自动化运维工具Puppet

    开发puppet模块,nginx负载均衡并反代动态请求至httpd,httpd用ajp连接器将反代请求至tomcat,并部署tomcat-session-memcached

架构图为

自动化运维工具Puppet

在master主机上开发的模块为:

1、chrony模块;

├── chrony
│   ├── files
│   │   └── chrony.conf
│   ├── lib
│   ├── manifests
│   │   └── init.pp
│   ├── spec
│   ├── templates
│   └── test

vim init.pp

class chrony {
                    package{‘chrony’:
                     ensure  => latest,
        } ->

        file{‘chrony.conf’:
                    path    => ‘/etc/chrony.conf’,
                    source  => ‘puppet:///modules/chrony/chrony.conf’,
        } ~>

        service{‘chronyd’:
                    ensure  => running,
                    enable  => true,
            }
    }
vim chrony/files/chrony.conf
# Use public servers from the pool.ntp.org project.
# Please consider joining the pool (http://www.pool.ntp.org/join.html).
#server 0.centos.pool.ntp.org iburst
#server 1.centos.pool.ntp.org iburst
#server 2.centos.pool.ntp.org iburst

#在这里输入我们要根据那个主机同步时间
server 172.16.252.187 iburst
# Ignore stratum in source selection.
stratumweight 0

# Record the rate at which the system clock gains/losses time.
driftfile /var/lib/chrony/drift

# Enable kernel RTC synchronization.
rtcsync

# In first three updates step the system clock instead of slew
# if the adjustment is larger than 10 seconds.
makestep 10 3

# Allow NTP client access from local network.
#allow 192.168/16

# Listen for commands only on localhost.
bindcmdaddress 127.0.0.1
bindcmdaddress ::1

# Serve time even if not synchronized to any NTP server.
#local stratum 10

keyfile /etc/chrony.keys

# Specify the key used as password for chronyc.
commandkey 1

# Generate command key if missing.
generatecommandkey

# Disable logging of client accesses.
noclientlog

# Send a message to syslog if a clock adjustment is larger than 0.5 seconds.
logchange 0.5

logdir /var/log/chrony
#log measurements statistics tracking

2、nginx模块:

── nginx
│   ├── files
│   ├── lib
│   ├── manifests
│   │   └── init.pp
│   ├── spec
│   ├── templates
│   │   └── nginx-proxy.conf.erb
│   └── tests
init.pp;

class nginx {
        package{‘nginx’:
                ensure => latest,
                } ->
        file{‘nginx-proxy.conf’:
                path => ‘/etc/nginx/nginx.conf’,
                content => template(‘/etc/puppet/modules/nginx/templates/nginx-proxy.conf.erb’),
           } ~>
        service{‘nginx’:
                ensure => running,
                enable => true,
                restart => ‘systemctl restart nginx.service’,
                }

}
 vim nginx/templates/nginx-proxy.conf.erb
# For more information on configuration, see:
#   * Official English Documentation: http://nginx.org/en/docs/
#   * Official Russian Documentation: http://nginx.org/ru/docs/

user nginx;
worker_processes <%= @processorcount %>;
error_log /var/log/nginx/error.log;
pid /run/nginx.pid;

# Load dynamic modules. See /usr/share/nginx/README.dynamic.
include /usr/share/nginx/modules/*.conf;

events {
    worker_connections 1024;
}

http {
    log_format  main  ‘$remote_addr – $remote_user [$time_local] “$request” ‘
                      ‘$status $body_bytes_sent “$http_referer” ‘
                      ‘”$http_user_agent” “$http_x_forwarded_for”‘;

    access_log  /var/log/nginx/access.log  main;

    sendfile            on;
    tcp_nopush          on;
    tcp_nodelay         on;
    keepalive_timeout   65;
    types_hash_max_size 2048;

    include             /etc/nginx/mime.types;
    default_type        application/octet-stream;

    upstream tcs {
        server tomcat0.zcylinux.io:80;
        server tomcat1.zcylinux.io:80;
}
    # Load modular configuration files from the /etc/nginx/conf.d directory.
    # See http://nginx.org/en/docs/ngx_core_module.html#include
    # for more information.
    include /etc/nginx/conf.d/*.conf;

    server {
        listen       80 default_server;
        listen       [::]:80 default_server;
        server_name  _;
        root         /usr/share/nginx/html;

