Puppet企业架构部署

Puppet企业架构部署

一直在准备上Puppet，这两天看了下Puppet文档，模拟了下生产环境下Puppet部署方案：
 
测试机器：
server: 192.168.3.68 
clinet: 192.168.3.67
 
命令规则:
应用_机房_地点_ip地址_服务器系统_域名
192.168.3.67    ppttest_wangsu_bj_192.168.3.67.CentOS.yypuppet.com
192.168.3.68    pptserver_wangsu_bj_192.168.3.68.centos.yypuppet.com
 
*****
本文侧重于puppet架构部署，安装过程不是本文的重点，请自行安装。
*****
 
主配置文件：
root@pts/2 # cat /etc/puppet/puppet.conf 
[main]
    logdir = /var/log/puppet
 
    rundir = /var/run/puppet
 
    ssldir = $vardir/ssl
 
[agent]
    classfile = $vardir/classes.txt
 
    localconfig = $vardir/localconfig
    server = pptserver_wangsu_bj_192.168.3.68.centos.yypuppet.com
[master]
    environments = yydev,yytest,yyprd 
[yydev]
modulepath = $confdir/multi-environment/yydev/environment/modules:$confdir/multi-environment/yydev/application/modules
manifest = $confdir/multi-environment/yydev/manifests/site.pp
fileserverconfig = /etc/puppet/fileserver.conf.yydev
[yytest]
modulepath = $confdir/multi-environment/yytest/environment/modules:$confdir/multi-environment/yytest/application/modules
manifest = $confdir/multi-environment/yytest/manifests/site.pp
fileserverconfig = /etc/puppet/fileserver.conf.yytest
[yyprd]
modulepath = $confdir/multi-environment/yyprd/environment/modules:$confdir/multi-environment/yyprd/application/modules
manifest = $confdir/multi-environment/yyprd/manifests/site.pp
fileserverconfig = /etc/puppet/fileserver.conf.yyprd
为什么在每个环境下会有environment和application两个目录，其中environment目录是存放基础环境模块的，比如puppet、yum等；
而application目录是存在应用环境模块的，比如apache、mysql等。当然也可以放在同一个目录下，如果应用多的话还可以将application进行拆分，一切都是为了方便管理而考虑。
 
 
实施过程：
1: 创建多环境目录：
cd /etc/puppet
mkdir -p multi-environment/yydev/environment/modules; mkdir -p multi-environment/yydev/application/modules
mkdir -p multi-environment/yytest/environment/modules; mkdir -p multi-environment/yytest/application/modules
mkdir -p multi-environment/yyprd/environment/modules; mkdir -p multi-environment/yyprd/application/modules
2: 创建多环境文件服务器：
cp /etc/puppet/fileserver.conf{,.yydev}; cp /etc/puppet/fileserver.conf{,.yytest}; cp /etc/puppet/fileserver.conf{,.yyprd}
3: 拷贝现有模块分别到三个环境中：
cp /etc/puppet/modules/ssh /etc/puppet/multi-environment/yydev/environment/modules
cp /etc/puppet/modules/httpd /etc/puppet/multi-environment/yydev/application/modules
cp /etc/puppet/modules/ssh /etc/puppet/multi-environment/yytest/environment/modules
cp /etc/puppet/modules/httpd /etc/puppet/multi-environment/yytest/application/modules
cp /etc/puppet/modules/ssh /etc/puppet/multi-environment/yyprd/environment/modules
cp /etc/puppet/modules/httpd /etc/puppet/multi-environment/yyprd/application/modules
 
4：组织架构：
cd /etc/puppet/multi-environment
tree
 
├── yydev
│ ├── application
│ │ └── modules
│ │    └── httpd
│ │        ├── files
│ │        │ └── 1.txt
│ │        ├── manifests
│ │        │ └── init.pp
│ │        └── templates
│ ├── environment
│ │ └── modules
│ │    ├── ssh
│ │    │ ├── files
│ │    │ │ └── sshd_config
│ │    │ ├── manifests
│ │    │ │ ├── config.pp
│ │    │ │ ├── init.pp
│ │    │ │ ├── install.pp
│ │    │ │ ├── params.pp
│ │    │ │ └── service.pp
│ │    │ └── templates
│ │    └── test
│ │        ├── files
│ │        ├── manifests
│ │        │ └── init.pp
│ │        └── templates
│ │            └── test.erb
│ └── manifests
│    ├── nodes
│    │ └── front_resin.pp
│    └── site.pp
├── yyprd
│ ├── application
│ │ └── modules
│ └── environment
│    └── modules
└── yytest
    ├── application
    │ └── modules
    └── environment
        └── modules
 
模块学习(ssh为例):
ssh/
├── files
│ └── sshd_config
├── manifests
│ ├── config.pp
│ ├── init.pp
│ ├── install.pp
│ └── service.pp
└── templates
 
root@pts/2 # cat init.pp config.pp install.pp service.pp 
class ssh {
        include ssh::install,ssh::service,ssh::config
}
class ssh::config {
        file { "/tmp/sshd_config":
        ensure => present,
        owner => 'root',
        group => 'root',
        mode => 0440,
        source => "puppet:///modules/ssh/sshd_config",
        require => Class["ssh::install"],
        notify => Class["ssh::service"],
        }
}
class ssh::install {
        package { "openssh":
        ensure => present,
        }
}
class ssh::service {
        service { "sshd": 
                ensure => running,
                hasstatus => true,
                hasrestart => true,
                enable => true,
                require => Class["ssh::config"],
        }
}

Puppet 学习系列：

Puppet 学习一：安装及简单实例应用

Puppet学习二:简单模块配置和应用

有关Puppet agent端三种备份恢复方案探讨研究
选择更安全的方式注册你的Puppet节点
通过配置SSH深刻理解Puppet的语法及工作机制
Puppet利用Nginx多端口实现负载均衡
CentOS（5和6）下Puppet的C/S模式实例

Puppet 的详细介绍：请点这里
Puppet 的下载地址：请点这里

本文永久更新链接地址：