puppet file资源常用的参数:
file { path ensure backup checksum content force group links mode owner source selinux_ignore_default selrange selrole seltype seluser }
path:指定要管理的文件或目录,必须用引号引起来.
ensure:有5个值,分别是absent,present,file,directory,link.设置present值表示【匹配文件,它会检查path值中的路径文件是否存在,如果不存在就会创建;设置absent值,删除已经存在的文件;设置directory表示创建目录,但是要删除目录需增加参数force=>true,设置link时会根据path路径创建软连接文件.
示例:
删除目录
[root@sh-web1 ~]# ls /tmp/ test [root@sh-web1 ~]# puppet apply dire.pp Notice: Compiled catalog for sh-web1.localdomain in environment production in 0.06 seconds Notice: /Stage[main]/Main/File[/tmp/test]/ensure: removed Notice: Finished catalog run in 0.05 seconds [root@sh-web1 ~]# ls /tmp/ [root@sh-web1 ~]#
backup:文件的内容在修改前是否备份,目前puppet支持两种备份方式,一种是将文件备份在agent上被修改文件的目录中,另一种方式将资源文件通过filebucket备份在远程服务器上。备份在agent上的方式,buckup属性的值如果是以".bak"开头的字符串的话,puppet会将变更文件备份在agent资源文件的同一目录下,备份文件的扩展名就是"."值里面的字符串,另一种远程备份需要借助filebucket资源.
示例:
file {"/tmp/test": ensure => present, content=> "this is file.", backup => ".$backup_date.bak", } file {"/tmp/test": ensure => present, content=> "this is test.", backup => ".$backup_date.bak", } # puppet apply file2.pp Notice: Compiled catalog for sh-web1.localdomain in environment production in 0.07 seconds Notice: /Stage[main]/Main/File[/tmp/test]/content: content changed ‘{md5}70b7ea41998bea7dc5be44528ae37ba3‘ to ‘{md5}480fc0d368462326386da7bb8ed56ad7‘ Notice: Finished catalog run in 0.03 seconds [root@sh-web1 ~]# ls /tmp/ test test..bak [root@sh-web1 ~]# cat /tmp/test..bak this is file.
注意:agent端主动备份会在file当前目录下备份.
checksum:检查文件内容是否被修改过,通过它可以检查文件的一致性。包括:md5,mtime,ctime默认使用md5.
content:可以向文件中追加内容或者通过调用template函数向erb模板中追加内容.
force:可以将一个目录变成一个连接,可用的值是true、false、yes和no,其中true与yes参数在这里均表示创建目录连接,false与no参数均表示不创建目录连接.
group:可以指定该文件的用户组,值可以使gid或系统组名.
links:定义操作符合连接的文件,可以设置的值是follow和manage.设置follow值文件复制时,会赋值文件的内容,而不是只复制连接本身;如果设置为manage值,则只复制符合连接本身.
mode:用于设置文件的权限.
owner:文件的属主.
source:指定源文件的位置,值可以是指定的远程文件的uris或者本地完整路径.
示例:
通过source同步puppet数组中多个文件.
file { source => [ "puppet:///modules/nfs/conf.$host", "puppet:///modules/nfs/conf.$operatingsystem", "puppet:///modules/nfs/conf", ] }
target:指定创建软连接的目标.
[root@sh-web1 ~]# cat link.pp file {"/tmp/3.pp": ensure=> link, target=> ‘/root/3.pp‘, } [root@sh-web1 ~]# puppet apply link.pp Notice: Compiled catalog for sh-web1.localdomain in environment production in 0.06 seconds Notice: /Stage[main]/Main/File[/tmp/3.pp]/ensure: created Notice: Finished catalog run in 0.03 seconds [root@sh-web1 ~]# ls /tmp/ 3.pp test test..bak
selinux_ignore_default:selinux系列功能,实现自定义selinux.
selrange:selinux系列功能,定义范围.
selrole:selinux系列功能,定义角色.
seltype:selinux系列功能,定义类型.
seluser:selinux系列功能,定义用户.
filebucket资源示例:
filebucket资源主要用于文件的备份与恢复,通常与file资源配合使用.
filebucket {‘‘: name path port server }
name:filebucket的名字.
path:服务器备份数据路径.
port:备份服务器的端口.
server:备份服务的域名.
示例:
node base { include admin include cron filebucket {‘main‘: server => ‘puppet‘, path => ‘/var/lib/puppet/clientbucket‘, } file {"/tmp/test": ensure => present, content=> "this is lisi.", backup => "main", } } node /sh-(proxy|web)\d+/ inherits base { case $::hostname { /sh-proxy\d+/: { tag ("web::proxy") include php } "sh-web1": { include php } } }
# puppet agent -t Notice: Ignoring --listen on onetime run Info: Retrieving pluginfacts Info: Retrieving plugin Info: Loading facts Info: Caching catalog for sh-web1.localdomain Info: Applying configuration version ‘1507549594‘ Notice: /Stage[main]/Admin/Exec[selinux]/returns: executed successfully Notice: /Stage[main]/Main/Node[base]/File[/tmp/test]/content: --- /tmp/test2017-10-09 19:02:15.527825330 +0800 +++ /tmp/puppet-file20171009-5104-6zk5y1-02017-10-09 19:46:34.951821641 +0800 @@ -1 +1 @@ -this is test. \ No newline at end of file +this is lisi. \ No newline at end of file Info: Computing checksum on file /tmp/test Info: /Stage[main]/Main/Node[base]/File[/tmp/test]: Filebucketed /tmp/test to main with sum 480fc0d368462326386da7bb8ed56ad7 Notice: /Stage[main]/Main/Node[base]/File[/tmp/test]/content: content changed ‘{md5}480fc0d368462326386da7bb8ed56ad7‘ to ‘{md5}b58ff837e1152bf6d13212d1860c1219‘ Notice: Finished catalog run in 0.39 seconds
注意:当资源改变时agent更新就会提示备份.
puppet 3.8的版本发现个问题:
master端并未备份到puppet 代码指定的位置:
[root@puppet e]# tree . └── 8 └── d └── 6 └── 1 └── 0 └── f └── 1e8d610ffbe27bf880c7d734386dbde1 ├── contents └── paths 7 directories, 2 files
[root@puppet e]# pwd /var/lib/puppet/bucket/1/e
客户端备份到了path的路径:
[root@sh-web1 1]# tree . └── 8 └── 6 └── f └── 3 └── 1 └── 9 └── 2 └── 186f319242818f98380d6369593bfb47 ├── contents └── paths 8 directories, 2 files
[root@sh-web1 1]# pwd /var/lib/puppet/clientbucket/1
本文出自 “青衫解衣” 博客,请务必保留此出处http://215687833.blog.51cto.com/6724358/1971148
原文地址:http://215687833.blog.51cto.com/6724358/1971148