saltstack master安装-配置
Saltstack简介：
Saltstack是一个新的基础设施管理工具。其两大功能：远程执行和配置管理，在互联网企业IT运维中已经广泛运用。
SaltStack 是一种基于C/S架构的服务模式，在SaltStack架构中服务器端叫作Master，客户端叫作Minion，在实际环境中一般使用SaltStack的C/S架构进行配置管理。
在Master和Minion端都是以守护进程的模式运行，一直监听配置文件里面定义的ret_port（接受minion请求，默认端口号：4506）和publish_port（发布消息，默认端口号：4505）的端口。当Minion运行时会自动连接到配置文件里面定义的Master地址ret_port端口进行连接认证。默认客户端请求id是socket.getfqdn()取到的值，也可以在Minion启动之前修改Minion的id值。
Saltstack master安装：
[root@saltstack ~]# cat /etc/redhat-release
CentOS Linux release 7.0.1406 (Core)
[root@saltstack ~]# yum install https://repo.salts
tack.com/yum/redhat/salt-repo-latest-1.el7.noarch.
rpm
Loaded plugins: fastestmirror
Cannot open: https://repo.saltstack.com/yum/redhat/salt-repo-latest-1.el7.noarch.rpm. Skipping.
Error: Nothing to do
[root@saltstack ~]# yum clean expire-cache
Loaded plugins: fastestmirror
Cleaning repos: base epel extras updates
7 metadata files removed
[root@saltstack ~]# yum install salt-master
//下面的172.19.0.85为saltstack master的服务器IP
[root@saltstack ~]# sed -i 's/#interface: 0.0.0.0/interface: 172.19.0.85/g' /etc/salt/master
[root@saltstack ~]# sed -i 's/#hash_type: md5/hash_type: sha256/g' /etc/salt/master
//启动saltstatck master服务
[root@saltstack ~]# systemctl enable salt-master.service
[root@saltstack ~]# systemctl start salt-master.service
//查看saltstack master服务状态
[root@saltstack ~]# systemctl status salt-master.service
● salt-master.service - The Salt Master Server
Loaded: loaded (/usr/lib/systemd/system/salt-master.service; enabled; vendor preset: disabled)
Active: active (running) since Tue 2017-10-10 02:26:50 EDT; 11s ago
Main PID: 11458 (salt-master)
CGroup: /system.slice/salt-master.service
├─11458 /usr/bin/python /usr/bin/salt-master
├─11467 /usr/bin/python /usr/bin/salt-master
├─11468 /usr/bin/python /usr/bin/salt-master
├─11469 /usr/bin/python /usr/bin/salt-master
├─11472 /usr/bin/python /usr/bin/salt-master
├─11475 /usr/bin/python /usr/bin/salt-master
├─11476 /usr/bin/python /usr/bin/salt-master
├─11479 /usr/bin/python /usr/bin/salt-master
├─11482 /usr/bin/python /usr/bin/salt-master
├─11485 /usr/bin/python /usr/bin/salt-master
└─11488 /usr/bin/python /usr/bin/salt-master
Oct 10 02:26:49 saltstack systemd[1]: Starting The Salt Master Server...
Oct 10 02:26:50 saltstack systemd[1]: Started The Salt Master Server.
//下面可以看到4505和4506端口已经开放监听
[root@saltstack ~]# ss -ant
State Recv-Q Send-Q Local Address:Port Peer Address:Port
LISTEN 0 100 172.19.0.85:4505 *:*
LISTEN 0 100 127.0.0.1:25 *:*
LISTEN 0 100 172.19.0.85:4506 *:*
LISTEN 0 128 *:22 *:*
ESTAB 0 0 172.19.0.85:22 172.16.90.99:17487
LISTEN 0 100 ::1:25 :::*
LISTEN 0 128 :::22 :::*
//停止防火墙
[root@saltstack ~]# systemctl stop firewalld.service
[root@saltstack ~]# systemctl disable firewalld.service
Removed symlink /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service.
Removed symlink /etc/systemd/system/basic.target.wants/firewalld.service.
[root@saltstack ~]# firewall-cmd --state
not running
