自动化运维之saltstack（一）安装及常用方法

1、软件环境：

[root@localhost ~]# cat /etc/redhat-release CentOS Linux release 7.3.1611 (Core) [root@localhost ~]# uname -aLinux localhost.localdomain 3.10.0-514.el7.x86_64 #1 SMP Tue Nov 22 16:42:41 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux[root@localhost ~]#

(1)修改selinux配置文件：

[root@localhost ~]# vim /etc/sysconfig/selinux SELINUX=enforcing 改为 SELINUX=disabled

(2)关闭防火墙：

[root@localhost ~]# systemctl disable firewalld[root@localhost ~]# systemctl stop firewalld[root@localhost ~]# iptables -F[root@localhost ~]# iptables -L

IP分配如下：

master 192.168.112.140

minion 192.168.112.141

minion 192.168.112.142

(3)master和minion端部署安装

master端执行:

[root@localhost ~]# yum install epel-release[root@localhost ~]# yum install -y salt-master

minion端执行:

[root@localhost ~]# yum install epel-release[root@localhost ~]# yum install salt-minion

(4)修改配置文件:

[root@localhost ~]# vim /etc/salt/minion master: 192.168.112.140id:  server02[root@localhost ~]#[root@localhost ~]# systemctl start salt-minion[root@localhost ~]# ps -ef|grep salt-minionroot      2505     1  2 23:06 ?        00:00:00 /usr/bin/python /usr/bin/salt-minionroot      2508  2505  8 23:06 ?        00:00:00 /usr/bin/python /usr/bin/salt-minionroot      2536  2318  0 23:06 pts/0    00:00:00 grep --color=auto salt-minion[root@localhost ~]# netstat -lnupt|grep 4505tcp        0      0 0.0.0.0:4505            0.0.0.0:*               LISTEN      2304/python         [root@localhost ~]# [root@localhost ~]# [root@localhost ~]# vim /etc/salt/minionmaster: 192.168.112.140id:  server03[root@localhost ~]#[root@localhost ~]# systemctl start salt-minion[root@localhost ~]# ps -ef|grep salt-minionroot      2487     1  1 23:05 ?        00:00:00 /usr/bin/python /usr/bin/salt-minionroot      2490  2487  4 23:06 ?        00:00:00 /usr/bin/python /usr/bin/salt-minionroot      2521  2320  0 23:06 pts/0    00:00:00 grep --color=auto salt-minion[root@localhost ~]# [root@localhost ~]# [root@localhost ~]#

(5)设置salt-master和salt-minion开机启动

[root@localhost ~]# systemctl enable salt-masterCreated symlink from /etc/systemd/system/multi-user.target.wants/salt-master.service to /usr/lib/systemd/system/salt-master.service.[root@localhost ~]#[root@localhost ~]# systemctl enable salt-minionCreated symlink from /etc/systemd/system/multi-user.target.wants/salt-minion.service to /usr/lib/systemd/system/salt-minion.service.[root@localhost ~]#

2、配置saltstack认证

salt-key //查看已经签名的客户端

salt-key -a //签名指定的主机

salt-key -A //签名所有的主机

salt-key -d //删除指定主机的签名

salt-key --help //查看各命令的用法

[root@localhost ~]# salt-key Accepted Keys:Denied Keys:Unaccepted Keys:server02server03Rejected Keys:[root@localhost ~]# [root@localhost ~]# salt-key -a server02The following keys are going to be accepted:Unaccepted Keys:server02Proceed? [n/Y] YKey for minion server02 accepted.[root@localhost ~]# [root@localhost ~]# salt-key Accepted Keys:server02server03Denied Keys:Unaccepted Keys:Rejected Keys:[root@localhost ~]#

