mirror of
https://github.com/valitydev/salt.git
synced 2024-11-07 08:58:59 +00:00
289 lines
8.4 KiB
ReStructuredText
289 lines
8.4 KiB
ReStructuredText
========================
|
|
Salt 0.9.3 Release Notes
|
|
========================
|
|
|
|
Salt 0.9.3 is finally arrived. This is another big step forward for Salt, new
|
|
features range from proper FreeBSD support to fixing issues seen when
|
|
attaching a minion to a master over the Internet.
|
|
|
|
The biggest improvements in 0.9.3 though can be found in the state system, it
|
|
has progressed from something ready for early testers to a system ready to
|
|
compete with platforms such as Puppet and Chef. The backbone of the state
|
|
system has been greatly refined and many new features are available.
|
|
|
|
Download!
|
|
---------
|
|
|
|
The Salt source can be downloaded from the salt github site:
|
|
|
|
:download:`salt-0.9.3.tar.gz`
|
|
|
|
Or from PiPy:
|
|
|
|
http://pypi.python.org/packages/source/s/salt/salt-0.9.3.tar.gz
|
|
|
|
For instructions on how to set up Salt please see the :ref:`installation`
|
|
instructions.
|
|
|
|
New Features
|
|
------------
|
|
|
|
WAN Support
|
|
```````````
|
|
|
|
Recently more people have been testing Salt minions connecting to Salt Masters
|
|
over the Internet. It was found that Minions would commonly loose their
|
|
connection to the master when working over the internet. The minions can now
|
|
detect if the connection has been lost and reconnect to the master, making
|
|
WAN connections much more reliable.
|
|
|
|
State System Fixes
|
|
```````````````````
|
|
|
|
Substantial testing has gone into the state system and it is ready for real
|
|
world usage. A great deal has been added to the documentation for states and
|
|
the modules and functions available to states have been cleanly documented.
|
|
|
|
A number of State System bugs have also been founds and repaired, the output
|
|
from the state system has also been refined to be extremely clear and concise.
|
|
|
|
Error reporting has also been introduced, issues found in sls files will now
|
|
be clearly reported when executing Salt States.
|
|
|
|
Extend Declaration
|
|
``````````````````
|
|
|
|
The Salt States have also gained the ``extend`` declaration. This declaration
|
|
allows for states to be cleanly modified in a post environment. Simply said,
|
|
if there is an apache.sls file that declares the apache service, then another
|
|
sls can include apache and then extend it:
|
|
|
|
.. code-block:: yaml
|
|
|
|
include:
|
|
- apache
|
|
|
|
extend:
|
|
apache:
|
|
service:
|
|
- require:
|
|
- pkg: mod_python
|
|
|
|
mod_python:
|
|
pkg:
|
|
- installed
|
|
|
|
The notable behavior with the extend functionality is that it literally extends
|
|
or overwrites a declaration set up in another sls module. This means that Salt
|
|
will behave as though the modifications were made directly to the apache sls.
|
|
This ensures that the apache service in this example is directly tied to all
|
|
requirements.
|
|
|
|
Highstate Structure Specification
|
|
`````````````````````````````````
|
|
|
|
This release comes with a clear specification of the Highstate data structure
|
|
that is used to declare Salt States. This specification explains everything
|
|
that can be declared in the Salt SLS modules.
|
|
|
|
The specification is extremely simple, and illustrates how Salt has been able
|
|
to fulfill the requirements of a central configuration manager within a simple
|
|
and easy to understand format and specification.
|
|
|
|
SheBang Renderer Switch
|
|
```````````````````````
|
|
|
|
It came to our attention that having many renderers means that there may be a
|
|
situation where more than one State Renderer should be available within a
|
|
single State Tree.
|
|
|
|
The method chosen to accomplish this was something already familiar to
|
|
developers and systems administrators, a SheBang. The Python State Renderer
|
|
displays this new capability.
|
|
|
|
Python State Renderer
|
|
`````````````````````
|
|
|
|
Until now Salt States could only be declared in yaml or json using jinja or
|
|
mako. A new, very powerful, renderer has been added, making it possible to
|
|
write Salt States in pure Python:
|
|
|
|
.. code-block:: python
|
|
|
|
#!py
|
|
|
|
def run():
|
|
'''
|
|
Install the python-mako package
|
|
'''
|
|
return {'include': ['python'],
|
|
'python-mako': {'pkg': ['installed']}}
|
|
|
|
This renderer is used by making a run function that returns the Highstate data
|
|
structure. Any capabilities of Python can be used in pure Python sls modules.
