目录

环境

SaltStack模块介绍

SaltStack常用模块之network

network.active_tcp

network.calc_net

network.connect

network.default_route

network.get_fqdn

network.get_hostname

network.get_route

network.hw_addr

network.ifacestartswith

 network.in_subnet

network.interface

network.interface_ip

network.interfaces

network.ip_addrs

network.netstat

network.ping

SaltStack常用模块之service

service.available

service.get_all

 service.disabled

service.enabled

service.reload

service.stop

service.start

service.restart

service.status

SaltStack常用模块之pkg

 pkg.file_list

pkg.group_info

pkg.group_list

pkg.list_downloaded

 pkg.install

 pkg.list_pkgs

pkg.owner

 pkg.remove

pkg.upgrade

SaltStack常用模块之state

 state.show_highstate

 state.show_state_usage

state.show_top

state.top

state.show_sls

SaltStack常用模块之user

---

环境

master	192.168.75.128
node1	192.168.75.150
node2	192.168.75.142
node3	192.168.75.143

主要使用master和node1两台主机

SaltStack模块介绍

Module是日常使用SaltStack接触最多的一个组件，其用于管理对象操作，这也是SaltStack通过Push的方式进行管理的入口，比如我们日常简单的执行命令、查看包安装情况、查看服务运行情况等工作都是通过SaltStack Module来实现的。

