- 1. SaltStack模块介绍
- 2. SaltStack常用模块
- 2.1 SaltStack常用模块之network
- 2.1.1 network.active_tcp
- 2.1.2 network.calc_net
- 2.1.3 network.connect
- 2.1.4 network.default_route
- 2.1.5 network.get_fqdn
- 2.1.6 network.get_hostname
- 2.1.7 network.get_route
- 2.1.8 network.hw_addr
- 2.1.9 network.ifacestartswith
- 2.1.10 network.in_subnet
- 2.1.11 network.interface
- 2.1.12 network.interface_ip
- 2.1.13 network.interfaces
- 2.1.14 network.ip_addrs
- 2.1.15 network.netstat
- 2.1.16 network.ping
- 2.1.17 network.reverse_ip
- 2.2 SaltStack常用模块之service
- 2.2.1 service.available
- 2.2.2 service.get_all
- 2.2.3 service.disabled
- 2.2.4 service.enabled
- 2.2.5 service.disable
- 2.2.6 service.enable
- 2.2.7 service.reload
- 2.2.8 service.stop
- 2.2.9 service.start
- 2.2.10 service.restart
- 2.2.11 service.status
- 2.3 SaltStack常用模块之pkg
- 2.3.1 pkg.download
- 2.3.2 pkg.file_list
- 2.3.3 pkg.group_info
- 2.3.4 pkg.group_list
- 2.3.5 pkg.install
- 2.3.6 pkg.list_downloaded
- 2.3.7 pkg.list_pkgs
- 2.3.8 pkg.owner
- 2.3.9 pkg.remove
- 2.3.10 pkg.upgrade
- 2.4 SaltStack常用模块之state
- 2.4.1 state.show_highstate
- 2.4.2 state.highstate
- 2.4.3 state.show_state_usage
- 2.4.4 state.show_top
- 2.4.5 state.top
- 2.4.6 state.show_sls
- 2.5 user模块
- 2.5.1 user.add
- 2.5.2 user.info
- 2.5.3 user.getent
- 2.5.4 user.list_groups
- 2.5.5 user.rename
- 2.5.6 user.delete
- 2.6 cp模块
- 2.6.1 get_file
- 2.6.2 get_dir
- 2.6.3 get_url
- 2.7 SaltStack常用模块之salt-cp
- 2.8 SaltStack常用模块之file
- 2.8.1 file.access
- 2.8.2 file.append
- 2.8.3 file.basename、file.dirname
- 2.8.4 file.check_hash
- 2.8.5 file.chattr
- 2.8.6 file.chown
- 2.8.7 file.copy
- 2.8.8 file.directory_exists、file.file_exists
- 2.8.9 file.diskusage
- 2.8.10 file.find
- 2.8.11 file.get_gid、file.get_group
- 2.8.12 file.get_uid、file.get_user
- 2.8.13 file.get_hash
- 2.8.14 file.get_mode
- 2.8.15 file.get_selinux_context
- 2.8.16 file.get_sum
- 2.8.17 file.gid_to_group、file.group_to_gid
- 2.8.18 file.user_to_uid、file.uid_to_user
- 2.8.19 file.grep
- 2.8.20 file.is_blkdev
- 2.8.21 file.lsattr
- 2.8.22 file.mkdir
- 2.8.23 file.move
Module是日常使用SaltStack接触最多的一个组件,其用于管理对象操作,这也是SaltStack通过Push的方式进行管理的入口,比如我们日常简单的执行命令、查看包安装情况、查看服务运行情况等工作都是通过SaltStack Module来实现的。
当安装好Master和Minion包后,系统上会安装很多Module
//查看所有module列表
[root@master ~]# salt '*' sys.list_modules
node1:
- acl
- aliases
- alternatives
- archive
- artifactory
- baredoc
- beacons
- bigip
- btrfs
- buildout
- chroot
- cloud
- cmd
- composer
- config
- consul
- container_resource
- cp
- cron
- cryptdev
- data
- defaults
...省略
//查看指定module的所有function
[root@master ~]# salt '*' sys.list_functions service
node1:
- service.available
- service.disable
- service.disabled
- service.enable
- service.enabled
- service.execs
- service.firstboot
- service.force_reload
- service.get_all
- service.get_disabled
- service.get_enabled
- service.get_running
- service.get_static
- service.mask
- service.masked
- service.missing
- service.offline
- service.reload
- service.restart
- service.show
- service.start
- service.status
- service.stop
- service.systemctl_reload
- service.unmask
//查看指定module的用法
[root@master ~]# salt '*' sys.doc service
service.available:
New in version 0.10.4
Check that the given service is available taking into account template
units.
