栏目分类:
子分类:
返回
名师互学网用户登录
快速导航关闭
当前搜索
当前分类
子分类
实用工具
热门搜索
名师互学网 > IT > 系统运维 > 运维 > Linux

saltstack常用模块

Linux 更新时间: 发布时间: IT归档 最新发布 模块sitemap 名妆网 法律咨询 聚返吧 英语巴士网 伯小乐 网商动力

saltstack常用模块

saltstack常用模块
    • 1. SaltStack模块介绍
    • 2. SaltStack常用模块
      • 2.1 SaltStack常用模块之network
        • 2.1.1 network.active_tcp
        • 2.1.2 network.calc_net
        • 2.1.3 network.connect
        • 2.1.4 network.default_route
        • 2.1.5 network.get_fqdn
        • 2.1.6 network.get_hostname
        • 2.1.7 network.get_route
        • 2.1.8 network.hw_addr
        • 2.1.9 network.ifacestartswith
        • 2.1.10 network.in_subnet
        • 2.1.11 network.interface
        • 2.1.12 network.interface_ip
        • 2.1.13 network.interfaces
        • 2.1.14 network.ip_addrs
        • 2.1.15 network.netstat
        • 2.1.16 network.ping
        • 2.1.17 network.reverse_ip
      • 2.2 SaltStack常用模块之service
        • 2.2.1 service.available
        • 2.2.2 service.get_all
        • 2.2.3 service.disabled
        • 2.2.4 service.enabled
        • 2.2.5 service.disable
        • 2.2.6 service.enable
        • 2.2.7 service.reload
        • 2.2.8 service.stop
        • 2.2.9 service.start
        • 2.2.10 service.restart
        • 2.2.11 service.status
      • 2.3 SaltStack常用模块之pkg
        • 2.3.1 pkg.download
        • 2.3.2 pkg.file_list
        • 2.3.3 pkg.group_info
        • 2.3.4 pkg.group_list
        • 2.3.5 pkg.install
        • 2.3.6 pkg.list_downloaded
        • 2.3.7 pkg.list_pkgs
        • 2.3.8 pkg.owner
        • 2.3.9 pkg.remove
        • 2.3.10 pkg.upgrade
      • 2.4 SaltStack常用模块之state
        • 2.4.1 state.show_highstate
        • 2.4.2 state.highstate
        • 2.4.3 state.show_state_usage
        • 2.4.4 state.show_top
        • 2.4.5 state.top
        • 2.4.6 state.show_sls
      • 2.5 user模块
        • 2.5.1 user.add
        • 2.5.2 user.info
        • 2.5.3 user.getent
        • 2.5.4 user.list_groups
        • 2.5.5 user.rename
        • 2.5.6 user.delete
      • 2.6 cp模块
        • 2.6.1 get_file
        • 2.6.2 get_dir
        • 2.6.3 get_url
      • 2.7 SaltStack常用模块之salt-cp
      • 2.8 SaltStack常用模块之file
        • 2.8.1 file.access
        • 2.8.2 file.append
        • 2.8.3 file.basename、file.dirname
        • 2.8.4 file.check_hash
        • 2.8.5 file.chattr
        • 2.8.6 file.chown
        • 2.8.7 file.copy
        • 2.8.8 file.directory_exists、file.file_exists
        • 2.8.9 file.diskusage
        • 2.8.10 file.find
        • 2.8.11 file.get_gid、file.get_group
        • 2.8.12 file.get_uid、file.get_user
        • 2.8.13 file.get_hash
        • 2.8.14 file.get_mode
        • 2.8.15 file.get_selinux_context
        • 2.8.16 file.get_sum
        • 2.8.17 file.gid_to_group、file.group_to_gid
        • 2.8.18 file.user_to_uid、file.uid_to_user
        • 2.8.19 file.grep
        • 2.8.20 file.is_blkdev
        • 2.8.21 file.lsattr
        • 2.8.22 file.mkdir
        • 2.8.23 file.move

1. SaltStack模块介绍

Module是日常使用SaltStack接触最多的一个组件,其用于管理对象操作,这也是SaltStack通过Push的方式进行管理的入口,比如我们日常简单的执行命令、查看包安装情况、查看服务运行情况等工作都是通过SaltStack Module来实现的。

当安装好Master和Minion包后,系统上会安装很多Module

//查看所有module列表
[root@master ~]# salt '*' sys.list_modules
node1:
    - acl
    - aliases
    - alternatives
    - archive
    - artifactory
    - baredoc
    - beacons
    - bigip
    - btrfs
    - buildout
    - chroot
    - cloud
    - cmd
    - composer
    - config
    - consul
    - container_resource
    - cp
    - cron
    - cryptdev
    - data
    - defaults
...省略

//查看指定module的所有function
[root@master ~]# salt '*' sys.list_functions service
node1:
    - service.available
    - service.disable
    - service.disabled
    - service.enable
    - service.enabled
    - service.execs
    - service.firstboot
    - service.force_reload
    - service.get_all
    - service.get_disabled
    - service.get_enabled
    - service.get_running
    - service.get_static
    - service.mask
    - service.masked
    - service.missing
    - service.offline
    - service.reload
    - service.restart
    - service.show
    - service.start
    - service.status
    - service.stop
    - service.systemctl_reload
    - service.unmask

//查看指定module的用法
[root@master ~]# salt '*' sys.doc service
service.available:

    New in version 0.10.4

    Check that the given service is available taking into account template
    units.

    CLI Example:

        salt '*' service.available sshd
...省略

//SaltStack默认也支持一次执行多个Module,Module之间通过逗号隔开,默认传参之间也用逗号分隔,也支持指定传参分隔符号--args-separator=@,module和参数之间空格,当一个参数之间有空格必须用引号(hello world)
[root@master ~]# salt '*' test.echo,cmd.run,service.status "hello world",date,sshd
node1:
    ----------
    cmd.run:
        Thu Nov  4 03:14:18 CST 2021
    service.status:
        True
    test.echo:
        hello world
2. SaltStack常用模块 2.1 SaltStack常用模块之network 2.1.1 network.active_tcp

返回所有活动的tcp连接

[root@master ~]# salt '*' network.active_tcp
node1:
    ----------
    0:
        ----------
        local_addr:
            192.168.237.170
        local_port:
            22
        remote_addr:
            192.168.237.1
        remote_port:
            52805
    1:
        ----------
        local_addr:
            192.168.237.170
        local_port:
            55986
        remote_addr:
            192.168.237.167
        remote_port:
            4505
2.1.2 network.calc_net

通过IP和子网掩码计算出网段

[root@master ~]# salt '*' network.calc_net 192.168.237.170 255.255.0.0
node1:
    192.168.0.0/16
[root@master ~]# salt '*' network.calc_net 192.168.237.170 255.255.240.0
node1:
    192.168.224.0/20
[root@master ~]# salt '*' network.calc_net 192.168.237.170 255.255.255.0
node1:
    192.168.237.0/24
2.1.3 network.connect