3、日常用法

test.ping用户检查master到minion端的网络连通性，返回True即正常，False为异常

[root@localhost ~]# salt '*' test.pingserver02:    Trueserver03:    True[root@localhost ~]#

cmd.run 在minion端执行shell命令，记住这模块只能执行短连接命令，比如df命令；长连接的无法返回结果，比如top命令

[root@localhost ~]# salt '*' cmd.run 'hostname'server03:    localhost.localdomainserver02:    localhost.localdomain[root@localhost ~]# salt '*' cmd.run 'df -Th'server02:    Filesystem     Type      Size  Used Avail Use% Mounted on    /dev/sda3      xfs        90G  1.8G   89G   2% /    devtmpfs       devtmpfs  231M     0  231M   0% /dev    tmpfs          tmpfs     241M   12K  241M   1% /dev/shm    tmpfs          tmpfs     241M  4.6M  236M   2% /run    tmpfs          tmpfs     241M     0  241M   0% /sys/fs/cgroup    /dev/sda1      xfs      1014M  131M  884M  13% /boot    tmpfs          tmpfs      49M     0   49M   0% /run/user/0server03:    Filesystem     Type      Size  Used Avail Use% Mounted on    /dev/sda3      xfs        90G  1.8G   89G   2% /    devtmpfs       devtmpfs  231M     0  231M   0% /dev    tmpfs          tmpfs     241M   12K  241M   1% /dev/shm    tmpfs          tmpfs     241M  4.6M  236M   2% /run    tmpfs          tmpfs     241M     0  241M   0% /sys/fs/cgroup    /dev/sda1      xfs      1014M  131M  884M  13% /boot    tmpfs          tmpfs      49M     0   49M   0% /run/user/0[root@localhost ~]#

显示被控主机的操作系统类型

[root@localhost ~]# salt '*' grains.item osserver02:    ----------    os:        CentOSserver03:    ----------    os:        CentOS[root@localhost ~]#

远程代码执行测试

（1）(通配符*匹配)

[root@localhost ~]# salt '*' cmd.exec_code python 'import sys;print sys.version'server02:    2.7.5 (default, Nov  6 2016, 00:28:07)     [GCC 4.8.5 20150623 (Red Hat 4.8.5-11)]server03:    2.7.5 (default, Nov  6 2016, 00:28:07)     [GCC 4.8.5 20150623 (Red Hat 4.8.5-11)][root@localhost ~]#

（2）正则匹配

[root@localhost ~]# salt -E 'server(02|03)' test.pingserver03:    Trueserver02:    True[root@localhost ~]#

（3）列表匹配

[root@localhost ~]# salt -L 'server02,server03' test.pingserver02:    Trueserver03:    True[root@localhost ~]#

（4）grains匹配，其命令salt grains.items

[root@localhost ~]# salt  'server02' grains.itemsserver02:    ----------    SSDs:    biosreleasedate:        07/31/2013    biosversion:        6.00    cpu_flags:        - fpu        - vme        - de        - pse        - tsc        - msr        - pae        - mce        - cx8        - apic        - sep        - mtrr        - pge        - mca        - cmov        - pat        - pse36        - clflush        - dts        - mmx        - fxsr        - sse        - sse2        - ss        - ht        - syscall        - nx        - rdtscp        - lm        - constant_tsc        - arch_perfmon        - pebs        - bts        - nopl        - xtopology        - tsc_reliable        - nonstop_tsc        - aperfmperf        - eagerfpu        - pni        - pclmulqdq        - ssse3        - cx16        - pcid        - sse4_1        - sse4_2        - x2apic        - popcnt        - xsave        - avx        - f16c        - hypervisor        - lahf_lm        - arat        - epb        - pln        - pts        - dtherm        - fsgsbase        - smep        - xsaveopt    cpu_model:        Intel(R) Core(TM) i3-3220 CPU @ 3.30GHz    cpuarch:        x86_64    domain:    fqdn:        server02    fqdn_ip4:        - 192.168.112.141    fqdn_ip6:        - ::1    gpus:        |_          ----------          model:              SVGA II Adapter          vendor:              unknown    host:        server02    hwaddr_interfaces:        ----------        eth0:            00:0c:29:0b:28:95        lo:            00:00:00:00:00:00    id:        server02    init:        systemd    ip4_interfaces:        ----------        eth0:            - 192.168.112.141        lo:            - 127.0.0.1    ip6_interfaces:        ----------        eth0:        lo:    ip_interfaces:        ----------        eth0:            - 192.168.112.141        lo:            - 127.0.0.1    ipv4:        - 127.0.0.1        - 192.168.112.141    ipv6:    kernel:        Linux    kernelrelease:        3.10.0-514.el7.x86_64    locale_info:        ----------        defaultencoding:            UTF-8        defaultlanguage:            en_US        detectedencoding:            UTF-8    localhost:        server02    lsb_distrib_id:        CentOS Linux    machine_id:        09e12c5f3a7948af9747ee938feee87f    manufacturer:        VMware, Inc.    master:        192.168.112.140    mdadm:    mem_total:        480    nodename:        server02    num_cpus:        4    num_gpus:        1    os:        CentOS    os_family:        RedHat    osarch:        x86_64    oscodename:        Core    osfinger:        CentOS Linux-7    osfullname:        CentOS Linux    osmajorrelease:        7    osrelease:        7.3.1611    osrelease_info:        - 7        - 3        - 1611    path:        /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin    productname:        VMware Virtual Platform    ps:        ps -efH    pythonexecutable:        /usr/bin/python    pythonpath:        - /usr/bin        - /usr/lib64/python27.zip        - /usr/lib64/python2.7        - /usr/lib64/python2.7/plat-linux2        - /usr/lib64/python2.7/lib-tk        - /usr/lib64/python2.7/lib-old        - /usr/lib64/python2.7/lib-dynload        - /usr/lib64/python2.7/site-packages        - /usr/lib64/python2.7/site-packages/gtk-2.0        - /usr/lib/python2.7/site-packages    pythonversion:        - 2        - 7        - 5        - final        - 0    saltpath:        /usr/lib/python2.7/site-packages/salt    saltversion:        2015.5.10    saltversioninfo:        - 2015        - 5        - 10        - 0    selinux:        ----------        enabled:            False        enforced:            Disabled    serialnumber:        VMware-56 4d 19 57 3d 1d 44 0d-99 bf 1a ff c4 0b 28 95    server_id:        1264512667    shell:        /bin/sh    systemd:        ----------        features:            +PAM +AUDIT +SELINUX +IMA -APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ -LZ4 -SECCOMP +BLKID +ELFUTILS +KMOD +IDN        version:            219    virtual:        VMware    zmqversion:        3.2.5[root@localhost ~]#

