标签:puppet dashboard lnmp passenger
puppet搭建lnmp
server4
#cd /etc/puppet/modules
#cp -r httpd nginx
#cd files
#rm -fr httpd.conf
#rm -fr * ../templates
编写puppet执行脚本 nginx-install.sh
#touch nginx-install.sh
#chmod +x nginx-install.sh
脚本内容如下
#!/bin/bash yum install -y openssl-devel pcre-devel gcc cd /mnt tar zxf nginx-1.9.14.tar.gz cd nginx-1.9.14 ./configure --prefix=/usr/local/nginx --with-http_ssl_module &>/dev/null & make & /dev/null && make install &>/dev/null
脚本发送到server6:~上
server6
#cp nginx-1.9.14.tar.gz /mnt
#/mnt/nginx-install.sh //测试脚本是否无错,server5与server6上不要预先安装nginx
#/usr/local/nginx/sbin/nginx/ -t
若脚本正常运行
server4
在脚本最后添加rm -fr /mnt/*
server4
#vim /etc/puppet/modules/nginx/files/nginx.conf
worker_processes下添加worker_cpu_affinity 01 10(表示开启第一个cpu内核,第二个cup内核,有几个cpu就写几位。绑定cpu)
events下添加use epoll,将worker_connections 改为4096 (增大连接数),
#cd /etc/puppet/modules/nginx/manifests/
#cp nginx-1.9.14.tar.gz /etc/puppet/modles/nginx/files
将pp中的httpd改为nginx
#vim install.pp
class nginx::install { file { ‘/mnt/nginx-1.9.14.tar.gz’: source => ‘puppet:///modules/nginx/nginx-1.9.14.tar.gz’ } file { ‘/mnt/nginx-install.sh’: source => ‘puppet:///modules/nginx/nginx-install.sh’, mode => 755 } exec { ‘/mnt/nginx-install.sh’: path => ‘/bin:/sbin:/usr/bin:/usr/sbin’, create => ‘/usr/local/nginx/sbin/nginx’, //命令只会在指定文件不存在的情况下执行 require => File [‘/mnt/nginx-1.9.14.tar.gz’,’/mnt/nginx-install.sh’] } }
#vim config.pp
class nginx::config { file { ‘/usr/local/nginx/conf/nginx.conf’: source => ‘puppet:///modules/ngxinx/nginx.conf’, require => Class[‘nginx::install’], notify => Exec[‘nginx reload’] } }
#vim service
class nginx::service { exec { ‘nginx start’: command => ‘/usr/local/nginx/sbin/nginx’, require => Class[‘nginx::install’,’nginx::config’], creates => ‘/usr/local/nginx/logs/nginx.pid’ } exec { ‘nginx reload’: command => ‘/usr/local/nginx/sbin/nginx -s reload’, refreshonly => true //只有当1个依赖的对象改变时,命令才会被执行 }
#vim /etc/puppet/manifests/nodes/server5.pp
node ‘server5.example.com’ { }
server5
#puppet agent --server server4.example.com --no-daemonize -vt
其他mysql,php配置类同。
puppet dashboard(以web方式管理puppet)
安装
server4
#yum install ruby rubygems rubygem-rake mysql-server ruby-mysql puppet-dashboard -y
#cd /usr/share/doc/
#cd puppet-dashboard/config
#vim databash.yml
复制文件中sql语句
CREATE DATABASE dashboard_production CHARACTER SET utf8; CREATE USER ‘dashboard‘@‘localhost‘ IDENTIFIED BY ‘westos‘; GRANT ALL PRIVILEGES ON dashboard_production.* TO ‘dashboard‘@‘localhost‘;
复制到test.sql文件中
#service mysqld start
#mysql < test.sql
#vim database.yml
上面全部删除,只留下生产环境配置
production: database: dashboard_production username: dashboard password: westos encoding: utf8 adapter: mysql
#rake RAILS_ENV=production db:migrate //建立 dashboard 所需的数据库和表
#rake tim:zone:local //显示dashboard时区
#vim settings.yml //puppet-dashboard 默认时区不正确,需要修改
time_zone: ‘Beijing’
#/etc/init.d/puppet-dashboard start 启动服务
#mysql
