Cobbler无人值守安装系统

Posted tyk3201

tags:

篇首语:本文由小常识网(cha138.com)小编为大家整理,主要介绍了Cobbler无人值守安装系统相关的知识,希望对你有一定的参考价值。

  Cobbler 可以用来快速建立 Linux 网络安装环境,它已将 Linux 网络安装的技术门槛,从大专以上文化水平,成功降低到初中以下,连补鞋匠都能学会。

  网络安装服务器套件Cobbler(补鞋匠)从前,我们一直在装机民工这份很有前途的职业。自打若干年前Red Hat推出了 Kickstart,此后我们顿觉身价增倍。不再需要刻了光盘一台一台的安装Linux,只要搞定PXEDHCPTFTP,还有那满屏眼花缭乱不知所云的Kickstart脚本,我们就可以像哈利波特一样,轻点魔棒,瞬间安装上百台服务器。这一堆花里胡哨的东西可不是一般人能够整明白的,没有大专以上的学历,通不过英语四级,根本别想玩转。总而言之,这是一份多么有前途,多么有技术含量的工作啊。很不幸,Red Hat 最新(Cobbler项目最初在2008年左右发布)发布了网络安装服务器套件Cobbler(补鞋匠),它已将Linux网络安装的技术门槛,从大专以上文化水平,成功降低到初中以下水平,连补鞋匠都能学会。

1、Cobbler是一个Linux服务器安装的服务,可以通过网络启动(PXE)的方式来快速安装、重装物理服务器和虚拟机,同时还可以管理DHCPDNS等。
2、Cobbler可以使用命令行方式管理,也提供了基于Web的界面管理工具(cobbler-web),还提供了API接口,可以方便二次开发使用。
3、Cobbler是较早前的kickstart的升级版,优点是比较容易配置,还自带web界面比较易于管理。
4、Cobbler内置了一个轻量级配置管理系统,但它也支持和其它配置管理系统集成,如Puppet

 

cobbler框架

技术图片

 

Cobbler的配置结构基于一组注册的对象。每个对象表示一个与另一个实体相关联的实体。当一个对象指向另一个对象时,它就继承了被指向对象的数据,并可覆盖或添加更多特定信息。

  • 发行版(distros): 表示一个操作系统。它承载了内核和initrd的信息,以及内核参数等其他数据。
  • 配置文件(profiles):包含一个发行版、一个kickstart文件以及可能的存储库,还包括更多特定的内核参数等其他数据。
  • 系统(systems):表示要配给的机器。它包括一个配置文件或一个镜像、IPMAC地址、电源管理(地址、凭据、类型)以及更为专业的数据等信息。
  • 镜像(images):可以替换一个保函不屑于此类别的文件的发行版对象(例如,无法分为内核和initrd的对象)

工作原理

技术图片

Server端

  • 启动Cobbler服务
  • 进行Cobbler错误检查,执行cobbler check命令
  • 进行配置同步,执行cobbler sync命令
  • 复制相关启动文件到TFTP目录中
  • 启动DHCP服务,提供地址分配
  • DHCP服务分配IP地址
  • TFTP传输启动文件
  • Server端接收安装信息
  • Server端发送ISO镜像与Kickstart文件

Client端

  • 客户端以PXE模式启动
  • 客户端获取IP地址
  • 通过TFTP服务器获取启动文件
  • 进入Cobbler安装选择界面
  • 根据配置信息准备安装系统
  • 加载Kickstart文件
  • 传输系统安装的其它文件
  • 进行安装系统

------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

下面正式开始cobbler的部署:

准备环境:

系统  CentOS Linux release 7.3.1611 (Core)     外网IIP:10.0.0.45    外网IP:172.16.1.45

注意:虚拟机网卡采用NAT模式或者仅主机模式,不要使用桥接模式,因为后面会搭建DHCP服务器,在同一个局域网多个DHCP服务会有冲突。VMware的NAT模式的DHCP服务也会关闭,避免打扰。

 

 

 

安装cobbler和相关组件

[root@ localhost ~]# yum -y install cobbler cobbler-web tftp-server pykickstart httpd dhcp xinetd debmirror

cobbler   #cobbler程序包
cobbler—web   #cobbler的web服务包
pykickstart   #cobbler检查kickstart语法错误
httpd   #Apache web服务
dhcp    #DHCP服务
tftp    #tftp服务
xinetd    #诸多服务的超级守护进程


#启动cobbler及httpd并假如开机启动
[root@ localhost ~]# systemctl start httpd cobblerd
[root@ localhost ~]# systemctl enable httpd cobblerd
Created symlink from /etc/systemd/system/multi-user.target.wants/httpd.service to /usr/lib/systemd/system/httpd.service.
Created symlink from /etc/systemd/system/multi-user.target.wants/cobblerd.service to /usr/lib/systemd/system/cobblerd.service.