        # Load configuration files for the default server block.
        include /etc/nginx/default.d/*.conf;

        location / {
        }
        location ~* \.jsp$ {
                proxy_pass http://tcs;
        }
        error_page 404 /404.html;
            location = /40x.html {
        }

        error_page 500 502 503 504 /50x.html;
            location = /50x.html {
        }
    }
}

3、httpd模块:

├── httpd
│   ├── files
│   ├── lib
│   ├── manifests
│   │   └── init.pp
│   ├── spec
│   ├── templates
│   │   └── zcylinux-ajp.conf.erb
│   └── tests

vim init.pp


class httpd {
        package{‘httpd’:
                ensure => latest,
             } ->
        file{‘httpd-ajp.conf’:
                path => ‘/etc/httpd/conf.d/zcylinux.conf’,
                content => template(‘/etc/puppet/modules/httpd/templates/zcylinux-ajp.conf.erb’),
           } ~>
        service{‘httpd’:
                ensure => running,
                enable => true,
                restart => ‘systemctl restart httpd.service’,
          }
}
vim httpd/templates/zcylinux-ajp.conf.erb
<VirtualHost *:80>
        ServerName <%= @fqdn %>
        ProxyRequests off
        ProxyPreserveHost on
        ProxyVia on
         <Proxy *>
                Require all granted
         </Proxy>
        ProxyPass / ajp://<%= @ipaddress %>:8009/
        ProxyPassReverse / ajp://<%= @ipaddress %>:8009/
         <Location />
                Require all granted
         </Location>
</VirtualHost>

4、jdk:

── jdk
│   ├── files
│   │   └── java.sh
│   ├── lib
│   ├── manifests
│   │   └── init.pp
│   ├── spec
│   ├── templates
│   └── tests

init.pp:

class jdk {
        package{‘java-1.8.0-openjdk-devel’:
                ensure => latest,
           }
        file{‘java.sh’:
                ensure => file,
                path => ‘/etc/profile.d/java.sh’,
                source => ‘puppet:///modules/jdk/java.sh’,
                mode => 0766,
          }
}
   vim jdk/files/java.sh

   export JAVA_HOME=/usr

5、tomcat
    ├── files
    │   ├── index-testA.jsp
    │   ├── index-testB.jsp
    │   ├── javolution-5.4.3.1.jar
    │   ├── memcached-session-manager-2.1.1.jar
    │   ├── memcached-session-manager-tc7-2.1.1.jar
    │   ├── msm-javolution-serializer-2.1.1.jar
    │   ├── server.xml
    │   ├── spymemcached-2.11.1.jar
    │   └── tomcat-users.xml
    ├── lib
    ├── manifests
    │   └── init.pp
    ├── spec
    ├── templates
    └── tests
init.pp

class tomcat {
        if $fqdn =~ /(?i-mx:tomcat0.zcylinux.io)/ {
            $index=’index-testA.jsp’
        } else {
            $index=’index-testB.jsp’
        }

        package{[‘tomcat’,’tomcat-webapps’,’tomcat-admin-webapps’,’tomcat-docs-webapp’]:
                ensure => latest,
               } ->