如果要获取具体某一项内容，可以直接在该命令后加项名，比如获取操作系统，则：

[root@localhost ~]# salt -L 'server02,server03' grains.item osserver03:    ----------    os:        CentOSserver02:    ----------    os:        CentOS[root@localhost ~]#

同样可以获取host、ip_interfaces、fqdn_ipv4、cpu_model对应的值：

[root@localhost ~]# salt  'server02' grains.item hostserver02:    ----------    host:        server02[root@localhost ~]#[root@localhost ~]# salt  'server02' grains.item ip_interfacesserver02:    ----------    ip_interfaces:        ----------        eth0:            - 192.168.112.141        lo:            - 127.0.0.1[root@localhost ~]#[root@localhost ~]# salt  'server02' grains.item fqdn_ip4server02:    ----------    fqdn_ip4:        - 192.168.112.141[root@localhost ~]#[root@localhost ~]# salt  'server02' grains.item cpu_modelserver02:    ----------    cpu_model:        Intel(R) Core(TM) i3-3220 CPU @ 3.30GHz[root@localhost ~]#

4、常用模块介绍

(1)、cp模块（实现远程文件、目录的复制，以及下载URL文件等操作）

#将主服务器file_roots指定位置下的目录复制到被控主机

打开master文件中的

#file_roots:

base:

- /srv/salt

改为：

file_roots:

base:

- /srv/salt

# salt '*' cp.get_dir salt://test_dir /data

salt:// --->表示file_root指定的路径，这里是/srv/salt，salt://test_dir 表示/srv/salt/test_dir

/data --->表示目标主机上的根目录下的data目录

[root@localhost ~]# ll /srv/salt/test_dir/total 672-rw-r--r-- 1 root root 686011 May  7 22:37 nginx-1.0.10.tar.gz[root@localhost ~]# salt '*' cp.get_dir salt://test_dir /dataserver02:    - /data/test_dir/nginx-1.0.10.tar.gzserver03:    - /data/test_dir/nginx-1.0.10.tar.gz[root@localhost ~]# salt '*' cmd.run 'ls -l  /data'server03:    total 0    drwxr-xr-x 2 root root 33 Jun  1 02:12 test_dirserver02:    total 0    drwxr-xr-x 2 root root 33 Jun  1 02:12 test_dir[root@localhost ~]#

