目錄
- 環境規格：
- 第一步：什么是SaltStack Master
- 第二步：更新SaltStack Master CentOS 8軟體包
- 第三步：SaltStack Master上安裝Python
- 第四步：CentOS 8上安裝SaltStack官方Yum存盤庫
- 第五步：CentOS 8上安裝SaltStack Master
- 第六步：CentOS 8上配置SaltStack Master
- 第七步：SaltStack Master配置CentOS 8防火墻
- 第八步：管理SaltStack公鑰
- 第九步：什么是SaltStack Minion
- 第十步：更新SaltStack MinionCentOS 8軟體包
- 第十一步：SaltStack Minion上安裝Python
- 第十二步：CentOS 8上安裝SaltStack官方Yum存盤庫
- 第十三步：CentOS 8上安裝SaltStack Minion
- 第十四步：CentOS 8上配置SaltStack Minion
- 第十五步：SaltStack主服務器中添加SaltStack Minion
- 第十六步：SaltStack Minion上的命令的遠程執行安裝HTTP服務
在本文中，您將學習如何在CentOS 8上安裝SaltStack Master和 SaltStack Minion，
環境規格：
? SaltStack Master配置
-
CPU -3.4 GHz（2核）
-
記憶體-4 GB
-
儲存空間-50 GB
-
作業系統-CentOS 8.2
-
主機名– saltstack-master.lianglab.cn
-
IP地址-192.168.6.175/24
SaltStack Minion配置
-
CPU -3.4 GHz（2核）
-
記憶體-4 GB
-
儲存空間-50 GB
-
作業系統-CentOS 8.2
-
主機名– saltstack-minion.lianglab.cn
-
IP地址-192.168.6.190/24
SaltStack Master和Minion hostname修改
[root@Master yum.repos.d]# hostnamectl set-hostname saltstack-master.lianglab.cn [root@Minion yum.repos.d]# hostnamectl set-hostname saltstack-minion.lianglab.cnSaltStack Master和Minion hosts修改
[root@saltstack-master yum.repos.d]# cat /etc/hosts 127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6 192.168.6.175 saltstack-master.lianglab.cn 192.168.6.190 saltstack-minion.lianglab.cn [root@saltstack-minion ~]# cat /etc/hosts 127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6 192.168.6.175 saltstack-master.lianglab.cn 192.168.6.190 saltstack-minion.lianglab.cn
第一步：什么是SaltStack Master
SaltStack或Salt是基于Python的開源軟體，用于基于事件的IT自動化，遠程任務執行和配置管理，SaltStack支持“基礎架構即代碼”方法來進行資料中心系統和網路的部署和管理，配置自動化，SecOps編排，漏洞修復以及混合云控制，（由維基百科提供）
SaltStack Master是服務器節點，它是控制所有Salstack Minions的中央服務器，Saltstack Master擁有SaltStack奴才的清單和公鑰，并對這些奴才執行遠程執行，
第二步：更新SaltStack Master CentOS 8軟體包
使用ssh工具以root用戶身份與saltstack-master.lianglab.cn連接，
將所有現有軟體包更新為最新的可用版本，
[root@saltstack-master ~]# dnf update -y
...
Upgraded:
NetworkManager-1:1.22.8-5.el8_2.x86_64
NetworkManager-libnm-1:1.22.8-5.el8_2.x86_64
NetworkManager-team-1:1.22.8-5.el8_2.x86_64
NetworkManager-tui-1:1.22.8-5.el8_2.x86_64
bind-export-libs-32:9.11.13-5.el8_2.x86_64
dbus-1:1.12.8-10.el8_2.x86_64
dbus-common-1:1.12.8-10.el8_2.noarch
dbus-daemon-1:1.12.8-10.el8_2.x86_64
dbus-libs-1:1.12.8-10.el8_2.x86_64
dbus-tools-1:1.12.8-10.el8_2.x86_64
dnf-4.2.17-7.el8_2.noarch
dnf-data-4.2.17-7.el8_2.noarch
gnutls-3.6.8-11.el8_2.x86_64
grub2-common-1:2.02-87.el8_2.noarch
grub2-pc-1:2.02-87.el8_2.x86_64
grub2-pc-modules-1:2.02-87.el8_2.noarch
grub2-tools-1:2.02-87.el8_2.x86_64
grub2-tools-efi-1:2.02-87.el8_2.x86_64
grub2-tools-extra-1:2.02-87.el8_2.x86_64
grub2-tools-minimal-1:2.02-87.el8_2.x86_64
iptables-1.8.4-10.el8_2.1.x86_64
iptables-ebtables-1.8.4-10.el8_2.1.x86_64
iptables-libs-1.8.4-10.el8_2.1.x86_64
kernel-tools-4.18.0-193.14.2.el8_2.x86_64
kernel-tools-libs-4.18.0-193.14.2.el8_2.x86_64
libdnf-0.39.1-6.el8_2.x86_64
libnghttp2-1.33.0-3.el8_2.1.x86_64
microcode_ctl-4:20191115-4.20200609.1.el8_2.x86_64
open-vm-tools-11.0.5-3.el8.x86_64
python3-dnf-4.2.17-7.el8_2.noarch
python3-hawkey-0.39.1-6.el8_2.x86_64
python3-libdnf-0.39.1-6.el8_2.x86_64
python3-perf-4.18.0-193.14.2.el8_2.x86_64
selinux-policy-3.14.3-41.el8_2.5.noarch
selinux-policy-targeted-3.14.3-41.el8_2.5.noarch
systemd-239-31.el8_2.2.x86_64
systemd-libs-239-31.el8_2.2.x86_64
systemd-pam-239-31.el8_2.2.x86_64
systemd-udev-239-31.el8_2.2.x86_64
yum-4.2.17-7.el8_2.noarch
Installed:
kernel-4.18.0-193.14.2.el8_2.x86_64
kernel-core-4.18.0-193.14.2.el8_2.x86_64
kernel-modules-4.18.0-193.14.2.el8_2.x86_64
Removed:
kernel-4.18.0-147.5.1.el8_1.x86_64
kernel-core-4.18.0-147.5.1.el8_1.x86_64
kernel-modules-4.18.0-147.5.1.el8_1.x86_64
Complete!
我們的CentOS 8軟體包已成功更新，
第三步：SaltStack Master上安裝Python
SaltStack用Python撰寫，因此，它需要Python語言支持才能編譯和執行SaltStack命令，
Python3在默認的CentOS AppStream中可用，因此，我們可以使用dnf命令安裝它，
[root@saltstack-master src]# dnf install -y python3
Last metadata expiration check: 0:16:42 ago on Tue 11 Aug 2020 12:07:17 AM PKT.
Dependencies resolved.
