foreman架构的引入3-安装Foreman1.5.3架构（all-in-one）
零基础学习Puppet自动化配置管理系列文档 注意：本实验是在离线情况下安装的，所以需要在本地创建自己的yum仓库，创建方法可参考《如何根据版本制作属于自己的puppet yum源》，如何你实在是比较懒或者搞不定rpm包之间的依赖关系，那就去我的github上下载吧：https://github.com/kisspuppet/foreman-repo 更多安装细节请参考官网：http://theforeman.org/manuals/1.5/index.html#Releasenotesfor1.5.4 以下all-in-one安装方式跟官方安装的有所区别，官方安装可能只需要一条命令就可以安装成功，在我测试下来发现会出现有时候成功，有时候不 成功的现象，所以改成了以下方式安装，而且每次都能成功，条例也比较清晰，为后面拆分puppetmaster能够提供很好的帮助。 1、软件包的选型如下： puppet-server 3.6.2 puppet 3.6.2 facter 2.0.2 mcollective 2.2.4 rabbitmq-server 3.2.4 foreman 1.5.3 foreman-proxy 1.5.4 2、系统环境准备 系统版本： [root@foreman02yum.repos.d]#cat/etc/redhat-release RedHatEnterpriseLinuxServerrelease6.5(Santiago) 网络参数： [root@foreman02yum.repos.d]#ipaddr 1:lo:<LOOPBACK,UP,LOWER_UP>mtu16436qdiscnoqueuestateUNKNOWN link/loopback00:00:00:00:00:00brd00:00:00:00:00:00 inet127.0.0.1/8scopehostlo inet6::1/128scopehost valid_lftforeverpreferred_lftforever 2:eth0:<BROADCAST,MULTICAST,UP,LOWER_UP>mtu1500qdiscpfifo_faststateUPqlen1000 link/ether00:50:56:a6:5c:70brdff:ff:ff:ff:ff:ff inet192.168.10.159/24brd192.168.10.255scopeglobaleth0 inet6fe80::250:56ff:fea6:5c70/64scopelink valid_lftforeverpreferred_lftforever 主机名称： [root@foreman02yum.repos.d]#hostname-f foreman02.kisspuppet.com [root@foreman02yum.repos.d]#cat/etc/hosts 127.0.0.1localhostlocalhost.localdomainlocalhost4localhost4.localdomain4 ::1localhostlocalhost.localdomainlocalhost6localhost6.localdomain6 192.168.10.159foreman02.kisspuppet.comforeman02 平台环境： [root@foreman02yum.repos.d]#uname-r 2.6.32-431.el6.x86_64 yum仓库： [root@foreman02yum.repos.d]#catforeman153.repo [foreman] name=Foreman baseurl=ftp://192.168.10.254/blog/foreman enabled=1 gpgcheck=0 [puppet] name=puppet baseurl=ftp://192.168.10.254/blog/puppet-el6 enabled=1 gpgcheck=0 [rhel] name=RHEL baseurl=ftp://192.168.10.254/rhel6.5 enabled=1 gpgcheck=0 网络安全环境： [root@foreman02~]#/etc/init.d/iptablesstatus iptables:Firewallisnotrunning. [root@foreman02~]#getenforce Disabled 3、安装Foreman 3.1、安装puppetmaster，并生成CA和证书 [root@foreman02~]#yuminstallforeman-installer [root@foreman02~]#yuminstallpuppet-serverpuppetfacter [root@foreman02~]#vim/etc/puppet/puppet.conf [master] certname=foreman02.kisspuppet.com [root@foreman02~]#/etc/init.d/puppetmasterstart Startingpuppetmaster:[OK] [root@foreman02~]#puppetcert--list--all +"foreman02.kisspuppet.com"(SHA256)1D:7E:90:F5:16:7D:01:67:77:37:EE:31:3F:46:AD:0A:47:80:B6:DF:6A:5E:25:A8:DE:BA:78:45:C9:09:D6:BD(altnames:"DNS:foreman02.kisspuppet.com","DNS:puppet","DNS:puppet.kisspuppet.com") [root@foreman02~]#/etc/init.d/puppetmasterstop Stoppingpuppetmaster:[OK] 3.2、安装foreman及依赖包 [root@foreman02~]#yuminstallforemanmod_passengermod_sslruby193-rubygem-passenger-nativemysqlmysql-serverforeman-mysql2 3.3、通过foreman-installer安装foreman foreman默认安装选择的数据库为postgresql，这里选用mysql进行安装。 [root@foreman02~]#foreman-installer--foreman-db-adaptermysql2--foreman-db-typemysql--no-enable-puppet--no-enable-foreman-proxy--foreman-configure-epel-repo=false InstallingDone[100%][...................] Success! *Foremanisrunningathttps://foreman02.kisspuppet.com Defaultcredentialsare'admin:changeme' Thefulllogisat/var/log/foreman-installer/foreman-installer.log 安装完成之后，通过火狐或者谷歌浏览器访问看是否安装成功https://192.168.10.159 Foreman安装 Foreman安装 3.4、安装foreman-proxy及依赖包 [root@foreman02~]#yuminstalltftp-serversyslinuxforeman-proxy 3.5、安装foreman-proxy，并通过foreman-installer重新安装foreman和puppetmaster 注意：以下方式是安装后会代理TFTP, DNS, DHCP, Puppet, and Puppet CA，并且puppetmaster会以apache+passenger的方式安装运行。 [root@foreman02~]#foreman-installer--enable-foreman--enable-foreman-proxy--enable-puppet--puppet-server=true--foreman-proxy-puppetrun=true--foreman-proxy-puppetca=true--foreman-proxy-dhcp=true--foreman-proxy-tftp=true--foreman-proxy-dns=true--foreman-proxy-dns-interface=eth0--foreman-proxy-dns-zone=kisspuppet.com--foreman-proxy-dns-reverse=10.168.192.in-addr.arpa--foreman-proxy-dns-forwarders=8.8.8.8--foreman-proxy-dns-forwarders=8.8.4.4--foreman-configure-epel-repo=false--foreman-proxy-register-in-foreman=false InstallingDone[100%][...................] Success! *Foremanisrunningathttps://foreman02.kisspuppet.com Defaultcredentialsare'admin:changeme' *ForemanProxyisrunningathttps://foreman02.kisspuppet.com:8443 *Puppetmasterisrunningatport8140 Thefulllogisat/var/log/foreman-installer/foreman-installer.log 如果只代理puppet和puppetCA，可以通过以下方式安装 [root@foreman02~]#foreman-installer--enable-foreman--enable-foreman-proxy--enable-puppet--puppet-server=true--foreman-proxy-puppetrun=true--foreman-proxy-puppetca=true--foreman-configure-epel-repo=false--foreman-proxy-register-in-foreman=false 4、检查foreman、foreman-proxy、puppetmaster是否安装成功 [root@foreman02~]#/etc/init.d/httpdstatus httpd(pid25433)isrunning... [root@foreman02~]#/etc/init.d/foreman-proxystatus foreman-proxy(pid25605)isrunning... [root@foreman02~]#netstat-naltp|grep8443 tcp000.0.0.0:84430.0.0.0:*LISTEN25605/ruby [root@foreman02~]#netstat-naltp|grep80 tcp00:::80:::*LISTEN25433/httpd [root@foreman02~]#netstat-naltp|grep8140 tcp00:::8140:::*LISTEN25433/httpd 5、在Foreman上注册foreman-proxy 如果要管理puppet、puppetca等软件，是需要通过foreman-proxy去代理才能够正常使用的，关于代理的开启和关闭可以修改它的配置文件/etc/foreman-proxy/settings.yml Foreman安装 Foreman安装 Foreman安装 Foreman安装 本文转自凌激冰51CTO博客，原文链接：http://blog.51cto.com/dreamfire/1568862，如需转载请自行联系原作者