测试minion至某一台服务器的网络是否连通

[root@master ~]# salt '*' network.connect baidu.com 80
node1:
    ----------
    comment:
        Successfully connected to baidu.com (220.181.38.148) on tcp port 80
    result:
        True
2.1.4 network.default_route

查看默认路由

[root@master ~]# salt '*' network.default_route 
node1:
    |_
      ----------
      addr_family:
          inet
      destination:
          0.0.0.0
      flags:
          UG
      gateway:
          192.168.237.2
      interface:
          ens160
      netmask:
          0.0.0.0
2.1.5 network.get_fqdn

查看主机的fqdn(完全限定域名)

[root@master ~]# salt '*' network.get_fqdn 
node1:
    node1
2.1.6 network.get_hostname

获取主机名

[root@master ~]# salt '*' network.get_hostname 
node1:
    node1
2.1.7 network.get_route

查询到一个目标网络的路由信息

[root@master ~]# salt '*' network.get_route 192.168.70.200
node1:
    ----------
    destination:
        192.168.70.200
    gateway:
        192.168.237.2
    interface:
        ens160
    source:
        192.168.237.170
2.1.8 network.hw_addr

返回指定网卡的MAC地址

[root@master ~]# salt '*' network.hw_addr ens160
node1:
    00:0c:29:cd:b3:bb
2.1.9 network.ifacestartswith

从特定CIDR检索接口名称

[root@master ~]# salt '*' network.ifacestartswith 192.168
node1:
    - ens160
2.1.10 network.in_subnet

判断当前主机是否在某一个网段内

[root@master ~]# salt '*' network.in_subnet 192.168.237.0/24
node1:
    True
2.1.11 network.interface

返回指定网卡的信息

[root@master ~]# salt '*' network.interface ens160
node1:
    |_
      ----------
      address:
          192.168.237.170
      broadcast:
          192.168.237.255
      label:
          ens160
      netmask:
          255.255.255.0
2.1.12 network.interface_ip

返回指定网卡的IP地址

[root@master ~]# salt '*' network.interface_ip ens160
node1:
    192.168.237.170
2.1.13 network.interfaces

返回当前系统中所有的网卡信息

[root@master ~]# salt '*' network.interfaces
node1:
    ----------
    ens160:
        ----------
        hwaddr:
            00:0c:29:cd:b3:bb
        inet:
            |_
              ----------
              address:
                  192.168.237.170
              broadcast:
                  192.168.237.255
              label:
                  ens160
              netmask:
                  255.255.255.0
        inet6:
            |_
              ----------
              address:
                  fe80::cef:1b5b:1107:cf5d
              prefixlen:
                  64
              scope:
                  link
            |_
              ----------
              address:
                  fe80::7220:8af:6655:3c80
              prefixlen:
                  64
              scope:
                  link
        up:
            True
    lo:
        ----------
        hwaddr:
            00:00:00:00:00:00
        inet:
            |_
              ----------
              address:
                  127.0.0.1
              broadcast:
                  None
              label:
                  lo
              netmask:
                  255.0.0.0
        inet6:
            |_
              ----------
              address:
                  ::1
              prefixlen:
                  128
              scope:
                  host
        up:
            True
2.1.14 network.ip_addrs

返回一个IPv4的地址列表
该函数将会忽略掉127.0.0.1的地址

[root@master ~]# salt '*' network.ip_addrs
node1:
    - 192.168.237.170
2.1.15 network.netstat

返回所有打开的端口和状态

[root@master ~]# salt '*' network.netstat 
node1:
    |_
      ----------
      inode:
          27378
      local-address:
          192.168.237.170%ens160:68
      program:
          NetworkManager
      proto:
          udp
      recv-q:
          0
      remote-address:
          192.168.237.254:67
      send-q:
          0
      user:
          0
    |_
      ----------
      inode:
          26986
      local-address:
          0.0.0.0:22
      program:
          sshd
      proto:
          tcp
      recv-q:
          0
      remote-address:
          0.0.0.0:*
      send-q:
          128
      state:
          LISTEN
      user:
          0
    |_
      ----------
      inode:
          27728
      local-address:
          0.0.0.0:80
      program:
          nginx
      proto:
          tcp
      recv-q:
          0
      remote-address:
          0.0.0.0:*
      send-q:
          128
      state:
          LISTEN
      user:
          0
    |_
      ----------
      inode:
          0
      local-address:
          192.168.237.170:33276
      program:
      proto:
          tcp
      recv-q:
          0
      remote-address:
          192.168.237.167:4506
      send-q:
          0
      state:
          TIME-WAIT
      user:
          0
    |_
      ----------
      inode:
          29911
      local-address:
          192.168.237.170:47000
      program:
          salt-minion
      proto:
          tcp
      recv-q:
          0
      remote-address:
          192.168.237.167:4505
      send-q:
          0
      state:
          ESTABLISHED
      user:
          0
    |_
      ----------
      inode:
          0
      local-address:
          192.168.237.170:33274
      program:
      proto:
          tcp
      recv-q:
          0
      remote-address:
          192.168.237.167:4506
      send-q:
          0
      state:
          TIME-WAIT
      user:
          0
    |_
      ----------
      inode:
          29452
      local-address:
          192.168.237.170:22
      program:
          sshd
      proto:
          tcp
      recv-q:
          0
      remote-address:
          192.168.237.1:56747
      send-q:
          0
      state:
          ESTABLISHED
      user:
          0
    |_
      ----------
      inode:
          26988
      local-address:
          [::]:22
      program:
          sshd
      proto:
          tcp
      recv-q:
          0
      remote-address:
          [::]:*
      send-q:
          128
      state:
          LISTEN
      user:
          0
    |_
      ----------
      inode:
          27729
      local-address:
          [::]:80
      program:
          nginx
      proto:
          tcp
      recv-q:
          0
      remote-address:
          [::]:*
      send-q:
          128
      state:
          LISTEN
      user:
          0
2.1.16 network.ping

使用ping命令测试到某主机的连通性

[root@master ~]# salt '*' network.ping baidu.com
node1:
    PING baidu.com (220.181.38.148) 56(84) bytes of data.
    64 bytes from 220.181.38.148 (220.181.38.148): icmp_seq=1 ttl=128 time=24.7 ms
    64 bytes from 220.181.38.148 (220.181.38.148): icmp_seq=2 ttl=128 time=60.4 ms
    64 bytes from 220.181.38.148 (220.181.38.148): icmp_seq=3 ttl=128 time=25.1 ms
    64 bytes from 220.181.38.148 (220.181.38.148): icmp_seq=4 ttl=128 time=37.1 ms
    
    --- baidu.com ping statistics ---
    4 packets transmitted, 4 received, 0% packet loss, time 8ms
    rtt min/avg/max/mdev = 24.651/36.806/60.406/14.506 ms
2.1.17 network.reverse_ip

返回一个指定的IP地址的反向地址

[root@master ~]# salt '*' network.reverse_ip 192.168.237.170
node1:
    170.237.168.192.in-addr.arpa
2.2 SaltStack常用模块之service 2.2.1 service.available