当安装好Master和Minion包后，系统上会安装很多Module，大家可以通过以下命令查看支持的所有Module列表

[root@master ~]# salt '*' test.ping
node2:True
node1:True
node3:True
master:True
[root@master ~]# //查看node1主机所有module列表
node1:- acl- aliases- alternatives- apache- archive- artifactory- at......- vbox_guest- virtualenv- vsphere- webutil- xfs- zenoss//查看指定module的所有function
[root@master ~]# salt 'node1' sys.list_functions cmd
node1:- cmd.exec_code- cmd.exec_code_all- cmd.has_exec- cmd.powershell- cmd.powershell_all- cmd.retcode- cmd.run- cmd.run_all- cmd.run_bg- cmd.run_chroot- cmd.run_stderr- cmd.run_stdout- cmd.script- cmd.script_retcode- cmd.shell- cmd.shell_info- cmd.shells- cmd.tty- cmd.which- cmd.which_bin//查看指定module的用法
[root@master ~]# salt 'node1' sys.doc user
user.add:Add a user to the minionnameUsername LOGIN to adduidUser ID of the new accountgidName or ID of the primary group of the new accountgroupsList of supplementary groups of the new accounthomeHome directory of the new accountshellLogin shell of the new accountuniqueIf not True, the user account can have a non-unique UIDsystemCreate a system accountfullnameGECOS field for the full nameroomnumberGECOS field for the room numberworkphoneGECOS field for the work phonehomephoneGECOS field for the home phoneotherGECOS field for other informationcreatehomeCreate the user's home directoryloginclassLogin class for the new account (OpenBSD)nologinitDo not add the user to the lastlog and faillog databasesrootDirectory to chroot intousergroupCreate and add the user to a new primary group of the same nameCLI Example:salt '*' user.add name <uid> <gid> <groups> <home> <shell>user.chfullname:Change the user's Full NamenameUser to modifyfullnameGECOS field for the full namerootDirectory to chroot intoCLI Example:salt '*' user.chfullname foo "Foo Bar"user.chgid:Change the default group of the usernameUser to modifygidForce use GID as new primary grouprootDirectory to chroot intoCLI Example:salt '*' user.chgid foo 4376user.chgroups:Change the groups to which this user belongsnameUser to modifygroupsGroups to set for the userappend : FalseIf ``True``, append the specified group(s). Otherwise, this functionwill replace the user's groups with the specified group(s).rootDirectory to chroot intoCLI Examples:salt '*' user.chgroups foo wheel,rootsalt '*' user.chgroups foo wheel,root append=Trueuser.chhome:Change the home directory of the user, pass True for persist to move filesto the new home directory if the old home directory exist.nameUser to modifyhomeNew home directory for the user accountpersistMove contents of the home directory to the new locationrootDirectory to chroot intoCLI Example:salt '*' user.chhome foo /home/users/foo Trueuser.chhomephone:Change the user's Home PhonenameUser to modifyhomephoneGECOS field for the home phonerootDirectory to chroot intoCLI Example:salt '*' user.chhomephone foo 7735551234user.chloginclass:Change the default login class of the usernameUser to modifyloginclassLogin class for the new accountrootDirectory to chroot intoNote:This function only applies to OpenBSD systems.CLI Example:salt '*' user.chloginclass foo staffuser.chother:Change the user's other GECOS attributenameUser to modifyotherGECOS field for other informationrootDirectory to chroot intoCLI Example:salt '*' user.chother foobaruser.chroomnumber:Change the user's Room NumberCLI Example:salt '*' user.chroomnumber foo 123user.chshell:Change the default shell of the usernameUser to modifyshellNew login shell for the user accountrootDirectory to chroot intoCLI Example:salt '*' user.chshell foo /bin/zshuser.chuid:Change the uid for a named usernameUser to modifyuidNew UID for the user accountrootDirectory to chroot intoCLI Example:salt '*' user.chuid foo 4376user.chworkphone:Change the user's Work PhonenameUser to modifyworkphoneGECOS field for the work phonerootDirectory to chroot intoCLI Example:salt '*' user.chworkphone foo 7735550123user.delete:Remove a user from the minionnameUsername to deleteremoveRemove home directory and mail spoolforceForce some actions that would fail otherwiserootDirectory to chroot intoCLI Example:salt '*' user.delete name remove=True force=Trueuser.get_loginclass:Get the login class of the usernameUser to get the informationNote:This function only applies to OpenBSD systems.CLI Example:salt '*' user.get_loginclass foouser.getent:Return the list of all info for all usersrefreshForce a refresh of user informationrootDirectory to chroot intoCLI Example:salt '*' user.getentuser.info:Return user informationnameUser to get the informationrootDirectory to chroot intoCLI Example:salt '*' user.info rootuser.list_groups:Return a list of groups the named user belongs tonameUser to get the informationCLI Example:salt '*' user.list_groups foouser.list_users:Return a list of all usersrootDirectory to chroot intoCLI Example:salt '*' user.list_usersuser.primary_group:Return the primary group of the named userNew in version 2016.3.0nameUser to get the informationCLI Example:salt '*' user.primary_group saltadminuser.rename:Change the username for a named usernameUser to modifynew_nameNew value of the login namerootDirectory to chroot intoCLI Example:salt '*' user.rename name new_name[root@master ~]# //SaltStack默认也支持一次执行多个Module，Module之间通过逗号隔开，默认传参之间也是用逗号分隔，也支持指定传参分隔符号--args-separator=@即可
[root@master ~]# salt 'node1' test.echo,cmd.run,service.status hello,hostname,salt-minion
node1:----------cmd.run:node1service.status:Truetest.echo:hello

SaltStack常用模块之network

network.active_tcp

返回所有活动的tcp连接

[root@master ~]# salt 'node1' network.active_tcp
node1:----------0:----------local_addr:192.168.75.150local_port:34226remote_addr:192.168.75.128remote_port:4505

network.calc_net

通过IP和子网掩码计算出网段

[root@master ~]# salt 'node1' network.calc_net 192.168.75.255 255.255.255.0
node1:192.168.75.0/24
[root@master ~]# 

network.connect

测试minion至某一台服务器的网络是否连通

//ping www.biying.cn网站
[root@master ~]# salt 'node1' network.connect biying.cn 80
node1:----------comment:Successfully connected to biying.cn (202.89.233.101) on tcp port 80result:True
[root@master ~]# 

network.default_route

查看默认路由

[root@master ~]# salt 'node1' network.default_route
node1:|_----------addr_family:inetdestination:0.0.0.0flags:UGgateway:192.168.75.2interface:ens33netmask:0.0.0.0
[root@master ~]# 

network.get_fqdn

查看主机的fqdn(完全限定域名)

