SaltStack之salt-ssh

Posted 码出未来_远

tags:

篇首语:本文由小常识网(cha138.com)小编为大家整理,主要介绍了SaltStack之salt-ssh相关的知识,希望对你有一定的参考价值。

SaltStack之salt-ssh

文章目录

salt-ssh介绍

salt-ssh可以让我们不需要在受控机上安装salt-minion客户端也能够实现管理操作。

salt-ssh的特点

  • 远程系统需要Python支持,除非使用-r选项发送原始ssh命令
  • salt-ssh是一个软件包,需安装之后才能使用,命令本身也是salt-ssh
  • salt-ssh不会取代标准的Salt通信系统,它只是提供了一个基于SSH的替代方案,不需要ZeroMQ和agent

请注意,由于所有与Salt SSH的通信都是通过SSH执行的,因此它比使用ZeroMQ的标准Salt慢得多

salt-ssh远程管理的方式

salt-ssh有两种方式实现远程管理,一种是在配置文件中记录所有客户端的信息,诸如 IP 地址、端口号、用户名、密码以及是否支持sudo等;另一种是使用密钥实现远程管理,不需要输入密码。

salt-ssh管理

在 master 上安装 salt-ssh

[root@master ~]# yum -y install salt-ssh

通过使用用户名密码的SSH实现远程管理

修改配置文件,添加受控机信息

[root@master ~]# vim /etc/salt/roster
vm1:
  host: 192.168.207.131
  user: root
  port: 22
  passwd: 789123

vm2:
  host: 192.168.207.137
  user: root
  port: 22
  passwd: 789123

vm3:
  host: 192.168.207.136
  user: root
  port: 22
  passwd: 789123


测试连通性

[root@master ~]# vim ~/.ssh/config
StrictHostKeyChecking no

[root@master ~]# salt-ssh '*' test.ping
vm1:
    True

从上面的信息可以看出,第一次访问时需要输入 yes/no ,但是 saltstack 是不支持交互式操作的,所以为了解决这个问题,我们需要对其进行设置,让系统不进行主机验证。

[root@master ~]# vim ~/.ssh/config
StrictHostKeyChecking no
[root@master ~]# salt-ssh '*' test.ping
vm2:
    True
vm1:
    True
vm3:
    True

把所有的被控主机安装python3

[root@master ~]# salt-ssh '*' -r 'yum install -y python3'
vm2:
    ----------
    retcode:
        0
    stderr:
    stdout:
        
        root@192.168.207.137's password: 
        Last metadata expiration check: 1 day, 22:14:24 ago on Tue 06 Jul 2021 10:13:55 PM CST.
        Package python36-3.6.8-37.module_el8.5.0+771+e5d9a225.x86_64 is already installed.
        Dependencies resolved.
        Nothing to do.
        Complete!
vm3:
    ----------
    retcode:
        0
    stderr:
    stdout:
        
        root@192.168.207.136's password: 
        Last metadata expiration check: 2:05:56 ago on Thu 08 Jul 2021 06:22:22 PM CST.
        Dependencies resolved.
        ================================================================================
         Package            Arch   Version                              Repo       Size
        ================================================================================
        Installing:
         python36           x86_64 3.6.8-37.module_el8.5.0+771+e5d9a225 appstream  19 k
        Installing dependencies:
         python3-pip        noarch 9.0.3-19.el8                         appstream  20 k
         python3-setuptools noarch 39.2.0-6.el8                         baseos    163 k
        Enabling module streams:
         python36                  3.6                                                 
        
        Transaction Summary
        ================================================================================
        Install  3 Packages
        
        Total download size: 201 k
        Installed size: 466 k
        Downloading Packages:
        (1/3): python3-pip-9.0.3-19.el8.noarch.rpm      169 kB/s |  20 kB     00:00    
        (2/3): python36-3.6.8-37.module_el8.5.0+771+e5d 154 kB/s |  19 kB     00:00    
        (3/3): python3-setuptools-39.2.0-6.el8.noarch.r 746 kB/s | 163 kB     00:00    
        --------------------------------------------------------------------------------
        Total                                           158 kB/s | 201 kB     00:01     
        Running transaction check
        Transaction check succeeded.
        Running transaction test
        Transaction test succeeded.
        Running transaction
          Preparing        :                                                        1/1 
          Installing       : python3-setuptools-39.2.0-6.el8.noarch                 1/3 
          Installing       : python36-3.6.8-37.module_el8.5.0+771+e5d9a225.x86_64   2/3 
          Running scriptlet: python36-3.6.8-37.module_el8.5.0+771+e5d9a225.x86_64   2/3 
          Installing       : python3-pip-9.0.3-19.el8.noarch                        3/3 
          Running scriptlet: python3-pip-9.0.3-19.el8.noarch                        3/3 
          Verifying        : python3-pip-9.0.3-19.el8.noarch                        1/3 
          Verifying        : python36-3.6.8-37.module_el8.5.0+771+e5d9a225.x86_64   2/3 
          Verifying        : python3-setuptools-39.2.0-6.el8.noarch                 3/3 
        
