saltstack 管理命令

ゞ浴缸里的玫瑰 2022-09-30 12:55 168阅读 0赞

salt相关的管理命令：

salt-run manage.up              \# 查看存活的minion

salt-run manage.down           \# 查看死掉的minion

salt-run manage.down removekeys=True    \# 查看down掉的minion，并将其删除

salt-run manage.status            \# 查看minion的相关状态

salt-run manage.versions          \# 查看salt的所有master和minion的版本信息

salt-run jobs.active                  \# 查看哪些系统任务还在处理中

salt-run jobs.list\_jobs                \# 显示所有的已完成或部分完成的任务信息

salt '\*' saltutil.running              \# 查看运行的jobs ID

salt \\\* saltutil.kill\_job 20151209034239907625       \# kill掉进程ID

salt -d                                    \# 查看帮助文档

salt -d|grep service               \# 查看service相关模块命令

salt '\*' sys.doc                       \# 查看帮助文档

salt-key  -L                              \# 查询所有接收到的证书

salt-key  -a <证书名>              \# 接收单个证书

salt-key  -A                             \# 接受所有证书

salt-key  -d <证书名>              \# 删除单个证书

salt-key  -D                              \# 删除所有证书

salt '\*' service.get\_all               \# 获取主机所有服务

salt '\*' service.reload sshd     \# 重载sshd服务

salt '\*' pkg.list\_pkgs                 \# 显示软件包版本列表

salt '\*' pkg.version python       \# 显示软件包版本信息

salt '\*' pkg.install httpd         \# 安装软件包

salt 'node1.com' service.status mysql                   \# 查看mysql服务状态

salt 'node1.com' service.start mysql                      \# 启动mysql服务

salt 'node1.com' cmd.run 'service mysql status'    \# 与上面一样查看服务

salt '\*' sys.list\_modules       \# 模块列表

salt-cp '\*'  /etc/hosts   /etc/hosts                              \# 把master上的hosts文件分发到所有主机

salt '\*' cp.get\_file salt://ceshi/b /tmp/test                 \# 把salt-master端相应的文件，分发文件到minion端

salt '\*' cp.get\_dir salt://zabbix /tmp                           \# 把salt-master端相应的目录，分发文件到minion端

salt '\*' file.copy /tmp/zabbix.sls /tmp/sls                   \# 把salt-master端对应文件拷贝到minion端相应目录下

salt '\*' cmd.run 'uptime'                                             \# 远程命令执行测试

远程执行脚本：

'cmd.script:'

salt '\*' cmd.script salt://scripts/runme.sh

salt '\*' cmd.script salt://scripts/runme.sh 'arg1 arg2 "arg 3"'

salt '\*' cmd.script salt://scripts/windows\_task.ps1 args=' -Input c:\\tmp\\infile.txt' shell='powershell'

salt '\*' cmd.script salt://scripts/runme.sh stdin='one\\ntwo\\nthree\\nfour\\nfive\\n'

'cmd.shell:'

This passes the cmd argument directly to the shell

salt '\*' cmd.shell "ls -l | awk '/foo/\{print \\$2\}'"

salt '\*' cmd.shell template=jinja "ls -l /tmp/\{ \{grains.id\}\} | awk '/foo/\{print \\$2\}'"

salt '\*' cmd.shell "Get-ChildItem C:\\ " shell='powershell'

salt '\*' cmd.shell "grep f" stdin='one\\ntwo\\nthree\\nfour\\nfive\\n'

salt '\*' cmd.shell cmd='sed -e s/=/:/g'

'cmd.shells:'

salt '\*' cmd.shells

'cmd.tty:'

salt '\*' cmd.tty tty0 'This is a test'

salt '\*' cmd.tty pts3 'This is a test'

