Puppet模块(三)：puppet模块及file资源

作用：通过puppet模块自动控制客户端的puppet配置，当需要修改客户端的puppet配置时不用在客户端一一设置1、服务端配置puppet模块（1）模块清单1234567891011[root@puppet ~]# tree /etc/puppet/modules/puppet/。

/etc/puppet/modules/puppet/├── files├── manifests│ ├── config.pp│ ├── init.pp│ ├── install.pp│ ├── params.pp

│ └── service.pp└── templates └── puppet.conf.erb（2）定义参数类1234567891011121314151617[root@puppet ~]# vi /etc/puppet/modules/puppet/manifests/params.pp

class puppet::params { $puppetserver = “puppet.ewin.com” case $operatingsystemmajrelease{ 5: { #定义centos5系列的参数

$puppet_release = 3.7.1-1.el5 $facter_release = 2.2.0-1.el5 } 6: { #定义centos6系列的参数

$puppet_release = 3.7.1-1.el6 #定义软件版本 $facter_release = 2.2.0-1.el6 #定义软件版本 }

default: { fail(“Module puppet is not supported on ${::operatingsystem}”) } }}（3）定义安装类12

3456789[root@puppet ~]# vi /etc/puppet/modules/puppet/manifests/install.ppclass puppet::install { package { “puppet”:

ensure => $puppet::params::puppet_release, } package { “facter”: ensure => $puppet::params::facter_release,

}}说明：根据系统版本（centos5或centos6）来安装指定版本的puppet和facter（4）定义配置类123456789101112[root@puppet ~]# vi /etc/puppet/modules/puppet/manifests/config.pp

class puppet::config { file { “/etc/puppet/puppet.conf”: ensure => present, content => template(“puppet/puppet.conf.erb”), #文件内容来源于模板

owner => “root”, group => “root”, mode => 0644, require => Class[“puppet::install”], #要求先完成install.pp

notify => Class[“puppet::service”], #通知并触发service.pp }}说明：将配置模板传送到客户端的puppet.conf，设置用户、组、权限（5）定义配置模板

12345678910111213[root@puppet ~]# vi /etc/puppet/modules/puppet/template/puppet.conf.erb### config by puppet ###

[main] logdir = /var/log/puppet rundir = /var/run/puppet ssldir = $vardir/ssl[agent] classfile = $vardir/classes.txt

localconfig = $vardir/localconfig server = #参数调用格式

report = true pluginsync = false runinterval = 10 #puppet 客户端默认连接到puppetmaster的时间间隔，默认30分钟，这里测试设为10秒，将会生成大量报告，建议测试完后改回1800

说明：模板调用了params.pp中的参数$puppetserver（6）定义服务类12345678910[root@puppet ~]# vi /etc/puppet/modules/puppet/manifests/service.pp

class puppet::service { service { “puppet”: ensure => running, #确保服务puppet处于运行状态 hasstatus => true, #是否支持service puppet status命令查看状态

hasrestart => true, #是否支持service puppet restart命令重启服务 enable => true, #是否开机启动服务

require => Class[“puppet::install”], }}（7）定义puppet主类1234[root@puppet ~]# vi /etc/puppet/modules/puppet/manifests/init.pp

class puppet { include puppet::params,puppet::install,puppet::config,puppet::service}（8）定义节点文件，调用模块[root@puppet ~]# vi /etc/puppet/manifests/centostest.pp

node “centostest.ewin.com” {include ntp, yum, puppet}（9）应用节点文件12[root@puppet ~]# vi /etc/puppet/manifests/site.pp

import “centostest.pp”2、测试：软件安装版本、配置文件、服务启动（1）查看已安装版本123456[root@centostest ~]# facter | grep operatingsystemmajrelease

operatingsystemmajrelease => 6[root@centostest ~]# rpm -aq|grep puppetpuppet-3.7.3-1.el6.noarch[root@centostest ~]# rpm -aq|grep facter

facter-2.3.0-1.el6.x86_64（2）查看服务状态123456[root@centostest ~]# /etc/init.d/puppet stopStopping puppet agent: [确定]

