5.saltstack使用指南:使用saltstack部署nginx

使用saltstack部署nginx

搭建环境：

1.服务器列表：

salt-master:   192.168.42.131
salt-minion:   192.168.42.128(minion-192.168.42.128)
192.168.42.130(minion-192.168.42.130)

2.环境：

（1）服务器之间互相可以通信（火墙关闭或者火墙允许通信）

（2）master对minion的主机名和ip做好解析

部署步骤

1.确定整个配置的目录文件结构：

#pcre软件安装
[root@server2 prod]# tree ./pcre/
./pcre/
├── files
│   └── pcre-8.38.tar.gz
└── install.sls

1 directory, 2 files

#nginx操作用户添加
[root@server2 prod]# tree ./user/
./user/
└── www.sls

0 directories, 1 file

#nginx安装
[root@server2 prod]# tree ./nginx/
./nginx/
├── files
│   ├── nginx-1.11.6.tar.gz
│   ├── nginx.conf
│   └── nginx.service
├── install.sls
└── service.sls

1 directory, 5 files

整个思路分为：创建用户、安装基本组件、安装服务、开启服务这几个过程。

1.创建用户

在user目录的www.sls定义了www这个用户：

[root@server2 user]# cat www.sls
www-user-group:
group.present:
- name: www
- gid: 1100

user.present:
- name: www
- fullname: www
- shell: /sbin/nologin
- uid: 1100
- gid: 1100

2.安装基本组件

这个根据业务系统中所需nginx的模块决定，本例中以pcre为例，如果需要其他的模块可以按照类似的方式进行安装，pcre目录下的install.sls如下所示：

[root@server2 pcre]# pwd
/srv/salt/prod/pcre
[root@server2 pcre]# cat install.sls
pcre-source-install:
file.managed:
- name: /usr/local/src/pcre-8.38.tar.gz
- source: salt://pcre/files/pcre-8.38.tar.gz
- user: root
- group: root
- mode: 755

cmd.run:
- name: cd /usr/local/src && tar xvf pcre-8.38.tar.gz && cd pcre-8.38 && ./configure --prefix=/usr/local/pcre && make && make install
- unless: test -d /usr/local/pcre
- require:
- file: pcre-source-install

在/srv/salt/prod/pcre/files目录下包含pcre的源码安装包：

[root@server2 files]# pwd
/srv/salt/prod/pcre/files
[root@server2 files]# ll
total 2008
-rw-r--r-- 1 root root 2053336 Dec  6 20:58 pcre-8.38.tar.gz

3.pcre的安装是在nginx之前进行的，我们把pcre的安装包含在nginx的安装过程中，nginx的安装文件为install.sls:

[root@server2 nginx]# cat install.sls
#包含用户创建以及pcre安装
include:
- pcre.install
- user.www

nginx-source-install:
file.managed:
- name: /usr/local/src/nginx-1.11.6.tar.gz
- source: salt://nginx/files/nginx-1.11.6.tar.gz
- user: root
- group: root
- mode: 0644

cmd.run:
- name: cd /usr/local/src && tar xvf nginx-1.11.6.tar.gz && cd nginx-1.11.6 && ./configure --user=www --group=www --with-http_ssl_module --with-http_stub_status_module --with-file-aio --with-http_dav_module --with-pcre=/usr/local/src/pcre-8.38 && make && make install && chown www.www /usr/local/nginx -R
- unless: test -d /usr/local/nginx
- require:
- user: www-user-group
- file: nginx-source-install
- cmd: pcre-source-install

在nginx的install.sls文件中完成了nginx源码包的部署和配置，编译安装操作。

接下来需要设置nginx的配置文件以及启动nginx服务，尤其是在centos7

中，服务启动关闭的管理软件换为systemctl，需要编写相关service文件，以nginx为例，名称设置为nginx.service:

[root@server2 files]# cat nginx.service
[Unit]
Description=nginx service
After=network.target

[Service]
Type=forking
ExecStart=/usr/local/nginx/sbin/nginx
ExecReload=/usr/local/nginx/sbin/nginx -s reload
ExecStop=/usr/local/nginx/sbin/nginx -s quit
PrivateTmp=true

