It’s been awhile since we decided to remotely update the servers. Not even the servers, but the scripts on those servers.
We use self-compiled scripts for content update (for real-time debugging). Using the server-client principle, that is the initializer script and the executable script on the servers. But since there are a lot of servers, making changes to a script on each server will take ages.
So, we begin.
Requirements:
1. We already have the OS with updated packages.
2. We have a FQDN name.
3. Curl and wget should already be installed.
Server installation:
1. Go to https://www.opscode.com/chef/install
2. Click tab “Chef Server”
3. Select the operating system and the architecture
4. Select Chef version
5. Install the package
1 | <span class="pln"><span class="pln">rpm </span></span><span class="pun"><span class="pun">-</span></span><span class="pln"><span class="pln">ivh https</span></span><span class="pun"><span class="pun">:</span></span><span class="com"><span class="com">//opscode-omnibus-packages.s3.amazonaws.com/el/6/x86_64/chef-server-11.1.3-1.el6.x86_64.rpm</span></span> |
Configure Chef server 11.*. Run command
1 | <span class="com"><span class="com"># chef-server-ctl reconfigure</span></span> |
It will install and set up the required packages itself
Then we stop the web-server, if any, and run the verification script:
1 | <span class="com"><span class="com"># chef-server-ctl test</span></span> |
After the test, go to:
# https://FQDN-OR-IP-OF-CHEF-SERVER
Note: Default UserName/Password: admin/p@ssw0rd1
Setting up the WorkStation:
Run command (on Linux like)
1 | <span class="com"><span class="com"># curl -L https://www.opscode.com/chef/install.sh | bash</span></span> |
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
101 6790 101 6790 0 0 3826 0 0:00:01 0:00:01 —:—:— 12190
Downloading Chef for el…
Installing Chef
warning: /tmp/tmp.KnyQTnqz/chef-.x86_64.rpm: Header V4 DSA/SHA1 Signature, key ID 83ef826a: NOKEY
Preparing… ########################################### [100%] 1:chef ########################################### [100%] Thank you for installing Chef!
After the installation is complete, verify the client is installed
1 | <span class="com"><span class="com"># chef-client -v</span></span> |
Chef: 11.6.0
Create a Chef directory
Copy Cert Keys from Chef Server to Workstation User Folder
1 2 3 | <span class="pln"><span class="pln">$ mkdir </span></span><span class="pun"><span class="pun">~/.</span></span><span class="pln"><span class="pln">chef $ scp root@chef</span></span><span class="pun"><span class="pun">-</span></span><span class="pln"><span class="pln">server</span></span><span class="pun"><span class="pun">:</span></span><span class="str"><span class="str">/etc/</span></span><span class="pln"><span class="pln">chef</span></span><span class="pun"><span class="pun">-</span></span><span class="pln"><span class="pln">server</span></span><span class="pun"><span class="pun">/</span></span><span class="pln"><span class="pln">admin</span></span><span class="pun"><span class="pun">.</span></span><span class="pln"><span class="pln">pem </span></span><span class="pun"><span class="pun">~/.</span></span><span class="pln"><span class="pln">chef $ scp root@chef</span></span><span class="pun"><span class="pun">-</span></span><span class="pln"><span class="pln">server</span></span><span class="pun"><span class="pun">:</span></span><span class="str"><span class="str">/etc/</span></span><span class="pln"><span class="pln">chef</span></span><span class="pun"><span class="pun">-</span></span><span class="pln"><span class="pln">server</span></span><span class="pun"><span class="pun">/</span></span><span class="pln"><span class="pln">chef</span></span><span class="pun"><span class="pun">-</span></span><span class="pln"><span class="pln">validator</span></span><span class="pun"><span class="pun">.</span></span><span class="pln"><span class="pln">pem </span></span><span class="pun"><span class="pun">~/.</span></span><span class="pln"><span class="pln">chef</span></span> |
Now, configure the client using the “knife” command
1 | <span class="pln"><span class="pln">$ knife configure </span></span><span class="pun"><span class="pun">-</span></span><span class="pln"><span class="pln">i</span></span> |
Overwrite /root/.chef/knife.rb? (Y/N) y
