系统自动化系统部署
系统安装过程
# CentOS系统安装
系统启动流程：
bootloader --> kernel(initramfs) --> rootfs --> /sbin/init
system-config-kickstart工具
下载安装system-config-kickstart
[root@localhost ~]#yum install system-config-kickstart -y
运行system-config-kickstart
[root@localhost ~]#system-config-kickstart
- / 100000MB
- swap 4000MB
- /boot 1000MB
包选择竟然是空的，centos7该选择是禁用的
解决方法：修改yum源
[base]#将此处的base更改为development
name=CentOS-$releasever - Base - mirrors.aliyun.com
failovermethod=priority
baseurl=http://mirrors.aliyun.com/centos/$releasever/os/$basearch/
http://mirrors.aliyuncs.com/centos/$releasever/os/$basearch/
http://mirrors.cloud.aliyuncs.com/centos/$releasever/os/$basearch/
gpgcheck=1
gpgkey=http://mirrors.aliyun.com/centos/RPM-GPG-KEY-CentOS-7
配置anaconda(安装向导程序)
ks7_mini.cfg 文件
[root@centos7 ~]# cat ks7_mini.cfg
#platform=x86, AMD64, or Intel EM64T
#version=DEVEL
# Install OS instead of upgrade
install
# Keyboard layouts
keyboard 'us'
# Root password
rootpw --iscrypted $1$MNh4wJLu$gUqsJa/UFTiRiO8tT/Hbr0
# System language
lang en_US
# System authorization information
auth --useshadow --passalgo=sha512
# Use text mode install
text
firstboot --disable
# SELinux configuration
selinux --disabled
# Firewall configuration
firewall --disabled
# Network information
network --bootproto=dhcp --device=eth0
# Reboot after installation
reboot
# System timezone
timezone Africa/Abidjan
# Use network installation
url --url="http://192.168.33.130/centos/7/os/x86_64/"
# System bootloader configuration
bootloader --append="net.ifnames=0" --location=mbr
# Clear the Master Boot Record
zerombr
# Partition clearing information
clearpart --all --initlabel
# Disk partitioning information
part /boot --fstype="xfs" --size=1000
part / --fstype="xfs" --size=100000
part swap --fstype="swap" --size=4000
%post
mkdir /root/.ssh
chmod 700 /root/.ssh
cat>/root/.ssh/authorized_keys <<EOF
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFGEy7Esw+RBOf4HAyob5hHpsLegLKDiLngwJB/1A7Zu3/NRbiPLAAMz3tH97HDjPfZpW4OCJCmLSQEUmh9uj9r58GEDHzaTfVvS39S6rFny5RcOzyPAIbozOlxpAyuiaFiea2xaMDHOY4KZeyTQ78ECwNCUm40o+be3nrxBwjk8WHVmfIeV9oiBHl+LWFbTrVNP0oiQjo/uIFoB6/GQ7/6e9iop/UV1qJaQ+X3ecfclAedEw7aqdjZCdWW9XLgSHzKsDBIX/Z5MRFNWeOd7PDrdX+edqVYi10nGEziInTUIJcmvRIw8XQ0Cj0DahaoA55zYQjDuq1WxmSDW61ve1b root@centos7
EOF
chmod 600 /root/.ssh/authorized_keys
mkdir /etc/yum.repos.d/bak
mv /etc/yum.repos.d/*.repo /etc/yum.repos.d/bak
cat > /etc/yum.repos.d/test.repo << EOF
[base]
baseurl=http://192.168.33.130/centos/7/os/x86_64/
gpgcheck=0
EOF
%end
%packages
@^minimal
autofs
%end
安装包组位置,和找到最小化安装选项位置
[root@localhost repodata]# pwd
/misc/repodata
[root@localhost repodata]# cat 521f322f05f9802f2438d8bb7d97558c64ff3ff74c03322d77787ade9152d8bb-c7-x86_64-comps.xml |grep minimal
<packagereq type="mandatory">vim-minimal</packagereq>
<packagereq type="mandatory">kdeutils-minimal</packagereq>
<description xml:lang="fr">Installation minimale d'hôte de virtualisation.</description>
<description xml:lang="fr">Hôte de virtualisation minimal.</description>
<id>minimal</id># 最小化安装
<name xml:lang="fr">Installation minimale</name>
# 我们将把他放入kickstart文件中
改好后的格式
...
%packages
@^minimal
autofs
%end
检查格式是否正确工具
[root@centos7 ~]# ksvalidator ks7_mini.cfg
使用kickstart文件
将kickstart文件放入网络共享文件中
[root@centos7 ~]# cd /var/www/html/
[root@centos7 html]# ls
centos
[root@centos7 html]# mkdir ksdir
[root@centos7 html]# mv /r
root/ run/
[root@centos7 html]# cp /root/ks7_mini.cfg ksdir/
[root@centos7 html]# ll ksdir/
total 4
-rw-r--r-- 1 root root 1726 Jun 11 23:03 ks7_mini.cfg
活动文件位置
http://192.168.33.130/ksdir/ks7_mini.cfg
准备新机器
成功！
没有IP怎么办,可以在内核中输入以下参数临时拥有一个IP
ip=IPADDR
netmask=MASK
gateway=GW
dns=DNS_SERVER_IP
ifname=NAME:MAC_ADDR
通过HTTP服务自动安装配置
httpd服务安装
配置/var/html/www文件
挂载光盘至文件下
设置开机自动挂载
制作引导光盘和U盘
PXE安装系统
cobbler企业级应用
DHCP 服务实现
网络配置
- 静态指定
- 动态获取
- bootp：MAC与IP——静态对应
- dhcp：增强的bootp，动态
你的机器启动时就分配IP不启动则收回IP
搭建DHCP服务
DHCP服务申请过程
八种通讯报文：
DHCP DISCOVER：客户端到服务器
DHCP OFFER ：服务器到客户端
DHCP REQUEST：客户端到服务器
DHCP ACK ：服务器到客户端
DHCP NAK：服务器到客户端,通知用户无法分配合适的IP地址
DHCP DECLINE ：客户端到服务器，指示地址已被使用
DHCP RELEASE：客户端到服务器，放弃网络地址和取消剩余的租约时间
DHCP INFORM：客户端到服务器, 客户端如果需要从DHCP服务器端获取更为详细的配置信息，则发送Inform报文向服务器进行请求，极少用到
DHCP配置
更改完配置后重启服务
systemctl restart dhcpd
将网卡设置为自动获取
[root@centos7 ~]# vim /etc/sysconfig/network-scripts/ifcfg-ens33
TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
BOOTPROTO=dhcp #设置为dhcp
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
IPV6_ADDR_GEN_MODE=stable-privacy
NAME=ens33
UUID=13cd8e7b-5fce-46f1-a2cb-f4ee2469df6f
DEVICE=ens33
ONBOOT=yes
DHCP实现自动分配IP
更改IP设置后重新启动NetworkManager服务
service NetworkManager restart
# 或者
service network restart
dhclient进程自动获取IP
ps aux |grep dhclient
# 检查dhclient有无自动获取
dhclient -d#前台运行
[root@localhost ~]# dhclient -d
Internet Systems Consortium DHCP Client 4.1.1-P1
Copyright 2004-2010 Internet Systems Consortium.
All rights reserved.
For info, please visit https://www.isc.org/software/dhcp/
Listening on LPF/pan0/fe:2c:7b:44:fe:57
Sending on LPF/pan0/fe:2c:7b:44:fe:57
Listening on LPF/eth0/00:0c:29:e5:c3:0b
Sending on LPF/eth0/00:0c:29:e5:c3:0b
Sending on Socket/fallback
DHCPDISCOVER on pan0 to 255.255.255.255 port 67 interval 8 (xid=0x3a2b410d)
DHCPDISCOVER on eth0 to 255.255.255.255 port 67 interval 3 (xid=0x6b190a07)
DHCPDISCOVER on eth0 to 255.255.255.255 port 67 interval 8 (xid=0x6b190a07)
DHCPOFFER from 192.168.33.254
DHCPREQUEST on eth0 to 255.255.255.255 port 67 (xid=0x6b190a07)
DHCPACK from 192.168.33.254 (xid=0x6b190a07)
bound to 192.168.33.133 -- renewal in 894 seconds.
