LoginSignup
1
1

More than 5 years have passed since last update.

@bwtakacyinQuipper Limited

PuppetでのPostgreSQLインストール方法

Last updated at Posted at 2016-05-21

訳あってPuppetでPostgreSQLをインストールする方法を探していて、PuppetLabsが提供しているモジュールが使えそうだったので触った手順をメモしておく。

環境は
* CentOS 7.2
* Puppet 3.8.7

Puppetはスタンドアローンモード、自サーバ適用で試した。

Puppetのインストール

デフォルトではyumでは入らないのでPuppetLabsが提供しているレポジトリをインストールする。

[root@localhost ~]# rpm -ivh http://yum.puppetlabs.com/puppetlabs-release-el-7.noarch.rpm
http://yum.puppetlabs.com/puppetlabs-release-el-7.noarch.rpm を取得中
警告: /var/tmp/rpm-tmp.d38UNf: ヘッダー V4 RSA/SHA1 Signature、鍵 ID 4bd6ec30: NOKEY
準備しています...              ################################# [100%]
更新中 / インストール中...
   1:puppetlabs-release-7-12          ################################# [100%]

puppetをyumでインストール。

[root@localhost ~]# yum install puppet

[root@localhost ~]# puppet --version
3.8.7

manifest置き場のディレクトリを作っておく。なぜインストール時に作ってくれないのか。。。

[root@localhost ~]# mkdir -p /etc/puppet/manifests

PuppetlabsのPostgreSQLモジュールのインストール

puppet moduleコマンドでインストールできる。

[root@localhost ~]# puppet module install puppetlabs-postgresql
Notice: Preparing to install into /etc/puppet/modules ...
Notice: Downloading from https://forgeapi.puppetlabs.com ...
Notice: Installing -- do not interrupt ...
/etc/puppet/modules
└─┬ puppetlabs-postgresql (v4.7.1)
  ├── puppetlabs-apt (v2.2.2)
  ├── puppetlabs-concat (v2.1.0)
  └── puppetlabs-stdlib (v4.12.0)

ちなみにpuppet moduleコマンドは検索もできる。

[root@localhost postgresql]# puppet module search postgresql
Notice: Searching https://forgeapi.puppetlabs.com ...
NAME                                     DESCRIPTION                   AUTHOR          KEYWORDS     
puppetlabs-postgresql                    Offers support for basic ...  @puppetlabs     postgresql   
example42-postgresql                     Puppet module for postgresql  @example42      postgresql   
akumria-postgresql                       Install and configure the...  @akumria        postgresql   
godp1301-postgresql                      PostgreSQL defined resour...  @godp1301                    
herculesteam-augeasproviders_postgresql  Augeas-based postgresql t...  @herculesteam   postgresql   
npwalker-pe_external_postgresql          A module for installing a...  @npwalker                    
inkling-postgresql                       PostgreSQL defined resour...  @inkling        postgresql   
icinga-icingaweb2                        Module to install and mai...  @icinga         postgresql   
stschulte-postgres                       Manage postgres roles and...  @stschulte      postgresql   
ULHPC-backupninja                        Install and configure bac...  @ULHPC          postgresql   
rhoml-pgbouncer                          Installs and configure pg...  @rhoml          postgresql   
chrisjohntapp-repmgr                     Module to install and con...  @chrisjohntapp  postgresql   
cpitman-database_schema                  Manages database schema c...  @cpitman        postgresql   
it2ndq-barman                            Barman (Backup and Recove...  @it2ndq         postgresql   
leoc-phppgadmin                          Deprecated! Use velaluqa/...  @leoc           postgresql   
mwhahaha-pgpool                          A puppet module to config...  @mwhahaha       postgresql   
jlcox-postgresplus                       Installation and confgiur...  @jlcox          postgresql   
Envek-pgtune                             Configures PostgreSQL ins...  @Envek          postgresql   
domcleal-augeasproviders                 Alternative Augeas-based ...  @domcleal       postgresql   
jhoblitt-pureftpd                        Manages the pure-ftpd pac...  @jhoblitt       postgresql   
knowshan-phppgadmin                      Install and configure php...  @knowshan       postgresql   
jdowning-wal_e                           Setup wal_e                   @jdowning       postgresql   
velaluqa-phppgadmin                      Puppet PhpPgAdmin Module      @velaluqa       postgresql   
SchnWalter-happydev                      Setup a Development Envir...  @SchnWalter     postgresql   
mjhas-mailserver                         This Module provides a ma...  @mjhas          postgresql   
echoes-postgres_xc                       Postgres-XC Module            @echoes         postgresql

