Saltstack基本安裝部署

配置環境
master節點 ：172.16.100.10
minion節點 ：172.16.100.20

---

msater節點

#####安裝軟體包#####
# curl -o /etc/yum.repos.d/epel-7.repo http://mirrors.aliyun.com/repo/epel-7.repo
# yum -y install salt-master salt-minion
# systemctl start salt-master.service 
# ^start^enable

#####修改minion配置檔案#####
# vim /etc/salt/minion 
master: 172.16.100.10                主節點地址
id: FQDN                             不設定的話為預設主機名，存放位置/etc/salt/minion_id
# systemctl start salt-minion
# ^start^enable
# tree /etc/salt/pki/
/etc/salt/pki/
├── master
│   ├── master.pem
│   ├── master.pub
│   ├── minions
│   ├── minions_autosign
│   ├── minions_denied
│   ├── minions_pre                  存放監控節點公鑰
│   │   ├── compute                
│   │   └── controller           
│   └── minions_rejected
└── minion
    ├── minion.pem
    └── minion.pub

minion節點

#####安裝軟體包#####
# curl -o /etc/yum.repos.d/epel-7.repo http://mirrors.aliyun.com/repo/epel-7.repo
# yum -y install salt-minion

#####修改配置檔案#####
# vim /etc/salt/minion
master: 172.16.100.10
# systemctl start salt-minion
# ^start^enable
# tree /etc/salt/pki/minion
/etc/salt/pki/minion
├── minion.pem
└── minion.pub                        服務啟動生成的公鑰會傳輸到主節點的/etc/salt/pki/master/minions_pre目錄下

master點

#####新增監控節點#####
# salt-key -a compute,controller     
# salt-key                             檢視允許通訊的監控主機
Accepted Keys:
compute
controller
Denied Keys:
Unaccepted Keys:
Rejected Keys:
# tree /etc/salt/pki
/etc/salt/pki
├── master
│   ├── master.pem
│   ├── master.pub
│   ├── minions                        公鑰從minios_pre轉到minios
│   │   ├── compute
│   │   └── controller
│   ├── minions_autosign
│   ├── minions_denied
│   ├── minions_pre
│   └── minions_rejected
└── minion
    ├── minion_master.pub
    ├── minion.pem
    └── minion.pub
# netstat -lpta |grep 4505           傳送埠
tcp        0      0 0.0.0.0:4505            0.0.0.0:*               LISTEN      67903/python        
tcp        0      0 172.16.100.10:52424     172.16.100.10:4505      ESTABLISHED 69995/python        
tcp        0      0 172.16.100.10:4505      172.16.100.20:60225     ESTABLISHED 67903/python        
tcp        0      0 172.16.100.10:4505      172.16.100.10:52424     ESTABLISHED 67903/python 
# netstat -lpta |grep 4506           接受埠
tcp        0      0 0.0.0.0:4506            0.0.0.0:*               LISTEN      67925/python        
tcp        0      0 172.16.100.10:4506      172.16.100.10:51547     ESTABLISHED 67925/python        
tcp        0      0 172.16.100.10:51547     172.16.100.10:4506      ESTABLISHED 69995/python        
tcp        0      0 172.16.100.10:4506      172.16.100.20:44469     ESTABLISHED 67925/python