本章主要介绍通过saltstack构建系统高可用架构，以满足业务需求。通过Haproxy实现负载均衡调度后端Nginx+PHP服务器，Keepalived实现系统高可用功能，Memcached存储session会话，后端数据库采用Mysql并且实现主从复制以及读写分离。
一、拓扑图
一、系统架构图
我们通过saltstack实现的整个系统环境可以分为三部分：
系统初始化：用于设定节点状态，如dns、history命令记录、系统内核参数设定等。
功能模块：用于整个系统的功能实现，如Nginx、Mysql、Haproxy、keepalived的安装和脚本文件配置下发等。
业务模块：用于引用一些差异型功能，如hapzory或keeplaived的配置文件下发，每个节点的配置参数是不一样的，我们称之为业务模块。
之所以将功能模块和业务模块分开来做这样的好处在于：
如haproxy的安装以及负载均衡配置的实现之所以分开来做，这样的好处在于随着节点数量不断的增加，差异性不断的扩大。我们安装都引用相同的安装脚本，但是每个节点的参数配置是不相同的，因此我们在业务模块上进行每个节点不同参数的实现。
实验环境：
| IP地址 | Saltstack角色 | 业务角色 | 主机名 | 系统环境 |
| 192.168.39.135 | master | Saltstack-server | centos | CentOS release 6.7 (Final) |
| 192.168.39.200 | minion | Haproxy、keealived | centos-test1 | |
| 192.168.39.201 | centos-test2 | |||
| 192.168.39.202 | Nginx+PHP、Mysql | centos-test3 | ||
| 192.168.39.203 | Nginx+PHP、Mysql 、Memcached | centos-test4 |
Saltstack的安装、配置、授权等可参考：http://blog.51cto.com/bovin/1984115
二、Salt-Minion端环境配置
一、系统初始化
我们将系统的每个节点都进行一定的系统初始化设定，如dns、history命令记录、系统内核参数设定等。首先，进入salt的base环境，我们所有的系统设定都在此环境下进行设定。
[root@centos files]# cd /srv/salt/base/ 创建init目录，用于系统的整个初始化相关设定。
[root@centos base]# mkdir init 配置各个节点dns解析：
[root@centos init]# vim dns.sls /etc/resolv.conf:
file.managed:
- source: salt://init/files/resolv.conf
- user: root
- group: root
- mode: 644
- template: jinja
- defaults:
DNS_SERVER: 192.168.39.23 files下resolv.conf文件内容为：
[root@centos init]# cat files/resolv.conf
# Generated by NetworkManager
nameserver {{ DNS_SERVER }} 使各个节点history命令都记录时间：
[root@centos init]# vim history.sls /etc/profile:
file.append:
- text:
- export HISTTIMEFORMAT="%F %T `whoami`" 注：file模块通过append追加方式写入环境变量中
审计sls文件，将每个用户的命令都记录到/var/log/message文件中：
[root@centos init]# vim audit.sls /etc/bashrc:
file.append:
- text:
- export PROMPT_COMMAND='{ msg=$(history 1 | { read x y; echo $y; }); logger "[euid=$(whoami)]":$(who am i):[`pwd`]"$msg";}' 对节点的系统内核参数设定：
[root@centos init]# vim sysctl.sls vm.swappiness:
sysctl.present:
- value: 0
net.ipv4.ip_local_port_range:
sysctl.present:
- value: 10000 65000
fs.file-max:
sysctl.present:
- value: 100000 引导以上各个功能模块：
[root@centos init]# vim env_init.sls include:
- init.dns
- init.history
- init.audit
- init.sysctl 注：通过include进行模块引用
编写top file文件：
[root@centos base]# vim /srv/salt/base/top.sls base:
'*':
- init.env_init 注：base环境下，init目录查找env_init文件
目录文件结构，如下：
在执行时我们可以通过指定参数，模拟执行：
[root@centos base]# salt '*' state.highstate test=True 注：test=True模拟执行方式
模拟执行完没有报错，我们可以放心去设定节点初始化环境了：
[root@centos base]# salt '*' state.highstate 三、前端高可用
根据整个系统架构图，我们可以分为两大部分来完成。前端高可用和后端上线服务，前端高可用主要包括haproxy和keepalived安装及配置。后端线上服务包括nginx、php、memcache、mysql的安装及配置。以下是haproxy和keepalived安装和配置。
一、功能模块之haproxy安装
功能模块分为：前端调度Haproxy，后端Nginx+PHP，数据库Mysql以及会话存储Memcached。以下是saltstack实现功能模块Haproxy的实例安装：
