Что такое Puppet?

 1# Ubuntu/Debian
 2wget https://apt.puppet.com/puppet7-release-focal.deb
 3sudo dpkg -i puppet7-release-focal.deb
 4sudo apt update
 5sudo apt install puppet-agent
 6
 7# CentOS/RHEL
 8sudo rpm -Uvh https://yum.puppet.com/puppet7-release-el-8.noarch.rpm
 9sudo yum install puppet-agent
10
11# Проверка установки
12/opt/puppetlabs/bin/puppet --version
13
14# Добавление в PATH
15export PATH="/opt/puppetlabs/bin:$PATH"

 1# site.pp
 2
 3# Установка и настройка Apache
 4node 'webserver.example.com' {
 5  # Установка пакета
 6  package { 'apache2':
 7    ensure => installed,
 8  }
 9
10  # Настройка сервиса
11  service { 'apache2':
12    ensure  => running,
13    enable  => true,
14    require => Package['apache2'],
15  }
16
17  # Создание конфигурационного файла
18  file { '/etc/apache2/sites-available/000-default.conf':
19    ensure  => file,
20    content => template('apache/vhost.conf.erb'),
21    owner   => 'root',
22    group   => 'root',
23    mode    => '0644',
24    notify  => Service['apache2'],
25  }
26
27  # Создание директории для логов
28  file { '/var/log/apache2':
29    ensure => directory,
30    owner  => 'www-data',
31    group  => 'www-data',
32    mode   => '0755',
33  }
34}
35
36# Класс для базовой настройки
37class base {
38  # Обновление пакетов
39  exec { 'apt-update':
40    command => '/usr/bin/apt update',
41    unless  => '/usr/bin/test -f /var/cache/apt/pkgcache.bin -a $(stat -c %Y /var/cache/apt/pkgcache.bin) -gt $(( $(date +%s) - 3600 ))',
42  }
43
44  # Установка базовых пакетов
45  package { ['vim', 'curl', 'git']:
46    ensure => installed,
47  }
48}

 1# modules/nginx/manifests/init.pp
 2
 3class nginx (
 4  String $package_name = 'nginx',
 5  String $service_name = 'nginx',
 6  String $config_dir = '/etc/nginx',
 7  Integer $worker_processes = $facts['processors']['count'],
 8) {
 9
10  # Установка пакета
11  package { $package_name:
12    ensure => installed,
13  }
14
15  # Основной конфигурационный файл
16  file { "${config_dir}/nginx.conf":
17    ensure  => file,
18    content => epp('nginx/nginx.conf.epp', {
19      worker_processes => $worker_processes,
20    }),
21    owner   => 'root',
22    group   => 'root',
23    mode    => '0644',
24    require => Package[$package_name],
25    notify  => Service[$service_name],
26  }
27
28  # Запуск сервиса
29  service { $service_name:
30    ensure  => running,
31    enable  => true,
32    require => [Package[$package_name], File["${config_dir}/nginx.conf"]],
33  }
34}

 1# Применение манифеста
 2puppet apply site.pp
 3
 4# Проверка синтаксиса
 5puppet parser validate site.pp
 6
 7# Сбор фактов
 8puppet facts
 9
10# Применение с сервера (agent)
11puppet agent --test
12
13# Генерация модуля
14puppet module generate username-modulename
15
16# Установка модуля из Puppet Forge
17puppet module install puppetlabs-apache

 1# hiera.yaml
 2---
 3version: 5
 4defaults:
 5  datadir: data
 6  data_hash: yaml_data
 7
 8hierarchy:
 9  - name: "Per-node data"
10    path: "nodes/%{trusted.certname}.yaml"
11
12  - name: "Per-environment data"
13    path: "environments/%{server_facts.environment}.yaml"
14
15  - name: "Common data"
16    path: "common.yaml"

1# data/common.yaml
2---
3apache::default_vhost: false
4apache::default_ssl_vhost: false
5apache::mpm_module: prefork
6
7mysql::server::root_password: 'secure_password'
8mysql::server::remove_default_accounts: true