<rt id="bn8ez"></rt>
<label id="bn8ez"></label>

  • <span id="bn8ez"></span>

    <label id="bn8ez"><meter id="bn8ez"></meter></label>

    Puppet的server端與agent端的通信建立

    puppet 的安裝與配置,請看上一篇文章。
    這里默認你已經把它安裝好了。

    想讓兩臺(或N臺)機器相互通信,先要設置它們之間的Host文件。
    每一臺機器分別執行如下命令
    sudo vi /etc/hosts
    把要相互通信的所有機器的IP 和 別名添加進來。比如先以server端為例
    127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
    ::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
    10.23.10.237 puppet-server.noah.blogjava.net
    #上面可能是打開這個文件里默認的,不用管,直接在下面加agent的ip就可以了,有多少加多少。
    10.52.27.71 agent001.noah-test.net
    10.52.27.72 agent002.noah-test.net
    10.52.27.73 agent003.noah-test.net
    接下來把上面的都復制,然后,分別考到其它的機器里面。

    接下來回到agent端,配置puppet 的配置文件,執行如下命令
    sudo vi /etc/puppetlabs/puppet/puppet.conf
    在打開的文件里面填寫如下信息
    [main]
    #這個certname就是上面host里面的名字
    certname = agent001.noah-test.net
    #server 就是puppet的server的地址
    server = puppet-server.noah.blogjava.net
    environment 
    = production
    runinterval 
    = 1h


    然后在agent端,執行如下命令,向server端申請證書
    sudo /opt/puppetlabs/bin/puppet agent --test
    然后,會出現這樣的信息
    Info: Creating a new SSL key for agent01.noah-test
    Info: Caching certificate for ca
    Info: csr_attributes file loading from /etc/puppetlabs/puppet/csr_attributes.yaml
    Exiting; no certificate found and waitforcert is disabled

    證明,申請成功,等待server端同意。這時可以轉到server端,執行如下命令查看如些機器要申請證書
    sudo /opt/puppetlabs/bin/puppet cert list --all
    這里會顯示出所有申請過的和正在等待審批的agent的certname 的名字。審批通過的前面有個“+”。
    接下來執行如下命令進行單獨審批
     
    sudo /opt/puppetlabs/bin/puppet cert sign agent001.noah-test.net

    也可以直接在sgin 后面加 "--all",進行全部審批。

    審批完成后,再回到agent端,執行同樣的命令
    sudo /opt/puppetlabs/bin/puppet agent --test

    如下顯示的全是類似如下綠色的信息,證明它們之間的通信已經建立成功
    Info: Using configured environment 'production'
    Info: Retrieving pluginfacts
    Info: Retrieving plugin
    Info: Caching catalog for agent001.noah-test.net
    Info: Applying configuration version '1481877703'







    問題匯總:
    cloud@cdt-dev-cafews-yabinx:/etc/puppetlabs/puppet> sudo puppet agent -t
    Warning: Setting 'pluginsync' is deprecated.
    (at /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/defaults.rb:1713:in `block in <module:Puppet>')
    Warning: Unable to fetch my node definition, but the agent run will continue:
    Warning: getaddrinfo: Name or service not known
    Info: Retrieving pluginfacts
    Error: /File[/var/lib/puppet/facts.d]: Failed to generate additional resources using 'eval_generate': getaddrinfo: Name or service not known
    Error: /File[/var/lib/puppet/facts.d]: Could not evaluate: Could not retrieve file metadata for puppet:///pluginfacts: getaddrinfo: Name or service not known
    Info: Retrieving plugin
    Error: /File[/var/lib/puppet/lib]: Failed to generate additional resources using 'eval_generate': getaddrinfo: Name or service not known
    Error: /File[/var/lib/puppet/lib]: Could not evaluate: Could not retrieve file metadata for puppet:///plugins: getaddrinfo: Name or service not known
    Info: Loading facts
    Error: Could not retrieve catalog from remote server: getaddrinfo: Name or service not known
    Warning: Not using cache on failed catalog
    Error: Could not retrieve catalog; skipping run
    Error: Could not send report: getaddrinfo: Name or service not known
    用的命令不對,改用這個
    sudo /opt/puppetlabs/bin/puppet agent --test