'cmd.which:'

salt '\*' cmd.which cat

grains选项：

salt '\*' grains.ls                    \# 查看grains分类

salt '\*' grains.items                      \# 查看grains所有信息

salt '\*' grains.item osrelease                  \# 查看grains某个信息

说明：state模块是salt state的管理模块，可以通过state模块简单的对minion操作sls状态

salt 'node1.com' state.highstate            \# 更新指定minons的所有sls状态

salt 'node1.com' state.running              \# 查看当前运行的sls状态

相关例子：

\[root@master ~\]\# salt \\\* saltutil.running

node02.saltstack.com:

|\_

----------

arg:

-  egrep -v ^\#

fun:

cmd.run

jid:

20170221141733009548

pid:

5922

ret:

tgt:

tgt\_type:

glob

user:

root

|\_

----------

arg:

- egrep -v ^\#

fun:

cmd.run

jid:

20170221141748160358

pid:

5927

ret:

tgt:

tgt\_type:

glob

user:

root

node01.saltstack.com:

|\_

----------

arg:

-  egrep -v ^\#

fun:

cmd.run

jid:

20170221141733009548

pid:

6252

ret:

tgt:

tgt\_type:

glob

user:

root

|\_

----------

arg:

- egrep -v ^\#

fun:

cmd.run

jid:

20170221141748160358

pid:

6256

ret:

tgt:

tgt\_type:

glob

user:

root

\[root@master ~\]\# salt \\\* saltutil.kill\_job 20170221141748160358

node01.saltstack.com:

Signal 9 sent to job 20170221141748160358 at pid 6256

node02.saltstack.com:

Signal 9 sent to job 20170221141748160358 at pid 5927

\[root@master ~\]\# salt \\\* saltutil.kill\_job 20170221141733009548

node02.saltstack.com:

Signal 9 sent to job 20170221141733009548 at pid 5922

node01.saltstack.com:

Signal 9 sent to job 20170221141733009548 at pid 6252

\[root@master ~\]\# salt \\\* saltutil.running

node01.saltstack.com:

node02.saltstack.com:

\[root@master ~\]\# salt-run manage.versions

Master:

2015.5.10

Up to date:

----------

node01.saltstack.com:

2015.5.10

node02.saltstack.com:

2015.5.10

\[root@RS1 states\]\# salt-run manage.status

down:

up:

- minion.saltstack.com

- minion2.saltstack.com

\[root@RS1 ~\]\# salt-run manage.versions            \# 查看salt的所有master和minion的版本信息

Master:

2015.5.10

Up to date:

----------

minion.saltstack.com:

2015.5.10

minion2.saltstack.com:

2015.5.10

\[root@RS1 ~\]\# salt '\*' test.ping  -v          \# 使用-v参数，能够查看到job的jid

Executing job with jid 20170214142709337088

\-------------------------------------------

minion.saltstack.com:

True

minion2.saltstack.com:

True

说明：每执行一个任务，都会有一个对应的jid

\[root@RS1 ~\]\# salt '\*' saltutil.running             \# 查看minion当前正在运的jobs

minion2.saltstack.com:

|\_

----------

arg:

fun:

state.highstate

jid:

20170214143846076337

pid:

5488

ret:

tgt:

tgt\_type:

glob

user:

root

minion.saltstack.com:

|\_

----------

arg:

fun:

state.highstate

jid:

20170214143846076337

pid:

6384

ret:

tgt:

tgt\_type:

glob

user:

root

\[root@RS1 ~\]\# salt '\*' saltutil.kill\_job 20170214143846076337

取消正在执行的某个jid，例如：20170214143846076337

\[root@master ~\]\# salt-run jobs.list\_jobs

20170221155927733273:

----------

Arguments:

Function:

state.running

StartTime:

2017, Feb 21 15:59:27.733273

Target:

node01.saltstack.com

Target-type:

glob

User:

root

20170221160325920754:

----------

Arguments:

Function:

sys.doc

StartTime:

2017, Feb 21 16:03:25.920754

Target:

Target-type:

glob

User:

root

20170221161556599324:

----------

Arguments:

- cat

Function:

cmd.which

StartTime:

2017, Feb 21 16:15:56.599324

Target:

Target-type:

glob

User:

root

20170221161641114901:

----------

Arguments:

Function:

grains.ls

StartTime:

2017, Feb 21 16:16:41.114901

Target:

Target-type:

glob

User:

root

远程执行是saltstack核心功能之一，使用salt模块可以给选定的minion端发送执行某条命令的指示，并获得返回结果，比如

\[root@saltstack-node1 ~\]\# salt 'saltstack-node2.lichengbing.com' test.ping

saltstack-node2.lichengbing.com:

True

salt → 命令

saltstack-node2.lichengbing.com → 管理对象

test.ping  → 模块（这里的ping并不是指我们熟知的网络ping命令）

命令

salt是saltstack使用最多的一个管理minion命令，但是并不表示就这么一个命令,saltstack命令包括

/usr/bin/salt

/usr/bin/salt-cp

/usr/bin/salt-key

/usr/bin/salt-master

/usr/bin/salt-minion

/usr/bin/salt-run

/usr/bin/salt-unity

/usr/bin/salt-call

/usr/bin/salt-run

/usr/bin/salt-ssh

/usr/bin/salt-syndic

/usr/bin/salt-api

/usr/bin/salt-cloud

管理对象

管理对象是我们远程执行的操作主机，saltstack的主机选择支持很多方式，正则匹配、列表匹配、Granis匹配、组匹配、复合匹配、Pillar匹配、CIDR匹配等

1）正则匹配

\[root@saltstack-node1 ~\]\# salt -E 'salt\*' test.ping          \#salt\*是一个简单的正则表达式

saltstack-node2.lichengbing.com:

True

saltstack-node1.lichengbing.com:

True

\[root@saltstack-node1 ~\]\# salt -E 'saltstack-node\[1|2\]\*' test.ping

saltstack-node2.lichengbing.com:

True

saltstack-node1.lichengbing.com:

True

2）列表匹配

\[root@saltstack-node1 ~\]\# salt -L saltstack-node1.lichengbing.com,saltstack-node2.lichengbing.com test.ping                    \# L 主机用逗号分隔开

saltstack-node2.lichengbing.com:

True

saltstack-node1.lichengbing.com:

True

3）Grains匹配

\[root@saltstack-node1 ~\]\# salt -G  'os:CentOS' test.ping \#选择Grains os键值为CentOS的主机

saltstack-node2.lichengbing.com:

True

saltstack-node1.lichengbing.com:

True

\#Grains是minion启动时收集的一组系统相关的静态数据，后续会有讲解

\#Pillar类似Grains

4）组匹配

saltstack可以提前给minion定义组角色，然后以组名来批量匹配

修改master配置文件

\[root@saltstack-node1 ~\]\# vim /etc/salt/master

nodegroups:

web: 'L@saltstack-node1.lichengbing.com,saltstack-node2.lichengbing.com'

\[root@saltstack-node1 ~\]\# salt -N web test.ping

saltstack-node2.lichengbing.com:

True

saltstack-node1.lichengbing.com:

True

5）复合匹配

\[root@saltstack-node1 ~\]\# salt -C 'G@os:CentOS or L@saltstack-node2.lichengbing.com' test.ping

saltstack-node2.lichengbing.com:

True

saltstack-node1.lichengbing.com:

True

\#G@os:CentOS or L@saltstack-node2是使用的一个复合组合，支持 and or 关联多个条件

6）CIDR匹配

CIDR就是网络中的无类别域间路由，网段匹配

\[root@saltstack-node1 ~\]\# salt -S '172.16.2.0/24' test.ping

saltstack-node2.lichengbing.com:

True

saltstack-node1.lichengbing.com:

True

模块

模块是可以理解为saltstack已经为我们写好的一组可以操作minion主机的命令

saltstack自带的模块功能十分丰富和强大，当然我们也可以自定义一些相关模块（这里需要注意的是，saltstack自带的模块是Master端和Minion端同时存在的，如果在Master自定义模块需要先同步到Minion再执行才能得到返回结果，当然这个同步saltstack会帮我们完成）

自带模块

saltstack自带模块参考：https://www.unixhot.com/docs/saltstack/contents.html

查看所有module列表

\[root@saltstack-node1 ~\]\# **salt 'saltstack-node1\*' sys.list\_modules**

saltstack-node1.lichengbing.com:

\[root@saltstack-node1 ~\]\# salt 'saltstack-node1\*' sys.list\_modules

saltstack-node1.lichengbing.com:

- acl

- aliases

- alternatives

- apache

- archive

- artifactory

- at

- augeas

- beacons

- bigip

- blockdev

- bridge

- btrfs

- buildout

- cloud

- cmd

- composer

- config

- consul

···

这里我们讨论几个平时生产实践中最常用到的模块 State Modules

1）**sys.doc模块**

sys.doc类似于我们Linux系统中man命令，可以很方便的查看相关模块介绍和用法

\[root@saltstack-node1 ~\]\# salt 'saltstack-node1\*' sys.doc test.ping

test.ping:

Used to make sure the minion is up and responding. Not an ICMP ping.

Returns \`\`True\`\`.

CLI Example:

salt '\*' test.ping

2）**cmd模块**

查看指定模块的所有function

\[root@saltstack-node1 ~\]\# salt 'saltstack-node1\*' sys.list\_functions cmd

saltstack-node1.lichengbing.com:

- cmd.exec\_code

- cmd.exec\_code\_all

- cmd.has\_exec

- cmd.powershell

- cmd.retcode

- cmd.run

- cmd.run\_all

- cmd.run\_bg

- cmd.run\_chroot

- cmd.run\_stderr

- cmd.run\_stdout

- cmd.script

- cmd.script\_retcode

- cmd.shell

- cmd.shells

- cmd.tty

- cmd.which

- cmd.which\_bin

查看指定模块的使用方法

\[root@saltstack-node1 ~\]\# salt 'saltstack-node1\*' sys.doc cmd.run

CLI Example:

salt '\*' cmd.run "ls -l | awk '/foo/\{print \\\\$2\}'"

The template arg can be set to 'jinja' or another supported template

engine to render the command arguments before execution.

For example:

salt '\*' cmd.run template=jinja "ls -l /tmp/\{ \{grains.id\}\} | awk '/foo/\{print \\\\$2\}'"

Specify an alternate shell with the shell parameter:

salt '\*' cmd.run "Get-ChildItem C:\\\\ " shell='powershell'

A string of standard input can be specified for the command to be run using

the \`\`stdin\`\` parameter. This can be useful in cases where sensitive

information must be read from standard input.:

salt '\*' cmd.run "grep f" stdin='one\\\\ntwo\\\\nthree\\\\nfour\\\\nfive\\\\n'

If an equal sign (\`\`=\`\`) appears in an argument to a Salt command it is

interpreted as a keyword argument in the format \`\`key=val\`\`. That

processing can be bypassed in order to pass an equal sign through to the

remote shell command by manually specifying the kwarg:

salt '\*' cmd.run cmd='sed -e s/=/:/g'

比如查看磁盘使用率

\[root@saltstack-node1 ~\]\# salt 'saltstack-node1\*' cmd.run "df -h|grep sda3"

saltstack-node1.lichengbing.com:

/dev/sda3       9.0G  2.7G  6.4G  29% /

3）**cp模块**

**   salt '\*' sys.list\_functions cp**

- cp.cache\_dir

- cp.cache\_file

- cp.cache\_files

- cp.cache\_local\_file

- cp.cache\_master

- cp.get\_dir

- cp.get\_file

- cp.get\_file\_str

- cp.get\_template

- cp.get\_url

- cp.hash\_file

- cp.is\_cached

- cp.list\_master

- cp.list\_master\_dirs

- cp.list\_master\_symlinks

- cp.list\_minion

- cp.list\_states

- cp.push

- cp.push\_dir

- cp.recv

将指定minion下的指定文件拷贝到salt cache目录（/var/cache/salt/minion/localfiles），相当于备份

\[root@saltstack-node1 ~\]\# salt 'saltstack-node1\*' cp.cache\_local\_file  /etc/hosts

saltstack-node1.lichengbing.com:

/var/cache/salt/minion/localfiles/etc/hosts

将master file\_roots下的目录拷贝到minion

\[root@saltstack-node1 salt\]\# salt 'saltstack-node1\*' cp.get\_dir salt://base/ minion/dest

\#相当于命令

\[root@saltstack-node1 minion\]\# salt-cp '\*' /etc/hosts /tmp/123

下载文件到指定目录

\[root@saltstack-node1 ~\]\# salt 'saltstack-node2\*' cp.get\_url http://mirrors.aliyun.com/epel/epel-release-latest-7.noarch.rpm /tmp/1

saltstack-node2.lichengbing.com:

/tmp/1

4）**status模块**

\[root@saltstack-node1 salt\]\# salt 'saltstack-node2\*' sys.list\_functions status

saltstack-node2.lichengbing.com:

- status.all\_status

- status.cpuinfo

- status.cpustats

- status.custom

- status.diskstats

- status.diskusage

- status.loadavg

- status.master

- status.meminfo

- status.netdev

- status.netstats

- status.nproc

- status.pid

- status.ping\_master

- status.procs

- status.time

- status.uptime

- status.version

- status.vmstats

- status.w

查看系统负载

\[root@saltstack-node1 salt\]\# salt 'saltstack-node2\*' status.loadavg

saltstack-node2.lichengbing.com:

----------

1-min:

0.08

15-min:

0.24

5-min:

0.22

5）**cron模块**

**salt '\*' sys.list\_functions cron**

- cron.list\_tab

- cron.ls

- cron.raw\_cron

- cron.rm

- cron.rm\_env

- cron.rm\_job

- cron.set\_env

- cron.set\_job

- cron.set\_special

- cron.write\_cron\_file

- cron.write\_cron\_file\_verbose

实现minion主机的定时任务操作

查看主机定时任务

\[root@saltstack-node1 ~\]\# salt '\*' cron.raw\_cron root

saltstack-node2.lichengbing.com:

\*/5 \* \* \* \* /usr/sbin/ntpdate time.nist.gov >dev/null 2>&1

saltstack-node1.lichengbing.com:

\*/5 \* \* \* \* /usr/sbin/ntpdate time.nist.gov >dev/null 2>&1

为指定的minion添加定时任务

\[root@saltstack-node1 ~\]\# salt '\*' cron.set\_job root '\*' '\*' '\*' '\*' 1 /usr/local/weekly

删除指定任务

\[root@saltstack-node1 ~\]\# salt '\*' cron.rm\_job root '\*' '\*' '\*' '\*' 1 /usr/local/weekly

