使用方法: salt ip state.sls vsftp.install

登录130服务器,脚本路径:/src/salt/

cat nginx/install.sls

common_pkgs:
  pkg.installed:
    - names:
      - vsftpd
      - pam
      - db4
vftp:
  user.present:
    - home: /home/vftp
    - uid: 600
    - shell: /sbin/nologin

/etc/vsftpd/vsftpd.conf:
  file.managed:
    - source: salt://vsftp/files/vsftpd.conf
    - user: root
    - group: root
    - mode: 644

/etc/vsftpd/vconf:
  file.directory:
    - user: root
    - group: root
    - dir_mode: 755
    - file_mode: 644
/etc/vsftpd/vconf/test:
  file.managed:
    - source: salt://vsftp/files/test
    - user: root
    - group: 644
    - mode: 644

/etc/vsftpd/virtusers:
  file.append:
    - text:
      - "test"
      - "test@2015"

db_load:
  cmd.run:
    - user: root
    - name: db_load -T -t hash -f /etc/vsftpd/virtusers /etc/vsftpd/virtusers.db
    - onlyif: test -f /etc/vsftpd/virtusers

/etc/pam.d/vsftpd:
  file.managed:
    - source: salt://vsftp/files/pam_vsftpd
    - user: root
    - group: root
    - mode: 644

vsftpd:

  service.running:

    - enable: Ture

    - reload: Ture

    - wath:

      - file: /etc/vsftpd/virtusers

 

vsftpd_iptables:

  iptables.append:

    - table: filter

    - chain: INPUT

    - jump: DROP

    - dport: 5521

    - source: '! 61.148.57.198'

    - proto: tcp

    - sport: 1025:65535

    - save: True