    sudo/opt/puppetlabs/bin/puppet agent --test
    Warning: Unable to fetch my node definition, but the agent run will continue:
    Warning: Server hostname 'cdt-dev-cafews-yabinx' did not match server certificate; expected one of cdt-dev-cafews-yabinx.emea1.cis.trcloud, DNS:puppet, DNS:cdt-dev-cafews-yabinx.emea1.cis.trcloud
    Info: Retrieving pluginfacts
    Error: /File[/opt/puppetlabs/puppet/cache/facts.d]: Failed to generate additional resources using 'eval_generate': Server hostname 'cdt-dev-cafews-yabinx' did not match server certificate; expected one of cdt-dev-cafews-yabinx.emea1.cis.trcloud, DNS:puppet, DNS:cdt-dev-cafews-yabinx.emea1.cis.trcloud
    Error: /File[/opt/puppetlabs/puppet/cache/facts.d]: Could not evaluate: Could not retrieve file metadata for puppet:///pluginfacts: Server hostname 'cdt-dev-cafews-yabinx' did not match server certificate; expected one of cdt-dev-cafews-yabinx.emea1.cis.trcloud, DNS:puppet, DNS:cdt-dev-cafews-yabinx.emea1.cis.trcloud
    Info: Retrieving plugin
    Error: /File[/opt/puppetlabs/puppet/cache/lib]: Failed to generate additional resources using 'eval_generate': Server hostname 'cdt-dev-cafews-yabinx' did not match server certificate; expected one of cdt-dev-cafews-yabinx.emea1.cis.trcloud, DNS:puppet, DNS:cdt-dev-cafews-yabinx.emea1.cis.trcloud
    Error: /File[/opt/puppetlabs/puppet/cache/lib]: Could not evaluate: Could not retrieve file metadata for puppet:///plugins: Server hostname 'cdt-dev-cafews-yabinx' did not match server certificate; expected one of cdt-dev-cafews-yabinx.emea1.cis.trcloud, DNS:puppet, DNS:cdt-dev-cafews-yabinx.emea1.cis.trcloud
    Error: Could not retrieve catalog from remote server: Server hostname 'cdt-dev-cafews-yabinx' did not match server certificate; expected one of cdt-dev-cafews-yabinx.emea1.cis.trcloud, DNS:puppet, DNS:cdt-dev-cafews-yabinx.emea1.cis.trcloud
    Warning: Not using cache on failed catalog
    Error: Could not retrieve catalog; skipping run
    Error: Could not send report: Server hostname 'cdt-dev-cafews-yabinx' did not match server certificate; expected one of cdt-dev-cafews-yabinx.emea1.cis.trcloud, DNS:puppet, DNS:cdt-dev-cafews-yabinx.emea1.cis.trcloud
    其實它已經告訴你了,改一下/etc/hosts就可以了,改成下面的其中一個
    expected one of cdt-dev-cafews-yabinx.emea1.cis.trcloud, DNS:puppet, DNS:cdt-dev-cafews-yabinx.emea1.cis.trcloud