[root@master ~]# salt '*' network.get_fqdn
master:master
node2:node2
node1:node1
node3:node3

network.get_hostname

获取主机名

[root@master ~]# salt '*' network.get_hostname
node1:node1
node3:node3
node2:node2
master:master

network.get_route

查询到一个目标网络的路由信息

[root@master ~]# salt 'node1' network.get_route 192.168.75.150
node1:----------destination:192.168.75.150gateway:Noneinterface:losource:192.168.75.150

network.hw_addr

返回指定网卡的MAC地址

[root@master ~]# salt '*' network.hw_addr ens33
node1:00:0c:29:bf:1c:fe
node2:00:0c:29:37:f5:bc
node3:Interface "ens33" not in available interfaces: "lo", "ens160", "virbr0", "virbr0-nic"
master:Interface "ens33" not in available interfaces: "lo", "ens160", "virbr0", "virbr0-nic"
[root@master ~]# 

network.ifacestartswith

从特定CIDR检索接口名称

[root@master ~]# salt '*' network.ifacestartswith 192.168
node2:- ens33
node1:- ens33
node3:- ens160- virbr0
master:- ens160- virbr0

 network.in_subnet

判断当前主机是否在某一个网段内

[root@master ~]# salt 'node1' network.in_subnet 192.168.66.0/24
node1:False
[root@master ~]# salt 'node1' network.in_subnet 192.168.75.0/24
node1:True
[root@master ~]# 

network.interface

返回指定网卡的信息

[root@master ~]# salt '*' network.interface ens33
node2:|_----------address:192.168.75.142broadcast:192.168.75.255label:ens33netmask:255.255.255.0
node1:|_----------address:192.168.75.150broadcast:192.168.75.255label:ens33netmask:255.255.255.0
node3:Interface "ens33" not in available interfaces: "lo", "ens160", "virbr0", "virbr0-nic"
master:Interface "ens33" not in available interfaces: "lo", "ens160", "virbr0", "virbr0-nic"
[root@master ~]# 

network.interface_ip

返回指定网卡的IP地址

[root@master ~]# salt '*' network.interface_ip ens33
node1:192.168.75.150
node2:192.168.75.142
node3:Interface "ens33" not in available interfaces: "lo", "ens160", "virbr0", "virbr0-nic"
master:Interface "ens33" not in available interfaces: "lo", "ens160", "virbr0", "virbr0-nic"
[root@master ~]# 

network.interfaces

返回当前系统中所有的网卡信息

[root@master ~]# salt 'node1' network.interfaces
node1:----------ens33:----------hwaddr:00:0c:29:bf:1c:feinet:|_----------address:192.168.75.150broadcast:192.168.75.255label:ens33netmask:255.255.255.0inet6:|_----------address:fe80::5e93:d112:1456:d433prefixlen:64scope:linkup:Truelo:----------hwaddr:00:00:00:00:00:00inet:|_----------address:127.0.0.1broadcast:Nonelabel:lonetmask:255.0.0.0inet6:|_----------address:::1prefixlen:128scope:hostup:True
[root@master ~]# 

network.ip_addrs

返回一个IPv4的地址列表
该函数将会忽略掉127.0.0.1的地址

[root@master ~]# salt '*' network.ip_addrs
node2:- 192.168.75.142
node1:- 192.168.75.150
node3:- 192.168.75.143- 192.168.122.1
master:- 192.168.75.128- 192.168.122.1

