5.saltstack使用指南:使用saltstack部署nginx
使用saltstack部署nginx
搭建环境：
1.服务器列表：
salt-master: 192.168.42.131
salt-minion: 192.168.42.128(minion-192.168.42.128)
192.168.42.130(minion-192.168.42.130)2.环境：
（1）服务器之间互相可以通信（火墙关闭或者火墙允许通信）
（2）master对minion的主机名和ip做好解析
部署步骤
1.确定整个配置的目录文件结构：
#pcre软件安装
[root@server2 prod]# tree ./pcre/
./pcre/
├── files
│ └── pcre-8.38.tar.gz
└── install.sls
1 directory, 2 files
#nginx操作用户添加
[root@server2 prod]# tree ./user/
./user/
└── www.sls
0 directories, 1 file
#nginx安装
[root@server2 prod]# tree ./nginx/
./nginx/
├── files
│ ├── nginx-1.11.6.tar.gz
│ ├── nginx.conf
│ └── nginx.service
├── install.sls
└── service.sls
1 directory, 5 files整个思路分为：创建用户、安装基本组件、安装服务、开启服务这几个过程。
1.创建用户
在user目录的www.sls定义了www这个用户：
[root@server2 user]# cat www.sls
www-user-group:
group.present:
- name: www
- gid: 1100
user.present:
- name: www
- fullname: www
- shell: /sbin/nologin
- uid: 1100
- gid: 11002.安装基本组件
这个根据业务系统中所需nginx的模块决定，本例中以pcre为例，如果需要其他的模块可以按照类似的方式进行安装，pcre目录下的install.sls如下所示：
[root@server2 pcre]# pwd
/srv/salt/prod/pcre
[root@server2 pcre]# cat install.sls
pcre-source-install:
file.managed:
- name: /usr/local/src/pcre-8.38.tar.gz
- source: salt://pcre/files/pcre-8.38.tar.gz
- user: root
- group: root
- mode: 755
cmd.run:
- name: cd /usr/local/src && tar xvf pcre-8.38.tar.gz && cd pcre-8.38 && ./configure --prefix=/usr/local/pcre && make && make install
- unless: test -d /usr/local/pcre
- require:
- file: pcre-source-install在/srv/salt/prod/pcre/files目录下包含pcre的源码安装包：
[root@server2 files]# pwd
/srv/salt/prod/pcre/files
[root@server2 files]# ll
total 2008
-rw-r--r-- 1 root root 2053336 Dec 6 20:58 pcre-8.38.tar.gz3.pcre的安装是在nginx之前进行的，我们把pcre的安装包含在nginx的安装过程中，nginx的安装文件为install.sls:
[root@server2 nginx]# cat install.sls
#包含用户创建以及pcre安装
include:
- pcre.install
- user.www
nginx-source-install:
file.managed:
- name: /usr/local/src/nginx-1.11.6.tar.gz
- source: salt://nginx/files/nginx-1.11.6.tar.gz
- user: root
- group: root
- mode: 0644
cmd.run:
- name: cd /usr/local/src && tar xvf nginx-1.11.6.tar.gz && cd nginx-1.11.6 && ./configure --user=www --group=www --with-http_ssl_module --with-http_stub_status_module --with-file-aio --with-http_dav_module --with-pcre=/usr/local/src/pcre-8.38 && make && make install && chown www.www /usr/local/nginx -R
- unless: test -d /usr/local/nginx
- require:
- user: www-user-group
- file: nginx-source-install
- cmd: pcre-source-install 在nginx的install.sls文件中完成了nginx源码包的部署和配置，编译安装操作。
接下来需要设置nginx的配置文件以及启动nginx服务，尤其是在centos7
中，服务启动关闭的管理软件换为systemctl，需要编写相关service文件，以nginx为例，名称设置为nginx.service:
[root@server2 files]# cat nginx.service
[Unit]
Description=nginx service
After=network.target
[Service]
Type=forking
ExecStart=/usr/local/nginx/sbin/nginx
ExecReload=/usr/local/nginx/sbin/nginx -s reload
ExecStop=/usr/local/nginx/sbin/nginx -s quit
PrivateTmp=true
[Install]
WantedBy=multi-user.target 4.nginx配置文件的部署和服务的开启，该内容在nginx目录的service.sls文件中：
[root@server2 nginx]# cat service.sls
#包含nginx的安装设置
include:
- nginx.install
nginx-init:
file.managed:
- name: /usr/lib/systemd/system/nginx.service
- source: salt://nginx/files/nginx.service