================================================================================
Package Arch Version Repo Size
================================================================================
Installing:
python36 x86_64 3.6.8-2.module_el8.1.0+245+c39af44f AppStream 19 k
Installing dependencies:
python3-pip noarch 9.0.3-16.el8 AppStream 19 k
python3-setuptools noarch 39.2.0-5.el8 BaseOS 162 k
Enabling module streams:
python36 3.6
Transaction Summary
================================================================================
Install 3 Packages
Total download size: 201 k
Installed size: 466 k
Downloading Packages:
(1/3): python3-setuptools-39.2.0-5.el8.noarch.r 658 kB/s | 162 kB 00:00
(2/3): python3-pip-9.0.3-16.el8.noarch.rpm 641 B/s | 19 kB 00:31
(3/3): python36-3.6.8-2.module_el8.1.0+245+c39a 627 B/s | 19 kB 00:31
--------------------------------------------------------------------------------
Total 6.2 kB/s | 201 kB 00:32
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Installing : python3-setuptools-39.2.0-5.el8.noarch 1/3
Installing : python36-3.6.8-2.module_el8.1.0+245+c39af44f.x86_64 2/3
Running scriptlet: python36-3.6.8-2.module_el8.1.0+245+c39af44f.x86_64 2/3
Installing : python3-pip-9.0.3-16.el8.noarch 3/3
Running scriptlet: python3-pip-9.0.3-16.el8.noarch 3/3
Verifying : python3-pip-9.0.3-16.el8.noarch 1/3
Verifying : python36-3.6.8-2.module_el8.1.0+245+c39af44f.x86_64 2/3
Verifying : python3-setuptools-39.2.0-5.el8.noarch 3/3
Installed:
python3-pip-9.0.3-16.el8.noarch
python3-setuptools-39.2.0-5.el8.noarch
python36-3.6.8-2.module_el8.1.0+245+c39af44f.x86_64
Complete!
Python 3.6已安裝在CentOS 8服務器上，
第四步：CentOS 8上安裝SaltStack官方Yum存盤庫
盡管可以通過EPEL（企業Linux的額外軟體包） yum存盤庫獲得SaltStack軟體包，但是，如果要安裝最新版本，則應安裝SaltStack的官方yum存盤庫，
使用以下命令在CentOS 8上安裝SaltStack官方yum存盤庫，
[root@saltstack-master yum.repos.d]# wget https://repo.saltstack.com/py3/redhat/salt-py3-repo-latest.el8.noarch.rpm
[root@saltstack-master yum.repos.d]# dnf -y install salt-py3-repo-latest.el8.noarch.rpm
Last metadata expiration check: 1 day, 1:25:58 ago on Tue 15 Dec 2020 08:46:52 PM CST.
Dependencies resolved.
============================================================================================================================
Package Architecture Version Repository Size
============================================================================================================================
Installing:
salt-py3-repo noarch latest-4.el8 @commandline 8.9 k
Transaction Summary
============================================================================================================================
Install 1 Package
Total size: 8.9 k
Installed size: 2.0 k
Downloading Packages:
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Installing : salt-py3-repo-latest-4.el8.noarch 1/1
Verifying : salt-py3-repo-latest-4.el8.noarch 1/1
Installed products updated.
Installed:
salt-py3-repo-latest-4.el8.noarch
Complete!
[root@saltstack-master yum.repos.d]#
為新安裝的yum存盤庫構建快取，
[root@saltstack-master yum.repos.d]# dnf makecache
CentOS-8 - Base - mirrors.tongdun.cn 2.1 MB/s | 3.9 kB 00:00
CentOS-8 - Extras - mirrors.tongdun.cn 1.1 MB/s | 1.5 kB 00:00
CentOS-8 - AppStream - mirrors.tongdun.cn 2.6 MB/s | 4.3 kB 00:00
Extra Packages for Enterprise Linux 8 - x86_64 3.0 MB/s | 4.7 kB 00:00
Extra Packages for Enterprise Linux 8 - x86_64 - Debug 1.6 MB/s | 3.0 kB 00:00
第五步：CentOS 8上安裝SaltStack Master
我們添加了SaltStack yum存盤庫，現在我們可以使用dnf命令輕松安裝SaltStack軟體包的最新版本，
安裝SaltStack主服務器所需的必要的SaltStack軟體包，
[root@saltstack-master yum.repos.d]# dnf install -y salt-master salt-minion salt-ssh salt-syndic salt-cloud salt-api
Last metadata expiration check: 0:00:58 ago on Wed 16 Dec 2020 10:22:18 PM CST.
Dependencies resolved.
============================================================================================================================
Package Architecture Version Repository Size
============================================================================================================================
Installing:
salt-api noarch 3002.2-1.el8 salt-py3-latest 24 k
salt-cloud noarch 3002.2-1.el8 salt-py3-latest 27 k
salt-master noarch 3002.2-1.el8 salt-py3-latest 3.1 M
salt-minion noarch 3002.2-1.el8 salt-py3-latest 43 k
salt-ssh noarch 3002.2-1.el8 salt-py3-latest 25 k
salt-syndic noarch 3002.2-1.el8 salt-py3-latest 24 k
Upgrading:
dnf-plugins-core noarch 4.0.12-4.el8_2 base 64 k
python3-dnf-plugins-core noarch 4.0.12-4.el8_2 base 204 k
Installing dependencies:
libsodium x86_64 1.0.18-2.el8 epel 162 k
libunwind x86_64 1.3.1-3.el8 epel 75 k
openpgm x86_64 5.2.122-21.el8 epel 180 k
python3-babel noarch 2.5.1-5.el8 AppStream 4.8 M
python3-cheroot noarch 8.2.1-1.el8 epel 145 k
python3-cherrypy noarch 18.4.0-1.el8 epel 384 k
python3-distro noarch 1.4.0-2.module_el8.1.0+245+c39af44f AppStream 37 k
python3-jaraco noarch 6.2-6.el8 epel 11 k
python3-jaraco-functools noarch 2.0-4.el8 epel 18 k
python3-jinja2 noarch 2.10.1-2.el8_0 AppStream 538 k
python3-libcloud noarch 2.4.0-1.el8 salt-py3-latest 1.4 M
python3-m2crypto x86_64 0.35.2-5.el8 epel 303 k
python3-markupsafe x86_64 0.23-19.el8 AppStream 39 k
python3-more-itertools noarch 7.2.0-3.el8 epel 59 k
python3-msgpack x86_64 0.6.2-1.el8 epel 92 k
python3-portend noarch 2.6-1.el8 epel 16 k
python3-psutil x86_64 5.6.3-5.el8 epel 396 k
python3-tempora noarch 1.14.1-5.el8 epel 29 k
python3-trustme noarch 0.6.0-4.el8 epel 27 k
python3-zc-lockfile noarch 2.0-2.el8 epel 23 k
python3-zmq x86_64 19.0.0-1.el8 epel 418 k
salt noarch 3002.2-1.el8 salt-py3-latest 10 M
yum-utils noarch 4.0.12-4.el8_2 base 66 k
zeromq x86_64 4.3.3-1.el8 epel 478 k
Transaction Summary
============================================================================================================================
Install 30 Packages
Upgrade 2 Packages
Total download size: 24 M
Downloading Packages:
(1/32): yum-utils-4.0.12-4.el8_2.noarch.rpm 3.5 MB/s | 66 kB 00:00
(2/32): python3-distro-1.4.0-2.module_el8.1.0+245+c39af44f.noarch.rpm 937 kB/s | 37 kB 00:00
(3/32): python3-jinja2-2.10.1-2.el8_0.noarch.rpm 14 MB/s | 538 kB 00:00
(4/32): python3-markupsafe-0.23-19.el8.x86_64.rpm 2.2 MB/s | 39 kB 00:00
(5/32): libunwind-1.3.1-3.el8.x86_64.rpm 5.0 MB/s | 75 kB 00:00
(6/32): libsodium-1.0.18-2.el8.x86_64.rpm 6.6 MB/s | 162 kB 00:00
(7/32): openpgm-5.2.122-21.el8.x86_64.rpm 7.6 MB/s | 180 kB 00:00