        file{‘server.xml’:
                path => ‘/etc/tomcat/server.xml’,
                source => ‘puppet:///modules/tomcat/server.xml’,
                owner => ‘root’,
                group => ‘tomcat’,
           } ->
        exec{‘mkdir’:
                command => ‘mkdir -p /var/lib/tomcat/webapps/test/{classes,lib,WEB-INF,META-INF}’,
                path => ‘/bin:/sbin:/usr/bin:/usr/sbin’,
                creates => ‘/var/lib/tomcat/webapps/test’,
          } ->
        file{“$index”:
                path => ‘/var/lib/tomcat/webapps/test/index.jsp’,
                source => “puppet:///modules/tomcat/$index”,
          } ->
        exec{‘chown’:
                command => ‘chown -R tomcat:tomcat /var/lib/tomcat/webapps/test/’,
                path => ‘/bin:/sbin:/usr/bin:/usr/sbin’,
          } ->
        file{‘javolution-5.4.3.1.jar’:
                path => ‘/usr/share/tomcat/lib/javolution-5.4.3.1.jar’,
                source => ‘puppet:///modules/tomcat/javolution-5.4.3.1.jar’,
        }
        file{‘memcached-session-manager-tc7-2.1.1.jar’:
                path => ‘/usr/share/tomcat/lib/memcached-session-manager-tc7-2.1.1.jar’,
                source => ‘puppet:///modules/tomcat/memcached-session-manager-tc7-2.1.1.jar’,
        }
        file{‘spymemcached-2.11.1.jar’:
                path => ‘/usr/share/tomcat/lib/spymemcached-2.11.1.jar’,
                source => ‘puppet:///modules/tomcat/spymemcached-2.11.1.jar’,
        }
        file{‘memcached-session-manager-2.1.1.jar’:
                path => ‘/usr/share/tomcat/lib/memcached-session-manager-2.1.1.jar’,
                source => ‘puppet:///modules/tomcat/memcached-session-manager-2.1.1.jar’,
        }
        file{‘msm-javolution-serializer-2.1.1.jar’:
                path => ‘/usr/share/tomcat/lib/msm-javolution-serializer-2.1.1.jar’,
                source => ‘puppet:///modules/tomcat/msm-javolution-serializer-2.1.1.jar’,
        }
        service{‘tomcat’:
                ensure => running,
                enable => true,
                restart => ‘systemctl restart tomcat.service’,
                subscribe => File[‘server.xml’],
         }

}
自动化运维工具Puppet

vim server.xml

    加入一个contest,使得能够将session保存在memcached中

自动化运维工具Puppet


编辑测试页面

vim index-testA.jsp:

<%@ page language=”java” %>
<html>
  <head><title>TomcatA</title></head>
  <body>
    <h1><font color=”red”>TomcatA.magedu.com</font></h1>
    <table align=”centre” border=”1″>
      <tr>
        <td>Session ID</td>
    <% session.setAttribute(“magedu.com”,”magedu.com”); %>
        <td><%= session.getId() %></td>
      </tr>
      <tr>
        <td>Created on</td>
        <td><%= session.getCreationTime() %></td>
     </tr>
    </table>
  </body>
</html>
~        
vim index-testB.jsp:

<%@ page language=”java” %>
<html>
  <head><title>TomcatB</title></head>
  <body>
    <h1><font color=”red”>TomcatB.magedu.com</font></h1>
    <table align=”centre” border=”1″>
      <tr>
        <td>Session ID</td>
    <% session.setAttribute(“magedu.com”,”magedu.com”); %>
        <td><%= session.getId() %></td>
      </tr>
      <tr>
        <td>Created on</td>
        <td><%= session.getCreationTime() %></td>
     </tr>
    </table>
  </body>
</html>


6、 memcached
│   ├── files
│   ├── lib
│   ├── manifests
│   │   └── init.pp
│   ├── spec
│   ├── templates
│   └── tests

init.pp

class memcached {
        package{‘memcached’:
                ensure => latest,
        } ->
        service{‘memcached’:
                ensure => running,
                enable => true,
         }
}

编辑列表清单:

  vim /etc/puppet/manifests/site.pp
        node ‘ngx.zcylinux.io’ {
                include chrony
                 include nginx
            }

        node /tomcat[0-1]\.zcylinux\.io/ {
                include chrony
                include jdk
                include tomcat
                include httpd
        }
        node /mem[1-2]\.zcylinux\.io/ {
                include chrony
                include memcached
        }

master中安装:
     注意版本:

            facter, puppet, puppet-server
我这里用的是:

自动化运维工具Puppet


agent主机上:

facter, puppet


初始化(即生成CA签署agent主机过程);

        puppet master –no-daemonize -v  可视化,观察过程

也可直接开启服务:systemctl start puppetmaster.service


agnet端请求签证:puppet agent –server master.zcylinux.io –no-daemonize -v

请求后,master端需要签署:puppet cert sign Agent端主机

之后可开启服务:systemctl start puppetagent.service

    开启后,agent端会每隔一段时间想master询问,是否有更改

也可以手动触发修改

puppet kick:手动触发修改

在agent端进行设置(默认监听在8139端口
vim puppet.conf
[agent]
listen = true
3.8版本要加在main中

自动化运维工具Puppet


vim auth.conf
path /run
method save
auth any
allow master.magedu.com
在最后的上边加入以上内容,只允许master触发

自动化运维工具Puppet


master端:
        puppet kick [–host <HOST>] [–all]



测试;

自动化运维工具Puppet自动化运维工具Puppet

成功


































































原创文章,作者:Immortals、zcy,如若转载,请注明出处:http://www.178linux.com/82861

(0)
Immortals、zcyImmortals、zcy
上一篇 2017-07-28
下一篇 2017-07-29

相关推荐

  • N26_第一周作业

    一、描述计算机的组成及其功能。 计算机系统:是由硬件(Hardware)系统和软件(Software)系统两大部分构成。 1、硬件系统: 1)控制器(Control):是整个计算机的中枢神经,其功能是对程序规定的控制信息进行解释,根据其要求进行控制,调度程序、数据、地址,协调计算机各部分工作及内存与外设的访问等。2)运算器(Datapath):运算器的功能是…

    2017-02-20
  • 用户和组管理

    Linux用户和用户组管理   Linux是个多用户多任务的分时操作系统,所有要使用系统资源的用户必须向系统管理员申请一个账号,然后以这个身份进入系统。用户登陆系统是也是一种验证方式,系统通过用户的UID(Username IDentification)这种机制来识别用户的身份和权限。每个用户账号都是唯一的用户名和用户口令。用户在登陆时键入正确的用…

    Linux干货 2016-08-07
  • linux发展史

    Linux 发展史 说明 此前对linux认识模糊一知半解,近期通过学习将自己对于linux的发展总结一下方便大家日后的学习。那Linux是目前一款非常火热的开源操作系统,可是linux是什么时候出现的,又是因为什么样的原因被开发出来的呢。以下将对linux的发展历程进行详细的讲解。    目录 一、Linux发展背景 二、UINIX的诞…

    Linux干货 2016-10-14
  • Python 数据结构

    python 内置数据结构python 内置数据结构数字的处理函数: round() 五舍六入       2.5  2     2.6    3 floor() 向下取整       2.5  2     2.6    2 ceil() 向上取整       2.5  3     2.6    3 min() 取最小的       1,2,3      1…

    Linux干货 2017-09-23
  • 马哥教育网络班22期+第6周课程练习

    请详细总结vim编辑器的使用并完成以下练习题 1、复制/etc/rc.d/rc.sysinit文件至/tmp目录,将/tmp/rc.sysinit文件中的以至少一个空白字符开头的行的行首加#; cp /etc/rc.d/rc.sysinit /tmp vim /tmp/rc.sysinit :%s@^[[:space:]]\+@…

    Linux干货 2016-09-19
  • 配置HTTPS

    环境为CentOS 7.3、httpd2.4.6 一 搭建证书 CA 主机为192.168.29.3 client主机为 192.168.29.100 1 生成私钥 [root@centos7 ~]# (umask 077 ; openssl genrsa -out /etc/pki/CA/private/cakey.pem 4096) Generating…

    2017-06-06