    sudo /opt/puppetlabs/bin/puppet agent --test
    Warning: Unable to fetch my node definition, but the agent run will continue:
    Warning: SSL_connect returned=1 errno=0 state=error: certificate verify failed: [unable to get local issuer certificate for /CN=cdt-dev-cafews-yabinx2.emea1.cis.trcloud]
    Info: Retrieving pluginfacts
    Error: /File[/opt/puppetlabs/puppet/cache/facts.d]: Failed to generate additional resources using 'eval_generate': SSL_connect returned=1 errno=0 state=error: certificate verify failed: [unable to get local issuer certificate for /CN=cdt-dev-cafews-yabinx2.emea1.cis.trcloud]
    Error: /File[/opt/puppetlabs/puppet/cache/facts.d]: Could not evaluate: Could not retrieve file metadata for puppet:///pluginfacts: SSL_connect returned=1 errno=0 state=error: certificate verify failed: [unable to get local issuer certificate for /CN=cdt-dev-cafews-yabinx2.emea1.cis.trcloud]
    Info: Retrieving plugin
    Error: /File[/opt/puppetlabs/puppet/cache/lib]: Failed to generate additional resources using 'eval_generate': SSL_connect returned=1 errno=0 state=error: certificate verify failed: [unable to get local issuer certificate for /CN=cdt-dev-cafews-yabinx2.emea1.cis.trcloud]
    Error: /File[/opt/puppetlabs/puppet/cache/lib]: Could not evaluate: Could not retrieve file metadata for puppet:///plugins: SSL_connect returned=1 errno=0 state=error: certificate verify failed: [unable to get local issuer certificate for /CN=cdt-dev-cafews-yabinx2.emea1.cis.trcloud]
    Error: Could not retrieve catalog from remote server: SSL_connect returned=1 errno=0 state=error: certificate verify failed: [unable to get local issuer certificate for /CN=cdt-dev-cafews-yabinx2.emea1.cis.trcloud]
    Warning: Not using cache on failed catalog
    Error: Could not retrieve catalog; skipping run
    Error: Could not send report: SSL_connect returned=1 errno=0 state=error: certificate verify failed: [unable to get local issuer certificate for /CN=cdt-dev-cafews-yabinx2.emea1.cis.trcloud]
    一般這種情況就是由于某種原因沒有認證沒有成功,但它又不會重新認證了,所以就報這個錯誤,解決辦法是到這個目錄下/etc/puppetlabs/puppet,把生成的ssl文件夾給刪除,讓它重新生成一次key。如果生成一次還沒有成功的話,你要看一下是不是其它地方的問題,然后,要重新重復上面的步驟,重新生成密鑰。



    眼鏡蛇

    posted on 2016-12-16 17:09 眼鏡蛇 閱讀(1868) 評論(0)  編輯  收藏 所屬分類: JavaPuppet

    <2025年5月>
    27282930123
    45678910
    11121314151617
    18192021222324
    25262728293031
    1234567

    導航

    統計

    常用鏈接

    留言簿(6)

    隨筆分類

    隨筆檔案

    文章分類

    文章檔案

    搜索

    最新評論

    閱讀排行榜

    評論排行榜

    主站蜘蛛池模板: 亚洲福利中文字幕在线网址| 1000部啪啪毛片免费看| 免费v片在线观看无遮挡| 久久亚洲国产成人影院| 国产福利在线免费| 中文字幕在线观看亚洲视频| 日韩精品无码区免费专区| 亚洲情A成黄在线观看动漫软件 | 国产免费69成人精品视频| 伊人久久亚洲综合影院首页| 四色在线精品免费观看| 亚洲成a人无码亚洲成av无码| 成人永久免费高清| 免费视频成人国产精品网站| 亚洲综合色成在线播放| 成人网站免费大全日韩国产 | 国产日韩成人亚洲丁香婷婷| 一级做a爰片性色毛片免费网站| 国产亚洲精品资在线| 久久国产免费观看精品| 亚洲高清日韩精品第一区| 免费看黄视频网站| 亚洲精品动漫免费二区| 国产91久久久久久久免费| 久久久受www免费人成| 久久精品国产亚洲av水果派| 91在线视频免费91| 在线看亚洲十八禁网站| 精品久久香蕉国产线看观看亚洲| 日韩内射激情视频在线播放免费| 亚洲一区精彩视频| jlzzjlzz亚洲乱熟在线播放| 一级毛片免费视频| 亚洲a∨国产av综合av下载| 亚洲午夜无码久久久久| 国产精品入口麻豆免费观看| 久久精品国产亚洲AV电影网| 国产亚洲精品线观看动态图| 欧美三级在线电影免费| 香蕉视频在线免费看| 亚洲乱码中文论理电影|