DHCPDISCOVER on pan0 to 255.255.255.255 port 67 interval 13 (xid=0x3a2b410d)
查看过期时间
[root@localhost ~]# cd /var/lib/dhclient/
[root@localhost dhclient]# ll -t
total 12
-rw-r--r--. 1 root root 1820 Jun 13 06:01 dhclient-d057cd84-199a-4096-8ea9-3296e687d3ad-eth0.lease
-rw-r--r--. 1 root root 455 Jun 13 05:59 dhclient.leases
-rw-r--r--. 1 root root 910 Jun 13 05:34 dhclient-eth0.leases
# dhclient.leases
[root@localhost dhclient]# cat dhclient.leases
lease {
interface "eth0";
fixed-address 192.168.33.133;
option subnet-mask 255.255.255.0;
option routers 192.168.33.2;
option dhcp-lease-time 1800;
option dhcp-message-type 5;
option domain-name-servers 192.168.33.2;
option dhcp-server-identifier 192.168.33.254;
option broadcast-address 192.168.33.255;
option domain-name "localdomain";
renew 6 2020/06/13 13:14:34;
rebind 6 2020/06/13 13:25:53;
expire 6 2020/06/13 13:29:38;
}
# 该时间为格林尼治时间
[root@localhost dhclient]# date
Sat Jun 13 06:05:07 PDT 2020
# 转化格林尼治时间
[root@localhost dhclient]# date -u
Sat Jun 13 13:05:12 UTC 2020
# 租期30min
实验：安装DHCP服务器
要求：
- VMnet下的NAT网络关闭dhcp功能
- 不要用桥接模式
安装DHCP服务
安装包
yum install dhcp -y
dhcp文件列表
[root@centos7 ~]# rpm -ql dhcp
/etc/NetworkManager
/etc/NetworkManager/dispatcher.d
/etc/NetworkManager/dispatcher.d/12-dhcpd
/etc/dhcp/dhcpd.conf # 配置文件
/etc/dhcp/dhcpd6.conf
/etc/dhcp/scripts
/etc/dhcp/scripts/README.scripts
/etc/openldap/schema/dhcp.schema
/etc/sysconfig/dhcpd
/usr/bin/omshell
/usr/lib/systemd/system/dhcpd.service # 服务名
/usr/lib/systemd/system/dhcpd6.service
/usr/lib/systemd/system/dhcrelay.service
/usr/sbin/dhcpd # 主程序
/usr/sbin/dhcrelay
/usr/share/doc/dhcp-4.2.5
/usr/share/doc/dhcp-4.2.5/dhcpd.conf.example
/usr/share/doc/dhcp-4.2.5/dhcpd6.conf.example
/usr/share/doc/dhcp-4.2.5/ldap
/usr/share/doc/dhcp-4.2.5/ldap/README.ldap
/usr/share/doc/dhcp-4.2.5/ldap/dhcp.schema
/usr/share/doc/dhcp-4.2.5/ldap/dhcpd-conf-to-ldap
/usr/share/man/man1/omshell.1.gz
/usr/share/man/man5/dhcpd.conf.5.gz
/usr/share/man/man5/dhcpd.leases.5.gz
/usr/share/man/man8/dhcpd.8.gz
/usr/share/man/man8/dhcrelay.8.gz
/usr/share/systemtap/tapset/dhcpd.stp
/var/lib/dhcpd
/var/lib/dhcpd/dhcpd.leases
/var/lib/dhcpd/dhcpd6.leases
启动服务，发现问题
[root@centos7 ~]# systemctl start dhcpd
Job for dhcpd.service failed because the control process exited with error code. See "systemctl status dhcpd.service" and "journalctl -xe" for details.
查看错误提示
[root@centos7 ~]# systemctl status dhcpd
● dhcpd.service - DHCPv4 Server Daemon
Loaded: loaded (/usr/lib/systemd/system/dhcpd.service; disabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Sat 2020-06-13 13:14:34 CST; 46s ago
Docs: man:dhcpd(8)
man:dhcpd.conf(5)
Process: 10293 ExecStart=/usr/sbin/dhcpd -f -cf /etc/dhcp/dhcpd.conf -user dhcpd -group dhcpd --no-pid (code=exited, status=1/FAILURE)
Main PID: 10293 (code=exited, status=1/FAILURE)
Jun 13 13:14:34 centos7 systemd[1]: Starting DHCPv4 Server Daemon...
Jun 13 13:14:34 centos7 dhcpd[10293]: Copyright 2004-2013 Internet Systems Consortium.
Jun 13 13:14:34 centos7 dhcpd[10293]: All rights reserved.
Jun 13 13:14:34 centos7 dhcpd[10293]: For info, please visit https://www.isc.org/softwa...cp/
Jun 13 13:14:34 centos7 dhcpd[10293]: Not searching LDAP since ldap-server, ldap-port a...ile
Jun 13 13:14:34 centos7 dhcpd[10293]: Wrote 0 leases to leases file.
Jun 13 13:14:34 centos7 systemd[1]: dhcpd.service: main process exited, code=exited, st...URE
Jun 13 13:14:34 centos7 systemd[1]: Failed to start DHCPv4 Server Daemon.
Jun 13 13:14:34 centos7 systemd[1]: Unit dhcpd.service entered failed state.
Jun 13 13:14:34 centos7 systemd[1]: dhcpd.service failed.
Hint: Some lines were ellipsized, use -l to show in full.
查看配置文件/etc/dhcp/dhcpd.conf
[root@centos7 ~]# cat /etc/dhcp/dhcpd.conf
#
# DHCP Server Configuration file.
# see /usr/share/doc/dhcp*/dhcpd.conf.example
# 文件中啥也没有，下一步查看范例
# see dhcpd.conf(5) man page
#
查看范例
[root@centos7 ~]# vim /usr/share/doc/dhcp*/dhcpd.conf.example
# dhcpd.conf
#
# Sample configuration file for ISC dhcpd
#
# option definitions common to all supported networks...
option domain-name "example.org";
# 配置dns,百度DNS为：180.76.76.76
# option domain-name-servers ns1.example.org, ns2.example.org;
option domain-name-servers 114.114.114.114,180.76.76.76;
# 租期默认600秒，现改为1day：86400
default-lease-time 86400;
# 最大租期改为10day
max-lease-time 864000;
# Use this to enble / disable dynamic dns updates globally.
#ddns-update-style none;
# If this DHCP server is the official DHCP server for the local
# network, the authoritative directive should be uncommented.
#authoritative;
# Use this to send dhcp log messages to a different log file (you also
# have to hack syslog.conf to complete the redirection).
log-facility local7;
# No service will be given on this subnet, but declaring it helps the
# DHCP server to understand the network topology.
# 加入本台主机的网段192.168.33.0，该网段变成地址池
subnet 192.168.33.0 netmask 255.255.255.0 {
range 192.168.33.33 192.168.33.99;
option routers 192.168.33.1;
}
# This is a very basic subnet declaration.
# 需要制定地址范围,网关
subnet 10.254.239.0 netmask 255.255.255.224 {
range 10.254.239.10 10.254.239.20;
option routers rtr-239-0-1.example.org, rtr-239-0-2.example.org;
}
# This declaration allows BOOTP clients to get dynamic addresses,
# which we don't really recommend.
subnet 10.254.239.32 netmask 255.255.255.224 {
range dynamic-bootp 10.254.239.40 10.254.239.60;
option broadcast-address 10.254.239.31;
option routers rtr-239-32-1.example.org;
}
# A slightly different configuration for an internal subnet.
subnet 10.5.5.0 netmask 255.255.255.224 {
range 10.5.5.26 10.5.5.30;
option domain-name-servers ns1.internal.example.org;
option domain-name "internal.example.org";
option routers 10.5.5.1;
option broadcast-address 10.5.5.31;
default-lease-time 600;
max-lease-time 7200;
}
# Hosts which require special configuration options can be listed in
# host statements. If no address is specified, the address will be
# allocated dynamically (if possible), but the host-specific information
# will still come from the host declaration.
host passacaglia {
hardware ethernet 0:0:c0:5d:bd:95;
filename "vmunix.passacaglia";
server-name "toccata.fugue.com";