6）**file模块**

**salt '\*' sys.list\_functions file**

- file.access

- file.append

- file.basename

- file.blockreplace

- file.check\_file\_meta

- file.check\_hash

- file.check\_managed

- file.check\_managed\_changes

- file.check\_perms

- file.chgrp

- file.chown

- file.comment

- file.comment\_line

- file.contains

- file.contains\_glob

- file.contains\_regex

- file.contains\_regex\_multiline

- file.copy

- file.delete\_backup

- file.directory\_exists

- file.dirname

- file.diskusage

- file.extract\_hash

- file.file\_exists

- file.find

- file.get\_devmm

- file.get\_diff

- file.get\_gid

- file.get\_group

- file.get\_hash

- file.get\_managed

- file.get\_mode

- file.get\_selinux\_context

- file.get\_sum

- file.get\_uid

- file.get\_user

- file.gid\_to\_group

- file.grep

- file.group\_to\_gid

- file.is\_blkdev

- file.is\_chrdev

- file.is\_fifo

- file.is\_link

- file.join

- file.lchown

- file.link

- file.list\_backup

- file.list\_backups

- file.list\_backups\_dir

- file.lstat

- file.makedirs

- file.makedirs\_perms

- file.manage\_file

- file.mkdir

- file.mknod

- file.mknod\_blkdev

- file.mknod\_chrdev

- file.mknod\_fifo

- file.move

- file.normpath

- file.open\_files

- file.pardir

- file.patch

- file.path\_exists\_glob

- file.prepend

- file.psed

- file.readdir

- file.readlink

- file.remove

- file.remove\_backup

- file.rename

- file.replace

- file.restore\_backup

- file.restorecon

- file.rmdir

- file.search

- file.sed

- file.sed\_contains

- file.seek\_read

- file.seek\_write

- file.set\_mode

- file.set\_selinux\_context

- file.source\_list

- file.stats

- file.statvfs

- file.symlink

- file.touch

- file.truncate

- file.uid\_to\_user

- file.uncomment

- file.user\_to\_uid

- file.write

被控主机文件常见操作，包括文件读写、权限、查找、校验等

修改所以minion 的/etc/passwd 文件的属组、用户权限，等价于chown root:root /etc/passwd

\[root@saltstack-node1 ~\]\# salt '\*' file.chown /etc/passwd root root

检查minion端/etc目录是否存在

\[root@saltstack-node1 ~\]\# salt '\*' file.directory\_exists /etc

saltstack-node2.lichengbing.com:

True

saltstack-node1.lichengbing.com:

True

获取minion passwd文件stats信息

\[root@saltstack-node1 ~\]\# salt '\*' file.stats /etc/passwd

saltstack-node2.lichengbing.com:

----------

atime:

1475060056.71

ctime:

1474959828.71

gid:

group:

root

inode:

17844978

mode:

0644

mtime:

1474959828.71

size:

1513

target:

/etc/passwd

type:

file

uid:

user:

root

获取minion passwd权限信息

\[root@saltstack-node1 ~\]\# salt '\*' file.get\_mode /etc/passwd

saltstack-node2.lichengbing.com:

0644

saltstack-node1.lichengbing.com:

0644

创建opt/test目录

\[root@saltstack-node1 ~\]\# salt '\*' file.mkdir /opt/test

saltstack-node2.lichengbing.com:

None

saltstack-node1.lichengbing.com:

None

删除

\[root@saltstack-node1 ~\]\# salt '\*' file.remove /opt/test

saltstack-node2.lichengbing.com:

True

saltstack-node1.lichengbing.com:

True

创建文件

\[root@saltstack-node1 ~\]\# salt '\*' file.touch /tmp/test.txt

saltstack-node2.lichengbing.com:

True

saltstack-node1.lichengbing.com:

True

追加内容

\[root@saltstack-node1 ~\]\# salt '\*' file.append /tmp/test.txt "10000"

saltstack-node2.lichengbing.com:

Wrote 1 lines to "/tmp/test.txt"

saltstack-node1.lichengbing.com:

Wrote 1 lines to "/tmp/test.txt"

修改内容

\[root@saltstack-node1 ~\]\# salt '\*' file.sed  /tmp/test.txt "10000" "1"

saltstack-node2.lichengbing.com:

----------

pid:

57521

retcode:

stderr:

stdout:

saltstack-node1.lichengbing.com:

----------

pid:

42333

retcode:

stderr:

stdout:

收集文件校验

\[root@saltstack-node1 ~\]\# salt '\*' file.get\_sum /etc/passwd md5

saltstack-node2.lichengbing.com:

500ef551a710b9b486ddb32602fb3f13

saltstack-node1.lichengbing.com:

8f683526b18c55429422442d1c06caa0

7）**Network模块**

**salt '\*' sys.list\_functions network**

- network.active\_tcp

- network.arp

- network.connect

- network.default\_route

- network.dig

- network.get\_bufsize

- network.get\_hostname

- network.get\_route

- network.hw\_addr

- network.hwaddr

- network.in\_subnet

- network.interface

- network.interface\_ip

- network.interfaces

- network.ip\_addrs

- network.ip\_addrs6

- network.ip\_in\_subnet

- network.ipaddrs

- network.ipaddrs6

- network.is\_loopback

- network.is\_private

- network.mod\_bufsize

- network.mod\_hostname

- network.netstat

- network.ping

- network.reverse\_ip

- network.routes

- network.subnets

- network.traceroute

- network.wol

返回minion主机网络信息

获取主机dig网站域名信息

\[root@saltstack-node1 ~\]\# salt '\*' network.dig www.baidu.com

\[root@saltstack-node1 ~\]\# salt '\*' network.ping www.baidu.com

\[root@saltstack-node1 ~\]\# salt '\*' network.traceroute www.baidu.com

MAC地址

\[root@saltstack-node1 ~\]\# salt '\*' network.hwaddr eth0

saltstack-node1.lichengbing.com:

00:0c:29:94:18:ea

saltstack-node2.lichengbing.com:

00:0c:29:1a:87:b4

网卡配置信息

\[root@saltstack-node1 ~\]\# salt '\*' network.ip\_addrs

saltstack-node2.lichengbing.com:

- 10.0.0.184

- 10.0.0.186

- 172.16.2.186

saltstack-node1.lichengbing.com:

- 10.0.0.185

- 172.16.2.185

判断是否属于子网

\[root@saltstack-node1 ~\]\# salt '\*' network.in\_subnet 172.16.2.0/24

saltstack-node2.lichengbing.com:

True

saltstack-node1.lichengbing.com:

True

8）**pkg模块**

**salt '\*' sys.list\_functions pkg**

- pkg.available\_version

- pkg.check\_db

- pkg.clean\_metadata

- pkg.del\_repo

- pkg.diff

- pkg.download

- pkg.expand\_repo\_def

- pkg.file\_dict

- pkg.file\_list

- pkg.get\_locked\_packages

- pkg.get\_repo

- pkg.group\_diff

- pkg.group\_info

- pkg.group\_install

- pkg.group\_list

- pkg.hold

- pkg.install

- pkg.latest\_version

- pkg.list\_holds

- pkg.list\_pkgs

- pkg.list\_repo\_pkgs

- pkg.list\_repos

- pkg.list\_upgrades

- pkg.mod\_repo

- pkg.modified

- pkg.normalize\_name

- pkg.owner

- pkg.purge

- pkg.refresh\_db

- pkg.remove

- pkg.unhold

- pkg.upgrade

- pkg.upgrade\_available

- pkg.verify

- pkg.version

- pkg.version\_cmp

minion端主机主机程序包管理

为被控主机安装PHP环境，根据不同系统发行版调用不同安装工具进行部署，如redhat平台的yum，等价于yum -y install php

\[root@saltstack-node1 ~\]\# salt '\*' pkg.install php

\[root@saltstack-node1 ~\]\# salt '\*' pkg.remove php

\[root@saltstack-node1 ~\]\# salt '\*' pkg.upgrade php

9）**service模块**

**salt '\*' sys.list\_functions service**

- service.available

- service.disable

- service.disabled

- service.enable

- service.enabled

- service.execs

- service.force\_reload

- service.get\_all

- service.get\_disabled

- service.get\_enabled

- service.mask

- service.missing

- service.reload

- service.restart

- service.show

- service.start

- service.status

- service.stop

- service.systemctl\_reload

- service.unmask

minion端主机服务管理

开启、禁用Nginx开机自启动服务

\[root@saltstack-node1 ~\]\# salt '\*' service.enable nginx

\[root@saltstack-node1 ~\]\# salt '\*' service.disable nginx

常规服务操作

\[root@saltstack-node1 ~\]\# salt '\*' service.start nginx

\[root@saltstack-node1 ~\]\# salt '\*' service.stop nginx

\[root@saltstack-node1 ~\]\# salt '\*' service.restart nginx

\[root@saltstack-node1 ~\]\# salt '\*' service.reload nginx

\[root@saltstack-node1 ~\]\# salt '\*' service.status nginx

saltstack还有很多模块，如

user(系统用户模块)

