puppet实现nginx反代tomcat+memcached

ruopu1989 • • Linux笔记

puppet实现nginx反代tomcat+memcached

 

1、准备六台主机，一台puppet，一台nginx反代，两台memcached，两台tomcat

192.168.1.33 puppet.test.com puppet

192.168.1.34 nginx.test.com nginx

192.168.1.35 tomcat1.test.com tomcat1

192.168.1.36 tomcat2.test.com tomcat2

192.168.1.40 memcached1.test.com memcached1

192.168.1.41 memcached2.test.com memcached2

2、puppet主机

vim /etc/hosts

192.168.1.33 puppet.test.com puppet

192.168.1.34 nginx.test.com nginx

192.168.1.35 tomcat1.test.com tomcat1

192.168.1.36 tomcat2.test.com tomcat2

192.168.1.40 memcached1.test.com memcached1

192.168.1.41 memcached2.test.com memcached2

hostname set-hostname puppet.test.com

vim /etc/ssh/ssh_config

StrictHostKeyChecking=no

//加入此条，为了在连接目标主机时不再提示“Are you sure you want to continue connecting”

ssh-keygen -t rsa -P ”

ssh-copy-id -i .ssh/id_rsa.pub root@192.168.1.33

在每台主机的root目录下创建.ssh目录

scp -p .ssh/authorized_keys .ssh/id_rsa{,.pub} nginx:/root/.ssh

scp -p .ssh/authorized_keys .ssh/id_rsa{,.pub} tomcat1:/root/.ssh

scp -p .ssh/authorized_keys .ssh/id_rsa{,.pub} tomcat2:/root/.ssh

scp -p .ssh/authorized_keys .ssh/id_rsa{,.pub} memcached1:/root/.ssh

scp -p .ssh/authorized_keys .ssh/id_rsa{,.pub} memcached2:/root/.ssh

scp -p /etc/ssh/ssh_config nginx:/etc/ssh/

scp -p /etc/ssh/ssh_config tomcat1:/etc/ssh/

scp -p /etc/ssh/ssh_config tomcat2:/etc/ssh/

scp -p /etc/ssh/ssh_config memcached1:/etc/ssh/

scp -p /etc/ssh/ssh_config memcached2:/etc/ssh/

scp /etc/hosts nginx:/etc/

scp /etc/hosts tomcat1:/etc/

scp /etc/hosts tomcat2:/etc/

scp /etc/hosts memcached1:/etc/

scp /etc/hosts memcached2:/etc/

下载facter-2.4.6-1.el7.x86_64.rpm puppet-3.8.7-1.el7.noarch.rpm puppet-server-3.8.7-1.el7.noarch.rpm

scp facter-2.4.6-1.el7.x86_64.rpm puppet-3.8.7-1.el7.noarch.rpm nginx:/root

scp facter-2.4.6-1.el7.x86_64.rpm puppet-3.8.7-1.el7.noarch.rpm tomcat1:/root

scp facter-2.4.6-1.el7.x86_64.rpm puppet-3.8.7-1.el7.noarch.rpm tomcat2:/root

scp facter-2.4.6-1.el7.x86_64.rpm puppet-3.8.7-1.el7.noarch.rpm memcached1:/root

scp facter-2.4.6-1.el7.x86_64.rpm puppet-3.8.7-1.el7.noarch.rpm memcached2:/root

yum install epel-release -y

yum install facter-2.4.6-1.el7.x86_64.rpm puppet-3.8.7-1.el7.noarch.rpm puppet-server-3.8.7-1.el7.noarch.rpm -y

vim /etc/puppet/puppet.conf

environmentpath = $confdir/environments

//服务器工作在哪个环境

puppet master –no-daemonize -v

//启动服务

ss -tln

//监听8140端口

mkdir -pv /etc/puppet/enviroments/{production,testing,development}/{manifests,modules}

mkdir -pv /etc/puppet/enviroments/{production,testing,development}/modules/{nginx,tomcat,httpd,memcached,jdk8}/{manifests,files,templates,lib,spec,tests}