CLI Example:
salt '*' service.available sshd
...省略
//SaltStack默认也支持一次执行多个Module,Module之间通过逗号隔开,默认传参之间也用逗号分隔,也支持指定传参分隔符号--args-separator=@,module和参数之间空格,当一个参数之间有空格必须用引号(hello world)
[root@master ~]# salt '*' test.echo,cmd.run,service.status "hello world",date,sshd
node1:
----------
cmd.run:
Thu Nov 4 03:14:18 CST 2021
service.status:
True
test.echo:
hello world
2. SaltStack常用模块
2.1 SaltStack常用模块之network
2.1.1 network.active_tcp
返回所有活动的tcp连接
[root@master ~]# salt '*' network.active_tcp
node1:
----------
0:
----------
local_addr:
192.168.237.170
local_port:
22
remote_addr:
192.168.237.1
remote_port:
52805
1:
----------
local_addr:
192.168.237.170
local_port:
55986
remote_addr:
192.168.237.167
remote_port:
4505
2.1.2 network.calc_net
通过IP和子网掩码计算出网段
[root@master ~]# salt '*' network.calc_net 192.168.237.170 255.255.0.0
node1:
192.168.0.0/16
[root@master ~]# salt '*' network.calc_net 192.168.237.170 255.255.240.0
node1:
192.168.224.0/20
[root@master ~]# salt '*' network.calc_net 192.168.237.170 255.255.255.0
node1:
192.168.237.0/24
2.1.3 network.connect
测试minion至某一台服务器的网络是否连通
[root@master ~]# salt '*' network.connect baidu.com 80
node1:
----------
comment:
Successfully connected to baidu.com (220.181.38.148) on tcp port 80
result:
True
2.1.4 network.default_route
查看默认路由
[root@master ~]# salt '*' network.default_route
node1:
|_
----------
addr_family:
inet
destination:
0.0.0.0
flags:
UG
gateway:
192.168.237.2
interface:
ens160
netmask:
0.0.0.0
2.1.5 network.get_fqdn
查看主机的fqdn(完全限定域名)
[root@master ~]# salt '*' network.get_fqdn
node1:
node1
2.1.6 network.get_hostname
获取主机名
[root@master ~]# salt '*' network.get_hostname
node1:
node1
2.1.7 network.get_route
查询到一个目标网络的路由信息
[root@master ~]# salt '*' network.get_route 192.168.70.200
node1:
----------
destination:
192.168.70.200
gateway:
192.168.237.2
interface:
ens160
source:
192.168.237.170
2.1.8 network.hw_addr
返回指定网卡的MAC地址
[root@master ~]# salt '*' network.hw_addr ens160
node1:
00:0c:29:cd:b3:bb
2.1.9 network.ifacestartswith
从特定CIDR检索接口名称
[root@master ~]# salt '*' network.ifacestartswith 192.168
node1:
- ens160
2.1.10 network.in_subnet
判断当前主机是否在某一个网段内
[root@master ~]# salt '*' network.in_subnet 192.168.237.0/24
node1:
True
2.1.11 network.interface
返回指定网卡的信息
[root@master ~]# salt '*' network.interface ens160
node1:
|_
----------
address:
192.168.237.170
broadcast:
192.168.237.255
label:
ens160
netmask:
255.255.255.0
2.1.12 network.interface_ip
返回指定网卡的IP地址
[root@master ~]# salt '*' network.interface_ip ens160
node1:
192.168.237.170
2.1.13 network.interfaces
返回当前系统中所有的网卡信息
[root@master ~]# salt '*' network.interfaces
node1:
----------
ens160:
----------
hwaddr:
00:0c:29:cd:b3:bb
inet:
|_
----------
address:
192.168.237.170
broadcast:
192.168.237.255
label:
ens160
netmask:
255.255.255.0
inet6:
|_
----------
address:
fe80::cef:1b5b:1107:cf5d
prefixlen:
64
scope:
link
|_
----------
address:
fe80::7220:8af:6655:3c80
prefixlen:
64
scope:
link
up:
True
lo:
----------
hwaddr:
00:00:00:00:00:00
inet:
|_
----------
address:
127.0.0.1
broadcast:
None
label:
lo
netmask:
255.0.0.0
inet6:
|_
----------
address:
::1
prefixlen:
128
scope:
host
up:
True
2.1.14 network.ip_addrs
返回一个IPv4的地址列表
该函数将会忽略掉127.0.0.1的地址
[root@master ~]# salt '*' network.ip_addrs
node1:
- 192.168.237.170
2.1.15 network.netstat
返回所有打开的端口和状态
[root@master ~]# salt '*' network.netstat
node1:
|_
----------
inode:
27378
local-address:
192.168.237.170%ens160:68
program:
NetworkManager
proto:
udp
recv-q:
0
remote-address:
192.168.237.254:67
send-q:
0
user:
0
|_
----------
inode:
26986
local-address:
0.0.0.0:22
program:
sshd
proto:
tcp
recv-q:
0
remote-address:
0.0.0.0:*
send-q:
128
state:
LISTEN
user:
0
|_
----------
inode:
27728
local-address:
0.0.0.0:80
program:
nginx
proto:
tcp
recv-q:
0
remote-address:
0.0.0.0:*
send-q:
128
state:
LISTEN
user:
0
|_
----------
inode:
0
local-address:
192.168.237.170:33276
program:
proto:
tcp
recv-q:
0
remote-address:
192.168.237.167:4506
send-q:
0
state:
TIME-WAIT
user:
0
|_
----------
inode:
29911
local-address:
192.168.237.170:47000
program:
salt-minion
proto:
tcp
recv-q:
0
remote-address:
192.168.237.167:4505
send-q:
0
state:
ESTABLISHED
user:
0
|_
----------
inode:
0
local-address:
192.168.237.170:33274
program:
proto:
tcp
recv-q:
0
remote-address:
192.168.237.167:4506
send-q:
0
state:
TIME-WAIT
user:
0
|_
----------
inode:
29452
local-address:
192.168.237.170:22
program:
sshd
proto:
tcp
recv-q:
0
remote-address:
192.168.237.1:56747
send-q:
0
state:
ESTABLISHED
user:
0
|_
----------
inode:
26988
local-address:
[::]:22
program:
sshd
proto:
tcp
recv-q:
0
remote-address:
[::]:*
send-q:
128
state:
LISTEN
user:
0
|_
----------
inode:
27729
local-address:
[::]:80
program:
nginx
proto:
tcp
recv-q:
0
remote-address:
[::]:*
send-q:
128
state:
LISTEN
user:
0
2.1.16 network.ping
使用ping命令测试到某主机的连通性
[root@master ~]# salt '*' network.ping baidu.com
node1:
PING baidu.com (220.181.38.148) 56(84) bytes of data.