创建Haproxy模块的文件目录：
[root@centos ~]# mkdir /srv/salt/prod/pkg/ 注：pkg目录用于存放软件安装包
[root@centos ~]# mkdir /srv/salt/prod/haproxy
[root@centos ~]# mkdir /srv/salt/prod/haproxy/files 注：haproxy目录用于存放haroxy的安装脚本和文件
[root@centos ~]# cd /srv/salt/prod/pkg/ [root@centos pkg]# vim pkg-init.sls
pkg-init:
pkg.installed:
- names:
- gcc
- gcc-c++
- glibc
- make
- autoconf
- openssl
- openssl-devel 注：pkg-init.sls用解决源码安装所需要的相关依赖
[root@centos ~]# cd /srv/salt/prod/haproxy [root@centos haproxy]# vim install.sls
include: #include haproxy源码包
- pkg.pkg-init
haproxy-install: #安装haproxy 包括两个步骤：管理文件、执行cmd.run
file.managed:
- name: /usr/local/src/haproxy-1.6.2.tar.gz
- source: salt://haproxy/files/haproxy-1.6.2.tar.gz
- user: root
- group: root
- mode: 755
cmd.run:
- name: cd /usr/local/src/ && tar -zxf haproxy-1.6.2.tar.gz && cd haproxy-1.6.2 && make TARGET=linux26 PREFIX=/usr/local/haproxy && make install PREFIX=/usr/local/haproxy
- unless: test -d /usr/local/haproxy #判断haproxy目录是否存在，如果存在不在继续安装
- require: #执行完cmd.run后，如果执行成功，则继续。否则，不执行以下。
- pkg: pkg-init
- file: haproxy-install
haproxy-init: #定义haproxy-init,包括：拷贝haproxy启动脚本到相关路径下、添加系统服务
file.managed:
- name: /etc/init.d/haproxy
- source: salt://haproxy/files/haproxy.init
- user: root
- group: root
- mode: 755
- require:
- cmd: haproxy-install
cmd.run:
- name: chkconfig --add haproxy
- unless: chkconfig --list | grep haproxy #如果有chkconfg .. 命令 不在执行name
- require:
- file: haproxy-init
net.ipv4.ip_nonlocal_bind: #监听本地ip
sysctl.present:
- value: 1
haproxy-config-dir: #创建haproxy的目录
file.directory:
- name: /etc/haproxy
- user: root
- group: root
- mode: 755 注：salt文件相关参数介绍：
功能名称：requisites
功 能：处理状态间关系
常用方法：
require #依赖某个状态
require_in #被某个状态依赖
watch #关注某个状态
watch_in #被某个状态关注
状态模块：状态间关系
功 能：条件判断，主要用于cmd状态模块
常用方法：
-onlyif：检查的命令，仅当“onlyif”选项指向的命令返回true时才执行name定义的命令。
-unless；用于检查的命令，仅当“unless”选项指向的命令返回false时才执行name指向的命令。 目录结构，如下：
执行安装haproxy：
[root@centos haproxy]# salt 'centos-test[1-2]' state.sls haproxy.install env=prod 注：env=prod 指定prod目录下执行，如果不加此参数会默认从base环境下执行sls文件
可以看到执行haproxy安装成功了。
二、业务引用之Haproxy负载均衡的实现
Haproxy的安装我们选择源码包进行安装，我们通过文件管理模块进行haproxy的文件配置管理，需要将两个节点配置为负载均衡模式。
创建业务引用相关目录：
业务引用我们都是在cluster目录下进行。
[root@centos ~]# mkdir /srv/salt/prod/cluster #用于存放集群相关文件
[root@centos ~]# mkdir /srv/salt/prod/cluster/files
[root@centos prod]# cd /srv/salt/prod/cluster/files/ #切换到此目录下创建salt文件 [root@centos files]# vim haproxy-outside.cfg #外网负载均衡配置文件
global
maxconn 100000
chroot /usr/local/haproxy
uid 99
gid 99
daemon
nbproc 1
pidfile /usr/local/haproxy/logs/haproxy.pid
log 127.0.0.1 local3 info
#默认参数设置
defaults
option http-keep-alive
maxconn 100000
mode http
timeout connect 5000ms
timeout client 50000ms
timeout server 50000ms
#开启Haproxy Status状态监控，增加验证