Proxy環境下でのモジュールインストール

以下のパラメータを/etc/puppet/puppet.confに設定する。

  • http_proxy_host
  • http_proxy_port
  • http_proxy_user
  • http_proxy_password

PostgreSQLのインストール＆起動

READMEのUsageを見ると、postgresql::serverクラスをmanifest内で使えばよいらしい。

とりあえず、自サーバにインストールするようなmanifestを書いてみる。

/etc/puppet/manifests/site.pp

class {'postgresql::server': 
    listen_addresses  => '*',
    postgres_password => 'postgres',
}

適用してみる。

[root@localhost manifests]# puppet apply /etc/puppet/manifests/site.pp 
Warning: Config file /etc/puppet/hiera.yaml not found, using Hiera defaults
Warning: Scope(Concat[/var/lib/pgsql/data/pg_ident.conf]): The $force parameter to concat is deprecated and has no effect.
Notice: Compiled catalog for localhost in environment production in 0.87 seconds
Notice: /Stage[main]/Postgresql::Client/Package[postgresql-client]/ensure: created
Notice: /Stage[main]/Postgresql::Client/File[/usr/local/bin/validate_postgresql_connection.sh]/ensure: defined content as '{md5}20301932819f035492a30880f5bf335a'
Notice: /Stage[main]/Postgresql::Server::Install/Package[postgresql-server]/ensure: created
Notice: /Stage[main]/Postgresql::Server::Initdb/Exec[postgresql_initdb]/returns: executed successfully
Notice: /Stage[main]/Postgresql::Server::Config/File[systemd-override]/ensure: created
Notice: /Stage[main]/Postgresql::Server::Config/Postgresql::Server::Config_entry[data_directory]/Postgresql_conf[data_directory]/ensure: created
Notice: /Stage[main]/Postgresql::Server::Config/Concat[/var/lib/pgsql/data/pg_ident.conf]/File[/var/lib/pgsql/data/pg_ident.conf]/content: content changed '{md5}f11c8332d3f444148c0b8ee83ec5fc6d' to '{md5}9300ac105fe777787ac9e793b8df8d25'
Notice: /Stage[main]/Postgresql::Server::Config/Concat[/var/lib/pgsql/data/pg_ident.conf]/File[/var/lib/pgsql/data/pg_ident.conf]/mode: mode changed '0600' to '0640'
Notice: /Stage[main]/Postgresql::Server::Config/Exec[restart-systemd]: Triggered 'refresh' from 1 events
Notice: /Stage[main]/Postgresql::Server::Config/Postgresql::Server::Config_entry[listen_addresses]/Postgresql_conf[listen_addresses]/ensure: created
Notice: /Stage[main]/Postgresql::Server::Config/Postgresql::Server::Config_entry[port]/Postgresql_conf[port]/ensure: created
Notice: /Stage[main]/Postgresql::Server::Config/Concat[/var/lib/pgsql/data/pg_hba.conf]/File[/var/lib/pgsql/data/pg_hba.conf]/content: content changed '{md5}9784211d3c0e7ad5a539b9dcb964b9c3' to '{md5}c31ee6f98ede22591533e8056938c902'
Notice: /Stage[main]/Postgresql::Server::Config/Concat[/var/lib/pgsql/data/pg_hba.conf]/File[/var/lib/pgsql/data/pg_hba.conf]/mode: mode changed '0600' to '0640'
Notice: /Stage[main]/Postgresql::Server::Service/Anchor[postgresql::server::service::begin]: Triggered 'refresh' from 1 events
Notice: /Stage[main]/Postgresql::Server::Service/Service[postgresqld]/ensure: ensure changed 'stopped' to 'running'
Notice: /Stage[main]/Postgresql::Server::Service/Postgresql::Validate_db_connection[validate_service_is_running]/Exec[validate postgres connection for @:5432/postgres]: Triggered 'refresh' from 1 events
Notice: /Stage[main]/Postgresql::Server::Service/Anchor[postgresql::server::service::end]: Triggered 'refresh' from 1 events
Notice: /Stage[main]/Postgresql::Server::Reload/Exec[postgresql_reload]: Triggered 'refresh' from 1 events
Notice: Finished catalog run in 45.50 seconds
[root@localhost manifests]# pgrep -a postgres
29258 /usr/bin/postgres -D /var/lib/pgsql/data -p 5432
29259 postgres: logger process                        
29261 postgres: checkpointer process                  
29262 postgres: writer process                        
29263 postgres: wal writer process                    
29264 postgres: autovacuum launcher process           
29265 postgres: stats collector process
[root@localhost manifests]# rpm -qa | grep postgres
postgresql-9.2.15-1.el7_2.x86_64
postgresql-libs-9.2.15-1.el7_2.x86_64
postgresql-server-9.2.15-1.el7_2.x86_64