#将主服务器file_roots指定位置下的文件复制到被控主机

# salt '*' cp.get_file salt://nginx-1.0.10.tar.gz /root/nginx-1.0.10.tar.gz

[root@localhost salt]# salt '*' cp.get_file salt://nginx-1.0.10.tar.gz /root/nginx-1.0.10.tar.gzserver02:    /root/nginx-1.0.10.tar.gzserver03:    /root/nginx-1.0.10.tar.gz[root@localhost salt]# salt '*' cmd.run 'ls -l /root/'server02:    total 676    -rw-------. 1 root root   1496 Jan 17 09:03 anaconda-ks.cfg    -rw-r--r--  1 root root 686011 Jun  1 02:15 nginx-1.0.10.tar.gzserver03:    total 676    -rw-------. 1 root root   1496 Jan 17 09:03 anaconda-ks.cfg    -rw-r--r--  1 root root 686011 Jun  1 02:15 nginx-1.0.10.tar.gz[root@localhost salt]#

对于大文件，cp_get_file支持gzip压缩，在参数中指定gzip的压缩级别，如下:

[root@server01 salt]# pwd/srv/salt[root@server01 salt]# ll -th test-rw-r--r-- 1 root root 1.0G Jun 13 22:04 test[root@server01 salt]# salt '*' cp.get_file salt://test /root/test gzip=5server02:    /root/testserver03:    /root/test[root@server01 salt]#[root@server01 salt]# salt '*' cmd.run 'ls -htl /root/test'server02:    -rw-r--r-- 1 root root 1.0G Jun 13 22:06 /root/testserver03:    -rw-r--r-- 1 root root 1.0G Jun 13 22:06 /root/test[root@server01 salt]#

其中，1代表最小压缩，9代表最大压缩，gzip参数是在传输过程中对文件进行压缩。

cp.get_file默认不会在客户端上建立目录，如果客户端上没有这个目录了，文件拷贝将失败，所以这里又有一个参数makedirs，当客户端上的目标目录不存在时，直接将该参数的值设置为True，即makedirs=True；

[root@server01 salt]# salt '*' cmd.run 'ls -l /root/'server02:    total 1049372    -rw-r--r--  1 root root     115316 Jun  1 02:26 GeoIP-1.6.5.-1.e16.x86_64.rpm    -rw-------. 1 root root       1496 Jan 17 09:03 anaconda-ks.cfg    -rw-r--r--  1 root root        260 Jun  5 22:08 connect.py    -rw-r--r--  1 root root     686011 Jun  1 02:15 nginx-1.0.10.tar.gz    -rw-r--r--  1 root root 1073741824 Jun 13 22:06 test    drwxr-xr-x  2 root root         33 Jun 13 22:54 webserver03:    total 1049368    -rw-r--r--  1 root root     115316 Jun  1 02:26 GeoIP-1.6.5.-1.e16.x86_64.rpm    -rw-------. 1 root root       1496 Jan 17 09:03 anaconda-ks.cfg    -rw-r--r--  1 root root     686011 Jun  1 02:15 nginx-1.0.10.tar.gz    -rw-r--r--  1 root root 1073741824 Jun 13 22:06 test    drwxr-xr-x  2 root root         33 Jun 13 22:54 web[root@server01 salt]#[root@server01 salt]# salt '*' cp.get_file salt://nginx-1.0.10.tar.gz /root/web/nginx-1.0.10.tar.gz  makedirs=Trueserver02:    /root/web/nginx-1.0.10.tar.gzserver03:    /root/web/nginx-1.0.10.tar.gz[root@server01 salt]#[root@server01 salt]# salt '*' cmd.run 'ls -l /root/'server02:    total 1049372    -rw-r--r--  1 root root     115316 Jun  1 02:26 GeoIP-1.6.5.-1.e16.x86_64.rpm    -rw-------. 1 root root       1496 Jan 17 09:03 anaconda-ks.cfg    -rw-r--r--  1 root root        260 Jun  5 22:08 connect.py    -rw-r--r--  1 root root     686011 Jun  1 02:15 nginx-1.0.10.tar.gz    -rw-r--r--  1 root root 1073741824 Jun 13 22:06 test    drwxr-xr-x  2 root root         33 Jun 13 22:54 webserver03:    total 1049368    -rw-r--r--  1 root root     115316 Jun  1 02:26 GeoIP-1.6.5.-1.e16.x86_64.rpm    -rw-------. 1 root root       1496 Jan 17 09:03 anaconda-ks.cfg    -rw-r--r--  1 root root     686011 Jun  1 02:15 nginx-1.0.10.tar.gz    -rw-r--r--  1 root root 1073741824 Jun 13 22:06 test    drwxr-xr-x  2 root root         33 Jun 13 22:54 web[root@server01 salt]#

