實戰Puppet 集中配置管理系統(3)——Puppet dashboard與nginx+passenger安裝配置

1 . Puppet dashboard安裝配置

1）所需軟體包

　　puppet-dashboard-1.2.23-1.el6.noarch.rpm

        ruby-mysql-2.8.2-1.el6.x86_64.rpm 

        rubygem-rake-0.8.7-2.1.el6.noarch.rpm

　　依賴性:

　　* Ruby 1.8.7

　　* RubyGems

　　* Rake >= 0.8.3

　　* MySQL server 5.x

　　* Ruby-MySQL bindings 2.7.x or 2.8.x

2）安裝

    #yum install puppet-dashboard-1.2.23-1.el6.noarch.rpm 

       ruby-mysql-2.8.2-1.el6.x86_64.rpm rubygem-rake-0.8.7-2.1.el6.noarch.rpm -y

<a href="http://s4.51cto.com/wyfs02/M00/89/9D/wKioL1gYa3HhIt_oAAAgaqvr1x8628.png" target="_blank"></a>

#mysql 5.1 遇到的資訊包過大問題 用用戶端導入資料的時候,遇到錯誤代碼: 1153 - Got a

packet bigger than 'max_allowed_packet' bytes 終止了資料導入,可以使用如下參數解決:

(rhel6.3 上未遇到)

# vi /etc/my.cnf

[mysqld]

max_allowed_packet = 32M#添加此行

3）配置 mysql 資料庫

# /etc/init.d/mysqld start

# mysql_secure_installation設定root密碼為willis

# cd /usr/share/puppet-dashboard/

# vim config/database.yml//隻留下生産環境配置

<a href="http://s5.51cto.com/wyfs02/M01/89/9F/wKiom1gYbB-CWWAlAAAgiSa2DBg354.png" target="_blank"></a>

<a href="http://s5.51cto.com/wyfs02/M00/89/9F/wKiom1gYbB_wBsPvAAAv-Bnu6LU170.png" target="_blank"></a>

#vim config/add.sql

CREATE DATABASE dashboard_production CHARACTER SET utf8;

CREATE USER 'dashboard'@'localhost' IDENTIFIED BY 'willis';

GRANT ALL PRIVILEGES ON dashboard_production.* TO 'dashboard'@'localhost';

<a href="http://s4.51cto.com/wyfs02/M02/89/9F/wKiom1gYbK3R4O4XAABPwDVWRH0643.png" target="_blank"></a>

# rake RAILS_ENV=production db:migrate

　　//建立 dashboard 所需的資料庫和表

4）修改puppet-dashboard 預設時區

#//檢視puppet-dashboard 預設支援的時區

#rake gems:refresh_specs

#rake time:zones:local

# vim /usr/share/puppet-dashboard/config/settings.yml

　    　//puppet-dashboard 預設時區不正确,需要修改

    time_zone: 'Beijing'

<a href="http://s2.51cto.com/wyfs02/M01/89/9D/wKioL1gYbR_Bdd67AAAKiVndm08398.png" target="_blank"></a>

<a href="http://s4.51cto.com/wyfs02/M02/89/A0/wKiom1gYbUCQBE8bAABgzb4bqwo461.png" target="_blank"></a>

5）啟動服務

#/etc/init.d/puppet-dashboard start

6）修改日志檔案權限

# cd /usr/share/puppet-dashboard/log

#chmod 666 /production.log

#/etc/init.d/puppet-dashboard-workers start

7）修改伺服器的配置檔案

# vim /etc/puppet/puppet.conf

[main]//添加以下兩項

reports = http

reporturl = http://172.25.254.1:3000/reports

<a href="http://s2.51cto.com/wyfs02/M00/89/A0/wKiom1gYbcDA4whcAAAr_8PA5oA968.png" target="_blank"></a>

#/etc/init.d/puppetmaster restart

8）設定 client 端

      server2與server3同時設定如下

#vim /etc/puppet/puppet.conf

[agent]//添加以下行

report = true

# puppet agent --server server1.example.com --no-daemonize -vt//同步資料

<a href="http://s2.51cto.com/wyfs02/M00/89/A0/wKiom1gYblDTGd7jAABQpMcA8UY820.png" target="_blank"></a>

<a href="http://s4.51cto.com/wyfs02/M00/89/9D/wKioL1gYbm-T6NhWAABRCAAbWwA264.png" target="_blank"></a>

9) 浏覽器通路 172.25.254.1:3000 

<a href="http://s3.51cto.com/wyfs02/M01/89/9D/wKioL1gYbsvwr-LrAAEZYUhT1T0178.png" target="_blank"></a>

10)在用戶端安裝完 puppet 後,并且認證完後,我們可以看到效果,那怎樣讓它自動與伺服器同步呢?預設多少分鐘跟伺服器同步呢?怎樣修改同步的時間呢,這時候我們需要配置用戶端:

&lt;1&gt;配置 puppet 相關參數和同步時間:

# vim /etc/sysconfig/puppet

PUPPET_SERVER=server1.example.com    #puppet master 的位址

PUPPET_PORT=8140    #puppet 監聽端口

PUPPET_LOG=/var/log/puppet/puppet.log    #puppet 本地日志

#PUPPET_EXTRA_OPTS=--waitforcert=500 【預設同步的時間,我這裡不修改這行參數】

&lt;2&gt;預設配置完畢後,用戶端會半個小時跟伺服器同步一次,我們可以修改這個時間

[agent]

runinterval = 60//代表 60 秒跟伺服器同步一次

#/etc/init.d/puppet start

2.nginx+passenger 安裝配置

Apache 子產品,實作對 puppet 的負載均衡。

1)[root@server1 mnt]# gem list

*** LOCAL GEMS ***

json (1.5.5)

rack (1.6.4)