ふむ。OSデフォルトで用意しているPostgreSQLが入るようだ。

インストールするPostgreSQLのバージョンを変える

ドキュメントを読んでみたところ、インストールするPostgreSQLのバージョンは指定できるらしい。指定した場合PostgreSQLオフィシャルのパッケージが利用されるとある。こっちの方が良いのでmanifestを修正してみる。

/etc/puppet/mafiests/site.pp
class { 'postgresql::globals':
    manage_package_repo => true,
    version             => '9.5',
}

class {'postgresql::server': 
    listen_addresses  => '*',
    postgres_password => 'postgres',
}

manage_package_repoをtrueにして、versionで入れたいバージョンを指定すればOK。
適用してみる。

[root@localhost manifests]# puppet apply /etc/puppet/manifests/site.pp 
Warning: Config file /etc/puppet/hiera.yaml not found, using Hiera defaults
Warning: Scope(Concat[/var/lib/pgsql/9.5/data/pg_ident.conf]): The $force parameter to concat is deprecated and has no effect.
Notice: Compiled catalog for localhost in environment production in 0.99 seconds
Notice: /Stage[main]/Postgresql::Repo::Yum_postgresql_org/File[/etc/pki/rpm-gpg/RPM-GPG-KEY-PGDG-95]/ensure: defined content as '{md5}78b5db170d33f80ad5a47863a7476b22'
Notice: /Stage[main]/Postgresql::Repo::Yum_postgresql_org/Yumrepo[yum.postgresql.org]/ensure: created
Notice: /Stage[main]/Postgresql::Server::Install/Package[postgresql-server]/ensure: created
Notice: /Stage[main]/Postgresql::Server::Initdb/Exec[postgresql_initdb]/returns: executed successfully
Notice: /Stage[main]/Postgresql::Server::Config/File[systemd-override]/ensure: created
Notice: /Stage[main]/Postgresql::Server::Config/Postgresql::Server::Config_entry[data_directory]/Postgresql_conf[data_directory]/ensure: created
Notice: /Stage[main]/Postgresql::Server::Config/Concat[/var/lib/pgsql/9.5/data/pg_ident.conf]/File[/var/lib/pgsql/9.5/data/pg_ident.conf]/content: content changed '{md5}f11c8332d3f444148c0b8ee83ec5fc6d' to '{md5}9300ac105fe777787ac9e793b8df8d25'
Notice: /Stage[main]/Postgresql::Server::Config/Concat[/var/lib/pgsql/9.5/data/pg_ident.conf]/File[/var/lib/pgsql/9.5/data/pg_ident.conf]/mode: mode changed '0600' to '0640'
Notice: /Stage[main]/Postgresql::Server::Config/Exec[restart-systemd]: Triggered 'refresh' from 1 events
Notice: /Stage[main]/Postgresql::Server::Config/Postgresql::Server::Config_entry[listen_addresses]/Postgresql_conf[listen_addresses]/ensure: created
Notice: /Stage[main]/Postgresql::Server::Config/Postgresql::Server::Config_entry[port]/Postgresql_conf[port]/ensure: created