}
# Fixed IP addresses can also be specified for hosts. These addresses
# should not also be listed as being available for dynamic assignment.
# Hosts for which fixed IP addresses have been specified can boot using
# BOOTP or DHCP. Hosts for which no fixed address is specified can only
# be booted with DHCP, unless there is an address range on the subnet
# to which a BOOTP client is connected which has the dynamic-bootp flag
# set.
##############################################################
# 当MAC地址为08:00:07:26:c0:a5时，IP就固定设置为fantasia.fugue.com
##############################################################
host fantasia {
hardware ethernet 08:00:07:26:c0:a5;
fixed-address fantasia.fugue.com;
}
# You can declare a class of clients and then do address allocation
# based on that. The example below shows a case where all clients
# in a certain class get addresses on the 10.17.224/24 subnet, and all
# other clients get addresses on the 10.0.29/24 subnet.
class "foo" {
match if substring (option vendor-class-identifier, 0, 4) = "SUNW";
}
shared-network 224-29 {
subnet 10.17.224.0 netmask 255.255.255.0 {
option routers rtr-224.example.org;
}
subnet 10.0.29.0 netmask 255.255.255.0 {
option routers rtr-29.example.org;
}
pool {
allow members of "foo";
range 10.17.224.10 10.17.224.250;
}
pool {
deny members of "foo";
range 10.0.29.10 10.0.29.230;
}
}
直接先拷贝过来作为dhcp的配置文件
[root@centos7 ~]# cp /usr/share/doc/dhcp*/dhcpd.conf.example /etc/dhcp/dhcpd.conf
cp: overwrite ‘/etc/dhcp/dhcpd.conf’? y
重新启动
[root@centos7 ~]# systemctl start dhcpd
# 成功
虽然启动成功，但还需要配置哪些地址是可以分配的以及其他信息
[root@centos7 ~]# ss -ntlup
Netid State Recv-Q Send-Q Local Address:Port Peer Address:Port
...
udp UNCONN 0 0 *:67 *:* users:(("dhcpd",pid=10688,fd=7))
:67是dhcp服务器的端口号，:68是dhcp客户端的端口号
配置好后，在centos6中重启网络服务
[root@localhost Desktop]# service NetworkManager restart
Stopping NetworkManager daemon: [ OK ]
Setting network parameters... [ OK ]
Starting NetworkManager daemon: [ OK ]
[root@localhost Desktop]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
link/ether 00:0c:29:e5:c3:0b brd ff:ff:ff:ff:ff:ff
inet 192.168.33.50/24 brd 192.168.33.255 scope global eth0
inet6 fe80::20c:29ff:fee5:c30b/64 scope link
valid_lft forever preferred_lft forever
3: pan0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN
link/ether fe:2c:7b:44:fe:57 brd ff:ff:ff:ff:ff:ff
inet6 fe80::fc2c:7bff:fe44:fe57/64 scope link
valid_lft forever preferred_lft forever
# 获取地址成功
#######################
# 检查网关是否拿到
[root@localhost Desktop]# route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.33.0 0.0.0.0 255.255.255.0 U 1 0 0 eth0
0.0.0.0 192.168.33.1 0.0.0.0 UG 0 0 0 eth0
#######################
# 检查DNS
[root@localhost Desktop]# cat /etc/resolv.conf
# Generated by NetworkManager
domain example.org
search example.org
nameserver 180.76.76.76
nameserver 114.114.114.114
#########################
# 查看租期
[root@localhost Desktop]# cat /var/lib/dhclient/dhclient-d057cd84-199a-4096-8ea9-3296e687d3ad-eth0.lease
lease {
interface "eth0";
fixed-address 192.168.33.50;
option subnet-mask 255.255.255.0;
option dhcp-lease-time 86400;
option routers 192.168.33.1;
option dhcp-message-type 5;
option dhcp-server-identifier 192.168.33.130;
option domain-name-servers 180.76.76.76,114.114.114.114;
option domain-name "example.org";
renew 0 2020/06/14 02:17:59;
rebind 0 2020/06/14 11:26:25;
expire 0 2020/06/14 14:26:25;
}
lease {
interface "eth0";
fixed-address 192.168.33.50;
option subnet-mask 255.255.255.0;
option routers 192.168.33.1;
option dhcp-lease-time 86400;
option dhcp-message-type 5;
option domain-name-servers 180.76.76.76,114.114.114.114;
option dhcp-server-identifier 192.168.33.130;
option domain-name "example.org";
renew 0 2020/06/14 01:08:06;
rebind 0 2020/06/14 11:29:41;
expire 0 2020/06/14 14:29:41;
}
查询dhcpd服务器记录
[root@centos7 ~]# cd /var/lib/dhcpd
[root@centos7 dhcpd]# ls
dhcpd6.leases dhcpd.leases dhcpd.leases~
[root@centos7 dhcpd]# cat dhcpd.leases
# The format of this file is documented in the dhcpd.leases(5) manual page.
# This lease file was written by isc-dhcp-4.2.5
server-duid "\000\001\000\001&w-\257\000\014)\323`$";
lease 192.168.33.50 {
starts 6 2020/06/13 06:26:24;
ends 0 2020/06/14 06:26:24;
cltt 6 2020/06/13 06:26:24;
binding state active;
next binding state free;
rewind binding state free;
hardware ethernet 00:0c:29:e5:c3:0b;
}
lease 192.168.33.50 {
starts 6 2020/06/13 06:29:41;
ends 0 2020/06/14 06:29:41;
cltt 6 2020/06/13 06:29:41;
binding state active;
next binding state free;
rewind binding state free;
hardware ethernet 00:0c:29:e5:c3:0b;
}
lease 192.168.33.51 {
starts 6 2020/06/13 06:48:51;
ends 0 2020/06/14 06:48:51;
cltt 6 2020/06/13 06:48:51;
binding state active;
next binding state free;
rewind binding state free;
hardware ethernet 00:0c:29:d3:60:24;
client-hostname "centos7";
}
续约：
- 租期到一半时申请续约
- 或租期到7/8时申请续约
通过DHCP还可以进行其他配置…
DHCP配置MAC地址的绑定
在配置中
# Fixed IP addresses can also be specified for hosts. These addresses
# should not also be listed as being available for dynamic assignment.
# Hosts for which fixed IP addresses have been specified can boot using
# BOOTP or DHCP. Hosts for which no fixed address is specified can only
# be booted with DHCP, unless there is an address range on the subnet
# to which a BOOTP client is connected which has the dynamic-bootp flag
# set.
##############################################################
# 当MAC地址为08:00:07:26:c0:a5时，IP就固定设置为fantasia.fugue.com
##############################################################
host fantasia {
hardware ethernet 08:00:07:26:c0:a5;
fixed-address fantasia.fugue.com;
}
##修改
host test {
hardware ethernet 00:0c:29:e5:c3:0b;
fixed-address 192.168.33.131;
}
# 改地址超过dhcp配置中地址池的范围
[root@centos7 dhcpd]# systemctl restart dhcpd
# 重启服务
dhcp客户端上
[root@localhost Desktop]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
link/ether 00:0c:29:e5:c3:0b brd ff:ff:ff:ff:ff:ff
inet 192.168.33.50/24 brd 192.168.33.255 scope global eth0
inet6 fe80::20c:29ff:fee5:c30b/64 scope link
valid_lft forever preferred_lft forever
3: pan0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN
link/ether fe:2c:7b:44:fe:57 brd ff:ff:ff:ff:ff:ff
inet6 fe80::fc2c:7bff:fe44:fe57/64 scope link
valid_lft forever preferred_lft forever
[root@localhost Desktop]# service NetworkManager stop
Stopping NetworkManager daemon: [ OK ]
[root@localhost Desktop]# service network restart
Shutting down interface eth0: [ OK ]
Shutting down loopback interface: [ OK ]
Bringing up loopback interface: [ OK ]
Bringing up interface eth0:
Determining IP information for eth0... done.