<a href="http://s5.51cto.com/wyfs02/M02/89/A0/wKiom1gYcoaw-Fg6AAAWV4DT4Lo998.png" target="_blank"></a>

2)不夠就下載下傳

# gem install passenger-5.0.15.gem rack-1.6.4.gem

<a href="http://s5.51cto.com/wyfs02/M00/89/9D/wKioL1gYdtviCFfCAACDWGosQmM410.png" target="_blank"></a>

<a href="http://s1.51cto.com/wyfs02/M01/89/A0/wKiom1gYdtrygdr4AAAfaU5B7j8437.png" target="_blank"></a>

3) # yum install -y gcc gcc-c++ curl-devel zlib-devel openssl-devel ruby-devel

# tar zxf nginx-1.8.0.tar.gz -C /mnt

<a href="http://s5.51cto.com/wyfs02/M01/89/A0/wKiom1gYebHhbJ3NAABD-b_GrjU102.png" target="_blank"></a>

4) #passenger-install-nginx-module

　　//腳本會自動安裝 nginx 支援,按提示操作,其它按Enter就好，編譯過程比較慢

<a href="http://s3.51cto.com/wyfs02/M02/89/A0/wKiom1gYekmS10AkAAA_a_wFHTY509.png" target="_blank"></a>

<a href="http://s1.51cto.com/wyfs02/M01/89/A0/wKiom1gYe6DjHU-mAAD-HEgtb8c210.png" target="_blank"></a>

<a href="http://s1.51cto.com/wyfs02/M00/89/9D/wKioL1gYe5-BdxJ-AAAmD9u86iY639.png" target="_blank"></a>

<a href="http://s1.51cto.com/wyfs02/M00/89/A0/wKiom1gYe5-ANi82AAAjv2r9Wy4635.png" target="_blank"></a>

<a href="http://s3.51cto.com/wyfs02/M00/89/9D/wKioL1gYe57T_8nAAABWFD46_F0638.png" target="_blank"></a>

<a href="http://s5.51cto.com/wyfs02/M00/89/A0/wKiom1gYe57yt5-lAABS9Vz8E8E045.png" target="_blank"></a>

<a href="http://s5.51cto.com/wyfs02/M01/89/A0/wKiom1gYfQ_gaDNUAAChD_uWI3c328.png" target="_blank"></a>

5) nginx 預設安裝在/opt/nginx 目錄：

# cd /opt/nginx/conf/

# /etc/init.d/puppetmaster stop

# vim nginx.conf

<a href="http://s1.51cto.com/wyfs02/M00/89/9E/wKioL1gYfrqj-ghrAACJ2TBDfg0801.png" target="_blank"></a>

server {

        listen       8140;

        server_name  server1.example.com;

        root    /etc/puppet/rack/public;

        passenger_enabled on;

        passenger_set_header X_CLIENT_DN $ssl_client_s_dn;

        passenger_set_header X_CLIENT_VERIFY $ssl_client_verify;

        ssl on;

        ssl_session_timeout 5m;

        ssl_certificate /var/lib/puppet/ssl/certs/server1.example.com.pem;

        ssl_certificate_key /var/lib/puppet/ssl/private_keys/server1.example.com.pem;

        ssl_client_certificate /var/lib/puppet/ssl/ca/ca_crt.pem;

        ssl_crl /var/lib/puppet/ssl/ca/ca_crl.pem;

        ssl_verify_client optional;

        ssl_ciphers SSLv2:-LOW:-EXPORT:RC4+RSA;

        ssl_prefer_server_ciphers on;

        ssl_verify_depth 1;

        ssl_session_cache shared:SSL:128m;

}

# /opt/nginx/sbin/nginx -t //檢測 nginx配置檔案是否有錯

<a href="http://s4.51cto.com/wyfs02/M00/89/9E/wKioL1gYgG3TReodAAAiJgVP1cY031.png" target="_blank"></a>

6)添加目錄

# cd /etc/puppet/

# mkdir /etc/puppet/rack/{public,tmp}  -p

# cd rack/

# cp /usr/share/puppet/ext/rack/config.ru /etc/puppet/rack/

# chown puppet.puppet /etc/puppet/rack/config.ru

#chkconfig puppetmaster off

# /opt/nginx/sbin/nginx//啟動nginx

　  　//puppetmaster 不需要啟動 , nginx 啟動時會自動調用 puppet。

7) 測試

# /opt/nginx/sbin/nginx stop   #關閉nginx讓用戶端擷取資訊,可以看到擷取不到資訊

<a href="http://s5.51cto.com/wyfs02/M02/89/9F/wKioL1gYhYnjDLCoAAEEdhX9LwA162.png" target="_blank"></a>

# /opt/nginx/sbin/nginx   ###開啟nginx,可以看到用戶端可以擷取到資訊

<a href="http://s1.51cto.com/wyfs02/M01/89/A1/wKiom1gYhgSCeno0AABVI2jWnmo060.png" target="_blank"></a>

#ps -ax   ###檢視程序啟動情況

本文轉自willis_sun 51CTO部落格，原文連結：http://blog.51cto.com/willis/1868229，如需轉載請自行聯系原作者