（转）自动化管理工具Saltstack之nginx部署

本文转载自： http://blog.csdn.net/hnhuangyiyang/article/details/50414284#t0

本文会根据原文作实验操作，所以会有少量的更改，但以原文为主。

state文件列表

[root@cong-33 nginx]# pwd
/srv/salt/nginx
[root@cong-33 nginx]# ll
total 16
-rw-r--r--. 1 root root  690 Nov 24 15:09 conf.sls
-rw-r--r--. 1 root root   58 Nov 24 14:51 init.sls
-rw-r--r--. 1 root root 1309 Nov 24 16:27 install.sls
-rw-r--r--. 1 root root  372 Nov 24 16:23 vhost.sls
[root@cong-33 nginx]#

文件列表

[root@cong-33 nginx]# ll /srv/salt/file/nginx/
total 972
-rw-r--r--. 1 root root   2819 Nov 24 14:54 nginx
-rw-r--r--. 1 root root 981687 Nov 24 14:14 nginx-1.12.2.tar.gz
-rw-r--r--. 1 root root   1743 Nov 24 14:22 nginx.conf
-rw-r--r--. 1 root root    387 Nov 24 16:30 vhost.conf
[root@cong-33 nginx]# 

nginx的init.sls入口文件内容

[root@cong-33 nginx]# pwd
/srv/salt/nginx
[root@cong-33 nginx]# cat init.sls 
include:
  - nginx.install
  - nginx.conf
  - nginx.vhost
[root@cong-33 nginx]#

install.sls：

[root@cong-33 nginx]# cat install.sls 
nginx_cp_tar_file:
  file.managed:
    - name: /usr/local/src/nginx-1.12.2.tar.gz
    - unless: test -e /usr/local/src/nginx/nginx-1.12.2.tar.gz
    - user: root
    - group: root
    - makedirs: True
    - source: salt://file/nginx/nginx-1.12.2.tar.gz

nginx_extract:
  cmd.run:
    - cwd: /usr/local/src
    - names:
      - tar zxf nginx-1.12.2.tar.gz
    - unless: test -d /usr/local/src/nginx-1.12.2
    - require:
      - file: nginx_cp_tar_file

nginx_user:
  user.present:
    - name: www
    - createhome: False
    - gid_from_name: True
    - shell: /sbin/nologin

nginx_install_require:
  pkg.installed:
    - pkgs:
      - gcc
      - gcc-c++
      - openssl-devel
      - zlib-devel
      - pcre-devel

nginx_compile:
  cmd.run:
    - cwd: /usr/local/src/nginx-1.12.2
    - names:
      - ./configure --user=www --group=www --prefix=/usr/local/nginx --with-http_stub_status_module 
--with-http_gzip_static_module --with-http_ssl_module --with-http_realip_module --with-pcre
      - make
      - make install
    - require:
      - cmd: nginx_extract
      - pkg: nginx_install_require
    - unless: test -d /usr/local/nginx
create_dir:
  cmd.run:
    - names:
      - mkdir -p /usr/local/nginx/conf/vhost
    - unless: test -d /usr/local/nginx/conf/vhost
    - require:
      - cmd: nginx_compile
[root@cong-33 nginx]#

conf.sls：

[root@cong-33 nginx]# cat conf.sls 
include:
  - nginx.install

{% set nginx_user = 'www'%}

nginx_conf:
  file.managed:
    - name: /usr/local/nginx/conf/nginx.conf
    - source: salt://file/nginx/nginx.conf
    - template: jinja
    - defaults:
      nginx_user: {{ nginx_user }}
      cpus: {{ grains['num_cpus'] }}

nginx_service:
  file.managed:
    - name: /etc/init.d/nginx
    - source: salt://file/nginx/nginx
    - user: root
    - mode: 755
  cmd.run:
    - names:
      - /sbin/chkconfig --add nginx
      - /sbin/chkconfig nginx on
    - unless: /sbin/chkconfig --list nginx
  service.running:
    - name: nginx
    - enable: True
    - reload: True
    - watch:
      - file: /usr/local/nginx/conf/vhost/*.conf

[root@cong-33 nginx]#

vhost.sls：

[root@cong-33 nginx]# cat vhost.sls 
include:
  - nginx.install

{% set hostname = ['www','bbs'] %}
{% for server_name in hostname %}
vhost_{{ server_name }}:
  file.managed:
    - name: /usr/local/nginx/conf/vhost/{{ server_name }}.conf
    - source: salt://file/nginx/vhost.conf
    - template: jinja
    - defaults:
       server_name: {{ server_name }}
    - watch_in:
       service: nginx

{% endfor %}
[root@cong-33 nginx]#

nginx主配置文件：

[root@cong-33 nginx]# cat /srv/salt/file/nginx/nginx.conf 

user  {{ nginx_user }};
worker_processes  {{ cpus }};

worker_rlimit_nofile 65535;
#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;


events {
    use epoll;
    worker_connections  65535;
}


http {
    include       mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    #access_log  logs/access.log  main;

    sendfile        on;
    tcp_nopush     on;

    keepalive_timeout  65;

    gzip  on;

    server {
        listen       80;
        server_name  localhost;
        root   /var/www/zabbix;