注意：cp.get_file从字面上就可以看出是操作对象是文件，即只有在拷贝文件的时候，目标主机上对应的目录不存在使用makedirs参数才有用，否则该参数无效。

#下载指定URL内容到被控主机指定位置

salt '*' cp.get_url http://dl.fedoraproject.org/pub/epel/6/x86_64/GeoIP-1.6.5-1.el6.x86_64.rpm /root/GeoIP-1.6.5.-1.e16.x86_64.rpm

cp.get_url 根据指定的url地址下载文件到被控端主机的对应目录下，这里被控端目录/root/下面

[root@localhost salt]# salt '*' cmd.run 'ls -l /root/'server02:    total 676    -rw-------. 1 root root   1496 Jan 17 09:03 anaconda-ks.cfg    -rw-r--r--  1 root root 686011 Jun  1 02:15 nginx-1.0.10.tar.gzserver03:    total 676    -rw-------. 1 root root   1496 Jan 17 09:03 anaconda-ks.cfg    -rw-r--r--  1 root root 686011 Jun  1 02:15 nginx-1.0.10.tar.gz[root@localhost salt]# salt '*' cp.get_url http://dl.fedoraproject.org/pub/epel/6/x86_64/GeoIP-1.6.5-1.el6.x86_64.rpm  /root/GeoIP-1.6.5.-1.e16.x86_64.rpmserver03:    /root/GeoIP-1.6.5.-1.e16.x86_64.rpmserver02:    /root/GeoIP-1.6.5.-1.e16.x86_64.rpm[root@localhost salt]# salt '*' cmd.run 'ls -l /root/'server02:    total 792    -rw-r--r--  1 root root 115316 Jun  1 02:26 GeoIP-1.6.5.-1.e16.x86_64.rpm    -rw-------. 1 root root   1496 Jan 17 09:03 anaconda-ks.cfg    -rw-r--r--  1 root root 686011 Jun  1 02:15 nginx-1.0.10.tar.gzserver03:    total 792    -rw-r--r--  1 root root 115316 Jun  1 02:26 GeoIP-1.6.5.-1.e16.x86_64.rpm    -rw-------. 1 root root   1496 Jan 17 09:03 anaconda-ks.cfg    -rw-r--r--  1 root root 686011 Jun  1 02:15 nginx-1.0.10.tar.gz[root@localhost salt]#

当然URL也可以是master上的路径（salt://）

[root@server01 salt]# salt '*' cp.get_url salt://nginx-1.0.10.tar.gz /opt/nginx-1.0.10.tar.gzserver02:    /opt/nginx-1.0.10.tar.gzserver03:    /opt/nginx-1.0.10.tar.gz[root@server01 salt]# salt '*' cmd.run 'ls -l /opt'server02:    total 672    -rw-r--r-- 1 root root 686011 Jun 13 23:05 nginx-1.0.10.tar.gzserver03:    total 672    -rw-r--r-- 1 root root 686011 Jun 13 23:05 nginx-1.0.10.tar.gz[root@server01 salt]#

#salt '*' cp.hash_file salt://test-file

cp.hash_file获取从主控端下发到被控端后文件的hash值，一般用于对比某个被控端某个文件的hash值

[root@localhost ~]# salt '*' cp.hash_file salt://nginx-1.0.10.tar.gzserver02:    ----------    hash_type:        md5    hsum:        930b297b00fa1018fb0a1dd3e6b7e17eserver03:    ----------    hash_type:        md5    hsum:        930b297b00fa1018fb0a1dd3e6b7e17e[root@localhost ~]#

