前言

cobbler简介
Cobbler 可以用来快速建立 Linux 网络安装环境，它已将Linux网络安装的技术门槛，从大专以上文化水平，成功降低到了初中水平，连补鞋匠都能学会。
网络安装服务器套件Cobbler（补鞋匠）从前，我们一直在装机民工这份很有前途的职业。自打若干年前Red Hat推出了 Kickstart，此后我们顿觉身价增倍。不再需要刻了光盘一台一台的安装Linux，只要搞定PXE、DHCP、TFTP，还有那满屏眼花缭乱不知所云的Kickstart脚本，我们就可以像哈利波特一样，轻点魔棒，瞬间安装上百台服务器。这一堆花里胡哨的东西可不是一般人能够整明白的，没有大专以上的学历，通不过英语四级，根本别想玩转。总而言之，这是一份多么有前途，多么有技术含量的工作啊。很不幸，Red Hat 最新（Cobbler项目最初在2008年左右发布）发布了网络安装服务器套件Cobbler（补鞋匠），它已将Linux网络安装的技术门槛，从大专以上文化水平，成功降低到初中以下水平，连补鞋匠都能学会。

一 Cobbler自动化部署

1、Cobbler是一个Linux服务器安装的服务，可以通过网络启动（PXE）的方式来快速安装、重装物理服务器和虚拟机，同时还可以管理DHCP，DNS等。
2、Cobbler可以使用命令行方式管理，也提供了基于Web的界面管理工具（cobbler-web），还提供了API接口，可以方便二次开发使用。
3、Cobbler是较早前的kickstart的升级版，优点是比较容易配置，还自带web界面比较易于管理。
4、Cobbler内置了一个轻量级配置管理系统，但它也支持和其它配置管理系统集成，如Puppet。
在这里插入图片描述
Cobbler的配置结构基于一组注册的对象。每个对象表示一个与另一个实体相关联的实体。当一个对象指向另一个对象时，它就继承了被指向对象的数据，并可覆盖或添加更多特定信息。

发行版(distros)：表示一个操作系统。它承载了内核和initrd的信息，以及内核参数等其他数据。
配置文件(profiles)：包含一个发行版、一个kickstart文件以及可能的存储库，还包括更多特定的内核参数等其他数据。
系统(systems)：表示要配给的机器。它包括一个配置文件或一个镜像、IP和MAC地址、电源管理（地址、凭据、类型）以及更为专业的数据等信息。
镜像(images)：可以替换一个保函不屑于此类别的文件的发行版对象（例如，无法分为内核和initrd的对象）。
cobbler集成的服务
PXE服务支持
DHCP服务管理
DNS服务管理
电源管理
Kickstart服务支持
YUM仓库管理
TFTP
Apache
cobbler工作原理#
在这里插入图片描述
5.Server端

启动Cobbler服务
进行Cobbler错误检查，执行cobbler check命令
进行配置同步，执行cobbler sync命令
复制相关启动文件到TFTP目录中
启动DHCP服务，提供地址分配
DHCP服务分配IP地址
TFTP传输启动文件
Server端接收安装信息
Server端发送ISO镜像与Kickstart文件
6.Client端

客户端以PXE模式启动
客户端获取IP地址
通过TFTP服务器获取启动文件
进入Cobbler安装选择界面
根据配置信息准备安装系统
加载Kickstart文件
传输系统安装的其它文件
进行安装系统

二 .具体实验操作步骤

1 安装核心软件

[root@shanan ~]# yum -y install epel-release
[root@shanan ~]# yum install cobbler cobbler-web dhcp tftp-server pykickstart httpd rsync xinetd -y
cobbler        #cobbler程序包
cobbler-web    #cobbler的web服务包
pykickstart    #cobbler检查kickstart语法错误
httpd          #Apache web服务
dhcp           #Dhcp服务
tftp           #tftp服务
xinetd　　      #诸多服务的超级守护进程，
[root@shanan ~]# cd /etc/cobbler/
[root@shanan cobbler]# ls
auth.conf               ldap            secondary.template
cheetah_macros          modules.conf    settings
cobbler_bash            mongodb.conf    tftpd.template
completions             named.template  users.conf
dhcp.template           power           users.digest
dnsmasq.template        pxe             version
genders.template        reporting       zone.template
import_rsync_whitelist  rsync.exclude   zone_templates
iso                     rsync.template
[root@shanan cobbler]# vim settings 
-bash: vim: command not found
[root@shanan cobbler]# vi settings

