环境：
| 主机 | IP | 服务 |
|---|---|---|
| master | 192.168.111.141 | salt-matser |
| node1 | 192.168.111.142 | salt-minion |
[root@master salt]# tree prod/
prod/
├── modules
│ ├── app
│ │ └── php
│ │ ├── files
│ │ │ ├── install.sh
│ │ │ ├── oniguruma-devel-6.8.2-2.el8.x86_64.rpm
│ │ │ ├── php-7.4.24.tar.xz
│ │ │ ├── php-fpm
│ │ │ ├── php-fpm.conf
│ │ │ ├── php-fpm.service
│ │ │ └── www.conf
│ │ └── install.sls
│ ├── database
│ │ └── mysql
│ │ ├── files
│ │ │ ├── install.sh
│ │ │ ├── mysql-5.7.34-linux-glibc2.12-x86_64.tar.gz
│ │ │ ├── mysqld.service
│ │ │ └── mysql.server
│ │ └── install.sls
│ └── web
│ └── apache
│ ├── files
│ │ ├── apr-1.7.0.tar.gz
│ │ ├── apr-util-1.6.1.tar.gz
│ │ ├── httpd-2.4.48.tar.gz
│ │ ├── httpd.conf
│ │ ├── httpd.service
│ │ ├── index.php
│ │ └── install.sh
│ └── install.sls
└── zabbix
├── apache.sls
├── files
│ ├── index.php
│ ├── install.sh
│ ├── my.cnf
│ ├── mysql.conf
│ ├── php.ini
│ ├── vhosts.conf
│ ├── zabbix-5.4.4.tar.gz
│ └── zabbix_server.conf
├── install.sls
├── lamp.sls
└── mysql.sls
安装httpd、mysql、php
安装httpd
[root@master salt]# cat prod/modules/web/apache/install.sls
apache:
user.present:
- shell: /sbin/nologin
- system: true
- createhome: false
apache-dep-packages:
pkg.installed:
- pkgs:
- make
- openssl-devel
- pcre-devel
- expat-devel
- libtool
- gcc
- gcc-c++
copy_package:
file.managed:
- names:
- /usr/src/apr-1.7.0.tar.gz:
- source: salt://modules/web/apache/files/apr-1.7.0.tar.gz
- /usr/src/apr-util-1.6.1.tar.gz:
- source: salt://modules/web/apache/files/apr-util-1.6.1.tar.gz
- /usr/src/httpd-2.4.48.tar.gz:
- source: salt://modules/web/apache/files/httpd-2.4.48.tar.gz
- /usr/lib/systemd/system/httpd.service:
- source: salt://modules/web/apache/files/httpd.service
- user: root
- group: root
- mode: 0644
salt://modules/web/apache/files/install.sh:
cmd.script
/usr/local/httpd/conf/httpd.conf:
file.managed:
- source: salt://modules/web/apache/files/httpd.conf
- user: root
- group: root
- mode: 0644
[root@master salt]# cat prod/modules/web/apache/files/install.sh
#!/bin/bash
cd /usr/src
rm -rf httpd-2.4.48 apr-util-1.6.1 apr-1.7.0
tar xf httpd-2.4.48.tar.gz -C /usr/src
tar xf apr-util-1.6.1.tar.gz -C /usr/src
tar xf apr-1.7.0.tar.gz -C /usr/src
cd /usr/src/apr-1.7.0
sed -i '/$RM "$cfgfile"/d' configure
./configure --prefix=/usr/local/apr &&
make && make install
cd /usr/src/apr-util-1.6.1
./configure --prefix=/usr/local/apr-util --with-apr=/usr/local/apr &&
make && make install
cd /usr/src/httpd-2.4.48
./configure --prefix=/usr/local/httpd
--enable-so
--enable-ssl
--enable-cgi
--enable-rewrite
--with-zlib
--with-pcre
--with-apr=/usr/local/apr
--with-apr-util=/usr/local/apr-util
--enable-modules=most
--enable-mpms-shared=all
--with-mpm=prefork &&
make && make install
安装mysql
[root@master salt]# cat prod/modules/database/mysql/install.sls
mysql:
user.present:
- shell: /sbin/nologin
- system: true
- createhome: false
ncurses-compat-libs:
pkg.installed
/usr/src/mysql-5.7.34-linux-glibc2.12-x86_64.tar.gz:
file.managed:
- source: salt://modules/database/mysql/files/mysql-5.7.34-linux-glibc2.12-x86_64.tar.gz
