SaltStack installation & configuration

# 四大功能: 遠程執行 配置管理  雲管理 事件驅動

#-------------------------------------------------------------------------------------
# 安裝  https://www.cnblogs.com/xintiao-/p/10380656.html
	wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
	wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo
	yum clean all # 清空緩存
	yum makecache # 生成yum緩存
	# 查看salt包
	yum list salt

	# 安裝salt-master
	yum install salt-master -y
	# 安裝salt-minion
	yum install salt-minion -y

# 配置 - /etc/salt/master
interface: 0.0.0.0  #綁定到本地的0.0.0.0地址
publish_port: 4505　　#管理端口，命令發送
user: root　　　　　　#運行salt進程的用戶
worker_threads: 5　　#salt運行線程數，線程越多處理速度越快，不要超過cpu個數
ret_port: 4506　　#執行結果返回端口
pidfile: /var/run/salt-master.pid #pid文件位置
log_file: /var/log/salt/master　　#日誌文件地址

#自動接收minion的key
auto_accept: False

# 配置 - /etc/salt/minion
master: master
master_port: 4506
user: root
id: slave
acceptance_wait_time: 10
log_file: /var/log/salt/minion

systemctl start salt-minion
systemctl start salt-master

#-------------------------------------------------------------------------------------


# on 192.168.2.102  salt-master +  salt-minion
1. yum install salt-master salt-minion -y 
3. systemctl start salt-master

5. vim /etc/salt/minion
master: 192.168.2.102
6. systemctl start salt-minion
8. tree /etc/salt/pki/
/etc/salt/pki/
├── master
│   ├── master.pem
│   ├── master.pub
│   ├── minions
│   ├── minions_autosign
│   ├── minions_denied
│   ├── minions_pre
│   │   ├── 192.168.2.102
│   │   └── 192.168.2.104
│   └── minions_rejected
└── minion
    ├── minion.pem
    └── minion.pub 

9. salt-key -A # 同意所有
10. salt '*' test.ping 或 salt \* test.ping # 驗證      master使用zeromq向minion發消息 訂閱/發佈
11. lsof -n -i:4505  # 檢查所有與master 4505端口的連接
12. salt '*' cmd.run 'w'  # 在所有機器執行w命令




# on 192.168.2.104  salt-minion
2. yum install  salt-minion -y 

4. vim /etc/salt/minion
master: 192.168.2.102
7. systemctl start salt-minion