SaltStack 五

# salt的生產實踐
	不推薦使用 file 目錄模塊模塊進行代碼部署
	不建議salt管理項目的配置文件,建議分層管理,salt只管理應用服務
	若有固定的文件服務器,可以使用 source: salt://  http://  ftp://
	SLS版本化
	使用版本化 Job Cache保存job的輸出到MySQL中
	/var/cache/salt/master/jobs/
	默認保留24小時: keep_jobs: 24

# 遠程執行
salt <target> <function> <arguments>
salt '*' cmd.run 'df -h'

# 將返回的數據持久化保存 
salt '*' test.ping --return redis_return
salt '*' test.ping --return mongo_return,redis_return,cassandra_return,elasticsearch_return ******

# return ---> mysql
https://www.unixhot.com/docs/saltstack/ref/returners/all/salt.returners.mysql.html#module-salt.returners.mysql

#  yum -y install mysql-python
1. vim /etc/salt/master  
# Which returner(s) will be used for minion's result:
#return: mysql
master_job_cache: mysql
mysql.host: '192.168.2.103'
mysql.user: 'root'
mysql.pass: '*********'
mysql.db: 'salt'
mysql.port: 3306

2. systemctl restart salt-master
3. salt '*' test.ping
4. salt '*' cmd.run 'df -h'


# 目標選擇 
salt '*' test.ping  # *匹配
salt 'linux-node[1-2].com' test.ping 
salt 'linux-node[1,2].com' test.ping 
sale -E 'linux-node(1|2).com' test.ping  # 正則匹配 -E

base:
  'linux-node(1|2).com':
    - match: pcre
    - web.lamp

salt -L 'linux-node1.com,linux-node2.com,linux-node3.com' test.ping  # List 
salt -G 'os:CentOs' test.ping # -G grains
salt -S 192.168.2.103/24 test.ping # -S ip
salt -S 192.168.2.104 test.ping 


salt '*' -b 10 test.ping # 批處理
salt '*' -G 'os:CentOS' --batch-size 25% apache.signal restart 

# 執行模塊

salt '*' network.active_tcp  # 活躍的tcp連接
salt '*' network.arp 

salt '*' network.connect archlinux.org 80 # 測試端口
salt '*' network.connect archlinux.org 80 timeout=3
salt '*' network.connect archlinux.org 80 timeout=3 family=ipv4
salt '*' network.connect archlinux.org port=53 proto=udp timeout=3
 
salt '*' network.dig archinux.org # 域名解析
salt '*' network.netstat 
salt '*' network.ping  www.baidu.com 

salt '*' state.show_top

# 日常管理
# include  包含狀態
include:
  - web.httpd  # include httd.sls
   
# 測試
salt-run manage.status
salr-run manage.versions

# 修改minion_id
	停止minion服務
	salt-key -d minionid 刪除minion
	rm -r /etc/salt/minion_id
	rm -f /etc/salt/pki
	修改配置文件id
	啓動minion服務