book

Learning MCollective

by Jo Rhett

August 2014

Intermediate to advanced

284 pages

5h 24m

English

O'Reilly Media, Inc.

Read now

Unlock full access

Who This Book Is ForWhat to Expect from MeWhat You Will NeedWhat You’ll Find in This BookHow to Use This BookIPv6 ReadyConventions Used in This BookUsing Code ExamplesSafari® Books OnlineHow to Contact UsAcknowledgments
What Is MCollective?Why Parallel Execution?How MCollective WorksWhy Use MCollectiveHow to Fail with MCollectiveTime to Get Started
RequirementsOperating SystemMiddleware BrokerWhere to InstallPasswords and KeysPuppet Labs RepositorySupported PlatformsConfiguring ActiveMQInstall the SoftwareTune the Configuration FileStart the ServiceFirewall ChangeInstalling ServersInstall the SoftwareServer Configuration FileStart the ServiceCreating a ClientInstall the SoftwareClient Configuration FileSecurity ConsiderationsInstalling from SourceUsing the InstallerCreating an Init ScriptCreating a PackageTesting Your InstallationTroubleshootingPasswordsNetworkingConnector Names
Configuration FileConnectorFactsInventoryInventory ReportsDiscoveryFiltersCombination FiltersLimitsOutputClassesPuppetChefBash Completion
Puppet Enterprisemcomaster
Connector PluginsInstalling Agents from PackagesInstalling Agents from SourceCopy to Plugins DirectoryNotify mcollectivedDisabling AgentsUsing Client PluginsFinding Community PluginsRecommended Plugins
Time SyncKeeping Sessions AliveActivating ChangesServer StatisticsLoggingMonitoring Servers
PuppetInstalling the Puppet ModuleUsing r10kStraight from GitHubConfiguring MCollective Using PuppetHiera Configuration DataSharing Facts with PuppetInstalling Agents with PuppetValidating the InstallationDebuggingChefConfiguring MCollective using ChefSharing Ohai Data with ChefSharing Chef Roles and Recipes as ClassesInstalling Agents with ChefTLS Security LimitationsValidating the InstallationDebugging
Install the Puppet AgentChecking Puppet StatusControlling the Puppet DaemonInvoking Ad Hoc Puppet RunsManipulating Puppet Resource TypesRestricting Which Resources Can Be ControlledBlock MCollective from Puppet Resources

Install the Chef AgentChecking Chef StatusInvoking Ad Hoc Chef Client Runs
Messaging BrokersNetwork SecurityTransport ConnectorsFirewall ConfigurationsIPv6 Dual-Stack EnvironmentsActiveMQ Config StructureDetailed Configuration ReviewBroker DefinitionTopic and Queue TuningAuthentication and AuthorizationTransport ConnectorsManagement InterfacesConclusionActiveMQ ClustersNetwork of BrokersMaster/Slave RedundancyEncrypted Broker LinksConclusionLarge-Scale Broker ConfigurationsUnderstanding MCollective’s NeedsRecommendations for Baseline TuningSupporting Thousands of ServersReaching Globally Diverse ServersUpgrading to ActiveMQ 5.9.1Checking for Known ProblemsConclusion
Anonymous TLSAdvantagesDisadvantagesPuppet Module SetupManual SetupTestingCA-Verified TLS ServersAdvantagesDisadvantagesSetup PathsTLS using Puppet CATLS using Another CAValidate keyStore and trustStoreCA-Verified TLS ClientsClients of the Puppet CAClients Using Another CAChange the Client ConfigurationConclusion
Deciding When to Create MoreCollectives != ClusteringConfiguration TrafficLocalizing TrafficLimiting AccessConclusion
How Authentication WorksPre-Shared Key AuthenticationPuppet SetupSSL AuthenticationServer ConfigurationClient ConfigurationKey SynchronizationRSA Authentication AES EncryptionServer ConfigurationClient ConfigurationKey SynchronizationSSHKey AuthenticationPuppetAuthorizationRule FormatCaller IDsDefining ActionPolicy with PuppetDefining ActionPolicy ManuallyAuditingConclusion
SimpleRPC FrameworkStart with a BaselineValidate InputSend RepliesDefine an Agent DDLRead Config FilesInstall Your AgentTesting the Agent
Executing ScriptsExecuting CommandsAccessing Facts, Agents, and ClassesResults and ExceptionsLogging
Baseline ClientClient FiltersResults and ExceptionsInstall Your Client
Baseline Client ProgramRunning Your Program
Authorization PluginsFacts Plugins
Registration AgentRegistration CollectorRegistration and SSL Security
Create a ListenerSubmit reply-toProcess Responses
Make Use of Configuration ManagementChoose the Best Discovery MethodAuthorize and Audit Each Request
Consider the Strings AnalogyUtilize Support ResourcesRead Blogs
Useful Commands ReferenceUsing r10k to install Puppet ModulesUsing the PuppetLabs MCollective ModuleUsing RabbitMQInstalling RabbitMQConfiguring RabbitMQ with PuppetConfiguring RabbitMQ ManuallyUsing an Exchange with a RabbitMQ Federation
Configuring Debian and Ubuntu FirewallsFreeBSDUsing the Next Generation Package ManagerConfiguring ActiveMQConfiguring the FirewallInstalling AgentsMac OS XInstalling RubyInstalling MCollectiveSolarisInstalling on Solaris 11Installing on Solaris 10 and BeforeWindowsAcquiring RubyAdding the RubyGem DependenciesInstalling MCollectiveManaging Ruby Versions with RVM

Content preview from Learning MCollective

Chapter 9. Waking the Chef

In Chapter 7, we showed how to use Chef to install and configure MCollective. In this chapter, we’re going to show how MCollective can:

Use the Chef recipes and roles applied to the node in filters
Use Ohai data as facts for MCollective filters
Query, start, stop, and restart the Chef client
Wake the Chef client to evaluate the node immediately

To control the Chef daemon, you’ll need to upload the chef-client cookbook and its dependencies. I did it like this:

~$ cd chef_repo/cookbooks
cookbooks$ knife cookbook site download chef-client
Downloading chef-client from the cookbooks site at version 3.6.0
  to /home/jorhett/chef-repo/cookbooks/chef-client-3.6.0.tar.gz
Cookbook saved: /home/jorhett/chef-repo/cookbooks/chef-client-3.6.0.tar.gz
cookbooks$ knife cookbook site download cron
Downloading cron from the cookbooks site at version 1.4.0
  to /home/jorhett/chef-repo/cookbooks/cron-1.4.0.tar.gz
Cookbook saved: /home/jorhett/chef-repo/cookbooks/cron-1.4.0.tar.gz
cookbooks$ knife cookbook site download logrotate
Downloading logrotate from the cookbooks site at version 1.6.0
  to /home/jorhett/chef-repo/cookbooks/logrotate-1.6.0.tar.gz
Cookbook saved: /home/jorhett/chef-repo/cookbooks/logrotate-1.6.0.tar.gz
cookbooks$ tar xzf chef-client-3.6.0.tar.gz
cookbooks$ tar xzf cron-1.4.0.tar.gz
cookbooks$ tar xzf logrotate-1.6.0.tar.gz
cookbooks$ knife cookbook upload chef-client cron logrotate Uploading chef-client [3.6.0] Uploading cron [1.4.0] Uploading logrotate ...