環境
[root@puppet ~]# cat /etc/redhat-release
CentOS release 6.6 (Final)
http://downloads.puppetlabs.com/facter/facter-1.5.8.tar.gz
http://downloads.puppetlabs.com/puppet/puppet-2.6.1.tar.gz
軟件包：
[root@puppet tools]# ll
總用量 1532
-rw-r--r-- 1 root root 71295 8月 28 2010 facter-1.5.8.tar.gz
-rw-r--r-- 1 root root 1492177 9月 14 2010 puppet-2.6.1.tar.gz
關閉防火牆（線上環境不要作死，一定開啓合適的防火牆規則)
[root@puppet ~]# /etc/init.d/iptables stop
[root@puppet ~]# getenforce
Disabled
時間同步
[root@puppet ~]# /etc/init.d/ntpdate start
ntpdate: 與時間服務器同步： [確定]
[root@puppet ~]# chkconfig ntpdate on
安裝Puppetmaster
Ruby環境安裝
[root@puppet ~]# yum -y install ruby
創建puppet用戶和組
[root@puppet ~]# groupadd puppet
[root@puppet ~]# useradd -g puppet -s/bin/false -M puppet
更改host和hostname
[root@master ~]# hostname
master.test.com
[root@master ~]# cat /etc/hosts
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4master.test.com
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.98.110 master.test.com
192.168.98.111 agent.test.com
安裝facter
[root@master tools]# pwd
/tools
[root@master tools]# tar -zxvffacter-1.5.8.tar.gz
[root@master tools]# cd facter-1.5.8
[root@master facter-1.5.8]# ruby install.rb
確認安裝
[root@master facter-1.5.8]# echo $?
0
[root@master tools]# facter
安裝puppet
[root@master tools]# pwd
/tools
[root@master tools]# tar -zxvfpuppet-2.6.1.tar.gz
[root@master tools]# cd puppet-2.6.1
[root@master puppet-2.6.1]# ruby install.rb
確認安裝
[root@master puppet-2.6.1]# echo $?
0
[root@master tools]# mkdir -p /etc/puppet
[root@master puppet-2.6.1]# cpconf/redhat/* /etc/puppet/
[root@master puppet-2.6.1]# cpconf/auth.conf /etc/puppet/
[root@master puppet-2.6.1]# pwd
/tools/puppet-2.6.1
安裝Puppet_agent
關閉防火牆（線上環境不要作死，一定開啓合適的防火牆規則)
[root@puppet ~]# /etc/init.d/iptables stop
[root@puppet ~]# getenforce
Disabled
時間同步
[root@puppet ~]# /etc/init.d/ntpdate start
ntpdate: 與時間服務器同步： [確定]
[root@puppet ~]# chkconfig ntpdate on
[root@localhost ~]# mkdir /tools
[root@localhost ~]# cd /tools/
[root@localhost tools]# wget http://downloads.puppetlabs.com/facter/facter-1.5.8.tar.gz
[root@localhost tools]# wget http://downloads.puppetlabs.com/puppet/puppet-2.6.1.tar.gz
Ruby環境的安裝
[root@localhost tools]# yum -y install ruby
創建puppet用戶和組
[root@localhost tools]# groupadd puppet
[root@localhost tools]# useradd -g puppet-s /bin/false -M puppet
更改Host和hostname
[root@agent ~]# cat /etc/hosts
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4agent.test.com
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.98.111 agent.test.com
192.168.98.110 master.test.com
[root@agent ~]# hostname
agent.test.com
安裝facter和puppet
[root@agent ~]# cd /tools/
[root@agent tools]# ll
總用量 1532
-rw-r--r-- 1 root root 71295 8月 28 2010 facter-1.5.8.tar.gz
-rw-r--r-- 1 root root 1492177 2月 4 01:23 puppet-2.6.1.tar.gz
[root@agent tools]# tar -xffacter-1.5.8.tar.gz
[root@agent tools]# tar -xfpuppet-2.6.1.tar.gz
[root@agent tools]# cd facter-1.5.8
[root@agent facter-1.5.8]# ruby install.rb
檢查安裝步驟
[root@agent facter-1.5.8]# echo $?
0
#heck facter
[root@agent facter-1.5.8]# facter
[root@agent facter-1.5.8]# cd ..
