自动化运维工具saltstack03 -- 之SaltStack的数据系统

SaltStack数据系统

        saltstack有两种数据系统：grains与pillar

1、SaltStack数据系统之grains

        grains可以收集minion端的静态数据（即机器启动时收集一次，机器运行时出现修该参数不会收集），可以做匹配（可以匹配操作系统等），可以用在配置管理操作。

1.1、grains的三种用法

•  可以收集基础信息
•  可以在minion客户端匹配Grains进行批量执行
•  在top.sls里面匹配Grains进行批量执行

1.2、列出所有grains的名称

# salt 'saltstack-41' grains.ls   #列出所有grains的名称
saltstack-41:
    - SSDs
    - biosreleasedate
    - biosversion
    - cpu_flags
    - cpu_model
    - cpuarch
    - domain
    - fqdn
    - fqdn_ip4
    - fqdn_ip6
    - gpus
    - host
    - hwaddr_interfaces
    - id
    - init
    - ip4_interfaces
    - ip6_interfaces
    - ip_interfaces
    - ipv4
    - ipv6
    - kernel
    - kernelrelease
    - locale_info
    - localhost
    - lsb_distrib_id
    - machine_id
    - manufacturer
    - master
    - mdadm
    - mem_total
    - nodename
    - num_cpus
    - num_gpus
    - os
    - os_family
    - osarch
    - oscodename
    - osfinger
    - osfullname
    - osmajorrelease
    - osrelease
    - osrelease_info
    - path
    - productname
    - ps
    - pythonexecutable
    - pythonpath
    - pythonversion
    - saltpath
    - saltversion
    - saltversioninfo
    - selinux
    - serialnumber
    - server_id
    - shell
    - systemd
    - virtual
- zmqversion