Notice: /Stage[main]/Postgresql::Server::Config/Concat[/var/lib/pgsql/9.5/data/pg_hba.conf]/File[/var/lib/pgsql/9.5/data/pg_hba.conf]/content: content changed '{md5}16401f4bb2f7a0cbeac3ecb5133e2904' to '{md5}c31ee6f98ede22591533e8056938c902'
Notice: /Stage[main]/Postgresql::Server::Config/Concat[/var/lib/pgsql/9.5/data/pg_hba.conf]/File[/var/lib/pgsql/9.5/data/pg_hba.conf]/mode: mode changed '0600' to '0640'
Notice: /Stage[main]/Postgresql::Server::Service/Anchor[postgresql::server::service::begin]: Triggered 'refresh' from 1 events
Notice: /Stage[main]/Postgresql::Server::Service/Service[postgresqld]/ensure: ensure changed 'stopped' to 'running'
Notice: /Stage[main]/Postgresql::Server::Service/Postgresql::Validate_db_connection[validate_service_is_running]/Exec[validate postgres connection for @:5432/postgres]: Triggered 'refresh' from 1 events
Notice: /Stage[main]/Postgresql::Server::Service/Anchor[postgresql::server::service::end]: Triggered 'refresh' from 1 events
Notice: /Stage[main]/Postgresql::Server::Reload/Exec[postgresql_reload]: Triggered 'refresh' from 1 events
Notice: /Stage[main]/Postgresql::Server::Passwd/Exec[set_postgres_postgrespw]/returns: ALTER ROLE
Notice: /Stage[main]/Postgresql::Server::Passwd/Exec[set_postgres_postgrespw]/returns: executed successfully
Notice: Finished catalog run in 51.49 seconds
[root@localhost manifests]# pgrep -a postgres
30567 /usr/pgsql-9.5/bin/postgres -D /var/lib/pgsql/9.5/data
30568 postgres: logger process                              
30570 postgres: checkpointer process                        
30571 postgres: writer process                              
30572 postgres: wal writer process                          
30573 postgres: autovacuum launcher process                 
30574 postgres: stats collector process                     
[root@localhost manifests]# rpm -qa | grep postgres
postgresql95-server-9.5.3-2PGDG.rhel7.x86_64
postgresql95-9.5.3-2PGDG.rhel7.x86_64
postgresql95-libs-9.5.3-2PGDG.rhel7.x86_64

いいですね。

データベースとユーザを作成してみる

機能があるというので試してみる。

/etc/puppet/manifests/site.pp
class { 'postgresql::globals':
    manage_package_repo => true,
    version             => '9.5',
}

class {'postgresql::server': 
    listen_addresses  => '*',
    postgres_password => 'postgres',
}

postgresql::server::db { 'test': 
    user      => 'testuser',
    password  => 'password',
    grant     => 'all',
    require   => Class['postgresql::server'],
}

