yum install https://repo.saltstack.com/yum/redhat/salt-repo-latest-1.el7.noarch.rpm

服务器A：yum -y install salt-master salt-minion服务器B：yum -y install salt-minion

服务器A：yum -y install salt-master salt-minion服务器B：yum -y install salt-minion

master: 192.168.56.11   可以是主机名需要解析（指定服务端的IP地址）id：   唯一标识符，可以不配，不配默认就是主机名

[root@linux-node1 ~]# ll /etc/salt/total 112-rw-r----- 1 root root  2626 Jun 11 04:43 clouddrwxr-xr-x 2 root root     6 Jun 14 04:42 cloud.conf.ddrwxr-xr-x 2 root root     6 Jun 14 04:42 cloud.deploy.ddrwxr-xr-x 2 root root     6 Jun 14 04:42 cloud.maps.ddrwxr-xr-x 2 root root     6 Jun 14 04:42 cloud.profiles.ddrwxr-xr-x 2 root root     6 Jun 14 04:42 cloud.providers.d-rw-r----- 1 root root 39122 Jun 11 04:43 masterdrwxr-xr-x 2 root root     6 Jun 14 04:42 master.d-rw-r----- 1 root root 31485 Jun 14 19:19 miniondrwxr-xr-x 2 root root     6 Jun 14 04:42 minion.d-rw-r--r-- 1 root root    23 Jun 14 19:19 minion_iddrwxr-xr-x 4 root root    32 Jun 14 19:15 pki-rw-r----- 1 root root 26460 Jun 11 04:43 proxy-rw-r----- 1 root root   344 Jun 11 04:43 roster

[root@linux-node1 ~]# cat /etc/salt/minion_idlinux-node1.example.com

drwxr-xr-x 4 root root    32 Jun 14 19:15 pki├── pki│   ├── master│   └── minion│       ├── minion.pem  私钥│       └── minion.pub  公钥

[root@linux-node1 salt]# tree pki/pki/├── master│   ├── master.pem    私钥│   ├── master.pub    公钥│   ├── minions│   ├── minions_autosign│   ├── minions_denied│   ├── minions_pre    接收到minion的公钥 等待master的同意│   │   ├── linux-node1.example.com使用id作为公钥的名称│   │   └── linux-node2.example.com│   └── minions_rejected└── minion  minion的公钥和私钥    ├── minion.pem    └── minion.pub

vim /etc/salt/minionmaster: 192.168.56.11       指定服务端[root@linux-node2 ~]# systemctl start salt-minion  启动服务

[root@linux-node1 salt]# salt-keyAccepted Keys:       同意的Denied Keys:                拒绝的Unaccepted Keys:            等待同意的linux-node1.example.comlinux-node2.example.comRejected Keys:

[root@linux-node1 salt]# salt-key -A[root@linux-node1 salt]# salt-key -a 指定id[root@linux-node1 salt]# salt-key -a 支持通配符

[root@linux-node1 salt]# salt-key -AThe following keys are going to be accepted:Unaccepted Keys:linux-node1.example.comlinux-node2.example.comProceed? [n/Y] YKey for minion linux-node1.example.com accepted.Key for minion linux-node2.example.com accepted.

pki/├── master│   ├── master.pem│   ├── master.pub│   ├── minions│   │   ├── linux-node1.example.com│   │   └── linux-node2.example.com│   ├── minions_autosign│   ├── minions_denied│   ├── minions_pre│   └── minions_rejected└── minion    ├── minion_master.pub  同意之后master发送公钥    ├── minion.pem    └── minion.pub