network.netstat

返回所有打开的端口和状态

[root@master ~]# salt 'node1' network.netstat
node1:|_----------inode:17757local-address:127.0.0.1:323program:chronydproto:udprecv-q:0remote-address:*:*send-q:0user:0|_----------inode:17926local-address:*:68program:dhclientproto:udprecv-q:0remote-address:*:*send-q:0user:0|_----------inode:17758local-address:::1:323program:chronydproto:udprecv-q:0remote-address::::*send-q:0user:0|_----------inode:21627local-address:*:22program:sshdproto:tcprecv-q:0remote-address:*:*send-q:128state:LISTENuser:0|_----------inode:22571local-address:127.0.0.1:25program:masterproto:tcprecv-q:0remote-address:*:*send-q:100state:LISTENuser:0|_----------inode:21322local-address:192.168.75.150:34226program:salt-minionproto:tcprecv-q:0remote-address:192.168.75.128:4505send-q:0state:ESTABLISHEDuser:0|_----------inode:0local-address:192.168.75.150:54972program:proto:tcprecv-q:0remote-address:192.168.75.128:4506send-q:0state:TIME-WAITuser:0|_----------inode:0local-address:192.168.75.150:54974program:proto:tcprecv-q:0remote-address:192.168.75.128:4506send-q:0state:TIME-WAITuser:0|_----------inode:21629local-address::::22program:sshdproto:tcprecv-q:0remote-address::::*send-q:128state:LISTENuser:0|_----------inode:22572local-address:::1:25program:masterproto:tcprecv-q:0remote-address::::*send-q:100state:LISTENuser:0
[root@master ~]#

network.ping

使用ping命令测试到某主机的连通性

[root@master ~]# salt 'node1' network.ping biying.cn
node1:PING biying.cn (202.89.233.101) 56(84) bytes of data.64 bytes from 202.89.233.101 (202.89.233.101): icmp_seq=1 ttl=128 time=27.8 ms64 bytes from 202.89.233.101 (202.89.233.101): icmp_seq=2 ttl=128 time=160 ms64 bytes from 202.89.233.101 (202.89.233.101): icmp_seq=3 ttl=128 time=38.2 ms64 bytes from 202.89.233.101 (202.89.233.101): icmp_seq=4 ttl=128 time=50.2 ms--- biying.cn ping statistics ---4 packets transmitted, 4 received, 0% packet loss, time 3004msrtt min/avg/max/mdev = 27.859/69.175/160.375/53.247 ms

SaltStack常用模块之service

service.available

判断指定的服务是否可用

[root@master ~]# salt '*' service.available sshd
node2:True
node3:True
node1:True
master:True
[root@master ~]# salt '*' service.available nginx
node3:False
node2:True
node1:False
master:False

service.get_all

获取所有正在运行的服务

[root@master ~]# salt 'node1' service.get_all
node1:- NetworkManager- NetworkManager-dispatcher- NetworkManager-wait-online- auditd
......

 service.disabled

检查指定服务是否开机不自动启动

[root@master ~]# salt 'node2' service.disabled nginx
node2:True
[root@master ~]# 

service.enabled

检查指定服务是否开机自动启动

[root@master ~]# salt 'node1' service.enable httpd
node1:True

service.reload

重新加载指定服务

[root@master ~]# salt 'node2' service.reload nginx
node2:True

service.stop

停止指定服务

[root@master ~]# salt 'node2' service.stop nginx
node2:True

service.start

启动指定服务

[root@master ~]# salt 'node2' service.start nginx
node2:True

service.restart

重启指定服务

[root@master ~]# salt 'node2' service.restart nginx
node2:True

service.status

查看指定服务的状态

[root@master ~]# salt 'node2' service.status nginx
node2:True

SaltStack常用模块之pkg

 pkg.download

只下载软件包但不安装
此功能将会下载指定的软件包，但是需要在minion端安装yum-utils，可以使用 cmd.run 进行远程安装

[root@master ~]# salt '*' pkg.download wget
master:----------wget:/var/cache/yum/packages/wget-1.19.5-10.el8.x86_64.rpm
node2:----------wget:/var/cache/yum/packages/wget-1.19.5-10.el8.x86_64.rpm
node3:----------wget:/var/cache/yum/packages/wget-1.19.5-10.el8.x86_64.rpm
node1:----------wget:/var/cache/yum/packages/wget-1.14-18.el7_6.1.x86_64.rpm