  • memcached

cd /etc/puppet/enviroments/development/modules/memcached

vim manifests/init.pp

class memcached {
    package{'memcached':
        name  => 'memcached',
        ensure  => latest,
    }

    service{'memcached':
        ensure  => running,
        enable  => true,
    }
}
  • jdk8

cd /etc/puppet/enviroments/development/modules/jdk8

vim manifests/init.pp

class jdk8 {
    package{'jdk8':
        name  => 'java-1.8.0-openjdk-devel',
        ensure  => latest,
    }
    file{'java.sh':
        path  => '/etc/profile.d/java.sh',
        source  => "puppet:///modules/jdk8/java.sh",
    }
}

vim files/java.sh

export JAVA_HOME=/usr
  • tomcat

/etc/puppet/environments/development

vim modules/tomcat/manifests/init.pp

class tomcat {
    package{['tomcat','tomcat-admin-webapps','tomcat-webapps','tomcat-docs-webapp']:
    ensure  => latest,
}
file{'server.xml':
    path  => '/etc/tomcat/server.xml',
    source  => "puppet:///modules/tomcat/server.xml",
}
file{'tomcat':
    path  => '/etc/sysconfig/tomcat',
    source  => "puppet:///modules/tomcat/tomcat",
}
file{'jar':
    path  => '/usr/share/java/tomcat/',
    ensure  => directory,
    source  => "puppet:///modules/tomcat/jar/",
    recurse  => true,
}
file{'tomcat-users.xml':
    path  => '/etc/tomcat/tomcat-users.xml',
    source  => "puppet:///modules/tomcat/tomcat-users.xml",
}
file{'test':
    ensure  => directory,
    path  => '/var/lib/tomcat/webapps/test',
    source  => "puppet:///modules/tomcat/test",
    recurse  => true,
}
service{'tomcat':
    ensure  => running,
    enable  => true,
}
Package['tomcat','tomcat-admin-webapps','tomcat-webapps','tomcat-docs-webapp'] -> File['server.xml'] -> File['tomcat-users.xml'] -> File['test'] -> File['tomcat'] -> File['jar'] ~> Service['tomcat']
}

vim files/server.xml

<Host ...>
<Context path="/test" docBase="test" allowLinking="true" reloadable="true">
    <Manager className="de.javakaffee.web.msm.MemcachedBackupSessionManager"
    memcachedNodes="m1:192.168.1.34:11211,m2:192.168.1.35:11211"
    failoverNodes="m1"
    requestUriIgnorePattern=".*\.(ico|png|gif|jpg|css|js)$"                    
    transcoderFactoryClass="de.javakaffee.web.msm.serializer.javolution.JavolutionTranscoderFactory"   
    />
</Context>

//allowLinking=”true”表示支持软链接，也就是前面的docBase中的test可以是软链接；path是定义访问路径的，docBase是在服务器上的相对路径。

vim files/tomcat-users.xml

<role rolename="admin-gui"/>
<role rolename="manager-gui"/>
<user name="tomcat" password="tomcat" roles="admin-gui,manager-gui" />

mkdir files/test/WEB-INF/{class,lib}

vim files/test/index.jsp

<%@ page language="java" %>
<html>
  <head><title>TomcatA</title></head>
  <body>
    <h1><font color="red">TomcatA.magedu.com</font></h1>
    <table align="centre" border="1">
      <tr>
        <td>Session ID</td>
    <% session.setAttribute("magedu.com","magedu.com"); %>
        <td><%= session.getId() %></td>
      </tr>
      <tr>
        <td>Created on</td>
        <td><%= session.getCreationTime() %></td>
     </tr>
    </table>
  </body>
</html>

下载memcached-session-manager相关包到development/modules/tomcat/files/jar中

javolution-5.4.3.1.jar      //流式化工具

msm-javolution-serializer-1.9.7.jar      //MSM支持两种模式即粘性sessions和非粘性sessions

memcached-session-manager-1.9.7.jar    //memcached会话管理器

memcached-session-manager-tc7-1.9.7.jar    //memcached会话管理器

spymemcached-2.11.1.jar    //驱动：tomcat连接memcached
  • httpd

cd /etc/puppet/enviroments/development/modules/httpd

vim manifests/init.pp

class httpd {
    package{'httpd':
        name  => 'httpd',
        ensure  => latest,
    }
    file{'httpd-tomcat.conf':
        path  => '/etc/httpd/conf.d/httpd-tomcat.conf',
        source  => "puppet:///modules/httpd/httpd-tomcat.conf",
    }
    service{'httpd.service':
        ensure  => running,
        enable  => true,
    }
    Package['httpd'] -> File['httpd.conf'] -> File['httpd-tomcat.conf'] ~> Service['httpd.service']
}

vim files/httpd-tomcat.conf

<VirtualHost *:80>
    ProxyRequests off
    ProxyPreserveHost on
    ProxyVia on
    <Proxy *>
        Require all granted
    </Proxy>
    ProxyPass / ajp://127.0.0.1:8009/
    ProxyPassReverse / ajp://127.0.0.1:8009/
//让httpd用ajp协议将请求都反代到本机的tomcat上
    <Location />
        Require all granted
    </Location>
</VirtualHost>
  • nginx

