puppet初探

需要軟件包：ruby,facter，puppet

前提要求客戶端能解析到服務端的hostname

puppet服務端配置：

fileserver.conf文件的配置：

[files]
path /opt/
allow *
[yum]
path /etc/yum/
allow *

site.pp文件的配置：

node default {     #m所有客戶端都同步，單獨客戶端同步：node hostname
        file {
                "test":
                name => "/tmp/1.txt",
                content => template("/etc/passwd"),
        }
        file {
        "/opt/install.log":
        content => "test,my first puppetmaster",
        ensure => present,
        mode => 666,
        owner => puppet,
        group => puppet,
        }
        file {
        "/tmp/install.log":
        source => "puppet://node3.wanghaihao.cn/files/install.log",
        ensure => present,
        owner => puppet,
        group => puppet,
        mode => 666,
        }
        file {
        "/tmp/puppet-2.6.17.tar.gz":
        source => "puppet://node3.wanghaihao.cn/files/puppet-2.6.17.tar.gz",
        }
# tian jia group
        group {
        "haihao":
        gid=>1000,
        ensure => present,
        }
#tian jia user
        user {
        "haihao":
        uid => 1000,
        gid => 1000,
        home => "/home/haihao",
        shell => "/bin/bash",
        password => "123456",
        ensure => present,
        }
#yum an zhuang ruan jian
        package {
                "httpd":
                ensure => installed,
        }
#yum xie zai ruan jian
        package {
                "ftpd":
                ensure => absent,
        }
        service {
                "httpd":
                ensure => running,              #kai qi fu wu
                enable => false,                #kai ji bu zi qi dong
        }
        service {
                "atd":
                ensure => stopped,              #guan bi fu wu
                enable => true,                 #kai ji zi qi dong
        }
        cron { "ntpdate":
                command => "/usr/sbin/ntpdate 192.168.1.103",
                user => root,
                minute => 0,
                hour => 1,
        }
        exec { "build-Nagios Plugins":
                cwd => "/root",
                command => "/bin/tar xzf nagios-plugins-1.4.15.tar.gz && cd nagios-plugins-1.4.15 && sh configure && make && make install",
                creates => "/usr/local/nagios",
                logoutput => on_failure,
                timeout => 0,
        }

        exec { "exec-mkdir":

          cwd => "/opt",

          command => "sh /opt/hh.sh",

          user => "root",

         path => "/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin",

        }

#tong bu mu lu
        file { "/tmp/test":
                owner => puppet,
                group => puppet,
                purge => true,
                recurse => true,
                force => true,
                source => "puppet://node3.wanghaihao.cn/yum/",
        }
}

客戶端的配置：

namespaceauth.conf文件的配置：

[fileserver]
    allow *

[puppetmaster]
    allow *

[puppetrunner]
    allow *

[puppetbucket]
    allow *

[puppetreports]
    allow *

[resource]
    allow *

測試：

認證：

認證報錯：時間問題，處理辦法：

客戶端：pppet --genconfig | grep certdir

rm -rf  /var/lib/puppet/ssl

puppetd --test -server  $hostname

服務端：

puppetca -l

puppetca -s $hostname