Salt-minion被控端批量安装

环境说明: 必须有脚本和压缩包

Centos8系统，3台主机及以上（包括控制端）

[root@master ~]# tree
.
├── anaconda-ks.cfg
├── expect-key.sh  //主页脚本可以下载，文章有脚本内容 
├
│   
│       
├
└── minion-install.tar.gz //主页脚本可以下载，文章有脚本内容
############################################################################################
//没有下载脚本，需要的操作
//minion-install.tar.gz 结构tree 
.
├── minion-install.sh
└── soft└── salt.repo
[root@master ~]# mkdir soft/
[root@master ~]# vim soft/salt.repo 
[salt-latest-repo]
name=Salt repo for RHEL/CentOS 8 PY3
baseurl=https://repo.saltproject.io/py3/redhat/8/x86_64/latest
skip_if_unavailable=True
failovermethod=priority
enabled=1
enabled_metadata=1
gpgcheck=1
gpgkey=https://repo.saltproject.io/py3/redhat/8/x86_64/latest/SALTSTACK-GPG-KEY.pub//minion-install.sh脚本
#!/bin/bash#控制端ip
d=192.168.143.101
#yum源操作
cp soft/salt.repo /etc/yum.repos.d/
yum clean all &>/dev/null
yum -y install salt-minion
#修改配置文件
sed -i "/^#master:/a master: $d" /etc/salt/minion
systemctl enable --now salt-minion.service
systemctl restart salt-minion.service//产生压缩包minion-install.tar.gz
tar -zcf minion-install.tar.gz minion-install.sh soft/

第一步做免密登入，下载主页脚本可以不用写，直接运行脚本

#!/bin/bash#定义变量
d=192.168.143
SERVERS="$d.102 $d.103 $d.104 $d.105"
PASSWD="1"
#安装软件
echo "正在安装软件"
yum install -y expect &>/dev/null
#生成密钥
key_generate() {expect -c "set timeout -1;spawn ssh-keygen -t rsa;expect {{Enter file in which to save the key*} {send -- \r;exp_continue}{Enter passphrase*} {send -- \r;exp_continue}{Enter same passphrase again:} {send -- \r;exp_continue}{Overwrite (y/n)*} {send -- n\r;exp_continue}eof             {exit 0;}};"
}key_generate
#copy密钥
function sshcopyid 
{expect -c "set timeout -1;spawn ssh-copy-id $1;expect {\"yes/no\" { send \"yes\r\" ;exp_contine; }\"password:\" { send \"$PASSWD\r\";exp_continue; }};expect eof;"
} for server in $SERVERS
dosshcopyid $serverdone#重复2次
function sshcopyid 
{expect -c "set timeout -1;spawn ssh-copy-id $1;expect {\"yes/no\" { send \"yes\r\" ;exp_contine; }\"password:\" { send \"$PASSWD\r\";exp_continue; }};expect eof;"
} for server in $SERVERS
dosshcopyid $serverdonefunction sshcopyid 
{expect -c "set timeout -1;spawn ssh-copy-id $1;expect {\"yes/no\" { send \"yes\r\" ;exp_contine; }\"password:\" { send \"$PASSWD\r\";exp_continue; }};expect eof;"
} for server in $SERVERS
dosshcopyid $serverdone
echo "免密操作完成" 

//执行脚本
/bin/bash expect-key.sh

第二步做批量传输与解压

for i in 192.168.143.{105..106};do scp minion-install.tar.gz $i:.;donefor i in 192.168.143.{105..106};do ssh root@$i 'tar xf minion-install.tar.gz';done

第三步做执行

for i in 192.168.143.{105..106};do ssh root@$i '/bin/bash minion-install.sh';done

最终达到的效果

[root@master ~]# salt-key -L
Accepted Keys:
Denied Keys:
Unaccepted Keys:
node5
node6
Rejected Keys:
minion