[系统运维]使用SaltStack自动化部署LNMP

一、文件以树状图格式显示

[root@master prod]# tree lnmp/
lnmp/
|-- files
|   |-- index.php
|   |-- my.cnf
|   `-- nginx.conf
|-- install.sls
|-- mysql.sls
`-- nginx.sls

1 directory, 6 files


[root@master prod]# tree modules/
modules/
|-- application
|   `-- php
|       |-- files
|       |   |-- install.sh
|       |   |-- oniguruma-devel-6.8.2-2.el8.x86_64.rpm
|       |   |-- php-7.4.24.tar.xz
|       |   |-- php-fpm
|       |   |-- php-fpm.conf
|       |   |-- php-fpm.service
|       |   `-- www.conf
|       `-- install.sls
|-- database
|   `-- mysql
|       |-- files
|       |   |-- install.sh
|       |   |-- my.cnf
|       |   |-- mysql-5.7.34-linux-glibc2.12-x86_64.tar.gz
|       |   |-- mysql.server
|       |   `-- mysqld.service
|       `-- install.sls
`-- web
    |-- apache
    |   |-- config.sls
    |   |-- files
    |   |   |-- apr-1.7.0.tar.gz
    |   |   |-- apr-util-1.6.1.tar.gz
    |   |   |-- httpd-2.4.51.tar.gz
    |   |   |-- httpd.conf
    |   |   |-- httpd.service
    |   |   |-- index.php
    |   |   `-- install.sh
    |   `-- install.sls
    `-- nginx
        |-- files
        |   |-- install.sh
        |   |-- nginx-1.20.1.tar.gz
        |   `-- nginx.service
        `-- install.sls

11 directories, 27 files

二、修改master配置文件

[root@master prod]# vim /etc/salt/master
# highstate format, and is generally just key/value pairs.
pillar_roots:
  base:
    - /srv/pillar/base
  prod:						// 添加这两行
    - /srv/pillar/prod
#
#ext_pillar:

// 创建目录
[root@master prod]# cd /srv/pillar/
[root@master pillar]# mkdir prod
[root@master pillar]# systemctl restart salt-master.service 

// 变量存放位置
[root@master pillar]# tree prod/
prod/
|-- mysql.sls
|-- nginx.sls
|-- php.sls
`-- top.sls

0 directories, 4 files

三、nginx安装

[root@master pillar]# cd
[root@master ~]# cat /srv/salt/prod/modules/web/nginx/install.sls 
"Development Tools:
  pkg.group_installed

usradd.nginx:
  user.present:
    - name: nginx
    - shell: /sbin/nologin
    - system: true
    - createhome: false

nginx-depend-packages:
  pkg.installed:
    - pkgs:
      - pcre-devel
      - openssl
      - openssl-devel
      - gd-devel
      - gcc
      - gcc-c++

copy_nginx:
  file.managed:
    - names:
      - /usr/src/nginx-1.20.1.tar.gz
        - source: salt://modules/web/nginx/files/nginx-1.20.1.tar.gz
      - /usr/lib/systemd/system/nginx.service:
        - source: salt://modules/web/nginx/files/nginx.service
        - template: jinjia

install_nginx:
  cmd.script:
    - name: salt://modules/web/nginx/files/install.sh {{ pillar['php_dir'] }}
    - unless: test -d {{ pillar['php_dir'] }}

四、mysql安装

[root@master ~]# cat /srv/salt/prod/modules/database/mysql/install.sls 
ncurses-compat-libs:
  pkg.installed

create-mysql-user:
  user.present:
    - name: mysql
    - system: true
    - createhome: false
    - shell: /sbin/nologin
   
create-datadir:
  file.directory:
    - name: /opt/data
    - user: mysql
    - group: mysql
    - mode: '0755'

/usr/src/mysql-5.7.34-linux-glibc2.12-x86_64.tar.gz:
  file.managed:
    - source: salt://modules/database/mysql/files/mysql-5.7.34-linux-glibc2.12-x86_64.tar.gz
    - user: root
    - group: root
    - mode: '0644'

install_mysql:
  cmd.script:
    - name: salt://modules/database/mysql/files/install.sh
    - unless: test -d /usr/local/mysql

trasfer-files:
  file.managed:
    - names:
      - /usr/local/mysql/support-files/mysql.server:
        - source: salt://modules/database/mysql/files/mysql.server
        - user: root
        - group: root
        - mode: '0644'
      - {{ pillar['mysql_dir'] }}/support-files/mysql.server:
        - source: salt://modules/database/mysql/files/mysqld.service
        - user: mysql
        - group: mysql
        - mode: '0755'
        - template: jinja
    - require:
      - cmd: install_mysql  