[ OK ]
[root@localhost Desktop]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
####################IP地址已经更换完毕##########################################
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
link/ether 00:0c:29:e5:c3:0b brd ff:ff:ff:ff:ff:ff
inet 192.168.33.131/24 brd 192.168.33.255 scope global eth0
inet6 fe80::20c:29ff:fee5:c30b/64 scope link
valid_lft forever preferred_lft forever
# 注意超网段的地址无法更改
####################IP地址已经更换完毕##########################################
3: pan0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN
link/ether fe:2c:7b:44:fe:57 brd ff:ff:ff:ff:ff:ff
inet6 fe80::fc2c:7bff:fe44:fe57/64 scope link
valid_lft forever preferred_lft forever
DHCP工作过程
-
第一个请求DISCOVER是利用广播实现的
-
收到请求后返回的OFFER是单播
-
客户端收到OFFER后发送的REQUEST也是广播
-
服务器收到后给的ACK是单播
所以客户端与服务器不应该有路由器隔绝广播，故超网段的地址无法更改
跨网段DHCP服务的解决方案
- RFC 1542 Compliant Routers：硬件路由
- dhcrelay:中继，另外找一台机器作为中继代理DHCP AGENT RELAY
- 代理由广播变成单播申请，并将结果发给客户端
- 有些路由器自带此功能
另一种DHCP配置文件方法
其他配置选项：
filename：指明引导文件名称
next-server：提供引导文件的服务器IP地址
示例：
fliename "pxelinux.0"基于网络的BootLoader文件
next-server 192.168.1.100;TFTP服务器地址
检查语法：
service dhcpd configtest
文件传输协议
FTP
PXE(Preboot Excution Environment)
预启动执行环境
PXE网卡具有引导功能
轻量级的FTP——TFTP服务
可以使用UDP传输协议，网卡中内置TFTP程序,端口号:69
搭建TFTP服务器
安装
[root@localhost ~]# yum install tftp-server
内容
[root@localhost ~]# rpm -ql tftp-server
/etc/xinetd.d/tftp
/usr/lib/systemd/system/tftp.service
/usr/lib/systemd/system/tftp.socket
/usr/sbin/in.tftpd
/usr/share/doc/tftp-server-5.2
/usr/share/doc/tftp-server-5.2/CHANGES
/usr/share/doc/tftp-server-5.2/README
/usr/share/doc/tftp-server-5.2/README.security
/usr/share/man/man8/in.tftpd.8.gz
/usr/share/man/man8/tftpd.8.gz
/var/lib/tftpboot
启动tftp
[root@localhost ~]# systemctl start tftp
查看端口
[root@localhost ~]# ss -ntlup
Netid State Recv-Q Send-Q Local Address:Port Peer Address:Port
udp UNCONN 0 0 [::]:69 [::]:* users:(("in.tftpd",pid=6974,fd=0),("systemd",pid=1,fd=96))
tftp共享文件目录
/var/lib/tftpboot
设为开机启动
systemctl enable tftp
tftp客户端是不能查看共享目录内容的
实现基于PXE安装CentOS7系统
第一步：配置好dhcp服务器
在配置文件中加入TFCP服务器地址及文件
subnet 192.168.33.0 netmask 255.255.255.0 {
range 192.168.33.33 192.168.33.99;
option routers 192.168.33.1;
next-server 192.168.33.34;
filename "pxelinux.0";
# pxelinux.0 该文件名为约定俗成，不是特别指定的
}
# 重启服务
第二步：pexlinux.0文件
安装syslinux软件，该文件中带有pexlinux.0文件
yum install -y syslinux
将pexlinux.0文件拷贝到/var/lib/tftpboot文件夹中
isolinux.cfg文件订制
# 通过更改其文件内容达到对文件的订制
插眼：待填坑…
实现基于cobbler+PXE的自动化安装
1.Cobbler翻译为中文是补鞋匠，在linux方面则一个免费的用于系统安装部署的开源软件，官方地址 http://cobbler.github.io/，
2.cobbler是对技术的二次基于python的开发，提供了CLI（命令行）和Web的管理方式，另外还提供了API（应用程序编程接口）接口，方便二次开发使用，
3.相比PXE，cobbler支持多系统同时引导，而PXE只能一次引导一个系统的安装，
4.cobbler通常与开源软件puppet、saltstack配合使用，进行操作系统的批量安装与部署优化，从而实现大批量linux系统的无人值守安装与服务部署，大大提升运维的工作效率，
4.cobbler工作于服务端，结合DHCP/TFTP/saltstack等服务提供批量系统安装部署，
5.cobbler需要结合PXE技术对客户端进行操作系统的安装
Cobbler是由python开发，基于PXE二次封装，可以通过web方式管理安装。
cobbler工作原理
1.client裸机配置了从网络启动后，开机后会广播包请求DHCP服务器（cobbler server）发送其分配好的一个IP
2.DHCP服务器（cobbler server）收到请求后发送responese，包括其ip地址
3.client裸机拿到ip后再向cobbler server发送请求OS引导文件的请求
4.cobbler server告诉裸机OS引导文件的名字和TFTP server的ip和port
5.client裸机通过上面告知的TFTPserver地址通信，下载引导文件
6.client裸机执行执行该引导文件，确定加载信息，选择要安装的os，期间会再向cobbler server请求kickstart文件和os image
7.cobbler server发送请求的kickstart和os iamge.
8.client裸机加载kickstart文件 .client裸机接收os image，安装该os image
准备内容
-
Cobbler所一代的服务包括httpd，tftp，dhcp，如果有文本界面要求还需要安装cobbler-web
相关包说明：
- httpd：提供yum源，并配合cobbler-web使得cobbler可以通过web网页进行配置管理
- tftp-server：提供启动和菜单等相关文件网络下载功能
- cobbler-web：提供基于web的cobbler管理界面
- pykickstart.noarch：基于Python的管理kickstart文件的库
说明：
-
cobbler依赖于epel源，在安装前要配置epel源
-
在安装cobbler时会因为依赖而安装httpd，tftp-server相关包
-
设置为开机启动
[root@centos7 /]# systemctl enable --now cobblerd httpd tftp dhcpd Created symlink from /etc/systemd/system/multi-user.target.wants/cobblerd.service to /usr/lib/systemd/system/cobblerd.service. Created symlink from /etc/systemd/system/sockets.target.wants/tftp.socket to /usr/lib/systemd/system/tftp.socket. Created symlink from /etc/systemd/system/multi-user.target.wants/dhcpd.service to /usr/lib/systemd/system/dhcpd.service. Job for dhcpd.service failed because the control process exited with error code. See "systemctl status dhcpd.service" and "journalctl -xe" for details. # dhcpd报错暂时没有关系，待会配置一下就行 -
查看cobbler配置文件及各个目录情况
| 配置文件 | 功能说明 |
|---|---|
/etc/cobbler |
cobbler的主配置文件，保存了与cobbler相关的配置文件 |
/etc/cobbler/setting |
cobbler服务的默认主配置文件 |
/etc/cobbler/dhcp.template |
DHCP服务的配置模板，打开DHCP管理后可以根据该文件生成dhcpd.conf |
/etc/cobbler/tftpd.template |
tftp服务配置文件 |
/etc/cobbler/rsync.template |
rsync服务的配置模板 |
/etc/cobbler/iso |
iso模板配置文件目录 |
/etc/cobbler/pxe |
pxe模板文件目录 |
/etc/cobbler/power |
电源配置文件目录 |
/etc/cobbler/users.conf |
Web服务授权配置文件 |
/etc/cobbler/users.digest |
web访问的用户名密码配置文件 |
/etc/cobbler/dnsmasq.template |
DNS服务的配置模板 |
/etc/cobbler/modules.conf |
cobbler模块配置目录 |
/var/lib/cobbler |
cobbler数据目录 |
/var/lib/cobbler/config |
配置文件 |
/var/lib/cobbler/kickstarts |
默认存放kickstart文件目录 |
/var/lib/cobbler/loaders |
存放各种引导程序 |
/var/www/cobbler |
系统安装镜像目录 |
/var/www/cobbler/ks_mirror |
导入系统镜像列表 |
/var/www/cobbler/images |
导入系统镜像启动文件 |
/var/www/cobbler/repo_mirror |
yum源存储目录 |
/var/log/cobbler |
日志目录 |
/var/log/cobbler/install.log |
客户端系统安装日志 |
/var/log/cobbler/cobbler.log |
cobbler日志 |
cobbler用法
[root@centos7 ~]# cobbler --help
usage
=====
cobbler <distro|profile|system|repo|image|mgmtclass|package|file> ...