listen stats
mode http
bind 0.0.0.0:8888
stats enable
stats uri /haproxy-status
stats auth haproxy:saltstack
#前端设置
frontend frontend_www_example_com
#bind 10.0.0.11:80
bind 192.168.39.100:80
mode http
option httplog
log global
default_backend backend_www_example_com
#后端设置
backend backend_www_example_com
option forwardfor header X-REAL-IP
option httpchk HEAD / HTTP/1.0
#balance source如果想要轮训则改为roundrobin
balance source
server web-node1 192.168.39.202:8080 check inter 2000 rise 30 fall 15
server web-node2 192.168.39.203:8080 check inter 2000 rise 30 fall 15 编写haproxy的salt文件：
salt文件主要涉及到haproxy的安装引用、对配置文件的下发、haproxy的服务启动等功能。
[root@centos cluster]# vim haproxy-outside.sls
include: #include haproxy的安装文件
- haproxy.install
haproxy-service:
file.managed: #将source执行的haproxy配置文件，存放到name指定路径下
- name: /etc/haproxy/haproxy.cfg
- source: salt://cluster/files/haproxy-outside.cfg
- user: root
- group: root
- mode: 644
service.running: #启动haproxy服务
- name: haproxy
- enable: True
- reload: True #允许reload服务
- require:
- cmd: haproxy-init #引用haproxy目录下install文件中的haproxy-init标签
- watch: #通过watch状态监控，如果配置文件发生改变 就reload
- file: haproxy-service #haproxy-servcie标签下的file模块 注：此文件依赖于haproxy目录下的install.sls文件。
现在，可以编写top file文件，让其两个haproxy节点能够正常运行服务：
[root@centos cluster]# cd /srv/salt/base/ [root@centos base]# vim top.sls
base:
'*':
- init.env_init
prod:
'centos-test1':
- cluster.haproxy-outside
'centos-test2':
- cluster.haproxy-outside 编写完top file文件可以，执行高级模式来执行salt文件：
[root@centos base]# salt '*' state.highstate 可以看到已经执行成功，成功21项状态。
现在，我们可以通过浏览器访问haproxy管理界面：
在这里由于/var/www/html没有页面信息，健康检查会显示异常，所以需要在两个节点上创建html文件信息。
[root@centos-test1:/root]
# echo ‘centos-test1’ > /var/www/html/index.html
[root@centos-test2:/root]
# echo ‘centos-test2’ > /var/www/html/index.html 三、功能模块之keepalived的安装
在keepalived安装之前，我们首先需要准备keepalived的安装包、启动脚本以及配置文件等。我们需要将所有的这些东西都放到keepalived/files目录下。
创建keepalived的相关目录：
[root@centos etc]# mkdir /srv/salt/prod/keepalived
[root@centos etc]# mkdir /srv/salt/prod/keepalived/files 拷贝keepalived的相关文件：
[root@centos etc]# cp init.d/keepalived.init /srv/salt/prod/keepalived/files/
[root@centos etc]# cp keepalived/keepalived.conf /srv/salt/prod/keepalived/files/ keepalived.init-keepalived的启动脚本
#!/bin/sh
#
# Startup script for the Keepalived daemon
#
# processname: keepalived
# pidfile: /var/run/keepalived.pid
# config: /etc/keepalived/keepalived.conf
# chkconfig: - 21 79
# description: Start and stop Keepalived
# Source function library
. /etc/rc.d/init.d/functions
# Source configuration file (we set KEEPALIVED_OPTIONS there)
. /etc/sysconfig/keepalived
RETVAL=0
prog="keepalived"
start() {
echo -n $"Starting $prog: "
daemon /usr/local/keepalived/sbin/keepalived ${KEEPALIVED_OPTIONS}
RETVAL=$?
