5.saltstack使用指南:使用saltstack部署nginx

其他 2018-06-22 16:33:25 阅读次数: 3

使用saltstack部署nginx

搭建环境：

1.服务器列表：

salt-master:   192.168.42.131
salt-minion:   192.168.42.128(minion-192.168.42.128)
               192.168.42.130(minion-192.168.42.130)

2.环境：
（1）服务器之间互相可以通信（火墙关闭或者火墙允许通信）
（2）master对minion的主机名和ip做好解析

部署步骤

1.确定整个配置的目录文件结构：

#pcre软件安装
[root@server2 prod]# tree ./pcre/
./pcre/
├── files
│   └── pcre-8.38.tar.gz
└── install.sls

1 directory, 2 files

#nginx操作用户添加
[root@server2 prod]# tree ./user/
./user/
└── www.sls

0 directories, 1 file

#nginx安装
[root@server2 prod]# tree ./nginx/
./nginx/
├── files
│   ├── nginx-1.11.6.tar.gz
│   ├── nginx.conf
│   └── nginx.service
├── install.sls
└── service.sls

1 directory, 5 files

整个思路分为：创建用户、安装基本组件、安装服务、开启服务这几个过程。

1.创建用户

在user目录的www.sls定义了www这个用户：

[root@server2 user]# cat www.sls 
www-user-group:
  group.present:
    - name: www
    - gid: 1100

  user.present:
    - name: www
    - fullname: www
    - shell: /sbin/nologin
    - uid: 1100
    - gid: 1100

2.安装基本组件
这个根据业务系统中所需nginx的模块决定，本例中以pcre为例，如果需要其他的模块可以按照类似的方式进行安装，pcre目录下的install.sls如下所示：

[root@server2 pcre]# pwd
/srv/salt/prod/pcre
[root@server2 pcre]# cat install.sls 
pcre-source-install:
  file.managed:
    - name: /usr/local/src/pcre-8.38.tar.gz
    - source: salt://pcre/files/pcre-8.38.tar.gz
    - user: root
    - group: root
    - mode: 755

  cmd.run:
    - name: cd /usr/local/src && tar xvf pcre-8.38.tar.gz && cd pcre-8.38 && ./configure --prefix=/usr/local/pcre && make && make install
    - unless: test -d /usr/local/pcre
    - require:
      - file: pcre-source-install

在/srv/salt/prod/pcre/files目录下包含pcre的源码安装包：

[root@server2 files]# pwd
/srv/salt/prod/pcre/files
[root@server2 files]# ll
total 2008
-rw-r--r-- 1 root root 2053336 Dec  6 20:58 pcre-8.38.tar.gz

3.pcre的安装是在nginx之前进行的，我们把pcre的安装包含在nginx的安装过程中，nginx的安装文件为install.sls:

[root@server2 nginx]# cat install.sls 
#包含用户创建以及pcre安装
include:
  - pcre.install
  - user.www

nginx-source-install:
  file.managed:
    - name: /usr/local/src/nginx-1.11.6.tar.gz
    - source: salt://nginx/files/nginx-1.11.6.tar.gz
    - user: root
    - group: root
    - mode: 0644

  cmd.run:
    - name: cd /usr/local/src && tar xvf nginx-1.11.6.tar.gz && cd nginx-1.11.6 && ./configure --user=www --group=www --with-http_ssl_module --with-http_stub_status_module --with-file-aio --with-http_dav_module --with-pcre=/usr/local/src/pcre-8.38 && make && make install && chown www.www /usr/local/nginx -R
    - unless: test -d /usr/local/nginx
    - require:
      - user: www-user-group
      - file: nginx-source-install
      - cmd: pcre-source-install

在nginx的install.sls文件中完成了nginx源码包的部署和配置，编译安装操作。

接下来需要设置nginx的配置文件以及启动nginx服务，尤其是在centos7
中，服务启动关闭的管理软件换为systemctl，需要编写相关service文件，以nginx为例，名称设置为nginx.service:

[root@server2 files]# cat nginx.service 
[Unit]  
Description=nginx service  
After=network.target

[Service]  
Type=forking   
ExecStart=/usr/local/nginx/sbin/nginx
ExecReload=/usr/local/nginx/sbin/nginx -s reload 
ExecStop=/usr/local/nginx/sbin/nginx -s quit  
PrivateTmp=true  

[Install]  
WantedBy=multi-user.target

4.nginx配置文件的部署和服务的开启，该内容在nginx目录的service.sls文件中：

[root@server2 nginx]# cat service.sls 
#包含nginx的安装设置
include:
  - nginx.install

nginx-init:
  file.managed:
    - name: /usr/lib/systemd/system/nginx.service
    - source: salt://nginx/files/nginx.service
    - user: root
    - group: root
    - mode: 754

