chef是一套configuration management system
前陣子工作上的需要，所以有小小的研究了一下
研究的不太深入，但基本的入門應該夠了等有時間(藉口)再來玩
新增安裝來源
Add APT repository:
echo "deb http://apt.opscode.com/ `lsb_release -cs`-0.10 main" | sudo tee /etc/apt/sources.list.d/opscode.list
Import GPG key:
Offical:
sudo mkdir -p /etc/apt/trusted.gpg.d
gpg --keyserver keys.gnupg.net --recv-keys 83EF826A
gpg --export packages@opscode.com | sudo tee /etc/apt/trusted.gpg.d/opscode-keyring.gpg > /dev/null
(Recommend)Non offical:
gpg --keyserver keys.gnupg.net --recv-keys 83EF826A
gpg --export --armor 83EF826A | sudo apt-key add -
Update repository index:
sudo apt-get -y update
Chef server的設定
Install chef(you may need to input some data):
sudo apt-get -y install chef-server
**After server is start, it will create /etc/chef/validation.pem and /etc/chef/webui.pem file.
The validation.pem is used for validate client.
The webui.pem is used for manage chef-server.
Chef cleint的設定
Install chef
sudo apt-get -y install chef
**For connect to chef-server, you need to copy the /etc/chef/validation.pem from chef server and put it to the same place.
After connect to chef-server, it will create a node and client naming by client hostname.
So please make sure you have unique hostname in clients.
Chef工具(Knife)
**Please copy the /etc/chef/validation.pem from chef server and put it to the same place
Config knife with create an administration account(Must be execute at chef server)
sudo knife configure -i
Please enter the chef server URL:
請輸入Chef server的位址，預設的連接埠為4000 EX: http://172.17.114.201:4000
Please enter a clientname for the new client:
請輸入Client的名稱，系統會依此名稱建立對應的金鑰
Please enter the existing admin clientname:
使用預設值
Please enter the location of the existing admin client's private key:
請確定檔案及路徑正確，有錯誤請修改
Please enter the validation clientname:
使用預設值
Please enter the location of the validation key:
請確定檔案及路徑正確，有錯誤請修改
Please enter the path to a chef repository (or leave blank):
請留空白即可
**It will create ~/.chef/${client_name}.pem.
Config knife without create an administration account
sudo knife configure
Please enter the chef server URL:
請輸入Chef server的位址，預設的連接埠為4000 EX: http://172.17.114.201:4000
Please enter an existing username or clientname for the API:
請輸入使用者名稱或是客戶端的名稱
Please enter the validation clientname:
使用預設值
Please enter the location of the validation key:
請確定檔案及路徑正確，有錯誤請修改
Please enter the path to a chef repository (or leave blank):
請留空白即可
List registered client:*(User to manage chef)
knife client list
List registered node:*(Machines to run recipe)
knife node list
Register node to server:
(Recommend)Method 1:
sudo service chef-client start
**Chef will use the hostname as node name and client name.
Please make sure you hostname is unique.
Method 2:
sudo chef-client --node-name ${node_name} --user root --group root [--daemonize]
**Specify the node name
Assign a node to run cookbook:
knife node run_list add {client_name} 'recipe[{cookbook_name}]’
Assign a node to run special recipe in cookbook:
knife node run_list add {client_name} 'recipe[{cookbook_name}::special]'
List uploaded cookbooks:
knife cookbook list
編寫Cookbook
Config cookbook information:
vim knife.rb
cookbook_copyright "Kuntelin"
cookbook_license "MIT"
cookbook_email "kuntelin@gmail.com"
Create cookbook:
knife cookbook create ${cookbook_name} -o ${cookbook_path}
Write a recipe:
vim ${cookbook_path}/${cookbook_name}/recipes/default.rb
Write a special recipe:
vim ${cookbook_path}/${cookbook_name}/recipes/special.rb
Upload cookbook:
knife cookbook upload ${cookbook_name} -o ${cookbook_path}
