Skip to content

Latest commit

 

History

History
97 lines (80 loc) · 3.74 KB

puppet_packet_agent.md

File metadata and controls

97 lines (80 loc) · 3.74 KB

说明

  1. 在 master/agent 上配置好 FQDN 格式的主机名。一般在 /etc/hostname 下配置主机名，在 /etc/hosts 配置IP/FQDN/主机名对应关系。
# Example:
# master主机名centos7, FQDN:centos7.server, IP: 192.168.229.20
# agent主机名ubuntu, FQDN:ubuntu.client, IP: 192.168.229.30
# ...

$ cat /etc/hosts
...
192.168.229.20         centos7.server   centos7   # master/agent主机的/etc/hosts都要配置
192.168.229.30         ubuntu.client    ubuntu    # master/agent主机的/etc/hosts都要配置
192.168.229.31         ubuntu2.client    ubuntu2    # master/agent主机的/etc/hosts都要配置
192.168.229.32         ubuntu3.client    ubuntu3    # master/agent主机的/etc/hosts都要配置

127.0.0.1    puppet            # master上有可能需要添加，在SSL认证证书请求及发送出现问题的时候
...
  1. 在 master 主机上安装 puppetserver 程序。 
# 配置源
# https://yum.puppet.com/<PLATFORM_NAME>-release-<OS ABBREVIATION>-<OS VERSION>.noarch.rpm
# https://apt.puppet.com/<PLATFORM_VERSION>-release-<VERSION CODE NAME>.deb
# Examples:
sudo rpm -Uvh https://yum.puppet.com/puppet6-release-el-7.noarch.rpm
sudo rpm -Uvh https://yum.puppet.com/puppet6-release-sles-12.noarch.rpm
# <or>
wget https://apt.puppet.com/puppet6-release-bionic.deb
sudo dpkg -i puppet6-release-bionic.deb
sudo apt-get update


# 安装puppetserver
systemctl stop puppetserver  # <or> service puppetserver stop
yum install puppetserver  # <or> apt-get install puppetserver
export PATH=/opt/puppetlabs/bin:$PATH 
puppetserver ca setup  # Generate a root and intermediate signing CA for Puppet Server
systemctl start puppetserver # <or> service puppetserver start
  1. 在 agent 主机上安装 puppet-agent. 
# 配置源(过程同上)
# 安装puppet-agent
sudo yum install puppet-agent # <or> sudo apt-get install puppet-agent , <or> sudo zypper install puppet-agent
export PATH=/opt/puppetlabs/bin:$PATH
  1. 在 master 上，配置自动签发证书。一般在 $confdir/puppet.conf 文件的 [master] 配置段，增加 'autosign = true' 属性。 
# $confdir : 
# *nix root users: /etc/puppetlabs/puppet
# Non-root users: ~/.puppetlabs/etc/puppet

$ cat puppet.conf
...
[master]
...
autosign = true


# Extra : CA证书手动管理命令（如果autosign = false，或者未配置）
# agent上运行'puppet agent -t'即会向master发送证书请求
$ puppetserver ca list --all  # 查看当前已经给agent颁发的证书，包括证书请求
$ puppetserver ca sign --all  # <or> puppetserver ca sign --certname example.ubuntu.server，给某个agent请求手动颁发证书
$ puppetserver ca clean --certname example.ubuntu.server  # 删除某个已颁发的证书

# 如需重置证书，master/agent 均需删除 $confdir/ssl/下的所有文件，之后在 master 上运行 'puppetserver ca setup'
  1. 在 agent 上，配置好 master 的主机名。一般在 $confdir/puppet.conf 文件增加 [main] 配置段，配置 server 属性。 
# $confdir : 
# *nix root users: /etc/puppetlabs/puppet
# Non-root users: ~/.puppetlabs/etc/puppet

$ cat puppet.conf
...
[main]
server = centos7.server
  1. 将 script/puppet_packet_agent.pp 拷贝到 master 主机上的 $codedir/environments/production/manifests 下。
# $codedir : 
# *nix root users: /etc/puppetlabs/code
# *nix non-root users: ~/.puppetlabs/etc/code
  1. 在 agent 主机启动 puppet service, 默认每隔半小时同 master 同步一次并触发更新安装流程。
    也可在 agent 主机上手动执行 /opt/puppetlabs/bin/puppet agent -t 命令触发同步流程，将 netis-packet-agent 程序安装到当前 agent 上。
sudo puppet resource service puppet ensure=running enable=true  # <or> 'puppet agent -t' 手动触发