[add|edit|copy|getks*|list|remove|rename|report] [options|--help]
cobbler <aclsetup|buildiso|import|list|replicate|report|reposync|sync|validateks|version|signature|get-loaders|hardlink> [options|--help]
cobbler distro
[root@centos7 ~]# cobbler distro
usage
=====
cobbler distro add
cobbler distro copy
cobbler distro edit
cobbler distro find
cobbler distro list
cobbler distro remove
cobbler distro rename
cobbler distro report
查看可安装系统
cobbler distro list
配置阶段
检测cobbler的运行环境，并根据提示逐步配置cobbler
[root@centos7 /]# cobbler check
httpd does not appear to be running and proxying cobbler, or SELinux is in the way. Original traceback:
Traceback (most recent call last):
File "/usr/lib/python2.7/site-packages/cobbler/cli.py", line 251, in check_setup
s.ping()
File "/usr/lib64/python2.7/xmlrpclib.py", line 1233, in __call__
return self.__send(self.__name, args)
File "/usr/lib64/python2.7/xmlrpclib.py", line 1591, in __request
verbose=self.__verbose
File "/usr/lib64/python2.7/xmlrpclib.py", line 1273, in request
return self.single_request(host, handler, request_body, verbose)
File "/usr/lib64/python2.7/xmlrpclib.py", line 1321, in single_request
response.msg,
ProtocolError: <ProtocolError for 127.0.0.1:80/cobbler_api: 404 Not Found>
更改/etc/xinetd.d/tftp配置文件,该服务为非独立服务，要将其设置为启动则
[root@centos7 /]# vim /etc/xinetd.d/tftp
# default: off
# description: The tftp server serves files using the trivial file transfer \
# protocol. The tftp protocol is often used to boot diskless \
# workstations, download configuration files to network-aware printers, \
# and to start the installation process for some operating systems.
service tftp
{
socket_type = dgram
protocol = udp
wait = yes
user = root
server = /usr/sbin/in.tftpd
server_args = -s /var/lib/tftpboot
disable = no #由yes改为no
per_source = 11
cps = 100 2
flags = IPv4
}
联网下载boot引导文件
测试阶段
环境准备：
两台主机
- 一台主机：CentOS7充当cobbler,http,dhcp,tftp服务器，并关闭防火墙和SELinux
- 另一台充当测试机，实习自动化安装Linux系统
安装cobbler;
[root@centos7 /]# yum install cobbler httpd tftp-server dhcp
[root@centos7 /]# systemctl enable --now cobblerd httpd tftp dhcpd
检查端口是否开启
[root@centos7 /]# ss -ntul
Netid State Recv-Q Send-Q Local Address:Port Peer Address:Port
udp UNCONN 0 0 [::]:69 [::]:*
tcp LISTEN 0 5 127.0.0.1:25151 *:*
tcp LISTEN 0 128 [::]:80 [::]:* # 69是tftp端口 #25151为cobbler的监听端口 #80是http
执行cobbler check
[root@centos7 /]# cobbler check
The following are potential configuration items that you may want to fix:
1 : The 'server' field in /etc/cobbler/settings must be set to something other than localhost, or kickstarting features will not work. This should be a resolvable hostname or IP for the boot server as reachable by all machines that will use it.
# 修改文件/etc/cobbler/settings，指定server指向
2 : For PXE to be functional, the 'next_server' field in /etc/cobbler/settings must be set to something other than 127.0.0.1, and should match the IP of the boot server on the PXE network.
3 : Some network boot-loaders are missing from /var/lib/cobbler/loaders, you may run 'cobbler get-loaders' to download them, or, if you only want to handle x86/x86_64 netbooting, you may ensure that you have installed a *recent* version of the syslinux package installed and can ignore this message entirely. Files in this directory, should you want to support all architectures, should include pxelinux.0, menu.c32, elilo.efi, and yaboot. The 'cobbler get-loaders' command is the easiest way to resolve these requirements.
4 : enable and start rsyncd.service with systemctl
5 : debmirror package is not installed, it will be required to manage debian deployments and repositories
6 : The default password used by the sample templates for newly installed machines (default_password_crypted in /etc/cobbler/settings) is still set to 'cobbler' and should be changed, try: "openssl passwd -1 -salt 'random-phrase-here' 'your-password-here'" to generate new one
7 : fencing tools were not found, and are required to use the (optional) power management features. install cman or fence-agents to use them
Restart cobblerd and then run 'cobbler sync' to apply changes.
- 修改文件/etc/cobbler/settings
# this is the address of the cobbler server -- as it is used
# by systems during the install process, it must be the address
# or hostname of the system as those systems can see the server.
# if you have a server that appears differently to different subnets
# (dual homed, etc), you need to read the --server-override section
# of the manpage for how that works.
# server: 127.0.0.1
server: 192.168.33.130
# 指定服务器地址，390行
- 改完服务后重新启动cobbler，执行cobbler check，变为6项
[root@centos7 /]# systemctl restart cobblerd
[root@centos7 /]# cobbler check
The following are potential configuration items that you may want to fix:
1 : For PXE to be functional, the 'next_server' field in /etc/cobbler/settings must be set to something other than 127.0.0.1, and should match the IP of the boot server on the PXE network.
2 : Some network boot-loaders are missing from /var/lib/cobbler/loaders, you may run 'cobbler get-loaders' to download them, or, if you only want to handle x86/x86_64 netbooting, you may ensure that you have installed a *recent* version of the syslinux package installed and can ignore this message entirely. Files in this directory, should you want to support all architectures, should include pxelinux.0, menu.c32, elilo.efi, and yaboot. The 'cobbler get-loaders' command is the easiest way to resolve these requirements.
3 : enable and start rsyncd.service with systemctl
4 : debmirror package is not installed, it will be required to manage debian deployments and repositories
# debian系统相关设置
5 : The default password used by the sample templates for newly installed machines (default_password_crypted in /etc/cobbler/settings) is still set to 'cobbler' and should be changed, try: "openssl passwd -1 -salt 'random-phrase-here' 'your-password-here'" to generate new one
# 系统应答文件的口令
6 : fencing tools were not found, and are required to use the (optional) power management features. install cman or fence-agents to use them
# 集群相关设置
Restart cobblerd and then run 'cobbler sync' to apply changes.