64 bytes from 220.181.38.148 (220.181.38.148): icmp_seq=1 ttl=128 time=24.7 ms
64 bytes from 220.181.38.148 (220.181.38.148): icmp_seq=2 ttl=128 time=60.4 ms
64 bytes from 220.181.38.148 (220.181.38.148): icmp_seq=3 ttl=128 time=25.1 ms
64 bytes from 220.181.38.148 (220.181.38.148): icmp_seq=4 ttl=128 time=37.1 ms
--- baidu.com ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 8ms
rtt min/avg/max/mdev = 24.651/36.806/60.406/14.506 ms
2.1.17 network.reverse_ip
返回一个指定的IP地址的反向地址
[root@master ~]# salt '*' network.reverse_ip 192.168.237.170
node1:
170.237.168.192.in-addr.arpa
2.2 SaltStack常用模块之service
2.2.1 service.available
判断指定的服务是否可用
[root@master ~]# salt '*' service.available nginx
node1:
True
[root@master ~]# salt '*' service.available httpd
node1:
False
2.2.2 service.get_all
获取所有正在运行的服务
[root@master ~]# salt '*' service.get_all
node1:
- NetworkManager
- NetworkManager-dispatcher
- NetworkManager-wait-online
- auditd
- autovt@
- basic.target
- blk-availability
- bluetooth.target
- console-getty
- container-getty@
- cpupower
- crond
- cryptsetup-pre.target
- cryptsetup.target
- ctrl-alt-del.target
...省略
2.2.3 service.disabled
检查指定服务是否开机不自动启动
[root@master ~]# salt '*' service.disabled nginx
node1:
False
2.2.4 service.enabled
检查指定服务是否开机自动启动
[root@master ~]# salt '*' service.enabled nginx
node1:
True
2.2.5 service.disable
设置指定服务开机不自动启动
[root@master ~]# salt '*' service.disable nginx
node1:
True
[root@master ~]# salt '*' service.disabled nginx
node1:
True
2.2.6 service.enable
设置指定服务开机自动启动
[root@master ~]# salt '*' service.enable nginx
node1:
True
[root@master ~]# salt '*' service.enabled nginx
node1:
True
2.2.7 service.reload
重新加载指定服务(服务必须正在运行)
[root@master ~]# salt '*' service.reload nginx
node1:
True
2.2.8 service.stop
停止指定服务
[root@master ~]# salt '*' service.stop nginx
node1:
True
2.2.9 service.start
启动指定服务
[root@master ~]# salt '*' service.start nginx
node1:
True
2.2.10 service.restart
重启指定服务
[root@master ~]# salt '*' service.restart nginx
node1:
True
2.2.11 service.status
查看指定服务的状态
[root@master ~]# salt '*' service.status nginx
node1:
True
2.3 SaltStack常用模块之pkg
2.3.1 pkg.download
只下载软件包但不安装
此功能将会下载指定的软件包,但是需要在minion端安装yum-utils,可以使用 cmd.run 进行远程安装
[root@master ~]# salt '*' pkg.download wget
node1:
----------
wget:
/var/cache/yum/packages/wget-1.19.5-10.el8.x86_64.rpm //软件保存的路径
2.3.2 pkg.file_list
列出指定包或系统中已安装的所有包的文件
//列出已安装的nginx软件包提供的所有文件
[root@master ~]# salt '*' pkg.file_list nginx
node1:
----------
errors:
files:
- /etc/logrotate.d/nginx
- /etc/nginx/fastcgi.conf
- /etc/nginx/fastcgi.conf.default
- /etc/nginx/fastcgi_params
- /etc/nginx/fastcgi_params.default
- /etc/nginx/koi-utf
- /etc/nginx/koi-win
- /etc/nginx/mime.types
- /etc/nginx/mime.types.default
- /etc/nginx/nginx.conf
- /etc/nginx/nginx.conf.default
- /etc/nginx/scgi_params
- /etc/nginx/scgi_params.default
- /etc/nginx/uwsgi_params
- /etc/nginx/uwsgi_params.default
- /etc/nginx/win-utf
- /usr/bin/nginx-upgrade
- /usr/lib/.build-id
- /usr/lib/.build-id/2d
- /usr/lib/.build-id/2d/da6018ae12edb856ad3d2cf61bf586b6b4873c
- /usr/lib/systemd/system/nginx.service
- /usr/lib64/nginx/modules
- /usr/sbin/nginx
- /usr/share/doc/nginx
- /usr/share/doc/nginx/CHANGES
- /usr/share/doc/nginx/README
- /usr/share/doc/nginx/README.dynamic
- /usr/share/licenses/nginx
- /usr/share/licenses/nginx/LICENSE
- /usr/share/man/man3/nginx.3pm.gz
- /usr/share/man/man8/nginx-upgrade.8.gz
- /usr/share/man/man8/nginx.8.gz
- /usr/share/nginx/html/404.html
- /usr/share/nginx/html/50x.html
- /usr/share/nginx/html/index.html
- /usr/share/nginx/html/nginx-logo.png
- /usr/share/nginx/html/poweredby.png
- /usr/share/vim/vimfiles/ftdetect/nginx.vim
- /usr/share/vim/vimfiles/indent/nginx.vim
- /usr/share/vim/vimfiles/syntax/nginx.vim
- /var/lib/nginx
- /var/lib/nginx/tmp
- /var/log/nginx
//当不提供参数时,将会列出当前系统中所有已安装软件的文件列表
2.3.3 pkg.group_info
查看包组的信息
[root@master ~]# salt '*' pkg.group_info 'Development Tools'
node1:
----------
conditional:
default:
- asciidoc
- byacc
- ctags
- diffstat
- elfutils-libelf-devel
- git
- intltool
- jna
- ltrace
- patchutils
- perl-Fedora-VSP
- perl-Sys-Syslog
- perl-generators
- pesign
- source-highlight
- systemtap
- valgrind
- valgrind-devel
description:
A basic development environment.