1.3、显示grains名称对应的内容

# salt 'saltstack-41' grains.items   #显示Grains的所有的内容
saltstack-41:
    ----------
    SSDs:
    biosreleasedate:
        07/02/2015
    biosversion:
        6.00
    cpu_flags:
        - fpu
        - vme
        - de
        - pse
        - tsc
        - msr
        - pae
        - mce
        - cx8
        - apic
        - sep
        - mtrr
        - pge
        - mca
        - cmov
        - pat
        - pse36
        - clflush
        - dts
        - mmx
        - fxsr
        - sse
        - sse2
        - ss
        - syscall
        - nx
        - pdpe1gb
        - rdtscp
        - lm
        - constant_tsc
        - arch_perfmon
        - pebs
        - bts
        - nopl
        - xtopology
        - tsc_reliable
        - nonstop_tsc
        - aperfmperf
        - eagerfpu
        - pni
        - pclmulqdq
        - ssse3
        - fma
        - cx16
        - pcid
        - sse4_1
        - sse4_2
        - x2apic
        - movbe
        - popcnt
        - tsc_deadline_timer
        - aes
        - xsave
        - avx
        - f16c
        - rdrand
        - hypervisor
        - lahf_lm
        - abm
        - 3dnowprefetch
        - ida
        - arat
        - epb
        - pln
        - pts
        - dtherm
        - fsgsbase
        - tsc_adjust
        - bmi1
        - avx2
        - smep
        - bmi2
        - invpcid
        - rdseed
        - adx
        - smap
        - xsaveopt
    cpu_model:
        Intel(R) Core(TM) i5-5200U CPU @ 2.20GHz
    cpuarch:
        x86_64
    domain:
    fqdn:
        saltstack-41
    fqdn_ip4:
        - 172.16.1.41
    fqdn_ip6:
        - fe80::89d4:576f:7497:41b
        - fe80::8dbd:f1ae:d9d3:b966
        - fe80::5bae:377:65d3:7d6b
        - fe80::3ac2:51c0:e6ac:1471
        - fe80::5248:a475:ac57:9b3e
        - fe80::5c8:50dd:5038:5eba
    gpus:
        |_
          ----------
          model:
              SVGA II Adapter
          vendor:
              unknown
    host:
        saltstack-41
    hwaddr_interfaces:
        ----------
        eth0:
            00:0c:29:ab:27:4d
        eth1:
            00:0c:29:ab:27:57
        lo:
            00:00:00:00:00:00
    id:
        saltstack-41
    init:
        systemd
    ip4_interfaces:
        ----------
        eth0:
            - 10.0.0.41
        eth1:
            - 172.16.1.41
        lo:
            - 127.0.0.1
    ip6_interfaces:
        ----------
        eth0:
            - fe80::5c8:50dd:5038:5eba
            - fe80::8dbd:f1ae:d9d3:b966
            - fe80::5248:a475:ac57:9b3e
        eth1:
            - fe80::89d4:576f:7497:41b
            - fe80::5bae:377:65d3:7d6b
            - fe80::3ac2:51c0:e6ac:1471
        lo:
            - ::1
    ip_interfaces:
        ----------
        eth0:
            - 10.0.0.41
            - fe80::5c8:50dd:5038:5eba
            - fe80::8dbd:f1ae:d9d3:b966
            - fe80::5248:a475:ac57:9b3e
        eth1:
            - 172.16.1.41
            - fe80::89d4:576f:7497:41b
            - fe80::5bae:377:65d3:7d6b
            - fe80::3ac2:51c0:e6ac:1471
        lo:
            - 127.0.0.1
            - ::1
    ipv4:
        - 10.0.0.41
        - 127.0.0.1
        - 172.16.1.41
    ipv6:
        - ::1
        - fe80::3ac2:51c0:e6ac:1471
        - fe80::5248:a475:ac57:9b3e
        - fe80::5bae:377:65d3:7d6b
        - fe80::5c8:50dd:5038:5eba
        - fe80::89d4:576f:7497:41b
        - fe80::8dbd:f1ae:d9d3:b966
    kernel:
        Linux
    kernelrelease:
        3.10.0-514.el7.x86_64
    locale_info:
        ----------
        defaultencoding:
            UTF-8
        defaultlanguage:
            en_US
        detectedencoding:
            UTF-8
    localhost:
        saltstack-41
    lsb_distrib_id:
        CentOS Linux
    machine_id:
        12bba36e67de4c8e94aa369560cfdbfd
    manufacturer:
        VMware, Inc.
    master:
        172.16.1.41
    mdadm:
    mem_total:
        590
    nodename:
        saltstack-41
    num_cpus:
        1
    num_gpus:
        1
    os:
        CentOS
    os_family:
        RedHat
    osarch:
        x86_64
    oscodename:
        Core
    osfinger:
        CentOS Linux-7
    osfullname:
        CentOS Linux
    osmajorrelease:
        7
    osrelease:
        7.3.1611
    osrelease_info:
        - 7
        - 3
        - 1611
    path:
        /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
    productname:
        VMware Virtual Platform
    ps:
        ps -efH
    pythonexecutable:
        /usr/bin/python
    pythonpath:
        - /usr/bin
        - /usr/lib64/python27.zip
        - /usr/lib64/python2.7
        - /usr/lib64/python2.7/plat-linux2
        - /usr/lib64/python2.7/lib-tk
        - /usr/lib64/python2.7/lib-old
        - /usr/lib64/python2.7/lib-dynload
        - /usr/lib64/python2.7/site-packages
        - /usr/lib64/python2.7/site-packages/gtk-2.0
        - /usr/lib/python2.7/site-packages
    pythonversion:
        - 2
        - 7
        - 5
        - final
        - 0
    saltpath:
        /usr/lib/python2.7/site-packages/salt
    saltversion:
        2015.5.10
    saltversioninfo:
        - 2015
        - 5
        - 10
        - 0
    selinux:
        ----------
        enabled:
            False
        enforced:
            Disabled
    serialnumber:
        VMware-56 4d 60 e3 e6 1a a1 7a-bc 86 4c d5 ac ab 27 4d
    server_id:
        1040546676
    shell:
        /bin/sh
    systemd:
        ----------
        features:
            +PAM +AUDIT +SELINUX +IMA -APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ -LZ4 -SECCOMP +BLKID +ELFUTILS +KMOD +IDN
        version:
            219
    virtual:
        VMware
    zmqversion:
        3.2.5

1.3.1、显示指定grains名称对应的值

# salt 'saltstack-41' grains.item fqdn   #查看Grains信息里面的单条
saltstack-41:
    ----------
    fqdn:
        saltstack-41

1.4、通过grains获取eth0网卡的地址

# salt 'salt*' grains.get ip_interfaces:eth0   #显示所有eth0的网卡信息
saltstack-41:
    - 10.0.0.41    #ipv4的ip地址
    - fe80::5248:a475:ac57:9b3e     #ipv6的ip地址