- user: root
- group: root
- mode: 754
/usr/local/nginx/conf/nginx.conf:
file.managed:
- name: /usr/local/nginx/conf/nginx.conf
- source: salt://nginx/files/nginx.conf
- user: www
- group: www
- mode: 644
nginx.service:
cmd.run:
- name: systemctl start nginx.service
- require:
- file: nginx-init
- watch:
- file: /usr/local/nginx/conf/nginx.conf（1）在该文件的起始部分首先包含了nginx的安装：nginx.install；
（2）设置了nginx服务的启动脚本文件；
（3）设置nginx配置文件（这里可以使用salt的模板进行设置）；
（4）启动nginx服务；
执行部署操作
部署操作非常的简单，在/srv/salt/prod/top.sls文件中添加nginx.service，然后进行部署：
[root@server2 prod]# salt '*' state.highstate
minion-192.168.42.130:
----------
ID: pcre-source-install
Function: file.managed
Name: /usr/local/src/pcre-8.38.tar.gz
Result: True
Comment: File /usr/local/src/pcre-8.38.tar.gz is in the correct state
Started: 21:11:34.125059
Duration: 145.506 ms
Changes:
----------
ID: pcre-source-install
Function: cmd.run
Name: cd /usr/local/src && tar xvf pcre-8.38.tar.gz && cd pcre-8.38 && ./configure --prefix=/usr/local/pcre && make && make install
Result: True
Comment: unless execution succeeded
Started: 21:11:34.272172
Duration: 9.418 ms
Changes:
----------
ID: www-user-group
Function: group.present
Name: www
Result: True
Comment: Group www is present and up to date
Started: 21:11:34.282685
Duration: 2.538 ms
Changes:
----------
ID: www-user-group
Function: user.present
Name: www
Result: True
Comment: User www is present and up to date
Started: 21:11:34.286017
Duration: 31.402 ms
Changes:
----------
ID: nginx-source-install
Function: file.managed
Name: /usr/local/src/nginx-1.11.6.tar.gz
Result: True
Comment: File /usr/local/src/nginx-1.11.6.tar.gz is in the correct state
Started: 21:11:34.317595
Duration: 72.0 ms
Changes:
----------
ID: nginx-source-install
Function: cmd.run
Name: cd /usr/local/src && tar xvf nginx-1.11.6.tar.gz && cd nginx-1.11.6 && ./configure --user=www --group=www --with-http_ssl_module --with-http_stub_status_module --with-file-aio --with-http_dav_module --with-pcre=/usr/local/src/pcre-8.38 && make && make install && chown www.www /usr/local/nginx -R
Result: True
Comment: unless execution succeeded
Started: 21:11:34.390782
Duration: 9.355 ms
Changes:
----------
ID: nginx-init
Function: file.managed
Name: /usr/lib/systemd/system/nginx.service
Result: True
Comment: File /usr/lib/systemd/system/nginx.service is in the correct state
Started: 21:11:34.400385
Duration: 55.461 ms
Changes:
----------
ID: /usr/local/nginx/conf/nginx.conf
Function: file.managed
Result: True
Comment: File /usr/local/nginx/conf/nginx.conf is in the correct state
Started: 21:11:34.455996
Duration: 48.59 ms
Changes:
----------
ID: nginx.service
Function: cmd.run
Name: systemctl start nginx.service
Result: True
Comment: Command "systemctl start nginx.service" run
Started: 21:11:34.505367
Duration: 15.254 ms
Changes:
----------
pid:
22253
retcode:
0
stderr:
stdout:
Summary for minion-192.168.42.130
------------
Succeeded: 9 (changed=1)
Failed: 0
------------
Total states run: 9
Total run time: 389.524 ms
minion-192.168.42.128:
----------
ID: pcre-source-install
Function: file.managed
Name: /usr/local/src/pcre-8.38.tar.gz
