rpm安装puppet
puppet和salt一样用于批量管理主机,依赖于ruby。包括服务端和客户端。
centos6.5联网,gcc,gcc-c++安装,puppet3.8.7。
服务端master:172.16.7.80
服务端client:172.16.7.81
1.服务端和客户端关闭防火墙和selinux,开机不启动。
2.服务端和客户端修改服务端和客户端主机名
服务端master
# cat /etc/hosts
172.16.7.80 master
172.16.7.81 client
# cat /etc/sysconfig/network
NETWORKING=yes
HOSTNAME=master
GATEWAY=172.16.7.1
客户端client
# cat /etc/hosts
172.16.7.80 master
172.16.7.81 client
# cat /etc/sysconfig/network
NETWORKING=yes
HOSTNAME=client
GATEWAY=172.16.7.1
3.服务端和客户端需要时间同步。
# ntpdate pool.ntp.org
# chkconfig ntpd on
4.服务端和客户端更新centos系统。
# yum update
5.服务端获取centos6.5需要的yum源文件,修改后安装puppetmaster。
# rpm -ivh http://yum.puppetlabs.com/el/6/products/x86_64/puppetlabs-release-6-12.noarch.rpm
# cat /etc/yum.repos.d/puppetlabs.repo
[puppetlabs-products]
name=Puppet Labs Products El - $basearch
baseurl=http://yum.puppetlabs.com/el/6/products/$basearch
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-puppetlabs
file:///etc/pki/rpm-gpg/RPM-GPG-KEY-puppet
enabled=1
gpgcheck=1
priority=3 # 修改级别
[puppetlabs-deps]
name=Puppet Labs Dependencies El - $basearch
baseurl=http://yum.puppetlabs.com/el/6/dependencies/$basearch
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-puppetlabs
file:///etc/pki/rpm-gpg/RPM-GPG-KEY-puppet
enabled=1
gpgcheck=1
priority=3 # 修改级别
# cat /etc/yum.conf
[main]
cachedir=/var/cache/yum/$basearch/$releasever
keepcache=1 #设置保存下载的缓存
debuglevel=2
logfile=/var/log/yum.log
# yum install -y puppet-server
# /etc/init.d/puppetmaster start
# chkconfig puppetmaster on
6.客户端获取centos6.5需要的yum源文件,修改后安装puppet。
# rpm -ivh http://yum.puppetlabs.com/el/6/products/x86_64/puppetlabs-release-6-12.noarch.rpm
# cat /etc/yum.repos.d/puppetlabs.repo
[puppetlabs-products]
name=Puppet Labs Products El - $basearch
baseurl=http://yum.puppetlabs.com/el/6/products/$basearch
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-puppetlabs
file:///etc/pki/rpm-gpg/RPM-GPG-KEY-puppet
enabled=1
gpgcheck=1
priority=3 # 修改级别
[puppetlabs-deps]
name=Puppet Labs Dependencies El - $basearch
baseurl=http://yum.puppetlabs.com/el/6/dependencies/$basearch
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-puppetlabs
file:///etc/pki/rpm-gpg/RPM-GPG-KEY-puppet
enabled=1
gpgcheck=1
priority=3 # 修改级别
# cat /etc/yum.conf
[main]
cachedir=/var/cache/yum/$basearch/$releasever
keepcache=1 #设置保存下载的缓存
debuglevel=2
logfile=/var/log/yum.log
# yum install -y puppet
# /etc/init.d/puppet start
# chkconfig puppet on
7.配置Puppet客户端
# cat /etc/puppet/puppet.conf
[agent]
localconfig = $vardir/localconfig
listen = true
server = master
8.客户端申请证书
# puppet agent --server master
# puppet agent --no-daemonize --onetime --verbose --debug 【证书签发过程】
9.服务端查看证书
# puppet cert list 【查看等待授权的客户端】
# puppet cert sign client 【给单个客户端授权】
# puppet cert sign --all 【给所有客户端授权】
# puppet cert -all 【查看所有已经授权的客户端】
# puppet resource host 【服务端上查看主机资源】
# ll /var/lib/puppet/ssl/ca/signed 【服务端查看证书】
# puppet cert --clean client2 【删除客户端的认证信息,需要在客户端删除其ssl目录】
10.客户端查看授权结果
# ll /var/lib/puppet/ssl/certs
源码安装包
rpm安装包

浙公网安备 33010602011771号