saltstack通过state安装nginx

创建nginx.sls文件

install_nginx是安装Nginx的配置，nginx_running负责进程管理，nginx_conf下发Nginx主配置的模板文件，vhost_conf下发Vhost的配置文件。

[root@29-server]# cat /srv/salt/nginx.sls 
{% set confdir="/etc/nginx/" %}
{% if grains['num_cpus'] > 2 %}
install_nginx:
  pkg.installed:
    - name: nginx

nginx_running:
  service.running:
    - name: nginx
    - enable: Ture
    - require:
      - pkg: install_nginx
    - watch:
      - file: nginx_conf
      - file: vhost_conf

nginx_conf:
  file.managed:
    - name: {{confdir}}nginx.conf
    - source: salt://nginx.j2
    - user: root
    - group: root
    - template: jinja
    - mode: 644

vhost_conf:
  file.managed:
    - name: {{confdir}}conf.d/nginx.conf
    - source: salt://test_vhost.conf
    - user: root
    - group: root
    - mode: 644
{%endif%}

nginx主配置文件内容

[root@29-server]# cat /srv/salt/nginx.j2 
user root;
worker_processes {{ grains['num_cpus'] }};
{% if grains['num_cpus'] == 4 %} 
worker_cpu_affinity 1000 0100 0010 0001;
{% elif grains['num_cpus'] == 8 %} 
worker_cpu_affinity 00000001 00000010 00000100 00001000 00010000 00100000 01000000 10000000;
{% else %}
worker_cpu_affinity 00000001 00000010 00000100 00001000 00010000 00100000 01000000 10000000;
{% endif %}
#error_log logs/error.log;
#pid logs/nginx.pid;
events {
worker_connections 1024;
}
http {
    include mime.types;
    default_type application/octet-stream;
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';
    #access_ log logs/ access.log main;
    sendfile on;
    keepalive_timeout 65;
    server_names_hash_bucket_size 128;
    client_header_buffer_size 32k;
    large_client_header_buffers 4 32k;
    tcp_nodelay on;
    send_timeout 60;
    fastcgi_connect_timeout 300;
    fastcgi_send_timeout 300;
    fastcgi_read_timeout 300;
    fastcgi_buffer_size 64k;
    fastcgi_buffers 4 64k;
    fastcgi_busy_buffers_size 128k;
    fastcgi_temp_file_write_size 128k;
    gzip on;
    gzip_min_length 1k;
    gzip_buffers 4 16k;
    gzip_http_version 1.0;
    gzip_comp_level 2;
    gzip_types text/plain application/x-javascript text/css application/xml;
    gzip_vary on;
    server {
        listen 80 default;
        server_name _;
        return 403;
        }
    server_tokens off;
    upstream backend { 
        server 192.168.0.1:80 max_fails=3 fail_timeout=30s;
        server 192.168.0.2:80 max_fails=3 fail_timeout=30s;
        server 192.168.0.3:80 max_fails=3 fail_timeout=30s;
        }
    include /etc/nginx/conf.d/*.conf;
    }

vhost配置文件内容

[root@29-server]# cat test_vhost.conf 
server { 
    listen 80;
    server_name www.test.com; 
    location / {
        proxy_pass http://backend;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }
    }

执行状态模块命令

这是第二次执行显示的信息，第一次执行显示信息太多，就不放在这里了。
[root@29-server salt]# salt "minion-one" state.sls nginx
minion-one:
----------
          ID: install_nginx
    Function: pkg.installed
        Name: nginx
      Result: True
     Comment: All specified packages are already installed
     Started: 15:28:34.922277
    Duration: 2494.279 ms
     Changes:   
----------
          ID: nginx_conf
    Function: file.managed
        Name: /etc/nginx/nginx.conf
      Result: True
     Comment: File /etc/nginx/nginx.conf is in the correct state
     Started: 15:28:37.423235
    Duration: 40.325 ms
     Changes:   
----------
          ID: vhost_conf
    Function: file.managed
        Name: /etc/nginx/conf.d/nginx.conf
      Result: True
     Comment: File /etc/nginx/conf.d/nginx.conf is in the correct state
     Started: 15:28:37.463761
    Duration: 9.871 ms
     Changes:   
----------
          ID: nginx_running
    Function: service.running
        Name: nginx
      Result: True
     Comment: The service nginx is already running
     Started: 15:28:37.473951
    Duration: 84.594 ms
     Changes:   

Summary for minion-one
------------
Succeeded: 4
Failed:    0
------------
Total states run:     4
Total run time:   2.629 s