echo
[ $RETVAL -eq 0 ] && touch /var/lock/subsys/$prog
}
stop() {
echo -n $"Stopping $prog: "
killproc keepalived
RETVAL=$?
echo
[ $RETVAL -eq 0 ] && rm -f /var/lock/subsys/$prog
}
reload() {
echo -n $"Reloading $prog: "
killproc keepalived -1
RETVAL=$?
echo
}
# See how we were called.
case "$1" in
start)
start
;;
stop)
stop
;;
reload)
reload
;;
restart)
stop
start
;;
condrestart)
if [ -f /var/lock/subsys/$prog ]; then
stop
start
fi
;;
status)
status keepalived
RETVAL=$?
;;
*)
echo "Usage: $0 {start|stop|reload|restart|condrestart|status}"
RETVAL=1
esac
exit $RETVAL keepalived.conf-keepalived的配置文件:
! Configuration File for keepalived
global_defs {
notification_email {
[email protected]
[email protected]
[email protected]
}
notification_email_from [email protected]
smtp_server 192.168.200.1
smtp_connect_timeout 30
router_id LVS_DEVEL
}
vrrp_instance VI_1 {
state MASTER
interface eth0
virtual_router_id 51
priority 100
advert_int 1
authentication {
auth_type PASS
auth_pass 1111
}
virtual_ipaddress {
192.168.200.16
192.168.200.17
192.168.200.18
}
}
virtual_server 192.168.200.100 443 {
delay_loop 6
lb_algo rr
lb_kind NAT
nat_mask 255.255.255.0
persistence_timeout 50
protocol TCP
real_server 192.168.201.100 443 {
weight 1
SSL_GET {
url {
path /
digest ff20ad2481f97b1754ef3e12ecd3a9cc
}
url {
path /mrtg/
digest 9b3a0c85a887a256d6939da88aabd8cd
}
connect_timeout 3
nb_get_retry 3
delay_before_retry 3
}
}
}
virtual_server 10.10.10.2 1358 {
delay_loop 6
lb_algo rr
lb_kind NAT
persistence_timeout 50
protocol TCP
sorry_server 192.168.200.200 1358
real_server 192.168.200.2 1358 {
weight 1
HTTP_GET {
url {
path /testurl/test.jsp
digest 640205b7b0fc66c1ea91c463fac6334d
}
url {
path /testurl2/test.jsp
digest 640205b7b0fc66c1ea91c463fac6334d
}
url {
path /testurl3/test.jsp
digest 640205b7b0fc66c1ea91c463fac6334d
}
connect_timeout 3
nb_get_retry 3
delay_before_retry 3
}
}
real_server 192.168.200.3 1358 {
weight 1
HTTP_GET {
url {
path /testurl/test.jsp
digest 640205b7b0fc66c1ea91c463fac6334c
}
url {
path /testurl2/test.jsp
digest 640205b7b0fc66c1ea91c463fac6334c
}
connect_timeout 3
nb_get_retry 3
delay_before_retry 3
}
}
}
virtual_server 10.10.10.3 1358 {
delay_loop 3
lb_algo rr
lb_kind NAT
nat_mask 255.255.255.0
persistence_timeout 50
protocol TCP
real_server 192.168.200.4 1358 {
weight 1
HTTP_GET {
url {
path /testurl/test.jsp
digest 640205b7b0fc66c1ea91c463fac6334d
}
url {
path /testurl2/test.jsp
digest 640205b7b0fc66c1ea91c463fac6334d
}
url {
path /testurl3/test.jsp
digest 640205b7b0fc66c1ea91c463fac6334d
}
connect_timeout 3
nb_get_retry 3
delay_before_retry 3
}
}
real_server 192.168.200.5 1358 {
weight 1
HTTP_GET {
url {
path /testurl/test.jsp
digest 640205b7b0fc66c1ea91c463fac6334d
}
url {
path /testurl2/test.jsp
digest 640205b7b0fc66c1ea91c463fac6334d
}
url {
path /testurl3/test.jsp
digest 640205b7b0fc66c1ea91c463fac6334d
}
connect_timeout 3
nb_get_retry 3
delay_before_retry 3
}
}
} [root@centos keepalived]# cd /usr/local/keepalived/etc/sysconfig/