(8/32): python3-babel-2.5.1-5.el8.noarch.rpm 38 MB/s | 4.8 MB 00:00
(9/32): python3-cheroot-8.2.1-1.el8.noarch.rpm 2.9 MB/s | 145 kB 00:00
(10/32): python3-jaraco-6.2-6.el8.noarch.rpm 5.5 MB/s | 11 kB 00:00
(11/32): python3-jaraco-functools-2.0-4.el8.noarch.rpm 8.3 MB/s | 18 kB 00:00
(12/32): python3-cherrypy-18.4.0-1.el8.noarch.rpm 9.9 MB/s | 384 kB 00:00
(13/32): python3-msgpack-0.6.2-1.el8.x86_64.rpm 7.8 MB/s | 92 kB 00:00
(14/32): python3-portend-2.6-1.el8.noarch.rpm 4.6 MB/s | 16 kB 00:00
(15/32): python3-more-itertools-7.2.0-3.el8.noarch.rpm 2.9 MB/s | 59 kB 00:00
(16/32): python3-m2crypto-0.35.2-5.el8.x86_64.rpm 13 MB/s | 303 kB 00:00
(17/32): python3-tempora-1.14.1-5.el8.noarch.rpm 11 MB/s | 29 kB 00:00
(18/32): python3-zc-lockfile-2.0-2.el8.noarch.rpm 1.7 MB/s | 23 kB 00:00
(19/32): python3-trustme-0.6.0-4.el8.noarch.rpm 1.8 MB/s | 27 kB 00:00
(20/32): python3-psutil-5.6.3-5.el8.x86_64.rpm 16 MB/s | 396 kB 00:00
(21/32): python3-zmq-19.0.0-1.el8.x86_64.rpm 18 MB/s | 418 kB 00:00
(22/32): zeromq-4.3.3-1.el8.x86_64.rpm 13 MB/s | 478 kB 00:00
(23/32): salt-api-3002.2-1.el8.noarch.rpm 12 kB/s | 24 kB 00:01
(24/32): salt-cloud-3002.2-1.el8.noarch.rpm 22 kB/s | 27 kB 00:01
(25/32): python3-libcloud-2.4.0-1.el8.noarch.rpm 124 kB/s | 1.4 MB 00:11
(26/32): salt-minion-3002.2-1.el8.noarch.rpm 33 kB/s | 43 kB 00:01
(27/32): salt-master-3002.2-1.el8.noarch.rpm 322 kB/s | 3.1 MB 00:09
(28/32): salt-ssh-3002.2-1.el8.noarch.rpm 55 kB/s | 25 kB 00:00
(29/32): dnf-plugins-core-4.0.12-4.el8_2.noarch.rpm 21 MB/s | 64 kB 00:00
(30/32): python3-dnf-plugins-core-4.0.12-4.el8_2.noarch.rpm 38 MB/s | 204 kB 00:00
(31/32): salt-syndic-3002.2-1.el8.noarch.rpm 40 kB/s | 24 kB 00:00
(32/32): salt-3002.2-1.el8.noarch.rpm 373 kB/s | 10 MB 00:28
-------------------------------------------------------------------------------------------------------------------------------
Total 833 kB/s | 24 MB 00:29
warning: /var/cache/dnf/salt-py3-latest-ab32c742cbd8c211/packages/python3-libcloud-2.4.0-1.el8.noarch.rpm: Header V4 RSA/SHA256 Signature, key ID de57bfbe: NOKEY
SaltStack Latest Release Channel Python 3 for RHEL/Centos 8 1.7 MB/s | 1.7 kB 00:00
Importing GPG key 0xDE57BFBE:
Userid : "SaltStack Packaging Team <[email protected]>"
Fingerprint: 754A 1A7A E731 F165 D5E6 D4BD 0E08 A149 DE57 BFBE
From : /etc/pki/rpm-gpg/saltstack-signing-key
Key imported successfully
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Installing : python3-more-itertools-7.2.0-3.el8.noarch 1/34
Installing : python3-markupsafe-0.23-19.el8.x86_64 2/34
Upgrading : python3-dnf-plugins-core-4.0.12-4.el8_2.noarch 3/34
Upgrading : dnf-plugins-core-4.0.12-4.el8_2.noarch 4/34
Installing : yum-utils-4.0.12-4.el8_2.noarch 5/34
Installing : python3-libcloud-2.4.0-1.el8.noarch 6/34
Installing : python3-zc-lockfile-2.0-2.el8.noarch 7/34
Installing : python3-trustme-0.6.0-4.el8.noarch 8/34
Installing : python3-psutil-5.6.3-5.el8.x86_64 9/34
Installing : python3-msgpack-0.6.2-1.el8.x86_64 10/34
Installing : python3-m2crypto-0.35.2-5.el8.x86_64 11/34
Installing : python3-jaraco-6.2-6.el8.noarch 12/34
Installing : python3-jaraco-functools-2.0-4.el8.noarch 13/34
Installing : python3-cheroot-8.2.1-1.el8.noarch 14/34
Installing : python3-tempora-1.14.1-5.el8.noarch 15/34
Installing : python3-portend-2.6-1.el8.noarch 16/34
Installing : python3-cherrypy-18.4.0-1.el8.noarch 17/34
Installing : openpgm-5.2.122-21.el8.x86_64 18/34
Installing : libunwind-1.3.1-3.el8.x86_64 19/34
Installing : libsodium-1.0.18-2.el8.x86_64 20/34
Installing : zeromq-4.3.3-1.el8.x86_64 21/34
Installing : python3-zmq-19.0.0-1.el8.x86_64 22/34
Installing : python3-distro-1.4.0-2.module_el8.1.0+245+c39af44f.noarch 23/34
Installing : python3-babel-2.5.1-5.el8.noarch 24/34
Installing : python3-jinja2-2.10.1-2.el8_0.noarch 25/34
Installing : salt-3002.2-1.el8.noarch 26/34
Installing : salt-master-3002.2-1.el8.noarch 27/34
Running scriptlet: salt-master-3002.2-1.el8.noarch 27/34
Installing : salt-api-3002.2-1.el8.noarch 28/34
Running scriptlet: salt-api-3002.2-1.el8.noarch 28/34
Installing : salt-cloud-3002.2-1.el8.noarch 29/34
Installing : salt-syndic-3002.2-1.el8.noarch 30/34
Running scriptlet: salt-syndic-3002.2-1.el8.noarch 30/34
Installing : salt-minion-3002.2-1.el8.noarch 31/34
Running scriptlet: salt-minion-3002.2-1.el8.noarch 31/34
Installing : salt-ssh-3002.2-1.el8.noarch 32/34
Cleanup : dnf-plugins-core-4.0.12-3.el8.noarch 33/34
Cleanup : python3-dnf-plugins-core-4.0.12-3.el8.noarch 34/34
Running scriptlet: python3-dnf-plugins-core-4.0.12-3.el8.noarch 34/34
Verifying : yum-utils-4.0.12-4.el8_2.noarch 1/34
Verifying : python3-babel-2.5.1-5.el8.noarch 2/34
Verifying : python3-distro-1.4.0-2.module_el8.1.0+245+c39af44f.noarch 3/34
Verifying : python3-jinja2-2.10.1-2.el8_0.noarch 4/34
Verifying : python3-markupsafe-0.23-19.el8.x86_64 5/34
Verifying : libsodium-1.0.18-2.el8.x86_64 6/34
Verifying : libunwind-1.3.1-3.el8.x86_64 7/34
Verifying : openpgm-5.2.122-21.el8.x86_64 8/34
Verifying : python3-cheroot-8.2.1-1.el8.noarch 9/34
Verifying : python3-cherrypy-18.4.0-1.el8.noarch 10/34
Verifying : python3-jaraco-6.2-6.el8.noarch 11/34
Verifying : python3-jaraco-functools-2.0-4.el8.noarch 12/34
Verifying : python3-m2crypto-0.35.2-5.el8.x86_64 13/34
Verifying : python3-more-itertools-7.2.0-3.el8.noarch 14/34
Verifying : python3-msgpack-0.6.2-1.el8.x86_64 15/34
Verifying : python3-portend-2.6-1.el8.noarch 16/34
Verifying : python3-psutil-5.6.3-5.el8.x86_64 17/34
Verifying : python3-tempora-1.14.1-5.el8.noarch 18/34
Verifying : python3-trustme-0.6.0-4.el8.noarch 19/34
Verifying : python3-zc-lockfile-2.0-2.el8.noarch 20/34
Verifying : python3-zmq-19.0.0-1.el8.x86_64 21/34
Verifying : zeromq-4.3.3-1.el8.x86_64 22/34
Verifying : python3-libcloud-2.4.0-1.el8.noarch 23/34
Verifying : salt-3002.2-1.el8.noarch 24/34
Verifying : salt-api-3002.2-1.el8.noarch 25/34
Verifying : salt-cloud-3002.2-1.el8.noarch 26/34
Verifying : salt-master-3002.2-1.el8.noarch 27/34
Verifying : salt-minion-3002.2-1.el8.noarch 28/34
Verifying : salt-ssh-3002.2-1.el8.noarch 29/34
Verifying : salt-syndic-3002.2-1.el8.noarch 30/34
Verifying : dnf-plugins-core-4.0.12-4.el8_2.noarch 31/34
Verifying : dnf-plugins-core-4.0.12-3.el8.noarch 32/34
Verifying : python3-dnf-plugins-core-4.0.12-4.el8_2.noarch 33/34
Verifying : python3-dnf-plugins-core-4.0.12-3.el8.noarch 34/34
Installed products updated.