        Installed:
          python3-pip-9.0.3-19.el8.noarch                                               
          python3-setuptools-39.2.0-6.el8.noarch                                        
          python36-3.6.8-37.module_el8.5.0+771+e5d9a225.x86_64                          
        
        Complete!
vm1:
    ----------
    retcode:
        0
    stderr:
    stdout:
        
        root@192.168.207.131's password: 
        Last metadata expiration check: 0:41:00 ago on Thu 08 Jul 2021 07:47:21 PM CST.
        Package python36-3.6.8-37.module_el8.5.0+771+e5d9a225.x86_64 is already installed.
        Dependencies resolved.
        Nothing to do.
        Complete!

编写ymal文件

[root@master ~]# mkdir -p /srv/salt/base/repo,files
[root@master ~]# \\cp /etc/yum.repos.d/salt-latest.repo /srv/salt/base/repo/salt-latest.repo
[root@master ~]# cp /etc/salt/minion /srv/salt/base/files/

[root@master ~]# vim /srv/salt/base/repo.sls
salt-repo:
  file.managed:
    - name: /etc/yum.repos.d/salt-latest.repo
    - source: salt://repo/salt-latest.repo
    - user: root
    - group: root
    - mode: 644

[root@master ~]# vim /srv/salt/base/minion.sls
salt-minion-install:
  pkg.installed:
    - name: salt-minion

salt-minion-conf:
  file.managed:
    - name: /etc/salt/minion
    - source: salt://files/minion
    - user: root
    - group: root
    - mode: 644
    - template: jinja
    - default:
      ID:  grains['ipv4'] [1] 
    - require:
      - pkg: salt-minion-install

salt-minion-service:
  service.running:
    - name: salt-minion
    - enable: True
    - start: True
    - watch:
       - file: /etc/salt/minion

开始自动安装

[root@master ~]# salt-ssh '*' state.sls repo
vm3:
----------
          ID: salt-repo
    Function: file.managed
        Name: /etc/yum.repos.d/salt-latest.repo
      Result: True
     Comment: File /etc/yum.repos.d/salt-latest.repo updated
     Started: 21:03:45.218592
    Duration: 28.625 ms
     Changes:   
              ----------
              diff:
                  New file
              mode:
                  0644

Summary for vm3
------------
Succeeded: 1 (changed=1)
Failed:    0
------------
Total states run:     1
Total run time:  28.625 ms
vm2:
----------
          ID: salt-repo
    Function: file.managed
        Name: /etc/yum.repos.d/salt-latest.repo
      Result: True
     Comment: File /etc/yum.repos.d/salt-latest.repo updated
     Started: 21:03:46.348977
    Duration: 25.983 ms
     Changes:   
              ----------
              diff:
                  New file
              mode:
                  0644

Summary for vm2
------------
Succeeded: 1 (changed=1)
Failed:    0
------------
Total states run:     1
Total run time:  25.983 ms
vm1:
----------
          ID: salt-repo
    Function: file.managed
        Name: /etc/yum.repos.d/salt-latest.repo
      Result: True
     Comment: File /etc/yum.repos.d/salt-latest.repo is in the correct state
     Started: 21:03:48.462771
    Duration: 24.432 ms
     Changes:   

Summary for vm1
------------
Succeeded: 1
Failed:    0
------------
Total states run:     1
Total run time:  24.432 ms

[root@master ~]# salt-ssh '*' state.sls minion
vm2:
----------
          ID: salt-minion-install
    Function: pkg.installed
        Name: salt-minion
      Result: True
     Comment: All specified packages are already installed
     Started: 21:05:12.268538
    Duration: 693.595 ms
     Changes:   
----------
          ID: salt-minion-conf
    Function: file.managed
        Name: /etc/salt/minion
      Result: True
     Comment: File /etc/salt/minion updated
     Started: 21:05:12.964761
    Duration: 68.4 ms
     Changes:   
              ----------
              diff:
                  --- 
                  +++ 
                  @@ -14,14 +14,7 @@
                   # Set the location of the salt master server. If the master server cannot be
                   # resolved, then the minion will fail to start.
                   #master: salt
                  -
                   master: 192.168.207.131
                  -
                  -mysql.host: '192.168.207.136'
                  -mysql.user: 'salt'
                  -mysql.pass: 'salt'
                  -mysql.db: 'salt'
                  -mysql.port: 3306
                   