group:
Development Tools
id:
None
mandatory:
- autoconf
- automake
- binutils
- bison
- flex
- gcc
- gcc-c++
- gdb
- glibc-devel
- libtool
- make
- pkgconf
- pkgconf-m4
- pkgconf-pkg-config
- redhat-rpm-config
- rpm-build
- rpm-sign
- strace
optional:
- cmake
- expect
- rpmdevtools
- rpmlint
type:
package group
2.3.4 pkg.group_list
列出系统中所有的包组
[root@master ~]# salt '*' pkg.group_list
node1:
----------
available:
- Conflicts baseOS
- Dial-up Networking Support
- Hardware Monitoring Utilities
- Hardware Support
- Large Systems Performance
- Legacy UNIX Compatibility
- Python Web
- Server product core
- Windows File Server
- Additional Development
- Anaconda tools
- Backup Client
- base
- base-x
- Conflicts AppStream
- Container Management
- Debugging Tools
- Desktop Debugging and Performance Tools
- Development Tools
- .NET Core Development
- File and Storage Server
- Fonts
- FTP Server
- GNOME Applications
- GNOME
- Graphical Administration Tools
- Graphics Creation Tools
- Guest Agents
- Guest Desktop Agents
- Headless Management
- Infiniband Support
- Input Methods
- Internet Applications
- Internet Browser
- Java Platform
- Legacy X Window System Compatibility
- Mail Server
- Mainframe Access
- Multimedia
- Network File System Client
- Network Servers
- Networking Tools
- Common NetworkManager submodules
- Office Suite and Productivity
- Atomic Host ostree support
- Performance Tools
- Platform Development
- KVM platform specific packages
- Hyper-v platform specific packages
- Printing Client
- Remote Desktop Clients
- Remote Management for Linux
- RPM Development Tools
- Scientific Support
- Security Tools
- Smart Card Support
- Standard
- System Tools
- TeX formatting system
- Virtualization Client
- Virtualization Hypervisor
- Virtualization Platform
- Virtualization Tools
- Basic Web Server
- Workstation product core
available environments:
- Server with GUI
- Server
- Workstation
- Custom Operating System
- Virtualization Host
available languages:
----------
installed:
- Core
- VMware platform specific packages
installed environments:
- Minimal Install
2.3.5 pkg.install
安装软件
[root@master ~]# salt '*' pkg.install wget
node1:
----------
wget:
----------
new:
1.19.5-10.el8
old:
2.3.6 pkg.list_downloaded
列出已下载到本地的软件包
[root@master ~]# salt '*' pkg.list_downloaded
node1:
----------
2.3.7 pkg.list_pkgs
以字典的方式列出当前已安装的软件包
[root@master ~]# salt '*' pkg.list_pkgs
node1:
----------
Judy:
1.0.5-18.module_el8.3.0+757+d382997d
NetworkManager:
1:1.22.8-4.el8
NetworkManager-libnm:
1:1.22.8-4.el8
NetworkManager-team:
1:1.22.8-4.el8
NetworkManager-tui:
1:1.22.8-4.el8
acl:
2.2.53-1.el8
audit:
3.0-0.17.20191104git1c2f876.el8
audit-libs:
3.0-0.17.20191104git1c2f876.el8
...省略
2.3.8 pkg.owner
列出指定文件是由哪个包提供的
[root@master ~]# salt '*' pkg.owner /etc/ssh/moduli
node1:
openssh
[root@master ~]# salt '*' pkg.owner /etc/ssh/moduli /usr/libexec/openssh
node1:
----------
/etc/ssh/moduli:
openssh
/usr/libexec/openssh:
openssh
2.3.9 pkg.remove
卸载指定软件
[root@master ~]# salt '*' pkg.remove wget
node1:
----------
wget:
----------
new:
old:
1.19.5-10.el8
//若要卸载多个文件,中间需要用逗号隔开
2.3.10 pkg.upgrade
升级系统中所有的软件包或升级指定的软件包
[root@master ~]# salt '*' cmd.run 'rpm -qa|grep wget'
node1:
wget-1.14-18.el7_6.1.x86_64
[root@master ~]# salt '*' pkg.upgrade name=wget
node1:
----------
wget:
----------
new:
1.19.5-10.el8
old:
1.14-18.el7_6.1
//若想升级系统中所有的软件包则把 name 参数去掉即可
2.4 SaltStack常用模块之state
2.4.1 state.show_highstate
显示当前系统中有哪些高级状态
[root@master ~]# salt '*' state.show_highstate
node1:
----------
nginx-install:
----------
__env__:
base
__sls__:
web.nginx.install
pkg:
|_
----------
name:
nginx
- installed
|_
----------
order:
10000
nginx-service:
----------
__env__:
base
__sls__:
web.nginx.install
service:
|_
----------
name:
nginx
|_
----------
enable:
True
- running
|_
----------
order:
10001
2.4.2 state.highstate
执行高级状态
[root@master ~]# salt '*' state.highstate
node1:
----------
ID: nginx-install
Function: pkg.installed
Name: nginx
Result: True
Comment: The following packages were installed/updated: nginx
Started: 19:37:40.688240
Duration: 9982.447 ms
Changes:
----------
dejavu-fonts-common:
----------
new:
2.35-7.el8
old:
dejavu-sans-fonts:
----------
new:
2.35-7.el8
old:
fontconfig:
----------
new:
2.13.1-3.el8
old:
fontpackages-filesystem:
----------
new:
1.44-22.el8
old:
gd:
----------
new:
2.2.5-7.el8
old:
jbigkit-libs:
----------
new:
2.1-14.el8
old:
libX11:
----------
new:
1.6.8-4.el8
old:
libX11-common:
----------
new:
1.6.8-4.el8
old:
libXau:
----------
new:
1.0.9-3.el8
old:
libXpm:
----------
new:
3.5.12-8.el8
old:
libtiff:
----------
new:
4.0.9-18.el8
old:
libwebp:
----------
new:
1.0.0-3.el8_4
old:
libxcb:
----------