Upgraded:
dnf-plugins-core-4.0.12-4.el8_2.noarch python3-dnf-plugins-core-4.0.12-4.el8_2.noarch
Installed:
libsodium-1.0.18-2.el8.x86_64 libunwind-1.3.1-3.el8.x86_64
openpgm-5.2.122-21.el8.x86_64 python3-babel-2.5.1-5.el8.noarch
python3-cheroot-8.2.1-1.el8.noarch python3-cherrypy-18.4.0-1.el8.noarch
python3-distro-1.4.0-2.module_el8.1.0+245+c39af44f.noarch python3-jaraco-6.2-6.el8.noarch
python3-jaraco-functools-2.0-4.el8.noarch python3-jinja2-2.10.1-2.el8_0.noarch
python3-libcloud-2.4.0-1.el8.noarch python3-m2crypto-0.35.2-5.el8.x86_64
python3-markupsafe-0.23-19.el8.x86_64 python3-more-itertools-7.2.0-3.el8.noarch
python3-msgpack-0.6.2-1.el8.x86_64 python3-portend-2.6-1.el8.noarch
python3-psutil-5.6.3-5.el8.x86_64 python3-tempora-1.14.1-5.el8.noarch
python3-trustme-0.6.0-4.el8.noarch python3-zc-lockfile-2.0-2.el8.noarch
python3-zmq-19.0.0-1.el8.x86_64 salt-3002.2-1.el8.noarch
salt-api-3002.2-1.el8.noarch salt-cloud-3002.2-1.el8.noarch
salt-master-3002.2-1.el8.noarch salt-minion-3002.2-1.el8.noarch
salt-ssh-3002.2-1.el8.noarch salt-syndic-3002.2-1.el8.noarch
yum-utils-4.0.12-4.el8_2.noarch zeromq-4.3.3-1.el8.x86_64
Complete!
[root@saltstack-master yum.repos.d]#
在這里，我們還將在SaltStack Master上安裝salt- minion軟體包，因為Minion會收集和發送SaltStack Master服務器的系統指標，即使在同一服務器上也是如此，請參考我們的下一篇文章，[如何在CentOS 8上安裝SaltStack Minion]
第六步：CentOS 8上配置SaltStack Master
SaltStack的組態檔位于/etc/salt目錄中，
默認配置足夠安靜，無法啟動SaltStack Master服務器，但是我們需要在啟動服務之前調整SaltStack Minion配置，
編輯SaltStack Minion組態檔，
[root@saltstack-master-01 ~]# vi /etc/salt/minion
在此檔案中找到以下指令，
#master: salt
并用以下指令替換它，
master: saltstack-master.lianglab.cn
master指令向SaltStack Minion告知正在使用的SaltStack Master服務器，SaltStack主主機名必須是可決議的，您可以通過使用本地DNS決議器（即/ etc / hosts檔案）來執行此操作，也可以為網路配置權威的DNS服務器，
啟用并啟動SaltStack Master和Minion服務，
[root@saltstack-master yum.repos.d]# systemctl enable --now salt-master salt-minion
Created symlink /etc/systemd/system/multi-user.target.wants/salt-master.service → /usr/lib/systemd/system/salt-master.service.
Created symlink /etc/systemd/system/multi-user.target.wants/salt-minion.service → /usr/lib/systemd/system/salt-minion.service.
[root@saltstack-master yum.repos.d]#
[root@saltstack-master yum.repos.d]# systemctl status salt-master salt-minion
● salt-master.service - The Salt Master Server
Loaded: loaded (/usr/lib/systemd/system/salt-master.service; enabled; vendor preset: disabled)
Active: active (running) since Wed 2020-12-16 22:37:51 CST; 11s ago
Docs: man:salt-master(1)
file:///usr/share/doc/salt/html/contents.html
https://docs.saltstack.com/en/latest/contents.html
Main PID: 320436 (salt-master)
Tasks: 32 (limit: 23840)
Memory: 200.3M
CGroup: /system.slice/salt-master.service
├─320436 /usr/bin/python3.6 /usr/bin/salt-master
├─320442 /usr/bin/python3.6 /usr/bin/salt-master
├─320474 /usr/bin/python3.6 /usr/bin/salt-master
├─320475 /usr/bin/python3.6 /usr/bin/salt-master
├─320478 /usr/bin/python3.6 /usr/bin/salt-master
├─320479 /usr/bin/python3.6 /usr/bin/salt-master
├─320480 /usr/bin/python3.6 /usr/bin/salt-master
├─320481 /usr/bin/python3.6 /usr/bin/salt-master
├─320482 /usr/bin/python3.6 /usr/bin/salt-master
├─320483 /usr/bin/python3.6 /usr/bin/salt-master
├─320484 /usr/bin/python3.6 /usr/bin/salt-master
├─320485 /usr/bin/python3.6 /usr/bin/salt-master
└─320492 /usr/bin/python3.6 /usr/bin/salt-master
Dec 16 22:37:50 saltstack-master.lianglab.cn systemd[1]: Starting The Salt Master Server...
Dec 16 22:37:51 saltstack-master.lianglab.cn systemd[1]: Started The Salt Master Server.
● salt-minion.service - The Salt Minion
Loaded: loaded (/usr/lib/systemd/system/salt-minion.service; enabled; vendor preset: disabled)
Active: active (running) since Wed 2020-12-16 22:37:52 CST; 10s ago
Docs: man:salt-minion(1)
file:///usr/share/doc/salt/html/contents.html
https://docs.saltstack.com/en/latest/contents.html
Main PID: 320473 (salt-minion)
Tasks: 8 (limit: 23840)
Memory: 69.1M
CGroup: /system.slice/salt-minion.service
├─320473 /usr/bin/python3.6 /usr/bin/salt-minion
├─320616 /usr/bin/python3.6 /usr/bin/salt-minion
└─320677 /usr/bin/python3.6 /usr/bin/salt-minion
Dec 16 22:37:51 saltstack-master.lianglab.cn systemd[1]: Starting The Salt Minion...
