salt-docker-centos7

Easy Salt state testing with Docker

This repo simplified / inspired by Love Nyberg's work but ported to CentOS 7 and split master and minion. It serves the same purpose as the original one to quick bring up a salt stack to let you verify some concept.

Salt master will auto accept all minions.

Salt versions

• Official 2015.5.0 within standard EPEL release

Get it running

MacOSX: Change Docker Desktop setting

vi ~/Library/Group Containers/group.com.docker/settings.json

...
"deprecatedCgroupv1": true,
...

Salt cluster with docker compose

Using docker compose is simplier. Move docker-compose.yml.example to docker-compose.yml and run:

docker-compose up ＆

Use same approach docker exec -it [master_container_id] bash to jump into salt master container.

Build

git clone https://github.com/zanhsieh/salt-docker-centos7.git
cd salt-docker-centos7/img_master
docker build -t ming/salt-master .
cd ../img_minion
docker build -t ming/salt-minion .

Run

$ docker ps -a
CONTAINER ID   IMAGE                     COMMAND            CREATED       STATUS          PORTS           NAMES
de165883deb8   ming/salt-minion:latest   "/usr/sbin/init"   4 weeks ago   Up 39 seconds                   salt-docker-centos7_minion2_1
c05d4d054863   ming/salt-minion:latest   "/usr/sbin/init"   4 weeks ago   Up 39 seconds                   salt-docker-centos7_minion1_1
4d04597f2899   ming/salt-master:latest   "/usr/sbin/init"   4 weeks ago   Up 40 seconds   4505-4506/tcp   salt-docker-centos7_master_1

$ docker exec salt-docker-centos7_master_1 salt "*" test.ping
minion1:
    True
minion2:
    True

$ docker exec salt-docker-centos7_master_1 salt-key -L
Accepted Keys:
minion1
minion2
Denied Keys:
Unaccepted Keys:
Rejected Keys:

Special thanks

• All people in this thread
• George Chung, for pointing out use /sbin/init as well as shadow minion_id and grains within /etc/salt.
• Mohamed Lrhazi, for tipping on yum -y install which for work around [ERROR]'cmd.run_stdout' in salt minion on docker issue. The origin post is here