????#????server??
???????2?????server12??????
????[root@server12 ~]# yum localinstall rubygems-1.3.7-1.el6.noarch.rpm -y
????[root@server12 ~]# yum install puppet-server -y
????/etc/puppet ??????:
?????????????:
????|-- puppet.conf #?????????????????????????? puppet --genconfig
????|-- fileserver.conf #????????????????
????|-- auth.conf #??????????
????|-- autosign.conf #?????????????
????|-- tagmail.conf #??????????(?????????????)
????#????洢??(puppet ????????????.PP ???<site.pp>)
????|-- manifests
????|--nodes
????| puppetclient.pp
????|-- site.pp #???? puppet ???????????????á?
????|-- modules.pp #???? class ????????(include syslog)
????|-- modules
????#???????
????|-- syslog
????#?? syslog ???
????|-- file
????|-- manifests
????|-- init.pp
????|-- templates
????#class ??????
????#?????????
????|-- syslog.erb #erb ???
????puppet ????????е????????/etc/puppet/manifest/site.pp????????????????????? ??????????????????????????á?
????[root@server12 ~]# touch /etc/puppet/manifests/site.pp #??д???? puppet master ???????????ú????????
????[root@server12 ~]# /etc/init.d/puppetmaster start
????[root@server12 ~]# netstat -antple
????tcp 0 0 0.0.0.0:8140 0.0.0.0:* LISTEN 52 8849 1302/ruby
?????:???????8140????????????.
????#????client??
???????2?????server34??????
????[root@server34 ~]# yum localinstall rubygems-1.3.7-1.el6.noarch.rpm -y
????[root@server34 ~]# yum install puppet -y
????puppet ?????????? puppet master:
????[root@server34 ~]# puppet agent --server server12.example.com --no-daemonize --verbose
????Info: Creating a new SSL key for server34.example.com
????Info: Caching certificate for ca
????Info: Creating a new SSL certificate request for server34.example.com
????Info: Certificate Request fingerprint (SHA256): 48:04:66:60:FF:A7:1E:34:04:2E:6E:8A:AE:A5:47:96:06:1E:CB:D0:0B:77:EA:E8:C1:A8:5D:01:85:AE:A0:DB
????client ?? master ??????????????????? master ???????????顣
????????--server ????????????? puppet master ???????????????????????“puppet”?????? ??????????????????????????/etc/sysconfig/puppet ????е? PUPPET_SERVER=puppet ???
????????--no-daemonize ?? puppet ?????????????
????????--verbose ?????????????????
???????2?????server12??????
????[root@server12 ~]# puppet cert list #??????е??????????
????"server34.example.com" (SHA256) 48:04:66:60:FF:A7:1E:34:04:2E:6E:8A:AE:A5:47:96:06:1E:CB:D0:0B:77:EA:E8:C1:A8:5D:01:85:AE:A0:DB
????[root@server12 ~]# puppet cert sign server34.example.com
????Notice: Signed certificate request for server34.example.com
????Notice: Removing file Puppet::SSL::CertificateRequest server34.example.com at '/var/lib/puppet/ssl/ca/requests/server34.example.com.pem'
??????????????????????????? agent ??(server34)???????????????:
????Info: Caching certificate for server34.example.com
????Starting Puppet client version 3.3.2
????Info: Caching certificate_revocation_list for ca
????Info: Retrieving plugin
????Info: Caching catalog for server34.example.com
????Info: Applying configuration version '1385280311'
????Info: Creating state file /var/lib/puppet/state/state.yaml
????Finished catalog run in 0.06 seconds
??????????????????飬???????????:
????puppet cert sign --all
????puppet cert clean server34.example.com #?????????
????#?????????
???????2?????server12??????
????[root@server12 ~]# vim /etc/puppet/puppet.conf
????[main]
????autosign=true #???????п????????
????…
????…
????[root@server12 ~]# vim /etc/puppet/autosign.conf
????*.example.com #??????????? example.com ???????
????[root@server12 ~]# /etc/init.d/puppetmaster reload
?????????????????client???????.
??????????????????? client ?????????????????????????????:
????(1)?? server ?????:puppet cert --clean server34.example.com #????????? client ????????
????(2)?? client ?????:rm -fr /var/lib/puppet/ssl/*
????puppet agent --server server12.example.com --daemonize --verbose
????#puppet ???????
???????????????????server??/etc/puppet/manifest/site.pp ????У?????????????????￡??????? ???????????? client ????Ч??
????1.???????
????[root@server12 ~]# vim /etc/puppet/manifests/site.pp
????node "server34.example.com"{
????file {"/var/www/html/index.html": content => "server34.example.com"??
????mode => 600?? #mode????????????????
????owner => puppet #owner?????????????????
????}
????}
????node "server20.example.com"{
????file {"/var/www/html/index.html": content => "server20.example.com"??
????mode => 644?? #mode????????????????
????owner => puppet #owner?????????????????
????}
????}
????????????client?????puppet agent --server server12.example.com --daemonize --verbose