 

配置cobbler

#检查cobbler的配置,如果以下操作不出结果,重启cobbler。
[root@ localhost ~]# cobbler check #类似一个使用手册,需要解决以下9个问题才可以使用。 The following are potential configuration items that you may want to fix: 1 : The ‘server‘ field in /etc/cobbler/settings must be set to something other than localhost, or kickstarting features will not work. This should be a resolvable hostname or IP for the boot server as reachable by all machines that will use it. 2 : For PXE to be functional, the ‘next_server‘ field in /etc/cobbler/settings must be set to something other than 127.0.0.1, and should match the IP of the boot server on the PXE network. 3 : change ‘disable‘ to ‘no‘ in /etc/xinetd.d/tftp 4 : Some network boot-loaders are missing from /var/lib/cobbler/loaders, you may run ‘cobbler get-loaders‘ to download them, or, if you only want to handle x86/x86_64 netbooting, you may ensure that you have installed a *recent* version of the syslinux package installed and can ignore this message entirely. Files in this directory, should you want to support all architectures, should include pxelinux.0, menu.c32, elilo.efi, and yaboot. The ‘cobbler get-loaders‘ command is the easiest way to resolve these requirements. 5 : enable and start rsyncd.service with systemctl 6 : comment out ‘dists‘ on /etc/debmirror.conf for proper debian support 7 : comment out ‘arches‘ on /etc/debmirror.conf for proper debian support 8 : The default password used by the sample templates for newly installed machines (default_password_crypted in /etc/cobbler/settings) is still set to ‘cobbler‘ and should be changed, try: "openssl passwd -1 -salt ‘random-phrase-here‘ ‘your-password-here‘" to generate new one 9 : fencing tools were not found, and are required to use the (optional) power management features. install cman or fence-agents to use them Restart cobblerd and then run ‘cobbler sync‘ to apply changes.

 

现在开始逐步的去解决,先进行设置为可以动态配置,也可以直接更改配置文件。

[root@ localhost ~]# sed -ri ‘/allow_dynamic_settings:/callow_dynamic_settings: 1‘ /etc/cobbler/settings
[root@ localhost ~]# grep allow_dynamic_setting /etc/cobbler/settings 
allow_dynamic_settings: 1
[root@ localhost ~]# systemctl restart cobblerd

 

#1.配置server地址
[root@ localhost ~]# cobbler setting edit --name=server --value=10.0.0.45
#2.配置next_server地址
[root@ localhost ~]# cobbler setting edit --name=next_server --value=10.0.0.45
#3.配置xinetd管理tftp
[root@ localhost ~]# sed -ri ‘/disable/cdisable = no‘ /etc/xinetd.d/tftp 
[root@ localhost ~]# systemctl enable xinetd
[root@ localhost ~]# systemctl restart xinetd
#4.boot-loaders
[root@ localhost ~]# cobbler get-loaders
task started: 2020-03-03_222902_get_loaders
task started (id=Download Bootloader Content, time=Tue Mar  3 22:29:02 2020)
downloading https://cobbler.github.io/loaders/README to /var/lib/cobbler/loaders/README


