1、深度分析 puppet 自帶 fiucket 的備份恢復(fù)功能日常情況下都是通過(guò) puppetmaster 端進(jìn)行推送變更，推送可以用 MC 實(shí)現(xiàn)，至于變更的回滾可以通過(guò)SVN 活該 Git 輔助實(shí)現(xiàn)。 存在這樣一種情況，在一個(gè)復(fù)雜的環(huán)境中，存在多個(gè)管理員，而你是負(fù)責(zé)變更推送的，他們只是做應(yīng)用的，很多時(shí)候是需要登錄系統(tǒng)權(quán)限的，有一次，一個(gè)管理員為了滿足他的應(yīng)用并沒(méi)有告知給你，登錄到系統(tǒng)之后，修改了一個(gè)配置文件，完后也沒(méi)有保存，而這個(gè)配置文件恰恰是你這邊 puppetmaster 管理的配置文件，在你做puppet 推送之后，那個(gè)管理員的配置文件被還原了。而那個(gè)管理員發(fā)現(xiàn)應(yīng)用出了問(wèn)題，要求你給他還

2、原，你如何做呢？是可以通過(guò)fiucket 功能完成，那么那么多機(jī)器，如何集中管理這些單版本呢。1、首先定義 fiucket 模塊要求所有節(jié)點(diǎn)都將被修改的配置文件保存至本地的，其中變量 fact_cartname 為獲取的 certname名自定義的fact 變量，如何自定義fact 可參考 HYPERLINK http:/k/2013/11/15/my- http:/k/2013/11/15/my-fact/備注：有以上模塊之后，只要在 file 模塊中添加 backup = main,，那么這個(gè)文件就會(huì)被保存到以上目錄中。2、定義 cntbucketdir 和 bucketdir參數(shù) cnt

3、bucketdir 為當(dāng) file 模塊中沒(méi)有定義 backup = main,時(shí)被保存的路徑，默認(rèn)在參數(shù) bucketdir 為使用 puppet fiucket backup file保存的路徑rootlinux57poc # cat /etc/puppet/puppet.confmainuser = puppet group = puppetvardir = /var/lib/puppetlogdir = /var/log/puppetrootlinuxmaster1poc manifests# cat site.pp import nodes/*.pp$puppetserver = p

4、uppetmas fiucket main:path = /puppet/ver/hosts/$fact_certname,/var/lib/puppet/cntbucket/puppet/ver/hosts/$fact_certname3、file 模塊中添加class puppet_linux57pocinclude puppet_linux57poc:motd,puppet_linux57poc:factsclass puppet_linux57poc:motd package setup:ensure = present,file /etc/motd:owner = root, gro

5、up = root, mode = 0400,content = template(puppet_linux57poc/motd.erb), backup = main,require = Packagesetup,class puppet_linux57poc:facts file /etc/mcollective/facts.txt:owner= root, group= root,backup = main,rundir = /var/run/puppet ssldir = $vardir/ssl pluginsync = truecntbucketdir = /puppet/ver/h

6、osts/puppet_linux57 bucketdir = /puppet/ver/hosts/puppet_linux57agentserver = puppetmasclassfile = $vardir/classes.txt localconfig = $vardir/localconfig runerval=86400report = trueauthconfig = /etc/puppet/namespaceauth.conf usecacheonfailure = falsecertname = puppet_linux57 environment = production#

7、listen = true#puppetport = 8139#bindaddress = 254、測(cè)試 fiucket 的恢復(fù)功能修改節(jié)點(diǎn)被管理的配置文件/etc/motd,然后運(yùn)行 puppet 命令還原rootlinux57poc # echo aa/etc/motd rootlinux57poc # puppet agent -t info: Retrieving plugininfo: Loading facts in /var/lib/puppet/lib/facter/fact_apply.rb info: Caching catalog for puppet_linux57in

8、fo: Applying configuration ver1386061716notice: /Stagemain/Mcollective:Facter/File/etc/mcollective/facts.yaml/content:- /etc/mcollective/facts.yaml 2013-12-03 17:26:35.000000000+ /tmp/puppet-file20131203-14159-i1qgrq-0 2013-12-03 17:56:59.000000000 -1,89 +1,89 。info: Fiucket adding md53997ee041b3277

9、fda12dbd849fac47e7info: /Stagemain/Mcollective:Facter/File/etc/mcollective/facts.yaml: Fiucketed /etc/mcollective/facts.yaml to main with sum 3997ee041b3277fda12dbd849fac47e7notice: /Stagemain/Puppet_linux57poc:Motd/File/etc/motd/content:- /etc/motd2013-12-03 17:56:49.000000000+ /tmp/puppet-file2013

10、1203-14159-1c90psx-02013-12-03 17:56:59.000000000 -7,4 +7,3 rubyver= 1.8.7.-aainfo: Fiucket adding md56db65f0eb756ee96ef8e615e914fa0eeinfo: /Stagemain/Puppet_linux57poc:Motd/File/etc/motd: Fiucketed /etc/motd to main with sum 6db65f0eb756ee96ef8e615e914fa0eenotice: /Stagemain/Puppet_linux57poc:Motd/

11、File/etc/motd/content: content changed md56db65f0eb756ee96ef8e615e914fa0ee to md57c6613a110541a050c8a8f51fc89dab2notice: Finished catalog run in 0.69 secondsmode= 0400,content = template(puppet_linux57poc/facts.txt.erb), backup = main,可以看到/etc/motd 的 MD5 值從6db65f0eb756ee96ef8e615e914fa0ee變成7c6613a11

12、0541a050c8a8f51fc89dab2rootlinux57poc # ll/puppet/ver/hosts/puppet_linux57/6/d/b/6/5/f/0/e/6db65f0eb756ee96ef8e615e914fa0ee/total 8-r-r- 1 n-rw-r- 1 nobody nobody nobody 311 Dec3 17:56 contentsobody10Dec3 17:56paths通過(guò) puppet fiucket 恢復(fù)如何集中管理呢，可以將所有節(jié)點(diǎn)那個(gè)目錄掛在到一臺(tái)服務(wù)器上，這樣就集中了，然后可以通過(guò)掃描命令進(jìn)行查看rootlinuxreport

13、poc # ll /puppet/ver/hosts total 12drwxr-x- 12 nobody nobody 4096 Dec 3 17:56 puppet_linux57drwxr-x- 10 nobody nobody 4096 Dec 3 17:08 puppet_linux58rootlinux57poc # puppet fiucket -local backup /etc/motd/etc/motd: 6db65f0eb756ee96ef8e615e914fa0eerootlinux57poc # ll/puppet/ver/hosts/puppet_linux57/6

14、/d/b/6/5/f/0/e/6db65f0eb756 ee96ef8e615e914fa0ee/total 8-r-r- 1 nobody nobody 311 Dec 3 17:56 contents-rw-r- 1 nobody nobody 10 Dec 3 17:56 paths rootlinux57poc #rootlinux57poc # /etc/motdrootlinux57poc # puppet fiucket -local restore /etc/motd 6db65f0eb756ee96ef8e615e914fa0eerootlinux57poc # cat /etc/motda few octer values myhostname = linux57poceth0_ip = 25kernel = 2.6.18-274.el5system release = Red Hat Entrise Linux Server release 5.7 (Tikanga) puppetver= 2.7.23rubyver= 1.8.7.-aaroo