(2)、cmd模块（实现远程的命令行调用执行）

# salt '*' cmd.run 'netstat -ntlp'

[root@localhost salt]# salt '*' cmd.run 'netstat -lnupt'server02:    Active Internet connections (only servers)    Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name        tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      1184/sshd               tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN      2013/master             tcp6       0      0 :::22                   :::*                    LISTEN      1184/sshd               tcp6       0      0 ::1:25                  :::*                    LISTEN      2013/master             udp        0      0 0.0.0.0:32525           0.0.0.0:*                           737/dhclient            udp        0      0 127.0.0.1:323           0.0.0.0:*                           672/chronyd             udp        0      0 0.0.0.0:68              0.0.0.0:*                           737/dhclient            udp6       0      0 ::1:323                 :::*                                672/chronyd             udp6       0      0 :::14472                :::*                                737/dhclientserver03:    Active Internet connections (only servers)    Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name        tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      1191/sshd               tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN      1835/master             tcp6       0      0 :::22                   :::*                    LISTEN      1191/sshd               tcp6       0      0 ::1:25                  :::*                    LISTEN      1835/master             udp        0      0 0.0.0.0:32525           0.0.0.0:*                           729/dhclient            udp        0      0 127.0.0.1:323           0.0.0.0:*                           661/chronyd             udp        0      0 0.0.0.0:68              0.0.0.0:*                           729/dhclient            udp6       0      0 ::1:323                 :::*                                661/chronyd             udp6       0      0 :::14472                :::*                                729/dhclient[root@localhost salt]#

(3)、cron模块（实现被控主机的crontab操作）

## 为指定的被控主机、root用户添加crontab信息

# salt '*' cron.set_job root '*/5' '*' '*' '*' '*' 'date >/dev/null 2>&1'

# salt '*' cron.raw_cron root

[root@localhost salt]# salt '*' cron.set_job root '*/60' '*' '*' '*' '*' '/usr/local/nginx/sbin/nginx -s reload >/dev/null 2>&1'server02:    newserver03:    new[root@localhost salt]#[root@localhost salt]# salt '*' cmd.run 'crontab -l'server03:    # Lines below here are managed by Salt, do not edit    */60 * * * * /usr/local/nginx/sbin/nginx -s reload >/dev/null 2>&1server02:    # Lines below here are managed by Salt, do not edit    */60 * * * * /usr/local/nginx/sbin/nginx -s reload >/dev/null 2>&1[root@localhost salt]#

## 删除指定的被控主机、root用户的crontab信息

[root@localhost salt]# salt '*' cron.rm_job root '/usr/local/nginx/sbin/nginx -s reload >/dev/null 2>&1'server02:    removedserver03:    removed[root@localhost salt]# salt '*' cmd.run 'crontab -l'server03:    # Lines below here are managed by Salt, do not editserver02:    # Lines below here are managed by Salt, do not edit[root@localhost salt]#

(4)、dnsutil模块（实现被控主机通用DNS操作）

给被控制端添加指定的hosts配置项目，即host主机记录

#salt '*' dnsutil.hosts_append /etc/hosts 192.168.112.140 server01

#salt '*' dnsutil.hosts_append /etc/hosts 192.168.112.141 server02

#salt '*' dnsutil.hosts_append /etc/hosts 192.168.112.142 server03

[root@localhost salt]# salt '*' dnsutil.hosts_append /etc/hosts 192.168.112.140 server01server02:    The following line was added to /etc/hosts:    192.168.112.140 server01server03:    The following line was added to /etc/hosts:    192.168.112.140 server01[root@localhost salt]# salt '*' dnsutil.hosts_append /etc/hosts 192.168.112.141 server02server03:    The following line was added to /etc/hosts:    192.168.112.141 server02server02:    The following line was added to /etc/hosts:    192.168.112.141 server02[root@localhost salt]# salt '*' dnsutil.hosts_append /etc/hosts 192.168.112.142 server03server03:    The following line was added to /etc/hosts:    192.168.112.142 server03server02:    The following line was added to /etc/hosts:    192.168.112.142 server03[root@localhost salt]# salt '*' cmd.run 'grep 192.168.112.* /etc/hosts'server03:    192.168.112.140 server01    192.168.112.141 server02    192.168.112.142 server03server02:    192.168.112.140 server01    192.168.112.141 server02    192.168.112.142 server03[root@localhost salt]#

(5)、file模块（被控主机文件常见操作，包括文件读写、权限、查找、校验等）

# salt '*' file.get_sum /etc/hosts md5

# salt '*' file.stats /etc/hosts

[root@localhost salt]# salt '*' file.get_sum /etc/hosts md5server03:    7895e4dd8df907aa29d026a75f2a035aserver02:    7895e4dd8df907aa29d026a75f2a035a[root@localhost salt]# salt '*' file.stats /etc/hostsserver02:    ----------    atime:        1496299480.63    ctime:        1496299455.14    gid:        0    group:        root    inode:        67128992    mode:        0644    mtime:        1496299455.14    size:        234    target:        /etc/hosts    type:        file    uid:        0    user:        rootserver03:    ----------    atime:        1496299480.62    ctime:        1496299455.14    gid:        0    group:        root    inode:        67109270    mode:        0644    mtime:        1496299455.14    size:        234    target:        /etc/hosts    type:        file    uid:        0    user:        root[root@localhost salt]#

