salt init system

# salt init system

---

## 一 环境规划

### 实验

$ vim /etc/hosts

```python
172.16.237.131  salt-master
172.16.237.133  salt-api-1
172.16.237.135  salt-ssh
```

### salt 配置

$ vim /etc/salt/master
    
```python
interface: 172.16.237.131

file_roots:
  base:
    - /srv/salt/base
  prod:
    - /srv/salt/prod

pillar_roots:
  base:
    - /srv/pillar/base
  prod:
    - /srv/pillar/prod
```
   
### crate foler

$ mkdir -p /srv/salt/{base,prod}
    $ mkdir -p /srv/pillar/{base,prod}
   
   
### folder

$ tree /srv/

```python

```
    
### restart salt

$ /etc/init.d/salt-master restart

## 二、系统初始化

$ mkdir /srv/salt/base/init

### 1 setting DNS

$ vim /srv/salt/base/init/dns.sls

```python
/etc/resolv.conf:
    file.managed:
        - source: salt://init/files/resolv.conf
        - user: root
        - group: root
        - mode: 644
```

$ mkdir /srv/salt/base/init/files/

$ cp /etc/resolv.conf /srv/salt/base/init/files/
    
```python
; generated by /sbin/dhclient-script
search localdomain
nameserver 172.16.237.2
```

### 2 History 记录时间

$ vim /srv/salt/base/init/history.sls

```python
/etc/profile:
    file.append:
        - text:
            - export HISTTIMEFORMAT="%F %T `whoami` "
```

### 3 命令操作审计

```python
/etc/bashrc:
    file.append:
        - text:
            - export PROMPT_COMMAND='{ msg=$(history 1 | { read x y; echo $y; });logger "[euid=$(whoami)]":$(who am i):['prod']"$msg"; }'

```

### 4 system kernel setting

$ vim /srv/salt/base/init/sysctl.sls

```python
net.ipv4.ip_local_port_range:
    sysctl.present:
        - value: 10000 65000
fs.file_max:
    sysctl.present:
        - value: 2000000
net.ipv4.ip_forward:
    sysctl.present:
        - value: 1
vm.swappiness:
    sysctl.present:
        - value: 0

```

### 5 EPEL repo

$ vim /srv/salt/base/init/epel.sls
    
```python
yum_repo_release:
    pkg.installed:
        - sources:
            - epel-release: http://mirrors.aliyun.com/epel/epel-release-latest-6.noarch.rpm
        - unless: rpm -qa | grep epel-release-6
```

### 6 system init env

$ vim /srv/salt/base/init/env_init.sls
    
```python
include:
    - init.dns
    - init.history
    - init.audit
    - init.sysctl
    - init.epel

```

### 7 salt base top

$ vim /srv/salt/base/top.sls

```python
base:
    '*':
    - init.env_init

```

## 三 run salt state

$ salt 'salt-api-1' state.highstate test=True

### log

```python
salt-api-1:
----------
          ID: /etc/resolv.conf
    Function: file.managed
      Result: True
     Comment: The file /etc/resolv.conf is in the correct state
     Started: 13:06:17.000396
    Duration: 82.762 ms
     Changes:
----------
          ID: /etc/profile
    Function: file.append
      Result: None
     Comment: File /etc/profile is set to be updated
     Started: 13:06:17.084209
    Duration: 13.052 ms
     Changes:
              ----------
              diff:
                  ---

+++

@@ -76,3 +76,4 @@

unset i
                   unset -f pathmunge
                  +export HISTTIMEFORMAT="%F %T `whoami` "
----------
          ID: /etc/bashrc
    Function: file.append
      Result: None
     Comment: File /etc/bashrc is set to be updated
     Started: 13:06:17.097518
    Duration: 9.472 ms
     Changes:
              ----------
              diff:
                  ---

+++

@@ -84,3 +84,4 @@

unset pathmunge
                   fi
                   # vim:ts=4:sw=4
                  +export PROMPT_COMMAND='{ msg=$(history 1 | { read x y; echo $y; });logger "[euid=$(whoami)]":$(who am i):['prod']"$msg"; }'
----------
          ID: net.ipv4.ip_local_port_range
    Function: sysctl.present
      Result: None
     Comment: Sysctl option net.ipv4.ip_local_port_range set to be changed to 10000 65000
     Started: 13:06:17.116376
    Duration: 58.264 ms
     Changes:
----------
          ID: fs.file_max
    Function: sysctl.present
      Result: None
     Comment: Sysctl option fs.file_max would be changed to 2000000
     Started: 13:06:17.175017
    Duration: 50.671 ms
     Changes:
----------
          ID: net.ipv4.ip_forward
    Function: sysctl.present
      Result: None
     Comment: Sysctl option net.ipv4.ip_forward would be changed to 1
     Started: 13:06:17.226083
    Duration: 69.091 ms
     Changes:
----------
          ID: vm.swappiness
    Function: sysctl.present
      Result: None
     Comment: Sysctl option vm.swappiness set to be changed to 0
     Started: 13:06:17.295580
    Duration: 44.913 ms
     Changes:
----------
          ID: yum_repo_release
    Function: pkg.installed
      Result: True
     Comment: unless condition is true
     Started: 13:06:19.160673
    Duration: 3090.546 ms
     Changes:

Summary for salt-api-1
------------
Succeeded: 8 (unchanged=6, changed=2)
Failed:    0
------------
Total states run:     8
Total run time:   3.419 s

```