2.修改相关配置参数

修改cobbler服务地址

在这里插入图片描述

指定PXE位置
在这里插入图片描述

  修改DHCP  启动参数

在这里插入图片描述

3.开启httpd和cobbler服务，关闭增强性功能和防火墙

[root@shanan cobbler]# vi settings
[root@shanan cobbler]# systemctl start httpd.service
[root@shanan cobbler]# systemctl start cobblerd.service
[root@shanan cobbler]# systemctl status cobblerd.service
● cobblerd.service - Cobbler Helper Daemon
Loaded: loaded (/usr/lib/systemd/system/cobblerd.service; disabled; vendor preset: disabled)
Active: active (running) since Sun 2020-07-19 05:11:23 EDT; 25s ago
Process: 9435 ExecStartPost=/usr/bin/touch /usr/share/cobbler/web/cobbler.wsgi (code=exited, status=0/SUCCESS)
Main PID: 9434 (cobblerd)
CGroup: /system.slice/cobblerd.service
└─9434 /usr/bin/python2 -s /usr/bin/cobblerd -F

Jul 19 05:11:23 shanan systemd[1]: Starting Cobbler Helper Daemon…
Jul 19 05:11:23 shanan systemd[1]: Started Cobbler Helper Daemon.
[root@shanan cobbler]# systemctl stop firewalld.service
[root@shanan cobbler]# setenforce 0

4.使用cobbler check命令可以查看需要优化哪些项目

（第一个因为selinux已经关闭，可以不做修改，第五个和第七个也不需要做）
[root@shanan cobbler]# cobbler check
The following are potential configuration items that you may want to fix:

1 : SELinux is enabled. Please review the following wiki page for details on ensuring cobbler works correctly in your SELinux environment:
https://github.com/cobbler/cobbler/wiki/Selinux
2 : change ‘disable’ to ‘no’ in /etc/xinetd.d/tftp
3 : Some network boot-loaders are missing from /var/lib/cobbler/loaders, you may run ‘cobbler get-loaders’ to download them, or, if you only want to handle x86/x86_64 netbooting, you may ensure that you have installed a recent version of the syslinux package installed and can ignore this message entirely. Files in this directory, should you want to support all architectures, should include pxelinux.0, menu.c32, elilo.efi, and yaboot. The ‘cobbler get-loaders’ command is the easiest way to resolve these requirements.
4 : enable and start rsyncd.service with systemctl
5 : debmirror package is not installed, it will be required to manage debian deployments and repositories
6 : The default password used by the sample templates for newly installed machines (default_password_crypted in /etc/cobbler/settings) is still set to ‘cobbler’ and should be changed, try: “openssl passwd -1 -salt ‘random-phrase-here’ ‘your-password-here’” to generate new one
7 : fencing tools were not found, and are required to use the (optional) power management features. install cman or fence-agents to use them

Restart cobblerd and then run ‘cobbler sync’ to apply changes.

5.在/etc/xinetd.d/tftp中修改disable为no

在这里插入图片描述

6.启用sync服务

[root@shanan cobbler]# systemctl enable rsyncd
Created symlink from /etc/systemd/system/multi-user.target.wants/rsyncd.service to /usr/lib/systemd/system/rsyncd.service.

7.生成自动安装系统root用户的密码的盐值加密，复制到/etc/cobbler/settings配置文件中

[root@shanan cobbler]# openssl passwd -1 -salt ‘sha123’ ‘sha123’
$1$ sha123$z44Fe1DlxbXUBOyCVxIoA1
[root@shanan cobbler]# vi /etc/cobbler/settings
在这里插入图片描述

root@shanan cobbler]# systemctl start rsyncd.service
[root@shanan cobbler]# systemctl restart xinetd.service

