chef入門

chef是一套configuration management system
前陣子工作上的需要，所以有小小的研究了一下
研究的不太深入，但基本的入門應該夠了等有時間(藉口)再來玩

新增安裝來源
Add APT repository:
echo "deb http://apt.opscode.com/ `lsb_release -cs`-0.10 main" | sudo tee /etc/apt/sources.list.d/opscode.list

Import GPG key:
Offical:
sudo mkdir -p /etc/apt/trusted.gpg.d
gpg --keyserver keys.gnupg.net --recv-keys 83EF826A
gpg --export packages@opscode.com | sudo tee /etc/apt/trusted.gpg.d/opscode-keyring.gpg > /dev/null
(Recommend)Non offical:
gpg --keyserver keys.gnupg.net --recv-keys 83EF826A
gpg --export --armor 83EF826A | sudo apt-key add -

Update repository index:
sudo apt-get -y update


Chef server的設定
Install chef(you may need to input some data):
sudo apt-get -y install chef-server
**After server is start, it will create /etc/chef/validation.pem and /etc/chef/webui.pem file.
The validation.pem is used for validate client.
The webui.pem is used for manage chef-server.


Chef cleint的設定
Install chef
sudo apt-get -y install chef
**For connect to chef-server, you need to copy the /etc/chef/validation.pem from chef server and put it to the same place.
After connect to chef-server, it will create a node and client naming by client hostname.
So please make sure you have unique hostname in clients.


Chef工具(Knife)
**Please copy the /etc/chef/validation.pem from chef server and put it to the same place

Config knife with create an administration account(Must be execute at chef server)
sudo knife configure -i
Please enter the chef server URL:
請輸入Chef server的位址，預設的連接埠為4000 EX: http://172.17.114.201:4000
Please enter a clientname for the new client:
請輸入Client的名稱，系統會依此名稱建立對應的金鑰
Please enter the existing admin clientname:
使用預設值
Please enter the location of the existing admin client's private key:
請確定檔案及路徑正確，有錯誤請修改
Please enter the validation clientname:
使用預設值
Please enter the location of the validation key:
請確定檔案及路徑正確，有錯誤請修改
Please enter the path to a chef repository (or leave blank):
請留空白即可
**It will create ~/.chef/${client_name}.pem.

Config knife without create an administration account
sudo knife configure
Please enter the chef server URL:
請輸入Chef server的位址，預設的連接埠為4000 EX: http://172.17.114.201:4000

Please enter an existing username or clientname for the API:
請輸入使用者名稱或是客戶端的名稱
Please enter the validation clientname:
使用預設值
Please enter the location of the validation key:
請確定檔案及路徑正確，有錯誤請修改
Please enter the path to a chef repository (or leave blank):
請留空白即可


List registered client:*(User to manage chef)
knife client list


List registered node:*(Machines to run recipe)
knife node list


Register node to server:
(Recommend)Method 1:
sudo service chef-client start
**Chef will use the hostname as node name and client name.
Please make sure you hostname is unique.
Method 2:
sudo chef-client --node-name ${node_name} --user root --group root [--daemonize]
**Specify the node name


Assign a node to run cookbook:
knife node run_list add {client_name} 'recipe[{cookbook_name}]’


Assign a node to run special recipe in cookbook:
knife node run_list add {client_name} 'recipe[{cookbook_name}::special]'


List uploaded cookbooks:
knife cookbook list


編寫Cookbook
Config cookbook information:
vim knife.rb

cookbook_copyright "Kuntelin"
cookbook_license "MIT"
cookbook_email "kuntelin@gmail.com"

Create cookbook:
knife cookbook create ${cookbook_name} -o ${cookbook_path}


Write a recipe:
vim ${cookbook_path}/${cookbook_name}/recipes/default.rb


Write a special recipe:
vim ${cookbook_path}/${cookbook_name}/recipes/special.rb

Upload cookbook:
knife cookbook upload ${cookbook_name} -o ${cookbook_path}