Please enter the chef server URL: [https://test.example.com:443] https://chef-server.example.com:443/
Please enter a name for the new user: [root] knife-user1
Please enter the existing admin name: [admin] Enter
Please enter the location of the existing admin’s private key: [/etc/chef-server/admin.pem] ~/.chef/admin.pem
Please enter the validation clientname: [chef-validator] Please enter the location of the validation key: [/etc/chef-server/chef-validator.pem] ~/.chef/chef-validator.pem
Please enter the path to a chef repository (or leave blank):
Creating initial API user…
Please enter a password for the new user:
Created user[knife-user1] Configuration file written to /root/.chef/knife.rb
Your “Knife config” (knife.rb) will look like this:
1 | <span class="pln"><span class="pln">$ cat </span></span><span class="pun"><span class="pun">~</span></span><span class="str"><span class="str">/.chef/</span></span><span class="pln"><span class="pln">knife</span></span><span class="pun"><span class="pun">.</span></span><span class="pln"><span class="pln">rb</span></span> |
log_level :info
log_location STDOUT
node_name ‘knife-user1’
client_key ‘/root/.chef/knife-user1.pem’
validation_client_name ‘chef-validator’
validation_key ‘/root/.chef/admin.pem’
chef_server_url ‘https://chef-server.example.com:443/’
syntax_check_cache_path ‘/root/.chef/syntax_check_cache’
Check our installation by running the respective commands:
1 | <span class="pln"><span class="pln">$ knife client list</span></span> |
chef-validator
chef-webui
1 | <span class="pln"><span class="pln">$ knife user list</span></span> |
admin
knife-user1
Installing the node:
Run command (on Linux like)
1 | <span class="com"><span class="com"># curl -L https://www.opscode.com/chef/install.sh | bash</span></span> |
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
101 6790 101 6790 0 0 3826 0 0:00:01 0:00:01 —:—:— 12190
Downloading Chef for el…
Installing Chef
warning: /tmp/tmp.KnyQTnqz/chef-.x86_64.rpm: Header V4 DSA/SHA1 Signature, key ID 83ef826a: NOKEY
Preparing… ########################################### [100%] 1:chef ########################################### [100%] Thank you for installing Chef!
Create Chef directory
1 | <span class="com"><span class="com"># mkdir /etc/chef</span></span> |
Copy Chef Server Validation Cert Keys from Chef Server to our node in “/etc/chef”:
1 | <span class="com"><span class="com"># scp root@chef-server:/etc/chef-server/chef-validator.pem /etc/chef</span></span> |
Run the command and register yourself in Chef Server:
1 | <span class="com"><span class="com"># chef-client -S https://FQDN-OR-IP-OF-CHEF-SERVER -K /etc/chef/chef-validator.pem</span></span> |
Once the client is verified, we have to create a file in “client.rb” in directory “/etc/chef”.
1 | <span class="com"><span class="com"># vi /etc/chef/client.rb</span></span> |
log_level :info
log_location STDOUT
chef_server_url ‘https://FQDN-OR-IP-OF-CHEF-SERVER’
Check successful registration of the node
On WorkStation, run command:
1 | <span class="com"><span class="com"># knife node list</span></span> |
And on the server in web-interface
# https://FQDN-OR-IP-OF-CHEF-SERVER
Run the client:
1 2 | <span class="com"><span class="com"># chef-client</span></span> <span class="com"><span class="com"># chef-client -l debug (In case if you want to debug)</span></span> |
Create a simple Cookbook and write a Recipe there
Log in to WorkStation:
1 | <span class="com"><span class="com"># vi /root/.chef/knife.rb</span></span> |
cookbook_path [ ‘/usr/local/src/chef/cookbooks’ ]
Create a directory for Cookbook:
1 | <span class="com"><span class="com"># mkdir -p /usr/local/src/chef/cookbooks</span></span> |
Now, create a simple Cookbook
1 | <span class="com"><span class="com"># knife cookbook create cookbook-test</span></span> |
Go to the directory
1 2 | <span class="com"><span class="com"># cd /usr/local/src/chef/cookbooks</span></span> <span class="com"><span class="com"># tree cookbook-test</span></span> |
cookbook-test/
├── attributes
├── CHANGELOG.md
├── definitions
├── files
│ └── default
├── libraries
├── metadata.rb
├── providers
├── README.md
├── recipes
│ └── default.rb
├── resources
└── templates
└── default
Now, let’s create a recipe for the new group (system-admins) and user “sanjay”.