8.修改cobbler控制的dhcp服务

subnet 192.168.100.0 netmask 255.255.255.0 {
option routers 192.168.100.48;
option domain-name-servers 8.8.8.8;
option subnet-mask 255.255.255.0;
range dynamic-bootp 192.168.100.100 192.168.100.254;
default-lease-time 21600;
max-lease-time 43200;
next-server $next_server;
class “pxeclients” {
match if substring (option vendor-class-identifier, 0, 9) = “PXEClient”;

9.启动sync服务，重启xinetd服务

[root@shanan cobbler]# cobbler sync
task started: 2020-07-19_052839_sync
task started (id=Sync, time=Sun Jul 19 05:28:39 2020)
running pre-sync triggers
cleaning trees
removing: /var/lib/tftpboot/grub/images
copying bootloaders
copying: /usr/share/syslinux/pxelinux.0 -> /var/lib/tftpboot/pxelinux.0
copying: /usr/share/syslinux/menu.c32 -> /var/lib/tftpboot/menu.c32
copying: /usr/share/syslinux/memdisk -> /var/lib/tftpboot/memdisk
copying distros to tftpboot
copying images
generating PXE configuration files
generating PXE menu structure
rendering DHCP files
generating /etc/dhcp/dhcpd.conf
rendering TFTPD files
generating /etc/xinetd.d/tftp
cleaning link caches
running post-sync triggers
running python triggers from /var/lib/cobbler/triggers/sync/post/*
running python trigger cobbler.modules.sync_post_restart_services
running: dhcpd -t -q
received on stdout:
received on stderr:
running: service dhcpd restart
received on stdout:
received on stderr: Redirecting to /bin/systemctl restart dhcpd.service

running shell triggers from /var/lib/cobbler/triggers/sync/post/*
running python triggers from /var/lib/cobbler/triggers/change/*
running python trigger cobbler.modules.manage_genders
running python trigger cobbler.modules.scm_track
running shell triggers from /var/lib/cobbler/triggers/change/*
*** TASK COMPLETE ***

10.这时我们发现dhcp服务的配置文件中多了内容–dhcp服务已被cobbler托管，无法再进行修改

11.下载引导操作系统文件

[root@shanan ~]# systemctl start httpd.service
[root@shanan ~]# systemctl start cobblerd.service
[root@shanan ~]# systemctl status cobblerd.service
[root@shanan ~]# systemctl start rsyncd.service
[root@shanan ~]# systemctl restart xinetd.service 
[root@shanan cobbler]# setenforce 0
[root@shanan cobbler]# systemctl stop firewalld
[root@shanan cobbler]# cobbler get_loaders
No such command: get_loaders
[root@shanan cobbler]# bash
[root@shanan cobbler]# cobbler get-loaders
task started: 2020-07-19_061108_get_loaders
task started (id=Download Bootloader Content, time=Sun Jul 19 06:11:08 2020)
path /var/lib/cobbler/loaders/README already exists, not overwriting existing content, use --force if you wish to update
path /var/lib/cobbler/loaders/COPYING.elilo already exists, not overwriting existing content, use --force if you wish to update
path /var/lib/cobbler/loaders/COPYING.yaboot already exists, not overwriting existing content, use --force if you wish to update
path /var/lib/cobbler/loaders/COPYING.syslinux already exists, not overwriting existing content, use --force if you wish to update
path /var/lib/cobbler/loaders/elilo-ia64.efi already exists, not overwriting existing content, use --force if you wish to update
path /var/lib/cobbler/loaders/yaboot already exists, not overwriting existing content, use --force if you wish to update
path /var/lib/cobbler/loaders/pxelinux.0 already exists, not overwriting existing content, use --force if you wish to update
path /var/lib/cobbler/loaders/menu.c32 already exists, not overwriting existing content, use --force if you wish to update
path /var/lib/cobbler/loaders/grub-x86.efi already exists, not overwriting existing content, use --force if you wish to update
downloading https://cobbler.github.io/loaders/grub-0.97-x86_64.efi to /var/lib/cobbler/loaders/grub-x86_64.efi
*** TASK COMPLETE ***
[root@shanan cobbler]#