[root@agent tools]# cd puppet-2.6.1
[root@agent puppet-2.6.1]# ruby install.rb
[root@agent puppet-2.6.1]# mkdir -p /etc/puppet
[root@agent puppet-2.6.1]# cp conf/redhat/*/etc/puppet/
[root@agent puppet-2.6.1]# cpconf/auth.conf /etc/puppet/
開始配置puppet
Master端配置
建立配置文件目錄
[root@master tools]# mkdir/etc/puppet/manifests –p
設置開機自啓
[root@master tools]# mkdir /etc/puppet/manifests-p
[root@master tools]# cp/etc/puppet/server.init /etc/init.d/puppetmaster
[root@master tools]# chmod 755/etc/init.d/puppetmaster
[root@master tools]# chkconfig --addpuppetmaster
[root@master tools]# chkconfig --level 35puppetmaster on
啓動puppet master
[root@master tools]#/etc/init.d/puppetmaster start
啓動 puppetmaster： [確定]
#check puppet master(端口8140)
[root@master tools]# netstat -lntup|grepruby
tcp 0 0 0.0.0.0:8140 0.0.0.0:* LISTEN 2416/ruby
配置agent端—---授權
[root@agent puppet-2.6.1]# telnetmaster.test.com 8140
Trying 192.168.98.110...
Connected to master.test.com.
Escape character is '^]'.
Connection closed by foreign host.
節點申請註冊
[root@agent puppet-2.6.1]# puppetd --test--server master.test.com
info: Creating a new SSL key foragent.test.com
warning: peer certificate won't be verifiedin this SSL session
info: Caching certificate for ca
warning: peer certificate won't be verifiedin this SSL session
warning: peer certificate won't be verifiedin this SSL session
info: Creating a new SSL certificaterequest for agent.test.com
info: Certificate Request fingerprint(md5): B6:22:AE:77:67:00:01:B1:43:C1:10:1A:DA:4A:B3:B2
warning: peer certificate won't be verifiedin this SSL session
warning: peer certificate won't be verifiedin this SSL session
warning: peer certificate won't be verifiedin this SSL session
Exiting; no certificate found andwaitforcert is disabled
Master服務器端確定認證
[root@master tools]# puppet cert --list–all #服務端查看認證情況
agent.test.com(B6:22:AE:77:67:00:01:B1:43:C1:10:1A:DA:4A:B3:B2) #未認證
+ master.test.com(3F:9B:8A:AD:8A:5C:88:00:AA:AE:FB:09:6E:07:24:FB)
[root@master tools]# puppet cert --signagent.test.com #註冊agent
notice: Signed certificate request foragent.test.com #將請求的證書正式註冊
notice: Removing filePuppet::SSL::CertificateRequest agent.test.com at'/var/lib/puppet/ssl/ca/requests/agent.test.com.pem'
[root@master tools]# puppet cert --list–all #再次查看認證情況
+ agent.test.com (32:CF:0B:0E:26:5E:6D:6D:78:B2:AC:41:7B:7C:DD:47) #注意前面的+號
+ master.test.com(3F:9B:8A:AD:8A:5C:88:00:AA:AE:FB:09:6E:07:24:FB)
另外一種查看認證的方式
[root@master tools]# tree/var/lib/puppet/ssl/
/var/lib/puppet/ssl/
├── ca
│ ├── ca_crl.pem
│ ├── ca_crt.pem
│ ├── ca_key.pem
│ ├── ca_pub.pem
│ ├── inventory.txt
│ ├── private
│ │ └── ca.pass
│ ├── requests
│ ├── serial
│ └── signed
│ ├──agent.test.com.pem #已經被註冊成功
│ └──master.test.com.pem
├── certificate_requests
├── certs
│ ├── ca.pem
│ └── master.test.com.pem
├── crl.pem
├── private
├── private_keys
│ └── master.test.com.pem
└── public_keys
└──master.test.com.pem
9 directories, 14 files
Agent再次測試，驗證認證情況
[root@agent puppet-2.6.1]# puppetd --test--server master.test.com
warning: peer certificate won't be verifiedin this SSL session
info: Caching certificate foragent.test.com
info: Caching certificate_revocation_listfor ca
info: Caching catalog for agent.test.com
info: Applying configuration version '1454562128'
info: Creating state file/var/lib/puppet/state/state.yaml
notice: Finished catalog run in 0.01seconds