五、php安装

[root@master ~]# cat /srv/salt/prod/modules/application/php/install.sls 
/usr/src/oniguruma-devel-6.8.2-2.el8.x86_64.rpm:
  file.managed:
    - source: salt://modules/application/php/files/oniguruma-devel-6.8.2-2.el8.x86_64.rpm
    - user: root
    - group: root
    - mode: '0644'
  cmd.run:
    - name: yum -y install /usr/src/oniguruma-devel-6.8.2-2.el8.x86_64.rpm
    - unless: rpm -q oniguruma-devel

depend-package-install:
  pkg.installed:
    - pkgs:
      - libxml2
      - libxml2-devel
      - openssl
      - openssl-devel
      - bzip2
      - bzip2-devel
      - libcurl
      - libcurl-devel
      - libicu-devel
      - libjpeg-turbo
      - libjpeg-turbo-devel
      - libpng
      - libpng-devel
      - openldap-devel
      - pcre-devel
      - freetype
      - freetype-devel
      - gmp
      - gmp-devel
      - libmcrypt
      - libmcrypt-devel
      - readline
      - readline-devel
      - libxslt
      - libxslt-devel
      - mhash
      - mhash-devel
      - php-mysqlnd
      - libsqlite3x-devel
      - libzip-devel

/usr/src/php-7.4.24.tar.xz:
  file.managed:
    - source: salt://modules/application/php/files/php-7.4.24.tar.xz 
    - user: root
    - group: root
    - mode: '0644'

install_php:
  cmd.script:
    - name: salt://modules/application/php/files/install.sh {{ pillar['php_dir'] }}
    - unless: test -d /usr/local/php

copy_config:
  file.managed:
    - names: 
       - /etc/init.d/php-fpm:
         - source: salt://modules/application/php/files/php-fpm
         - user: root
         - group: root
         - mode: '0755'
       - {{ pillar['php_dir'] }}/etc/php-fpm.conf:
         - source: salt://modules/application/php/files/php-fpm.conf
         - user: root
         - group: root
         - mode: '0644'
       - {{ pillar['php_dir'] }}/etc/php-fpm.d/www.conf:
         - source: salt://modules/application/php/files/www.conf
         - user: root
         - group: root
         - mode: '0644'
       - /usr/lib/systemd/system/php-fpm.service:
         - source: salt://modules/application/php/files/php-fpm.service
         - user: root
         - group: root
         - mode: '0644' 
    - require:
      - cmd: install_php

php-fpm.service:
  service.running:
    - enable: true
    - reload: true
    - require:
      - cmd: install_php
      - file: copy_config
    - watch:
      - file: copy_config  

六、编写lnmp的部署文件

nginx

[root@master ~]# cat /srv/salt/prod/lnmp/nginx.sls 
include:
  - modules.web.nginx.install

copy_nginx_files:
  file.managed:
    - names:
      - {{ pillar['php_dir'] }}/conf/nginx.conf:
        - source: salt://lnmp/files/nginx.conf
        - user: root
        - group: root
        - mode: '0644'
      - {{ pillar['php_dir'] }}/html/index.php:
        - source: salt://lnmp/files/index.php
      - require:
        - cmd: install_nginx

nginx:
  service.running:
    - enable: true
    - reload: true
    - require:
      - cmd: install_nginx
    - watch:
      - file: copy_nginx_files

mysql

[root@master ~]# cat /srv/salt/prod/lnmp/mysql.sls 
include:
  - modules.database.mysql.install

copy_lnmp_mysql_file:
  file.managed:
    - user: root
    - group: root
    - mode: '0644'
    - names:
      - /etc/my.cnf:
        - source: salt://lnmp/files/my.cnf
      - require:
        - cmd: install_mysql

mysqld:
  service.running:
    - enable: true
    - reload: true
    - require:
      - cmd: install_mysql
      - file: trasfer-files
    - watch:
      - file: copy_lnmp_mysql_file

set_mysql_password:
  cmd.run:
    - name: {{ pillar['mysql_dir'] }}/bin/mysql -e "set password=password('123456');"
    - require:
      - service: mysqld
    - unless: {{ pillar['mysql_dir'] }}/bin/mysql -uroot -p123 -e "exit"

lnmp一键部署

[root@master ~]# cat /srv/salt/prod/lnmp/install.sls 
include:
  - lnmp.nginx
  - lnmp.mysql
  - modules.application.php.install

查看端口号

[root@node1 ~]# ss -antl
State  Recv-Q Send-Q Local Address:Port   Peer Address:Port Process                                                     
LISTEN 0      128        127.0.0.1:9000        0.0.0.0:*                                                                
LISTEN 0      128          0.0.0.0:80          0.0.0.0:*                                                                
LISTEN 0      128          0.0.0.0:22          0.0.0.0:*                                                                
LISTEN 0      80                 *:3306              *:*                                                                
LISTEN 0      128             [::]:22             [::]:* 

七、web页面访问