saltstack-8 pillar、grains、state综合应用
1、mastr配置文件配置分组：
编辑配置文件：/etc/salt/
配置分组，供后续pillar判断参数使用
nodegroups: web1groups: 'L@db_01' web2groups: 'L@db_02'
2、配置pillar
/srv/pillar/top.sls
base: web1groups: - match: nodegroup - web1server web2groups: - match: nodegroup - web2server
master配置的分组web1groups和web2groups参数，分别对应配置下的文件名（web1server.sls和web2server.sls）
/srv/pillar/web1server.sls
nginx:
root: /wwww
/srv/pillar/web2server.sls
nginx:
root: /data
3、配置grains的max_open_file
/srv/salt/_grains/NginxGrins.py
import os, sys, commands def NginxGrains(): re = {} max_open_file = 65536 try: getulimit = commands.getstatusoutput('source /etc/profile; ulimit -n') except Exception , e: pass if getulimit[0] == 0: max_open_file = getulimit[1] re['max_open_file'] = max_open_file return re NginxGrains()
配置过程中，出现问题，可以参考：saltstack-5 grainx组件
4、state配置
/srv/salt/top.sls
base: '*': - nginx
/srv/salt/nginx.sls
nginx: pkg: - installed file.managed: - source: salt://nginx//nginx.conf - name: /etc/nginx/nginx.conf - user: root - group: root - mode: 644 - template: jinja service.running: # - enable: True - reload: True - watch: - file: /etc/nginx/nginx.conf - pkg: nginx
5、执行结果：
db_01: ---------- ID: nginx Function: pkg.installed Result: True Comment: The following packages were installed/updated: nginx Started: 21:01:35.392168 Duration: 78651.537 ms Changes: ---------- nginx: ---------- new: 1.10.3-1.el6 old: nginx-all-modules: ---------- new: 1.10.3-1.el6 old: nginx-mod-http-geoip: ---------- new: 1.10.3-1.el6 old: nginx-mod-http-image-filter: ---------- new: 1.10.3-1.el6 old: nginx-mod-http-perl: ---------- new: 1.10.3-1.el6 old: nginx-mod-http-xslt-filter: ---------- new: 1.10.3-1.el6 old: nginx-mod-mail: ---------- new: 1.10.3-1.el6 old: nginx-mod-stream: ---------- new: 1.10.3-1.el6 old: ---------- ID: nginx Function: file.managed Name: /etc/nginx/nginx.conf Result: True Comment: File /etc/nginx/nginx.conf updated Started: 21:02:54.046159 Duration: 346.353 ms Changes: ---------- diff: --- +++ @@ -1,14 +1,21 @@ +#version 1.1.4 # For more information on configuration, see: # * Official English Documentation: http://nginx.org/en/docs/ # * Official Russian Documentation: http://nginx.org/ru/docs/ -user nginx; -worker_processes auto; -error_log /var/log/nginx/error.log; -pid /var/run/nginx.pid; +user nginx; +worker_processes 1; -# Load dynamic modules. See /usr/share/nginx/README.dynamic. -include /usr/share/nginx/modules/*.conf; +worker_cpu_affinity 1000 0100 0010 0001; + +worker_rlimit_nofile 1024; + +error_log /var/log/nginx/error.log; +#error_log /var/log/nginx/error.log notice; +#error_log /var/log/nginx/error.log info; + +pid /var/run/nginx.pid; + events { worker_connections 1024; @@ -16,23 +23,51 @@ http { + include /etc/nginx/mime.types; + default_type application/octet-stream; + log_format main '$remote_addr - $remote_user [$time_local] "$request" ' '$status $body_bytes_sent "$http_referer" ' '"$http_user_agent" "$http_x_forwarded_for"'; access_log /var/log/nginx/access.log main; - sendfile on; - tcp_nopush on; - tcp_nodelay on; - keepalive_timeout 65; - types_hash_max_size 2048; + sendfile on; + #tcp_nopush on; - include /etc/nginx/mime.types; - default_type application/octet-stream; + #keepalive_timeout 0; + keepalive_timeout 75; - # Load modular configuration files from the /etc/nginx/conf.d directory. - # See http://nginx.org/en/docs/ngx_core_module.html#include - # for more information. - include /etc/nginx/conf.d/*.conf; + #gzip on; + + # Load config files from the /etc/nginx/conf.d directory + # The default server is in conf.d/default.conf + #include /etc/nginx/conf.d/*.conf; + server { + listen 80 default_server; + server_name _; + + #charset koi8-r; + + #access_log logs/host.access.log main; + + location / { + root /wwww; + index index.html index.htm; + } + + error_page 404 /404.html; + location = /404.html { + root /usr/share/nginx/html; + } + + # redirect server error pages to the static page /50x.html + # + error_page 500 502 503 504 /50x.html; + location = /50x.html { + root /usr/share/nginx/html; + } + + } + } ---------- ID: nginx Function: service.running Result: True Comment: Started Service nginx Started: 21:02:54.395601 Duration: 202.246 ms Changes: ---------- nginx: True Summary for db_01 ------------ Succeeded: 3 (changed=3) Failed: 0 ------------ Total states run: 3 Total run time: 79.200 s
6、配置文件模板
/srv/salt/nginx/nginx.conf
配置文件中：
1、使用{{ grains['num_cpus'] }}获取cpu的数量；
2、{{ grains['max_open_file'] }}获取最大的打开文件数；
3、{{ pillar['nginx']['root'] }}获取url路径，pillar又使用分组来判断获取参数；
#version 1.1.4 # For more information on configuration, see: # * Official English Documentation: http://nginx.org/en/docs/ # * Official Russian Documentation: http://nginx.org/ru/docs/ user nginx; worker_processes {{ grains['num_cpus'] }}; {% if grains['num_cpus'] == 2 %} worker_cpu_affinity 01 10; {% elif grains['num_cpus'] == 4 %} worker_cpu_affinity 1000 0100 0010 0001; {% elif grains['num_cpus'] >= 8 %} worker_cpu_affinity 00000001 00000010 00000100 00001000 00010000 00100000 01000000 10000000; {% else %} worker_cpu_affinity 1000 0100 0010 0001; {% endif %} worker_rlimit_nofile {{ grains['max_open_file'] }}; error_log /var/log/nginx/error.log; #error_log /var/log/nginx/error.log notice; #error_log /var/log/nginx/error.log info; pid /var/run/nginx.pid; events { worker_connections {{ grains['max_open_file'] }}; } http { include /etc/nginx/mime.types; default_type application/octet-stream; log_format main '$remote_addr - $remote_user [$time_local] "$request" ' '$status $body_bytes_sent "$http_referer" ' '"$http_user_agent" "$http_x_forwarded_for"'; access_log /var/log/nginx/access.log main; sendfile on; #tcp_nopush on; #keepalive_timeout 0; keepalive_timeout 75; #gzip on; # Load config files from the /etc/nginx/conf.d directory # The default server is in conf.d/default.conf #include /etc/nginx/conf.d/*.conf; server { listen 80 default_server; server_name _; #charset koi8-r; #access_log logs/host.access.log main; location / { root {{ pillar['nginx']['root'] }}; index index.html index.htm; } error_page 404 /404.html; location = /404.html { root /usr/share/nginx/html; } # redirect server error pages to the static page /50x.html # error_page 500 502 503 504 /50x.html; location = /50x.html { root /usr/share/nginx/html; } } }