 pkg.file_list

列出指定包或系统中已安装的所有包的文件

[root@master ~]# salt 'node1' pkg.file_list httpd
node1:----------errors:files:- /etc/httpd- /etc/httpd/conf- /etc/httpd/conf.d- /etc/httpd/conf.d/README- /etc/httpd/conf.d/autoindex.conf- /etc/httpd/conf.d/userdir.conf- /etc/httpd/conf.d/welcome.conf- /etc/httpd/conf.modules.d- /etc/httpd/conf.modules.d/00-base.conf- /etc/httpd/conf.modules.d/00-dav.conf- /etc/httpd/conf.modules.d/00-lua.conf- /etc/httpd/conf.modules.d/00-mpm.conf- /etc/httpd/conf.modules.d/00-proxy.conf- /etc/httpd/conf.modules.d/00-systemd.conf- /etc/httpd/conf.modules.d/01-cgi.conf- /etc/httpd/conf/httpd.conf- /etc/httpd/conf/magic- /etc/httpd/logs
......//当不提供参数时，将会列出当前系统中所有已安装软件的文件列表
[root@master ~]# salt 'node1' pkg.file_list 
node1:----------errors:files:VALUE_TRIMMED

pkg.group_info

查看包组的信息

[root@master ~]# salt 'node1' pkg.group_info 'Development Tools'
node1:----------conditional:default:- byacc- cscope- ctags- diffstat- doxygen- elfutils- gcc-gfortran- git- indent- intltool- patchutils- rcs- subversion- swig- systemtapdescription:A basic development environment.group:Development Toolsid:developmentmandatory:- autoconf- automake- binutils- bison- flex- gcc- gcc-c++- gettext- libtool- make- patch- pkgconfig- redhat-rpm-config- rpm-build- rpm-signoptional:- ElectricFence- ant- babel- bzr- ccache- chrpath- clips- clips-devel- clips-doc- clips-emacs- clips-xclips- clipsmm-devel- clipsmm-doc- cmake- cmucl- colordiff- compat-gcc-44- compat-gcc-44-c++- cvs- cvsps- darcs- dejagnu- email2trac- expect- ftnchek- gcc-gnat- gcc-objc- gcc-objc++- ghc- git- haskell-platform- imake- javapackages-tools- ksc- lua- mercurial- mock- mod_dav_svn- nasm- nqc- nqc-doc- ocaml- perltidy- qgit- rpmdevtools- rpmlint- sbcl- scorep- systemtap-sdt-devel- systemtap-server- trac- trac-git-plugin- trac-mercurial-plugin- trac-webadmin- translate-toolkittype:package group
[root@master ~]# 