        #charset koi8-r;

        access_log  logs/localhost.access.log  main;

        location / {
            try_files $uri $uri/ =404;
            index  index.php index.html index.htm;
        }
        
        location /nginx_status {
            stub_status on;
            access_log off;
        }


        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }

        location ~ ^/(status|ping)$
        {
            include fastcgi_params;
            fastcgi_pass unix:/var/run/php-fpm/php-fpm.socket;
            fastcgi_param SCRIPT_FILENAME $fastcgi_script_name;
        }

        location ~ .php$ {
            try_files $uri =404;
            fastcgi_pass   unix:/var/run/php-fpm/php-fpm.socket;
            fastcgi_index  index.php;
            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
            include        fastcgi_params;
        }

    }
    
    include conf/vhost/*.conf;

}
[root@cong-33 nginx]# 

nginx虚拟机配置文件：

[root@cong-33 nginx]# cat /srv/salt/file/nginx/vhost.conf 
server {
    listen 80;
    server_name {{ server_name }}.cong.com;
    index index.html index.htm;
    root /var/www/localhost;

    location /status {
        stub_status on;
    }

    location ~ .*.(gif|jpg|jpeg|png|bmp|swf)${
        expires 3d;       
 
    }

    location ~ .*.(js|css)?${
         expires 1d;
    } 

    access_log /logs/{{ server_name }}-access.log main;

}
[root@cong-33 nginx]#

nginx的启动脚本：

[root@cong-33 nginx]# cat /srv/salt/file/nginx/nginx
#!/bin/sh  
#  
# nginx - this script starts and stops the nginx daemon  
#  
# chkconfig:   - 85 15   
# description:  Nginx is an HTTP(S) server, HTTP(S) reverse   
#               proxy and IMAP/POP3 proxy server  
# processname: nginx  
# config:      /usr/local/nginx/conf/nginx.conf  
# pidfile:     /usr/local/nginx/logs/nginx.pid  
  
# Source function library.  
. /etc/rc.d/init.d/functions  
  
# Source networking configuration.  
. /etc/sysconfig/network  
  
# Check that networking is up.  
[ "$NETWORKING" = "no" ] && exit 0  
  
nginx="/usr/local/nginx/sbin/nginx"  
prog=$(basename $nginx)  
  
NGINX_CONF_FILE="/usr/local/nginx/conf/nginx.conf"  
  
  
lockfile=/var/lock/subsys/nginx  
  
make_dirs() {  
   # make required directories  
   user=`$nginx -V 2>&1 | grep "configure arguments:" | sed 's/[^*]*--user=[]∗.*/1/g' -`  
   if [ -z "`grep $user /etc/passwd`" ]; then  
       useradd -M -s /bin/nologin $user  
   fi  
   options=`$nginx -V 2>&1 | grep 'configure arguments:'`  
   for opt in $options; do  
       if [ `echo $opt | grep '.*-temp-path'` ]; then  
           value=`echo $opt | cut -d "=" -f 2`  
           if [ ! -d "$value" ]; then  
               # echo "creating" $value  
               mkdir -p $value && chown -R $user $value  
           fi  
       fi  
   done  
}  
  
start() {  
    [ -x $nginx ] || exit 5  
    [ -f $NGINX_CONF_FILE ] || exit 6  
    make_dirs  
    echo -n $"Starting $prog: "  
    daemon $nginx -c $NGINX_CONF_FILE  
    retval=$?  
    echo  
    [ $retval -eq 0 ] && touch $lockfile  
    return $retval  
}  
  
stop() {  
    echo -n $"Stopping $prog: "  
    killproc $prog -QUIT  
    retval=$?  
    echo  
    [ $retval -eq 0 ] && rm -f $lockfile  
    return $retval  
}  
  
restart() {  
    configtest || return $?  
    stop  
    sleep 1  
    start  
}  
  
reload() {  
    configtest || return $?  
    echo -n $"Reloading $prog: "  
    killproc $nginx -HUP  
    RETVAL=$?  
    echo  
}  
  
force_reload() {  
    restart  
}  
  
configtest() {  
  $nginx -t -c $NGINX_CONF_FILE  
}  
  
rh_status() {  
    status $prog  
}  
  
rh_status_q() {  
    rh_status >/dev/null 2>&1  
}  
  
case "$1" in  
    start)  
        rh_status_q && exit 0  
        $1  
        ;;  
    stop)  
        rh_status_q || exit 0  
        $1  
        ;;  
    restart|configtest)  
        $1  
        ;;  
    reload)  
        rh_status_q || exit 7  
        $1  
        ;;  
    force-reload)  
        force_reload  
        ;;  
    status)  
        rh_status  
        ;;  
    condrestart|try-restart)  
        rh_status_q || exit 0  
            ;;                     
    *)  
        echo $"Usage: $0 {start|stop|status|restart|condrestart|try-restart|reload|force-reload|configtest}"  
        exit 2  
esac 
[root@cong-33 nginx]#