/opt/data:
file.directory:
- user: mysql
- group: mysql
- mode: '755'
salt://modules/database/mysql/files/install.sh:
cmd.script
copy-mysql-soft:
file.managed:
- names:
- /usr/lib/systemd/system/mysqld.service:
- source: salt://modules/database/mysql/files/mysqld.service
- /usr/local/mysql/support-files/mysql.server:
- source: salt://modules/database/mysql/files/mysql.server
[root@master salt]# cat prod/modules/database/mysql/files/install.sh #!/bin/bash tar xf /usr/src/mysql-5.7.34-linux-glibc2.12-x86_64.tar.gz -C /usr/local ln -s /usr/local/mysql-5.7.34-linux-glibc2.12-x86_64/ /usr/local/mysql chown -R mysql.mysql /usr/local/mysql* echo 'export PATH=/usr/local/mysql/bin:$PATH' > /etc/profile.d/mysql.sh /usr/local/mysql/bin/mysqld --initialize-insecure --user=mysql --datadir=/opt/data
安装php
[root@master salt]# cat prod/modules/app/php/install.sls
php-dep-packages:
pkg.installed:
- pkgs:
- libxml2
- libxml2-devel
- openssl
- openssl-devel
- bzip2
- bzip2-devel
- libcurl
- libcurl-devel
- libicu-devel
- libjpeg-turbo
- libjpeg-turbo-devel
- libpng
- libpng-devel
- openldap-devel
- pcre-devel
- freetype
- freetype-devel
- gmp
- gmp-devel
- libmcrypt
- libmcrypt-devel
- readline
- readline-devel
- libxslt
- libxslt-devel
- mhash
- mhash-devel
- php-mysqlnd
- libsqlite3x-devel
- libzip-devel
/usr/src/oniguruma-devel-6.8.2-2.el8.x86_64.rpm:
file.managed:
- source: salt://modules/app/php/files/oniguruma-devel-6.8.2-2.el8.x86_64.rpm
- user: root
- group: root
- mode: '0644'
cmd.run:
- name: yum -y install /usr/src/oniguruma-devel-6.8.2-2.el8.x86_64.rpm
/usr/src/php-7.4.24.tar.xz:
file.managed:
- source: salt://modules/app/php/files/php-7.4.24.tar.xz
salt://modules/app/php/files/install.sh:
cmd.script
copysoft:
file.managed:
- names:
- /etc/init.d/php-fpm:
- source: salt://modules/app/php/files/php-fpm
- user: root
- group: root
- mode: '0755'
- /usr/local/php/etc/php-fpm.conf:
- source: salt://modules/app/php/files/php-fpm.conf
- /usr/local/php/etc/php-fpm.d/www.conf:
- source: salt://modules/app/php/files/www.conf
- /usr/lib/systemd/system/php-fpm.service:
- source: salt://modules/app/php/files/php-fpm.service
php-fpm.service:
service.running:
- enable: true
[root@master salt]# cat prod/modules/app/php/files/install.sh
#!/bin/bash
cd /usr/src
rm -rf php-7.4.24
tar xf php-7.4.24.tar.gz
cd php-7.4.24
./configure --prefix=/usr/local/php7
--with-config-file-path=/etc
--enable-fpm
--disable-debug
--disable-rpath
--enable-shared
--enable-soap
--with-openssl
--enable-bcmath
--with-iconv
--with-bz2
--enable-calendar
--with-curl
--enable-exif
--enable-ftp
--enable-gd
--with-jpeg
--with-zlib-dir
--with-freetype
--with-gettext
--enable-mbstring
--enable-pdo
--with-mysqli=mysqlnd
--with-pdo-mysql=mysqlnd
--with-readline
--enable-shmop
--enable-simplexml
--enable-sockets
--with-zip
--enable-mysqlnd-compression-support
--with-pear
--enable-pcntl
--enable-posix &&
make && make install
部署zabbix所需的lamp架构环境
[root@master salt]# cat prod/zabbix/apache.sls
"Development Tools":
pkg.group_installed
include:
- modules.web.apache.install
