通過案例了解puppet創(chuàng)建虛擬資源解決沖突問題

1、通過案例了解 puppet 創(chuàng)建虛擬資源解決資源問題虛擬資源是一種用來管理多種配置共同依賴同一資源的方法。如果多個類依賴同一個資源時則可避免寫多個資源，也可以解決資源重定義的錯誤。 虛擬資源經(jīng)常用于用戶管理中，虛擬資源只會被一次，但可以運用一次或多次。要使用虛擬資源是需要在資源開頭加上字符“”來使資源虛擬化。然后再使用下面兩種方法之一來實例化虛擬資源：飛船語法realize 函數(shù)1. 定義兩個用戶，puppet 和 root，并將其虛擬化注意定義虛擬資源必須在全局作用域或者節(jié)點作用域中定義，簡單的理解，以下目錄中site.pp 就是全局作用域，包含 nodes 目錄（site.pp 中 imp

2、ort 了 nodes 目錄），在節(jié)點node 下定義的虛擬資源屬于節(jié)點作用域，其他模塊中的都屬于局部作用域。1.1 在全局作用域中創(chuàng)建對應(yīng)的 pp 文件1.2 創(chuàng)建虛擬用戶 puppet、root、xiaonuorootlinuxmaster1poc testing# vim manifests/nodes/virtual_usp class alluserinclude alluser:puppet,alluser:rootrootlinuxmaster1poc testing# tree manifests/ manifests/ nodes puppetcnt.pp virtual_g

3、roup.pp virtual_usp site.pp1 directory, 4 files1.3 創(chuàng)建虛擬組 puppet、root 和 xiaonuorootlinuxmaster1poc testing# vim manifests/nodes/virtual_group.pp class allgroupinclude allgroup:puppet,allgroup:rootclass allgroup:puppet group puppet:ensure = present, name= puppet,class alluser:puppet user puppet:ensure

4、 = present, uid= 52,gid= 52,home= /var/lib/puppet, s = /sbin/nologin,class alluser:root user root:ensure = present, uid= 0,gid= 0, home = /root,s= /bin/bash,class alluser:xiaonuo user xiaonuo:ensure = present, uid= 600,gid= 600,home= /home/xiaonuo, s = /sbin/nologin,2.編寫puppet模塊， 將虛擬資源用戶puppet 和組 pu

5、ppet 實化2.1 編寫 pupppet 模塊rootlinuxmaster1poc testing# tree environment/modules/puppet environment/modules/puppet files manifests config.pp init.pp install.pp params.pp service.pp README templatesgid= 52, allowdupe = false, members= puppet,class allgroup:root group root:ensure = present, name= root,gi

6、d= 0, allowdupe = false, members= root,class allgroup:xiaonuo group xiaonuo:ensure = present, name= xiaonuo,gid= 600,allowdupe = false, members= xiaonuo,2.2 編寫 puppet_linux57poc 模塊2.3 實例化虛擬資源2.3.1 在 puppet 模塊中實例化rootlinuxmaster1poc testing# vim environment/modules/puppet/manifests/config.pp class pu

7、ppet:configinclude puppet:params includepuppet:puppet_config,puppet:namespaceauth_config,puppet:auth_config,puppet:user,puppet:groupinclude alluser,allgroup #必須將節(jié)點作用域中的類包含進來class puppet:puppet_configfile /etc/puppet/puppet.conf:ensure = present,content = template(puppet/puppet.conf.erb), owner= pupp

8、et,group = puppet, mode= 0644, backup = main,require = Classpuppet:install,puppet:user,puppet:group, notify = Classpuppet:service,rootlinuxmaster1poc testing# tree agents/modules/puppet_linux57poc/ agents/modules/puppet_linux57poc/ files manifests init.pp templates facts.txt.erb motd.erb3 directorie