[Install]
WantedBy=multi-user.target

4.nginx配置文件的部署和服务的开启，该内容在nginx目录的service.sls文件中：

[root@server2 nginx]# cat service.sls
#包含nginx的安装设置
include:
- nginx.install

nginx-init:
file.managed:
- name: /usr/lib/systemd/system/nginx.service
- source: salt://nginx/files/nginx.service
- user: root
- group: root
- mode: 754

/usr/local/nginx/conf/nginx.conf:
file.managed:
- name: /usr/local/nginx/conf/nginx.conf
- source: salt://nginx/files/nginx.conf
- user: www
- group: www
- mode: 644

nginx.service:
cmd.run:
- name: systemctl start nginx.service
- require:
- file: nginx-init
- watch:
- file: /usr/local/nginx/conf/nginx.conf

（1）在该文件的起始部分首先包含了nginx的安装：nginx.install；

（2）设置了nginx服务的启动脚本文件；

（3）设置nginx配置文件（这里可以使用salt的模板进行设置）；

（4）启动nginx服务；

执行部署操作

部署操作非常的简单，在/srv/salt/prod/top.sls文件中添加nginx.service，然后进行部署：

[root@server2 prod]# salt '*' state.highstate
minion-192.168.42.130:
----------
ID: pcre-source-install
Function: file.managed
Name: /usr/local/src/pcre-8.38.tar.gz
Result: True
Comment: File /usr/local/src/pcre-8.38.tar.gz is in the correct state
Started: 21:11:34.125059
Duration: 145.506 ms
Changes:
----------
ID: pcre-source-install
Function: cmd.run
Name: cd /usr/local/src && tar xvf pcre-8.38.tar.gz && cd pcre-8.38 && ./configure --prefix=/usr/local/pcre && make && make install
Result: True
Comment: unless execution succeeded
Started: 21:11:34.272172
Duration: 9.418 ms
Changes:
----------
ID: www-user-group
Function: group.present
Name: www
Result: True
Comment: Group www is present and up to date
Started: 21:11:34.282685
Duration: 2.538 ms
Changes:
----------
ID: www-user-group
Function: user.present
Name: www
Result: True
Comment: User www is present and up to date
Started: 21:11:34.286017
Duration: 31.402 ms
Changes:
----------
ID: nginx-source-install
Function: file.managed
Name: /usr/local/src/nginx-1.11.6.tar.gz
Result: True
Comment: File /usr/local/src/nginx-1.11.6.tar.gz is in the correct state
Started: 21:11:34.317595
Duration: 72.0 ms
Changes:
----------
ID: nginx-source-install
Function: cmd.run
Name: cd /usr/local/src && tar xvf nginx-1.11.6.tar.gz && cd nginx-1.11.6 && ./configure --user=www --group=www --with-http_ssl_module --with-http_stub_status_module --with-file-aio --with-http_dav_module --with-pcre=/usr/local/src/pcre-8.38 && make && make install && chown www.www /usr/local/nginx -R
Result: True
Comment: unless execution succeeded
Started: 21:11:34.390782
Duration: 9.355 ms
Changes:
----------
ID: nginx-init
Function: file.managed
Name: /usr/lib/systemd/system/nginx.service
Result: True
Comment: File /usr/lib/systemd/system/nginx.service is in the correct state
Started: 21:11:34.400385
Duration: 55.461 ms
Changes:
----------
ID: /usr/local/nginx/conf/nginx.conf
Function: file.managed
Result: True
Comment: File /usr/local/nginx/conf/nginx.conf is in the correct state
Started: 21:11:34.455996
Duration: 48.59 ms
Changes:
----------
ID: nginx.service
Function: cmd.run
Name: systemctl start nginx.service
Result: True
Comment: Command "systemctl start nginx.service" run
Started: 21:11:34.505367
Duration: 15.254 ms
Changes:
----------
pid:
22253
retcode:
0
stderr:
stdout:

Summary for minion-192.168.42.130
------------
Succeeded: 9 (changed=1)
Failed:    0
------------
Total states run:     9
Total run time: 389.524 ms
minion-192.168.42.128:
----------
ID: pcre-source-install
Function: file.managed
Name: /usr/local/src/pcre-8.38.tar.gz
Result: True
Comment: File /usr/local/src/pcre-8.38.tar.gz is in the correct state
Started: 21:11:34.153260
Duration: 135.174 ms
Changes:
----------
ID: pcre-source-install
Function: cmd.run
Name: cd /usr/local/src && tar xvf pcre-8.38.tar.gz && cd pcre-8.38 && ./configure --prefix=/usr/local/pcre && make && make install
Result: True
Comment: unless execution succeeded
Started: 21:11:34.289558
Duration: 9.864 ms
Changes:
----------
ID: www-user-group
Function: group.present
Name: www
Result: True
Comment: Group www is present and up to date
Started: 21:11:34.300283
Duration: 3.019 ms
Changes:
----------
ID: www-user-group
Function: user.present
Name: www
Result: True
Comment: User www is present and up to date
Started: 21:11:34.303914
Duration: 29.652 ms
Changes:
----------
ID: nginx-source-install
Function: file.managed
Name: /usr/local/src/nginx-1.11.6.tar.gz
Result: True
Comment: File /usr/local/src/nginx-1.11.6.tar.gz is in the correct state
Started: 21:11:34.334260
Duration: 75.035 ms
Changes:
----------
ID: nginx-source-install
Function: cmd.run
Name: cd /usr/local/src && tar xvf nginx-1.11.6.tar.gz && cd nginx-1.11.6 && ./configure --user=www --group=www --with-http_ssl_module --with-http_stub_status_module --with-file-aio --with-http_dav_module --with-pcre=/usr/local/src/pcre-8.38 && make && make install && chown www.www /usr/local/nginx -R
Result: True
Comment: unless execution succeeded
Started: 21:11:34.409912
Duration: 8.683 ms
Changes:
----------
ID: nginx-init
Function: file.managed
Name: /usr/lib/systemd/system/nginx.service
Result: True
Comment: File /usr/lib/systemd/system/nginx.service is in the correct state
Started: 21:11:34.418893
Duration: 50.052 ms
Changes:
----------
ID: /usr/local/nginx/conf/nginx.conf
Function: file.managed
Result: True
Comment: File /usr/local/nginx/conf/nginx.conf is in the correct state
Started: 21:11:34.469076
Duration: 47.592 ms
Changes:
----------
ID: nginx.service
Function: cmd.run
Name: systemctl start nginx.service
Result: True
Comment: Command "systemctl start nginx.service" run
Started: 21:11:34.517608
Duration: 21.014 ms
Changes:
----------
pid:
23156
retcode:
0
stderr:
stdout:

Summary for minion-192.168.42.128
------------
Succeeded: 9 (changed=1)
Failed:    0
------------
Total states run:     9
Total run time: 380.085 ms

在对应的节点192.168.42.128上查看nginx是否开启：

[root@server1 ~]# systemctl status nginx.service
● nginx.service - nginx service
Loaded: loaded (/usr/lib/systemd/system/nginx.service; disabled; vendor preset: disabled)
Active: active (running) since Wed 2016-12-07 14:42:32 CST; 6h ago
Process: 19352 ExecStart=/usr/local/nginx/sbin/nginx (code=exited, status=0/SUCCESS)
Main PID: 19353 (nginx)
Memory: 1.4M
CGroup: /system.slice/nginx.service
├─19353 nginx: master process /usr/local/nginx/sbin/nginx
└─19354 nginx: worker process

Dec 07 14:42:32 server1.example.com systemd[1]: Starting nginx service...
Dec 07 14:42:32 server1.example.com systemd[1]: Started nginx service.
Dec 07 21:11:34 server1.example.com systemd[1]: Started nginx service.

使用浏览器访问该页面，查看页面能否访问：

小结

在个基础上还可以添加php模块，丰富nginx的功能。后续的章节将会进行介绍。