/usr/include/httpd:
file.symlink:
- target: /usr/local/httpd/include
/usr/local/httpd/htdocs/zabbix:
file.directory:
- user: root
- group: root
- mode: 0755
/usr/local/httpd/htdocs:
file.directory:
- user: apache
- group: apache
/usr/local/httpd/htdocs/zabbix/index.php:
file.managed:
- source: salt://zabbix/files/index.php
- user: root
- group: root
- mode: 0644
/usr/local/httpd/conf/extra/vhosts.conf:
file.managed:
- source: salt://zabbix/files/vhosts.conf
- user: root
- group: root
- mode: 644
zabbix-apache.service:
service.running:
- name: httpd
- enable: true
[root@master salt]# cat prod/zabbix/mysql.sls
include:
- modules.database.mysql.install
lamp-mysql-packages:
pkg.installed:
- pkgs:
- ncurses-devel
- openssl-devel
- openssl
- cmake
- mariadb-devel
copy-mysql-file:
file.managed:
- user: root
- group: root
- mode: 0644
- names:
- /etc/my.cnf:
- source: salt://zabbix/files/my.cnf
- /etc/ld.so.conf.d/mysql.conf:
- source: salt://zabbix/files/mysql.conf
/usr/local/include/mysql:
file.symlink:
- target: /usr/local/mysql/include
mysqld:
service.running:
- enable: true
set-mysql-passwd:
cmd.run:
- name: /usr/local/mysql/bin/mysql -e "set password=password('123');"
[root@master salt]# cat prod/zabbix/lamp.sls include: - zabbix.apache - zabbix.mysql - modules.app.php.install
安装zabbix
[root@master salt]# cat prod/zabbix/install.sls
include:
- zabbix.lamp
zabbix-dep-packages:
pkg.installed:
- pkgs:
- net-snmp-devel
- libevent-devel
zabbix:
user.present:
- shell: /sbin/nologin
- system: true
- createhome: false
/usr/src/zabbix-5.4.4.tar.gz:
file.managed:
- source: salt://zabbix/files/zabbix-5.4.4.tar.gz
salt://zabbix/files/install.sh:
cmd.script
/usr/local/etc/zabbix_server.conf:
file.managed:
- source: salt://zabbix/files/zabbix_server.conf
/var/lib/mysql:
file.directory:
- user: root
- group: root
- mode: 755
/var/lib/mysql/mysql.sock:
file.symlink:
- target: /tmp/mysql.sock
zabbix_server:
cmd.run:
- names:
- cp -r /usr/src/zabbix-5.4.4/ui/* /usr/local/httpd/htdocs/zabbix/
- zabbix_server
- zabbix_agentd
/etc/php.ini:
file.managed:
- source: salt://zabbix/files/php.ini
- user: root
- group: root
- mode: 644
reload-service:
service.running:
- reload: true
- names:
- httpd
- php-fpm
[root@master salt]# cat prod/zabbix/files/install.sh #!/bin/bash cd /usr/src tar xf zabbix-5.4.4.tar.gz -C /usr/src /usr/local/mysql/bin/mysql -uroot -p123 -e "create database zabbix character set utf8 collate utf8_bin;" /usr/local/mysql/bin/mysql -uroot -p123 -e "grant all privileges on zabbix.* to zabbix@localhost identified by '123';" /usr/local/mysql/bin/mysql -uroot -p123 -e "flush privileges;" cd /usr/src/zabbix-5.4.4/database/mysql/ /usr/local/mysql/bin/mysql -uroot -p123 zabbix < schema.sql /usr/local/mysql/bin/mysql -uroot -p123 zabbix < images.sql /usr/local/mysql/bin/mysql -uroot -p123 zabbix < data.sql cd /usr/src/zabbix-5.4.4 ./configure --enable-server --enable-agent --with-mysql --with-net-snmp --with-libcurl --with-libxml2 && make install
使用satl命令安装zabbix
[root@master salt]# salt node1 state.sls zabbix.install saltenv=prod