pkg.group_list

列出系统中所有的包组

[root@master ~]# salt 'node1' pkg.group_list
node1:----------available:- Additional Development- Anaconda Tools- Backup Client- Backup Server- Base- Buildsystem building group- CentOS Linux Client product core- CentOS Linux ComputeNode product core- CentOS Linux Server product core- CentOS Linux Workstation product core- Cinnamon- Common NetworkManager submodules- Compatibility Libraries- Conflicts (Client)- Conflicts (ComputeNode)- Conflicts (Server)- Conflicts (Workstation)- Console Internet Tools- Core- DNS Name Server- Debugging Tools- Desktop Debugging and Performance Tools- Development Tools- Dial-up Networking Support- Directory Client- Directory Server- E-mail Server- Educational Software- Electronic Lab- Emacs- FTP Server- Fedora Packager- File and Storage Server- Fonts- GNOME- GNOME Applications- General Purpose Desktop- Graphical Administration Tools- Graphics Creation Tools- Guest Agents- Guest Desktop Agents- Hardware Monitoring Utilities- Haskell- High Availability- Hyper-v platform specific packages- Identity Management Server- Infiniband Support- Input Methods- Internet Applications- Internet Browser- Java Platform- KDE- KDE Applications- KDE Multimedia Support- KVM platform specific packages- LXQt Desktop- Large Systems Performance- Legacy UNIX Compatibility- Legacy X Window System Compatibility- Load Balancer- MATE- Mainframe Access- MariaDB Database Client- MariaDB Database Server- Milkymist- Multimedia- Network File System Client- Network Infrastructure Server- Networking Tools- Office Suite and Productivity- PHP Support- Performance Tools- Perl Support- Perl for Web- Platform Development- PostgreSQL Database Client- PostgreSQL Database Server- Print Server- Printing Client- Python- Remote Desktop Clients- Remote Management for Linux- Resilient Storage- Ruby Support- Scientific Support- Security Tools- Smart Card Support- System Administration Tools- System Management- Technical Writing- TurboGears application framework- VMware platform specific packages- Virtualization Client- Virtualization Hypervisor- Virtualization Platform- Virtualization Tools- Web Server- Web Servlet Engine- X Window System- Xfceavailable environments:- Minimal Install- Compute Node- Infrastructure Server- File and Print Server- Cinnamon Desktop- MATE Desktop- Basic Web Server- Virtualization Host- Server with GUI- GNOME Desktop- KDE Plasma Workspaces- Development and Creative Workstationavailable languages:----------installed:installed environments:
[root@master ~]# 

pkg.list_downloaded

列出已下载到本地的软件包

[root@master ~]# salt 'node1' pkg.list_downloaded
node1:----------wget:----------1.14-18.el7_6.1:----------creation_date_time:2021-11-03T15:09:58creation_date_time_t:1635923398path:/var/cache/yum/packages/wget-1.14-18.el7_6.1.x86_64.rpmsize:560272
[root@master ~]# 

 pkg.install

安装软件

[root@master ~]# salt 'node3' pkg.install nginx
node3:----------nginx:----------new:1:1.14.1-9.module_el8.0.0+184+e34fea82old:nginx-all-modules:----------new:1:1.14.1-9.module_el8.0.0+184+e34fea82old:nginx-filesystem:----------new:1:1.14.1-9.module_el8.0.0+184+e34fea82old:nginx-mod-http-image-filter:----------new:1:1.14.1-9.module_el8.0.0+184+e34fea82old:nginx-mod-http-perl:----------new:1:1.14.1-9.module_el8.0.0+184+e34fea82old:nginx-mod-http-xslt-filter:----------new:1:1.14.1-9.module_el8.0.0+184+e34fea82old:nginx-mod-mail:----------new:1:1.14.1-9.module_el8.0.0+184+e34fea82old:nginx-mod-stream:----------new:1:1.14.1-9.module_el8.0.0+184+e34fea82old:
[root@master ~]# 

 pkg.list_pkgs

以字典的方式列出当前已安装的软件包

[root@master ~]# salt 'node1' pkg.list_pkgs
node1:----------GeoIP:1.5.0-11.el7NetworkManager:1:1.10.2-13.el7NetworkManager-libnm:1:1.10.2-13.el7NetworkManager-team:1:1.10.2-13.el7NetworkManager-tui:1:1.10.2-13.el7acl:
......

pkg.owner

列出指定文件是由哪个包提供的

[root@master ~]# salt 'node2' pkg.owner /usr/sbin/nginx
node2:nginx

 pkg.remove

卸载指定软件

[root@master ~]# salt 'node1' pkg.remove httpd
node1:----------httpd:----------new:old:2.4.6-97.el7.centos.1
//若要卸载多个文件，中间需要用逗号隔开

pkg.upgrade

升级系统中所有的软件包或升级指定的软件包

[root@master ~]# salt 'node1' pkg.upgrade name=openssl
node1:----------openssl:----------new:1:1.0.2k-22.el7_9old:1:1.0.2k-12.el7openssl-libs:----------new:1:1.0.2k-22.el7_9old:1:1.0.2k-12.el7