1.5、通过grains获取服务器系统名称

# salt 'saltstack-41' grains.get os
saltstack-41:
    CentOS

1.6、通过grains匹配系统，在指定类型的系统上执行一条命令

# salt -G os:CentOS cmd.run 'w'
saltstack-41:
     00:52:41 up  6:53,  1 user,  load average: 0.05, 0.04, 0.05
    USER     TTY      FROM             LOGIN@   IDLE   JCPU   PCPU WHAT
    root     pts/1    10.0.0.1         21:24    1.00s  0.90s  0.33s /usr/bin/python /usr/bin/salt -G os:CentOS cmd.run w
db02-36:
     17:49:37 up  6:53,  1 user,  load average: 0.00, 0.01, 0.05
    USER     TTY      FROM             LOGIN@   IDLE   JCPU   PCPU WHAT
root     pts/1    10.0.0.1         14:21   46:49   0.28s  0.28s -bash

注：-G:指使用Grains进行匹配，匹配到centos系统则执行w命令

同理，如果说以后想在有eth0网卡的服务器上批量执行一个命令就可以这样匹配，在vmware虚拟机上批量执行一个语句等等。

1.7、在minion端指定grains名称，然后在master端匹配到指定的grains名称就执行想要执行的指令

1、minion端指定grains名称
# vim /etc/salt/minion
# sed -n '88,91p' /etc/salt/minion    #去掉注释就好，不要添加其他的空格
grains:
  roles:
    - webserver
    - memcache

2、重启minion端
# systemctl restart salt-minion

3、master端匹配grains名称，然后执行指定
# salt -G 'roles:memcache' cmd.run 'echo "hehe"'
saltstack-41:
hehe
注：在所有minion里面配置了roles:memcache的机器上执行echo "hehe"

1.7.1、如果觉得在minion里配置不方便，可以在minion端单独写一个文件指定grains名称

1、如果写/etc/salt/grains文件为定义grains名称文件，内容为：    
# cat /etc/salt/grains
web: nginx    #注意冒号后面有一个空格

2、重启minion
# systemctl restart salt-minion

3、在master端匹配minion端的grains名称并执行指定命令：
# salt -G 'web:nginx' cmd.run "echo 1111"
saltstack-41:
    1111
注：即在/etc/salt/grains文件里匹配到web:nginx配置的服务器则批量执行echo 1111

1.8、在top.sls（高级状态）里匹配grains并执行指定的指令

# cat /srv/salt/top.sls
base:    #定义base
  'web:nginx':   #minion端匹配了web:nginx
    - match: grain   #匹配方式：Grains
    - apache    #以上两条都匹配了则执行apache的状态

1.8.1、配置后执行高级状态

# salt '*' state.highstate

2、SaltStack数据系统之pillar

        Pillar给minion(客户端)指定它想要的数据，（给那个minion指定那个minion才能看得到数据。）Pillar存放在master端，

2.1、查看pillar

# salt '*' pillar.items
db02-36:
    ----------    #没有
saltstack-41:
    ----------

2.2、设置pillar

1、master端配置pillar
# sed -n '529,531p' /etc/salt/master   #取消一下行的注释
pillar_roots:
  base:
- /srv/pillar

2、创建Pillar目录
# mkdir /srv/pillar

3、设置后重启master
# systemctl restart salt-master

4、写pillar状态
# cat /srv/pillar/apache.sls
{% if grains['os'] == 'CentOS' %}   #如果是CentOS系统
apache: httpd     #就显示httpd
{% elif grains['os'] == 'Debian' %}    #如果是Debian系统
apache: apche2   #就显示apche2
{% endif %}

2.3、在top.sls（高级状态）里设置那台minion端可以查看pillar状态

# cat /srv/pillar/top.sls   #在top.sls文件里指定那个客户端可以查看pillar状态
base:
  '*':    #设置所有主机（*表示所有）可以查看apache的状态，也可以指定单个主机
    - apache    #可以查看的状态

2.3.1、设置后在minion端查看pillar

# salt '*' pillar.items     #查看pillar的命令
db02-36:    #由于是centos系统
    ----------
    apache:    #所以查看到的状态是apache
        httpd
saltstack-41:
    ----------
    apache:
        httpd

2.4、用pillar定位主机

-I：匹配pillar

# salt '*' saltutil.refresh_pillar   #定位主机前需要先刷新一下，通知设置pillar客户端
db02-36:
    True
saltstack-41:
    True
# salt -I 'apache:httpd' test.ping  #然后定位存在apache:httpd的主机
db02-36:
    True   #表示成功
saltstack-41:
    True

grains和pillar的区别