判断指定的服务是否可用

[root@master ~]# salt '*' service.available nginx
node1:
    True
[root@master ~]# salt '*' service.available httpd
node1:
    False
2.2.2 service.get_all

获取所有正在运行的服务

[root@master ~]# salt '*' service.get_all 
node1:
    - NetworkManager
    - NetworkManager-dispatcher
    - NetworkManager-wait-online
    - auditd
    - autovt@
    - basic.target
    - blk-availability
    - bluetooth.target
    - console-getty
    - container-getty@
    - cpupower
    - crond
    - cryptsetup-pre.target
    - cryptsetup.target
    - ctrl-alt-del.target
...省略
2.2.3 service.disabled

检查指定服务是否开机不自动启动

[root@master ~]# salt '*' service.disabled nginx
node1:
    False
2.2.4 service.enabled

检查指定服务是否开机自动启动

[root@master ~]# salt '*' service.enabled nginx
node1:
    True
2.2.5 service.disable

设置指定服务开机不自动启动

[root@master ~]# salt '*' service.disable nginx
node1:
    True
[root@master ~]# salt '*' service.disabled nginx
node1:
    True
2.2.6 service.enable

设置指定服务开机自动启动

[root@master ~]# salt '*' service.enable nginx
node1:
    True
[root@master ~]# salt '*' service.enabled nginx
node1:
    True
2.2.7 service.reload

重新加载指定服务(服务必须正在运行)

[root@master ~]# salt '*' service.reload nginx
node1:
    True
2.2.8 service.stop

停止指定服务

[root@master ~]# salt '*' service.stop nginx
node1:
    True
2.2.9 service.start

启动指定服务

[root@master ~]# salt '*' service.start nginx
node1:
    True
2.2.10 service.restart

重启指定服务

[root@master ~]# salt '*' service.restart nginx
node1:
    True
2.2.11 service.status

查看指定服务的状态

[root@master ~]# salt '*' service.status nginx
node1:
    True
2.3 SaltStack常用模块之pkg 2.3.1 pkg.download

只下载软件包但不安装
此功能将会下载指定的软件包,但是需要在minion端安装yum-utils,可以使用 cmd.run 进行远程安装

[root@master ~]# salt '*' pkg.download wget
node1:
    ----------
    wget:
        /var/cache/yum/packages/wget-1.19.5-10.el8.x86_64.rpm	//软件保存的路径
2.3.2 pkg.file_list

列出指定包或系统中已安装的所有包的文件

//列出已安装的nginx软件包提供的所有文件
[root@master ~]# salt '*' pkg.file_list nginx
node1:
    ----------
    errors:
    files:
        - /etc/logrotate.d/nginx
        - /etc/nginx/fastcgi.conf
        - /etc/nginx/fastcgi.conf.default
        - /etc/nginx/fastcgi_params
        - /etc/nginx/fastcgi_params.default
        - /etc/nginx/koi-utf
        - /etc/nginx/koi-win
        - /etc/nginx/mime.types
        - /etc/nginx/mime.types.default
        - /etc/nginx/nginx.conf
        - /etc/nginx/nginx.conf.default
        - /etc/nginx/scgi_params
        - /etc/nginx/scgi_params.default
        - /etc/nginx/uwsgi_params
        - /etc/nginx/uwsgi_params.default
        - /etc/nginx/win-utf
        - /usr/bin/nginx-upgrade
        - /usr/lib/.build-id
        - /usr/lib/.build-id/2d
        - /usr/lib/.build-id/2d/da6018ae12edb856ad3d2cf61bf586b6b4873c
        - /usr/lib/systemd/system/nginx.service
        - /usr/lib64/nginx/modules
        - /usr/sbin/nginx
        - /usr/share/doc/nginx
        - /usr/share/doc/nginx/CHANGES
        - /usr/share/doc/nginx/README
        - /usr/share/doc/nginx/README.dynamic
        - /usr/share/licenses/nginx
        - /usr/share/licenses/nginx/LICENSE
        - /usr/share/man/man3/nginx.3pm.gz
        - /usr/share/man/man8/nginx-upgrade.8.gz
        - /usr/share/man/man8/nginx.8.gz
        - /usr/share/nginx/html/404.html
        - /usr/share/nginx/html/50x.html
        - /usr/share/nginx/html/index.html
        - /usr/share/nginx/html/nginx-logo.png
        - /usr/share/nginx/html/poweredby.png
        - /usr/share/vim/vimfiles/ftdetect/nginx.vim
        - /usr/share/vim/vimfiles/indent/nginx.vim
        - /usr/share/vim/vimfiles/syntax/nginx.vim
        - /var/lib/nginx
        - /var/lib/nginx/tmp
        - /var/log/nginx

//当不提供参数时,将会列出当前系统中所有已安装软件的文件列表
2.3.3 pkg.group_info

查看包组的信息

[root@master ~]# salt '*' pkg.group_info 'Development Tools'
node1:
    ----------
    conditional:
    default:
        - asciidoc
        - byacc
        - ctags
        - diffstat
        - elfutils-libelf-devel
        - git
        - intltool
        - jna
        - ltrace
        - patchutils
        - perl-Fedora-VSP
        - perl-Sys-Syslog
        - perl-generators
        - pesign
        - source-highlight
        - systemtap
        - valgrind
        - valgrind-devel
    description:
        A basic development environment.
    group:
        Development Tools
    id:
        None
    mandatory:
        - autoconf
        - automake
        - binutils
        - bison
        - flex
        - gcc
        - gcc-c++
        - gdb
        - glibc-devel
        - libtool
        - make
        - pkgconf
        - pkgconf-m4
        - pkgconf-pkg-config
        - redhat-rpm-config
        - rpm-build
        - rpm-sign
        - strace
    optional:
        - cmake
        - expect
        - rpmdevtools
        - rpmlint
    type:
        package group
2.3.4 pkg.group_list

列出系统中所有的包组

[root@master ~]# salt '*' pkg.group_list 
node1:
    ----------
    available:
        - Conflicts baseOS
        - Dial-up Networking Support
        - Hardware Monitoring Utilities
        - Hardware Support
        - Large Systems Performance
        - Legacy UNIX Compatibility
        - Python Web
        - Server product core
        - Windows File Server
        - Additional Development
        - Anaconda tools
        - Backup Client
        - base
        - base-x
        - Conflicts AppStream
        - Container Management
        - Debugging Tools
        - Desktop Debugging and Performance Tools
        - Development Tools
        - .NET Core Development
        - File and Storage Server
        - Fonts
        - FTP Server
        - GNOME Applications
        - GNOME
        - Graphical Administration Tools
        - Graphics Creation Tools
        - Guest Agents
        - Guest Desktop Agents
        - Headless Management
        - Infiniband Support
        - Input Methods
        - Internet Applications
        - Internet Browser
        - Java Platform
        - Legacy X Window System Compatibility
        - Mail Server
        - Mainframe Access
        - Multimedia
        - Network File System Client
        - Network Servers
        - Networking Tools
        - Common NetworkManager submodules
        - Office Suite and Productivity
        - Atomic Host ostree support
        - Performance Tools
        - Platform Development
        - KVM platform specific packages
        - Hyper-v platform specific packages
        - Printing Client
        - Remote Desktop Clients
        - Remote Management for Linux
        - RPM Development Tools
        - Scientific Support
        - Security Tools
        - Smart Card Support
        - Standard
        - System Tools
        - TeX formatting system
        - Virtualization Client
        - Virtualization Hypervisor
        - Virtualization Platform
        - Virtualization Tools
        - Basic Web Server
        - Workstation product core
    available environments:
        - Server with GUI
        - Server
        - Workstation
        - Custom Operating System
        - Virtualization Host
    available languages:
        ----------
    installed:
        - Core
        - VMware platform specific packages
    installed environments:
        - Minimal Install
2.3.5 pkg.install