postgresql::server::dbはclassではないので若干きもい。（真面目にmanifestを構造化していないのも悪い気がするが）

[root@localhost manifests]# puppet apply /etc/puppet/manifests/site.pp 
Warning: Config file /etc/puppet/hiera.yaml not found, using Hiera defaults
Warning: Scope(Concat[/var/lib/pgsql/9.5/data/pg_ident.conf]): The $force parameter to concat is deprecated and has no effect.
Notice: Compiled catalog for localhost in environment production in 1.16 seconds
Notice: /Stage[main]/Postgresql::Server::Service/Service[postgresqld]/ensure: ensure changed 'stopped' to 'running'
Notice: /Stage[main]/Main/Postgresql::Server::Db[test]/Postgresql::Server::Role[testuser]/Postgresql_psql[CREATE ROLE testuser ENCRYPTED PASSWORD ****]/command: command changed 'notrun' to 'CREATE ROLE "testuser" ENCRYPTED PASSWORD '$NEWPGPASSWD' LOGIN NOCREATEROLE NOCREATEDB NOSUPERUSER  CONNECTION LIMIT -1'
Notice: /Stage[main]/Main/Postgresql::Server::Db[test]/Postgresql::Server::Database[test]/Postgresql_psql[Create db 'test']/command: command changed 'notrun' to 'CREATE DATABASE "test" WITH OWNER="postgres" TEMPLATE="template0"   '
Notice: /Stage[main]/Main/Postgresql::Server::Db[test]/Postgresql::Server::Database[test]/Postgresql_psql[REVOKE CONNECT ON DATABASE "test" FROM public]: Triggered 'refresh' from 1 events
Notice: /Stage[main]/Main/Postgresql::Server::Db[test]/Postgresql::Server::Database_grant[GRANT testuser - all - test]/Postgresql::Server::Grant[database:GRANT testuser - all - test]/Postgresql_psql[grant:database:GRANT testuser - all - test]/command: command changed 'notrun' to 'GRANT ALL ON DATABASE "test" TO
      "testuser"'
Notice: Finished catalog run in 1.96 seconds
[root@localhost manifests]# pgrep -a postgres
31428 /usr/pgsql-9.5/bin/postgres -D /var/lib/pgsql/9.5/data
31430 postgres: logger process                              
31432 postgres: checkpointer process                        
31433 postgres: writer process                              
31434 postgres: wal writer process                          
31435 postgres: autovacuum launcher process                 
31436 postgres: stats collector process                     
[root@localhost manifests]# sudo -u postgres psql -l
                                         データベース一覧
   名前    |  所有者  | エンコーディング |  照合順序   | Ctype(変換演算子) |      アクセス権       
-----------+----------+------------------+-------------+-------------------+-----------------------
 postgres  | postgres | UTF8             | ja_JP.UTF-8 | ja_JP.UTF-8       | 
 template0 | postgres | UTF8             | ja_JP.UTF-8 | ja_JP.UTF-8       | =c/postgres          +
           |          |                  |             |                   | postgres=CTc/postgres
 template1 | postgres | UTF8             | ja_JP.UTF-8 | ja_JP.UTF-8       | =c/postgres          +
           |          |                  |             |                   | postgres=CTc/postgres
 test      | postgres | UTF8             | ja_JP.UTF-8 | ja_JP.UTF-8       | =T/postgres          +
           |          |                  |             |                   | postgres=CTc/postgres+
           |          |                  |             |                   | testuser=CTc/postgres
(4 行)

[postgres@localhost ~]$ psql -h localhost -Utestuser -d test
ユーザ testuser のパスワード: 
psql (9.5.3)
"help" でヘルプを表示します.

localhost 31589 test=> \d
リレーションがありません。

うーん。このあたりは自前でやったほうが制御が楽な気がする。

以上！

参考

1
1
0

Register as a new user and use Qiita more conveniently

  1. You get articles that match your needs
  2. You can efficiently read back useful information
  3. You can use dark theme
What you can do with signing up
Sign upLogin
1
1