自动化运维——CentOS7下利用Cobbler批量部署CentOS
Posted
tags:
篇首语：本文由小常识网(cha138.com)小编为大家整理，主要介绍了自动化运维——CentOS7下利用Cobbler批量部署CentOS相关的知识，希望对你有一定的参考价值。
Cobbler是一个使用Python开发的开源项目，通过将部署系统所涉及的所有服务集中在一起，来提供一个全自动批量快速建立Linux系统的网络安装环境，Cobbler最初支持Fedora、RedHat和衍生版（如CentOS和Scientific Linux），现在还支持Debian、Ubuntu、SuSE以及FreeBSD、ESXI等。Cobbler是一款快速的网络系统部署工具，其最大的特点是集合了所有系统部署所需服务，如DHCP、DNS、TFTP，这样你在部署一台操作系统的时候不需要在各个服务之前协调切换，Cobbler都可以替你来管理，Cobbler内部集成了一个镜像版本仓库，你可以自定义相关配置文件，实现不同系统不同安装需求的选择；当然，Cobbler还提供了包括yum源管理、Web界面管理、API接口、电源管理等功能，方便你自定义开发管理。
Cobbler的配置文件位置及配置：
1.) Cobbler配置文件目录：/etc/cobbler
/etc/cobbler/settings #cobbler主配置文件
/etc/cobbler/dhcp.template #DHCP服务的配置模板
/etc/cobbler/tftpd.template #tftp服务的配置模板
/etc/cobbler/rsync.template #rsync服务的配置模板
/etc/cobbler/iso #iso模板配置文件
/etc/cobbler/pxe #pxe模板文件
/etc/cobbler/power #电源的配置文件
/etc/cobbler/users.conf #Web服务授权配置文件
/etc/cobbler/users.digest #用于web访问的用户名密码配置文件
/etc/cobbler/dnsmasq.template #DNS服务的配置模板
/etc/cobbler/modules.conf #Cobbler模块配置文件
2.) Cobbler数据目录：/var/lib/cobbler
/var/lib/cobbler/config #配置文件
/var/lib/cobbler/triggers #Cobbler命令
/var/lib/cobbler/kickstarts #默认存放kickstart文件
/var/lib/cobbler/loaders #存放的各种引导程序
3.) 系统安装镜像目录：/var/www/cobbler
/var/www/cobbler/ks_mirror #导入的系统镜像列表
/var/www/cobbler/images #导入的系统镜像启动文件
/var/www/cobbler/repo_mirror #yum源存储目录
4.) 日志目录：/var/log/cobbler
/var/log/cobbler/install.log #客户端系统安装日志
/var/log/cobbler/cobbler.log #cobbler日志
下面我们来完成Cobbler服务的搭建：
Cobbler环境是由EPEL源提供的，我们先到站点下载EPEL源：
[[email protected] Desktop]# yum -y install http://mirrors.163.com/centos/7/extras/x86_64/Packages/epel-release-7-11.noarch.rpm ##安装EPEL源 [[email protected] ~]# yum install cobbler cobbler-web dhcp tftp-server pykickstart httpd rsync xinetd -y ##安装系统部署所需所有服务
开启服务，设置开机自启动方便以后使用，关闭防火墙及增强安全功能：
[[email protected] ~]# systemctl restart httpd [[email protected] ~]# systemctl restart cobblerd [[email protected] ~]# systemctl enable httpd.service [[email protected] ~]# systemctl enable cobblerd.service [[email protected] ~]# systemctl stop firewalld [[email protected] ~]# setenforce 0
执行cobbler check，检查需要优化的点，需要注意的是，优化完成后要重启服务使你的优化生效：
[[email protected] ~]# cobbler check The following are potential configuration items that you may want to fix: 1 : The 'server' field in /etc/cobbler/settings must be set to something other than localhost, or kickstarting features will not work. This should be a resolvable hostname or IP for the boot server as reachable by all machines that will use it. 2 : For PXE to be functional, the 'next_server' field in /etc/cobbler/settings must be set to something other than 127.0.0.1, and should match the IP of the boot server on the PXE network. 3 : SELinux is enabled. Please review the following wiki page for details on ensuring cobbler works correctly in your SELinux environment: https://github.com/cobbler/cobbler/wiki/Selinux 4 : change 'disable' to 'no' in /etc/xinetd.d/tftp 5 : Some network boot-loaders are missing from /var/lib/cobbler/loaders, you may run 'cobbler get-loaders' to download them, or, if you only want to handle x86/x86_64 netbooting, you may ensure that you have installed a *recent* version of the syslinux package installed and can ignore this message entirely. Files in this directory, should you want to support all architectures, should include pxelinux.0,menu.c32, elilo.efi, and yaboot. The 'cobbler get-loaders' command is the easiest way to resolve these requirements. 6 : enable and start rsyncd.service with systemctl 7 : debmirror package is not installed, it will be required to manage debian deployments and repositories 8 : The default password used by the sample templates for newly installed machines (default_password_crypted in /etc/cobbler/settings) is still set to 'cobbler' and should be changed, try: "openssl passwd -1 -salt 'random-phrase-here' 'your-password-here'" to generate new one 9 : fencing tools were not found, and are required to use the (optional) power management features. install cman or fence-agents to use them Restart cobblerd and then run 'cobbler sync' to apply changes.