(6)、network模块（返回被控主机网络信息）

# salt '*' network.ip_addrs

# salt '*' network.interfaces

[root@localhost salt]# salt '*' network.ip_addrsserver03:    - 192.168.112.142server02:    - 192.168.112.141[root@localhost salt]# salt '*' network.interfacesserver02:    ----------    eth0:        ----------        hwaddr:            00:0c:29:0b:28:95        inet:            |_              ----------              address:                  192.168.112.141              broadcast:                  192.168.112.255              label:                  eth0              netmask:                  255.255.255.0        inet6:            |_              ----------              address:                  fe80::bf36:72fd:ae66:3183              prefixlen:                  64              scope:                  link        up:            True    lo:        ----------        hwaddr:            00:00:00:00:00:00        inet:            |_              ----------              address:                  127.0.0.1              broadcast:                  None              label:                  lo              netmask:                  255.0.0.0        inet6:            |_              ----------              address:                  ::1              prefixlen:                  128              scope:                  host        up:            Trueserver03:    ----------    eth0:        ----------        hwaddr:            00:0c:29:63:9d:12        inet:            |_              ----------              address:                  192.168.112.142              broadcast:                  192.168.112.255              label:                  eth0              netmask:                  255.255.255.0        inet6:            |_              ----------              address:                  fe80::7f27:a270:df5d:d68              prefixlen:                  64              scope:                  link        up:            True    lo:        ----------        hwaddr:            00:00:00:00:00:00        inet:            |_              ----------              address:                  127.0.0.1              broadcast:                  None              label:                  lo              netmask:                  255.0.0.0        inet6:            |_              ----------              address:                  ::1              prefixlen:                  128              scope:                  host        up:            True[root@localhost salt]#

(7)、pkg包管理模块（被控主机程序包管理，如yum、apt-get等）

# salt '*' pkg.install httpd --->安装Apache服务

# salt '*' pkg.file_list httpd---->查看Apache服务安装的路径及安装的文件

[root@localhost ~]# salt '*' pkg.install httpdserver03:    ----------    httpd:        ----------        new:            2.4.6-45.el7.centos.4        old:    httpd-tools:        ----------        new:            2.4.6-45.el7.centos.4        old:    mailcap:        ----------        new:            2.1.41-2.el7        old:server02:    ----------    httpd:        ----------        new:            2.4.6-45.el7.centos.4        old:    httpd-tools:        ----------        new:            2.4.6-45.el7.centos.4        old:    mailcap:        ----------        new:            2.1.41-2.el7        old:[root@localhost ~]#

(8)、service 服务模块（被控主机程序包服务管理）

# salt '*' service.enable httpd

# salt '*' service.disable httpd

# salt '*' service.status httpd

# salt '*' service.stop httpd

# salt '*' service.start httpd

# salt '*' service.restart httpd

# salt '*' service.reload httpd

[root@localhost ~]# salt '*' service.enable httpdserver02:    Trueserver03:    True[root@localhost ~]# salt '*' service.disable httpdserver02:    Trueserver03:    True[root@localhost ~]# salt '*' service.status httpdserver02:    Falseserver03:    False[root@localhost ~]# salt '*' service.stop httpdserver02:    Trueserver03:    True[root@localhost ~]# salt '*' service.start httpdserver03:    Trueserver02:    True[root@localhost ~]# salt '*' service.reload httpdserver03:    Trueserver02:    True[root@localhost ~]# salt '*' cmd.run 'netstat -lnupt|grep httpd'server03:    tcp6       0      0 :::80                   :::*                    LISTEN      17294/httpdserver02:    tcp6       0      0 :::80                   :::*                    LISTEN      3231/httpd[root@localhost ~]#

(9)、更多功能

更多的功能，比如：grains、pillar、states、modules、returner、runners、reactor等，还有如下高级命令的使用，以及模板配置的渲染、扩展模块的二次开发等，可以自己去深入学习，未完，待续........