12.导入镜像文件（默认存放位置：/var/www/cobbler/ks_mirror/CentOS-7-x86_64）

[root@shanan cobbler]# mount /dev/sr0 /mnt
mount: /dev/sr0 is write-protected, mounting read-only
[root@shanan cobbler]# df -h
Filesystem               Size  Used Avail Use% Mounted on
/dev/mapper/centos-root   50G  2.0G   49G   4% /
devtmpfs                 1.7G     0  1.7G   0% /dev
tmpfs                    1.8G     0  1.8G   0% /dev/shm
tmpfs                    1.8G  9.7M  1.8G   1% /run
tmpfs                    1.8G     0  1.8G   0% /sys/fs/cgroup
/dev/sda1               1014M  146M  869M  15% /boot
/dev/mapper/centos-home  246G   33M  246G   1% /home
tmpfs                    351M     0  351M   0% /run/user/0
/dev/sr0                 4.3G  4.3G     0 100% /mnt
[root@shanan cobbler]# cobbler import --path=/mnt --name=CentOS-7-x86_64 --arch=x86_64
task started: 2020-07-19_061522_import
task started (id=Media import, time=Sun Jul 19 06:15:22 2020)
Found a candidate signature: breed=redhat, version=rhel6
Found a matching signature: breed=redhat, version=rhel6
Adding distros from path /var/www/cobbler/ks_mirror/CentOS-7-x86_64:
creating new distro: CentOS-7-x86_64
trying symlink: /var/www/cobbler/ks_mirror/CentOS-7-x86_64 -> /var/www/cobbler/links/CentOS-7-x86_64
creating new profile: CentOS-7-x86_64
associating repos
checking for rsync repo(s)
checking for rhn repo(s)
checking for yum repo(s)
starting descent into /var/www/cobbler/ks_mirror/CentOS-7-x86_64 for CentOS-7-x86_64
processing repo at : /var/www/cobbler/ks_mirror/CentOS-7-x86_64
need to process repo/comps: /var/www/cobbler/ks_mirror/CentOS-7-x86_64
looking for /var/www/cobbler/ks_mirror/CentOS-7-x86_64/repodata/*comps*.xml
Keeping repodata as-is :/var/www/cobbler/ks_mirror/CentOS-7-x86_64/repodata
*** TASK COMPLETE ***
[root@shanan cobbler]# cd /var/www/cobbler/ks_mirror/
[root@shanan ks_mirror]# ls
CentOS-7-x86_64  config
[root@shanan ks_mirror]#  cobbler list 
distros:
   CentOS-7-x86_64

profiles:
   CentOS-7-x86_64

systems:

repos:

images:

mgmtclasses:

packages:

files:

13.利用tree命令可以发现系统镜像的内核和初始化镜像文件已经成功被cobbler托管了。

[root@shanan ks_mirror]# yum install tree -y
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
 * base: mirrors.aliyun.com
 * epel: mirrors.yun-idc.com
 * extras: mirrors.ustc.edu.cn
 * updates: mirrors.aliyun.com
Resolving Dependencies
--> Running transaction check
---> Package tree.x86_64 0:1.6.0-10.el7 will be installed
--> Finished Dependency Resolution

Dependencies Resolved

=======================================================================
 Package      Arch           Version                Repository    Size
=======================================================================
Installing:
 tree         x86_64         1.6.0-10.el7           base          46 k

Transaction Summary
=======================================================================
Install  1 Package

Total download size: 46 k
Installed size: 87 k
Downloading packages:
tree-1.6.0-10.el7.x86_64.rpm                      |  46 kB   00:00     
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
  Installing : tree-1.6.0-10.el7.x86_64                            1/1 
  Verifying  : tree-1.6.0-10.el7.x86_64                            1/1 

Installed:
  tree.x86_64 0:1.6.0-10.el7                                           

Complete!
[root@shanan ks_mirror]# tree /var/lib/tftpboot/images 
/var/lib/tftpboot/images
└── CentOS-7-x86_64
    ├── initrd.img
    └── vmlinuz

14 .实验验证

1.在VMware中新建一台虚拟机，客户机操作系统选择自动检测，网卡选择和服务器同一网卡

[root@shanan ks_mirror]#  systemctl restart cobblerd.service
[root@shanan ks_mirror]#  systemctl restart dhcpd.service
[root@shanan ks_mirror]#  systemctl restart xinetd.service
[root@shanan ks_mirror]#  systemctl restart httpd.service