Result: True
Comment: File /usr/local/src/pcre-8.38.tar.gz is in the correct state
Started: 21:11:34.153260
Duration: 135.174 ms
Changes:
----------
ID: pcre-source-install
Function: cmd.run
Name: cd /usr/local/src && tar xvf pcre-8.38.tar.gz && cd pcre-8.38 && ./configure --prefix=/usr/local/pcre && make && make install
Result: True
Comment: unless execution succeeded
Started: 21:11:34.289558
Duration: 9.864 ms
Changes:
----------
ID: www-user-group
Function: group.present
Name: www
Result: True
Comment: Group www is present and up to date
Started: 21:11:34.300283
Duration: 3.019 ms
Changes:
----------
ID: www-user-group
Function: user.present
Name: www
Result: True
Comment: User www is present and up to date
Started: 21:11:34.303914
Duration: 29.652 ms
Changes:
----------
ID: nginx-source-install
Function: file.managed
Name: /usr/local/src/nginx-1.11.6.tar.gz
Result: True
Comment: File /usr/local/src/nginx-1.11.6.tar.gz is in the correct state
Started: 21:11:34.334260
Duration: 75.035 ms
Changes:
----------
ID: nginx-source-install
Function: cmd.run
Name: cd /usr/local/src && tar xvf nginx-1.11.6.tar.gz && cd nginx-1.11.6 && ./configure --user=www --group=www --with-http_ssl_module --with-http_stub_status_module --with-file-aio --with-http_dav_module --with-pcre=/usr/local/src/pcre-8.38 && make && make install && chown www.www /usr/local/nginx -R
Result: True
Comment: unless execution succeeded
Started: 21:11:34.409912
Duration: 8.683 ms
Changes:
----------
ID: nginx-init
Function: file.managed
Name: /usr/lib/systemd/system/nginx.service
Result: True
Comment: File /usr/lib/systemd/system/nginx.service is in the correct state
Started: 21:11:34.418893
Duration: 50.052 ms
Changes:
----------
ID: /usr/local/nginx/conf/nginx.conf
Function: file.managed
Result: True
Comment: File /usr/local/nginx/conf/nginx.conf is in the correct state
Started: 21:11:34.469076
Duration: 47.592 ms
Changes:
----------
ID: nginx.service
Function: cmd.run
Name: systemctl start nginx.service
Result: True
Comment: Command "systemctl start nginx.service" run
Started: 21:11:34.517608
Duration: 21.014 ms
Changes:
----------
pid:
23156
retcode:
0
stderr:
stdout:
Summary for minion-192.168.42.128
------------
Succeeded: 9 (changed=1)
Failed: 0
------------
Total states run: 9
Total run time: 380.085 ms在对应的节点192.168.42.128上查看nginx是否开启：
[root@server1 ~]# systemctl status nginx.service
● nginx.service - nginx service
Loaded: loaded (/usr/lib/systemd/system/nginx.service; disabled; vendor preset: disabled)
Active: active (running) since Wed 2016-12-07 14:42:32 CST; 6h ago
Process: 19352 ExecStart=/usr/local/nginx/sbin/nginx (code=exited, status=0/SUCCESS)
Main PID: 19353 (nginx)
Memory: 1.4M
CGroup: /system.slice/nginx.service
├─19353 nginx: master process /usr/local/nginx/sbin/nginx
└─19354 nginx: worker process
Dec 07 14:42:32 server1.example.com systemd[1]: Starting nginx service...
Dec 07 14:42:32 server1.example.com systemd[1]: Started nginx service.
Dec 07 21:11:34 server1.example.com systemd[1]: Started nginx service.使用浏览器访问该页面，查看页面能否访问：
小结
在个基础上还可以添加php模块，丰富nginx的功能。后续的章节将会进行介绍。