Saltstack

The slides of a lecture/presentation on 2017-03-12 @ Chemnitzer Linux Tage

Transcript

1. SALTSTACK THE SLIDES OF A LECTURE/PRESENTATION ON 2017-03-12 @ CHEMNITZER LINUX TAGE Christian Prior
2. INTRO
3. EVENTBUS 0mq implementation almost invisible but powerful accesible via REST API #a first example how to use salt in the command line sudo salt-run state.event pretty=True
4. ABOUT ME https://github.com/cprior http://helotism.de
5. USECASE INDUSTRIAL SOLUTIONS long-term hard- and software support necessary
6. USECASE DATA MASSAGING https://github.com/helotism/helotism Installer script for a 250€-cluster solving basic sysadmin requirements Computation Network Powersupply Interaction Storage Synchronization Fixture router DHCP DNS GPIO RTC timesync rack configuration management
7. VOCABULARY
8. ECOSYSTEM Saltstack Ecosystem master - states - pillar - environments - reactor - syndic, multi-master minion minion proxy minion SSH minion cloud minion - grains - beacon pillar states master minions www.helotism.de
9. INFRASTRUCTURE AS CODE configuration management cog02 A S cog01 A S axle packages pilot production testlab
10. OVERVIEW
11. DEVELOPMENT Github repo saltstack/salt Issues, PullRequests Active project, supporters by Saltstack HQ Good athmosphere
12. SUPPORT GitHub freenode #salt Google Group commercial contracts Issues salt-users
13. TECHNOLOGY Python 2.6 < 3.0 ZeroMQ "dictionaries"/YAML
14. INSTALLATION 1/2 Platform Guides Dependencies PyYAML, ZeroMQ and a few more //PyGit is problematic: ArchLinux does it out of the box. (Later more.)
15. BOOTSTRAP 2/2 docs repo options curl -o bootstrap_salt.sh -L https://bootstrap.saltstack.com --silent -k; sleep $_SUDO sh -s -- -U -P -M -L -A mysaltmasterid -i myminionid git v2016. 11.3
16. DEPENDENCIES Standard dependencies handled well with distros My personal killer feature 'source control integration' typically requires self-compiling libgit2. pygit2 installation libgit2 installation good hint python -c 'import pygit2' must work to use e.g. GitHub repos as " leserver"
17. DEFAULT CONFIGURATION con guration: /etc/salt/ -> master & master.d, minion & minion.d broadcasted data: /srv/salt con dential data: /srv/pillar packages: formulas docu repo
18. MAJOR FUNCTIONAL COMPONENTS message queue, remote execution, state* runs, hard- and software inventory, target orchestration AUXILIARY FUNCTIONAL COMPONENTS *, to spin up cloud instances, proxy-control non-python-devices, salt via ssh event reactors
19. SALTSTACK STATE FILE #apache.sls {% if grains['os'] == 'Debian' %} apache: apache2 {% elif grains['os'] == 'RedHat' %} apache: httpd {% endif %} Jinja2 template language one should read the ne manual: http://jinja.pocoo.org/docs/dev/
20. BEACONS ON THE MINIONS beacons: inotify: /opt/helotism/show-cfgmgt_venv/performance.yml: mask: - modify disable_during_state_run: True REACTORS ON THE MASTER reactor: - salt/beacon/*/inotify/opt/helotism/show-cfgmgt_venv/config.yml: - /srv/reactor/show-cfgmgt.sls
21. FEATURES remote lesystems salt://, environments "base/qa/dev/...", API, access control "external_auth", le manipulation
22. ENVIRONMENTS master minion minion(s) ssh cloud provider proxy minion Jinja2 grains beacon syndic states pillar environments
23. WALKTHROUGH: HOW DOES IT LOOK?
24. MINION MANAGEMENT MinionID usually hostname sudo salt-key -L salt-key -a sudo ls -R /etc/salt/pki/
25. CONFIGURATION FILESERVER fileserver_backend: - roots - git
26. CONFIGURATION FILESERVER ROOT DIRECTORIES file_roots: base: - /srv/salt - /srv/formulas/users-formula - /home/cpr/helotism/mypesp8266-formula
27. CONFIGURATION GITFS gitfs_remotes: - git@bitbucket.org:cprior_/cpr.git: - name: cpr - root: application/physical/saltstack/assets/srv/salt - base: master - pubkey: /etc/pki/id_saltmaster.pub - privkey: /etc/pki/id_saltmaster - https://github.com/cprior/saltstack-not-yet-formulas.git: - name: saltstack-not-yet-formulas - root: application/physical/saltstack/srv/salt - base: master
28. REMOTE EXECUTION sudo salt 'saltmaster' pkg.install emacs sudo salt 'saltmaster' pkg.version emacs sudo salt 'saltmaster' pkg.purge emacs && sudo apt-get autoremove
29. GRAINS sudo salt 'saltmaster' grains.items
30. SIMPLE STATE FILES /srv/salt/top.sls with common.sls containing Jinja2
31. GENERIC STATE FILE YAML <ID Declaration>: <State Module>: - <Function> - <Function Arg> - <Function Arg> - <Function Arg> - <Name>: <name> - <Requisite Declaration>: - <Requisite Reference> - <Requisite Reference>
32. SAMPLE NGINX PROXY CACHE github repo
33. FORMULAS pre-written Salt States clone and change le_roots adjust pillar.example into own /srv/pillar le Example: My user con guration
34. PROXY-MINION Interface to devices with e.g. an API
35. SALT-CLOUD salt-cloud --list-locations digitalocean salt-cloud -p minion test2 salt-cloud -d minion test2
36. HINTS
37. JINJA2 Python template engine state les are by default parsed as Jinja templates control structures whitespace control
38. TROUBLESHOOTING -l debug --out=pprint
39. PYTHONIC GOTCHAS dictionaries everywhere
40. WINDOWS MINION Really easy to install! Windows repository sudo salt 'mywinnb' pkg.install blender salt-winrepo-ng
41. STATE VS. REMOTE EXECUTION remote execution state modules
42. QUESTIONS? slides linked tomorrow on http://helotism.de