前言：
最近在服务器系统上安装了最新的Puppet客户端，发现跟老版本的PuppetMaster做同步时出现了一些问题，警告类的信息很好解决，注释掉配置文件templatedir该行即可，后来又对PuppetMaster做了次升级，直接升为最新的3.6.1，随后发现PuppetMaster默认安装的WEBrick的web服务器性能较低且最新版本3.6.1存在bug以至于无法同时接受多台Agent客户端请求，因此使用Apache+Passenger方案替代原WEBrick，提高并发性能，同时解决bug带来的问题
环境：
Ubuntu 12.04 64-LTS
PuppetMaster: 3.6.1（升级前版本为3.4.3）
PuppetAgent: 3.6.1
1、安装Apache2
$sudoapt-getinstallapache2ruby1.8-devrubygems$sudoa2enmodssl$sudoa2enmodheaders
2、安装Rack/Passenger
$sudogeminstallrackpassenger$sudopassenger-install-apache2-module#按提示解决软件依赖关系后，再次运行命令安装passenger模块PleaseedityourApacheconfigurationfile,andaddtheselines:LoadModulepassenger_module/var/lib/gems/1.8/gems/passenger-4.0.44/buildout/apache2/mod_passenger.so<IfModulemod_passenger.c>PassengerRoot/var/lib/gems/1.8/gems/passenger-4.0.44PassengerDefaultRuby/usr/bin/ruby1.8</IfModule>$sudomkdir/etc/puppet/rack$sudomkdir/etc/puppet/rack/{public,tmp}$sudoscp/usr/share/puppet/ext/rack/config.ru/etc/puppet/rack/$sudochown-Rpuppet:root/etc/puppet/rack
3、配置Puppet虚拟主机文件
$sudocp/usr/share/puppet/ext/rack/example-passenger-vhost.conf/etc/apache2/sites-available/puppet.conf$sudovim/etc/apache2/sites-available/puppet.conf#按之前的提示添加如下内容LoadModulepassenger_module/var/lib/gems/1.8/gems/passenger-4.0.44/buildout/apache2/mod_passenger.so<IfModulemod_passenger.c>PassengerRoot/var/lib/gems/1.8/gems/passenger-4.0.44PassengerDefaultRuby/usr/bin/ruby1.8PassengerHighPerformanceonPassengerMaxPoolSize12PassengerPoolIdleTime1500#PassengerMaxRequests1000PassengerStatThrottleRate120#RackAutoDetectOff#注释该行#RailsAutoDetectOff#注释该行</IfModule>Listen8140<VirtualHost*:8140>SSLEngineonSSLProtocolALL-SSLv2SSLCipherSuiteALL:!aNULL:!eNULL:!DES:!3DES:!IDEA:!SEED:!DSS:!PSK:!RC4:!MD5:+HIGH:+MEDIUM:!LOW:!SSLv2:!EXPSSLHonorCipherOrderon#修改为SSL实际路径及文件名SSLCertificateFile/var/lib/puppet/ssl/certs/test.cominggo.com.pemSSLCertificateKeyFile/var/lib/puppet/ssl/private_keys/test.cominggo.com.pemSSLCertificateChainFile/var/lib/puppet/ssl/certs/ca.pemSSLCACertificateFile/var/lib/puppet/ssl/certs/ca.pem#IfApachecomplainsaboutinvalidsignaturesontheCRL,youcantrydisabling#CRLcheckingbycommentingthenextline,butthisisnotrecommended.SSLCARevocationFile/var/lib/puppet/ssl/crl.pemSSLVerifyClientoptionalSSLVerifyDepth1#The`ExportCertData`optionisneededforagentcertificateexpirationwarningsSSLOptions+StdEnvVars+ExportCertData#ThisheaderneedstobesetifusingaloadbalancerorproxyRequestHeaderunsetX-Forwarded-ForRequestHeadersetX-SSL-Subject%{SSL_CLIENT_S_DN}eRequestHeadersetX-Client-DN%{SSL_CLIENT_S_DN}eRequestHeadersetX-Client-Verify%{SSL_CLIENT_VERIFY}eDocumentRoot/etc/puppet/rack/public/RackBaseURI/<Directory/etc/puppet/rack/>OptionsNoneAllowOverrideNoneOrderallow,denyallowfromall</Directory>##Logging#设置Puppet访问日志（可选，默认日志为other_vhosts_access.log）ErrorLog”/var/log/apache2/puppet_error.log”ServerSignatureOffCustomLog”/var/log/apache2/puppet_access.log”combined</VirtualHost>$cd/etc/apache2/sites-available/$sudoa2ensitepuppet.conf呼唤你前往另一个地方，过上另一种生活。