Dec 16 22:37:52 saltstack-master.lianglab.cn systemd[1]: Started The Salt Minion
[root@saltstack-master yum.repos.d]# netstat -anplt| grep 45
tcp 0 0 0.0.0.0:4505 0.0.0.0:* LISTEN 320474/python3.6
tcp 0 0 0.0.0.0:4506 0.0.0.0:* LISTEN 320480/python3.6
第七步：SaltStack Master配置CentOS 8防火墻
SaltStack master使用默認埠4505/tcp和4506/tcp，因此，我們需要允許傳入流量進入CentOS 8防火墻中的這兩個埠，
[root@saltstack-master yum.repos.d]# firewall-cmd --permanent --add-port={4505,4506}/tcp
success
[root@saltstack-master yum.repos.d]# firewall-cmd --reload
success
第八步：管理SaltStack公鑰
初始連接時，SaltStack奴才將其公共密鑰發送給SaltStack主服務器，主人必須接受此公鑰，以允許Minion與SaltStack主人進行通信，
列出所有SaltStack公共密鑰，
[root@saltstack-master ~]# salt-key -L
Accepted Keys:
Denied Keys:
Unaccepted Keys:
saltstack-master.lianglab.cn
Rejected Keys:
[root@saltstack-master ~]#
當前，只有一個不接受的公共密鑰，使用以下命令接受此公鑰，
[root@saltstack-master ~]# salt-key -A
The following keys are going to be accepted:
Unaccepted Keys:
saltstack-master.lianglab.cn
Proceed? [n/Y] y
Key for minion saltstack-master.lianglab.cn accepted.
[root@saltstack-master ~]#
在所有SaltStack奴才上執行ping命令，
[root@saltstack-master ~]# salt '*' test.ping
saltstack-master.lianglab.cn:
True
[root@saltstack-master ~]#
檢查所有SaltStackd當前的版本，
[root@saltstack-master ~]# salt '*' test.version
saltstack-master.lianglab.cn:
3002.2
如何在CentOS 8上安裝SaltStack minion，
第九步：什么是SaltStack Minion
SaltStack或Salt是基于Python的開源軟體，用于基于事件的IT自動化，遠程任務執行和配置管理，SaltStack支持“基礎架構即代碼”方法來進行資料中心系統和網路的部署和管理，配置自動化，SecOps編排，漏洞修復以及混合云控制，（禮貌：維基百科）
SaltStack minion是安裝在受管節點上的代理軟體，用于在該節點上執行命令并將其報告回SaltStack主服務器，
第十步：更新SaltStack MinionCentOS 8軟體包
使用ssh工具以root用戶身份與saltstack-minion.lianglab.cn連接，
最佳做法是在安裝新組件之前更新CentOS 8上的軟體包，因此，執行以下dnf命令來更新所有CentOS 8軟體包，
[root@saltstack-minion ~]# dnf update -y
...
Upgraded:
NetworkManager-1:1.22.8-5.el8_2.x86_64
NetworkManager-libnm-1:1.22.8-5.el8_2.x86_64
NetworkManager-team-1:1.22.8-5.el8_2.x86_64
NetworkManager-tui-1:1.22.8-5.el8_2.x86_64
bind-export-libs-32:9.11.13-5.el8_2.x86_64
dbus-1:1.12.8-10.el8_2.x86_64
dbus-common-1:1.12.8-10.el8_2.noarch
dbus-daemon-1:1.12.8-10.el8_2.x86_64
dbus-libs-1:1.12.8-10.el8_2.x86_64
dbus-tools-1:1.12.8-10.el8_2.x86_64
dnf-4.2.17-7.el8_2.noarch
dnf-data-4.2.17-7.el8_2.noarch
gnutls-3.6.8-11.el8_2.x86_64
grub2-common-1:2.02-87.el8_2.noarch
grub2-pc-1:2.02-87.el8_2.x86_64
grub2-pc-modules-1:2.02-87.el8_2.noarch
grub2-tools-1:2.02-87.el8_2.x86_64
grub2-tools-efi-1:2.02-87.el8_2.x86_64
grub2-tools-extra-1:2.02-87.el8_2.x86_64
grub2-tools-minimal-1:2.02-87.el8_2.x86_64
iptables-1.8.4-10.el8_2.1.x86_64
iptables-ebtables-1.8.4-10.el8_2.1.x86_64
iptables-libs-1.8.4-10.el8_2.1.x86_64
kernel-tools-4.18.0-193.14.2.el8_2.x86_64
kernel-tools-libs-4.18.0-193.14.2.el8_2.x86_64
libdnf-0.39.1-6.el8_2.x86_64
libnghttp2-1.33.0-3.el8_2.1.x86_64
microcode_ctl-4:20191115-4.20200609.1.el8_2.x86_64
open-vm-tools-11.0.5-3.el8.x86_64
python3-dnf-4.2.17-7.el8_2.noarch
python3-hawkey-0.39.1-6.el8_2.x86_64
python3-libdnf-0.39.1-6.el8_2.x86_64
python3-perf-4.18.0-193.14.2.el8_2.x86_64
selinux-policy-3.14.3-41.el8_2.5.noarch
selinux-policy-targeted-3.14.3-41.el8_2.5.noarch
systemd-239-31.el8_2.2.x86_64
systemd-libs-239-31.el8_2.2.x86_64
systemd-pam-239-31.el8_2.2.x86_64
systemd-udev-239-31.el8_2.2.x86_64
yum-4.2.17-7.el8_2.noarch
Installed:
kernel-4.18.0-193.14.2.el8_2.x86_64
kernel-core-4.18.0-193.14.2.el8_2.x86_64
kernel-modules-4.18.0-193.14.2.el8_2.x86_64
Removed:
kernel-4.18.0-147.5.1.el8_1.x86_64
kernel-core-4.18.0-147.5.1.el8_1.x86_64
kernel-modules-4.18.0-147.5.1.el8_1.x86_64
Complete!
第十一步：SaltStack Minion上安裝Python
SaltStack是基于Python的軟體，因此它需要Python語言支持才能編譯和執行SaltStack命令，
Python 3.6在默認的CentOS 8 AppStream中可用，因此，我們可以使用dnf命令輕松安裝它，
[root@saltstack-minion ~]# dnf install -y python3
Last metadata expiration check: 0:13:43 ago on Tue 11 Aug 2020 11:59:50 PM PKT.
Dependencies resolved.
================================================================================
Package Arch Version Repo Size
================================================================================
Installing:
python36 x86_64 3.6.8-2.module_el8.1.0+245+c39af44f AppStream 19 k
Installing dependencies:
python3-pip noarch 9.0.3-16.el8 AppStream 19 k
python3-setuptools noarch 39.2.0-5.el8 BaseOS 162 k
Enabling module streams:
python36 3.6
Transaction Summary
================================================================================
Install 3 Packages
Total download size: 201 k
Installed size: 466 k
Downloading Packages:
(1/3): python3-setuptools-39.2.0-5.el8.noarch.r 553 kB/s | 162 kB 00:00
(2/3): python3-pip-9.0.3-16.el8.noarch.rpm 50 kB/s | 19 kB 00:00
(3/3): python36-3.6.8-2.module_el8.1.0+245+c39a 38 kB/s | 19 kB 00:00
--------------------------------------------------------------------------------
Total 121 kB/s | 201 kB 00:01
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Installing : python3-setuptools-39.2.0-5.el8.noarch 1/3
Installing : python36-3.6.8-2.module_el8.1.0+245+c39af44f.x86_64 2/3
Running scriptlet: python36-3.6.8-2.module_el8.1.0+245+c39af44f.x86_64 2/3
Installing : python3-pip-9.0.3-16.el8.noarch 3/3
Running scriptlet: python3-pip-9.0.3-16.el8.noarch 3/3
Verifying : python3-pip-9.0.3-16.el8.noarch 1/3
Verifying : python36-3.6.8-2.module_el8.1.0+245+c39af44f.x86_64 2/3
Verifying : python3-setuptools-39.2.0-5.el8.noarch 3/3
Installed:
python3-pip-9.0.3-16.el8.noarch
python3-setuptools-39.2.0-5.el8.noarch
python36-3.6.8-2.module_el8.1.0+245+c39af44f.x86_64
Complete!