new:
1.13.1-1.el8
old:
nginx:
----------
new:
1:1.14.1-9.module_el8.0.0+184+e34fea82
old:
nginx-all-modules:
----------
new:
1:1.14.1-9.module_el8.0.0+184+e34fea82
old:
nginx-filesystem:
----------
new:
1:1.14.1-9.module_el8.0.0+184+e34fea82
old:
nginx-mod-http-image-filter:
----------
new:
1:1.14.1-9.module_el8.0.0+184+e34fea82
old:
nginx-mod-http-perl:
----------
new:
1:1.14.1-9.module_el8.0.0+184+e34fea82
old:
nginx-mod-http-xslt-filter:
----------
new:
1:1.14.1-9.module_el8.0.0+184+e34fea82
old:
nginx-mod-mail:
----------
new:
1:1.14.1-9.module_el8.0.0+184+e34fea82
old:
nginx-mod-stream:
----------
new:
1:1.14.1-9.module_el8.0.0+184+e34fea82
old:
----------
ID: nginx-service
Function: service.running
Name: nginx
Result: True
Comment: Service nginx has been enabled, and is running
Started: 19:37:50.685949
Duration: 286.344 ms
Changes:
----------
nginx:
True
Summary for node1
------------
Succeeded: 2 (changed=2)
Failed: 0
------------
Total states run: 2
Total run time: 10.269 s
2.4.3 state.show_state_usage
显示当前系统中的高级状态执行情况
[root@master ~]# salt '*' state.show_state_usage
node1:
----------
base:
----------
count_all:
3
count_unused:
2
count_used:
1
unused:
- top
- web.apache.install
used:
- web.nginx.install
dev:
----------
count_all:
0
count_unused:
0
count_used:
0
unused:
used:
prod:
----------
count_all:
0
count_unused:
0
count_used:
0
unused:
used:
test:
----------
count_all:
0
count_unused:
0
count_used:
0
unused:
used:
2.4.4 state.show_top
返回minion将用于highstate的顶级数据
[root@master ~]# salt '*' state.show_top
node1:
----------
base:
- web.nginx.install
2.4.5 state.top
执行指定的top file,而不是默认的
[root@master ~]# salt '*' state.top top.sls
node1:
----------
ID: nginx-install
Function: pkg.installed
Name: nginx
Result: True
Comment: All specified packages are already installed
Started: 19:42:32.883717
Duration: 685.327 ms
Changes:
----------
ID: nginx-service
Function: service.running
Name: nginx
Result: True
Comment: The service nginx is already running
Started: 19:42:33.571088
Duration: 44.011 ms
Changes:
Summary for node1
------------
Succeeded: 2
Failed: 0
------------
Total states run: 2
Total run time: 729.338 ms
2.4.6 state.show_sls
显示 master 上特定sls或sls文件列表中的状态数据
[root@master ~]# salt '*' state.show_sls web.nginx.install
node1:
----------
nginx-install:
----------
__env__:
base
__sls__:
web.nginx.install
pkg:
|_
----------
name:
nginx
- installed
|_
----------
order:
10000
nginx-service:
----------
__env__:
base
__sls__:
web.nginx.install
service:
|_
----------
name:
nginx
|_
----------
enable:
True
- running
|_
----------
order:
10001
2.5 user模块
用于命令行管理用户
2.5.1 user.add创建用户
[root@master ~]# salt '*' group.add admin 1000
node1:
True
[root@master ~]# salt '*' user.add test 1500 admin /home/test /bin/bash
node1:
True
[root@master ~]# salt '*' cmd.run 'id test'
node1:
uid=1500(test) gid=1000(admin) groups=1000(admin)
2.5.2 user.info
返回用户信息
[root@master ~]# salt '*' user.info test
node1:
----------
fullname:
gid:
1000
groups:
- admin
home:
/bin/bash
homephone:
name:
test
other:
passwd:
x
roomnumber:
shell:
/bin/bash
uid:
1500
workphone:
2.5.3 user.getent
返回所有系统用户信息的列表
[root@master ~]# salt '*' user.getent
node1:
|_
----------
fullname:
root
gid:
0
groups:
- root
home:
/root
homephone:
name:
root
other:
passwd:
x
roomnumber:
shell:
/bin/bash
uid:
0
workphone:
|_
----------
fullname:
bin
gid:
1
groups:
- bin
home:
/bin
homephone:
name:
bin
other:
passwd:
x
roomnumber:
shell:
/sbin/nologin
uid:
1
workphone:
...省略
2.5.4 user.list_groups
列出指定用户所属组的列表
[root@master ~]# salt '*' user.list_groups test
node1:
- admin
2.5.5 user.rename
修改指定用户的用户名
[root@master ~]# salt '*' user.rename test admin
node1:
False
//虽然返回值为False,但是操作还是完成了
[root@node1 ~]# id test
id: “test”:无此用户
[root@node1 ~]# id admin
uid=1500(admin) gid=1000(admin) 组=1000(admin)
2.5.6 user.delete
删除用户
[root@master ~]# salt '*' user.delete admin
node1:
True
删除用户时,用户的所属组也删除了
2.6 cp模块
salt根目录:在master中 file_roots 定义的路径。例如:假设在master中有如下定义:
file_roots:
base:
- /srv/salt/
那么:salt://vimrc指的实际路径是:/srv/salt/vimrc,这样做的好处是,可以满足state系统中环境的概念。
[root@master ~]# vim /etc/salt/master
......
file_roots:
base:
- /srv/salt/base
test:
- /srv/salt/test
dev:
- /srv/salt/dev
prod:
- /srv/salt/prod
......
//在base目录下创建一个目录vimrc ,在vimrc目录下创建一个文件test
[root@master ~]# cd /srv/salt/base/
[root@master ~]# mkdir vimrc
[root@master base]# cd vimrc/
[root@master vimrc]# touch test
[root@master vimrc]# echo 'abc' > test
[root@master vimrc]# ls
test
[root@master vimrc]# cat test
abc
2.6.1 get_file
从master下载文件到客户端
[root@master ~]# salt '*' cp.get_file salt://vimrc/test /opt
node1:
/opt/test
[root@node1 ~]# ls /opt/
test
[root@node1 ~]# cat /opt/test
abc
2.6.2 get_dir
