Install
First => repl源
rhel6
1
2
rpm -ivh \
http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm
rhel5
1
2
rpm -ivh \
http://dl.fedoraproject.org/pub/epel/5/x86_64/epel-release-5-4.noarch.rpm
Server
1
2
3
yum install salt-master
chkconfig salt-master on
service salt-master start # salt-master -d也可以启动
Client
1
2
3
yum install salt-minion
chkconfig salt-minion on
service salt-minion start # salt-minion -d也可以启动
使用--user选项可以选择运行salt的用户
1
2
salt-master -d --user test
salt-minion -d --user test
Configure
Master基本配置
/etc/salt/master主配置文件
1
2
3
4
5
... ...
interface: 192.168.80.131 # 取消外网监听
... ...
autosign_file: /etc/salt/autosign.conf # 设定匹配主机自动接受key
... ...
restart生效
1
/etc/init.d/salt-master restart
Client基本配置
/etc/salt/minion主配置文件
1
2
3
... ...
master: 192.168.80.131 # 取消外网监听
... ...
restart生效
1
service salt-minion restart
基本命令
1
2
3
4
5
6
7
8
9
10
11
# salt-key -L # 列出当前所有key，包括接受、未接受、拒绝的key
Accepted Keys:
Unaccepted Keys:
kumu-ops-130.puppet.com
Rejected Keys:
# salt-key -A # 接受所有未认证key
The following keys are going to be accepted:
Unaccepted Keys:
kumu-ops-130.puppet.com
Proceed? [n/Y] y
Key for minion kumu-ops-130.puppet.com accepted.
添加某个key, salt-key -a keyname
删除某个key，slat-key -d keyname
1
2
# salt kumu-ops-130.puppet.com test.ping
# salt '*' test.ping # 测试所有主机连通性
匹配
匹配所有的Client
匹配符合条件的Client
salt '*.example.net' test.pingsalt '*.example.*' test.ping
单个匹配Client
salt 'web?.example.net' test.ping
匹配web1到web5
salt 'web[1-5]' test.ping
匹配web-x、web-y、web-z Client
salt 'web-[x-z]' test.ping
匹配web1-prod和web1-devel的Client
salt -E 'web1-(prod|devel)' test.ping
列表
salt -L 'web1,web2,web3' test.ping
Grains
salt配备了一个获取底层信息的接口Grains，grains的信息都是静态信息，不可变的
匹配所有的CentOS Client：
salt -G 'os:CentOS' test.ping
查看grains分类:
查看grains所有信息:
osrelease查看grains某个信息:
More…
查看salt更多的命令手册 salt '*' sys.doc