                   # Set http proxy information for the minion when doing requests
                   #proxy_host:
              mode:
                  0644
----------
          ID: salt-minion-service
    Function: service.running
        Name: salt-minion
      Result: True
     Comment: Service restarted
     Started: 21:05:13.072602
    Duration: 793.615 ms
     Changes:   
              ----------
              salt-minion:
                  True

Summary for vm2
------------
Succeeded: 3 (changed=2)
Failed:    0
------------
Total states run:     3
Total run time:   1.556 s
vm1:
----------
          ID: salt-minion-install
    Function: pkg.installed
        Name: salt-minion
      Result: True
     Comment: All specified packages are already installed
     Started: 21:05:14.592060
    Duration: 814.719 ms
     Changes:   
----------
          ID: salt-minion-conf
    Function: file.managed
        Name: /etc/salt/minion
      Result: True
     Comment: File /etc/salt/minion updated
     Started: 21:05:15.409407
    Duration: 46.531 ms
     Changes:   
              ----------
              mode:
                  0644
----------
          ID: salt-minion-service
    Function: service.running
        Name: salt-minion
      Result: True
     Comment: Service salt-minion has been enabled, and is in the desired state
     Started: 21:05:15.456752
    Duration: 180.639 ms
     Changes:   
              ----------
              salt-minion:
                  True

Summary for vm1
------------
Succeeded: 3 (changed=2)
Failed:    0
------------
Total states run:     3
Total run time:   1.042 s
vm3:
----------
          ID: salt-minion-install
    Function: pkg.installed
        Name: salt-minion
      Result: True
     Comment: The following packages were installed/updated: salt-minion
     Started: 21:05:12.369995
    Duration: 34323.132 ms
     Changes:   
              ----------
              gpg-pubkey.(none):
                  ----------
                  new:
                      8483c65d-5ccc5b19,de57bfbe-53a9be98
                  old:
                      8483c65d-5ccc5b19
              libsodium:
                  ----------
                  new:
                      1.0.18-2.el8
                  old:
              libunwind:
                  ----------
                  new:
                      1.3.1-3.el8
                  old:
              openpgm:
                  ----------
                  new:
                      5.2.122-21.el8
                  old:
              python3-babel:
                  ----------
                  new:
                      2.5.1-6.el8
                  old:
              python3-chardet:
                  ----------
                  new:
                      3.0.4-7.el8
                  old:
              python3-contextvars:
                  ----------
                  new:
                      2.4-1.el8
                  old:
              python3-distro:
                  ----------
                  new:
                      1.4.0-2.module_el8.5.0+761+faacb0fb
                  old:
              python3-idna:
                  ----------
                  new:
                      2.5-5.el8
                  old:
              python3-immutables:
                  ----------
                  new:
                      0.15-2.el8
                  old:
              python3-jinja2:
                  ----------
                  new:
                      2.10.1-3.el8
                  old:
              python3-m2crypto:
                  ----------
                  new:
                      0.35.2-5.el8
                  old:
              python3-markupsafe:
                  ----------
                  new:
                      0.23-19.el8
                  old:
              python3-msgpack:
                  ----------
                  new:
                      0.6.2-1.el8
                  old:
              python3-psutil:
                  ----------
                  new:
                      5.4.3-10.el8
                  old:
              python3-pycurl:
                  ----------
                  new:
                      7.43.0.2-4.el8
                  old:
              python3-pysocks:
                  ----------
                  new:
                      1.6.8-3.el8
                  old:
              python3-pytz:
                  ----------
                  new:
                      2017.2-9.el8
                  old:
              python3-pyyaml:
                  ----------
                  new:
                      3.12-12.el8
                  old:
              python3-requests:
                  ----------
                  new:
                      2.20.0-2.1.el8_1
                  old:
              python3-urllib3:
                  ----------
                  new:
                      1.24.2-5.el8
                  old:
              python3-zmq:
                  ----------
                  new:
                      19.0.0-1.el8
                  old:
              salt:
                  ----------
                  new:
                      3003.1-1.el8
                  old:
              salt-minion:
                  ----------
                  new:
                      3003.1-1.el8
                  old:
              yum-utils:
                  ----------
                  new:
                      4.0.18-4.el8
                  old:
              zeromq:
                  ----------
                  new:
                      4.3.4-2.el8
                  old:
----------
          ID: salt-minion-conf
    Function: file.managed
        Name: /etc/salt/minion
      Result: True
     Comment: File /etc/salt/minion updated
     Started: 21:05:46.695672
    Duration: 63.668 ms
     Changes:   
              ----------
              diff:
                  --- 
                  +++ 
                  @@ -14,6 +14,7 @@
                   # Set the location of the salt master server. If the master server cannot be
                   # resolved, then the minion will fail to start.
                   #master: salt
                  +master: 192.168.207.131
                   