cd /etc/puppet/enviroments/development/modules/nginx

vim manifests/init.pp

class nginx {
    package{'nginx':
        name  => 'nginx',
        ensure  => 'latest',
    }
    file{'nginx.conf':
        path  => '/etc/nginx/nginx.conf',
        source  => "puppet:///modules/nginx/nginx.conf",
    }
    file{'ilinux.conf':
        path  => '/etc/nginx/conf.d/ilinux.conf',
        source  => "puppet:///modules/nginx/ilinux.conf",
    }
    service{'nginx':
        ensure  => running,
        enable  => true,
    }
     Package['nginx'] -> File['nginx.conf'] -> File['ilinux.conf'] ~> Service['nginx']
}

vim files/ngin.conf

http {
upstream tcsrvs {
        server node1.ruopu.com;
        server node2.ruopu.com;
    }
}

vim files/ilinux.conf

server {
    listen 80;
    server_name www.ilinux.io;
    location / {
        proxy_pass http://tcsrvs;
    }
}
  • 主机清单 cd /etc/puppet/enviroments/development

vim manifests/site.pp

node 'tomcat1.ruopu.com' {
    include jdk8
    include tomcat
    include httpd
}
node 'tomcat2.ruopu.com' {
    include jdk8
    include tomcat
    include httpd
}
node 'nginx.ruopu.com' {
    include nginx
}
node 'memcached1.ruopu.com' {
include memcached
}
node 'memcached2.ruopu.com' {
include memcached
}

2、到其他主机

同步时间

hostnamectl set-hostname **.test.com

yum install facter-2.4.6-1.el7.x86_64.rpm puppet-3.8.7-1.el7.noarch.rpm

vim /etc/puppet/puppet.conf

server = puppet.ruopu.com
listen = true
environment = development

vim /etc/puppet/auth.conf

path /run
method save
auth any
allow puppet.magedu.com

puppet agent –no-daemonize -v -d

3、puppet主机

puppet cert list

puppet cert sign –all

//签证

本文来自投稿，不代表Linux运维部落立场，如若转载，请注明出处：http://www.178linux.com/96316

赞 (0)
ruopu1989ruopu1989
0
上一篇 2018-04-16 10:33
下一篇 2018-04-16 14:12

相关推荐

  • 配置本地及共享yum源 Linux笔记

    配置本地及共享yum源

    使用yum安装软件 命令： 查看软件包 yum list  all        –列出yum源仓库里面的所有可用的安装包 yum  list installed   –列出所有已经安装的安装包 yum  list  available     –列出没有安装的安装包 安装软件 yum  install  software…

    2018-05-01
  • linux基础篇 Linux笔记

    linux基础篇

    1、Linux上的文件管理类命令都有哪些，其常用的使用方法及其相关示例演示。
    2、bash的工作特性之命令执行状态返回值和命令行展开所涉及的内容及其示例演示。
    3、请使用命令行展开功能来完成以下练习：
    (1)、创建/tmp目录下的：a_c, a_d, b_c, b_d
    (2)、创建/tmp/mylinux目录下的：
    mylinux/
    ├── bin
    ├── boot
    │ └── grub
    ├── dev
    ├── etc
    │ ├── rc.d
    │ │ └── init.d
    │ └── sysconfig
    │ └── network-scripts
    ├── lib
    │ └── modules
    ├── lib64
    ├── proc
    ├── sbin
    ├── sys
    ├── tmp
    ├── usr
    │ └── local
    │ ├── bin
    │ └── sbin
    └── var
    ├── lock
    ├── log
    └── run

    2018-05-20

  • 认证基础及DNS服务基础

    认证基础及DNS服务基础

    Linux笔记 2018-04-27

  • 第八周笔记

    awk 文本三剑客之一，文本处理工具 awk分为Gawk Pawk Dawk Centos用的是Gawk模式扫描处理的语言/user/bin/awk awk的路径 awk的使用语法awk [选项] `program` var=value file…..(变量赋值)awk [options] ‘program’ var=value file…awk…

    Linux笔记 2018-05-20
  • sed工具find工具与压缩打包工具基础命令详解 Linux笔记

    sed工具find工具与压缩打包工具基础命令详解

    附带上课练习题与答案

    2018-04-13

  • Linux用户、组以及正则表达式练习题

    Linux用户、组以及正则表达式练习题 复制/etc/skel目录为/home/tuser1,要求/home/tuser1及其内部文件的属组和其他用户均没有任何访问权限 [root@localhost ~]# cp -r /etc/skel /home/tuser1 [root@localhost ~]# chmod 700 /home/tuser1 -R …

    Linux笔记 2018-06-02
电话咨询
在线咨询