9、s, 3 files auth.conf.erb namespaceauth.conf.erb puppet.conf.erb3 directories, 9 files2.3.2 在 puppet_linux57poc 模塊中實例化rootlinuxmaster1poc testing# cat agents/modules/puppet_linux57poc/manifests/init.pp class puppet_linux57pocclass puppet:auth_configfile /etc/puppet/auth.conf:ensure = present,content

10、= template(puppet/auth.conf.erb), owner= puppet,group = puppet, mode= 0644, backup = main,require = Classpuppet:install,puppet:user,puppet:group, notify = Classpuppet:service,class puppet:namespaceauth_configfile /etc/puppet/namespaceauth.conf:ensure = present,content = template(puppet/namespaceauth

11、.conf.erb), owner= puppet,group = puppet, mode= 0644, backup = main,require = Classpuppet:install,puppet:user,puppet:group, notify = Classpuppet:service,class puppet:user #使用飛船語法實化用戶 puppet 資源# realize Userpuppet User class puppet:group #使用 realize 函數(shù)實化組 puppet 資源realize Grouppuppet# Group includepu

12、ppet_linux57poc:motd_install,puppet_linux57poc:motd_config,puppet_linux57poc:facts,puppet_linux57poc:usuppet_linux57poc:groupinclude alluser,allgroup #必須將節(jié)點作用域中的類包含進來class puppet_linux57poc:motd_installpackage setup:ensure = present,class puppet_linux57poc:motd_config file /etc/motd:ownergroup mode=

13、 xiaonuo,= root,= 0440,content = template(puppet_linux57poc/motd.erb),backup = main, require =Classpuppet_linux57poc:motd_install,puppet_linux57poc:user,puppet_linux57po c:groupclass puppet_linux57poc:facts file /etc/mcollective/facts.txt:ownergroup mode= root,= root,= 0400,content = template(puppet

14、_linux57poc/facts.txt.erb),backup = main, require =Classpuppet_linux57poc:motd_install,puppet_linux57poc:user,puppet_linux57po c:groupclass puppet_linux57poc:user #使用 realize 函數(shù)實化用戶 xiaonuo 和 root 資源realize( Userxiaonuo,Userroot )class puppet_linux57poc:group #使用 realize 函數(shù)實化組 xiaonuo 和 root 資源reali

15、ze( Groupxiaonuo,Grouproot )3. 測試3.1 測試 puppet 模塊（略）3.2 測試 puppet_linux57poc 模塊3.2.1 查看當前系統(tǒng)是否有 xiaonuo 用戶和組3.2.2 同步 puppetmasterrootlinux57poc puppet# puppet agent -t -environment=testing info: Retrieving plugininfo: Loading facts in /var/lib/puppet/lib/facter/fact_apply.rb info: Caching catalog for

16、 puppet_: Applying configuration ver1389555288notice: /Stagemain/Allservice:Lm_sensors_serviervicelm_sensors/ensure: ensure changed running to stoppednotice: /Groupxiaonuo/ensure: creatednotice: /Stagemain/Alluser:Xiaonuo/Userxiaonuo/ensure: : Fiucket adding md5b2090646c44

17、4c5ddf1533749743ebd71info: /Stagemain/Mcollective:Facter/File/etc/mcollective/facts.yaml: Fiucketed /etc/mcollective/facts.yaml to main with sum b2090646c444c5ddf1533749743ebd71notice: /Stagemain/Sysctl:Exec/Execsysctl -p /dev/null &/returns: executed sucsfullynotice: /Stagemain/Puppet_linux57poc:Mo

18、td_config/File/etc/motd/owner: owner changed puppet to xiaonuonotice: /Stagemain/Puppet_linux57poc:Motd_config/File/etc/motd/group: group changed puppet to rootnotice: /Stagemain/Puppet_linux57poc:Motd_config/File/etc/motd/mode: mode changed 0777 to 0440notice: /Stagemain/Allservice:Bluetooth_serviervicebluetooth/ensure: ensure changed running to stoppedrootlinux57poc puppet# id xiaonuo id: xiaonuo: No such userrootlinux57poc puppet# c