downloading https://cobbler.github.io/loaders/COPYING.elilo to /var/lib/cobbler/loaders/COPYING.elilo
downloading https://cobbler.github.io/loaders/COPYING.yaboot to /var/lib/cobbler/loaders/COPYING.yaboot
downloading https://cobbler.github.io/loaders/COPYING.syslinux to /var/lib/cobbler/loaders/COPYING.syslinux
downloading https://cobbler.github.io/loaders/elilo-3.8-ia64.efi to /var/lib/cobbler/loaders/elilo-ia64.efi
downloading https://cobbler.github.io/loaders/yaboot-1.3.17 to /var/lib/cobbler/loaders/yaboot
downloading https://cobbler.github.io/loaders/pxelinux.0-3.86 to /var/lib/cobbler/loaders/pxelinux.0
downloading https://cobbler.github.io/loaders/menu.c32-3.86 to /var/lib/cobbler/loaders/menu.c32
downloading https://cobbler.github.io/loaders/grub-0.97-x86.efi to /var/lib/cobbler/loaders/grub-x86.efi
downloading https://cobbler.github.io/loaders/grub-0.97-x86_64.efi to /var/lib/cobbler/loaders/grub-x86_64.efi
*** TASK COMPLETE ***
#5.启动rsync
[root@ localhost ~]# systemctl start rsyncd
[root@ localhost ~]# systemctl enable rsyncd
Created symlink from /etc/systemd/system/multi-user.target.wants/rsyncd.service to /usr/lib/systemd/system/rsyncd.service.
#6和7 .debian support
[root@ localhost ~]# sed -i ‘s#@dists="sid";##@dists="sid";#gp‘ /etc/debmirror.conf
[root@ localhost ~]# sed -i ‘s#@arches="i386";##@arches="i386";#g‘ /etc/debmirror.conf
#8.default_password_crypted
#注意: 这里设置的密码是cobbler安装完系统后,默认root用户初始化登陆密码,用openssl生成一串密码后 加入到cobbler的配置文件(/etc/cobbler/settings)里,替换default_password_cryptd字段
[root@ localhost ~]# openssl passwd -1 -salt `openssl rand -hex 4` ‘123456‘
$1$a90c5519$BEBfUgtXGEqGE2bLbCG/t.
[root@ localhost ~]# cobbler setting edit --name=default_password_crypted --value=‘$1$a90c5519$BEBfUgtXGEqGE2bLbCG/t‘
#9.安装fencing tools
[root@ localhost ~]# yum -y install fence-agents

#解决完后再次检查
[root@ localhost ~]# systemctl restart cobblerd
[root@ localhost ~]# cobbler sync
[root@ localhost ~]# cobbler check
No configuration problems found.  All systems go.

 

配置DHCP

[root@ localhost ~]# cobbler setting edit --name=manage_dhcp --value=1
[root@ localhost ~]# vim /etc/cobbler/dhcp.template 
subnet 10.0.0.0 netmask 255.255.255.0 {  #这里改为分配的网段和掩码
     option routers             10.0.0.254;  #如果有网关,这里改成网关地址
     option domain-name-servers 223.5.5.5;  #如果有DNS,这里改成DNS地址
     option subnet-mask         255.255.255.0;  #改为分配的ip的掩码
     range dynamic-bootp        10.0.0.100 10.0.0.200;   #改为分配的ip的范围

 

 

同步cobbler配置

[root@ localhost ~]# cobbler sync
task started: 2020-03-03_224703_sync
task started (id=Sync, time=Tue Mar  3 22:47:03 2020)
running pre-sync triggers
cleaning trees
removing: /var/lib/tftpboot/pxelinux.cfg/default
removing: /var/lib/tftpboot/grub/images
removing: /var/lib/tftpboot/grub/grub-x86.efi
removing: /var/lib/tftpboot/grub/grub-x86_64.efi
removing: /var/lib/tftpboot/grub/efidefault
removing: /var/lib/tftpboot/s390x/profile_list
copying bootloaders
trying hardlink /var/lib/cobbler/loaders/grub-x86.efi -> /var/lib/tftpboot/grub/grub-x86.efi
trying hardlink /var/lib/cobbler/loaders/grub-x86_64.efi -> /var/lib/tftpboot/grub/grub-x86_64.efi
copying distros to tftpboot
copying images
generating PXE configuration files
generating PXE menu structure
rendering DHCP files
generating /etc/dhcp/dhcpd.conf
rendering TFTPD files
generating /etc/xinetd.d/tftp
cleaning link caches
running post-sync triggers
running python triggers from /var/lib/cobbler/triggers/sync/post/*
running python trigger cobbler.modules.sync_post_restart_services
running: dhcpd -t -q
received on stdout: 
received on stderr: 
running: service dhcpd restart
received on stdout: 
received on stderr: Redirecting to /bin/systemctl restart  dhcpd.service

running shell triggers from /var/lib/cobbler/triggers/sync/post/*
running python triggers from /var/lib/cobbler/triggers/change/*
running python trigger cobbler.modules.manage_genders
running python trigger cobbler.modules.scm_track
running shell triggers from /var/lib/cobbler/triggers/change/*
*** TASK COMPLETE ***

 