第十二步：CentOS 8上安裝SaltStack官方Yum存盤庫
盡管SaltStack軟體包可通過EPEL（企業Linux的額外軟體包） yum存盤庫獲得，但是，如果您想安裝最新版本的SaltStack軟體包，則必須按照以下步驟安裝SaltStack官方yum存盤庫，
[root@saltstack-minion ~]# wget https://repo.saltstack.com/py3/redhat/salt-py3-repo-latest.el8.noarch.rpm
[root@saltstack-minion ~]# dnf -y install salt-py3-repo-latest.el8.noarch.rpm
[root@saltstack-minion ~]# dnf -y install salt-py3-repo-latest.el8.noarch.rpm
Last metadata expiration check: 0:26:49 ago on Wed 16 Dec 2020 10:19:04 PM CST.
Dependencies resolved.
===============================================================================================================================
Package Architecture Version Repository Size
===============================================================================================================================
Installing:
salt-py3-repo noarch latest-4.el8 @commandline 8.9 k
Transaction Summary
===============================================================================================================================
Install 1 Package
Total size: 8.9 k
Installed size: 2.0 k
Downloading Packages:
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Installing : salt-py3-repo-latest-4.el8.noarch 1/1
Verifying : salt-py3-repo-latest-4.el8.noarch 1/1
Installed products updated.
Installed:
salt-py3-repo-latest-4.el8.noarch
Complete!
為新安裝的yum存盤庫構建快取，
[root@saltstack-minion ~]# dnf makecache
CentOS-8 - Base - mirrors.tongdun.cn 1.6 MB/s | 3.9 kB 00:00
CentOS-8 - Extras - mirrors.tongdun.cn 865 kB/s | 1.5 kB 00:00
CentOS-8 - AppStream - mirrors.tongdun.cn 2.5 MB/s | 4.3 kB 00:00
Extra Packages for Enterprise Linux 8 - x86_64 2.5 MB/s | 4.7 kB 00:00
Extra Packages for Enterprise Linux 8 - x86_64 - Debug 1.6 MB/s | 3.0 kB 00:00
Extra Packages for Enterprise Linux 8 - x86_64 - Source 1.9 MB/s | 3.5 kB 00:00
SaltStack Latest Release Channel Python 3 for RHEL/Centos 8 26 kB/s | 224 kB 00:08
Metadata cache created.
[root@saltstack-minion ~]#
第十三步：CentOS 8上安裝SaltStack Minion
我們已經添加了SaltStack官方yum存盤庫，現在我們可以使用dnf命令安裝SaltStack軟體包，
[root@saltstack-minion ~]# dnf install -y salt-minion
Last metadata expiration check: 0:00:22 ago on Wed 16 Dec 2020 10:46:31 PM CST.
Dependencies resolved.
===============================================================================================================================
Package Architecture Version Repository Size
===============================================================================================================================
Installing:
salt-minion noarch 3002.2-1.el8 salt-py3-latest 43 k
Upgrading:
dnf-plugins-core noarch 4.0.12-4.el8_2 base 64 k
python3-dnf-plugins-core noarch 4.0.12-4.el8_2 base 204 k
Installing dependencies:
libsodium x86_64 1.0.18-2.el8 epel 162 k
libunwind x86_64 1.3.1-3.el8 epel 75 k
openpgm x86_64 5.2.122-21.el8 epel 180 k
python3-babel noarch 2.5.1-5.el8 AppStream 4.8 M
python3-distro noarch 1.4.0-2.module_el8.1.0+245+c39af44f AppStream 37 k
python3-jinja2 noarch 2.10.1-2.el8_0 AppStream 538 k
python3-m2crypto x86_64 0.35.2-5.el8 epel 303 k
python3-markupsafe x86_64 0.23-19.el8 AppStream 39 k
python3-msgpack x86_64 0.6.2-1.el8 epel 92 k
python3-psutil x86_64 5.6.3-5.el8 epel 396 k
python3-zmq x86_64 19.0.0-1.el8 epel 418 k
salt noarch 3002.2-1.el8 salt-py3-latest 10 M
yum-utils noarch 4.0.12-4.el8_2 base 66 k
zeromq x86_64 4.3.3-1.el8 epel 478 k
Transaction Summary
===============================================================================================================================
Install 15 Packages
Upgrade 2 Packages
Total download size: 18 M
Downloading Packages:
(1/17): python3-distro-1.4.0-2.module_el8.1.0+245+c39af44f.noarch.rpm 13 MB/s | 37 kB 00:00
(2/17): yum-utils-4.0.12-4.el8_2.noarch.rpm 15 MB/s | 66 kB 00:00
(3/17): python3-markupsafe-0.23-19.el8.x86_64.rpm 18 MB/s | 39 kB 00:00
(4/17): libsodium-1.0.18-2.el8.x86_64.rpm 23 MB/s | 162 kB 00:00
(5/17): libunwind-1.3.1-3.el8.x86_64.rpm 18 MB/s | 75 kB 00:00
(6/17): python3-jinja2-2.10.1-2.el8_0.noarch.rpm 21 MB/s | 538 kB 00:00
(7/17): openpgm-5.2.122-21.el8.x86_64.rpm 16 MB/s | 180 kB 00:00
(8/17): python3-msgpack-0.6.2-1.el8.x86_64.rpm 11 MB/s | 92 kB 00:00
(9/17): python3-m2crypto-0.35.2-5.el8.x86_64.rpm 20 MB/s | 303 kB 00:00
(10/17): python3-psutil-5.6.3-5.el8.x86_64.rpm 18 MB/s | 396 kB 00:00
(11/17): python3-zmq-19.0.0-1.el8.x86_64.rpm 17 MB/s | 418 kB 00:00
(12/17): python3-babel-2.5.1-5.el8.noarch.rpm 45 MB/s | 4.8 MB 00:00
(13/17): zeromq-4.3.3-1.el8.x86_64.rpm 9.4 MB/s | 478 kB 00:00
(14/17): dnf-plugins-core-4.0.12-4.el8_2.noarch.rpm 28 MB/s | 64 kB 00:00
(15/17): python3-dnf-plugins-core-4.0.12-4.el8_2.noarch.rpm 54 MB/s | 204 kB 00:00
(16/17): salt-minion-3002.2-1.el8.noarch.rpm 6.2 kB/s | 43 kB 00:06
[MIRROR] salt-3002.2-1.el8.noarch.rpm: Curl error (28): Timeout was reached for https://repo.saltstack.com/py3/redhat/8/x86_64/latest/salt-3002.2-1.el8.noarch.rpm [Operation too slow. Less than 1000 bytes/sec transferred the last 30 seconds]
[MIRROR] salt-3002.2-1.el8.noarch.rpm: Curl error (28): Timeout was reached for https://repo.saltstack.com/py3/redhat/8/x86_64/latest/salt-3002.2-1.el8.noarch.rpm [Operation too slow. Less than 1000 bytes/sec transferred the last 30 seconds]