# 变为6项
- 修改next-server为当前地址
# if using cobbler with manage_dhcp, put the IP address
# of the cobbler server here so that PXE booting guests can find it
# if you do not set this correctly, this will be manifested in TFTP open timeouts.
#next_server: 127.0.0.1
next_server:192.168.33.130
# 278行
- 在CentOS7中，tftp服务已经通过
systemctl enable --now tftp开机自启了，不需要在改配置文件
[root@centos7 /]# systemctl is-enabled tftp.socket
enabled
- 设置boot-loader
[root@centos7 /]# tree /var/lib/tftpboot/
/var/lib/tftpboot/
├── boot
├── etc
├── grub
├── images
├── images2
├── ppc
├── pxelinux.cfg
└── s390x
# 现在文件是空文件，像一些内核文件还没有，我们通过cobbler get-loaders来下载文件至该文件夹下
[root@centos7 ~]# cobbler get-loaders
task started: 2020-06-14_210159_get_loaders
task started (id=Download Bootloader Content, time=Sun Jun 14 21:01:59 2020)
downloading https://cobbler.github.io/loaders/README to /var/lib/cobbler/loaders/README
downloading https://cobbler.github.io/loaders/COPYING.elilo to /var/lib/cobbler/loaders/COPYING.elilo
downloading https://cobbler.github.io/loaders/COPYING.yaboot to /var/lib/cobbler/loaders/COPYING.yaboot
downloading https://cobbler.github.io/loaders/COPYING.syslinux to /var/lib/cobbler/loaders/COPYING.syslinux
downloading https://cobbler.github.io/loaders/elilo-3.8-ia64.efi to /var/lib/cobbler/loaders/elilo-ia64.efi
downloading https://cobbler.github.io/loaders/yaboot-1.3.17 to /var/lib/cobbler/loaders/yaboot
downloading https://cobbler.github.io/loaders/pxelinux.0-3.86 to /var/lib/cobbler/loaders/pxelinux.0
downloading https://cobbler.github.io/loaders/menu.c32-3.86 to /var/lib/cobbler/loaders/menu.c32
downloading https://cobbler.github.io/loaders/grub-0.97-x86.efi to /var/lib/cobbler/loaders/grub-x86.efi
downloading https://cobbler.github.io/loaders/grub-0.97-x86_64.efi to /var/lib/cobbler/loaders/grub-x86_64.efi
*** TASK COMPLETE ***
[root@centos7 ~]# ls /var/lib/cobbler/loaders/
COPYING.elilo COPYING.yaboot grub-x86_64.efi menu.c32 README
COPYING.syslinux elilo-ia64.efi grub-x86.efi pxelinux.0 yaboot
# 下载的文件暂时存放于此目录，我们要通过cobbler sync将其放置于/var/lib/tftpboot/目录下
[root@centos7 ~]# cobbler sync
task started: 2020-06-14_210609_sync
task started (id=Sync, time=Sun Jun 14 21:06:09 2020)
running pre-sync triggers
cleaning trees
removing: /var/lib/tftpboot/grub/images
copying bootloaders
trying hardlink /var/lib/cobbler/loaders/pxelinux.0 -> /var/lib/tftpboot/pxelinux.0
trying hardlink /var/lib/cobbler/loaders/menu.c32 -> /var/lib/tftpboot/menu.c32
trying hardlink /var/lib/cobbler/loaders/yaboot -> /var/lib/tftpboot/yaboot
trying hardlink /usr/share/syslinux/memdisk -> /var/lib/tftpboot/memdisk
trying hardlink /var/lib/cobbler/loaders/grub-x86.efi -> /var/lib/tftpboot/grub/grub-x86.efi
trying hardlink /var/lib/cobbler/loaders/grub-x86_64.efi -> /var/lib/tftpboot/grub/grub-x86_64.efi
copying distros to tftpboot
copying images
generating PXE configuration files
generating PXE menu structure
rendering TFTPD files
generating /etc/xinetd.d/tftp
cleaning link caches
running post-sync triggers
running python triggers from /var/lib/cobbler/triggers/sync/post/*
running python trigger cobbler.modules.sync_post_restart_services
running shell triggers from /var/lib/cobbler/triggers/sync/post/*
running python triggers from /var/lib/cobbler/triggers/change/*
running python trigger cobbler.modules.manage_genders
running python trigger cobbler.modules.scm_track
running shell triggers from /var/lib/cobbler/triggers/change/*
*** TASK COMPLETE ***
#################同步成功######################
[root@centos7 ~]# tree /var/lib/tftpboot/
/var/lib/tftpboot/
├── boot
│ └── grub
│ └── menu.lst
├── etc
├── grub
│ ├── efidefault
│ ├── grub-x86_64.efi
│ ├── grub-x86.efi
│ └── images -> ../images
├── images
├── images2
├── memdisk
├── menu.c32
├── ppc
├── pxelinux.0
├── pxelinux.cfg
│ └── default
├── s390x
│ └── profile_list
└── yaboot
10 directories, 10 files
#################配置文件中的default_password###############
[root@centos7 ~]# vim /etc/cobbler/settings
# cobbler has various sample kickstart templates stored
# in /var/lib/cobbler/kickstarts/. This controls
# what install (root) password is set up for those
# systems that reference this variable. The factory
# default is "cobbler" and cobbler check will warn if
# this is not changed.
# The simplest way to change the password is to run
# openssl passwd -1
# and put the output between the "" below.
default_password_crypted: "$1$mF86/UHC$WvcIcX2t6crBz2onWxyac."
####通过openssl生成口令，替换默认口令
[root@centos7 ~]# openssl passwd -1
Password: centos
Verifying - Password: centos
$1$dne2pvmG$QjmWnhyMolFe0n3BbvszG/
- 实现dhcp服务
[root@centos7 ~]# vim /etc/cobbler/settings
# set to 1 to enable Cobbler's DHCP management features.
# the choice of DHCP management engine is in /etc/cobbler/modules.conf
#manage_dhcp: 0
##############将0改为1，通过cobbler生成dhcp配置文件#################
manage_dhcp: 1
# 改完后重启cobbler服务
[root@centos7 ~]# systemctl restart cobblerd
# 通过cobbler模板得到dhcp配置文件
[root@centos7 ~]# rpm -ql cobbler |grep dhcp
/etc/cobbler/dhcp.template
# 查看该模板
[root@centos7 ~]# vim /etc/cobbler/dhcp.template
# ******************************************************************
# Cobbler managed dhcpd.conf file
#
# generated from cobbler dhcp.conf template ($date)
# Do NOT make changes to /etc/dhcpd.conf. Instead, make your changes
# in /etc/cobbler/dhcp.template, as /etc/dhcpd.conf will be
# overwritten.
#
# ******************************************************************
ddns-update-style interim;
allow booting;
allow bootp;
ignore client-updates;
set vendorclass = option vendor-class-identifier;
option pxe-system-type code 93 = unsigned integer 16;
################配置这部分的内容###############################
subnet 192.168.33.0 netmask 255.255.255.0 {
option routers 192.168.33.2;
option domain-name-servers 180.76.76.76;
option subnet-mask 255.255.255.0;
range dynamic-bootp 192.168.33.10 192.168.33.254;
default-lease-time 21600;
max-lease-time 43200;
next-server $next_server;
#############################################################
class "pxeclients" {
match if substring (option vendor-class-identifier, 0, 9) = "PXEClient";
if option pxe-system-type = 00:02 {
filename "ia64/elilo.efi";
} else if option pxe-system-type = 00:06 {
filename "grub/grub-x86.efi";
} else if option pxe-system-type = 00:07 {
filename "grub/grub-x86_64.efi";
} else if option pxe-system-type = 00:09 {
filename "grub/grub-x86_64.efi";
} else {
filename "pxelinux.0";
}
}
}
#for dhcp_tag in $dhcp_tags.keys():
## group could be subnet if your dhcp tags line up with your subnets
## or really any valid dhcpd.conf construct ... if you only use the
## default dhcp tag in cobbler, the group block can be deleted for a
## flat configuration
# group for Cobbler DHCP tag: $dhcp_tag
group {