[root@centostest ~]# /etc/init.d/puppet statuspuppet 已停[root@centostest ~]# chkconfig –list | grep puppet

puppet 0:关闭 1:关闭 2:关闭 3:关闭 4:关闭 5:关闭 6:关闭（3）查看配置文件12345678910111213141516171819202122[root@centostest ~]# cat /etc/puppet/puppet.conf

[main] # The Puppet log directory. # The default value is $vardir/log. logdir = /var/log/puppet

# Where Puppet PID files are kept. # The default value is $vardir/run. rundir = /var/run/puppet

# Where SSL certificates are kept. # The default value is $confdir/ssl. ssldir = $vardir/ssl

[agent] # The file in which puppetd stores a list of the classes # associated with the retrieved configuratiion. Can be loaded in

# the separate “puppet“ executable using the “–loadclasses“ # option. # The default value is $confdir/classes.txt.

classfile = $vardir/classes.txt # Where puppetd caches the local configuration. An # extension indicating the cache format is added automatically.

# The default value is $confdir/localconfig. localconfig = $vardir/localconfig（4）客户端执行测试123456

78910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758

596061[root@centostest ~]# puppet agent –server puppet.ewin.com –test –noopInfo: Retrieving pluginfacts

Info: Retrieving pluginInfo: Caching catalog for centostest.ewin.comInfo: Applying configuration version 1415246721

Notice: /Stage[main]/Puppet::Install/Package[facter]/ensure: current_value 2.3.0-1.el6, should be 2.2.0-1.el6 (noop) #说明：版本将变成2.2.0-1.el6

Notice: /Stage[main]/Puppet::Install/Package[puppet]/ensure: current_value 3.7.3-1.el6, should be 3.7.1-1.el6 (noop) #说明：版本将变成3.7.1-1.el6

Notice: Class[Puppet::Install]: Would have triggered refresh from 2 eventsNotice: /Stage[main]/Puppet::Config/File[/etc/puppet/puppet.conf]/content: #说明：生成puppet.conf配置文件内容

— /etc/puppet/puppet.conf 2014-11-04 06:23:12.000000000 +0800+++ /tmp/puppet-file20141106-34117-1abwj46-0 2014-11-06 12:04:04.724000002 +0800

@@ -1,25 +1,12 @@-[main]- # The Puppet log directory.- # The default value is $vardir/log.- logdir = /var/log/puppet

— # Where Puppet PID files are kept.- # The default value is $vardir/run.- rundir = /var/run/puppet

— # Where SSL certificates are kept.- # The default value is $confdir/ssl.- ssldir = $vardir/ssl

–[agent]- # The file in which puppetd stores a list of the classes- # associated with the retrieved configuratiion. Can be loaded in

– # the separate “puppet“ executable using the “–loadclasses“- # option.- # The default value is $confdir/classes.txt.

– classfile = $vardir/classes.txt– # Where puppetd caches the local configuration. An- # extension indicating the cache format is added automatically.

– # The default value is $confdir/localconfig.- localconfig = $vardir/localconfig+### config by puppet ###

+[main]+ logdir = /var/log/puppet+ rundir = /var/run/puppet+ ssldir = $vardir/ssl+[agent]+ classfile = $vardir/classes.txt

+ localconfig = $vardir/localconfig+ server = puppet.ewin.com+ report = true+ pluginsync = false

+ runinterval = 10\ No newline at end of file#说明：每行前的-表示删除行，+表示添加行Notice: /Stage[main]/Puppet::Config/File[/etc/puppet/puppet.conf]/content: current_value {md5}58e2f9765e2994db8e8ab19a3513356e, should be {md5}fa6ae34360e0b6b7755165fc8e950a76 (noop)

Info: /Stage[main]/Puppet::Config/File[/etc/puppet/puppet.conf]: Scheduling refresh of Class[Puppet::Service] #说明：配置文件的改变将触发service.pp