[root@centos sysconfig]# ls
keepalived
[root@centos sysconfig]# cp keepalived /srv/salt/prod/keepalived/files/keepalived.sysconfig 现在，我们查看files目录都有哪些东西：
[root@centos keepalived]# ls files/
keepalived-1.2.19.tar.gz keepalived.init
keepalived.conf keepalived.sysconfig 准备好keepalived的相关文件之后，现在我们可以编写salt文件:
salt文件主要涉及到pkg-init脚本的引用，此脚本主要是解决安装前的依赖；keepalived-install标签用于安装keepalived；keepalived-init标签用于下发启动脚本以及将服务加入到系统启动中；/etc/sysconfg/keepalived标签用于下发配置文件到各个节点上。
[root@centos keepalived]# vim install.sls
include: #引用pkg目录下pkg-init脚本
- pkg.pkg-init
keepalived-install:
file.managed: #file模块来拷贝keepalived的安装包
- name: /usr/local/src/keepalived-1.2.19.tar.gz
- source: salt://keepalived/files/keepalived-1.2.19.tar.gz
- usr: root
- group: root
- mode: 755
cmd.run: #cmd模块的- name函数来执行具体安装命令
- name: cd /usr/local/src && tar -zxf keepalived-1.2.19.tar.gz && cd keepalived-1.2.19 && ./configure --prefix=/usr/local/keepalived --disable-fwmark && make && make install
- unless: test -d /usr/local/keepalived
- require: #require状态依赖关系
- pkg: pkg-init
- file: keepalived-install
keepalived-init:
file.managed:
- name: /etc/init.d/keepalived
- source: salt://keepalived/files/keepalived.init
- usr: root
- group: root
- mode: 755
cmd.run:
- name: chkconfig --add keepalived
- unless: chkconfig --list | grep keepalived
- require:
- file: keepalived-init
/etc/sysconfig/keepalived:
file.managed:
- source: salt://keepalived/files/keepalived.sysconfig
- user: root
- group: root
- mode: 644
/etc/keepalived:
file.directory:
- user: root
- group: root
- mode: 755 目录文件结果为：
现在，我们开始执行salt文件：
[root@centos keepalived]# salt 'centos-test[1-2]' state.sls keepalived.install env=prod 四、业务引用之keepalived
同haproxy业务引用一样，我们同样在cluster目录下进行。
进入cluster目录：
[root@centos keepalived]# cd ../cluster/
[root@centos cluster]# pwd
/srv/salt/prod/cluster 编写salt文件：
salt文件涉及到keepalived的安装的引用；每个节点的具体参数如何这里主要通过编写jiaja模版来实现每个节点参数的差异性。通过grains的fqdn来判断不同的主机名，实现不同主机不同参数。
[root@centos cluster]# vim haproxy-outside-keepalived.sls
include:
- keepalived.install
keepalived-service:
file.managed:
- name: /etc/keepalived/keepalived.conf
- source: salt://cluster/files/haproxy-outside-keepalived.conf
- user: root
- group: root
- mode: 644
- template: jinja
{% if grains['fqdn'] == 'centos-test1' %}
- ROUTEID: haproxy_ha
- STATEID: MASTER
- PRIORITYID: 150
{% elif grains['fqdn'] == 'centos-test2' %}
- ROUTEID: haproxy_ha
- STATEID: BACKUP
- PRIORITYID: 100
{% endif %}
service.running:
- name: keepalived
- enable: True
- watch:
- file: keepalived-service keepalived差异性配置文件：
在keepalived安装脚本中，我们为了能够启动keepalived服务，我们在两个节点上都下发相同的keepalived配置文件，这次为了实现每个节点上的keepalived去配置不同的参数，需要下发一份差异性配置文件。
[root@centos cluster]# vim /srv/salt/prod/cluster/files/haproxy-outside-keepalived.conf
! Configuration File for keepalived
global_defs {
notification_email {
[email protected]
}
notification_email_from [email protected]
smtp_server 127.0.0.1
smtp_connect_timeout 30
router_id {{ROUTEID}} # jinja模板变量
}
vrrp_instance haproxy_ha {