/usr/local/nginx/conf/nginx.conf:
  file.managed:
    - name: /usr/local/nginx/conf/nginx.conf
    - source: salt://nginx/files/nginx.conf
    - user: www
    - group: www
    - mode: 644


nginx.service:
  cmd.run:
    - name: systemctl start nginx.service
    - require:
      - file: nginx-init
    - watch:
      - file: /usr/local/nginx/conf/nginx.conf

（1）在该文件的起始部分首先包含了nginx的安装：nginx.install；
（2）设置了nginx服务的启动脚本文件；
（3）设置nginx配置文件（这里可以使用salt的模板进行设置）；
（4）启动nginx服务；

执行部署操作

部署操作非常的简单，在/srv/salt/prod/top.sls文件中添加nginx.service，然后进行部署：

[root@server2 prod]# salt '*' state.highstate 
minion-192.168.42.130:
----------
          ID: pcre-source-install
    Function: file.managed
        Name: /usr/local/src/pcre-8.38.tar.gz
      Result: True
     Comment: File /usr/local/src/pcre-8.38.tar.gz is in the correct state
     Started: 21:11:34.125059
    Duration: 145.506 ms
     Changes:   
----------
          ID: pcre-source-install
    Function: cmd.run
        Name: cd /usr/local/src && tar xvf pcre-8.38.tar.gz && cd pcre-8.38 && ./configure --prefix=/usr/local/pcre && make && make install
      Result: True
     Comment: unless execution succeeded
     Started: 21:11:34.272172
    Duration: 9.418 ms
     Changes:   
----------
          ID: www-user-group
    Function: group.present
        Name: www
      Result: True
     Comment: Group www is present and up to date
     Started: 21:11:34.282685
    Duration: 2.538 ms
     Changes:   
----------
          ID: www-user-group
    Function: user.present
        Name: www
      Result: True
     Comment: User www is present and up to date
     Started: 21:11:34.286017
    Duration: 31.402 ms
     Changes:   
----------
          ID: nginx-source-install
    Function: file.managed
        Name: /usr/local/src/nginx-1.11.6.tar.gz
      Result: True
     Comment: File /usr/local/src/nginx-1.11.6.tar.gz is in the correct state
     Started: 21:11:34.317595
    Duration: 72.0 ms
     Changes:   
----------
          ID: nginx-source-install
    Function: cmd.run
        Name: cd /usr/local/src && tar xvf nginx-1.11.6.tar.gz && cd nginx-1.11.6 && ./configure --user=www --group=www --with-http_ssl_module --with-http_stub_status_module --with-file-aio --with-http_dav_module --with-pcre=/usr/local/src/pcre-8.38 && make && make install && chown www.www /usr/local/nginx -R
      Result: True
     Comment: unless execution succeeded
     Started: 21:11:34.390782
    Duration: 9.355 ms
     Changes:   
----------
          ID: nginx-init
    Function: file.managed
        Name: /usr/lib/systemd/system/nginx.service
      Result: True
     Comment: File /usr/lib/systemd/system/nginx.service is in the correct state
     Started: 21:11:34.400385
    Duration: 55.461 ms
     Changes:   
----------
          ID: /usr/local/nginx/conf/nginx.conf
    Function: file.managed
      Result: True
     Comment: File /usr/local/nginx/conf/nginx.conf is in the correct state
     Started: 21:11:34.455996
    Duration: 48.59 ms
     Changes:   
----------
          ID: nginx.service
    Function: cmd.run
        Name: systemctl start nginx.service
      Result: True
     Comment: Command "systemctl start nginx.service" run
     Started: 21:11:34.505367
    Duration: 15.254 ms
     Changes:   
              ----------
              pid:
                  22253
              retcode:
                  0
              stderr:
              stdout:

Summary for minion-192.168.42.130
------------
Succeeded: 9 (changed=1)
Failed:    0
------------
Total states run:     9
Total run time: 389.524 ms
minion-192.168.42.128:
----------
          ID: pcre-source-install
    Function: file.managed
        Name: /usr/local/src/pcre-8.38.tar.gz
      Result: True
     Comment: File /usr/local/src/pcre-8.38.tar.gz is in the correct state
     Started: 21:11:34.153260
    Duration: 135.174 ms
     Changes:   
----------
          ID: pcre-source-install
    Function: cmd.run
        Name: cd /usr/local/src && tar xvf pcre-8.38.tar.gz && cd pcre-8.38 && ./configure --prefix=/usr/local/pcre && make && make install
      Result: True
     Comment: unless execution succeeded
     Started: 21:11:34.289558
    Duration: 9.864 ms
     Changes:   
----------
          ID: www-user-group
    Function: group.present
        Name: www
      Result: True
     Comment: Group www is present and up to date
     Started: 21:11:34.300283
    Duration: 3.019 ms
     Changes:   
----------
          ID: www-user-group
    Function: user.present
        Name: www
      Result: True
     Comment: User www is present and up to date
     Started: 21:11:34.303914
    Duration: 29.652 ms
     Changes:   
----------
          ID: nginx-source-install
    Function: file.managed
        Name: /usr/local/src/nginx-1.11.6.tar.gz
      Result: True
     Comment: File /usr/local/src/nginx-1.11.6.tar.gz is in the correct state
     Started: 21:11:34.334260
    Duration: 75.035 ms
     Changes:   
----------
          ID: nginx-source-install
    Function: cmd.run
        Name: cd /usr/local/src && tar xvf nginx-1.11.6.tar.gz && cd nginx-1.11.6 && ./configure --user=www --group=www --with-http_ssl_module --with-http_stub_status_module --with-file-aio --with-http_dav_module --with-pcre=/usr/local/src/pcre-8.38 && make && make install && chown www.www /usr/local/nginx -R
      Result: True
     Comment: unless execution succeeded
     Started: 21:11:34.409912
    Duration: 8.683 ms
     Changes:   
----------
          ID: nginx-init
    Function: file.managed
        Name: /usr/lib/systemd/system/nginx.service
      Result: True
     Comment: File /usr/lib/systemd/system/nginx.service is in the correct state
     Started: 21:11:34.418893
    Duration: 50.052 ms
     Changes:   
----------
          ID: /usr/local/nginx/conf/nginx.conf
    Function: file.managed
      Result: True
     Comment: File /usr/local/nginx/conf/nginx.conf is in the correct state
     Started: 21:11:34.469076
    Duration: 47.592 ms
     Changes:   
----------
          ID: nginx.service
    Function: cmd.run
        Name: systemctl start nginx.service
      Result: True
     Comment: Command "systemctl start nginx.service" run
     Started: 21:11:34.517608
    Duration: 21.014 ms
     Changes:   
              ----------
              pid:
                  23156
              retcode:
                  0
              stderr:
              stdout:

Summary for minion-192.168.42.128
------------
Succeeded: 9 (changed=1)
Failed:    0
------------
Total states run:     9
Total run time: 380.085 ms

在对应的节点192.168.42.128上查看nginx是否开启：

[root@server1 ~]# systemctl status nginx.service 
● nginx.service - nginx service
   Loaded: loaded (/usr/lib/systemd/system/nginx.service; disabled; vendor preset: disabled)
   Active: active (running) since Wed 2016-12-07 14:42:32 CST; 6h ago
  Process: 19352 ExecStart=/usr/local/nginx/sbin/nginx (code=exited, status=0/SUCCESS)
 Main PID: 19353 (nginx)
   Memory: 1.4M
   CGroup: /system.slice/nginx.service
           ├─19353 nginx: master process /usr/local/nginx/sbin/nginx
           └─19354 nginx: worker process

Dec 07 14:42:32 server1.example.com systemd[1]: Starting nginx service...
Dec 07 14:42:32 server1.example.com systemd[1]: Started nginx service.
Dec 07 21:11:34 server1.example.com systemd[1]: Started nginx service.

使用浏览器访问该页面，查看页面能否访问：
这里写图片描述

小结

在个基础上还可以添加php模块，丰富nginx的功能。后续的章节将会进行介绍。

猜你喜欢

转载自blog.csdn.net/linux_player_c/article/details/53506091
今日推荐
火速冲上 GitHub 热榜 —— 开源编程语言、框架哪有这么可爱？
北京人形机器人创新中心发布全球首个纯电驱拟人奔跑的全尺寸人形机器人“天工”
LFOSSA 源来如此公开课 | 掌握云原生未来：CNCF 认证全面攻略与备考秘籍
国产云输入法——仅华为无云端数据上传安全问题
开源日报 | 工业开源项目OGG 1.0；姐姐，你要和我一起配置火狐吗；苹果AI遥遥落后？Fedora 40
开放签电子签章：停止新增，优化体验，前进更进（五一假期前工作）
周排行
Metasploit文件目录与入侵基本概念
跨域(CORS)请求问题[No 'Access-Control-Allow-Origin' header is present on the requested resource]常见解决方案
CodeIgniter 源码解读之 CodeIgniter.php（二）
SAS入门之（四）改变数据类型
初识元组
[数学建模]数学建模算法和模型（B站视频）（二）
Nginx 服务器源码安装配置流程
C#实现语音视频录制 【基于MCapture + MFile】
开发进度4
下载安装vue的方法网址
每日归档
更多
2024-04-28(0)
2024-04-27(56)
2024-04-26(39)
2024-04-25(22)
2024-04-24(36)
2024-04-23(26)
2024-04-22(39)
2024-04-21(0)
2024-04-20(6)
2024-04-19(5)

代码天地 © 2018 codetd.com

境外服务器   最新电视剧2022