Notice: Class[Puppet::Service]: Would have triggered refresh from 1 eventsInfo: Class[Puppet::Service]: Scheduling refresh of Service[puppet]

Notice: Class[Puppet::Config]: Would have triggered refresh from 1 eventsNotice: /Stage[main]/Puppet::Service/Service[puppet]/ensure: current_value stopped, should be running (noop) #说明：服务当前是关闭的，将变成运行

Info: /Stage[main]/Puppet::Service/Service[puppet]: Unscheduling refresh on Service[puppet]Notice: Class[Puppet::Service]: Would have triggered refresh from 1 events

Notice: Stage[main]: Would have triggered refresh from 3 eventsNotice: Finished catalog run in 0.70 seconds

（5）真正执行puppet agent（不带–noop参数）123456789101112131415161718[root@centostest ~]# puppet agent –server puppet.ewin.com –test

Info: Retrieving pluginfactsInfo: Retrieving pluginInfo: Caching catalog for centostest.ewin.comInfo: Applying configuration version 1415247249

Notice: /Stage[main]/Puppet::Install/Package[facter]/ensure: ensure changed 2.3.0-1.el6 to 2.2.0-1.el6

Error: Could not update: Execution of /usr/bin/yum -d 0 -e 0 -y downgrade puppet-3.7.1-1.el6 returned 1: Error Downloading Packages:

puppet-3.7.1-1.el6.noarch: failure: puppet-3.7.1-1.el6.noarch.rpm from puppetlabs-products: [Errno 256] No more mirrors to try.

Wrapped exception:Execution of /usr/bin/yum -d 0 -e 0 -y downgrade puppet-3.7.1-1.el6 returned 1: Error Downloading Packages:

puppet-3.7.1-1.el6.noarch: failure: puppet-3.7.1-1.el6.noarch.rpm from puppetlabs-products: [Errno 256] No more mirrors to try.

Error: /Stage[main]/Puppet::Install/Package[puppet]/ensure: change from 3.7.3-1.el6 to 3.7.1-1.el6 failed: Could not update: Execution of /usr/bin/yum -d 0 -e 0 -y downgrade puppet-3.7.1-1.el6 returned 1: Error Downloading Packages:

puppet-3.7.1-1.el6.noarch: failure: puppet-3.7.1-1.el6.noarch.rpm from puppetlabs-products: [Errno 256] No more mirrors to try.

Notice: /Stage[main]/Puppet::Config/File[/etc/puppet/puppet.conf]: Dependency Package[puppet] has failures: true

Warning: /Stage[main]/Puppet::Config/File[/etc/puppet/puppet.conf]: Skipping because of failed dependencies

Notice: /Stage[main]/Puppet::Service/Service[puppet]: Dependency Package[puppet] has failures: trueWarning: /Stage[main]/Puppet::Service/Service[puppet]: Skipping because of failed dependencies

Notice: Finished catalog run in 171.49 seconds报错：YUM安装失败，无法下载软件包，在客户端yum clean up再yum list恢复仓库后重试1234

567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556[root@centostest ~]# puppet agent –server=puppet.ewin.com –test

Info: Retrieving pluginfactsInfo: Retrieving pluginInfo: Caching catalog for centostest.ewin.comInfo: Applying configuration version 1415247249

Notice: /Stage[main]/Puppet::Install/Package[puppet]/ensure: ensure changed 3.7.3-1.el6 to 3.7.1-1.el6

Notice: /Stage[main]/Puppet::Config/File[/etc/puppet/puppet.conf]/content:— /etc/puppet/puppet.conf 2014-09-16 04:33:01.000000000 +0800

+++ /tmp/puppet-file20141106-35765-10dpf4t-0 2014-11-06 15:04:50.422305001 +0800@@ -1,25 +1,12 @@-[main]

– # The Puppet log directory.- # The default value is $vardir/log.- logdir = /var/log/puppet