从master下载一整个目录
[root@master ~]# ls /srv/salt/base/
top.sls vimrc web
[root@master ~]# salt '*' cp.get_dir salt://web /opt /web目录在base环境下
node1:
- /opt/web/apache/install.sls
- /opt/web/nginx/install.sls
[root@node1 ~]# ls /opt/
test web
2.6.3 get_url
从一个url地址下载文件
[root@master ~]# salt '*' cp.get_url https://dlcdn.apache.org/apr/apr-1.7.0.tar.gz /opt
node1:
/opt/apr-1.7.0.tar.gz
//node1查看
[root@node1 ~]# ls /opt/
apr-1.7.0.tar.gz test web
2.7 SaltStack常用模块之salt-cp
salt-cp能够很方便的把 master 上的文件批量传到 minion上
//拷贝单个文件到目标主机的/opt目录下
[root@master ~]# salt '*' cmd.run 'ls /opt'
node1:
[root@master ~]# salt-cp '*' /etc/passwd /opt
node1:
----------
/opt/passwd:
True
[root@master ~]# salt '*' cmd.run 'ls /opt'
node1:
passwd
//拷贝多个文件到目标主机的/opt目录下
[root@master ~]# salt-cp '*' /etc/hostname /etc/host.conf /opt
node1:
----------
/opt/host.conf:
True
/opt/hostname:
True
[root@master ~]# salt '*' cmd.run 'ls /opt'
node1:
host.conf
hostname
passwd
2.8 SaltStack常用模块之file
2.8.1 file.access
- 检查文件是否存在
[root@master ~]# salt '*' file.access /opt/passwd f
node1:
True
- 检查指定文件的权限信息
//对文件使用
[root@master ~]# salt '*' cmd.run 'ls -ld /opt/passwd'
node1:
-rw-r--r-- 1 root root 1106 Nov 5 02:06 /opt/passwd
[root@master ~]# salt '*' file.access /opt/passwd r //是否有读权限
node1:
True
[root@master ~]# salt '*' file.access /opt/passwd w //是否有写权限
node1:
True
[root@master ~]# salt '*' file.access /opt/passwd x //是否有执行权限
node1:
False
//对目录使用
[root@master ~]# salt '*' cmd.run 'ls -ld /proc/1'
node1:
dr-xr-xr-x 9 root root 0 Nov 5 02:00 /proc/1
[root@master ~]# salt '*' file.access /proc/1 r
node1:
True
[root@master ~]# salt '*' file.access /proc/1 w
node1:
False
[root@master ~]# salt '*' file.access /proc/1 x
node1:
True
2.8.2 file.append
往一个文件里追加内容,若此文件不存在则会报异常
[root@master ~]# salt '*' cmd.run 'cat /opt/hostname'
node1:
master
[root@master ~]# salt '*' file.append /opt/hostname "hello world" "hello"
node1:
Wrote 2 lines to "/opt/hostname"
[root@master ~]# salt '*' cmd.run 'cat /opt/hostname'
node1:
master
hello world
hello
2.8.3 file.basename、file.dirname
file.basename:获取指定路径的基名
[root@master ~]# salt '*' file.basename '/etc/salt/minion'
node1:
minion
file.dirname:获取指定路径的目录名
[root@master ~]# salt '*' file.dirname '/etc/salt/minion'
node1:
/etc/salt
2.8.4 file.check_hash
检查指定的文件与hash字符串是否匹配,匹配则返回 True 否则返回 False
[root@master ~]# salt '*' cmd.run 'md5sum /opt/passwd'
node1:
414a6420e1a4a3d278778ddcd132a2df /opt/passwd
[root@master ~]# salt '*' file.check_hash /opt/passwd 414a6420e1a4a3d278778ddcd132a2df
node1:
True
2.8.5 file.chattr
修改指定文件的属性
| 属性 | 对文件的意义 | 对目录的意义 |
|---|---|---|
| a | 只允许在这个文件之后追加数据,不允许覆盖、删除移动文件 | 只允许在这个目录下建立和修改文件,而不允许删除任何文件 |
| i | 不允许对这个文件进行任何的修改,不能删除、更改、移动 | 任何的进程只能修改目录之下的文件,不允许建立和删除文件 |
- 给指定文件添加属性
//查看当前文件属性
[root@master ~]# salt '*' cmd.run 'lsattr /opt/hostname'
node1:
-------------------- /opt/hostname
//添加属性
[root@master ~]# salt '*' file.chattr /opt/hostname operator=add attributes=a //add添加,a属性
node1:
True
[root@master ~]# salt '*' cmd.run 'lsattr /opt/hostname' //查看,添加成功
node1:
-----a-------------- /opt/hostname
//只能追加,无法覆盖、删除和移动
[root@node1 opt]# echo '123' >> hostname
[root@node1 opt]# echo '123' > hostname
[root@node1 opt]# rm -f hostname
rm: 无法删除'hostname': 不允许的操作
[root@node1 opt]# mv hostname /tmp/
mv: 无法将'hostname' 移动至'/tmp/hostname': 不允许的操作
- 给指定文件去除属性
[root@master ~]# salt '*' file.chattr /opt/hostname operator=remove attributes=a //remove,删除,a是属性
node1:
True
[root@master ~]# salt '*' cmd.run 'lsattr /opt/hostname'
node1:
-------------------- /opt/hostname
2.8.6 file.chown
设置指定文件的属主、属组信息
//对文件进行修改
[root@master ~]# salt '*' cmd.run 'ls -l /opt/passwd'
node1:
-rw-r--r-- 1 root root 1106 Nov 5 02:06 /opt/passwd
[root@master ~]# salt '*' file.chown /opt/passwd nginx nginx
node1:
None
[root@master ~]# salt '*' cmd.run 'ls -l /opt/passwd'
node1:
-rw-r--r-- 1 nginx nginx 1106 Nov 5 02:06 /opt/passwd
//对目录进行修改
[root@master ~]# salt '*' cmd.run 'ls -ld /opt/test'
node1:
drwxr-xr-x 2 root root 6 Nov 5 03:00 /opt/test
[root@master ~]# salt '*' file.chown /opt/test nginx nginx
node1:
None
[root@master ~]# salt '*' cmd.run 'ls -ld /opt/test'
node1:
drwxr-xr-x 2 nginx nginx 6 Nov 5 03:00 /opt/test
2.8.7 file.copy
在远程主机上复制文件或目录(用于minion端文件传输)
- 拷贝文件
[root@master ~]# salt '*' cmd.run 'ls -l /opt/'
node1:
total 0
[root@master ~]# salt '*' file.copy /etc/salt/minion /opt/minion //目标路径后面必须要写文件名,可以与原文件不同
node1:
True
[root@master ~]# salt '*' cmd.run 'ls -l /opt/'
node1:
total 40
-rw-r----- 1 root root 38728 Nov 5 07:28 minion
- 覆盖并拷贝目录,将会覆盖同名文件或目录
[root@master ~]# salt '*' file.copy /tmp/ /opt/abc recurse=true
node1:
True
[root@master ~]# salt '*' cmd.run 'ls -l /opt/'
node1:
total 44
drwxrwxrwt 19 root root 4096 Nov 5 07:32 abc