state {{STATEID}} # jinja模板变量
interface eth0
virtual_router_id 36
priority {{PRIORITYID}} # jinja模板变量
advert_int 1
authentication {
auth_type PASS
auth_pass 1111
}
virtual_ipaddress {
192.168.39.100
}
} 编写top文件：
将业务引用模块keepalived的haprox-outside-keepalived导入。
[root@centos base]# pwd
/srv/salt/base
[root@centos base]# ls
init tmp top.sls [root@centos base]# vim top.sls
base:
'*':
- init.env_init
prod:
'centos-test1':
- cluster.haproxy-outside
- cluster.haproxy-outside-keepalived
'centos-test2':
- cluster.haproxy-outside
- cluster.haproxy-outside-keepalived 通过salt高级模式执行：
[root@centos base]# salt '*' state.highstate 四、后端线上服务
完成前端高可用之后，我们就可以去完成线上服务了。线上服务包括nginx、php、memache、mysql等的安装及配置。
一、功能模块之nginx安装
创建nginx安装目录：
[root@centos ~]# mkdir /srv/salt/prod/nginx/ [root@centos ~]# mkdir /srv/salt/prod/nginx/files 将nginx安装包和脚本拷贝到files目录下
[root@centos nginx]# ls files/ 解决安装nginx依赖关系：
[root@centos prod]# cat pkg/pkg-nginx.sls
pkg-nginx:
pkg.installed:
- names:
- openssl-devel
- pcre-devel
- zlib-devel 编写nginx安装sls文件：
[root@centos nginx]# pwd
/srv/salt/prod/nginx [root@centos nginx]# vim install.sls
include:
- pkg.pkg-nginx
/usr/local/src:
file.directory:
- user: root
- group: root
- mode: 755
nginx-install:
file.managed:
- name: /usr/local/src/nginx-1.13.8.tar.gz
- source: salt://nginx/files/nginx-1.13.8.tar.gz
- user: root
- group: root
- mode: 755
cmd.run:
- name: cd /usr/local/src/ && tar -zxf nginx-1.13.8.tar.gz && cd nginx-1.13.8 && ./configure --prefix=/usr/local/nginx && make && make install
- unless: test -d /usr/local/nginx
- require:
- pkg: pkg-nginx
- file: nginx-install
nginx-init:
file.managed:
- name: /etc/init.d/nginx
- source: salt://nginx/files/nginx.init
- user: root
- group: root
- mode: 755
cmd.run:
- name: chkconfig --add nginx
- unless: chkconfig --list | grep nginx
- require:
- file: nginx-init
/etc/nginx:
file.directory:
- user: root
- group: root
- mode: 755 目录结果为：
执行安装：
[root@centos prod]# salt 'centos-test[3-4]' state.sls nginx.install env=prod 二、业务模块之nginx配置管理
创建app目录用户nginx及php配置文件管理：
[root@centos ~]# mkdir /srv/salt/prod/app/
[root@centos ~]# mkdir /srv/salt/prod/app/files/
[root@centos ~]# mkdir /srv/salt/prod/app/files/nginx/ #用于存放nginx配置文件
[root@centos ~]# mkdir /srv/salt/prod/app/files/php/ #用于存放php配置文件 将需要的文件拷贝到files/nginx目录下：
i
编写sls文件进行配置文件管理下发:
[root@centos app]# ls
files nginx.sls php.sls [root@centos app]# vim nginx.sls
include:
- nginx.install
{% for s in ["fastcgi_params","mime.types","nginx.conf"] %}
nginx-{{s}}:
file.managed:
- name: /etc/nginx/{{s}}
- source: salt://app/files/nginx/{{s}}
- user: root
- group: root
- template: jinja
- mode: 644
service.running:
- name: nginx
- enable: True
- watch:
- file: nginx-nginx.conf
{% endfor %} 注：引用jinja模版，将fastcgi_params、mime.types、nginx.conf三个相关文件下发到节点的同一目录下。
执行文件：
[root@centos app]# salt 'centos-test[3-4]' state.sls app.nginx env=prod 三、功能模块之php安装 创建php安装目录：
[root@centos ~]# mkdir /srv/salt/prod/php
[root@centos ~]# mkdir /srv/salt/prod/php/files/ 将安装包拷贝到files目录下：