安装软件

[root@master ~]# salt '*' pkg.install wget
node1:
    ----------
    wget:
        ----------
        new:
            1.19.5-10.el8
        old:
2.3.6 pkg.list_downloaded

列出已下载到本地的软件包

[root@master ~]# salt '*' pkg.list_downloaded 
node1:
    ----------
2.3.7 pkg.list_pkgs

以字典的方式列出当前已安装的软件包

[root@master ~]# salt '*' pkg.list_pkgs 
node1:
    ----------
    Judy:
        1.0.5-18.module_el8.3.0+757+d382997d
    NetworkManager:
        1:1.22.8-4.el8
    NetworkManager-libnm:
        1:1.22.8-4.el8
    NetworkManager-team:
        1:1.22.8-4.el8
    NetworkManager-tui:
        1:1.22.8-4.el8
    acl:
        2.2.53-1.el8
    audit:
        3.0-0.17.20191104git1c2f876.el8
    audit-libs:
        3.0-0.17.20191104git1c2f876.el8
...省略
2.3.8 pkg.owner

列出指定文件是由哪个包提供的

[root@master ~]# salt '*' pkg.owner /etc/ssh/moduli
node1:
    openssh
[root@master ~]# salt '*' pkg.owner /etc/ssh/moduli /usr/libexec/openssh
node1:
    ----------
    /etc/ssh/moduli:
        openssh
    /usr/libexec/openssh:
        openssh
2.3.9 pkg.remove

卸载指定软件

[root@master ~]# salt '*' pkg.remove wget
node1:
    ----------
    wget:
        ----------
        new:
        old:
            1.19.5-10.el8
//若要卸载多个文件,中间需要用逗号隔开
2.3.10 pkg.upgrade

升级系统中所有的软件包或升级指定的软件包

[root@master ~]# salt '*' cmd.run 'rpm -qa|grep wget'
node1:
    wget-1.14-18.el7_6.1.x86_64
[root@master ~]# salt '*' pkg.upgrade name=wget
node1:
    ----------
    wget:
        ----------
        new:
            1.19.5-10.el8
        old:
            1.14-18.el7_6.1
//若想升级系统中所有的软件包则把 name 参数去掉即可
2.4 SaltStack常用模块之state 2.4.1 state.show_highstate

显示当前系统中有哪些高级状态

[root@master ~]# salt '*' state.show_highstate 
node1:
    ----------
    nginx-install:
        ----------
        __env__:
            base
        __sls__:
            web.nginx.install
        pkg:
            |_
              ----------
              name:
                  nginx
            - installed
            |_
              ----------
              order:
                  10000
    nginx-service:
        ----------
        __env__:
            base
        __sls__:
            web.nginx.install
        service:
            |_
              ----------
              name:
                  nginx
            |_
              ----------
              enable:
                  True
            - running
            |_
              ----------
              order:
                  10001
2.4.2 state.highstate

执行高级状态

[root@master ~]# salt '*' state.highstate 
node1:
----------
          ID: nginx-install
    Function: pkg.installed
        Name: nginx
      Result: True
     Comment: The following packages were installed/updated: nginx
     Started: 19:37:40.688240
    Duration: 9982.447 ms
     Changes:   
              ----------
              dejavu-fonts-common:
                  ----------
                  new:
                      2.35-7.el8
                  old:
              dejavu-sans-fonts:
                  ----------
                  new:
                      2.35-7.el8
                  old:
              fontconfig:
                  ----------
                  new:
                      2.13.1-3.el8
                  old:
              fontpackages-filesystem:
                  ----------
                  new:
                      1.44-22.el8
                  old:
              gd:
                  ----------
                  new:
                      2.2.5-7.el8
                  old:
              jbigkit-libs:
                  ----------
                  new:
                      2.1-14.el8
                  old:
              libX11:
                  ----------
                  new:
                      1.6.8-4.el8
                  old:
              libX11-common:
                  ----------
                  new:
                      1.6.8-4.el8
                  old:
              libXau:
                  ----------
                  new:
                      1.0.9-3.el8
                  old:
              libXpm:
                  ----------
                  new:
                      3.5.12-8.el8
                  old:
              libtiff:
                  ----------
                  new:
                      4.0.9-18.el8
                  old:
              libwebp:
                  ----------
                  new:
                      1.0.0-3.el8_4
                  old:
              libxcb:
                  ----------
                  new:
                      1.13.1-1.el8
                  old:
              nginx:
                  ----------
                  new:
                      1:1.14.1-9.module_el8.0.0+184+e34fea82
                  old:
              nginx-all-modules:
                  ----------
                  new:
                      1:1.14.1-9.module_el8.0.0+184+e34fea82
                  old:
              nginx-filesystem:
                  ----------
                  new:
                      1:1.14.1-9.module_el8.0.0+184+e34fea82
                  old:
              nginx-mod-http-image-filter:
                  ----------
                  new:
                      1:1.14.1-9.module_el8.0.0+184+e34fea82
                  old:
              nginx-mod-http-perl:
                  ----------
                  new:
                      1:1.14.1-9.module_el8.0.0+184+e34fea82
                  old:
              nginx-mod-http-xslt-filter:
                  ----------
                  new:
                      1:1.14.1-9.module_el8.0.0+184+e34fea82
                  old:
              nginx-mod-mail:
                  ----------
                  new:
                      1:1.14.1-9.module_el8.0.0+184+e34fea82
                  old:
              nginx-mod-stream:
                  ----------
                  new:
                      1:1.14.1-9.module_el8.0.0+184+e34fea82
                  old:
----------
          ID: nginx-service
    Function: service.running
        Name: nginx
      Result: True
     Comment: Service nginx has been enabled, and is running
     Started: 19:37:50.685949
    Duration: 286.344 ms
     Changes:   
              ----------
              nginx:
                  True

Summary for node1
------------
Succeeded: 2 (changed=2)
Failed:    0
------------
Total states run:     2
Total run time:  10.269 s
2.4.3 state.show_state_usage

