saltstack的模塊介紹
Module是日常使用SaltStack接觸最多的一個組件，其用于管理對象操作，這也是SaltStack通過Push的方式進行管理的入口，比如我們?nèi)粘：唵蔚膱?zhí)行命令、查看包安裝情況、查看服務(wù)運行情況等工作都是通過SaltStack Module來實現(xiàn)的。
當安裝好Master和Minion包后，系統(tǒng)上會安裝很多Module，大家可以通過以下命令查看支持的所有Module列表：
//查看所有module列表
[root@master ~]# salt 'minion01' sys.list_modules
minion01:
- acl
- aliases
- alternatives
- apache
- archive
- artifactory
- baredoc
- beacons
- bigip
- btrfs
- buildout
- chroot
- cloud
- cmd
- composer
//查看指定module的所有function
[root@master ~]# salt 'minion01' sys.list_functions cmd
minion01:
- cmd.exec_code
- cmd.exec_code_all
- cmd.has_exec
- cmd.powershell
- cmd.powershell_all
- cmd.retcode
- cmd.run
- cmd.run_all
- cmd.run_bg
- cmd.run_chroot
- cmd.run_stderr
- cmd.run_stdout
- cmd.script
- cmd.script_retcode
- cmd.shell
- cmd.shell_info
- cmd.shells
- cmd.tty
//查看指定module的用法
[root@master ~]# salt 'minion01' sys.doc cmd
cmd.which:
Returns the path of an executable available on the minion, None otherwise
CLI Example:
salt '*' cmd.which cat
cmd.which_bin:
Returns the first command found in a list of commands
CLI Example:
salt '*' cmd.which_bin '[pip2, pip, pip-python]'
//SaltStack默認也支持一次執(zhí)行多個Module，Module之間通過逗號隔開，默認傳參之間也是用逗號分隔，也支持指定傳參分隔符號--args-separator=@
[root@master ~]# salt 'minion01' service.status,cmd.run httpd,ls
minion01:
----------
cmd.run:
anaconda-ks.cfg
service.status:
True
SaltStack常用模塊
network模塊
| 使用方法 | 作用 |
|---|---|
| ping | 獲取指定主機的ping域名 |
| get_hostname | 獲取指定主機的主機名 |
| get_fqdn | 獲取指定主機的完全限定域名 |
| hw_addr ens160 | 獲取指定網(wǎng)絡(luò)接口的mac地址 |
| active_tcp | 返回指定主機的活動的tcp連接 |
| calc_net | 通過IP和子網(wǎng)掩碼計算出指定主機的網(wǎng)段 |
| connect | 測試指定主機至某一臺服務(wù)器的網(wǎng)絡(luò)是否連通 |
| default_route | 查看指定主機的默認路由 |
| mod_hostname | 修改指定主機的主機名 |
| get_route | 查詢到一個目標網(wǎng)絡(luò)的路由信息 |
| ifacestartswith | 從特定CIDR檢索接口名稱 |
| in_subnet | 判斷當前主機是否在某一個網(wǎng)段內(nèi) |
| interfaces | 顯示所有接口的詳細信息 |
| interface ens160 | 返回指定網(wǎng)卡的信息 |
| interface_ip ens160 | 返回指定網(wǎng)卡的IP地址 |
| ip_addrs | 返回一個IPv4的地址列表，但是127.0.0.1會除外 |
| netstat | 返回所有打開的端口和狀態(tài) |
| reverse_ip | 返回一個指定的IP地址的反向地址 |
示例：
//默認ping四次就會退出
[root@master ~]# salt 'minion01' network.ping www.baidu.com
minion01:
PING www.a.shifen.com (182.61.200.7) 56(84) bytes of data.
64 bytes from localhost (182.61.200.7): icmp_seq=1 ttl=128 time=37.3 ms
64 bytes from localhost (182.61.200.7): icmp_seq=2 ttl=128 time=33.4 ms
64 bytes from localhost (182.61.200.7): icmp_seq=3 ttl=128 time=49.9 ms
64 bytes from localhost (182.61.200.7): icmp_seq=4 ttl=128 time=39.10 ms
--- www.a.shifen.com ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 9ms
rtt min/avg/max/mdev = 33.418/40.159/49.920/6.101 ms
[root@master ~]#
[root@master ~]# salt 'minion01' network.get_hostname
minion01:
minion01
[root@master ~]# salt 'minion01' network.get_fqdn
minion01:
minion01
[root@master ~]# salt 'minion01' network.hw_addr ens160
minion01:
00:0c:29:f4:b4:a9
[root@master ~]# salt 'minion01' network.active_tcp
minion01:
----------
0:
----------
local_addr:
192.168.182.142
local_port:
22
remote_addr:
192.168.182.1
remote_port:
59115
1:
----------
local_addr:
192.168.182.142
local_port:
37228
remote_addr:
192.168.182.141
remote_port:
4505
[root@master ~]# salt 'minion01' network.calc_net 192.168.182.142 255.255.255.0
minion01:
192.168.182.0/24
[root@master ~]# salt 'minion01' network.connect baidu.com 80
minion01:
----------
comment:
Successfully connected to baidu.com (220.181.38.251) on tcp port 80
result:
True
[root@master ~]# salt 'minion01' network.default_route
minion01:
|_
----------
addr_family:
inet
destination:
0.0.0.0
flags:
UG
gateway:
192.168.182.2
interface:
ens160
netmask:
0.0.0.0
這一步顯然只適用于初始化且不適合執(zhí)行所有主機
[root@master ~]# salt 'minion01' network.mod_hostname minion02
[root@master ~]# salt 'minion01' network.get_route 192.168.182.142
minion01:
----------
destination:
192.168.182.142
gateway:
None
interface:
lo
source:
192.168.182.142
[root@master ~]# salt 'minion01' network.ifacestartswith 192.168.182
minion01:
- ens160
[root@master ~]# salt 'minion01' network.in_subnet 192.168.182.0/24
minion01:
True
[root@master ~]# salt 'minion01' network.interfaces
minion01:
----------
ens160:
----------
hwaddr:
00:0c:29:f4:b4:a9
inet:
|_
----------
address:
192.168.182.142
broadcast:
192.168.182.255
label:
ens160
netmask:
255.255.255.0
inet6:
|_
----------
address:
fe80::20c:29ff:fef4:b4a9
prefixlen:
64
scope:
link
up:
True
lo:
----------
hwaddr:
00:00:00:00:00:00
inet:
|_
----------
address:
127.0.0.1
broadcast:
None
label:
lo
netmask:
255.0.0.0
inet6:
|_
----------
address:
::1
prefixlen:
128
scope:
host
up:
True
[root@master ~]# salt 'minion01' network.interface ens160
minion01:
|_
----------
address:
192.168.182.142
broadcast:
192.168.182.255
label:
ens160
netmask:
255.255.255.0
[root@master ~]#
[root@master ~]# salt 'minion01' network.interface_ip ens160
minion01:
192.168.182.142
[root@master ~]# salt 'minion01' network.ip_addrs
minion01:
- 192.168.182.142
[root@master ~]# salt 'minion01' network.netstat
minion01:
|_
----------
inode:
28918
local-address:
0.0.0.0:22
program:
sshd
proto:
tcp
recv-q:
0
remote-address:
0.0.0.0:*
send-q:
128
state:
LISTEN
user:
0
|_
----------
inode:
0
local-address:
192.168.182.142:41186
program:
