Linuxday.at - Lightning Talk
Download as ODP, PDF0 likes1,250 views
Rex is a framework that simplifies system administration tasks like user management, package installation, service management, and configuration across multiple servers. It uses a simple domain-specific language in Perl scripts called Rexfiles to define tasks that can be run remotely on groups of servers via SSH. Predefined modules help perform common operations such as deploying code to application servers. Rex aims to provide traceable, testable deployments and make rollbacks easy.
![Usermanagement task “create_user“, sub { create_user “myuser“ => { groups => [“wheel“, “users“], password => “foobar“, ssh_key => “ssh-rsa AAAAB3NzaC1yc2EAAAADAQ...“, }; }; bash# rex -H “server[1..9]“ create_user](https://image.slidesharecdn.com/lightning-111127110349-phpapp02/85/Linuxday-at-Lightning-Talk-18-320.jpg)
![Paketverwaltung task “install_packages“, sub { install package => [ “ sudo“, “ apache2“, “ php5“, ... ]; }; bash# rex -H “server[1..9]“ install_packages](https://image.slidesharecdn.com/lightning-111127110349-phpapp02/85/Linuxday-at-Lightning-Talk-19-320.jpg)
![Dienstverwaltung task “start_services“, sub { service apache2 => “start“; service mysql => “start“; service apache2 => “ensure“, “started“; }; bash# rex -H “server[1..9]“ start_services](https://image.slidesharecdn.com/lightning-111127110349-phpapp02/85/Linuxday-at-Lightning-Talk-20-320.jpg)
Linuxday.at - Lightning Talk
- 1. (R)?ex - A framework to simplify system administration
- 2. for s in $(cat $HOME/myserver.lst); do ssh root@$s “useradd -m myuser“ scp files/zabbix_agentd.conf root@$s:/etc/zabbix done
- 5. (R)?ex - Remote Execution
- 6. CentOS, Debian, Fedora, Gentoo, Mageia, OpenSuSE, Ubuntu, ...
- 9. CPAN
- 10. Wie funktioniert‘s? Ganz grob, so was ähnliches wie Make
- 11. Es gibt ein Rexfile
- 12. Ein normales Perl Script
- 13. Userverwaltung
- 14. Paketverwaltung
- 15. Dienstverwaltung
- 18. Usermanagement task “create_user“, sub { create_user “myuser“ => { groups => [“wheel“, “users“], password => “foobar“, ssh_key => “ssh-rsa AAAAB3NzaC1yc2EAAAADAQ...“, }; }; bash# rex -H “server[1..9]“ create_user
- 19. Paketverwaltung task “install_packages“, sub { install package => [ “ sudo“, “ apache2“, “ php5“, ... ]; }; bash# rex -H “server[1..9]“ install_packages
- 20. Dienstverwaltung task “start_services“, sub { service apache2 => “start“; service mysql => “start“; service apache2 => “ensure“, “started“; }; bash# rex -H “server[1..9]“ start_services
- 21. Konfiguration task “configure_monitoring“, sub { file “/etc/zabbix/zabbix_agentd.conf“, source => “files/etc/zabbix/zabbix_agentd.conf“, owner => “root“,
- 22. group => “root“,
- 23. mode => 640,
- 24. on_change => sub { service “zabbix-agentd“ => “restart“;
- 25. }, }; bash# rex -H “server[1..9]“ configure_monitoring
- 26. Konfiguration # Change this to Listen on specific IP addresses as shown below to # prevent Apache from glomming onto all bound IP addresses. # Listen <%= $::eth0_ip %> :80 <% if( $::use_ssl ) { %> Listen <%= $::eth0_ip %> :443 <% } %>
- 27. Einfache Filterregeln task “configure_iptables“, sub { open_port [22, 80]; close_port “all“; }; bash# rex -H “server[1..9]“ configure_ iptables
- 28. Alles aufeinmal task “prepare“, sub { create_user(); install_packages(); start_services(); configure_monitoring(); configure_iptables(); }; bash# rex -H “server[1..9]“ prepare
- 29. Deployments
- 34. Testen des Deployments möglich
- 35. Rollbacks sind schnell gemacht Wenn man will auch automatisch wenn Tests fehlschlagen.
- 36. Apache, lighttpd, ... use Rex::Apache::Deploy "Symlink" ; user "deploy" ; public_key "/home/deploy/.ssh/id_rsa.pub" ; private_key "/home/deploy/.ssh/id_rsa" ; group "php" => "php[01..04]" ; deploy_to "/var/www" ; document_root "/var/www/html" ; desc "Deploy Application" ; task "deploy", group => "php", sub { deploy "myapp-1.0.0.tar.gz" ; };
- 37. Tomcat use Rex::Apache::Deploy "Tomcat" ; user "deploy" ; public_key "/home/deploy/.ssh/id_rsa.pub" ; private_key "/home/deploy/.ssh/id_rsa" ; group "tomcat" => "tomcat[01..04]" ; context_path "/myapp" ; desc "Deploy Application" ; task "deploy", group => "tomcat", sub { deploy "myapp-1.0.0.war", username => "manager-user" , password => "manager-password" , port => 8080; };
- 38. Danke für die Aufmerksamkeit. http://rexify.org / @jfried83