SaltStack常用模块之state

 state.show_highstate

显示当前系统中有哪些高级状态

[root@master ~]# salt '*' state.show_highstate
node1:----------mysql-install:----------__env__:base__sls__:database.mariadb.installpkg:|_----------name:mariadb-server- installed|_----------order:10000mysql-service:----------__env__:base__sls__:database.mariadb.installservice:|_----------name:mariadb|_----------enable:ture- running|_----------order:10001
node3:----------mysql-install:----------__env__:base__sls__:database.mariadb.installpkg:|_----------name:mariadb-server- installed|_----------order:10000mysql-service:----------__env__:base__sls__:database.mariadb.installservice:|_----------name:mariadb|_----------enable:ture- running|_----------order:10001
master:----------mysql-install:----------__env__:base__sls__:database.mariadb.installpkg:|_----------name:mariadb-server- installed|_----------order:10000mysql-service:----------__env__:base__sls__:database.mariadb.installservice:|_----------name:mariadb|_----------enable:ture- running|_----------order:10001
node2:----------mysql-install:----------__env__:base__sls__:database.mariadb.installpkg:|_----------name:mariadb-server- installed|_----------order:10000mysql-service:----------__env__:base__sls__:database.mariadb.installservice:|_----------name:mariadb|_----------enable:ture- running|_----------order:10001
[root@master ~]# 

 state.show_state_usage

显示当前系统中的高级状态执行情况

[root@master ~]# salt 'node1' state.show_state_usage
node1:----------base:----------count_all:2count_unused:1count_used:1unused:- topused:- web.apache.installtest:----------count_all:0count_unused:0count_used:0unused:used:

state.show_top

返回minion将用于highstate的顶级数据

[root@master ~]# salt 'node1' state.show_top
node1:----------base:- web.apache.apache

state.top

执行指定的top file，而不是默认的

[root@master ~]# salt 'node1' state.show_sls web.apache.install
node1:----------apache-install:----------__env__:base__sls__:web.apache.installpkg:|_----------name:httpd- installed|_----------order:10000apache-service:----------__env__:base__sls__:web.apache.installservice:|_----------name:httpd|_----------enable:True- running|_----------order:10001

state.show_sls

显示 master 上特定sls或sls文件列表中的状态数据

[root@master salt]# salt 'node1' state.show_sls web.apache.install
node1:----------apache-install:----------__env__:base__sls__:web.apache.installpkg:|_----------name:httpd- installed|_----------order:10000apache-service:----------__env__:base__sls__:web.apache.installservice:|_----------name:httpd|_----------enable:ture- running|_----------order:10001
[root@master salt]# 

SaltStack常用模块之user

user.add

创建用户

[root@master ~]# salt 'node1' user.add yang
node1:True
[root@master ~]# salt 'node1' cmd.run 'id yang'
node1:uid=1001(yang) gid=1001(yang) groups=1001(yang)

user.chuid

更改用户uid

[root@master ~]# salt 'node1' user.chuid yang 666
node1:True
[root@master ~]# salt 'node1' cmd.run 'id yang'
node1:uid=666(yang) gid=1001(yang) groups=1001(yang)

user.chgid

更改用户gid

[root@master ~]# salt 'node1' user.chgid yang 888
node1:True
[root@master ~]# salt 'node1' cmd.run 'id yang'
node1:uid=666(yang) gid=1001(yang) groups=888(yang)

user.chgroups

更改用户属组，追加指定用户组

[root@master ~]# salt 'node1' user.chgroups yang root true
node1:True
[root@master ~]# salt 'node1' cmd.run 'id yang'
node1:uid=666(yang) gid=1001(yang) groups=888(yang),0(root)

user.delete

删除用户

[root@master ~]# salt 'node1' user.delete yang remove=True force=True
node1:True
[root@master ~]# salt 'node1' cmd.run 'id yang'
node1:id: yang: no such user
ERROR: Minions returned with non-zero exit code