proto:
tcp
recv-q:
0
remote-address:
192.168.182.141:4506
send-q:
0
state:
TIME-WAIT
user:
0
|_
----------
inode:
49528
local-address:
192.168.182.142:22
program:
sshd
proto:
tcp
recv-q:
0
remote-address:
192.168.182.1:59115
send-q:
0
state:
ESTABLISHED
user:
0
|_
----------
inode:
30398
local-address:
192.168.182.142:37228
program:
salt-minion
proto:
tcp
recv-q:
0
remote-address:
192.168.182.141:4505
send-q:
0
state:
ESTABLISHED
user:
0
|_
----------
inode:
28758
local-address:
*:80
program:
httpd
proto:
tcp
recv-q:
0
remote-address:
*:*
send-q:
128
state:
LISTEN
user:
0
|_
----------
inode:
28920
local-address:
[::]:22
program:
sshd
proto:
tcp
recv-q:
0
remote-address:
[::]:*
send-q:
128
state:
LISTEN
user:
0
[root@master ~]# salt 'minion01' network.reverse_ip 192.168.182.141
minion01:
141.182.168.192.in-addr.arpa
SaltStack常用模塊之service
| 使用方法 | 作用 |
|---|---|
| available | 判斷指定的服務(wù)是否可用 |
| get_all | 獲取所有正在運行的服務(wù) |
| disabled | 檢查指定服務(wù)是否開機不自動啟動 |
| enabled | 檢查指定服務(wù)是否開機自動啟動 |
| disable | 設(shè)置指定服務(wù)開機不自動啟動 |
| enable | 設(shè)置指定服務(wù)開機自動啟動 |
| reload | 重新加載指定服務(wù) |
| stop | 停止指定服務(wù) |
| start | 啟動指定服務(wù) |
| restart | 重啟指定服務(wù) |
| status | 查看指定服務(wù)的狀態(tài) |
示例:
表示服務(wù)可以正常使用
[root@master ~]# salt 'minion01' service.available httpd
minion01:
True
表示只要服務(wù)存在就會顯示true
[root@minion01 ~]# systemctl stop httpd.service
[root@master ~]# salt 'minion01' service.available httpd
minion01:
True
此處只顯示部分
[root@master ~]# salt 'minion01' service.get_all
minion01:
- NetworkManager
- NetworkManager-dispatcher
- NetworkManager-wait-online
- auditd
- autovt@
- basic.target
- blk-availability
- bluetooth.target
- console-getty
- container-getty@
- cpupower
- crond
- cryptsetup-pre.target
- cryptsetup.target
- ctrl-alt-del.target
//檢查開機是否不自動啟動
[root@minion01 ~]# systemctl status httpd
● httpd.service - The Apache HTTP Server
Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vend>
Active: inactive (dead) since Wed 2021-11-03 18:14:59 CST; 2min 30s >
Docs: man:httpd.service(8)
因為我們設(shè)置的使開機自啟動所以，這里顯示的是false
[root@master ~]# salt 'minion01' service.disabled httpd
minion01:
False
//設(shè)置指定服務(wù)開機自動啟動
[root@master ~]# salt 'minion01' service.enable httpd
[root@master ~]# salt 'minion01' service.enabled httpd
minion01:
True
//重新加載指定的服務(wù)
因為httpd服務(wù)處于關(guān)閉狀態(tài)所以重新加載會報錯
[root@master ~]# salt 'minion01' service.reload httpd
minion01:
ERROR: httpd.service is not active, cannot reload.
ERROR: Minions returned with non-zero exit code
[root@minion01 ~]# systemctl status httpd
● httpd.service - The Apache HTTP Server
Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vend>
Active: inactive (dead) since Wed 2021-11-03 18:14:59 CST; 9min ago
Docs: man:httpd.service(8)
當我們開啟httpd服務(wù)后即可正常加載
[root@minion01 ~]# systemctl start httpd
[root@master ~]# salt 'minion01' service.reload httpd
minion01:
True
//停止指定的服務(wù)
[root@master ~]# salt 'minion01' service.stop httpd
minion01:
True
[root@minion01 ~]# systemctl status httpd
● httpd.service - The Apache HTTP Server
Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vend>
Active: inactive (dead) since Wed 2021-11-03 18:27:30 CST; 11s ago
Docs: man:httpd.service(8)
//啟動指定服務(wù)
[root@master ~]# salt 'minion01' service.start httpd
minion01:
True
[root@minion01 ~]# systemctl status httpd
● httpd.service - The Apache HTTP Server
Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vend>
Active: inactive (dead) since Wed 2021-11-03 18:29:26 CST; 26s ago
Docs: man:httpd.service(8)
[root@minion01 ~]# systemctl status httpd
● httpd.service - The Apache HTTP Server
Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vend>
Active: active (running) since Wed 2021-11-03 18:30:06 CST; 4s ago
Docs: man:httpd.service(8)
//重啟指定服務(wù)
[root@minion01 ~]# systemctl status httpd
● httpd.service - The Apache HTTP Server
Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vend>
Active: inactive (dead) since Wed 2021-11-03 18:30:52 CST; 9s ago
Docs: man:httpd.service(8)
[root@master ~]# salt 'minion01' service.restart httpd
minion01:
True
[root@minion01 ~]# systemctl status httpd
● httpd.service - The Apache HTTP Server
Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vend>
Active: active (running) since Wed 2021-11-03 18:31:35 CST; 12s ago
Docs: man:httpd.service(8)
//查看指定服務(wù)的狀態(tài)
[root@master ~]# salt 'minion01' service.status httpd
minion01:
True
SaltStack常用模塊之pkg
| 使用方法 | 作用 |
|---|---|
| download | 只下載軟件包但不安裝，此功能將會下載指定的軟件包，但是需要在minion端安裝yum-utils，可以使用 cmd.run 進行遠程安裝 |
| file_list | 列出指定包或系統(tǒng)中已安裝的所有包的文件 |
| group_info | 查看包組的信息 |
| pkg.group_list | 列出系統(tǒng)中所有的包組 |
| install | 安裝軟件 |
| list_downloaded | 列出已下載到本地的軟件包 |
| list_pkgs | 以字典的方式列出當前已安裝的軟件包 |
| pkg.owner | 列出指定文件是由哪個包提供的 |
| pkg.remove | 卸載指定軟件 |
| upgrade | 升級系統(tǒng)中所有的軟件包或升級指定的軟件包 |
示例：
[root@master ~]# salt 'minion01' cmd.run "yum -y install yum-utils"
minion01:
Updating Subscription Management repositories.
Unable to read consumer identity
This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.
Last metadata expiration check: 1:47:38 ago on Wed Nov 3 16:54:18 2021.
Package yum-utils-4.0.12-3.el8.noarch is already installed.
Dependencies resolved.
Nothing to do.
Complete!