-rw-r----- 1 root root 38728 Nov 5 07:28 minion
- 删除目标目录中同名的文件或目录并拷贝新内容至其中
[root@master ~]# salt '*' cmd.run 'ls -l /tmp/test'
node1:
total 0
drwxr-xr-x 2 root root 6 Nov 5 07:48 abc
drwxr-xr-x 2 root root 6 Nov 5 07:48 acc
drwxr-xr-x 2 root root 19 Nov 4 18:56 hsperfdata_root
drwx------ 2 root root 6 Nov 3 21:28 vmware-root_948-2688554130
drwx------ 2 root root 6 Nov 3 19:12 vmware-root_956-2722239132
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
node1:
total 0
drwxr-xr-x 2 root root 18 Nov 5 07:45 abc
drwxr-xr-x 2 root root 19 Nov 4 18:56 hsperfdata_root
drwx------ 2 root root 6 Nov 3 21:28 vmware-root_948-2688554130
drwx------ 2 root root 6 Nov 3 19:12 vmware-root_956-2722239132
[root@master ~]# salt '*' file.copy /tmp/test /opt recurse=true remove_existing=true
node1:
True
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
node1:
total 0
drwxr-xr-x 2 root root 6 Nov 5 07:48 abc
drwxr-xr-x 2 root root 6 Nov 5 07:48 acc
drwxr-xr-x 2 root root 19 Nov 4 18:56 hsperfdata_root
drwx------ 2 root root 6 Nov 3 21:28 vmware-root_948-2688554130
drwx------ 2 root root 6 Nov 3 19:12 vmware-root_956-2722239132
2.8.8 file.directory_exists、file.file_exists
file.ditectory_exists:判断指定目录是否存在,存在则返回 True ,否则返回 False
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
node1:
total 0
drwxr-xr-x 2 root root 6 Nov 5 07:48 abc
drwxr-xr-x 2 root root 6 Nov 5 07:48 acc
drwxr-xr-x 2 root root 19 Nov 4 18:56 hsperfdata_root
drwx------ 2 root root 6 Nov 3 21:28 vmware-root_948-2688554130
drwx------ 2 root root 6 Nov 3 19:12 vmware-root_956-2722239132
[root@master ~]# salt '*' file.directory_exists /opt/abc
node1:
True
file.file_exists:判断指定文件是否存在
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
node1:
total 0
drwxr-xr-x 2 root root 6 Nov 5 07:48 abc
drwxr-xr-x 2 root root 6 Nov 5 07:48 acc
-rw-r--r-- 1 root root 0 Nov 5 07:59 test
[root@master ~]# salt '*' file.file_exists /opt/test
node1:
True
[root@master ~]# salt '*' file.file_exists /opt/abc
node1:
False //abc是目录而非文件
2.8.9 file.diskusage
递归计算指定路径的磁盘使用情况并以字节为单位返回
//指定目录,计算目录时有点偏差
[root@master ~]# salt '*' cmd.run 'du -sb /etc'
node1:
22163081 /etc
[root@master ~]# salt '*' file.diskusage /etc
node1:
23508656
//指定文件
[root@master ~]# salt '*' cmd.run 'du -sb /etc/services'
node1:
692252 /etc/services
[root@master ~]# salt '*' file.diskusage /etc/services
node1:
692252
2.8.10 file.find
类似 find 命令并返回符合指定条件的路径列表
- 选项和匹配条件
name = path-glob # 区分大小写的 iname = path-glob # 不分大小写 regex = path-regex # 区分大小写的 iregex = path-regex # 不分大小写 type = 文件类型 # 匹配任何列出的类型 user = users # 匹配任何列出的用户 group = groups # 匹配任何列出的组 size = [+-]number[单位] # 默认单位=字节 mtime = 时间间隔 # 最近修改的日期 grep = regex # 搜索文件内容
- 操作:
delete [= file-types] 删除 # default type = 'f'
exec = command [arg ...] 执行 # where {} is replaced by pathname
print [= print-opts] 打印
默认操作打印路径
- 匹配的深度标准:
maxdepth = 最大横向深度 mindepth = 最小横向深度
- path-glob:
* = 匹配零个或多个字符
? = 匹配任何字符
[abc] = 匹配a, b或c
[!abc] or [^abc] = 匹配除a, b, c以外的任何东西,!和^为取反
[x-y] = 匹配字符x到y
[!x-y] or [^x-y] = 匹配除了x到y的任何字符
{a,b,c} = 匹配a或b或c
-
path-regex: 一个用于匹配路径名的Python正则表达式模式
-
文件类型:
a: 所有文件类型 b: 块设备 c: 字符设备 d: 目录 p: FIFO (named pipe) f: 普通文件类型 l: 符号链接 s: 套接字文件
-
users: 由空格和/或逗号分隔的用户名和/或uid列表
-
groups: 由空格和/或逗号分隔的组名和/或gids列表
-
文件大小的单位:
b: bytes k: kilobytes m: megabytes g: gigabytes t: terabytes
- 时间间隔:
[w] [ d] [ h] [ m] [ s] w: 周 d: 天 h: 时 m: 分 s: 秒
- 打印选项:
user: 用户名 group: 组名称 md5: 文件内容的MD5摘要 mode: 文件权限(作为整数) mtime: 最后一次修改时间 name: 文件名 path: 文件绝对路径 size: 文件大小(以字节为单位) type: 文件类型
- 示例
salt '*' file.find / type=f name=*.bak size=+10m salt '*' file.find /var mtime=+30d size=+10m print=path,size,mtime salt '*' file.find /var/log name=*.[0-9] mtime=+30d size=+10m delete2.8.11 file.get_gid、file.get_group
file.get_gid:获取指定文件的gid
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
node1:
total 0
drwxr-xr-x 2 root root 6 Nov 5 07:48 abc
drwxr-xr-x 2 root root 6 Nov 5 07:48 acc
-rw-r--r-- 1 nginx nginx 0 Nov 5 07:59 test
[root@master ~]# salt '*' file.get_gid /opt/abc //获取目录的gid
node1:
0
[root@master ~]# salt '*' file.get_gid /opt/test //获取文件的gid
node1:
991
file.get_group:获取指定文件的组名
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
node1:
total 0
drwxr-xr-x 2 root root 6 Nov 5 07:48 abc
drwxr-xr-x 2 root root 6 Nov 5 07:48 acc
-rw-r--r-- 1 nginx nginx 0 Nov 5 07:59 test
[root@master ~]# salt '*' file.get_group /opt/abc //获取目录的属组名称
node1:
root
[root@master ~]# salt '*' file.get_group /opt/test //获取文件的属组名称
node1:
nginx
2.8.12 file.get_uid、file.get_user
file.get_uid:获取指定文件的uid
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
node1:
total 0
drwxr-xr-x 2 root root 6 Nov 5 07:48 abc
drwxr-xr-x 2 root root 6 Nov 5 07:48 acc