1 | <span class="com"><span class="com"># cat /usr/local/src/chef/cookbooks/cookbook-test/recipes/default.rb</span></span> |
#
# Cookbook Name:: cookbook-test
# Recipe:: default
#
# Copyright 2016, YOUR_COMPANY_NAME
#
# All rights reserved — Do Not Redistribute
#
group «system-admins» do
gid 1001
end
user «sanjay» do
comment «Sanjay User»
shell «/bin/bash»
home «/home/sanjay»
gid «system-admins»
uid 1002
supports :manage_home => true
password «$1$QwuUa80Z$KZkYq8CqICVyIsK1tHZ7s0»
end
To upload cookbooks to the server, do the following:
1 | <span class="com"><span class="com"># knife upload cookbooks</span></span> |
Note: this will upload all cookbooks to the server
To upload a particular book to the server:
1 | <span class="com"><span class="com"># knife upload cookbooks cookbook-test</span></span> |
Now, add our recipe to run_list
1 | <span class="com"><span class="com"># knife node list</span></span> |
node1.example.com
node2.example.com
node3.example.com
1 | <span class="com"><span class="com"># knife node run_list add node1.example.com cookbook-test</span></span> |
node1.example.com:
run_list: recipe[cookbook-test
Now, log in to the machine node1.example.com, and run command
1 | <span class="com"><span class="com"># chef-client</span></span> |
[2016-10-25T04:47:36-07:00] INFO: Forking chef instance to converge…
Starting Chef Client, version 11.6.2
[2016-10-25T04:47:36-07:00] INFO: *** Chef 11.6.2 ***
[2016-10-25T04:47:37-07:00] INFO: Run List is
] [2016-10-25T04:47:37-07:00] INFO: Run List expands to [cookbook-test] [2016-10-25T04:47:37-07:00] INFO: Starting Chef Run for node1.example.com
[2016-10-25T04:47:37-07:00] INFO: Running start handlers
[2016-10-25T04:47:37-07:00] INFO: Start handlers complete.
resolving cookbooks for run list: [«cookbook-test»] [2016-10-25T04:47:37-07:00] INFO: Loading cookbooks [cookbook-test] Synchronizing Cookbooks:
[2016-10-25T04:47:37-07:00] INFO: Storing updated cookbooks/cookbook-test/recipes/default.rb in the cache.
[2016-10-25T04:47:37-07:00] INFO: Storing updated cookbooks/cookbook-test/metadata.rb in the cache.
[2016-10-25T04:47:37-07:00] INFO: Storing updated cookbooks/cookbook-test/README.md in the cache.
[2016-10-25T04:47:37-07:00] INFO: Storing updated cookbooks/cookbook-test/CHANGELOG.md in the cache.
— cookbook-test
Compiling Cookbooks…
Converging 1 resources
Recipe: cookbook-test::default
* group[system-admins] action create[2016-10-25T22:23:38-07:00] INFO: Processing group[system-admins] action create (cookbook-test::default line 9)
(up to date)
* user[sanjay] action create[2016-10-25T04:47:37-07:00] INFO: Processing user[sanjay] action create (cookbook-test::default line 9)
(up to date)
[2016-10-25T04:47:37-07:00] INFO: Chef Run complete in 0.48225768 seconds
[2016-10-25T04:47:37-07:00] INFO: Running report handlers
[2016-10-25T04:47:37-07:00] INFO: Report handlers complete
Chef Client finished, 0 resources updated
To create one more sendmail installation and run recipe, type on WorkStation
1 | <span class="com"><span class="com"># vim /usr/local/src/chef/cookbooks/cookbook-test/recipes/sendmail.rb</span></span> |
1 2 3 4 5 6 7 8 | <span class="kwd"><span class="kwd">package</span></span> <span class="str"><span class="str">'sendmail'</span></span> <span class="kwd"><span class="kwd">do</span></span><span class="pln"><span class="pln"> action </span></span><span class="pun"><span class="pun">:</span></span><span class="pln"><span class="pln">install </span></span><span class="kwd"><span class="kwd">end</span></span><span class="pln"><span class="pln"> service </span></span><span class="str"><span class="str">'sendmail'</span></span> <span class="kwd"><span class="kwd">do</span></span><span class="pln"><span class="pln"> action </span></span><span class="pun"><span class="pun">[</span></span> <span class="pun"><span class="pun">:</span></span><span class="pln"><span class="pln">enable</span></span><span class="pun"><span class="pun">,:</span></span><span class="pln"><span class="pln">start </span></span><span class="pun"><span class="pun">]</span></span> <span class="kwd"><span class="kwd">end</span></span> |
Upload the cookbook
1 | <span class="com"><span class="com"># knife upload cookbooks cookbook-test</span></span> |
Run on the node:
1 | <span class="com"><span class="com"># chef-client</span></span> |
Recipe: cookbook-test::sendmail
* package[sendmail] action install[2016-10-25T22:05:22-07:00] INFO: Processing package[sendmail] action install (cookbook-test::sendmail line 1)
[2016-10-25T22:06:14-07:00] INFO: package[sendmail] installing sendmail-8.14.4-8.el6 from base repository
— install version 8.14.4-8.el6 of package sendmail
* service[sendmail] action enable[2016-10-28T04:12:10-07:00] INFO: Processing service[sendmail] action enable (system-users::sendmail line 5)
(up to date)
* service[sendmail] action start[2016-10-28T04:12:11-07:00] INFO: Processing service[sendmail] action start (system-users::sendmail line 5)
[2016-10-28T04:12:11-07:00] INFO: service[sendmail] started
— start service service[sendmail]
This is how Chef works. The official site contains a large amount of information about writing recipes and setting up the program.
Add comment