[root@master ~]# salt 'minion01' pkg.download wget
minion01:
----------
wget:
/var/cache/yum/packages/wget-1.19.5-8.el8_1.1.x86_64.rpm //下載完成之后的軟件存放的位置
[root@minion01 packages]# pwd
/var/cache/yum/packages
[root@minion01 packages]# ls
wget-1.19.5-8.el8_1.1.x86_64.rpm
//列出已安裝的openssh軟件包提供的所有文件
[root@master ~]# salt 'minion01' pkg.file_list openssh
minion01:
----------
errors:
files:
- /etc/ssh
- /etc/ssh/moduli
- /usr/bin/ssh-keygen
- /usr/lib/.build-id
- /usr/lib/.build-id/2f
- /usr/lib/.build-id/2f/1003f2ae760afaa60d4478f423bebad9d810ff
- /usr/lib/.build-id/fc
- /usr/lib/.build-id/fc/c8618d81f866567bcfe0ebebb5d79c0183dbb9
- /usr/libexec/openssh
- /usr/libexec/openssh/ssh-keysign
- /usr/share/doc/openssh
- /usr/share/doc/openssh/CREDITS
//若不指定則會列出所有的以安裝的軟件
[root@master ~]# salt 'minion01' pkg.file_list
//查看包組的信息
[root@master ~]# salt 'minion01' pkg.group_info 'Development Tools'
minion01:
----------
conditional:
default:
- asciidoc
- byacc
- ctags
- diffstat
- git
- intltool
- jna
- ltrace
- patchutils
- perl-Fedora-VSP
- perl-generators
- pesign
- source-highlight
- systemtap
- valgrind
- valgrind-devel
description:
A basic development environment.
group:
Development Tools
id:
None
mandatory:
- autoconf
- automake
- binutils
- bison
- flex
- gcc
- gcc-c++
- gdb
- glibc-devel
- libtool
- make
- pkgconf
- pkgconf-m4
- pkgconf-pkg-config
- redhat-rpm-config
- rpm-build
- rpm-sign
- strace
optional:
- cmake
- expect
- rpmdevtools
- rpmlint
type:
package group
//列出系統(tǒng)中所有的包組
[root@master ~]# salt 'minion01' pkg.group_list
minion01:
----------
available:
- Conflicts BaseOS
- Dial-up Networking Support
- Hardware Monitoring Utilities
- Hardware Support
- Large Systems Performance
- Legacy UNIX Compatibility
- Python Web
- Server product core
- Windows File Server
- Additional Development
- Anaconda tools
- Backup Client
- Base
- base-x
- Conflicts AppStream
//安裝軟件
[root@master ~]# salt 'minion01' pkg.install wget
minion01:
----------
wget:
----------
new:
1.19.5-8.el8_1.1
old:
//列出已下載到本地的軟件包
因為使用pkg安裝完成之后會將軟件包給刪除掉所以這里我們看不到
[root@master ~]# salt 'minion01' pkg.list_downloaded
minion01:
----------
//以字典的方式列出當前已安裝的軟件包
[root@master ~]# salt 'minion01' pkg.list_pkgs
minion01:
----------
NetworkManager:
1:1.22.8-4.el8
NetworkManager-libnm:
1:1.22.8-4.el8
NetworkManager-team:
1:1.22.8-4.el8
NetworkManager-tui:
1:1.22.8-4.el8
acl:
2.2.53-1.el8
apr:
1.6.3-9.el8
apr-util:
1.6.1-6.el8
apr-util-bdb:
1.6.1-6.el8
apr-util-openssl:
1.6.1-6.el8
//列出指定文件是由哪個包提供的
[root@master ~]# salt 'minion01' pkg.owner /var/www/html //等同于rpm -qf
minion01:
httpd-filesystem
//卸載指定軟件
[root@master ~]# salt 'minion01' cmd.run "rpm -qa | grep wget"
minion01:
wget-1.19.5-8.el8_1.1.x86_64
[root@master ~]# salt 'minion01' pkg.remove wget
minion01:
----------
wget:
----------
new:
old:
1.19.5-8.el8_1.1
//若要卸載多個文件，中間需要用逗號隔開
//升級系統(tǒng)中所有的軟件包或升級指定的軟件包
因為yum默認下載最新版所以為了演示效果在minion01上安裝一個舊版的wget
[root@minion01 ~]# wget http://mirror.centos.org/centos/7/os/x86_64/Packages/wget-1.14-18.el7_6.1.x86_64.rpm
[root@master ~]# salt 'minion01' pkg.upgrade name=wget
minion01:
----------
wget:
----------
new:
1.19.5-10.el8
old:
1.14-18.el7_6.1
SaltStack常用模塊之state
| 使用方法 | 作用 |
|---|---|
| show_highstate | 顯示當前系統(tǒng)中有哪些高級狀態(tài) |
| highstate | 執(zhí)行高級狀態(tài) |
| show_state_usage | 顯示當前系統(tǒng)中的高級狀態(tài)執(zhí)行情況 |
| show_top | 返回minion將用于highstate的頂級數(shù)據(jù) |
| top | 執(zhí)行指定的top file，而不是默認的 |
| show_sls | 顯示 master 上特定sls或sls文件列表中的狀態(tài)數(shù)據(jù) |
示例：
//顯示當前系統(tǒng)中有哪些高級狀態(tài)
[root@master ~]# salt 'minion01' state.show_highstate
minion01:
----------
apache-install:
----------
__env__:
base
__sls__:
web.apache.apache
pkg:
|_
----------
name:
httpd
- installed
|_
----------
order:
10000
apache-service:
----------
__env__:
base
__sls__:
web.apache.apache
service:
|_
----------
name:
httpd
|_
----------
enable:
True
- running
|_
----------
order:
10001
//執(zhí)行高級狀態(tài)
[root@master ~]# salt 'minion01' state.highstate web.apache.apache
minion01:
----------
ID: apache-install
Function: pkg.installed
Name: httpd
Result: True
Comment: All specified packages are already installed
Started: 21:06:40.043040
Duration: 420.586 ms
Changes:
----------
ID: apache-service
Function: service.running
Name: httpd
Result: True
Comment: The service httpd is already running
Started: 21:06:40.465880
Duration: 57.015 ms
Changes:
Summary for minion01
------------
Succeeded: 2
Failed: 0
------------
Total states run: 2
Total run time: 477.601 ms
//顯示當前系統(tǒng)中的高級狀態(tài)執(zhí)行情況
[root@master ~]# salt 'minion01' state.show_state_usage
minion01:
----------
base:
----------
count_all:
3
count_unused:
2
count_used:
1
unused:
- top
- web.nginx.nginx
used:
- web.apache.apache
dev:
----------
count_all:
0
count_unused:
0
count_used:
0
unused:
used:
prod:
----------
count_all:
0
count_unused:
0
count_used:
0
unused:
used:
test:
----------
count_all:
0
count_unused:
0
count_used:
0
unused:
used:
//返回minion將用于highstate的頂級數(shù)據(jù)
[root@master ~]# salt 'minion01' state.show_top
minion01:
----------
base:
- web.apache.apache
//執(zhí)行指定的top file，而不是默認的
[root@master ~]# salt 'minion01' state.top top.sls //這里的top.sls是/srv/salt/base/定義的。根據(jù)自己的實際情況填寫。
minion01:
----------
ID: apache-install
Function: pkg.installed