(17/17): salt-3002.2-1.el8.noarch.rpm 23 kB/s | 10 MB 07:54
-------------------------------------------------------------------------------------------------------------------------------
Total 40 kB/s | 18 MB 07:54
warning: /var/cache/dnf/salt-py3-latest-ab32c742cbd8c211/packages/salt-3002.2-1.el8.noarch.rpm: Header V4 RSA/SHA256 Signature, key ID de57bfbe: NOKEY
SaltStack Latest Release Channel Python 3 for RHEL/Centos 8 1.7 MB/s | 1.7 kB 00:00
Importing GPG key 0xDE57BFBE:
Userid : "SaltStack Packaging Team <[email protected]>"
Fingerprint: 754A 1A7A E731 F165 D5E6 D4BD 0E08 A149 DE57 BFBE
From : /etc/pki/rpm-gpg/saltstack-signing-key
Key imported successfully
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Installing : python3-markupsafe-0.23-19.el8.x86_64 1/19
Upgrading : python3-dnf-plugins-core-4.0.12-4.el8_2.noarch 2/19
Upgrading : dnf-plugins-core-4.0.12-4.el8_2.noarch 3/19
Installing : yum-utils-4.0.12-4.el8_2.noarch 4/19
Installing : python3-psutil-5.6.3-5.el8.x86_64 5/19
Installing : python3-msgpack-0.6.2-1.el8.x86_64 6/19
Installing : python3-m2crypto-0.35.2-5.el8.x86_64 7/19
Installing : openpgm-5.2.122-21.el8.x86_64 8/19
Installing : libunwind-1.3.1-3.el8.x86_64 9/19
Installing : libsodium-1.0.18-2.el8.x86_64 10/19
Installing : zeromq-4.3.3-1.el8.x86_64 11/19
Installing : python3-zmq-19.0.0-1.el8.x86_64 12/19
Installing : python3-distro-1.4.0-2.module_el8.1.0+245+c39af44f.noarch 13/19
Installing : python3-babel-2.5.1-5.el8.noarch 14/19
Installing : python3-jinja2-2.10.1-2.el8_0.noarch 15/19
Installing : salt-3002.2-1.el8.noarch 16/19
Installing : salt-minion-3002.2-1.el8.noarch 17/19
Running scriptlet: salt-minion-3002.2-1.el8.noarch 17/19
Cleanup : dnf-plugins-core-4.0.12-3.el8.noarch 18/19
Cleanup : python3-dnf-plugins-core-4.0.12-3.el8.noarch 19/19
Running scriptlet: python3-dnf-plugins-core-4.0.12-3.el8.noarch 19/19
Verifying : yum-utils-4.0.12-4.el8_2.noarch 1/19
Verifying : python3-babel-2.5.1-5.el8.noarch 2/19
Verifying : python3-distro-1.4.0-2.module_el8.1.0+245+c39af44f.noarch 3/19
Verifying : python3-jinja2-2.10.1-2.el8_0.noarch 4/19
Verifying : python3-markupsafe-0.23-19.el8.x86_64 5/19
Verifying : libsodium-1.0.18-2.el8.x86_64 6/19
Verifying : libunwind-1.3.1-3.el8.x86_64 7/19
Verifying : openpgm-5.2.122-21.el8.x86_64 8/19
Verifying : python3-m2crypto-0.35.2-5.el8.x86_64 9/19
Verifying : python3-msgpack-0.6.2-1.el8.x86_64 10/19
Verifying : python3-psutil-5.6.3-5.el8.x86_64 11/19
Verifying : python3-zmq-19.0.0-1.el8.x86_64 12/19
Verifying : zeromq-4.3.3-1.el8.x86_64 13/19
Verifying : salt-3002.2-1.el8.noarch 14/19
Verifying : salt-minion-3002.2-1.el8.noarch 15/19
Verifying : dnf-plugins-core-4.0.12-4.el8_2.noarch 16/19
Verifying : dnf-plugins-core-4.0.12-3.el8.noarch 17/19
Verifying : python3-dnf-plugins-core-4.0.12-4.el8_2.noarch 18/19
Verifying : python3-dnf-plugins-core-4.0.12-3.el8.noarch 19/19
Installed products updated.
Upgraded:
dnf-plugins-core-4.0.12-4.el8_2.noarch python3-dnf-plugins-core-4.0.12-4.el8_2.noarch
Installed:
libsodium-1.0.18-2.el8.x86_64 libunwind-1.3.1-3.el8.x86_64
openpgm-5.2.122-21.el8.x86_64 python3-babel-2.5.1-5.el8.noarch
python3-distro-1.4.0-2.module_el8.1.0+245+c39af44f.noarch python3-jinja2-2.10.1-2.el8_0.noarch
python3-m2crypto-0.35.2-5.el8.x86_64 python3-markupsafe-0.23-19.el8.x86_64
python3-msgpack-0.6.2-1.el8.x86_64 python3-psutil-5.6.3-5.el8.x86_64
python3-zmq-19.0.0-1.el8.x86_64 salt-3002.2-1.el8.noarch
salt-minion-3002.2-1.el8.noarch yum-utils-4.0.12-4.el8_2.noarch
zeromq-4.3.3-1.el8.x86_64
Complete!
[root@saltstack-minion ~]#
第十四步：CentOS 8上配置SaltStack Minion
SaltStack minion的默認配置可以正常作業，除了我們需要告訴Minion有關SaltStack Master服務器，
因此，使用vim編輯器編輯SaltStack minion組態檔，
[root@saltstack-minion ~]# vi /etc/salt/minion
在其中找到以下指令，
#master: salt
并將上述指令替換為以下指令，
master: saltstack-master.lianglab.cn
其中saltstack-master.lianglab.cn是我們前面中配置的SaltStack主服務器，
啟用并啟動salt-minion服務，
[root@saltstack-minion ~]# systemctl enable --now salt-minion
Created symlink /etc/systemd/system/multi-user.target.wants/salt-minion.service → /usr/lib/systemd/system/salt-minion.service.
[root@saltstack-minion ~]#
第十五步：SaltStack主服務器中添加SaltStack Minion
使用PuTTY以root用戶身份與saltstack-master.lianglab.cn連接，
顯示SaltStack主服務器已知的所有公共密鑰的串列，
[root@saltstack-master ~]# salt-key -L
Accepted Keys:
saltstack-master.lianglab.cn
Denied Keys:
Unaccepted Keys:
saltstack-minion.lianglab.cn
Rejected Keys:
[root@saltstack-master ~]#
您會看到，有一個不可接受的密鑰，即saltstack-minion.lianglab.cn，這是我們的SaltStack的公鑰，
使用以下命令接受此密鑰，
[root@saltstack-master ~]# salt-key -A
The following keys are going to be accepted:
Unaccepted Keys:
saltstack-minion.lianglab.cn
Proceed? [n/Y] y
Key for minion saltstack-minion.lianglab.cn accepted.
[root@saltstack-master ~]#
第十六步：SaltStack Minion上的命令的遠程執行安裝HTTP服務
我們已添加到SaltStack Master庫存中，我們現在可以執行命令了，
【1】為了演示，我們正在saltstack-minion.lianglab.cn上遠程安裝Apache Web服務器，
[root@saltstack-master ~]# salt 'saltstack-minion.lianglab.cn' cmd.run 'dnf install -y httpd'
saltstack-minion.lianglab.cn:
Last metadata expiration check: 0:15:45 ago on Wed Dec 16 22:46:31 2020.