查看一下DHCP,查看cobbler是否可以管理DHCP

[root@ localhost ~]# 
[root@ localhost ~]# cat /etc/dhcp/dhcpd.conf 
# ******************************************************************
# Cobbler managed dhcpd.conf file
# generated from cobbler dhcp.conf template (Tue Mar  3 14:47:04 2020)
# Do NOT make changes to /etc/dhcpd.conf. Instead, make your changes
# in /etc/cobbler/dhcp.template, as /etc/dhcpd.conf will be
# overwritten.
# ******************************************************************

ddns-update-style interim;

allow booting;
allow bootp;

ignore client-updates;
set vendorclass = option vendor-class-identifier;

option pxe-system-type code 93 = unsigned integer 16;

subnet 10.0.0.0 netmask 255.255.255.0 {
     option routers             10.0.0.254;
     option domain-name-servers 223.5.5.5;
     option subnet-mask         255.255.255.0;
     range dynamic-bootp        10.0.0.100 10.0.0.200;
     default-lease-time         21600;
     max-lease-time             43200;
     next-server                10.0.0.45;
     class "pxeclients" {
          match if substring (option vendor-class-identifier, 0, 9) = "PXEClient";
          if option pxe-system-type = 00:02 {
                  filename "ia64/elilo.efi";
          } else if option pxe-system-type = 00:06 {
                  filename "grub/grub-x86.efi";
          } else if option pxe-system-type = 00:07 {
                  filename "grub/grub-x86_64.efi";
          } else if option pxe-system-type = 00:09 {
                  filename "grub/grub-x86_64.efi";
          } else {
                  filename "pxelinux.0";
          }
     }

}

# group for Cobbler DHCP tag: default
group {
}

 

cobbler命令帮助

技术图片

 

 这时候创建一个新的虚拟机准备测试,开启以后会发现没有镜像选择,只能从本地启动

 

技术图片

技术图片

 

 cobbler安装centos6.10

因为我这台是用centos7做的,所以并没6.10的镜像,所以需要自己上传一个

 

 

创建挂载点并挂载

[root@ localhost ~]# ll
total 3898372
-rw-------. 1 root root       1277 2019-09-17 22:18 anaconda-ks.cfg
-rw-r--r--  1 root root 3991928832 2020-03-03 23:04 CentOS-6.10-x86_64-bin-DVD1.iso
[root@ localhost ~]# mkdir /centos6.10
[root@ localhost ~]# mount -o loop CentOS-6.10-x86_64-bin-DVD1.iso /centos6.10

 

查看挂在后的目录

[root@ localhost ~]# ls /centos6.10/
CentOS_BuildTag  images                    repodata                       RPM-GPG-KEY-CentOS-Testing-6
EFI              isolinux                  RPM-GPG-KEY-CentOS-6           TRANS.TBL
EULA             Packages                  RPM-GPG-KEY-CentOS-Debug-6
GPL              RELEASE-NOTES-en-US.html  RPM-GPG-KEY-CentOS-Security-6

 

 

导入镜像

[root@ localhost ~]# cobbler import --path=/centos6.10 --name=centos6.10 --arch=x86_64

# --path 镜像路径
# --name 为安装源定义一个名字
# --arch 指定安装源是32位、64位、ia64,目前支持的选项有:x86|x86_64|ia64
# 安装源的唯一标识就是根据name参数来定义,本例导入成功后,安装源的唯一标示就是centos6.10,如果重复,系统会报错

 

查看导入后镜像信息

[root@ localhost ~]# cobbler distro report --name=centos6.10-x86_64
Name                           : centos6.10-x86_64
Architecture                   : x86_64
TFTP Boot Files                : {}
Breed                          : redhat
Comment                        : 
Fetchable Files                : {}
Initrd                         : /var/www/cobbler/ks_mirror/centos6.10-x86_64/images/pxeboot/initrd.img
Kernel                         : /var/www/cobbler/ks_mirror/centos6.10-x86_64/images/pxeboot/vmlinuz
Kernel Options                 : {}
Kernel Options (Post Install)  : {}
Kickstart Metadata             : {‘tree‘: ‘http://@@http_server@@/cblr/links/centos6.10-x86_64‘}
Management Classes             : []
OS Version                     : rhel6
Owners                         : [‘admin‘]
Red Hat Management Key         : <<inherit>>
Red Hat Management Server      : <<inherit>>
Template Files                 : {}

 