- user.add

- user.chfullname

- user.chgid

- user.chgroups

- user.chhome

- user.chhomephone

- user.chloginclass

- user.chroomnumber

- user.chshell

- user.chuid

- user.chworkphone

- user.delete

- user.get\_loginclass

- user.getent

- user.info

- user.list\_groups

- user.list\_users

- user.rename

group(系统组模块)

- group.add

- group.adduser

- group.chgid

- group.delete

- group.deluser

- group.getent

- group.info

- group.members

partition(系统分区模块）

puppet(puppet管理模块)

system(系统重启、关机模块)

- system.halt

- system.init

- system.poweroff

- system.reboot

- system.shutdown

timezone(时区管理模块)

nginx(Nginx管理模块)

iptables(被控主机iptables支持模块)

- iptables.append

- iptables.build\_rule

- iptables.check

- iptables.check\_chain

- iptables.delete

- iptables.delete\_chain

- iptables.flush

- iptables.get\_policy

- iptables.get\_rules

- iptables.get\_saved\_policy

- iptables.get\_saved\_rules

- iptables.insert

- iptables.new\_chain

- iptables.save

- iptables.set\_policy

- iptables.version

mount(文件系统挂载模块) 等等...

- mount.active

- mount.automaster

- mount.fstab

- mount.is\_fuse\_exec

- mount.is\_mounted

- mount.mount

- mount.remount

- mount.rm\_automaster

- mount.rm\_fstab

- mount.set\_automaster

- mount.set\_fstab

- mount.swapoff

- mount.swapon

- mount.swaps

- mount.umount

rsync模块

- rsync.config

- rsync.rsync

- rsync.version

sys 模块

- sys.argspec

- sys.doc

- sys.list\_functions

- sys.list\_modules

- sys.list\_renderers

- sys.list\_returner\_functions

- sys.list\_returners

- sys.list\_runner\_functions

- sys.list\_runners

- sys.list\_state\_functions

- sys.list\_state\_modules

- sys.reload\_modules

- sys.renderer\_doc

- sys.returner\_argspec

- sys.returner\_doc

- sys.runner\_argspec

- sys.runner\_doc

- sys.state\_argspec

- sys.state\_doc

ssh 模块

- ssh.auth\_keys

- ssh.check\_key

- ssh.check\_key\_file

- ssh.check\_known\_host

- ssh.get\_known\_host

- ssh.hash\_known\_hosts

- ssh.host\_keys

- ssh.recv\_known\_host

- ssh.rm\_auth\_key

- ssh.rm\_known\_host

- ssh.set\_auth\_key

- ssh.set\_auth\_key\_from\_file

- ssh.set\_known\_host

- ssh.user\_keys

config 模块

- config.backup\_mode

- config.dot\_vals

- config.gather\_bootstrap\_script

- config.get

- config.manage\_mode

- config.merge

- config.option

- config.valid\_fileproto

**salt '\*' sys.list\_modules ****查看所有模块**

saltstack 管理命令

发表评论取消回复

还没有评论，来说两句吧...

相关阅读

相关 SaltStack之return与job管理

相关 SaltStack之配置管理

相关 SaltStack日常管理

相关 saltstack 管理命令

相关 SaltStack远程执行命令使用指简介

相关 saltstack安装及基本命令

相关 saltstack分组管理（二）

相关 01_配置管理和SaltStack概述

相关 saltstack(十三)：saltstack状态管理—salt-runners

相关 SaltStack--配置管理