标签：puppetdb
系统环境：selinux and iptables disabled
Rhel 6.5
Puppet 3.7.5
Ruby 1.8.7
简介:puppetdb是puppet的数据库，能够检索到已生成的数据。提高puppet执行效率
自带的HSQLDB适用在100节点内，所以用pgsql（*递归查询*）
两种方法：第一种复杂，第二种简单，但中间也会有各种问题，必须慢慢排查
一．安装包安装：
a． 安装pgsql数据库：yum install postgresql-server postgresql
b． 安装puppetdb：yum installpuppetdb puppetdb-terminus
[root@server1modules]# cat /etc/yum.repos.d/yum.repo
[yum]
name=hello
baseurl=file:///var/www/html/yumsource
gpgcheck=0
[puppet]
name=puppet
baseurl=http://yum.puppetlabs.com/el/6Server/products/x86_64
gpgcheck=0
[ruby]
name=ruby
baseurl=http://yum.puppetlabs.com/el/6Server/dependencies/x86_64
gpgcheck=0
c． 初始化数据库
1）service postgresql initdb
2）sudo -u postgres sh
createuser –DRSP puppetdb
createdb –O puppetdb puppetdb
测试：psql -h localhost -U puppetdb-d puppetdb –W
3）[root@server1 modules]# tail /var/lib/pgsql/data/pg_hba.conf
local all all trust
# IPv4local connections:
host all all 127.0.0.1/32 trust
# IPv6local connections:
host all all ::1/128 trust
4）/etc/init.d/postgresqlrestart
d.配置pgsql
1）puppet config print hostcert
cp /etc/puppet/ssl/certs/server1.example.com.pem /var/lib/pgsql/data/server.crt
puppet config print hostprivkey
cp /etc/puppet/ssl/private_keys/server1.example.com.pem/var/lib/pgsql/data/server.key
chownpostgres.postgres /var/lib/pgsql/data/server.crt chownpostgres.postgres /var/lib/pgsql/data/server.crt
chmod 644 server.crt
chmod 600 server.key
2）打开pgsql的ssl：vimpostgresql.conf
ssl = on # (change requiresrestart)
e.初始化puppetdb，使与pgsql连接
1）[root@server1conf.d]# pwd
/etc/puppetdb/conf.d
[root@server1 conf.d]# cat database.ini
[database]
# For the embedded DB: org.hsqldb.jdbcDriver
# For PostgreSQL: org.postgresql.Driver
# Defaults to embedded DB
classname =org.postgresql.Driver
# For the embedded DB: hsqldb
# For PostgreSQL: postgresql
# Defaults to embedded DB
subprotocol = postgresql
# For the embedded DB:file:/path/to/database;hsqldb.tx=mvcc;sql.syntax_pgs=true
# For PostgreSQL: //host:port/databaseName
# Defaults to embedded DB located in <vardir>/db
subname = //localhost:5432/puppetdb?true
# Connect as a specific user
username = puppetdb
# Use a specific password
password = puppetdb
2）
[root@server1 conf.d]# cat jetty.ini
[jetty]
# IP address or hostname to listen for clear-text HTTP. To avoidresolution
# issues, IP addresses are recommended over hostnames.
# Default is `localhost`.
host = server1.example.com
# Port to listen on for clear-text HTTP.
port = 8080
# The following are SSL specific settings. They can be configured
# automatically with the tool `puppetdb ssl-setup`, which isnormally
# ran during package installation.
# IP address to listen on for HTTPS connections. Hostnames can alsobe used
# but are not recommended to avoid DNS resolution issues. To listenon all
# interfaces, use `0.0.0.0`.
ssl-host = 0.0.0.0
# The port to listen on for HTTPS connections
ssl-port = 8081
# Private key path
ssl-key = /etc/puppetdb/ssl/private.pem
# Public certificate path
ssl-cert = /etc/puppetdb/ssl/public.pem
# Certificate authority path
ssl-ca-cert = /etc/puppetdb/ssl/ca.pem
如果上面有关的证书文件没有，可以用此命令生成：
/usr/sbin/puppetdb ssl-setup
F． 使puppdb结合puppetmaster
[root@server1puppet]# pwd
/etc/puppet
1）[root@server1 puppet]# cat puppetdb.conf
[main]
server = server1.example.com
port = 8081
2）[root@server1 puppet]# cat routes.yaml
---
master:
facts:
terminus: puppetdb #中间有个大大的空壳，不空就报错
cache: yaml
G．启动/重启各种服务：pgsql、puppetmaster、puppetdb
H．测试在agent上运行。看日志有各种和数据库交流的信息。看8080端口：
2015-04-25 16:52:36,854 INFO [c.p.p.command][e2d1d4aa-75ba-4158-97b4-81630384c80d] [replace facts] server2.example.com
2015-04-25 16:52:36,952 INFO [c.p.p.command][7de76142-baf8-4bd4-bfbd-e272dce9e248] [replace catalog] server2.example.com
二．模版安装最简单
a. 下载模板：puppet module installpuppetlabs/puppetdb
b. Puppet apply –e ‘includepuppetdb’ #安装puppetdb 配置服务，pgsql等
c. Puppet apply -e ‘include puppetdb::master::config’ 是puppetmaster使用puppetdb
d. 看日志检测
标签：puppetdb
原文地址：http://qiandan.blog.51cto.com/9452609/1638329
