簡述
saltstack感覺非常強大，常用于自動化運維，使用salt api與目標主機進行通信，然后管理主機資源等
- 安裝salt
yum install salt-master salt-minion salt-api
pip install PyOpenSSL
-
自制ssl證書
TIM圖片20180707111954.png 配置salt api
mkdir /etc/salt/master.d
mkdir /etc/salt/master.d
touch api.conf eauth.conf
- api.conf
rest_cherrypy:
port: 8081
disable_ssl: True
- eauth.conf
external_auth:
pam:
saltapi:
- .*
- '@wheel'
- '@runner'
- 啟動salt master minion api
systemctl start salt-master
systemctl start salt-minion
systemctl start salt-api
- 導入依賴包
import requests
# salt-pepper，封裝了salt api http方式的請求
from pepper import Pepper
- salt api登陸
url = 'http://127.0.0.1:8081'
username = 'saltapi'
password = 'saltapi'
eauth = 'pam'
salt_con = Pepper(url)
ret = salt_con.login(username, password, eauth)
print(ret)
# 返回結果
{
'perms': ['.*', '@wheel', '@runner'],
'start': 1530939127.623945,
'token': '36d8ed121d6abbfc7d496c5b9bc99dc82357e1c3',
'expire': 1530982327.623945,
'user': 'saltapi',
'eauth': 'pam'
}
- 執行命令（eg: test.ping)
low = {
'client': 'local',
'tgt': 'minion1',
'fun': 'test.ping'
}
salt_con.low([low])
# 返回結果
{'return': [{'minion1': True}]}
- 執行命令（ps: 通過ip管理minion)
low = {
'client': 'local',
'tgt': '192.168.88.128',
'expr_form': 'ipcidr',
'fun': 'test.ping'
}
salt_con.low([low])
# 返回結果
{'return': [{'minion1': True}]}
- 獲取grains的部分信息
low = {
'client': 'local',
'tgt': 'minion1',
'fun': 'grains.item',
'arg': ['id', 'os']
}
salt_con.low([low])
# 返回結果
{'return': [{'minion1': {'os': 'CentOS', 'id': 'minion1'}}]}
- 異步執行任務
low = {
'client': 'local_async',
'tgt': 'minion1',
'fun': 'cmd.run',
'arg': ['fdisk -l']
}
salt_con.low([low])
# 返回結果
{'return': [{'jid': '20180707131021897781', 'minions': ['minion1']}]}
- 獲取異步任務的結果
low = {
'client': 'runner',
'tgt': 'minion1',
'fun': 'jobs.lookup_jid',
'jid': '20180707131021897781'
}
salt_con.low([low])
# 返回結果
{
'return': [{
'minion1': \
Disk /dev/sda: 21.5 GB, 21474836480 bytes, 41943040 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk label type: dos
Disk identifier: 0x000ac8a7
Device Boot Start End Blocks Id System
/dev/sda1 * 2048 2099199 1048576 83 Linux
/dev/sda2 2099200 41943039 19921920 8e Linux LVM
Disk /dev/sdb: 21.5 GB, 21474836480 bytes, 41943040 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk label type: dos
Disk identifier: 0x2aafce60
Device Boot Start End Blocks Id System
/dev/sdb1 2048 41943039 20970496 83 Linux
]}