Dependencies resolved.
================================================================================
Package Arch Version Repo Size
================================================================================
Installing:
httpd x86_64 2.4.37-21.module_el8.2.0+494+1df74eae AppStream 1.7 M
Installing dependencies:
apr x86_64 1.6.3-9.el8 AppStream 125 k
apr-util x86_64 1.6.1-6.el8 AppStream 105 k
centos-logos-httpd
noarch 80.5-2.el8 base 24 k
httpd-filesystem noarch 2.4.37-21.module_el8.2.0+494+1df74eae AppStream 36 k
httpd-tools x86_64 2.4.37-21.module_el8.2.0+494+1df74eae AppStream 103 k
mod_http2 x86_64 1.11.3-3.module_el8.2.0+486+c01050f0.1 AppStream 156 k
Installing weak dependencies:
apr-util-bdb x86_64 1.6.1-6.el8 AppStream 25 k
apr-util-openssl x86_64 1.6.1-6.el8 AppStream 27 k
Enabling module streams:
httpd 2.4
Transaction Summary
================================================================================
Install 9 Packages
Total download size: 2.3 M
Installed size: 6.0 M
Downloading Packages:
(1/9): centos-logos-httpd-80.5-2.el8.noarch.rpm 1.8 MB/s | 24 kB 00:00
(2/9): apr-util-bdb-1.6.1-6.el8.x86_64.rpm 5.6 MB/s | 25 kB 00:00
(3/9): apr-1.6.3-9.el8.x86_64.rpm 6.5 MB/s | 125 kB 00:00
(4/9): apr-util-1.6.1-6.el8.x86_64.rpm 4.9 MB/s | 105 kB 00:00
(5/9): apr-util-openssl-1.6.1-6.el8.x86_64.rpm 6.0 MB/s | 27 kB 00:00
(6/9): httpd-filesystem-2.4.37-21.module_el8.2. 3.4 MB/s | 36 kB 00:00
(7/9): httpd-tools-2.4.37-21.module_el8.2.0+494 5.6 MB/s | 103 kB 00:00
(8/9): mod_http2-1.11.3-3.module_el8.2.0+486+c0 11 MB/s | 156 kB 00:00
(9/9): httpd-2.4.37-21.module_el8.2.0+494+1df74 35 MB/s | 1.7 MB 00:00
--------------------------------------------------------------------------------
Total 33 MB/s | 2.3 MB 00:00
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Installing : apr-1.6.3-9.el8.x86_64 1/9
Running scriptlet: apr-1.6.3-9.el8.x86_64 1/9
Installing : apr-util-bdb-1.6.1-6.el8.x86_64 2/9
Installing : apr-util-openssl-1.6.1-6.el8.x86_64 3/9
Installing : apr-util-1.6.1-6.el8.x86_64 4/9
Running scriptlet: apr-util-1.6.1-6.el8.x86_64 4/9
Installing : httpd-tools-2.4.37-21.module_el8.2.0+494+1df74eae.x8 5/9
Running scriptlet: httpd-filesystem-2.4.37-21.module_el8.2.0+494+1df74e 6/9
Installing : httpd-filesystem-2.4.37-21.module_el8.2.0+494+1df74e 6/9
Installing : centos-logos-httpd-80.5-2.el8.noarch 7/9
Installing : mod_http2-1.11.3-3.module_el8.2.0+486+c01050f0.1.x86 8/9
Installing : httpd-2.4.37-21.module_el8.2.0+494+1df74eae.x86_64 9/9
Running scriptlet: httpd-2.4.37-21.module_el8.2.0+494+1df74eae.x86_64 9/9
Verifying : centos-logos-httpd-80.5-2.el8.noarch 1/9
Verifying : apr-1.6.3-9.el8.x86_64 2/9
Verifying : apr-util-1.6.1-6.el8.x86_64 3/9
Verifying : apr-util-bdb-1.6.1-6.el8.x86_64 4/9
Verifying : apr-util-openssl-1.6.1-6.el8.x86_64 5/9
Verifying : httpd-2.4.37-21.module_el8.2.0+494+1df74eae.x86_64 6/9
Verifying : httpd-filesystem-2.4.37-21.module_el8.2.0+494+1df74e 7/9
Verifying : httpd-tools-2.4.37-21.module_el8.2.0+494+1df74eae.x8 8/9
Verifying : mod_http2-1.11.3-3.module_el8.2.0+486+c01050f0.1.x86 9/9
Installed products updated.
Installed:
apr-1.6.3-9.el8.x86_64
apr-util-1.6.1-6.el8.x86_64
apr-util-bdb-1.6.1-6.el8.x86_64
apr-util-openssl-1.6.1-6.el8.x86_64
centos-logos-httpd-80.5-2.el8.noarch
httpd-2.4.37-21.module_el8.2.0+494+1df74eae.x86_64
httpd-filesystem-2.4.37-21.module_el8.2.0+494+1df74eae.noarch
httpd-tools-2.4.37-21.module_el8.2.0+494+1df74eae.x86_64
mod_http2-1.11.3-3.module_el8.2.0+486+c01050f0.1.x86_64
Complete!
【2】在saltstack-minion上啟用并啟動Apache服務，
[root@saltstack-master ~]# salt 'saltstack-minion.lianglab.cn' cmd.run 'systemctl enable --now httpd.service'
saltstack-minion.lianglab.cn:
Created symlink /etc/systemd/system/multi-user.target.wants/httpd.service -> /usr/lib/systemd/system/httpd.service.
[root@saltstack-master ~]#
【3】在saltstack-minion-01的Linux防火墻中允許http服務，
[root@saltstack-master ~]#salt 'saltstack-minion.lianglab.cn' cmd.run 'firewall-cmd --add-service=http'
saltstack-minion.lianglab.cn:
success
【4】使用curl命令訪問新配置的Web服務器，
[root@saltstack-master ~]# curl -I http://saltstack-minion.lianglab.cn
HTTP/1.1 403 Forbidden
Date: Wed, 16 Dec 2020 15:07:32 GMT
Server: Apache/2.4.37 (centos)
Content-Location: index.html.zh-CN
Vary: negotiate,accept-language
TCN: choice
Last-Modified: Fri, 14 Jun 2019 03:37:43 GMT
ETag: "fa6-58b405e7d6fc0;5b696296e2c08"
Accept-Ranges: bytes
Content-Length: 4006
Content-Type: text/html; charset=UTF-8
Content-Language: zh-cn
[root@saltstack-master ~]# curl -I http://192.168.6.190
HTTP/1.1 403 Forbidden
Date: Wed, 16 Dec 2020 15:08:07 GMT
Server: Apache/2.4.37 (centos)
Content-Location: index.html.zh-CN
Vary: negotiate,accept-language
TCN: choice
Last-Modified: Fri, 14 Jun 2019 03:37:43 GMT
ETag: "fa6-58b405e7d6fc0;5b696296e2c08"
Accept-Ranges: bytes
Content-Length: 4006
Content-Type: text/html; charset=UTF-8
Content-Language: zh-cn
Apache Web服務器已安裝在我們的SaltStack minion上，
這是我們本文章的結尾，您已成功安裝并SaltStack Master和Minion 配置了，如果在閱讀中遇到問題請及時留言，如果感覺文章對您有幫助請與朋友分享文章，
轉載請註明出處，本文鏈接：https://www.uj5u.com/caozuo/235848.html
標籤：Linux
上一篇：容器編排系統之Pod生命周期、健康/就緒狀態探測以及資源限制
下一篇：Windows通過命令列共享檔案