saltstack 部署zabbix状态文件
结构
[root@master ~]# tree /srv/
/srv/
└── salt
├── base
├── dev
├── prod
│ ├── modules
│ │ ├── application
│ │ │ └── php
│ │ │ ├── file
│ │ │ │ ├── install.sh
│ │ │ │ ├── oniguruma-devel-6.8.2-2.el8.x86_64.rpm
│ │ │ │ ├── php-7.4.25.tar.xz
│ │ │ │ ├── php-8.0.10.tar.xz
│ │ │ │ ├── php-fpm
│ │ │ │ ├── php-fpm.conf
│ │ │ │ ├── php-fpm.service
│ │ │ │ └── www.conf
│ │ │ └── install.sls
│ │ ├── database
│ │ │ └── mysql
│ │ │ ├── file
│ │ │ │ ├── install.sh
│ │ │ │ ├── my.cnf
│ │ │ │ ├── mysql-5.7.31-linux-glibc2.12-x86_64.tar.gz
│ │ │ │ ├── mysqld.service
│ │ │ │ └── mysql.server
│ │ │ └── install.sls
│ │ └── web
│ │ └── apache
│ │ ├── file
│ │ │ ├── apr-1.7.0.tar.gz
│ │ │ ├── apr-util-1.6.1.tar.gz
│ │ │ ├── httpd-2.4.38.tar.bz2
│ │ │ ├── httpd.conf
│ │ │ ├── httpd.service
│ │ │ ├── index.php
│ │ │ └── install.sh
│ │ └── install.sls
│ └── zabbix
│ ├── apache.sls
│ ├── config.sls
│ ├── file
│ │ ├── index.php
│ │ ├── install.sh
│ │ ├── my.cnf
│ │ ├── mysql.conf
│ │ ├── php.ini
│ │ ├── vhosts.conf
│ │ ├── zabbix-5.4.4.tar.gz
│ │ └── zabbix_server.conf
│ ├── install.sls
│ ├── mian.sls
│ └── mysql.sls
└── test
apache
/srv/salt/prod/modules/web/apache/install.sls
"Development Tools":
pkg.group_installed
apache_packages:
pkg.installed:
- pkgs:
- openssl-devel
- pcre-devel
- expat-devel
- libtool
- gcc
- gcc-c++
- make
apache_user:
user.present:
- name: apache
- createhome: false
- system: true
- shell: /sbin/nologin
apache-download:
file.managed:
- names:
- /usr/src/apr-1.7.0.tar.gz:
- source: salt://modules/web/apache/file/apr-1.7.0.tar.gz
- /usr/src/apr-util-1.6.1.tar.gz:
- source: salt://modules/web/apache/file/apr-util-1.6.1.tar.gz
- /usr/src/httpd-2.4.38.tar.bz2:
- source: salt://modules/web/apache/file/httpd-2.4.38.tar.bz2
/usr/lib/systemd/system/httpd.service:
file.managed:
- source: salt://modules/web/apache/file/httpd.service
- user: root
- group: root
- mode: '0644'
#salt://modules/web/apache/file/install.sh:
# cmd.script
/usr/local/apache/conf/httpd.conf:
file.managed:
- source: salt://modules/web/apache/file/httpd.conf
- user: root
- group: root
- mode: '0644'
/srv/salt/prod/modules/web/apache/file/install.sh
#! /bin/bash
cd /usr/src
rm -rf apr-1.7.0 apr-util-1.6.1 httpd-2.4.38
tar xf apr-1.7.0.tar.gz
tar xf apr-util-1.6.1.tar.gz
tar xf httpd-2.4.38.tar.bz2
cd /usr/src/apr-1.7.0
sed -i '/$RM "$cfgfile"/d' configure
./configure --prefix=/usr/local/apr && make && make install
cd ../apr-util-1.6.1
./configure --prefix=/usr/local/apr-util --with-apr=/usr/local/apr && make && make install
cd ../httpd-2.4.38
./configure --prefix=/usr/local/apache \
--enable-so \
--enable-ssl \
--enable-cgi \
--enable-rewrite \
--with-zlib \
--with-pcre \
--with-apr=/usr/local/apr \
--with-apr-util=/usr/local/apr-util \
--enable-modules=most \
--enable-mpms-shared=all \
--with-mpm=prefork && \
make && make install
echo 'export PATH=/usr/local/apache/bin:$PATH' > /etc/profile.d/httpd.sh
systemctl daemon-reload
mysql
/srv/salt/prod/modules/database/mysql/install.sls