                   # Set http proxy information for the minion when doing requests
                   #proxy_host:
              mode:
                  0644
----------
          ID: salt-minion-service
    Function: service.running
        Name: salt-minion
      Result: True
     Comment: Service salt-minion has been enabled, and is running
     Started: 21:05:46.767414
    Duration: 443.277 ms
     Changes:   
              ----------
              salt-minion:
                  True

Summary for vm3
------------
Succeeded: 3 (changed=3)
Failed:    0
------------
Total states run:     3
Total run time:  34.830 s

成功

[root@master ~]# salt-ssh '*' cmd.run 'systemctl restart salt-minion'
vm3:
vm2:
vm1:
[root@master ~]# salt-key -yA
[root@master ~]# salt-key -L
Accepted Keys:
master
minion
mysql
Denied Keys:
Unaccepted Keys:
Rejected Keys:

[root@master ~]# salt-ssh '*' state.sls minion
vm2:
----------
          ID: salt-minion-install
    Function: pkg.installed
        Name: salt-minion
      Result: True
     Comment: All specified packages are already installed
     Started: 21:07:48.294851
    Duration: 607.257 ms
     Changes:   
----------
          ID: salt-minion-conf
    Function: file.managed
        Name: /etc/salt/minion
      Result: True
     Comment: File /etc/salt/minion is in the correct state
     Started: 21:07:48.904992
    Duration: 50.208 ms
     Changes:   
----------
          ID: salt-minion-service
    Function: service.running
        Name: salt-minion
      Result: True
     Comment: The service salt-minion is already running
     Started: 21:07:48.956176
    Duration: 46.309 ms
     Changes:   

Summary for vm2
------------
Succeeded: 3
Failed:    0
------------
Total states run:     3
Total run time: 703.774 ms
vm3:
----------
          ID: salt-minion-install
    Function: pkg.installed
        Name: salt-minion
      Result: True
     Comment: All specified packages are already installed
     Started: 21:07:51.060503
    Duration: 646.68 ms
     Changes:   
----------
          ID: salt-minion-conf
    Function: file.managed
        Name: /etc/salt/minion
      Result: True
     Comment: File /etc/salt/minion is in the correct state
     Started: 21:07:51.710438
    Duration: 48.137 ms
     Changes:   
----------
          ID: salt-minion-service
    Function: service.running
        Name: salt-minion
      Result: True
     Comment: The service salt-minion is already running
     Started: 21:07:51.759509
    Duration: 38.529 ms
     Changes:   

Summary for vm3
------------
Succeeded: 3
Failed:    0
------------
Total states run:     3
Total run time: 733.346 ms
vm1:
----------
          ID: salt-minion-install
    Function: pkg.installed
        Name: salt-minion
      Result: True
     Comment: All specified packages are already installed
     Started: 21:07:51.142167
    Duration: 867.488 ms
     Changes:   
----------
          ID: salt-minion-conf
    Function: file.managed
        Name: /etc/salt/minion
      Result: True
     Comment: File /etc/salt/minion is in the correct state
     Started: 21:07:52.012309
    Duration: 46.204 ms
     Changes:   
----------
          ID: salt-minion-service
    Function: service.running
        Name: salt-minion
      Result: True
     Comment: The service salt-minion is already running
     Started: 21:07:52.059343
    Duration: 37.25 ms
     Changes:   

Summary for vm1
------------
Succeeded: 3
Failed:    0
------------
Total states run:     3
Total run time: 950.942 ms

以上是关于SaltStack之salt-ssh的主要内容,如果未能解决你的问题,请参考以下文章

SaltStack之salt-ssh

SaltStack之salt-ssh

SaltStack之salt-ssh

saltstack之salt-ssh的细枝末节

SaltStack的salt-ssh使用及LAMP状态设计部署

SaltStack salt-ssh 用法