Name: httpd
Result: True
Comment: All specified packages are already installed
Started: 21:09:25.319193
Duration: 435.958 ms
Changes:
----------
ID: apache-service
Function: service.running
Name: httpd
Result: True
Comment: The service httpd is already running
Started: 21:09:25.757198
Duration: 59.471 ms
Changes:
Summary for minion01
------------
Succeeded: 2
Failed: 0
------------
Total states run: 2
Total run time: 495.429 ms
//顯示 master 上特定sls或sls文件列表中的狀態(tài)數(shù)據(jù)
[root@master base]# salt 'minion01' state.show_sls web.apache.apache
minion01:
----------
apache-install:
----------
__env__:
base
__sls__:
web.apache.apache
pkg:
|_
----------
name:
httpd
- installed
|_
----------
order:
10000
apache-service:
----------
__env__:
base
__sls__:
web.apache.apache
service:
|_
----------
name:
httpd
|_
----------
enable:
True
- running
|_
----------
order:
10001
SaltStack常用模塊之cp模塊
示例：
列出存儲在 master 上的所有文件
[root@master ~]# salt 'master' cp.list_master
master:
- top.sls
- web/apache/apache.sls
- web/nginx/nginx.sls
列出存儲在 master 上的所有目錄
[root@master ~]# salt 'master' cp.list_master_dirs
master:
- web
- web/apache
- web/nginx
列出存儲在 master 上的所有符號鏈接
[root@master ~]# salt 'master' cp.list_master_symlinks
master:
----------
列出minion上緩存的所有文件
[root@master ~]# salt 'minion01' cp.list_minion
minion01:
- /var/cache/salt/minion/files/base/top.sls
- /var/cache/salt/minion/files/base/web/apache/apache.sls
- /var/cache/salt/minion/highstate.cache.p
- /var/cache/salt/minion/module_refresh
- /var/cache/salt/minion/pkg_refresh
- /var/cache/salt/minion/proc/20211103155513426434
- /var/cache/salt/minion/sls.p
列出環(huán)境中所有可用的狀態(tài)模塊
[root@master ~]# salt 'minion01' cp.list_states
minion01:
- top
- web.apache.apache
- web.nginx.nginx
在 localfiles 緩存中緩存 minion 上的本地文件
[root@master ~]# salt 'minion01' cp.cache_local_file /opt/123
minion01:
/var/cache/salt/minion/localfiles/opt/123
檢索 master 上的所有文件并在本地緩存它們
[root@master ~]# salt 'master' cp.cache_master
master:
- /var/cache/salt/minion/files/base/top.sls
- /var/cache/salt/minion/files/base/web/apache/apache.sls
- /var/cache/salt/minion/files/base/web/nginx/nginx.sls
列出文件服務(wù)器的可用環(huán)境
[root@master ~]# salt 'minion01' cp.envs
minion01:
- base
- test
- dev
- prod
//拷貝單個文件到目標主機的/opt目錄下
[root@master ~]# salt 'minion01' cmd.run 'ls /opt'
minion01:
123
[root@master ~]# salt-cp 'minion01' /opt/123 /opt/123
minion01:
----------
/opt/123:
True
[root@minion01 opt]# cat 123
hello linux
[root@master opt]# cat 123
hello world
[root@master opt]# cat /opt/123
hello world
[root@minion01 opt]# cat /opt/123
hello world
salt://默認是:/srv/salt
//master下載文件到客戶端:
[root@master ~]# salt '*' cp.get_file salt://base/top.sls /etc/salt/test
minion01:
/etc/salt/test
master:
/etc/salt/test
[root@minion01 salt]# pwd
/etc/salt
[root@minion01 salt]# cat test
base:
'minion01':
- web.apache.apache
'minion02':
- match: grain
- web.nginx.nginx
[root@master ~]# salt 'minion01' cp.get_file salt://base/top.sls /srv/ makedirs=True
minion01:
/srv/top.sls
[root@minion01 salt]# cat /srv/top.sls
base:
'minion01':
- web.apache.apache
'minion02':
- match: grain
- web.nginx.nginx
//從master下載整個目錄：
[root@master ~]# salt 'minion01' cp.get_dir salt://base/web /opt
minion01:
- /opt/web/apache/apache.sls
- /opt/web/nginx/nginx.sls
[root@minion01 salt]# ls /opt/
web
//將minion端的文件傳到master，也可以用來傳目錄
[root@master opt]# vim /etc/salt/master
431 file_recv: True //取消注釋將false
重啟服務(wù)
[root@master opt]# systemctl restart salt-master.service
[root@master opt]# systemctl restart salt-minion.service
[root@master ~]# salt 'minion01' cp.push /opt/test
minion01:
True
會存放在此目錄下
[root@master opt]# pwd
/var/cache/salt/master/minions/minion01/files/opt
[root@minion01 opt]# cat test
RHCE
[root@master opt]# ls
test
[root@master opt]# cat test
RHCE
SaltStack常用模塊之user模塊
在minion01端上創(chuàng)建一個tom用戶
[root@minion01 ~]# id tom
id: “tom”：無此用戶
[root@master ~]# salt 'minion01' user.add tom
minion01:
True
[root@minion01 ~]# id tom
uid=1000(tom) gid=1000(tom) 組=1000(tom)
修改gid
[root@master ~]# salt 'minion01' user.chgid tom 999
minion01:
True
[root@minion01 ~]# id tom
uid=1000(tom) gid=999(input) 組=999(input)
刪除用戶，remove刪除家目錄，force強制刪除
[root@master ~]# salt 'minion01' user.delete tom remove=True force=True
minion01:
True
[root@minion01 ~]# id tom
id: “tom”：無此用戶
強制刷新指定主機的用戶的信息
[root@master ~]# salt 'minion01' user.getent
minion01:
|_
----------
fullname:
root
gid:
0
groups:
- root
home:
/root
homephone:
name:
root
other:
passwd:
x
roomnumber:
shell:
/bin/bash
//返回指定用戶所屬的組列表
[root@master ~]# salt 'minion01' user.list_groups apache
minion01:
- apache
//返回所有用戶的列表
[root@master ~]# salt 'minion01' user.list_users
minion01:
- adm
- apache
- bin
- daemon
- dbus
- ftp
- games
- halt
- lp
- mail
- nobody
- operator
- polkitd
- rngd
- root
- shutdown
- sshd
- sssd
- sync
- systemd-coredump
- systemd-resolve
- tss
- unbound
//返回指定用戶的主要組
[root@master ~]# salt 'minion01' user.primary_group apache
minion01:
apache
//更改用戶的默認組
[root@master ~]# salt 'minion01' user.chgid tom 996
minion01:
True
[root@minion01 ~]# id tom
uid=1000(tom) gid=996(polkitd) 組=996(polkitd)
//返回用戶信息
[root@master ~]# salt 'minion01' user.info tom
minion01:
----------
fullname:
gid:
996
groups:
- polkitd
home:
/home/tom
homephone:
name:
tom
other:
passwd:
x
roomnumber:
shell:
/bin/bash
uid:
1000
workphone:
//創(chuàng)建用戶時指定 shell
[root@master ~]#
[root@master ~]# salt 'minion01' user.add tom shell=/sbin/nologin
minion01:
True
[root@minion01 ~]# tail -1 /etc/passwd
tom:x:1000:1000::/home/tom:/sbin/nologin
//更改用戶名
[root@master ~]# salt 'minion01' user.chfullname tom "jerry"
minion01:
True
[root@minion01 ~]# tail -1 /etc/passwd
tom:x:1000:1000:jerry:/home/tom:/bin/bash
//更改用戶uid
[root@master ~]# salt 'minion01' user.chuid tom 1024
minion01:
True
[root@minion01 ~]# id tom
uid=1024(tom) gid=1000(tom) 組=1000(tom)
//更改用戶的gid
[root@master ~]# salt minion01 user.add wzw
minion01:
True
[root@minion01 ~]# id wzw
uid=1025(wzw) gid=1025(wzw) 組=1025(wzw)
[root@master ~]# salt minion01 user.chgid tom 1025
minion01:
True
SaltStack常用模塊之file
//檢查指定路徑是否存在
[root@master ~]# salt '*' cmd.run 'ls /opt'
minion02:
test2
minion01:
test1
[root@master ~]# salt '*' file.access /opt/test1 f //f檢查是否為文件
minion02:
False
minion01:
True
//檢查指定文件的權(quán)限
[root@master ~]# salt '*' file.access /opt/test1 r //minion02上沒有test01文件，判斷是否有讀權(quán)限
minion02:
False
minion01:
True
[root@master ~]# salt '*' file.access /opt/test1 w //判斷是否有寫的權(quán)限
minion01:
True
minion02:
False
[root@master ~]# salt '*' file.access /opt/test1 x //判斷是否有寫的權(quán)限
minion01:
False
minion02:
False
file.append
//往一個文件里追加內(nèi)容，若此文件不存在則會報異常
[root@master ~]# salt '*' cmd.run 'ls /opt'
minion02:
minion01:
[root@master ~]# salt '*' file.append /opt/file 'hello world'
minion02:
Wrote 1 lines to "/opt/file"
minion01:
Wrote 1 lines to "/opt/file"
[root@master ~]# salt '*' cmd.run 'ls /opt/file'
minion02:
/opt/file
minion01:
/opt/file
[root@master ~]# salt '*' cmd.run 'cat /opt/file'
minion02:
hello world
minion01:
hello world
file.basename
獲取指定路徑的文件名
[root@master ~]# salt '*' file.basename '/opt/file'
minion02:
file
minion01:
file
file.dirname
獲取指定路徑的目錄名
[root@master ~]# salt '*' file.dirname '/opt/file'
minion01:
/opt
minion02:
/opt
file.check_hash
檢查指定的文件與hash字符串是否匹配，匹配則返回 True 否則返回 False
[root@master ~]# salt '*' cmd.run 'md5sum /opt/file'
minion02:
0804a3a1f3d56e2ee5bac31620c63155 /opt/file
minion01:
6f5902ac237024bdd0c176cb93063dc4 /opt/file
[root@master ~]# salt '*' file.check_hash /opt/file 0804a3a1f3d56e2ee5bac31620c63155
minion02:
True
minion01:
False
file.chattr
修改指定文件的屬性
| 屬性 | 對文件的意義 | 對目錄的意義 |
|---|---|---|
| a | 只允許在這個文件之后追加數(shù)據(jù)，不允許任何進程覆蓋或截斷這個文件 | 只允許在這個目錄下建立和修改文件，而不允許刪除任何文件 |
| i | 不允許對這個文件進行任何的修改，不能刪除、更改、移動 | 任何的進程只能修改目錄之下的文件,不允許建立和刪除文件 |
給指定文件添加屬性
//查看當前屬性
[root@master ~]# salt '*' cmd.run 'lsattr /opt'
minion01:
-------------------- /opt/file
minion02:
-------------------- /opt/file
//添加屬性
[root@master ~]# salt '*' file.chattr /opt/file operator=add attributes=ai
minion02:
True
minion01:
True
[root@master ~]# salt '*' cmd.run 'lsattr /opt'
minion02:
----ia-------------- /opt/file
minion01:
----ia-------------- /opt/file
[root@minion01 opt]# rm -f file
rm: 無法刪除'file': 不允許的操作
[root@minion01 opt]# echo 'xxhh' >> file
-bash: file: 不允許的操作
[root@minion01 opt]# echo 'xxhh' > file
-bash: file: 不允許的操作
//給指定文件去除屬性
[root@master ~]# salt '*' file.chattr /opt/file operator=remove attributes=ia
minion02:
True
minion01:
True
[root@master ~]# salt '*' cmd.run 'lsattr /opt/file'
minion02:
-------------------- /opt/file
minion01:
-------------------- /opt/file
file.chown
設(shè)置指定文件的屬主、屬組信息
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
minion01:
total 4
-rw-r--r-- 1 root root 12 Nov 4 17:40 file
minion02:
total 4
-rw-r--r-- 1 root root 12 Nov 4 17:40 file
[root@master ~]# salt '*' file.chown /opt/file root apache
minion01:
None
minion02:
None
[root@master ~]# salt '*' cmd.run 'ls -l /opt/file'
minion01:
-rw-r--r-- 1 root apache 12 Nov 4 17:40 /opt/file
minion02:
-rw-r--r-- 1 root apache 12 Nov 4 17:40 /opt/file
file.copy
在遠程主機上復制文件或目錄
拷貝文件
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
minion02:
total 4
-rw-r--r-- 1 root root 12 Nov 4 17:40 file
minion01:
total 4
-rw-r--r-- 1 root root 12 Nov 4 17:40 file
[root@master ~]# salt '*' file.copy /opt/file /opt/file1
minion02:
True
minion01:
True
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
minion01:
total 8
-rw-r--r-- 1 root root 12 Nov 4 17:40 file
-rw-r--r-- 1 root root 12 Nov 4 18:01 file1
minion02:
total 8
-rw-r--r-- 1 root root 12 Nov 4 17:40 file
-rw-r--r-- 1 root root 12 Nov 4 18:01 file1
覆蓋并拷貝目錄，將會覆蓋同名文件或目錄
[root@master ~]# salt '*' file.copy /opt/file1 /root/test recurse=true
minion02:
True
minion01:
True
[root@master ~]# salt '*' cmd.run 'ls -l /root'
minion02:
total 8
-rw-------. 1 root root 1188 Oct 4 22:27 anaconda-ks.cfg
-rw-r--r-- 1 root root 12 Nov 4 18:05 test
minion01:
total 8
-rw-------. 1 root root 1188 Oct 4 22:27 anaconda-ks.cfg
-rw-r--r-- 1 root root 12 Nov 4 18:05 test
刪除目標目錄中同名的文件或目錄并拷貝新內(nèi)容至其中
//拷貝文件
[root@master ~]# salt '*' file.copy /opt/file /root/file
minion02:
True
minion01:
True
[root@master ~]# salt '*' cmd.run 'cat /root/file'
minion01:
this is minion01
minion02:
this is minion02
file.ditectory_exists
判斷指定目錄是否存在，存在則返回 True ，否則返回 False
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
minion01:
total 8
-rw-r--r-- 1 root root 17 Nov 4 18:19 file
-rw-r--r-- 1 root root 17 Nov 4 18:18 file1
minion02:
total 8
