cfengine自動(dòng)化配置系統(tǒng)原理與實(shí)踐(存儲(chǔ)版)
【正文】 . cfengine 服務(wù)器端設(shè)置1. 安裝cfengine軟件包,可以使用源碼或者rpm包，請參考互聯(lián)網(wǎng).2. cfengine服務(wù)端目錄結(jié)構(gòu) /var/cfengine/ | backup | bin | clientconf客戶端從此目錄下載和更新配置文件 | inputs服務(wù)端自身的配置文件 | lib | modules | outputs | ppkeys | rpc_in | rpc_out | share ` state3. ,文件內(nèi)容如下 cat /var/cfengine/clientconf/ (為了簡化一點(diǎn),) Who and what we allow access to, and who we trust Master Server conf and Client cfservd conf control: domain = ( ) cfrunCommand = ( /var/cfengine/bin/cfagent ) MaxConnections = ( 100 ) MultipleConnections = ( true ) IfElapsed = ( 1 ) DenyBadClocks = ( false ) AllowConnectionsFrom = ( ) TrustKeysFrom = ( )自動(dòng)交換key,不需要拷貝key LogAllConnections = ( true ) AllowUsers = ( root admin ) HostnameKeys = ( off ) ChecksumDatabase = ( /var/cfengine/cfdb ) grant: $(cfrunCommand),可以cfrun方式遠(yuǎn)程執(zhí)行cfagent /var/,通過cfagent訪問拷貝此目錄下的文件注意:，可以根據(jù)需要進(jìn)行權(quán)限的限制4. (cfagent運(yùn)行時(shí)，第一解析的配置文件) cat /var/cfengine/clientconf/ ensure that the inputs and binaries in /var/cfengine are synced to those on the server. control: actionsequence = ( copy ) sequence of actions to perform domain = ( ) our domain DefaultCopyType = ( checksum ) Copy based on checksum, not mtime HostnameKeys = ( off ) cfserver = ( ) host running cfservd workdir = ( /var/cfengine ) the workdir clientconf = ( /var/cfengine/clientconf ) input_mode = ( 700 ) mode for input files bin_mode = ( 755 ) mode for binaries fowner = ( root ) file owner ogroup = ( root ) file group any:: the class to match SplayTime = ( 1 ) max number of minutes over which cfengine will share its load on the server copy: $(clientconf)/ dest=$(workdir)/inputs/ owner=$(fowner) group=$(ogroup) mode=700 server=$(cfserver) trustkey=true encrypt=true注意:，,.5. (cfengine的核心配置文件，所有的功能操作都在此配置文件中定義) cat /var/cfengine/clientconf/ for client group區(qū)塊定義群組(classes)，可以在后續(xù)的配置中指定特定的組群執(zhí)行特定的操作，. groups: Redhat_AS3 = (
環(huán)評公示相關(guān)推薦
鄂ICP備17016276號(hào)-1