Puppet详细部署指南

一、安装环境
需要两台计算机或虚拟机；一台是server,一台是client；具体配置如下：
cat /etc/hosts
127.0.0.1 localhost.localdomain localhost
192.168.*.200 server.example.com server
192.168.*.180 client.example.com client
Note：主机名必须是字母和数字组合，不能有特殊符号如 _ ；否则在调试阶段出现莫名其妙问题；
Note：所有主机要求时钟同步
yum install ntp
chkconfig ntp on
ntpdate pool.ntp.org
Note：配置epel源
rpm -ivh https://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm
yum-config-manager --enable epel
yum update

二、安装Puppet服务
1、服务端
yum install ruby ruby-libs ruby-rdoc #Puppet需要Ruby支持，查看命令行帮助需安装ruby-rdoc
yum install puppet-server
chkconfig puppet on
/etc/init.d/puppetmaster start
关闭iptables和Selinux
2、客户端
yum install puppet
在/etc/puppet/puppet.conf中[agent]加server = server.example.com指定服务端
3、在服务端配置自动签发证书设置
cat /etc/puppet/autosign.conf
*.example.com
在/etc/puppet/puppet.conf中[main]加autosign = true使autosign.conf生效
/etc/init.d/puppetmaster restart
4、在客户端进行debug测试生成证书
puppet agent --no-daemonize --onetime --verbose --debug
5、在服务端查看证书信息

puppet cert list -all
"server.example.com" (25:11:E6:A6:21:55:A3:4F:30:E4:C7:50:92:4C:63:50) (alt names: "DNS:puppet", "DNS:puppet.example.com", "DNS:server.example.com")
+ "client.example.com" (9C:DA:6F:89:C3:5C:4E:73:5A:9F:A6:35:66:FE:53:8E)
前面带“+”表示证书签发成功
6、例子测试
服务端
cat /etc/puppet/manifests/site.pp
node default {
file {
"/tmp/helloworld.txt": content => "hello, world";
}
}
Note:
err: Could not retrieve catalog from remote server: Error 400 on SERVER: Could not find default node or by name with 'client.example.com, client.example, client' on node client.example.com
warning: Not using cache on failed catalog
err: Could not retrieve catalog; skipping run
可能是/etc/puppet/manifests/site.pp 这个文件书写格式有问题
客户端
puppet agent --test --server=server.example.com
cat /tmp/helloworld.txt
hello, world

三、在服务端安装Puppet的dashboard工具
1、安装设置mysql
yum install mysql mysql-devel mysql-server -y

在/etc/my.cnf中[mysqld]下加入max_allowed_packet = 32M
/etc/init.d/mysqld start
chkconfig mysqld on
mysqladmin -u root password '123456'
cat create_dashboard.sql #创建数据库
CREATE DATABASE dashboard CHARACTER SET utf8;
CREATE USER 'dashboard'@'localhost' IDENTIFIED BY '123456';
GRANT ALL PRIVILEGES ON dashboard.* TO 'dashboard'@'localhost';
FLUSH PRIVILEGES;

2、设置yum源和安装puppet-dashboard
由于puppet-dashboard不在centos官方及epel源里，因此要添加puppetlabs源
rpm -ivh http://yum.puppetlabs.com/el/6.4/products/x86_64/puppetlabs-release-6-12.noarch.rpm
yum install puppet-dashboard

3、配置puppet-dashboard
vi /usr/share/puppet-dashboard/config/database.yml
46 production:
47 database: dashboard 48 username: dashboard
49 password: 123456
50 encoding: utf8
51 adapter: mysql
vi /usr/share/puppet-dashboard/config/environment.rb
52 config.time_zone = 'Beijing'
分别是修改数据库配置，时区；
初始化数据库：
rake RAILS_ENV=production db:migrate
检查是否导入成功：
mysql> show tables;
+------------------------------+
| Tables_in_dashboard |
+------------------------------+
| delayed_job_failures |
| delayed_jobs |
| metrics |
| node_class_memberships |
| node_classes |
| node_group_class_memberships |
| node_group_edges |
| node_group_memberships |
| node_groups |
| nodes |
| old_reports |
| parameters |
| report_logs |
| reports |
| resource_events |
| resource_statuses |
| schema_migrations |
| timeline_events |
+------------------------------+
18 rows in set (0.00 sec)

4、启动并运行dashboard（WEBrick方式）
/etc/init.d/puppetmaster restart
/etc/init.d/puppet-dashboard start
访问http://server.example.com:3000/

5、启动并运行dashboard（passenger方式）

rpm -qa httpd httpd-devel apr-util-devel apr-devel mod_ssl
rpm -qa ruby-devel ruby-libs rubygems libcurl-devel
gem install rake --version=10.0.1
gem install rack --version=1.5.2
gem install --local passenger-4.0.19.gem
gem list
以上是安装passenger
passenger-install-apache2-module #安装apache模块
配置passenger
cat /etc/httpd/conf.d/passenger.conf
LoadModule passenger_module /usr/lib/ruby/gems/1.8/gems/passenger-4.0.19/buildout/apache2/mod_passenger.so
PassengerRoot /usr/lib/ruby/gems/1.8/gems/passenger-4.0.19
PassengerDefaultRuby /usr/bin/ruby
PassengerHighPerformance on
PassengerMaxPoolSize 12
PassengerPoolIdleTime 1500
PassengerStatThrottleRate 120

<VirtualHost *:80>
DocumentRoot /usr/share/puppet-dashboard/public
<Directory /usr/share/puppet-dashboard/public>
Options None
AllowOverride AuthConfig
Order allow,deny
allow from all
</Directory>
ErrorLog /var/log/httpd/dashboard.error.log
LogLevel warn
CustomLog /var/log/httpd/dashboard.access.log combined
</VirtualHost>
启动服务
/etc/init.d/httpd start
/etc/init.d/puppetmaster status
puppetmasterd (pid  29922) is running...
服务端配置实施汇总puppet报告
cat /etc/puppet/puppet.conf
[main]
# The Puppet log directory.
# The default value is '$vardir/log'.
logdir = /var/log/puppet
# Where Puppet PID files are kept.
# The default value is '$vardir/run'.
rundir = /var/run/puppet
# Where SSL certificates are kept.
# The default value is '$confdir/ssl'.
ssldir = $vardir/ssl
autosign = true
reports = http
reporturl = http://192.168.*.200:80/reports [agent]
# The file in which puppetd stores a list of the classes
# associated with the retrieved configuratiion.  Can be loaded in
# the separate ``puppet`` executable using the ``--loadclasses``
# option.
# The default value is '$confdir/classes.txt'.
classfile = $vardir/classes.txt
# Where puppetd caches the local configuration.  An
# extension indicating the cache format is added automatically.
# The default value is '$confdir/localconfig'.
localconfig = $vardir/localconfig

/etc/rc.d/init.d/httpd restart
#运行“Delayed Job Workers”，使其在后台为我们处理报告日志
rake RAILS_ENV=production jobs:work &