-rw-r--r-- 1 root root 17 Nov 4 18:19 file
-rw-r--r-- 1 root root 17 Nov 4 18:18 file1
[root@master ~]# salt '*' file.directory_exists /opt/test
minion02:
False
minion01:
False
** file.diskusage**
遞歸計算指定路徑的磁盤使用情況并以字節(jié)為單位返回
[root@master ~]# salt '*' cmd.run 'du -sb /opt'
minion01:
65 /opt
minion02:
65 /opt
[root@master ~]# salt '*' cmd.run 'du -sb /opt/file'
minion02:
17 /opt/file
minion01:
17 /opt/file
file.file_exists
判斷指定文件是否存在
存在返回true，不存在返回為false，若判斷的是文件也會返回false
[root@master ~]# salt '*' cmd.run 'ls -l /opt/'
minion01:
total 8
-rw-r--r-- 1 root root 17 Nov 4 18:19 file
-rw-r--r-- 1 root root 17 Nov 4 18:18 file1
minion02:
total 8
-rw-r--r-- 1 root root 17 Nov 4 18:19 file
-rw-r--r-- 1 root root 17 Nov 4 18:18 file1
[root@master ~]# salt '*' file.file_exists /opt/test
minion01:
False
minion02:
False
[root@master ~]# salt '*' file.file_exists /opt/file
minion01:
True
minion02:
True
[root@minion01 opt]# mkdir directory
[root@minion02 opt]# mkdir directory
[root@master ~]# salt '*' file.file_exists /opt/directory
minion01:
False
minion02:
False
file.find
類似 find 命令并返回符合指定條件的路徑列表
name = path-glob # case sensitive
iname = path-glob # case insensitive
regex = path-regex # case sensitive
iregex = path-regex # case insensitive
type = file-types # match any listed type
user = users # match any listed user
group = groups # match any listed group
size = [+-]number[size-unit] # default unit = byte
mtime = interval # modified since date
grep = regex # search file contents
delete [= file-types] # default type = 'f'
exec = command [arg ...] # where {} is replaced by pathname
print [= print-opts]
maxdepth = maximum depth to transverse in path
mindepth = minimum depth to transverse before checking files or directories
* = match zero or more chars
? = match any char
[abc] = match a, b, or c
[!abc] or [^abc] = match anything except a, b, and c
[x-y] = match chars x through y
[!x-y] or [^x-y] = match anything except chars x through y
{a,b,c} = match a or b or c
path-regex：匹配路徑名的 Python Regex（正則表達式）模式
file-types：由以下一項或多項組成的字符串：
a: all file types
b: block device
c: character device
d: directory
p: FIFO (named pipe)
f: plain file
l: symlink
s: socket
where:
w: week
d: day
h: hour
m: minute
s: second
print-opts：逗號和/或空格分隔的以下一項或多項列表：
group: group name
md5: MD5 digest of file contents
mode: file permissions (as integer)
mtime: last modification time (as time_t)
name: file basename
path: file absolute path
size: file size in bytes
type: file type
user: user name
salt '*' file.find / type=f name=\*.bak size=+10m //表示在/找以.bak結(jié)尾的大小超過10MB的文件
salt '*' file.find /var mtime=+30d size=+10m print=path,size,mtime //在/var下找日期超過30天，大小超過10MB，并打印出路徑、大小、時間
salt '*' file.find /var/log name=\*.[0-9] mtime=+30d size=+10m delete //表示在/var/log下找后面.0-9的文件且文件創(chuàng)建的日期超過30天，大小超過10MB
file.get_gid
獲取指定文件的gid
[root@master ~]# salt '*' cmd.run 'ls -l /opt/file'
minion02:
-rw-r--r-- 1 root root 17 Nov 4 18:19 /opt/file
minion01:
-rw-r--r-- 1 root root 17 Nov 4 18:19 /opt/file
[root@master ~]# salt '*' file.get_gid '/opt/file'
minion02:
0
minion01:
0
file.get_group
獲取指定文件的組名
[root@master ~]# salt '*' cmd.run 'sha256sum /opt/file'
minion01:
b60cde94fd00e4c9844e270c12a16508d6661ab74df6c52630f4b8426e0a1ab0 /opt/file
minion02:
97a43b455166fdce251101ef7b8ab9246af5d8399efa7acd5b3dbdfdf0fdfe82 /opt/file
[root@master ~]# salt '*' file.get_hash /opt/file
minion01:
b60cde94fd00e4c9844e270c12a16508d6661ab74df6c52630f4b8426e0a1ab0
minion02:
97a43b455166fdce251101ef7b8ab9246af5d8399efa7acd5b3dbdfdf0fdfe82
file.get_mode
獲取指定文件的權(quán)限，以數(shù)字方式顯示
[root@master ~]# salt '*' cmd.run 'ls -l /opt/file'
minion01:
-rw-r--r-- 1 root root 17 Nov 4 18:19 /opt/file
minion02:
-rw-r--r-- 1 root root 17 Nov 4 18:19 /opt/file
[root@master ~]# salt '*' file.get_mode '/opt/file'
minion01:
0644
minion02:
0644
file.get_selinux_context
獲取指定文件的 SELINUX 上下文信息
[root@master ~]# salt '*' cmd.run 'ls -Z /opt/file'
minion02:
system_u:object_r:unlabeled_t:s0 /opt/file
minion01:
system_u:object_r:unlabeled_t:s0 /opt/file
[root@master ~]# salt '*' file.get_selinux_context /opt/file
minion02:
system_u:object_r:unlabeled_t:s0
minion01:
system_u:object_r:unlabeled_t:s0
file.get_sum
按照指定的算法計算指定文件的特征碼并顯示，默認使用的sha256算法。
該函數(shù)可使用的算法參數(shù)有：
- md5
- sha1
- sha224
- sha256 (default)
- sha384
- sha512
[root@master ~]# salt '*' cmd.run 'sha256sum /opt/file'
minion02:
97a43b455166fdce251101ef7b8ab9246af5d8399efa7acd5b3dbdfdf0fdfe82 /opt/file
minion01:
b60cde94fd00e4c9844e270c12a16508d6661ab74df6c52630f4b8426e0a1ab0 /opt/file
[root@master ~]# salt '*' file.get_sum /opt/file
minion01:
b60cde94fd00e4c9844e270c12a16508d6661ab74df6c52630f4b8426e0a1ab0
minion02:
97a43b455166fdce251101ef7b8ab9246af5d8399efa7acd5b3dbdfdf0fdfe82
[root@master ~]# salt '*' cmd.run 'md5sum /opt/file'
minion02:
9431282eea409598c0579f35091482c3 /opt/file
minion01:
a2885ae14d3891a2b8f83150e0530b07 /opt/file
[root@master ~]# salt '*' file.get_sum /opt/file md5
minion01:
a2885ae14d3891a2b8f83150e0530b07
minion02:
9431282eea409598c0579f35091482c3
file.get_uid與file.get_user
[root@master ~]# salt '*' cmd.run 'ls -l /opt/file'
minion02:
-rw-r--r--. 1 root root 17 Nov 4 18:19 /opt/file
minion01:
-rw-r--r--. 1 root root 17 Nov 4 18:19 /opt/file