-rw-r--r-- 1 nginx nginx 0 Nov 5 07:59 test
[root@master ~]# salt '*' file.get_uid /opt/abc //获取目录的uid
node1:
0
[root@master ~]# salt '*' file.get_uid /opt/test //获取文件的uid
node1:
994
file.get_user:获取指定文件的用户名
[root@master ~]# salt '*' file.get_user /opt/abc //获取目录的用户名
node1:
root
[root@master ~]# salt '*' file.get_user /opt/test //获取文件的用户名
node1:
nginx
2.8.13 file.get_hash
获取指定文件的hash值,该值通过 sha256 算法得来
[root@master ~]# salt '*' cmd.run 'sha256sum /opt/test'
node1:
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 /opt/test
[root@master ~]# salt '*' file.get_hash /opt/test
node1:
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
2.8.14 file.get_mode
获取指定文件的权限,以数字方式显示
[root@master ~]# salt '*' cmd.run 'ls -l /opt/test'
node1:
-rw-r--r-- 1 nginx nginx 0 Nov 5 07:59 /opt/test
[root@master ~]# salt '*' file.get_mode /opt/test
node1:
0644
2.8.15 file.get_selinux_context
获取指定文件的 SELINUX 上下文信息
[root@master ~]# salt '*' cmd.run 'ls -Z /etc/sudo.conf'
node1:
system_u:object_r:etc_t:s0 /etc/sudo.conf
[root@master ~]# salt '*' file.get_selinux_context /etc/sudo.conf
node1:
system_u:object_r:etc_t:s0
2.8.16 file.get_sum
按照指定的算法计算指定文件的特征码并显示,默认使用的sha256算法。
该函数可使用的算法参数有:
- md5
- sha1
- sha224
- sha256 (default)
- sha384
- sha512
[root@master ~]# salt '*' cmd.run 'sha1sum /opt/test'
node1:
da39a3ee5e6b4b0d3255bfef95601890afd80709 /opt/test
[root@master ~]# salt '*' file.get_sum /opt/test sha1 //指定算法
node1:
da39a3ee5e6b4b0d3255bfef95601890afd80709
2.8.17 file.gid_to_group、file.group_to_gid
file.gid_to_group:将指定的 gid 转换为组名并显示
[root@master ~]# salt '*' file.gid_to_group 991
node1:
nginx
file.group_to_gid:将指定的组名转换为 gid 并显示
[root@master ~]# salt '*' file.group_to_gid nginx
node1:
991
2.8.18 file.user_to_uid、file.uid_to_user
file.user_to_uid:将指定的用户名转换为 uid 显示
[root@master ~]# salt '*' file.user_to_uid apache
node1:
48
file.uid_to_user:将指定的 uid 转换为用户名显示
[root@master ~]# salt '*' file.uid_to_user 48
node1:
apache
2.8.19 file.grep
在指定文件中检索指定内容
该函数支持通配符,若在指定的路径中用通配符则必须用双引号引起来
[root@master ~]# salt '*' file.grep /etc/passwd nobody
node1:
----------
pid:
223034
retcode:
0
stderr:
stdout:
nobody:x:65534:65534:Kernel Overflow User:/:/sbin/nologin
2.8.20 file.is_blkdev
判断指定的文件是否是块设备文件
[root@master ~]# salt '*' cmd.run 'ls -l /dev/sr0'
node1:
brw-rw---- 1 root cdrom 11, 0 Nov 5 07:16 /dev/sr0
[root@master ~]# salt '*' file.is_blkdev /dev/sr0
node1:
True
2.8.21 file.lsattr
检查并显示出指定文件的属性信息
[root@master ~]# salt '*' cmd.run 'lsattr /opt/test'
node1:
-------------------- /opt/test
[root@master ~]# salt '*' cmd.run 'chattr +i /opt/test'
node1:
[root@master ~]# salt '*' cmd.run 'lsattr /opt/test'
node1:
----i--------------- /opt/test
[root@master ~]# salt '*' file.lsattr /opt/test
node1:
----------
/opt/test:
- i
2.8.22 file.mkdir
创建目录并设置属主、属组及权限
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
node1:
total 0
drwxr-xr-x 2 root root 6 Nov 5 07:48 abc
drwxr-xr-x 2 root root 6 Nov 5 07:48 acc
-rw-r--r-- 1 nginx nginx 0 Nov 5 07:59 test
[root@master ~]# salt '*' file.mkdir /opt/123 //不指定属主、属组和权限
node1:
True
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
node1:
total 0
drwxr-xr-x 2 root root 6 Nov 5 09:43 123
drwxr-xr-x 2 root root 6 Nov 5 07:48 abc
drwxr-xr-x 2 root root 6 Nov 5 07:48 acc
-rw-r--r-- 1 nginx nginx 0 Nov 5 07:59 test
[root@master ~]# salt '*' file.mkdir /opt/ccc apache apache 755 //指定属主、属组和权限
node1:
True
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
node1:
total 0
drwxr-xr-x 2 root root 6 Nov 5 09:43 123
drwxr-xr-x 2 root root 6 Nov 5 07:48 abc
drwxr-xr-x 2 root root 6 Nov 5 07:48 acc
drwxr-xr-x 2 apache apache 6 Nov 5 09:44 ccc
-rw-r--r-- 1 nginx nginx 0 Nov 5 07:59 test
2.8.23 file.move
移动或重命名
//重命名
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
node1:
total 0
drwxr-xr-x 2 root root 6 Nov 5 09:43 123
drwxr-xr-x 2 root root 6 Nov 5 07:48 abc
drwxr-xr-x 2 root root 6 Nov 5 07:48 acc
drwxr-xr-x 2 apache apache 6 Nov 5 09:44 ccc
-rw-r--r-- 1 nginx nginx 0 Nov 5 07:59 test
[root@master ~]# salt '*' file.move /opt/123 /opt/321
node1:
----------
comment:
'/opt/123' moved to '/opt/321'
result:
True
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
node1:
total 0
drwxr-xr-x 2 root root 6 Nov 5 09:43 321
drwxr-xr-x 2 root root 6 Nov 5 07:48 abc
drwxr-xr-x 2 root root 6 Nov 5 07:48 acc
drwxr-xr-x 2 apache apache 6 Nov 5 09:44 ccc
-rw-r--r-- 1 nginx nginx 0 Nov 5 07:59 test
//移动
[root@master ~]# salt '*' cmd.run 'ls -l /opt/abc'
node1:
total 0
[root@master ~]# salt '*' file.move /opt/321 /opt/abc/ //将opt/321文件移动到/opt/abc目录下
node1:
----------
comment:
'/opt/321' moved to '/opt/abc/'
result:
True
[root@master ~]# salt '*' cmd.run 'ls -l /opt/abc'
node1:
total 0
drwxr-xr-x 2 root root 6 Nov 5 09:43 321