显示当前系统中的高级状态执行情况

[root@master ~]# salt '*' state.show_state_usage 
node1:
    ----------
    base:
        ----------
        count_all:
            3
        count_unused:
            2
        count_used:
            1
        unused:
            - top
            - web.apache.install
        used:
            - web.nginx.install
    dev:
        ----------
        count_all:
            0
        count_unused:
            0
        count_used:
            0
        unused:
        used:
    prod:
        ----------
        count_all:
            0
        count_unused:
            0
        count_used:
            0
        unused:
        used:
    test:
        ----------
        count_all:
            0
        count_unused:
            0
        count_used:
            0
        unused:
        used:
2.4.4 state.show_top

返回minion将用于highstate的顶级数据

[root@master ~]# salt '*' state.show_top 
node1:
    ----------
    base:
        - web.nginx.install
2.4.5 state.top

执行指定的top file,而不是默认的

[root@master ~]# salt '*' state.top top.sls
node1:
----------
          ID: nginx-install
    Function: pkg.installed
        Name: nginx
      Result: True
     Comment: All specified packages are already installed
     Started: 19:42:32.883717
    Duration: 685.327 ms
     Changes:   
----------
          ID: nginx-service
    Function: service.running
        Name: nginx
      Result: True
     Comment: The service nginx is already running
     Started: 19:42:33.571088
    Duration: 44.011 ms
     Changes:   

Summary for node1
------------
Succeeded: 2
Failed:    0
------------
Total states run:     2
Total run time: 729.338 ms
2.4.6 state.show_sls

显示 master 上特定sls或sls文件列表中的状态数据

[root@master ~]# salt '*' state.show_sls web.nginx.install
node1:
    ----------
    nginx-install:
        ----------
        __env__:
            base
        __sls__:
            web.nginx.install
        pkg:
            |_
              ----------
              name:
                  nginx
            - installed
            |_
              ----------
              order:
                  10000
    nginx-service:
        ----------
        __env__:
            base
        __sls__:
            web.nginx.install
        service:
            |_
              ----------
              name:
                  nginx
            |_
              ----------
              enable:
                  True
            - running
            |_
              ----------
              order:
                  10001
2.5 user模块

用于命令行管理用户

2.5.1 user.add

创建用户

[root@master ~]# salt '*' group.add admin 1000
node1:
    True
[root@master ~]# salt '*' user.add test 1500 admin /home/test /bin/bash
node1:
    True
[root@master ~]# salt '*' cmd.run 'id test'
node1:
    uid=1500(test) gid=1000(admin) groups=1000(admin)
2.5.2 user.info

返回用户信息

[root@master ~]# salt '*' user.info test
node1:
    ----------
    fullname:
    gid:
        1000
    groups:
        - admin
    home:
        /bin/bash
    homephone:
    name:
        test
    other:
    passwd:
        x
    roomnumber:
    shell:
        /bin/bash
    uid:
        1500
    workphone:
2.5.3 user.getent

返回所有系统用户信息的列表

[root@master ~]# salt '*' user.getent 
node1:
    |_
      ----------
      fullname:
          root
      gid:
          0
      groups:
          - root
      home:
          /root
      homephone:
      name:
          root
      other:
      passwd:
          x
      roomnumber:
      shell:
          /bin/bash
      uid:
          0
      workphone:
    |_
      ----------
      fullname:
          bin
      gid:
          1
      groups:
          - bin
      home:
          /bin
      homephone:
      name:
          bin
      other:
      passwd:
          x
      roomnumber:
      shell:
          /sbin/nologin
      uid:
          1
      workphone:
...省略
2.5.4 user.list_groups

列出指定用户所属组的列表

[root@master ~]# salt '*' user.list_groups test
node1:
    - admin
2.5.5 user.rename

修改指定用户的用户名

[root@master ~]# salt '*' user.rename test admin
node1:
    False
//虽然返回值为False,但是操作还是完成了
[root@node1 ~]# id test
id: “test”:无此用户
[root@node1 ~]# id admin
uid=1500(admin) gid=1000(admin) 组=1000(admin)
2.5.6 user.delete

删除用户

[root@master ~]# salt '*' user.delete admin
node1:
    True
删除用户时,用户的所属组也删除了
2.6 cp模块

salt根目录:在master中 file_roots 定义的路径。例如:假设在master中有如下定义:

file_roots:
  base:
    - /srv/salt/
那么:salt://vimrc指的实际路径是:/srv/salt/vimrc,这样做的好处是,可以满足state系统中环境的概念。
[root@master ~]# vim /etc/salt/master
......
file_roots:
  base:
    - /srv/salt/base
  test:
    - /srv/salt/test
  dev:
    - /srv/salt/dev
  prod:
    - /srv/salt/prod
......

//在base目录下创建一个目录vimrc ,在vimrc目录下创建一个文件test
[root@master ~]# cd /srv/salt/base/
[root@master ~]# mkdir vimrc
[root@master base]# cd vimrc/
[root@master vimrc]# touch test
[root@master vimrc]# echo 'abc' > test 
[root@master vimrc]# ls
test
[root@master vimrc]# cat test 
abc
2.6.1 get_file

从master下载文件到客户端

[root@master ~]# salt '*' cp.get_file salt://vimrc/test /opt
node1:
    /opt/test
[root@node1 ~]# ls /opt/
test
[root@node1 ~]# cat /opt/test 
abc
2.6.2 get_dir

从master下载一整个目录

[root@master ~]# ls /srv/salt/base/
top.sls  vimrc  web
[root@master ~]# salt '*' cp.get_dir salt://web /opt    /web目录在base环境下
node1:
    - /opt/web/apache/install.sls
    - /opt/web/nginx/install.sls
[root@node1 ~]# ls /opt/
test  web
2.6.3 get_url

从一个url地址下载文件

[root@master ~]# salt '*' cp.get_url https://dlcdn.apache.org/apr/apr-1.7.0.tar.gz /opt
node1:
    /opt/apr-1.7.0.tar.gz

//node1查看
[root@node1 ~]# ls /opt/
apr-1.7.0.tar.gz  test  web
2.7 SaltStack常用模块之salt-cp

salt-cp能够很方便的把 master 上的文件批量传到 minion上

//拷贝单个文件到目标主机的/opt目录下
[root@master ~]# salt '*' cmd.run 'ls /opt'
node1:
[root@master ~]# salt-cp '*' /etc/passwd /opt
node1:
    ----------
    /opt/passwd:
        True
[root@master ~]# salt '*' cmd.run 'ls /opt'
node1:
    passwd