|
|
|
|
This example of a pure Python sls module is the same as this example in yaml:
|
|
|
|
.. code-block:: yaml
|
|
|
|
include:
|
|
- python
|
|
|
|
python-mako:
|
|
pkg:
|
|
- installed
|
|
|
|
FreeBSD Support
|
|
```````````````
|
|
|
|
Additional support has been added for FreeBSD, this is Salt's first branch out
|
|
of the Linux world and proves the viability of Salt on non-Linux platforms.
|
|
|
|
Salt remote execution already worked on FreeBSD, and should work without issue
|
|
on any Unix-like platform. But this support comes in the form of package
|
|
management and user support, so Salt States also work on FreeBSD now.
|
|
|
|
The new freebsdpkg module provides package management support for FreeBSD
|
|
and the new pw_user and pw_group provide user and group management.
|
|
|
|
Module and State Additions
|
|
--------------------------
|
|
|
|
Cron Support
|
|
````````````
|
|
|
|
Support for managing the system crontab has been added, declaring a cron state
|
|
can be done easily:
|
|
|
|
.. code-block:: yaml
|
|
|
|
date > /tmp/datestamp:
|
|
cron:
|
|
- present
|
|
- user: fred
|
|
- minute: 5
|
|
- hour: 3
|
|
|
|
File State Additions
|
|
````````````````````
|
|
|
|
The file state has been given a number of new features, primarily the
|
|
directory, recurse, symlink and absent functions.
|
|
|
|
file.directory
|
|
Make sure that a directory exists and has the right permissions.
|
|
|
|
.. code-block:: yaml
|
|
|
|
/srv/foo:
|
|
file:
|
|
- directory
|
|
- user: root
|
|
- group: root
|
|
- mode: 1755
|
|
|
|
file.symlink
|
|
Make a symlink.
|
|
|
|
.. code-block:: yaml
|
|
|
|
/var/lib/www:
|
|
file:
|
|
- symlink
|
|
- target: /srv/www
|
|
- force: True
|
|
|
|
file.recurse
|
|
The recurse state function will recursively download a directory on the
|
|
master file server and place it on the minion. Any change in the files on
|
|
the master will be pushed to the minion. The recurse function is very
|
|
powerful and has been tested by pushing out the full Linux kernel source.
|
|
|
|
.. code-block:: yaml
|
|
|
|
/opt/code:
|
|
file:
|
|
- recurse
|
|
- source: salt://linux
|
|
|
|
file.absent
|
|
Make sure that the file is not on the system, recursively delets
|
|
directories, files and symlinks.
|
|
|
|
.. code-block:: yaml
|
|
|
|
/etc/httpd/conf.d/somebogusfile.conf:
|
|
file:
|
|
- absent
|
|
|
|
Sysctl Module and State
|
|
```````````````````````
|
|
|
|
The sysctl module and state allows for sysctl components in the kernel to be
|
|
managed easily. the sysctl module contains the following functions:
|
|
|
|
sysctl.show
|
|
Return a list of sysctl parameters for this minion
|
|
|
|
sysctl.get
|
|
Return a single sysctl parameter for this minion
|
|
|
|
sysctl.assign
|
|
Assign a single sysctl parameter for this minion
|
|
|
|
sysctl.persist
|
|
Assign and persist a simple sysctl parameter for this minion
|
|
|
|
The sysctl state allows for sysctl parameters to be assigned:
|
|
|
|
.. code-block:: yaml
|
|
|
|
vm.swappiness:
|
|
sysctl:
|
|
- present
|
|
- value: 20
|
|
|
|
Kernel Module Management
|
|
````````````````````````
|
|
|
|
A module for managing Linux kernel modules has been added. The new functions
|
|
are as follows:
|
|
|
|
kmod.available
|
|
Return a list of all available kernel modules
|
|
|
|
kmod.check_available
|
|
Check to see if the specified kernel module is available
|
|
|
|
kmod.lsmod
|
|
Return a dict containing information about currently loaded modules
|
|
|
|
kmod.load
|
|
Load the specified kernel module
|
|
|
|
kmod.remove
|
|
Unload the specified kernel module
|
|
|
|
The kmod state can enforce modules be either present or absent:
|
|
|
|
.. code-block:: yaml
|
|
|
|
kvm_intel:
|
|
kmod:
|
|
- present
|
|
|
|
Ssh Authorized Keys
|
|
```````````````````
|
|
The ssh_auth state can distribute ssh authorized keys out to minions. Ssh
|
|
authorized keys can be present or absent.
|
|
|
|
.. code-block:: yaml
|
|
|
|
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:
|
|
ssh_auth:
|
|
- present
|
|
- user: frank
|
|
- enc: dsa
|
|
- comment: 'Frank's key'
|
|
|