puppetmaster

1、证书服务需要时间的一致&＃xff0c;不然会出现错误&＃xff01;

建立文件/puppet/shij.sh 内容如下

#!/bin/bash

rdate -s rdate.darkorb.net

赋予rdate.sh可执行权限&＃xff0c;并添加计划任务crontab –e

* * * * * /root/shij.sh

注意&＃xff1a;当提示rdate命令不存在请按下面操作&＃xff0c;运行yum install rdate

2、修改主机名

vi /etc/sysconfig/network

HOSTNAME&＃61;ptmaster.idccenter.net

修改/etc/sysconfig/network&＃xff0c;在里面指定主机名称HOSTNAME&＃61;
然后执行命令
hostname 主机名
这个时候可以注销一下系统&＃xff0c;再重登录之后就行了

rpm -Uvh http://dl.fedoraproject.org/pub/epel/5/i386/epel-release-5-4.noarch.rpm    //扩展库&＃xff0c;默认的库中没有puppetmaster。

iptables -I INPUT 1 -p tcp -m state --state NEW --dport 8140 -j ACCEPT  //puppetmaster服务端口

iptables-save > /etc/sysconfig/iptables

yum install ruby ruby-libs ruby-shadow -y

yum install puppet puppet-server facter -y

在/etc/puppet/puppet.conf添加主机名和模块的路径

vi /etc/puppet/puppet.conf
[main]
 certname &＃61; ptmaster.idccenter.net

modulepath &＃61; /etc/puppet/modules/

vi /etc/puppet/fileserver.conf

[files]

path /vm/templates     //存放下发文件的路径

allow *             //设置可以访问的客户端的地址、域名、*

建立puppetmaster资源配置文件

vi /etc/puppet/manifests/site.pp

node default {

        include vps

        }

建立vps模块

mkdir -p /etc/puppet/modules/vps/{files,manifests,templates}

vi /etc/puppet/modules/vps/manifests/init.pp

class vps {

        include vps::centos

}

vi /etc/puppet/modules/vps/manifests/centos.pp

class vps::centos {

        File {

          owner &＃61;> "root",

          group &＃61;> "root",

          mode &＃61;> 0644,

             }

        file { "/template/":

        source &＃61;> "puppet://${fileserver}/files/",

        }

        file { "/template/centos5.5":

        source &＃61;> "puppet://${fileserver}/files/centos5.5",

        }

        file { "/template/centos5.5/disk.img":

        source &＃61;> "puppet://${fileverver}/files/centos5.5/disk.img",

        }

        file { "/template/centos5.5/os.img":

        source &＃61;> "puppet://${fileverver}/files/centos5.5/os.img",

        }

}

客户端安装

1、证书服务需要时间的一致&＃xff0c;不然会出现错误&＃xff01;

建立文件/puppet/shij.sh 内容如下

#!/bin/bash

rdate -s rdate.darkorb.net

赋予rdate.sh可执行权限&＃xff0c;并添加计划任务crontab –e

* * * * * /root/shij.sh

注意&＃xff1a;当提示rdate命令不存在请按下面操作&＃xff0c;运行yum install rdate

2、修改主机名

vi /etc/sysconfig/network

HOSTNAME&＃61;node.idccenter.net

    3、在/etc/hosts添加服务器的解析
    101.226.179.232 ptmaster.idccenter.net ptmaster 

修改/etc/sysconfig/network&＃xff0c;在里面指定主机名称HOSTNAME&＃61;
然后执行命令
hostname 主机名
这个时候可以注销一下系统&＃xff0c;再重登录之后就行了

rpm -Uvh http://dl.fedoraproject.org/pub/epel/5/i386/epel-release-5-4.noarch.rpm    //扩展库&＃xff0c;默认的库中没有puppetmaster。

yum install ruby ruby-libs ruby-shadow –y

yum install puppet facter -y

添加客户端连接的服务器地址和自动更新的资源的时间间隔

vi /etc/puppet/puppet.conf

[main]

server&＃61;ptmaster.idccenter.net   //默认puppet更新资源配置文件的时候会连接puppet别名的服务器 自动更新的时候需要制定服务器的域名。如果不想添加此行配置&＃xff0c;那就需要在/etc/hosts里面添加一行别名配置&＃xff0c;把服务器的域名别名到puppet的名字&＃xff0c;因为客户端更新的时候默认是连接puppet的服务器&＃xff0c;所以在hosts里面把服务器别名到puppet也是可以的。

[agent]

runinterval&＃61;3600  //时间单位是秒

向ptmaster.idccenter.net服务器申请证书&＃xff0c;以便以后的更新资源配置。

[root&＃64;node ~]# puppet agent --server&＃61;ptmaster.idccenter.net --no-daemonize --verbose

warning: peer certificate won&＃39;t be verified in this SSL session

info: Caching certificate for ca

warning: peer certificate won&＃39;t be verified in this SSL session

warning: peer certificate won&＃39;t be verified in this SSL session

info: Creating a new SSL certificate request for node.idccenter.net

info:CertificateRequestfingerprint(md5): DD:1C:AD:56:01:73:77:83:F3:9E:EE:A0:61:C5:4A:37

warning: peer certificate won&＃39;t be verified in this SSL session

warning: peer certificate won&＃39;t be verified in this SSL session

warning: peer certificate won&＃39;t be verified in this SSL session

warning: peer certificate won&＃39;t be verified in this SSL session

info: Caching certificate for node.idccenter.net

notice: Starting Puppet client version 2.6.17

info: Caching certificate_revocation_list for ca

info: Caching catalog for node.idccenter.net

info: Applying configuration version &＃39;1352262069&＃39;

info: Creating state file /var/lib/puppet/state/state.yaml

notice: Finished catalog run in 0.02 seconds

在服务端查看申请证书的客户端并发送连接证书

[root&＃64;ptmaster templates]# puppet cert --list

  "node.idccenter.net" (DD:1C:AD:56:01:73:77:83:F3:9E:EE:A0:61:C5:4A:37)

[root&＃64;ptmaster templates]# puppet cert --sign node.idccenter.net

notice: Signed certificate request for node.idccenter.net

notice: Removing file Puppet::SSL::CertificateRequest node.idccenter.net at &＃39;/var/lib/puppet/ssl/ca/requests/node.idccenter.net.pem&＃39;

over

本文转自 freeterman 51CTO博客&＃xff0c;原文链接&＃xff1a;http://blog.51cto.com/myunix/1094771&＃xff0c;如需转载请自行联系原作者