//拷贝多个文件到目标主机的/opt目录下
[root@master ~]# salt-cp '*' /etc/hostname /etc/host.conf /opt 
node1:
    ----------
    /opt/host.conf:
        True
    /opt/hostname:
        True
[root@master ~]# salt '*' cmd.run 'ls /opt'
node1:
    host.conf
    hostname
    passwd
2.8 SaltStack常用模块之file 2.8.1 file.access
  • 检查文件是否存在
[root@master ~]# salt '*' file.access /opt/passwd f
node1:
    True
  • 检查指定文件的权限信息
//对文件使用
[root@master ~]# salt '*' cmd.run 'ls -ld /opt/passwd'
node1:
    -rw-r--r-- 1 root root 1106 Nov  5 02:06 /opt/passwd
[root@master ~]# salt '*' file.access /opt/passwd r		//是否有读权限
node1:
    True
[root@master ~]# salt '*' file.access /opt/passwd w		//是否有写权限
node1:
    True
[root@master ~]# salt '*' file.access /opt/passwd x		//是否有执行权限
node1:
    False

//对目录使用
[root@master ~]# salt '*' cmd.run 'ls -ld /proc/1'
node1:
    dr-xr-xr-x 9 root root 0 Nov  5 02:00 /proc/1
[root@master ~]# salt '*' file.access /proc/1 r
node1:
    True
[root@master ~]# salt '*' file.access /proc/1 w
node1:
    False
[root@master ~]# salt '*' file.access /proc/1 x
node1:
    True
2.8.2 file.append

往一个文件里追加内容,若此文件不存在则会报异常

[root@master ~]# salt '*' cmd.run 'cat /opt/hostname'
node1:
    master
[root@master ~]# salt '*' file.append /opt/hostname "hello world" "hello"
node1:
    Wrote 2 lines to "/opt/hostname"
[root@master ~]# salt '*' cmd.run 'cat /opt/hostname'
node1:
    master
    hello world
    hello
2.8.3 file.basename、file.dirname

file.basename:获取指定路径的基名

[root@master ~]# salt '*' file.basename '/etc/salt/minion'
node1:
    minion

file.dirname:获取指定路径的目录名

[root@master ~]# salt '*' file.dirname '/etc/salt/minion'
node1:
    /etc/salt
2.8.4 file.check_hash

检查指定的文件与hash字符串是否匹配,匹配则返回 True 否则返回 False

[root@master ~]# salt '*' cmd.run 'md5sum /opt/passwd' 
node1:
    414a6420e1a4a3d278778ddcd132a2df  /opt/passwd
[root@master ~]# salt '*' file.check_hash /opt/passwd 414a6420e1a4a3d278778ddcd132a2df
node1:
    True
2.8.5 file.chattr

修改指定文件的属性

属性对文件的意义对目录的意义
a只允许在这个文件之后追加数据,不允许覆盖、删除移动文件只允许在这个目录下建立和修改文件,而不允许删除任何文件
i不允许对这个文件进行任何的修改,不能删除、更改、移动任何的进程只能修改目录之下的文件,不允许建立和删除文件
  • 给指定文件添加属性
//查看当前文件属性
[root@master ~]# salt '*' cmd.run 'lsattr /opt/hostname'
node1:
    -------------------- /opt/hostname

//添加属性
[root@master ~]# salt '*' file.chattr /opt/hostname operator=add attributes=a	//add添加,a属性
node1:
    True
[root@master ~]# salt '*' cmd.run 'lsattr /opt/hostname'		//查看,添加成功
node1:
    -----a-------------- /opt/hostname

//只能追加,无法覆盖、删除和移动
[root@node1 opt]# echo '123' >> hostname 
[root@node1 opt]# echo '123' > hostname 
[root@node1 opt]# rm -f hostname 
rm: 无法删除'hostname': 不允许的操作
[root@node1 opt]# mv hostname /tmp/
mv: 无法将'hostname' 移动至'/tmp/hostname': 不允许的操作
  • 给指定文件去除属性
[root@master ~]# salt '*' file.chattr /opt/hostname operator=remove attributes=a	//remove,删除,a是属性
node1:
    True
[root@master ~]# salt '*' cmd.run 'lsattr /opt/hostname'
node1:
    -------------------- /opt/hostname
2.8.6 file.chown

设置指定文件的属主、属组信息

//对文件进行修改
[root@master ~]# salt '*' cmd.run 'ls -l /opt/passwd'
node1:
    -rw-r--r-- 1 root root 1106 Nov  5 02:06 /opt/passwd
[root@master ~]# salt '*' file.chown /opt/passwd nginx nginx
node1:
    None
[root@master ~]# salt '*' cmd.run 'ls -l /opt/passwd'
node1:
    -rw-r--r-- 1 nginx nginx 1106 Nov  5 02:06 /opt/passwd

//对目录进行修改
[root@master ~]# salt '*' cmd.run 'ls -ld /opt/test'
node1:
    drwxr-xr-x 2 root root 6 Nov  5 03:00 /opt/test
[root@master ~]# salt '*' file.chown /opt/test nginx nginx
node1:
    None
[root@master ~]# salt '*' cmd.run 'ls -ld /opt/test'
node1:
    drwxr-xr-x 2 nginx nginx 6 Nov  5 03:00 /opt/test
2.8.7 file.copy

在远程主机上复制文件或目录(用于minion端文件传输)

  • 拷贝文件
[root@master ~]# salt '*' cmd.run 'ls -l /opt/'
node1:
    total 0
    
[root@master ~]# salt '*' file.copy /etc/salt/minion /opt/minion		//目标路径后面必须要写文件名,可以与原文件不同
node1:
    True
[root@master ~]# salt '*' cmd.run 'ls -l /opt/'
node1:
    total 40
    -rw-r----- 1 root root 38728 Nov  5 07:28 minion
  • 覆盖并拷贝目录,将会覆盖同名文件或目录
[root@master ~]# salt '*' file.copy /tmp/ /opt/abc recurse=true
node1:
    True
[root@master ~]# salt '*' cmd.run 'ls -l /opt/'
node1:
    total 44
    drwxrwxrwt 19 root root  4096 Nov  5 07:32 abc
    -rw-r-----  1 root root 38728 Nov  5 07:28 minion
  • 删除目标目录中同名的文件或目录并拷贝新内容至其中
[root@master ~]# salt '*' cmd.run 'ls -l /tmp/test'
node1:
    total 0
    drwxr-xr-x 2 root root  6 Nov  5 07:48 abc
    drwxr-xr-x 2 root root  6 Nov  5 07:48 acc
    drwxr-xr-x 2 root root 19 Nov  4 18:56 hsperfdata_root
    drwx------ 2 root root  6 Nov  3 21:28 vmware-root_948-2688554130
    drwx------ 2 root root  6 Nov  3 19:12 vmware-root_956-2722239132

[root@master ~]# salt '*' cmd.run 'ls -l /opt'
node1:
    total 0
    drwxr-xr-x 2 root root 18 Nov  5 07:45 abc
    drwxr-xr-x 2 root root 19 Nov  4 18:56 hsperfdata_root
    drwx------ 2 root root  6 Nov  3 21:28 vmware-root_948-2688554130
    drwx------ 2 root root  6 Nov  3 19:12 vmware-root_956-2722239132

[root@master ~]# salt '*' file.copy /tmp/test /opt recurse=true remove_existing=true
node1:
    True

