1、深度分析 puppet 自帶 fiucket 的備份恢復功能日常情況下都是通過 puppetmaster 端進行推送變更，推送可以用 MC 實現，至于變更的回滾可以通過SVN 活該 Git 輔助實現。 存在這樣一種情況，在一個復雜的環境中，存在多個管理員，而你是負責變更推送的，他們只是做應用的，很多時候是需要登錄系統權限的，有一次，一個管理員為了滿足他的應用并沒有告知給你，登錄到系統之后，修改了一個配置文件，完后也沒有保存，而這個配置文件恰恰是你這邊 puppetmaster 管理的配置文件，在你做puppet 推送之后，那個管理員的配置文件被還原了。而那個管理員發現應用出了問題，要求你給他還

2、原，你如何做呢？是可以通過fiucket 功能完成，那么那么多機器，如何集中管理這些單版本呢。1、首先定義 fiucket 模塊要求所有節點都將被修改的配置文件保存至本地的，其中變量 fact_cartname 為獲取的 certname名自定義的fact 變量，如何自定義fact 可參考 HYPERLINK http:/k/2013/11/15/my- http:/k/2013/11/15/my-fact/備注：有以上模塊之后，只要在 file 模塊中添加 backup = main,，那么這個文件就會被保存到以上目錄中。2、定義 cntbucketdir 和 bucketdir參數 cnt

3、bucketdir 為當 file 模塊中沒有定義 backup = main,時被保存的路徑，默認在參數 bucketdir 為使用 puppet fiucket backup file保存的路徑rootlinux57poc # cat /etc/puppet/puppet.confmainuser = puppet group = puppetvardir = /var/lib/puppetlogdir = /var/log/puppetrootlinuxmaster1poc manifests# cat site.pp import nodes/*.pp$puppetserver = p

4、uppetmas fiucket main:path = /puppet/ver/hosts/$fact_certname,/var/lib/puppet/cntbucket/puppet/ver/hosts/$fact_certname3、file 模塊中添加class puppet_linux57pocinclude puppet_linux57poc:motd,puppet_linux57poc:factsclass puppet_linux57poc:motd package setup:ensure = present,file /etc/motd:owner = root, gro

5、up = root, mode = 0400,content = template(puppet_linux57poc/motd.erb), backup = main,require = Packagesetup,class puppet_linux57poc:facts file /etc/mcollective/facts.txt:owner= root, group= root,backup = main,rundir = /var/run/puppet ssldir = $vardir/ssl pluginsync = truecntbucketdir = /puppet/ver/h

6、osts/puppet_linux57 bucketdir = /puppet/ver/hosts/puppet_linux57agentserver = puppetmasclassfile = $vardir/classes.txt localconfig = $vardir/localconfig runerval=86400report = trueauthconfig = /etc/puppet/namespaceauth.conf usecacheonfailure = falsecertname = puppet_linux57 environment = production#

7、listen = true#puppetport = 8139#bindaddress = 254、測試 fiucket 的恢復功能修改節點被管理的配置文件/etc/motd,然后運行 puppet 命令還原rootlinux57poc # echo aa/etc/motd rootlinux57poc # puppet agent -t info: Retrieving plugininfo: Loading facts in /var/lib/puppet/lib/facter/fact_apply.rb info: Caching catalog for puppet_linux57in

8、fo: Applying configuration ver1386061716notice: /Stagemain/Mcollective:Facter/File/etc/mcollective/facts.yaml/content:- /etc/mcollective/facts.yaml 2013-12-03 17:26:35.000000000+ /tmp/puppet-file20131203-14159-i1qgrq-0 2013-12-03 17:56:59.000000000 -1,89 +1,89 。info: Fiucket adding md53997ee041b3277

9、fda12dbd849fac47e7info: /Stagemain/Mcollective:Facter/File/etc/mcollective/facts.yaml: Fiucketed /etc/mcollective/facts.yaml to main with sum 3997ee041b3277fda12dbd849fac47e7notice: /Stagemain/Puppet_linux57poc:Motd/File/etc/motd/content:- /etc/motd2013-12-03 17:56:49.000000000+ /tmp/puppet-file2013

10、1203-14159-1c90psx-02013-12-03 17:56:59.000000000 -7,4 +7,3 rubyver= 1.8.7.-aainfo: Fiucket adding md56db65f0eb756ee96ef8e615e914fa0eeinfo: /Stagemain/Puppet_linux57poc:Motd/File/etc/motd: Fiucketed /etc/motd to main with sum 6db65f0eb756ee96ef8e615e914fa0eenotice: /Stagemain/Puppet_linux57poc:Motd/

11、File/etc/motd/content: content changed md56db65f0eb756ee96ef8e615e914fa0ee to md57c6613a110541a050c8a8f51fc89dab2notice: Finished catalog run in 0.69 secondsmode= 0400,content = template(puppet_linux57poc/facts.txt.erb), backup = main,可以看到/etc/motd 的 MD5 值從6db65f0eb756ee96ef8e615e914fa0ee變成7c6613a11

12、0541a050c8a8f51fc89dab2rootlinux57poc # ll/puppet/ver/hosts/puppet_linux57/6/d/b/6/5/f/0/e/6db65f0eb756ee96ef8e615e914fa0ee/total 8-r-r- 1 n-rw-r- 1 nobody nobody nobody 311 Dec3 17:56 contentsobody10Dec3 17:56paths通過 puppet fiucket 恢復如何集中管理呢，可以將所有節點那個目錄掛在到一臺服務器上，這樣就集中了，然后可以通過掃描命令進行查看rootlinuxreport

13、poc # ll /puppet/ver/hosts total 12drwxr-x- 12 nobody nobody 4096 Dec 3 17:56 puppet_linux57drwxr-x- 10 nobody nobody 4096 Dec 3 17:08 puppet_linux58rootlinux57poc # puppet fiucket -local backup /etc/motd/etc/motd: 6db65f0eb756ee96ef8e615e914fa0eerootlinux57poc # ll/puppet/ver/hosts/puppet_linux57/6

14、/d/b/6/5/f/0/e/6db65f0eb756 ee96ef8e615e914fa0ee/total 8-r-r- 1 nobody nobody 311 Dec 3 17:56 contents-rw-r- 1 nobody nobody 10 Dec 3 17:56 paths rootlinux57poc #rootlinux57poc # /etc/motdrootlinux57poc # puppet fiucket -local restore /etc/motd 6db65f0eb756ee96ef8e615e914fa0eerootlinux57poc # cat /etc/motda few octer values myhostname = linux57poceth0_ip = 25kernel = 2.6.18-274.el5system release = Red Hat Entrise Linux Server release 5.7 (Tikanga) puppetver= 2.7.23rubyver= 1.8.7.-aaroo