 查看profile信息

[root@ localhost ~]# cobbler profile report --name=centos6.10-x86_64
Name                           : centos6.10-x86_64
TFTP Boot Files                : {}
Comment                        : 
DHCP Tag                       : default
Distribution                   : centos6.10-x86_64
Enable gPXE?                   : 0
Enable PXE Menu?               : 1
Fetchable Files                : {}
Kernel Options                 : {}
Kernel Options (Post Install)  : {}
Kickstart                      : /var/lib/cobbler/kickstarts/sample_end.ks
Kickstart Metadata             : {}
Management Classes             : []
Management Parameters          : <<inherit>>
Name Servers                   : []
Name Servers Search Path       : []
Owners                         : [‘admin‘]
Parent Profile                 : 
Internal proxy                 : 
Red Hat Management Key         : <<inherit>>
Red Hat Management Server      : <<inherit>>
Repos                          : []
Server Override                : <<inherit>>
Template Files                 : {}
Virt Auto Boot                 : 1
Virt Bridge                    : xenbr0
Virt CPUs                      : 1
Virt Disk Driver Type          : raw
Virt File Size(GB)             : 5
Virt Path                      : 
Virt RAM (MB)                  : 512
Virt Type                      : kvm

 

 

 编辑centos6.10镜像的kickstart文件

[root@ localhost ~]# cd /var/lib/cobbler/kickstarts/
[root@ localhost kickstarts]# cp sample_end.ks centos6.10.ks
[root@ localhost kickstarts]# vim centos6.10.ks 
# This kickstart file should only be used with EL > 5 and/or Fedora > 7.
# For older versions please use the sample.ks kickstart file.
# Install OS instead of upgrade
install
# Use text mode install
text
# System keyboard
keyboard us
# System language
lang en_US
# System timezone
timezone  Asia/ShangHai
#Root password
rootpw --iscrypted $default_password_crypted
# System authorization information
auth  --useshadow  --enablemd5
# Firewall configuration
firewall --disabled
# SELinux configuration
selinux --disabled
# Use network installation
url --url=$tree

# Clear the Master Boot Record
zerombr
# System bootloader configuration
bootloader --location=mbr
# Partition clearing information
clearpart --all --initlabel
part /boot --fstype=ext4 --size=200
part swap --fstype=swap --size=2048
part / --fstype=ext4 --grow --size=200 --asprimary

# If any cobbler repo definitions were referenced in the kickstart profile, include them here.
$yum_repo_stanza
# Network information
$SNIPPET(‘network_config‘)
# Do not configure the X Window System
skipx
# Run the Setup Agent on first boot
firstboot --disable
# Reboot after installation
reboot


%pre
$SNIPPET(‘log_ks_pre‘)
$SNIPPET(‘kickstart_start‘)
$SNIPPET(‘pre_install_network_config‘)
# Enable installation monitoring
$SNIPPET(‘pre_anamon‘)
%end

%packages
$SNIPPET(‘func_install_if_enabled‘)
@core
@base
tree
nmap
wget
lftp
lrzsz
telnet
%end

%post --nochroot
$SNIPPET(‘log_ks_post_nochroot‘)
%end

%post
$SNIPPET(‘log_ks_post‘)
# Start yum configuration
$yum_config_stanza
# End yum configuration
$SNIPPET(‘post_install_kernel_options‘)
$SNIPPET(‘post_install_network_config‘)
$SNIPPET(‘func_register_if_enabled‘)
$SNIPPET(‘download_config_files‘)
$SNIPPET(‘koan_environment‘)
$SNIPPET(‘redhat_register‘)
$SNIPPET(‘cobbler_register‘)
# Enable post-install boot notification
$SNIPPET(‘post_anamon‘)
# Start final steps
$SNIPPET(‘kickstart_done‘)
# End final steps

sed -ri "/^#UseDNS/cUseDNS no" /etc/ssh/sshd_config
sed -ri "/^GSSAPIAuthentication/cGSSAPIAuthentication no" /etc/ssh/sshd_config
%end

 

 

 

 同步cobbler配置

注意:系统镜像文件centos6.10.ks,每修改一次都要进行同步

[root@ localhost kickstarts]# cobbler sync

开启新虚拟机进行测试,点击选中,系统自动安装。

 技术图片

 

 技术图片

 

 

 比如在安一个centos7.3   因为我本机就是7.3的 所以直接可以参上操作,直接挂载/dev/cdrom就可以

技术图片

 

 然后新建一台虚机,选择centos7.3就可以了,如果出现/sbin/dmsquash-live-root:line 286:printf:write error:No space lefe on device 是因为内存不足2G导致的。至此cobbler命令行的配置操作结束。

 

以上是关于Cobbler无人值守安装系统的主要内容,如果未能解决你的问题,请参考以下文章

kvm cobbler无人值守批量安装操作系统

Cobbler无人值守安装

Cobbler无人值守安装系统安装与使用

Cobbler无人值守安装系统史上最细实践文档

Cobbler实现无人值守安装系统

cobbler无人值守批量安装Linux系统