Saltstack deployment nginx+php

Since there are basically nginx+php environments in the production environment, the process of deploying php in salt is not listed separately. Here, I will deploy the nginx+php environment with my scripts in the production environment.

Deployment planning:

1) compile and install libiconv, libmcrypt, mhash and mcrypt

2) compile and install php

3) add a start-stop script

4) add to the system service and set boot

5) copy the log cutting script

6) add log cutting timing task

7) install the memcached/redis/protobuf extension

8) modify php.ini to load php extension

Salt deployment directory architecture:

[root@salt-master ~] # tree / srv/salt/base//srv/salt/base/ ├── cron │ ├── files │ │ ├── nginx_cut_log.sh │ │ └── php_cut_log.sh │ ├── nginx.sls │ └── php.sls ├── nginx │ ├── files │ │ ├── nginx nginx-1.6 .3.tar.gz │ │ └── nginx.conf │ ├── install.sls │ └── service.sls ├── packages │ └── install.sls ├── pcre │ ├── files │ │ └── pcre-8.37.tar.gz │ └── install.sls ├── php extension.sls files libmemcached-1. 0.18.tar.gz │ │ ├── memcached-2.2.0.tgz │ │ ├── php-5.6.16.tar.gz │ │ ├── php-fpm │ │ ├── php-fpm.conf │ │ ├── php.ini │ │ ├── phpredis-2.2.4.tar.gz │ protobuf.so ─ install.sls │ ├── libiconv │ │ └── files │ │ └── libiconv-1.14.tar.gz │ ├── libiconv.sls │ ├── libmcrypt │ │ └── files │ │ └── libmcrypt-2.5.8.tar.gz libmcrypt.sls mcrypt files └── mcrypt-2.6.8.tar.gz │ ├── mcrypt.sls │ ├── mhash │ │ └── files │ │ └── mhash-0.9.9.9.tar.gz │ ├── mhash.sls │ └── service.sls ├── top.sls └── user ├── nginx.sls └── php.sls18 directories 34 files

Install libiconv:

[root@salt-master base] # cat php/libiconv.sls libiconv-source-install: file.managed:-name: / opt/tools/libiconv-1.14.tar.gz-source: salt://php/libiconv/files/libiconv-1.14.tar.gz-user: root-group: root-mode: 755 cmd.run:-name: cd / opt/tools/ & & tar-zxf libiconv-1.14.tar.gz & & Cd libiconv-1.14 & &. / configure-- prefix=/usr/local & & make & & make install & & / sbin/ldconfig-unless: test-e / usr/local/lib/libiconv.so.2.5.1-require:-file: libiconv-source-install

Install limcrypt:

[root@salt-master base] # cat php/libmcrypt.sls libmcrypt-source-install: file.managed:-name: / opt/tools/libmcrypt-2.5.8.tar.gz-source: salt://php/libmcrypt/files/libmcrypt-2.5.8.tar.gz-user: root-group: root-mode: 755 cmd.run:-name: cd / opt/tools & & tar-zxf libmcrypt-2.5.8.tar .gz & & cd libmcrypt-2.5.8 & configure & & make & & make install & cd libltdl & &. / configure-- enable-ltdl-install & & make & & make install & & / sbin/ldconfig-unless: test-e / usr/local/lib/libmcrypt.so.4.4.8-require:-file: libmcrypt-source-install

Install mhash:

[root@salt-master base] # cat php/mhash.sls mhash-source-install: file.managed:-name: / opt/tools/mhash-0.9.9.9.tar.gz-source: salt://php/mhash/files/mhash-0.9.9.9.tar.gz-user: root-group: root-mode: 755 cmd.run:-name: cd / opt/tools/ & & tar-zxf mhash-0 .9.9.9.tar.gz & & cd mhash-0.9.9.9 & &. / configure & & make & ln-s / usr/local/lib/libmcrypt.la / usr/lib/libmcrypt.la & & ln-s / usr/local/lib/libmcrypt.so / usr/lib/libmcrypt.so & & ln-s / usr/local/lib/libmcrypt.so.4 / usr/lib/libmcrypt.so.4 & & ln-s / usr/local/lib/ Libmcrypt.so.4.4.8 / usr/lib/libmcrypt.so.4.4.8 & & ln-s / usr/local/lib/libmhash.a / usr/lib/libmhash.a & & ln-s / usr/local/lib/libmhash.la / usr/lib/libmhash.la & & ln-s / usr/local/lib/libmhash.so / usr/lib/libmhash.so & & ln-s / usr/local/lib/libmhash.so.2 / usr/lib/libmhash.so.2 & & ln-s / usr/local/lib/libmhash.so.2.0.1 / usr/lib/libmhash.so.2.0.1 & & ln-s / usr/local/bin/libmcrypt-config / usr/bin/libmcrypt-config-unless: test-e / usr/local/lib/libmhash.a-require:-file: mhash-source-install

Install mcrypt:

[root@salt-master base] # cat php/mcrypt.sls mcrypt-source-install: file.managed:-name: / opt/tools/mcrypt-2.6.8.tar.gz-source: salt://php/mcrypt/files/mcrypt-2.6.8.tar.gz-user: root-group: root-mode: 644 cmd.run:-name: cd / opt/tools/ & & tar-zxf mcrypt-2.6.8 .tar.gz & & cd mcrypt-2.6.8 & & / sbin/ldconfig & & configure & & make & & make install-unless: test-e / usr/local/bin/mcrypt-require:-file: mcrypt-source-install

Install php:

[root@salt-master base] # cat php/install.sls include:-packages.install-user.php-php.libiconv-php.libmcrypt-php.mhash-php.mcryptphp-source-install: file.managed:-name: / opt/tools/php-5.6.16.tar.gz-source: salt://php/files/php-5.6.16.tar.gz-user: root-group: root-mode: Cmd.run:-name: cd / opt/tools/ & & tar-zxf php-5.6.16.tar.gz & & cd php-5.6.16 & &. / configure-- prefix=/usr/local/php-- with-config-file-path=/usr/local/php/etc-- with-libxml-dir-- enable-xml-- enable-fpm-- with-fpm-user=www-- with-fpm-group=www-- enable-bcmath-- enable-mbstring-- enable- Gd-native-ttf-enable-sockets-enable-mysqlnd-with-mysql=mysqlnd-with-mysqli=mysqlnd-with-pdo-mysql=mysqlnd-enable-zip-enable-inline-optimization-with-gd-with-bz2-with-zlib-with-mcrypt-with-mhash-with-openssl-with-xmlrpc with-iconv-dir with-freetype-dir with-jpeg-dir with-png-dir without-pear disable-ipv6 disable -pdo--with-gettext-- disable-debug-- without-pdo-sqlite-- disable-rpath-- enable-shmop-- with-curl-- with-curlwrappers-- enable-mbregex-- enable-pcntl-- enable-soap-- enable-sigchild-- enable-pdo & & make ZEND_EXTRA_LIBS='-liconv' & & make install-unless: test-d / usr/local/php-require:-file: php-source-install- User: php-user-group-cmd: libiconv-source-install-cmd: libmcrypt-source-install-cmd: mcrypt-source-install-cmd: mhash-source-install

Configure the php service:

[root@salt-master base] # cat php/service.sls include:-php.install-cron.php/usr/local/php/etc: file.directory:-user: www-group: www-mode: 644-makedirs: True/usr/local/php/etc/php-fpm.conf: file.managed:-source: salt://php/files/php-fpm.conf-user: www-group: www-mode: 644/etc/php.ini: file.managed:-source: salt://php/files/php.ini-user: www-group: www-mode: 644/etc/profile: file.append:-text:-export PATH=$PATH:/usr/local/php/bin:/usr/local/php/sbinphp-init: file.managed:-name: / etc/init.d/php-fpm-source: salt://php / files/php-fpm-user: root-group: root-mode: 755 cmd.run:-name: chkconfig-- add php-fpm & & source / etc/profile-unless: chkconfig-- list | grep php-fpm-require:-file: php-initphp-service: service.running:-name: php-fpm-enable: True-restart: True-require:-cmd: php-init-watch: -file: / etc/php.ini-file: / usr/local/php/etc/php-fpm.conf

Deployment scheduled tasks:

[root@salt-master base] # cat cron/php.sls php-crond-job: file.managed:-name: / opt/tools/scripts/php_cut_log.sh-source: salt://cron/files/php_cut_log.sh-user: root-group: root-mode: 755/bin/bash / opt/tools/scripts/php_cut_log.sh > / dev/null 2 > & 1: cron.present:-identifier : cut php daily logs job-user: root-minute:'0'-hour:'0'-require:-file: php-crond-job

Install the php extension:

[root@salt-master base] # cat php/extension.sls include:-php.servicelibmemcached-source-install: file.managed:-name: / opt/tools/libmemcached-1.0.18.tar.gz-source: salt://php/files/libmemcached-1.0.18.tar.gz-user: root-group: root-mode: 644 cmd.run:-name: cd / opt/tools & & tar-zxf libmemcached-1.0 .18.tar.gz & & cd libmemcached-1.0.18 &. / configure-- prefix=/usr/local/libmemcached-- with-memcached & & make & & make install-unless: test-d / usr/local/libmemcached-require:-file: libmemcached-source-installmemcached-source-install: file.managed:-name: / opt/tools/memcached-2.2.0.tgz-source: salt://php/files/memcached-2. 2.0.tgz-user: root-group: root-mode: 644 cmd.run:-name: cd / opt/tools/ & & tar-zxf memcached-2.2.0.tgz & & cd memcached-2.2.0 & / usr/local/php/bin/phpize &. / configure-- enable-memcached-- with-php-config=/usr/local/php/bin/php-config-- with-libmemcached-dir=/usr/local/libmemcached & & make & & make install-unless: test-x / usr/bin/memcached-require:-file: memcached-source-installphpredis-source-install: file.managed:-name: / opt/tools/phpredis-2.2.4.tar.gz-source: salt://php/files/phpredis-2.2.4.tar.gz-user: root-group: root-mode: 644 cmd.run:-name: cd / opt/tools & & tar-zxf phpredis-2.2.4.tar.gz & & cd phpredis-2.2.4 & & / usr/local/php/bin/phpize & &. / configure-- with-php-config=/usr/local/php/bin/php-config & & make & & make install-unless: test-e / usr/local/php/lib/php/extensions/no-debug-non-zts-20131226/redis.so-require:-file: Phpredis-source-installprotobuf-extension: file.managed:-name: / usr/local/php/lib/php/extensions/no-debug-non-zts-20131226/protobuf.so-source: salt://php/files/protobuf.so-user: www-group: www-mode: 755extension-init: file.managed:-name: / usr/local/php/etc/php.ini-source: salt://php/files/php. Ini-user: www-group: www-replace: True-mode: 644 cmd.run:-name: chown-R www:www / usr/local/php & & source / etc/profile-require:-file: protobuf-extension-file: extension-init-watch:-file: / usr/local/php/etc/php.ini

Top.sls file:

[root@salt-master base] # cat top.sls base: 'salt-minion02.contoso.com':-nginx.service-php.service-php.extension