#for mac in $dhcp_tags[$dhcp_tag].keys():
#set iface = $dhcp_tags[$dhcp_tag][$mac]
host $iface.name {
#if $iface.interface_type == "infiniband":
option dhcp-client-identifier = $mac;
#else
hardware ethernet $mac;
#end if
#if $iface.ip_address:
fixed-address $iface.ip_address;
#end if
#if $iface.hostname:
option host-name "$iface.hostname";
#end if
#if $iface.netmask:
option subnet-mask $iface.netmask;
#end if
#if $iface.gateway:
option routers $iface.gateway;
#end if
#if $iface.enable_gpxe:
if exists user-class and option user-class = "gPXE" {
filename "http://$cobbler_server/cblr/svc/op/gpxe/system/$iface.owner";
} else if exists user-class and option user-class = "iPXE" {
filename "http://$cobbler_server/cblr/svc/op/gpxe/system/$iface.owner";
} else {
filename "undionly.kpxe";
}
#else
filename "$iface.filename";
#end if
## Cobbler defaults to $next_server, but some users
## may like to use $iface.system.server for proxied setups
next-server $next_server;
## next-server $iface.next_server;
}
#end for
}
#end for
####配置好后同步，并重新启动cobbler服务####
[root@centos7 ~]# cobbler sync
task started: 2020-06-14_212503_sync
task started (id=Sync, time=Sun Jun 14 21:25:03 2020)
running pre-sync triggers
cleaning trees
removing: /var/lib/tftpboot/pxelinux.cfg/default
removing: /var/lib/tftpboot/grub/images
removing: /var/lib/tftpboot/grub/grub-x86.efi
removing: /var/lib/tftpboot/grub/grub-x86_64.efi
removing: /var/lib/tftpboot/grub/efidefault
removing: /var/lib/tftpboot/s390x/profile_list
copying bootloaders
trying hardlink /var/lib/cobbler/loaders/grub-x86.efi -> /var/lib/tftpboot/grub/grub-x86.efi
trying hardlink /var/lib/cobbler/loaders/grub-x86_64.efi -> /var/lib/tftpboot/grub/grub-x86_64.efi
copying distros to tftpboot
copying images
generating PXE configuration files
generating PXE menu structure
rendering DHCP files
generating /etc/dhcp/dhcpd.conf
rendering TFTPD files
generating /etc/xinetd.d/tftp
cleaning link caches
running post-sync triggers
running python triggers from /var/lib/cobbler/triggers/sync/post/*
running python trigger cobbler.modules.sync_post_restart_services
running: dhcpd -t -q
received on stdout:
received on stderr:
running: service dhcpd restart
received on stdout:
received on stderr: Redirecting to /bin/systemctl restart dhcpd.service
running shell triggers from /var/lib/cobbler/triggers/sync/post/*
running python triggers from /var/lib/cobbler/triggers/change/*
running python trigger cobbler.modules.manage_genders
running python trigger cobbler.modules.scm_track
running shell triggers from /var/lib/cobbler/triggers/change/*
*** TASK COMPLETE ***
# 此时dhcp配置文件已经替换
- 启动菜单优化（修改启动菜单的标题信息）
# 修改模板文件/etc/cobbler/pxe/pxedefault.template,重启同步
[root@centos7 ~]# vim /etc/cobbler/pxe/pxedefault.template
DEFAULT menu
PROMPT 0
MENU TITLE Cobbler | http://www.coralloveme.com/
TIMEOUT 200
TOTALTIMEOUT 6000
ONTIMEOUT $pxe_timeout_profile
LABEL local
MENU LABEL (local)
MENU DEFAULT
LOCALBOOT -1
$pxe_menu_items
MENU end
[root@centos7 ~]# systemctl restart cobblerd
[root@centos7 ~]# cobbler sync
###检查###
[root@centos7 ~]# cat /var/lib/tftpboot/pxelinux.cfg/default
DEFAULT menu
PROMPT 0
MENU TITLE Cobbler | http://www.coralloveme.com/
TIMEOUT 200
TOTALTIMEOUT 6000
ONTIMEOUT local
LABEL local
MENU LABEL (local)
MENU DEFAULT
LOCALBOOT -1
MENU end
8. 导入系统
[root@centos7 ~]# mount /dev/cdrom /mnt
mount: /dev/sr0 is write-protected, mounting read-only
[root@centos7 ~]# cobbler import --name=centos-7-x86_64 --path=/mnt --arch=x86_64
[root@centos7 /]# cobbler import --name=centos-6.9-x86_64 --path=/misc --arch=x86_64
[root@localhost ~]# cobbler distro list
centos-6-x86_64
centos-7-x86_64
# 查看菜单内容
[root@localhost ~]# cobbler profile list
centos-6-x86_64
centos-7-x86_64
[root@localhost ~]# cobbler profile --help
usage
=====
cobbler profile add
cobbler profile copy
cobbler profile dumpvars
cobbler profile edit
cobbler profile find
cobbler profile getks
cobbler profile list
cobbler profile remove
cobbler profile rename
cobbler profile report
# 根据菜单内容查看应答文件
[root@localhost ~]# cobbler profile report
Name : centos-7-x86_64
TFTP Boot Files : {}
Comment :
DHCP Tag : default
Distribution : centos-7-x86_64
Enable gPXE? : 0
Enable PXE Menu? : 1
Fetchable Files : {}
Kernel Options : {}
Kernel Options (Post Install) : {}
Kickstart : /var/lib/cobbler/kickstarts/sample_end.ks
# 该文件是系统最小化安装应答文件
Kickstart Metadata : {}
Management Classes : []
Management Parameters : <<inherit>>
Name Servers : []
Name Servers Search Path : []
Owners : ['admin']
Parent Profile :
Internal proxy :
Red Hat Management Key : <<inherit>>
Red Hat Management Server : <<inherit>>
Repos : []
Server Override : <<inherit>>
Template Files : {}
Virt Auto Boot : 1
Virt Bridge : xenbr0
Virt CPUs : 1
Virt Disk Driver Type : raw
Virt File Size(GB) : 5
Virt Path :
Virt RAM (MB) : 512
Virt Type : kvm
Name : centos-6-x86_64
TFTP Boot Files : {}
Comment :
DHCP Tag : default
Distribution : centos-6-x86_64
Enable gPXE? : 0
Enable PXE Menu? : 1
Fetchable Files : {}
Kernel Options : {}
Kernel Options (Post Install) : {}
Kickstart : /var/lib/cobbler/kickstarts/sample_end.ks
# 该文件是系统最小化安装应答文件
Kickstart Metadata : {}
Management Classes : []
Management Parameters : <<inherit>>
Name Servers : []
Name Servers Search Path : []
Owners : ['admin']
Parent Profile :
Internal proxy :
Red Hat Management Key : <<inherit>>
Red Hat Management Server : <<inherit>>
Repos : []
Server Override : <<inherit>>
Template Files : {}
Virt Auto Boot : 1
Virt Bridge : xenbr0
Virt CPUs : 1
Virt Disk Driver Type : raw
Virt File Size(GB) : 5
Virt Path :
Virt RAM (MB) : 512
Virt Type : kvm
# 查看生成的菜单default文件
[root@localhost ~]# cd /var/lib/tftpboot/pxelinux.cfg/
[root@localhost pxelinux.cfg]# ls
default
[root@localhost pxelinux.cfg]# cat default
DEFAULT menu
PROMPT 0
MENU TITLE Cobbler | http://www.coralloveme.com/
TIMEOUT 200
TOTALTIMEOUT 6000
ONTIMEOUT local
LABEL local
MENU LABEL (local)
MENU DEFAULT
LOCALBOOT -1
LABEL centos-6-x86_64
kernel /images/centos-6-x86_64/vmlinuz
MENU LABEL centos-6-x86_64
append initrd=/images/centos-6-x86_64/initrd.img ksdevice=bootif lang= kssendmac text ks=http://192.168.33.33/cblr/svc/op/ks/profile/centos-6-x86_64
ipappend 2
LABEL centos-7-x86_64
kernel /images/centos-7-x86_64/vmlinuz
MENU LABEL centos-7-x86_64
append initrd=/images/centos-7-x86_64/initrd.img ksdevice=bootif lang= kssendmac text ks=http://192.168.33.33/cblr/svc/op/ks/profile/centos-7-x86_64
ipappend 2
MENU end
# 菜单中的ks应答文件默认是最小化应答文件，我们可以自己配置应答文件内容
- 配置linux发行版和关联相应的ks文件
[root@localhost pxelinux.cfg]# cd /var/lib/cobbler/kickstarts/
# 应答文件必须存放在此目录下
将linux发现版系统镜像与其对应的ks文件建立关联
cobbler profile add --name=centos7 --distro=centos-7-x86_64 --kickstart=/var/lib/cobbler/kickstarts/centos7.cfg