[root@master ~]# salt '*' cmd.run 'ls -l /opt'
node1:
    total 0
    drwxr-xr-x 2 root root  6 Nov  5 07:48 abc
    drwxr-xr-x 2 root root  6 Nov  5 07:48 acc
    drwxr-xr-x 2 root root 19 Nov  4 18:56 hsperfdata_root
    drwx------ 2 root root  6 Nov  3 21:28 vmware-root_948-2688554130
    drwx------ 2 root root  6 Nov  3 19:12 vmware-root_956-2722239132
2.8.8 file.directory_exists、file.file_exists

file.ditectory_exists:判断指定目录是否存在,存在则返回 True ,否则返回 False

[root@master ~]# salt '*' cmd.run 'ls -l /opt'
node1:
    total 0
    drwxr-xr-x 2 root root  6 Nov  5 07:48 abc
    drwxr-xr-x 2 root root  6 Nov  5 07:48 acc
    drwxr-xr-x 2 root root 19 Nov  4 18:56 hsperfdata_root
     drwx------ 2 root root  6 Nov  3 21:28 vmware-root_948-2688554130
    drwx------ 2 root root  6 Nov  3 19:12 vmware-root_956-2722239132

[root@master ~]# salt '*' file.directory_exists /opt/abc
node1:
    True

file.file_exists:判断指定文件是否存在

[root@master ~]# salt '*' cmd.run 'ls -l /opt'
node1:
    total 0
    drwxr-xr-x 2 root root 6 Nov  5 07:48 abc
    drwxr-xr-x 2 root root 6 Nov  5 07:48 acc
    -rw-r--r-- 1 root root 0 Nov  5 07:59 test

[root@master ~]# salt '*' file.file_exists /opt/test
node1:
    True
[root@master ~]# salt '*' file.file_exists /opt/abc
node1:
    False 		//abc是目录而非文件
2.8.9 file.diskusage

递归计算指定路径的磁盘使用情况并以字节为单位返回

//指定目录,计算目录时有点偏差
[root@master ~]# salt '*' cmd.run 'du -sb /etc'
node1:
    22163081    /etc
[root@master ~]# salt '*' file.diskusage /etc
node1:
    23508656

//指定文件
[root@master ~]# salt '*' cmd.run 'du -sb /etc/services'
node1:
    692252      /etc/services
[root@master ~]# salt '*' file.diskusage /etc/services
node1:
    692252
2.8.10 file.find

类似 find 命令并返回符合指定条件的路径列表

  • 选项和匹配条件
name    = path-glob                 # 区分大小写的
iname   = path-glob                 # 不分大小写
regex   = path-regex                # 区分大小写的
iregex  = path-regex                # 不分大小写
type    = 文件类型					# 匹配任何列出的类型
user    = users                     # 匹配任何列出的用户
group   = groups                    # 匹配任何列出的组
size    = [+-]number[单位]     		# 默认单位=字节
mtime   = 时间间隔					# 最近修改的日期
grep    = regex                     # 搜索文件内容
  • 操作:
delete [= file-types]      		删除	# default type = 'f'
exec    = command [arg ...]     执行	# where {} is replaced by pathname
print  [= print-opts]			打印

默认操作打印路径

  • 匹配的深度标准:
maxdepth = 最大横向深度
mindepth = 最小横向深度
  • path-glob:
*                = 匹配零个或多个字符
?                = 匹配任何字符
[abc]            = 匹配a, b或c
[!abc] or [^abc] = 匹配除a, b, c以外的任何东西,!和^为取反
[x-y]            = 匹配字符x到y
[!x-y] or [^x-y] = 匹配除了x到y的任何字符
{a,b,c}          = 匹配a或b或c
  • path-regex: 一个用于匹配路径名的Python正则表达式模式

  • 文件类型:

a: 所有文件类型
b: 块设备
c: 字符设备
d: 目录
p: FIFO (named pipe)
f: 普通文件类型
l: 符号链接
s: 套接字文件
  • users: 由空格和/或逗号分隔的用户名和/或uid列表

  • groups: 由空格和/或逗号分隔的组名和/或gids列表

  • 文件大小的单位:

b: bytes
k: kilobytes
m: megabytes
g: gigabytes
t: terabytes
  • 时间间隔:
[w] [d] [h] [m] [s]

    w: 周
    d: 天
    h: 时
    m: 分
    s: 秒
  • 打印选项:
user:  用户名
group: 组名称
md5:   文件内容的MD5摘要
mode:  文件权限(作为整数)
mtime: 最后一次修改时间
name:  文件名
path:  文件绝对路径
size:  文件大小(以字节为单位)
type:  文件类型
  • 示例
salt '*' file.find / type=f name=*.bak size=+10m
salt '*' file.find /var mtime=+30d size=+10m print=path,size,mtime
salt '*' file.find /var/log name=*.[0-9] mtime=+30d size=+10m delete
2.8.11 file.get_gid、file.get_group

file.get_gid:获取指定文件的gid

[root@master ~]# salt '*' cmd.run 'ls -l /opt'
node1:
    total 0
    drwxr-xr-x 2 root  root  6 Nov  5 07:48 abc
    drwxr-xr-x 2 root  root  6 Nov  5 07:48 acc
    -rw-r--r-- 1 nginx nginx 0 Nov  5 07:59 test

[root@master ~]# salt '*' file.get_gid /opt/abc			//获取目录的gid
node1:
    0
[root@master ~]# salt '*' file.get_gid /opt/test		//获取文件的gid
node1:
    991

file.get_group:获取指定文件的组名

[root@master ~]# salt '*' cmd.run 'ls -l /opt'
node1:
    total 0
    drwxr-xr-x 2 root  root  6 Nov  5 07:48 abc
    drwxr-xr-x 2 root  root  6 Nov  5 07:48 acc
    -rw-r--r-- 1 nginx nginx 0 Nov  5 07:59 test

[root@master ~]# salt '*' file.get_group /opt/abc		//获取目录的属组名称
node1:
    root
[root@master ~]# salt '*' file.get_group /opt/test		//获取文件的属组名称
node1:
    nginx
2.8.12 file.get_uid、file.get_user

file.get_uid:获取指定文件的uid

[root@master ~]# salt '*' cmd.run 'ls -l /opt'
node1:
    total 0
    drwxr-xr-x 2 root  root  6 Nov  5 07:48 abc
    drwxr-xr-x 2 root  root  6 Nov  5 07:48 acc
    -rw-r--r-- 1 nginx nginx 0 Nov  5 07:59 test

[root@master ~]# salt '*' file.get_uid /opt/abc			//获取目录的uid
node1:
    0
[root@master ~]# salt '*' file.get_uid /opt/test		//获取文件的uid
node1:
    994

file.get_user:获取指定文件的用户名

[root@master ~]# salt '*' file.get_user /opt/abc		//获取目录的用户名
node1:
    root
[root@master ~]# salt '*' file.get_user /opt/test		//获取文件的用户名
node1:
    nginx
2.8.13 file.get_hash