>use dashboard_production;
>show tables;
#cd ../log
#chmod 666 production.log
#/etc/init.d/puppet-dashboard-workers start //启动服务
设置 server 端:
#vim /etc/puppet/puppet.conf
[main]
#添加以下两项
reports = http
reporturl = http://172.25.0.4:3000/reports
设置 client 端:
[agent] 添加以下行
report = true
客户端会半个小时跟服务器同步一次,我们可以修改这个时间。
runinterval = 60 //代表 60 秒跟服务器同步一次
# service puppet reload
server5
让客户端自动与服务器同步,设置同步时间
#vim /etc/sysconfig/puppet 进行如下添加修改
PUPPET_SERVER=server4.example.com //puppet master 的地址
PUPPET_PORT=8140 //puppet 监听端口
PUPPET_LOG=/var/log/puppet/puppet.log //puppet 本地日志
#puppet agent --server server4.example.com --no-daemonize -vt
web上,可看到
server5上重启nginx,统计图发生了变化
点击日志可查看信息
nginx+passenger:
puppet 默认使用基于 Ruby 的 WEBRickHTTP 来处理 HTTPS 请求,单个服务器使用。webrickhttp只适合测试,实际生产中通过Apache/Nginx+Passenger 替换掉 WEBRickHTTP,Passenger 是用于将 Ruby 程序进行嵌入执行的Apache 模块,实现对 puppet 的负载均衡。
server4
#tar zxf nginx-1.9.14.tar.gz -C /mnt/
#gem install passenger-5.0.15.gem rack-1.6.4.gem
#passenger-config --root
#passenger-install-nginx-module //脚本会自动安装 nginx 支持,按提示操作,基本就是一路回车。
nginx 默认安装在/opt/nginx 目录:
#vim /opt/nginx/conf/nginx.conf:
#user nobody; worker_processes 4; #error_log logs/error.log; #error_log logs/error.log notice; #error_log logs/error.log info; #pid logs/nginx.pid; events { use epoll; worker_connections 4096; } http { #passenger_root /usr/lib/ruby/gems/1.8/gems/passenger-4.0.58; passenger_ruby /usr/bin/ruby; include mime.types; default_type application/octet-stream; #log_format main ‘$remote_addr - $remote_user [$time_local] "$request" ‘ # ‘$status $body_bytes_sent "$http_referer" ‘ # ‘"$http_user_agent" "$http_x_forwarded_for"‘; #access_log logs/access.log main; sendfile on; tcp_nopush on; #keepalive_timeout 0; keepalive_timeout 65;#gzip on; server { listen 8140; server_name server4.example.com; root /etc/puppet/rack/public; passenger_enabled on; passenger_set_header X_CLIENT_DN $ssl_client_s_dn; passenger_set_header X_CLIENT_VERIFY $ssl_client_verify; sslon; ssl_session_timeout 5m; ssl_certificate /var/lib/puppet/ssl/certs/server4.example.com.pem; ssl_certificate_key /var/lib/puppet/ssl/private_keys/server4.example.com.pem; ssl_client_certificate /var/lib/puppet/ssl/ca/ca_crt.pem; ssl_crl /var/lib/puppet/ssl/ca/ca_crl.pem; ssl_verify_client optional; ssl_ciphers SSLv2:-LOW:-EXPORT:RC4+RSA; ssl_prefer_server_ciphers on; ssl_verify_depth 1; ssl_session_cache shared:SSL:128m; } }
# mkdir /etc/puppet/rack/{public,tmp} -p
# cp /usr/share/puppet/ext/rack/config.ru /etc/puppet/rack/
# chown puppet.puppet /etc/puppet/rack/config.ru
# chkconfig puppetmaster off
# service puppetmaster stop //puppetmaster 不需要启动 , nginx 启动时会自动调用 puppet。
# /opt/nginx/sbin/nginx -t
# /opt/nginx/sbin/nginx //检测 nginx
web:
server5
#puppet agent --server server4.example.com --no-daemonize -vt
puppet补充--搭建lnmp 以及dashboard,passenger
标签:puppet dashboard lnmp passenger
原文地址:http://simplelinux.blog.51cto.com/5505221/1813895