需要軟件包：ruby,facter，puppet
前提要求客戶端能解析到服務端的hostname
puppet服務端配置：
fileserver.conf文件的配置：
[files]
path /opt/
allow *
[yum]
path /etc/yum/
allow *
site.pp文件的配置：
node default { #m所有客戶端都同步，單獨客戶端同步：node hostname
file {
"test":
name => "/tmp/1.txt",
content => template("/etc/passwd"),
}
file {
"/opt/install.log":
content => "test,my first puppetmaster",
ensure => present,
mode => 666,
owner => puppet,
group => puppet,
}
file {
"/tmp/install.log":
source => "puppet://node3.wanghaihao.cn/files/install.log",
ensure => present,
owner => puppet,
group => puppet,
mode => 666,
}
file {
"/tmp/puppet-2.6.17.tar.gz":
source => "puppet://node3.wanghaihao.cn/files/puppet-2.6.17.tar.gz",
}
# tian jia group
group {
"haihao":
gid=>1000,
ensure => present,
}
#tian jia user
user {
"haihao":
uid => 1000,
gid => 1000,
home => "/home/haihao",
shell => "/bin/bash",
password => "123456",
ensure => present,
}
#yum an zhuang ruan jian
package {
"httpd":
ensure => installed,
}
#yum xie zai ruan jian
package {
"ftpd":
ensure => absent,
}
service {
"httpd":
ensure => running, #kai qi fu wu
enable => false, #kai ji bu zi qi dong
}
service {
"atd":
ensure => stopped, #guan bi fu wu
enable => true, #kai ji zi qi dong
}
cron { "ntpdate":
command => "/usr/sbin/ntpdate 192.168.1.103",
user => root,
minute => 0,
hour => 1,
}
exec { "build-Nagios Plugins":
cwd => "/root",
command => "/bin/tar xzf nagios-plugins-1.4.15.tar.gz && cd nagios-plugins-1.4.15 && sh configure && make && make install",
creates => "/usr/local/nagios",
logoutput => on_failure,
timeout => 0,
}
exec { "exec-mkdir":
cwd => "/opt",
command => "sh /opt/hh.sh",
user => "root",
path => "/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin",
}
#tong bu mu lu
file { "/tmp/test":
owner => puppet,
group => puppet,
purge => true,
recurse => true,
force => true,
source => "puppet://node3.wanghaihao.cn/yum/",
}
}
客戶端的配置：
namespaceauth.conf文件的配置：
[fileserver]
allow *
[puppetmaster]
allow *
[puppetrunner]
allow *
[puppetbucket]
allow *
[puppetreports]
allow *
[resource]
allow *
測試：
認證：
認證報錯：時間問題，處理辦法：
客戶端：pppet --genconfig | grep certdir
rm -rf /var/lib/puppet/ssl
puppetd --test -server $hostname
服務端：
puppetca -l
puppetca -s $hostname