此时，我们按照上面需要优化的点逐步去优化：
修改cobbler配置文件：
[[email protected] ~]# vim /etc/cobbler/settings 将“next_server: 127.0.0.1”修改为“next_server: 192.168.117.130” ##指定PXE位置，这里用的为本机地址 将“server: 127.0.0.1”修改为“server: 192.168.117.130” 将"manage_dhcp: 0"修改为"manage_dhcp: 1" ##管理dhcp启动
修改cobbler默认密码：
[[email protected] ~]# openssl passwd -1 -salt '123123' '123123' ##盐值加密 $1$abner$kDle2KnwbPHdm1UZEE79V. ##得到一串密码 [[email protected] ~]# vim /etc/cobbler/settings ##回setting文件搜索默认密码 default_password_crypted: "$1$mF86/UHC$WvcIcX2t6crBz2onWxyac." ##将得到的密码复制到双撇号内
下载引导操作系统文件：
[[email protected] ~]# cobbler get-loaders task started: 2018-05-31_144102_get_loaders task started (id=Download Bootloader Content, time=Thu May 31 14:41:02 2018) downloading https://cobbler.github.io/loaders/README to /var/lib/cobbler/loaders/README downloading https://cobbler.github.io/loaders/COPYING.elilo to /var/lib/cobbler/loaders/COPYING.elilo downloading https://cobbler.github.io/loaders/COPYING.yaboot to /var/lib/cobbler/loaders/COPYING.yaboot downloading https://cobbler.github.io/loaders/COPYING.syslinux to /var/lib/cobbler/loaders/COPYING.syslinux downloading https://cobbler.github.io/loaders/elilo-3.8-ia64.efi to /var/lib/cobbler/loaders/elilo-ia64.efi downloading https://cobbler.github.io/loaders/yaboot-1.3.17 to /var/lib/cobbler/loaders/yaboot downloading https://cobbler.github.io/loaders/pxelinux.0-3.86 to /var/lib/cobbler/loaders/pxelinux.0 downloading https://cobbler.github.io/loaders/menu.c32-3.86 to /var/lib/cobbler/loaders/menu.c32 downloading https://cobbler.github.io/loaders/grub-0.97-x86.efi to /var/lib/cobbler/loaders/grub-x86.efi downloading https://cobbler.github.io/loaders/grub-0.97-x86_64.efi to /var/lib/cobbler/loaders/grub-x86_64.efi *** TASK COMPLETE *** ##显示任务完成
启用tftp服务：
[[email protected] ~]# vim /etc/xinetd.d/tftp # default: off # description: The tftp server serves files using the trivial file transfer # protocol. The tftp protocol is often used to boot diskless # workstations, download configuration files to network-aware printers, # and to start the installation process for some operating systems. service tftp { socket_type = dgram protocol = udp wait = yes user = root server = /usr/sbin/in.tftpd server_args = -s /var/lib/tftpboot disable = no ##修改为no启用服务 per_source = 11 cps = 100 2 flags = IPv4
配置cobbler控制的dhcp模板：
[[email protected] ~]# vim /etc/cobbler/dhcp.template ##省略部分信息 set vendorclass = option vendor-class-identifier; option pxe-system-type code 93 = unsigned integer 16; subnet 192.168.117.0 netmask 255.255.255.0 { //修改子网 option routers 192.168.117.1; //修改网关 option domain-name-servers 192.168.117.2; //修改DNS option subnet-mask 255.255.255.0; range dynamic-bootp 192.168.117.100 192.168.117.200; //指定地址池，和cobbler服务器在同一网段 default-lease-time 21600; max-lease-time 43200; next-server $next_server;
帮助生成DHCP配置文件：
[[email protected] ~]# cobbler sync task started: 2018-05-31_145223_sync task started (id=Sync, time=Thu May 31 14:52:23 2018) running pre-sync triggers cleaning trees removing: /var/lib/tftpboot/grub/images copying bootloaders copying: /var/lib/cobbler/loaders/pxelinux.0 -> /var/lib/tftpboot/pxelinux.0 copying: /var/lib/cobbler/loaders/menu.c32 -> /var/lib/tftpboot/menu.c32 copying: /var/lib/cobbler/loaders/yaboot -> /var/lib/tftpboot/yaboot copying: /usr/share/syslinux/memdisk -> /var/lib/tftpboot/memdisk copying: /var/lib/cobbler/loaders/grub-x86.efi -> /var/lib/tftpboot/grub/grub-x86.efi copying: /var/lib/cobbler/loaders/grub-x86_64.efi -> /var/lib/tftpboot/grub/grub-x86_64.efi copying distros to tftpboot copying images generating PXE configuration files generating PXE menu structure rendering TFTPD files generating /etc/xinetd.d/tftp cleaning link caches running post-sync triggers running python triggers from /var/lib/cobbler/triggers/sync/post/* running python trigger cobbler.modules.sync_post_restart_services running shell triggers from /var/lib/cobbler/triggers/sync/post/* running python triggers from /var/lib/cobbler/triggers/change/* running python trigger cobbler.modules.scm_track running shell triggers from /var/lib/cobbler/triggers/change/* *** TASK COMPLETE *** ##显示配置成功！
重启服务使配置生效：
[[email protected] ~]# systemctl restart cobblerd [[email protected] ~]# systemctl restart rsyncd [[email protected] ~]# systemctl enable rsyncd [[email protected] ~]# systemctl restart xinetd [[email protected] ~]# systemctl restart dhcpd
再次执行cobbler check检查：
[[email protected] ~]# cobbler check ##下面三条可以忽略不去处理 The following are potential configuration items that you may want to fix: 1 : SELinux is enabled. Please review the following wiki page for details on ensuring cobbler works correctly in your SELinux environment: https://github.com/cobbler/cobbler/wiki/Selinux 2 : debmirror package is not installed, it will be required to manage debian deployments and repositories 3 : fencing tools were not found, and are required to use the (optional) power management features. install cman or fence-agents to use them Restart cobblerd and then run 'cobbler sync' to apply changes.
导入iso镜像文件到cobbler中：
[[email protected]CentOS7-1 cobbler]# mount /dev/cdrom /mnt ##挂载镜像光盘到mnt目录中 mount: /dev/sr0 is write-protected, mounting read-only [[email protected] cobbler]# cobbler import --path=/mnt/ --name=CentOS-7-x86_64 --arch=x86_64 ##导入iso镜像 task started: 2018-05-31_150936_import task started (id=Media import, time=Thu May 31 15:09:36 2018) Found a candidate signature: breed=redhat, version=rhel6 Found a candidate signature: breed=redhat, version=rhel7 Found a matching signature: breed=redhat, version=rhel7 Adding distros from path /var/www/cobbler/ks_mirror/CentOS-7-x86_64: creating new distro: CentOS-7-x86_64 trying symlink: /var/www/cobbler/ks_mirror/CentOS-7-x86_64 -> /var/www/cobbler/links/CentOS-7-x86_64 creating new profile: CentOS-7-x86_64 associating repos checking for rsync repo(s) checking for rhn repo(s) checking for yum repo(s) starting descent into /var/www/cobbler/ks_mirror/CentOS-7-x86_64 for CentOS-7-x86_64 processing repo at : /var/www/cobbler/ks_mirror/CentOS-7-x86_64 ##默认导入存放位置 need to process repo/comps: /var/www/cobbler/ks_mirror/CentOS-7-x86_64 looking for /var/www/cobbler/ks_mirror/CentOS-7-x86_64/repodata/*comps*.xml Keeping repodata as-is :/var/www/cobbler/ks_mirror/CentOS-7-x86_64/repodata *** TASK COMPLETE ***
cobbler安装界面，选择CentOS-7-x86_64即可完成安装：
完成安装后的CentOS 7：
Cobbler-Web，网络访问：
设置一个cobbler-web登录用户及密码：
[[email protected] cobbler]# htdigest -c /etc/cobbler/users.digest Cobbler cobbler ##设置用户名为cobbler Adding password for cobbler in realm Cobbler. New password: Re-type new password: [[email protected] cobbler]# systemctl restart cobblerd.service [[email protected] cobbler]# systemctl restart httpd
cobbler-web的登录界面：
以上是关于自动化运维——CentOS7下利用Cobbler批量部署CentOS的主要内容，如果未能解决你的问题，请参考以下文章