获取指定文件的hash值,该值通过 sha256 算法得来

[root@master ~]# salt '*' cmd.run 'sha256sum /opt/test'
node1:
    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  /opt/test
[root@master ~]# salt '*' file.get_hash /opt/test
node1:
    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
2.8.14 file.get_mode

获取指定文件的权限,以数字方式显示

[root@master ~]# salt '*' cmd.run 'ls -l /opt/test'
node1:
    -rw-r--r-- 1 nginx nginx 0 Nov  5 07:59 /opt/test
[root@master ~]# salt '*' file.get_mode /opt/test
node1:
    0644
2.8.15 file.get_selinux_context

获取指定文件的 SELINUX 上下文信息

[root@master ~]# salt '*' cmd.run 'ls -Z /etc/sudo.conf'
node1:
    system_u:object_r:etc_t:s0 /etc/sudo.conf
[root@master ~]# salt '*' file.get_selinux_context /etc/sudo.conf
node1:
    system_u:object_r:etc_t:s0
2.8.16 file.get_sum

按照指定的算法计算指定文件的特征码并显示,默认使用的sha256算法。

该函数可使用的算法参数有:

  • md5
  • sha1
  • sha224
  • sha256 (default)
  • sha384
  • sha512
[root@master ~]# salt '*' cmd.run 'sha1sum /opt/test'
node1:
    da39a3ee5e6b4b0d3255bfef95601890afd80709  /opt/test
[root@master ~]# salt '*' file.get_sum /opt/test sha1		//指定算法
node1:
    da39a3ee5e6b4b0d3255bfef95601890afd80709
2.8.17 file.gid_to_group、file.group_to_gid

file.gid_to_group:将指定的 gid 转换为组名并显示

[root@master ~]# salt '*' file.gid_to_group 991
node1:
    nginx

file.group_to_gid:将指定的组名转换为 gid 并显示

[root@master ~]# salt '*' file.group_to_gid nginx
node1:
    991
2.8.18 file.user_to_uid、file.uid_to_user

file.user_to_uid:将指定的用户名转换为 uid 显示

[root@master ~]# salt '*' file.user_to_uid apache
node1:
    48

file.uid_to_user:将指定的 uid 转换为用户名显示

[root@master ~]# salt '*' file.uid_to_user 48
node1:
    apache
2.8.19 file.grep

在指定文件中检索指定内容
该函数支持通配符,若在指定的路径中用通配符则必须用双引号引起来

[root@master ~]# salt '*' file.grep /etc/passwd nobody
node1:
    ----------
    pid:
        223034
    retcode:
        0
    stderr:
    stdout:
        nobody:x:65534:65534:Kernel Overflow User:/:/sbin/nologin
2.8.20 file.is_blkdev

判断指定的文件是否是块设备文件

[root@master ~]# salt '*' cmd.run 'ls -l /dev/sr0'
node1:
    brw-rw---- 1 root cdrom 11, 0 Nov  5 07:16 /dev/sr0
[root@master ~]# salt '*' file.is_blkdev /dev/sr0
node1:
    True
2.8.21 file.lsattr

检查并显示出指定文件的属性信息

[root@master ~]# salt '*' cmd.run 'lsattr /opt/test'
node1:
    -------------------- /opt/test
[root@master ~]# salt '*' cmd.run 'chattr +i /opt/test'
node1:
[root@master ~]# salt '*' cmd.run 'lsattr /opt/test'
node1:
    ----i--------------- /opt/test

[root@master ~]# salt '*' file.lsattr /opt/test
node1:
    ----------
    /opt/test:
        - i
2.8.22 file.mkdir

创建目录并设置属主、属组及权限

[root@master ~]# salt '*' cmd.run 'ls -l /opt'
node1:
    total 0
    drwxr-xr-x 2 root  root  6 Nov  5 07:48 abc
    drwxr-xr-x 2 root  root  6 Nov  5 07:48 acc
    -rw-r--r-- 1 nginx nginx 0 Nov  5 07:59 test

[root@master ~]# salt '*' file.mkdir /opt/123		//不指定属主、属组和权限
node1:
    True

[root@master ~]# salt '*' cmd.run 'ls -l /opt'
node1:
    total 0
    drwxr-xr-x 2 root  root  6 Nov  5 09:43 123
    drwxr-xr-x 2 root  root  6 Nov  5 07:48 abc
    drwxr-xr-x 2 root  root  6 Nov  5 07:48 acc
    -rw-r--r-- 1 nginx nginx 0 Nov  5 07:59 test

[root@master ~]# salt '*' file.mkdir /opt/ccc apache apache 755		//指定属主、属组和权限
node1:
    True

[root@master ~]# salt '*' cmd.run 'ls -l /opt'
node1:
    total 0
    drwxr-xr-x 2 root   root   6 Nov  5 09:43 123
    drwxr-xr-x 2 root   root   6 Nov  5 07:48 abc
    drwxr-xr-x 2 root   root   6 Nov  5 07:48 acc
    drwxr-xr-x 2 apache apache 6 Nov  5 09:44 ccc
    -rw-r--r-- 1 nginx  nginx  0 Nov  5 07:59 test
2.8.23 file.move

移动或重命名

//重命名
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
node1:
    total 0
    drwxr-xr-x 2 root   root   6 Nov  5 09:43 123
    drwxr-xr-x 2 root   root   6 Nov  5 07:48 abc
    drwxr-xr-x 2 root   root   6 Nov  5 07:48 acc
    drwxr-xr-x 2 apache apache 6 Nov  5 09:44 ccc
    -rw-r--r-- 1 nginx  nginx  0 Nov  5 07:59 test

[root@master ~]# salt '*' file.move /opt/123 /opt/321
node1:
    ----------
    comment:
        '/opt/123' moved to '/opt/321'
    result:
        True

[root@master ~]# salt '*' cmd.run 'ls -l /opt'
node1:
    total 0
    drwxr-xr-x 2 root   root   6 Nov  5 09:43 321
    drwxr-xr-x 2 root   root   6 Nov  5 07:48 abc
    drwxr-xr-x 2 root   root   6 Nov  5 07:48 acc
    drwxr-xr-x 2 apache apache 6 Nov  5 09:44 ccc
    -rw-r--r-- 1 nginx  nginx  0 Nov  5 07:59 test

//移动
[root@master ~]# salt '*' cmd.run 'ls -l /opt/abc'
node1:
    total 0

[root@master ~]# salt '*' file.move /opt/321 /opt/abc/		//将opt/321文件移动到/opt/abc目录下
node1:
    ----------
    comment:
        '/opt/321' moved to '/opt/abc/'
    result:
        True

[root@master ~]# salt '*' cmd.run 'ls -l /opt/abc'
node1:
    total 0
    drwxr-xr-x 2 root root 6 Nov  5 09:43 321
转载请注明:文章转载自 www.mshxw.com
本文地址:https://www.mshxw.com/it/422729.html
我们一直用心在做
关于我们 文章归档 网站地图 联系我们

版权所有 (c)2021-2022 MSHXW.COM

ICP备案号:晋ICP备2021003244-6号