如果之前有自动生成的distro菜单条目，可以用
cobbler profile remove --name=PROFILE_NAME
删除后再关联ks文件，留下新的菜单
是cobbler自己定义安装源路径的特有语法规定的，因此可以在ks文件中指定安装源时直接指定$tree变量
url --url=$tree
建立关联后重启并同步
systemctl restart cobblerd
cobbler sync
注意事项
[root@localhost ~]# cobbler report
distros:
==========
Name : centos-7-x86_64
Architecture : x86_64
TFTP Boot Files : {}
Breed : redhat
Comment :
Fetchable Files : {}
Initrd : /var/www/cobbler/ks_mirror/centos-7-x86_64/images/pxeboot/initrd.img
Kernel : /var/www/cobbler/ks_mirror/centos-7-x86_64/images/pxeboot/vmlinuz
Kernel Options : {}
Kernel Options (Post Install) : {}
Kickstart Metadata : {'tree': 'http://@@http_server@@/cblr/links/centos-7-x86_64'}
Management Classes : []
OS Version : rhel7
Owners : ['admin']
Red Hat Management Key : <<inherit>>
Red Hat Management Server : <<inherit>>
Template Files : {}
注意有一行配置如下
Kickstart Metadata : {'tree': 'http://@@http_server@@/cblr/links/centos-7-x86_64'}
该行的定义为/var/www/cobbler/ks_mirror/config/centos-7-x86_64
[root@localhost ~]# cat /var/www/cobbler/ks_mirror/config/centos-7-x86_64.repo
[core-0]
name=core-0
baseurl=http://@@http_server@@/cobbler/ks_mirror/centos-7-x86_64
enabled=1
gpgcheck=0
priority=$yum_distro_priority
我的centos7.cfg
[root@localhost ~]# cat centos7.cfg
#version=DEVEL
# System authorization information
auth --enableshadow --passalgo=sha512
# Use network installation
url --url=$tree
# Use graphical install
graphical
# Run the Setup Agent on first boot
firstboot --enable
ignoredisk --only-use=sda
# Keyboard layouts
keyboard --vckeymap=us --xlayouts='us'
# System language
lang en_US.UTF-8
# firewall and selinux
firewall --disabled
selinux --disabled
# Network information
network --bootproto=dhcp --device=eth0 --onboot=yes --ipv6=auto --no-activate
network --hostname=localhost.localdomain
# Root password
rootpw --iscrypted $6$6uNGLsloTDzglpSO$UvFU7hzHd9AReFxbOV7ToRkLeS.hYo1wGfy2VPG9IgFdJrzsXhDH9R92UBtNoqfeYfyJqz9DbJJyj9GVLuVbQ0
# System services
services --disabled="chronyd"
# System timezone
timezone Asia/Shanghai --isUtc --nontp
user --name=flamenca --password=$6$2MTD2y1eRUUbuELU$1RWWo9LLzalMJJOdjHp8eGXt6xVYIzz6qiZCqDTPurQo/w8NJyjjkWe9Gq2kZXgMjgXRyQUrm60UkIs5kjPFj1 --iscrypted --gecos="flamenca"
# X Window System configuration information
xconfig --startxonboot
# System bootloader configuration
bootloader --append="net.ifnames=0" --location=mbr --boot-drive=sda
autopart --type=lvm
# Partition clearing information
clearpart --none --initlabel
%packages
@^gnome-desktop-environment
@base
@core
@desktop-debugging
@dial-up
@directory-client
@fonts
@gnome-desktop
@guest-agents
@guest-desktop-agents
@input-methods
@internet-browser
@java-platform
@multimedia
@network-file-system-client
@networkmanager-submodules
@print-client
@x11
kexec-tools
%end
%addon com_redhat_kdump --enable --reserve-mb='auto'
%end
%anaconda
pwpolicy root --minlen=6 --minquality=1 --notstrict --nochanges --notempty
pwpolicy user --minlen=6 --minquality=1 --notstrict --nochanges --emptyok
pwpolicy luks --minlen=6 --minquality=1 --notstrict --nochanges --notempty
%end
%post
mkdir /etc/yum.repos.d/bak
mv /etc/yum.repos.d/* /etc/yum.repos.d/bak
cat > /yum.repos.d/Base.repo << EOF
[base]
name=Centos 7 Base
baseurl=http://192.168.33.33/centos/7/os/x86_64/mnt/
gpgcheck=0
[epel]
name=Centos 7 Epel
baseurl=https://mirrors.aliyun.com/epel/7/x86_64/
gpgcheck=0
EOF
%end
[root@localhost ~]# mv centos7.cfg /var/lib/cobbler/kickstarts/;cd /var/lib/cobbler/kickstarts/
[root@localhost kickstarts]# ls
centos7.cfg pxerescue.ks sample_esxi6.ks
default.ks sample_autoyast.xml sample.ks
esxi4-ks.cfg sample_end.ks sample_old.seed
esxi5-ks.cfg sample_esx4.ks sample.seed
install_profiles sample_esxi4.ks sample.seed.28
legacy.ks sample_esxi5.ks
[root@localhost kickstarts]# cobbler profile add --name=centos7-test --distro=centos-7-x86_64 --kickstart=/var/lib/cobbler/kickstarts/centos7.cfg
[root@localhost kickstarts]# cobbler profile list
centos-6-x86_64
centos-7-x86_64
centos7-test
移除原cento7菜单
[root@localhost kickstarts]# cobbler profile remove --name=centos-7-x86_64
[root@localhost kickstarts]# cobbler profile list
centos-6-x86_64
centos7-test
检查/var/lib/tftpboot/pxelinux.cfg/default文件
[root@localhost kickstarts]# cat /var/lib/tftpboot/pxelinux.cfg/default
DEFAULT menu
PROMPT 0
MENU TITLE Cobbler | http://www.coralloveme.com/
TIMEOUT 200
TOTALTIMEOUT 6000
ONTIMEOUT local
LABEL local
MENU LABEL (local)
MENU DEFAULT
LOCALBOOT -1
LABEL centos-6-x86_64
kernel /images/centos-6-x86_64/vmlinuz
MENU LABEL centos-6-x86_64
append initrd=/images/centos-6-x86_64/initrd.img ksdevice=bootif lang= kssendmac text ks=http://192.168.33.33/cblr/svc/op/ks/profile/centos-6-x86_64
ipappend 2
LABEL centos7-test
kernel /images/centos-7-x86_64/vmlinuz
MENU LABEL centos7-test
append initrd=/images/centos-7-x86_64/initrd.img ksdevice=bootif lang= kssendmac text ks=http://192.168.33.33/cblr/svc/op/ks/profile/centos7-test
ipappend 2
MENU end
总结
# 将tftp-server设置成为开机自动运行，在centos7中
systemctl enable --now tftp-server
# centos6中需要修改配置文件
vim /etc/xinetd.d/tftp
disable = yes --> disable = no
# 需要配置epel源才可以下载cobbler和cobbler-web
[epel]
name=EPEL
baseurl=https://mirrors.aliyun.com/epel/7/x86_64/
gpgcheck=0
# 如果事先已经安装好httpd，安装完cobbler以及cobbler-web后需要restart httpd
# 联网下载boot引导程序
cobbler get-loaders
# 没有联网的情况下拷贝syslinux中的pxelinux.0,menu.c32到tftp服务文件中
cp -a /usr/share/syslinux/{pxelinux.0,menu.c32} /var/lib/tftpboot
# cobbler check，按照步骤修改配置文件 /etc/cobbler/settings 中的 next_server信息，指明tftp服务器地址
# 配置相应选项来管理dhcp服务和tftp服务
manage_dhcp: 1
manage_tftpd: 1
# pxe_just_once选项，该选项为1表示pxe安装快结束时在cobbler系统中做相应的记录，这样会避免客户端的BIOS选项中PXE启动如果是第一位则会导致循环重启，如果第一个启动硬件不是PXE启动则置0
pxe_just_once: 1
# 配置dhcp服务
# 剩下的内容基本都在笔记中了
实现基于cobbler-web的管理
下载cobbler-web
[root@localhost /]# yum install cobbler-web
重新启动httpd服务
[root@localhost /]# systemctl restart httpd
端口号
[root@localhost /]# ss -ntulp
Netid State Recv-Q Send-Q Local Address:Port Peer Address:Port
tcp LISTEN 0 128 [::]:443 [::]:* users:(("httpd",pid=57813,fd=6),("httpd",pid=57812,fd=6),("httpd",pid=57811,fd=6),("httpd",pid=57810,fd=6),("httpd",pid=57809,fd=6),("httpd",pid=57807,fd=6))
# https端口，http+ssl
网址：
http://192.168.33.33/cobbler_web
错误原因：需要走https
https://192.168.33.33/cobbler_web
这错误的原因是因为该页面的证书是自己颁发的证书
所以不用管它，继续前往
默认账户密码都是cobbler
账户认证方法
- authn_configfile，默认
- authn_pam
配置认证方法文件
[root@localhost /]# vim /etc/cobbler/modules.conf
[authentication]
module = authn_configfile
用户认证文件/etc/cobbler/users.digest
[root@localhost /]# cat /etc/cobbler/users.digest
cobbler:Cobbler:a2d6bae81669d707b72c0bd9806e01f3
#username | realm | passwd
添加用户
htdigest -c /etc/cobbler/users.conf Cobbler admin
# realm #username
注意
添加第一个用户时，使用 -c 选项（重新创建），后续添加其他用户时不要再使用
cobbler_web的realm只能为Cobbler