mysql-pkg:
pkg.installed:
- pkgs:
- ncurses-devel
- openssl-devel
- openssl
- cmake
- mariadb-devel
- ncurses-compat-libs
mysql-user:
user.present:
- name: mysql
- shell: /sbin/nologin
- createhome: false
- system: true
mysql-datadir:
file.directory:
- name: /opt/data
- user: mysql
- group: mysql
- mode: '0755'
- makedirs: true
/usr/src/mysql-5.7.31-linux-glibc2.12-x86_64.tar.gz:
file.managed:
- source: salt://modules/database/mysql/file/mysql-5.7.31-linux-glibc2.12-x86_64.tar.gz
- user: mysql
- group: mysql
- mode: '0644'
'tar xf /usr/src/mysql-5.7.31-linux-glibc2.12-x86_64.tar.gz -C /usr/local':
cmd.run
/usr/local/mysql:
file.symlink:
- target: /usr/local/mysql-5.7.31-linux-glibc2.12-x86_64
- user: mysql
- group: mysql
- mode: '0644'
trasfer-files:
file.managed:
- names:
- /usr/local/mysql/support-files/mysql.server:
- source: salt://modules/database/mysql/file/mysql.server
- /usr/lib/systemd/system/mysqld.service:
- source: salt://modules/database/mysql/file/mysqld.service
#salt://modules/database/mysql/file/install.sh:
# cmd.script
/srv/salt/prod/modules/database/mysql/file/install.sh
/usr/local/mysql/bin/mysqld --initialize-insecure --user=mysql --datadir=/opt/data/
echo 'export PATH=/usr/local/mysql/bin:$PATH' > /etc/profile.d/mysql.sh
systemctl daemon-reload
php
/srv/salt/prod/modules/application/php/install.sls
pkg-install:
pkg.installed:
- pkgs:
- libxml2
- libxml2-devel
- bzip2
- openssl
- openssl-devel
- bzip2-devel
- libcurl
- libcurl-devel
- libicu-devel
- libjpeg
- libjpeg-devel
- libpng
- libpng-devel
- openldap-devel
- pcre-devel
- freetype
- freetype-devel
- gmp
- gmp-devel
- libmcrypt
- libmcrypt-devel
- readline
- readline-devel
- libxslt
- libxslt-devel
- mhash
- mhash-devel
- php-mysqlnd
- libsqlite3x-devel
- oniguruma
- libzip-devel
'yum -y install http://mirror.centos.org/centos/8-stream/PowerTools/x86_64/os/Packages/oniguruma-devel-6.8.2-2.el8.x86_64.rpm':
cmd.run
/usr/src/php-7.4.25.tar.xz:
file.managed:
- source: salt://modules/application/php/file/php-7.4.25.tar.xz
- user: root
- group: root
- mode: '0644'
#salt://modules/application/php/file/install.sh:
# cmd.script
copysoft:
file.managed:
- names:
- /etc/init.d/php-fpm:
- source: salt://modules/application/php/file/php-fpm
- user: root
- group: root
- mode: '0755'
- /usr/local/php7/etc/php-fpm.conf:
- source: salt://modules/application/php/file/php-fpm.conf
- /usr/local/php7/etc/php-fpm.d/www.conf:
- source: salt://modules/application/php/file/www.conf
- /usr/lib/systemd/system/php-fpm.service:
- source: salt://modules/application/php/file/php-fpm.service
/srv/salt/prod/modules/application/php/file/install.sh
#! /bin/bash
cd /usr/src/
rm -rf php-7.4.25
tar xf php-7.4.25.tar.xz
cd php-7.4.25