[root@master ~]# salt '*' file.get_uid /opt/file
minion02:
0
minion01:
0
[root@master ~]# salt '*' file.get_user /opt/file
minion02:
root
minion01:
root
file.gid_to_group
將指定的 gid 轉(zhuǎn)換為組名并顯示
[root@master ~]# salt '*' file.gid_to_group 0
minion02:
root
minion01:
root
file.group_to_gid
將指定的組名轉(zhuǎn)換為 gid 并顯示
[root@master ~]# salt '*' file.group_to_gid root
minion02:
0
minion01:
0
[root@master ~]# salt '*' file.group_to_gid tom
minion01:
1000
minion02:
[root@master ~]# salt '*' file.group_to_gid wzw
minion01:
1025
minion02:
file.grep
在指定文件中檢索指定內(nèi)容
該函數(shù)支持通配符，若在指定的路徑中用通配符則必須用雙引號引起來
[root@master ~]# salt '*' file.grep /etc/passwd nobody //過濾/etc/passwd文件中含有nobody的關(guān)鍵字
minion02:
----------
pid:
1890
retcode:
0
stderr:
stdout:
nobody:x:65534:65534:Kernel Overflow User:/:/sbin/nologin
minion01:
----------
pid:
2101
retcode:
0
stderr:
stdout:
nobody:x:65534:65534:Kernel Overflow User:/:/sbin/nologin
[root@master ~]# salt '*' file.grep /etc/sysconfig/network-scripts/ifcfg-ens160 ipaddr -- -i //過濾網(wǎng)卡文件中的ipaddr并忽略大小寫
minion02:
----------
pid:
1900
retcode:
0
stderr:
stdout:
IPADDR=192.168.182.143
minion01:
----------
pid:
2112
retcode:
0
stderr:
stdout:
IPADDR=192.168.182.142
[root@master ~]# salt '*' file.grep /etc/sysconfig/network-scripts/ifcfg-ens160 ipaddr -- -i -B2 //過濾網(wǎng)卡文件的ipaddr的內(nèi)容，并取ipaddr的前兩行內(nèi)容忽略大小寫
minion01:
----------
pid:
2117
retcode:
0
stderr:
stdout:
DEVICE=ens160
NAME=ens160
IPADDR=192.168.182.142
minion02:
----------
pid:
1905
retcode:
0
stderr:
stdout:
DEVICE=ens160
NAME=ens160
IPADDR=192.168.182.143
[root@master ~]# salt '*' file.grep "/etc/sysconfig/network-scripts/*" ipaddr -- -i -l //打印出/etc/sysconfig/network-scripts/*加所有文件的文件名，忽略大小寫
minion01:
----------
pid:
2122
retcode:
0
stderr:
stdout:
/etc/sysconfig/network-scripts/ifcfg-ens160
minion02:
----------
pid:
1911
retcode:
0
stderr:
stdout:
/etc/sysconfig/network-scripts/ifcfg-ens160
file.is_blkdev
判斷指定的文件是否是塊設(shè)備文件
[root@master ~]# salt '*' cmd.run 'ls -l /dev/sr0'
minion01:
brw-rw----. 1 root cdrom 11, 0 Nov 4 19:01 /dev/sr0
minion02:
brw-rw----. 1 root cdrom 11, 0 Nov 4 19:01 /dev/sr0
[root@master ~]# salt '*' file.is_blkdev /dev/sr0
minion02:
True
minion01:
True
file.lsattr
檢查并顯示出指定文件的屬性信息
[root@master ~]# salt '*' cmd.run 'lsattr /opt/file'
minion02:
-------------------- /opt/file
minion01:
-------------------- /opt/file
[root@master ~]# salt '*' cmd.run 'chattr +i /opt/file'
minion02:
minion01:
[root@master ~]# salt '*' cmd.run 'lsattr /opt/file'
minion02:
----i--------------- /opt/file
minion01:
----i--------------- /opt/file
[root@master ~]# salt '*' cmd.run 'chattr =ia /opt/file' //=就是只讓文件有ia屬性
minion02:
minion01:
[root@master ~]# salt '*' cmd.run 'lsattr /opt/file'
minion02:
----ia-------------- /opt/file
minion01:
----ia-------------- /opt/file
[root@master ~]# salt '*' file.lsattr /opt/file
minion01:
----------
/opt/file:
- i
- a
minion02:
----------
/opt/file:
- i
- a
[root@master ~]# salt '*' cmd.run 'chattr -ia /opt/file' //取消文件的ia屬性
minion01:
minion02:
[root@master ~]# salt '*' cmd.run 'lsattr /opt/file'
minion02:
-------------------- /opt/file
minion01:
-------------------- /opt/file
file.mkdir
創(chuàng)建目錄并設(shè)置屬主、屬組及權(quán)限
[root@master ~]# salt '*' cmd.run 'ls -l /opt/file'
minion01:
-rw-r--r--. 1 root root 17 Nov 4 18:19 /opt/file
minion02:
-rw-r--r--. 1 root root 17 Nov 4 18:19 /opt/file
[root@master ~]# salt '*' file.mkdir /opt/test
minion01:
True
minion02:
True
[root@minion01 opt]# ls
file file1 test
[root@minion02 opt]# ls
file file1 test
[root@master ~]# salt '*' file.mkdir /opt/123 wzw wzw 755
minion01:
True
minion02:
True
[root@master ~]# salt '*' cmd.run 'ls -l /opt' //minion02上沒有wzw用戶所以沒有改變
minion01:
total 8
drwxr-xr-x 2 wzw wzw 6 Nov 4 21:59 123
-rw-r--r-- 1 root root 17 Nov 4 18:19 file
-rw-r--r-- 1 root root 17 Nov 4 18:18 file1
drwxr-xr-x 2 root root 6 Nov 4 21:48 test
minion02:
total 8
drwxr-xr-x 2 root root 6 Nov 4 21:59 123
-rw-r--r-- 1 root root 17 Nov 4 18:19 file
-rw-r--r-- 1 root root 17 Nov 4 18:18 file1
drwxr-xr-x 2 root root 6 Nov 4 21:48 test
file.move
//重命名
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
minion01:
total 4
-rw-r--r-- 1 root root 17 Nov 4 18:19 file
drwxr-xr-x 2 root root 6 Nov 5 20:39 test
minion02:
total 4
-rw-r--r-- 1 root root 17 Nov 4 18:19 file
drwxr-xr-x 2 root root 6 Nov 4 21:48 test
[root@master ~]# salt '*' file.move /opt/test /opt/test01
minion01:
----------
comment:
'/opt/test' moved to '/opt/test01'
result:
True
minion02:
----------
comment:
'/opt/test' moved to '/opt/test01'
result:
True
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
minion01:
total 4
-rw-r--r-- 1 root root 17 Nov 4 18:19 file
drwxr-xr-x 2 root root 6 Nov 5 20:39 test01
minion02:
total 4
-rw-r--r-- 1 root root 17 Nov 4 18:19 file
drwxr-xr-x 2 root root 6 Nov 4 21:48 test01
//移動
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
minion01:
total 4
-rw-r--r-- 1 root root 17 Nov 4 18:19 file
drwxr-xr-x 2 root root 6 Nov 5 20:39 test01
minion02:
total 4
-rw-r--r-- 1 root root 17 Nov 4 18:19 file
drwxr-xr-x 2 root root 6 Nov 4 21:48 test01
[root@master ~]# salt '*' file.move /opt/file /opt/test01
minion01:
----------
comment:
'/opt/file' moved to '/opt/test01'
result:
True
minion02:
----------