[root@centos prod]# ls php/files/
php-5.4.40.tar.bz2 解决php安装的依赖关系：
[root@centos php]# cat ../pkg/pkg-php.sls
pkg-php:
pkg.installed:
- names:
- libxml2-devel 编写sls文件：
[root@centos php]# vim install.sls
include:
- pkg.pkg-php
php-install:
file.managed:
- name: /usr/local/src/php-5.4.40.tar.bz2
- source: salt://php/files/php-5.4.40.tar.bz2
- user: root
- group: root
- mode: 755
cmd.run:
- name: cd /usr/local/src/ && tar xf php-5.4.40.tar.bz2 && cd php-5.4.40 && ./configure --prefix=/usr/local/php --enable-fpm --with-openssl && make && make install
- unless: test -d /usr/local/php
- require:
- pkg: pkg-php
- file: php-install [root@centos prod]# salt 'centos-test[3-4]' state.sls php.install env=prod 四、业务模块之php配置管理
app目录结构：
php文件下发脚本内容为：
[root@centos app]# cat php.sls
include:
- php.install
php-ini:
file.managed:
- name: /etc/php.ini
- source: salt://app/files/php/php.ini
- user: root
- group: root
- mode: 644
php-fpm-conf:
file.managed:
- name: /usr/local/php/etc/php-fpm.conf
- source: salt://app/files/php/php-fpm.conf
- user: root
- group: root
- mode: 644
php-init:
file.managed:
- name: /etc/init.d/php-fpm
- source: salt://app/files/php/php-fpm.init
- user: root
- group: root
- mode: 755
cmd.run:
- name: chkconfig --add php-fpm
- unless: chkconfig --list | grep php-fpm
- require:
- file: php-init
service.running:
- name: php-fpm
- enable: True
- watch:
- file: php-ini 执行配置下发：
[root@centos app]# salt 'centos-test[3-4]' state.sls app.php env=prod 现在，将nginx.sls和php,sls写入top file文件：
[root@centos app]# cd /srv/salt/base/
[root@centos base]# ls
init _modules tmp top.sls [root@centos base]# vim top.sls
base:
'*':
- init.env_init
prod:
'centos-test1':
- cluster.haproxy-outside
- cluster.haproxy-outside-keepalived
'centos-test2':
- cluster.haproxy-outside
- cluster.haproxy-outside-keepalived
'centos-test3':
- app.nginx
- app.php
'centos-test4':
- app.nginx
- app.php 五、Memcach安装
memcach通过yum来进行安装，创建memcache目录：
[root@centos base]# cd /srv/salt/prod/
[root@centos prod]# ls
app cluster haproxy keepalived nginx php pkg
[root@centos prod]# mkdir memcache
[root@centos prod]# ls
app cluster haproxy keepalived memcache nginx php pkg
[root@centos prod]# cd memcache/ [root@centos memcache]# vim install.sls
#memcache pkg install
install-memcached:
pkg.installed:
- names:
- memcached
- php-pecl-memcache
service.running:
- name: memcached
- enable: True
#restart-phpfpm:
restart-phpfpm:
cmd.run:
- names:
- /etc/init.d/php-fpm restart [root@centos memcache]# salt 'centos-test4' state.sls memcache.install env=prod 注：192.168.39.203作为memcache服务器
编写top file文件，将memcache安装脚本导入：
[root@centos ~]# cd /srv/salt/base/ [root@centos base]# vim top.sls
base:
'*':
- init.env_init
prod:
'centos-test1':
- cluster.haproxy-outside
- cluster.haproxy-outside-keepalived
'centos-test2':
- cluster.haproxy-outside
- cluster.haproxy-outside-keepalived
'centos-test3':
- app.nginx
- app.php
'centos-test4':
- app.nginx
- app.php
- memcache.install 高级模式下执行sls：
[root@centos ~]# salt '*' state.highstate