify == echo：notify{"hello world"} 放在site.pp
启动服务端： xx 2>&1
nohup puppet master --verbose --no-daemonize>>master.log 2>&1 &
iptables -t filter -A INPUT -p tcp -m state -state NEW --dport 8140 -j ACCEPT
puppet agent --server xxxx --test
puppet cert --sign xxxx

site.pp中节点格式

没有匹配到，就到默认default

从puppet forge 获取基础模块：http://forge.puppetlabs.com/
class

inherits

类继承

灰度发布：开发-测试-生产

---

变量

puppet不能重复赋值

facter常用变量：ipaddress,kernel,memorysize,operatingsystem,rubyversion,uptime,hostname

数组

字典

布尔

/正则/：[a-z] () \w \W \s \S \d \D \b \B * + {m,n} ?

if elsif else

=~

in

case 用法：
case /:{}
default: {}
}
xx = xx ? {字典}

define

tag????

generate

template

类的继承

文件导入

模块导入方式：

资源

package 包安装工具

file {'name':
path:
ensure:absent present file directory link
backup:
checksum:md5
content:追加
group
links??
mode
owner
source:
target:
selxxxxxxxxxxxxxxxx
}

filebucket 文件备份与恢复
name,path,port,server

host:DNS相关

user属性
name,ensure,comment,uid,gid,groups,home,manage_expiry,password,manage_password_max_age,manage_password_min_age,shell,provider:aix/hpuxuseradd/ldap/pw/useradd/windows_adsi
新建用户

group
ensure,gid,members,name,provider:aix/groupadd/pw/windows_adsi

package
allowcdrom,ensure:installed_{present/absent/latest/版本号}5.4.23,provider:yum/apt/aix/windows,source
holdable保持现状,install_options 传递参数,installable,purgeable,uninstall_options,uninstallable,upgradeable,versionable

安装nginx

数组方式批量安装

service:
binary:程序路径,enable开机，ensure:running/stopped,hasrestart,hasstatus,name,path,pattern,restart,start,status,stop,provider:enableable/refreshable.

exec:
command,creates,cwd:执行路径,environment,group,logoutput,onlyif:只有该执行结果为0时才执行,path,refresh,refreshonly:ture/false触发器,returns,timeout,tries,try_sleep,user,provider:shell/windows

cron:
command,ensure:present/absent,environment,hour,minute,month,monthday,weekday,name,provider,user

notify :name,message
公有属性：before,require,stage,notify,subscribe,audit
require用法

before

notify

subscribe

->先后关系

~>通知

三段



audit审计

默认资源：Exec,Package,
虚拟资源：@ realize <|xxx|>

---

erb <%= %>

erb
<% if %>
<% elsif %>
<% else %>
<% end %>
erb each ????? erb 函数

---

facter:physicalprocessorcount,processorcount,processor0-7,memorysize,memoryfree,swapsize,swapfree
获取内存信息：

facter:interfaces,ipaddress,netmask,ipaddress_eth1,netmask_eth1~~,macaddress
operatingsystem,operatingsystemrelease

facter:kernel,kernelmajversion,kernelrelease,kernelversion,selinux,selinux_config_mode,
扩展facter

---

YAML

puppet ENC功能
puppet dot graphviz功能
puppet stdlib扩展

---

master和agent多端口使用案例

nginx+passenger 提升master的处理性能
puppet搭建集群:http://jingpin.jikexueyuan.com/article/48475.html

---

reportdir设置运行报告目录
[agent]
report=true

reportserver=

puppet agent --server puppet.xxxx.com --test --summarize
[master]
reports=store,tagmail,http #开启多个报告处理器
reportfrom=xxx
tagmap=xx/tagmail.conf

自定义报告处理器

puppet dashboard 安装
puppetdb 安装
puppet MCollective 安装

puppet 部署 MCollective

---

HAproxy 搭建puppet 集群