comment:
'/opt/file' moved to '/opt/test01'
result:
True
[root@master ~]# salt '*' cmd.run 'ls -l /opt/test01'
minion01:
total 4
-rw-r--r-- 1 root root 17 Nov 4 18:19 file
minion02:
total 4
-rw-r--r-- 1 root root 17 Nov 4 18:19 file
file.prepend
把文本插入指定文件的開頭
[root@master ~]# salt "*" cmd.run 'cat /opt/test01/file'
minion01:
this is minion01
minion02:
this is minion02
[root@master ~]# salt '*' file.prepend /opt/test01/file "RHCSA"
minion01:
Prepended 1 lines to "/opt/test01/file"
minion02:
Prepended 1 lines to "/opt/test01/file"
[root@master ~]# salt '*' cmd.run "cat /opt/test01/file"
minion01:
RHCSA
this is minion01
minion02:
RHCSA
this is minion02
file.sed
[root@master ~]# salt '*' cmd.run "cat /opt/test01/file"
minion01:
RHCSA
this is minion01
minion02:
RHCSA
this is minion02
[root@master ~]# salt '*' file.sed /opt/test01/file 'RHCSA' 'RHCA'
minion01:
----------
pid:
25579
retcode:
0
stderr:
stdout:
minion02:
----------
pid:
1902
retcode:
0
stderr:
stdout:
[root@master ~]# salt '*' cmd.run 'cat /opt/test01/file'
minion01:
RHCA
this is minion01
minion02:
RHCA
this is minion02
[root@master ~]# salt '*' file.read /opt/file01
minion01:
123 456 123 123 456 123
minion02:
123 456 123 123 456 123
[root@master ~]# salt '*' file.sed /opt/file01 456 666 flags=2 //將第二個456改為666
minion01:
----------
pid:
25750
retcode:
0
stderr:
stdout:
minion02:
----------
pid:
2050
retcode:
0
stderr:
stdout:
[root@master ~]# salt '*' file.read /opt/file01
minion01:
123 456 123 123 666 123
minion02:
123 456 123 123 666 123
file.read
讀取文件內(nèi)容
[root@master ~]# salt '*' cmd.run 'cat /opt/test01/file'
minion01:
RHCA
this is minion01
minion02:
RHCA
this is minion02
[root@master ~]# salt '*' file.read /opt/test01/file
minion01:
RHCA
this is minion01
minion02:
RHCA
this is minion02
file.readdir
列出指定目錄下的所有文件或目錄，包括隱藏文件
[root@master ~]# salt '*' file.readdir /opt
minion01:
- .
- ..
- test01
minion02:
- .
- ..
- test01
file.remove
刪除指定的文件或目錄，若給出的是目錄，將遞歸刪除
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
minion01:
total 0
drwxr-xr-x 2 root root 34 Nov 5 20:52 test01
drwxr-xr-x 2 root root 6 Nov 5 21:03 test02
minion02:
total 0
drwxr-xr-x 2 root root 34 Nov 5 20:52 test01
drwxr-xr-x 2 root root 6 Nov 5 21:03 test02
[root@master ~]# salt '*' file.remove /opt/test02
minion01:
True
minion02:
True
[root@master ~]# salt '*' cmd.run 'ls -l /opt/'
minion01:
total 0
drwxr-xr-x 2 root root 34 Nov 5 20:52 test01
minion02:
total 0
drwxr-xr-x 2 root root 34 Nov 5 20:52 test01
file.rename
重命名文件或目錄
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
minion01:
total 0
drwxr-xr-x 2 root root 34 Nov 5 20:52 test01
minion02:
total 0
drwxr-xr-x 2 root root 34 Nov 5 20:52 test01
[root@master ~]# salt '*' file.rename /opt/test01 /opt/test
minion01:
True
minion02:
True
[root@master ~]# salt '*' cmd.run 'ls -l /opt/'
minion01:
total 0
drwxr-xr-x 2 root root 34 Nov 5 20:52 test
minion02:
total 0
drwxr-xr-x 2 root root 34 Nov 5 20:52 test
file.touch
創(chuàng)建空文件或更新時間戳
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
minion01:
total 0
drwxr-xr-x 2 root root 34 Nov 5 20:52 test
minion02:
total 0
drwxr-xr-x 2 root root 34 Nov 5 20:52 test
[root@master ~]# salt '*' file.touch /opt/file01
minion01:
True
minion02:
True
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
minion01:
total 0
-rw-r--r-- 1 root root 0 Nov 5 21:10 file01
drwxr-xr-x 2 root root 34 Nov 5 20:52 test
minion02:
total 0
-rw-r--r-- 1 root root 0 Nov 5 21:10 file01
drwxr-xr-x 2 root root 34 Nov 5 20:52 test
file.set_mode
給指定文件設(shè)置權(quán)限
[root@master ~]# salt '*' cmd.run 'ls -l /opt'
minion01:
total 0
-rw-r--r-- 1 root root 0 Nov 5 21:10 file01
drwxr-xr-x 2 root root 34 Nov 5 20:52 test
minion02:
total 0
-rw-r--r-- 1 root root 0 Nov 5 21:10 file01
drwxr-xr-x 2 root root 34 Nov 5 20:52 test
[root@master ~]# salt '*' file.set_mode /opt/file01 655 //r是4，w是2，x是1
minion01:
0655
minion02:
0655
file.symlink
給指定的文件創(chuàng)建軟鏈接
[root@master ~]# salt '*' cmd.run 'ls -l /opt/file01'
minion01:
-rw-r-xr-x 1 root root 24 Nov 5 21:23 /opt/file01
minion02:
-rw-r-xr-x 1 root root 24 Nov 5 21:23 /opt/file01
[root@master ~]# salt '*' file.symlink /opt/file01 /opt/file
minion02:
True
minion01:
True
[root@master ~]# salt '*' cmd.run 'ls -l /opt/file'
minion01:
lrwxrwxrwx 1 root root 11 Nov 5 21:39 /opt/file -> /opt/file01
minion02:
lrwxrwxrwx 1 root root 11 Nov 5 21:39 /opt/file -> /opt/file01
file.uid_to_user
將指定的 uid 轉(zhuǎn)換成用戶名顯示出來
[root@master ~]# salt '*' file.uid_to_user 5
minion01:
sync
minion02:
sync
[root@master ~]# salt '*' file.uid_to_user 0
minion01:
root
minion02:
root
file.user_to_uid
將指定的用戶轉(zhuǎn)換成 uid 并顯示出來
[root@master ~]# salt '*' file.user_to_uid tom
minion01:
1024
minion02:
[root@master ~]# salt '*' file.user_to_uid wzw
minion01:
1025
minion02:
[root@master ~]# salt '*' file.user_to_uid root
minion02:
0
minion01:
0
file.write
往一個指定的文件里覆蓋寫入指定內(nèi)容
[root@master ~]# salt '*' file.read /opt/file01
minion02:
123 456 123 123 666 123
minion01:
123 456 123 123 666 123
[root@master ~]# salt '*' file.write /opt/file01 'my name is file'
minion01:
Wrote 1 lines to "/opt/file01"
minion02:
Wrote 1 lines to "/opt/file01"
[root@master ~]# salt '*' file.read /opt/file01
minion02:
my name is file
minion01:
my name is file