./configure --prefix=/usr/local/php7 --with-config-file-path=/etc --enable-fpm --disable-debug --disable-rpath --enable-shared --enable-soap --with-openssl --enable-bcmath --with-iconv --with-bz2 --enable-calendar --with-curl --enable-exif --enable-ftp --enable-gd --with-jpeg --with-zlib-dir --with-freetype --with-gettext --enable-mbstring --enable-pdo --with-mysqli=mysqlnd --with-pdo-mysql=mysqlnd --with-readline --enable-shmop --enable-simplexml --enable-sockets --with-zip --enable-mysqlnd-compression-support --with-pear --enable-pcntl --enable-posix && make && make install
zabbix
/srv/salt/prod/zabbix/mian
[root@master zabbix]# cat mian.sls
include:
- zabbix.apache
- zabbix.mysql
- modules.application.php.install
/srv/salt/prod/zabbix/apache.sls
include:
- modules.web.apache.install
/usr/include/apache:
file.symlink:
- target: /usr/local/apache/include
/usr/local/apache/htdocs/zabbix:
file.directory:
- user: apache
- group: apache
- mode: '0755'
- makedirs: true
/usr/local/apache/conf/extra/vhosts.conf:
file.managed:
- source: salt://zabbix/file/vhosts.conf
zabbix-apache-service:
service.running:
- name: httpd
/srv/salt/prod/zabbix/mysql.sls
include:
- modules.database.mysql.install
provides-mysql-file:
file.managed:
- user: root
- group: root
- mode: '0644'
- names:
- /etc/my.cnf:
- source: salt://zabbix/file/my.cnf
- /etc/ld.so.conf.d/mysql.conf:
- source: salt://zabbix/file/mysql.conf
/usr/local/include/mysql:
file.symlink:
- target: /usr/local/mysql/include
mysqld.service:
service.running:
- enable: true
mysqld-set-password:
cmd.run:
- name: /usr/local/mysql/bin/mysql -e "set password = password('123456');"
/srv/salt/prod/zabbix/install.sls
zabbix-pkg:
pkg.installed:
- pkgs:
- net-snmp-devel
- libevent-devel
- gcc
- gcc-c++
- make
zabbix_user:
user.present:
- name: zabbix
- createhome: false
- system: true
- shell: /sbin/nologin
zabbix-download:
file.managed:
- names:
- /usr/src/zabbix-5.4.4.tar.gz:
- source: salt://zabbix/file/zabbix-5.4.4.tar.gz
salt://zabbix/file/install.sh:
cmd.script
/usr/local/etc/zabbix_server.conf:
file.managed:
- source: salt://zabbix/file/zabbix_server.conf
zabbix-mysql-dir:
file.directory:
- name: /var/lib/mysql/
- user: mysql
- group: mysql
- mode: '0755'
- makedirs: true
'ln -s /tmp/mysql.sock /var/lib/mysql/':
cmd.run
/srv/salt/prod/zabbix/file/install.sh
#! /bin/bash
cd /usr/src/
tar xf zabbix-5.4.4.tar.gz
mysql -uroot -p123456 -e "create database zabbix character set utf8 collate utf8_bin;"
mysql -uroot -p123456 -e "grant all privileges on zabbix.* to 'zabbix'@'localhost' identified by 'zabbix123';"
mysql -uroot -p123456 -e "flush privileges;"
cd /usr/src/zabbix-5.4.4/database/mysql
mysql -uroot -p123456 zabbix < schema.sql
mysql -uroot -p123456 zabbix < images.sql
mysql -uroot -p123456 zabbix < data.sql
cd /usr/src/zabbix-5.4.4
./configure --enable-server --enable-agent --with-mysql --with-net-snmp --with-libcurl --with-libxml2 && make install
cp -r ui/* /usr/local/apache/htdocs/zabbix/
chown -R apache.apache /usr/local/apache/htdocs
chmod 777 /usr/local/apache/htdocs/zabbix/conf
/srv/salt/prod/zabbix/config.sls
'zabbix_server':
cmd.run
'zabbix_agentd':
cmd.run
/etc/php.ini:
file.managed:
- source: salt://zabbix/file/php.ini
php-service:
service.running:
- name: php-fpm
- restart: true
