自动装机系统Cobbler

Posted

tags:

篇首语：本文由小常识网(cha138.com)小编为大家整理，主要介绍了自动装机系统Cobbler相关的知识，希望对你有一定的参考价值。

操作系统自动化安装部署

PXE+Kickstart工作原理

技术分享图片
技术分享图片

PXE+Kickstart工作流程

  1. 网卡上的pxe芯片有512字节，存放了DHCP和TFTP的客户端
  2. 启动计算机选择网卡启动，pxe上的DHCP客户端会发出广播包向DHCP服务器申请IP地址
  3. DHCP服务器分配给它IP地址的同时通过以下字段，告诉pxe，TFTP的地址和它要下载的文件（1.next-server x.x.x.x; 2.filename "pxelinux.0";）
  4. pxelinux.0告诉pxe要下载的配置文件是pxelinux.cfg目录下的default
  5. pxe下载并依据配置文件的内容下载启动必须的文件，并通过ks.cfg开始系统安装

Cobbler部署安装

环境：CentOS7+Cobbler2.8.2
[[email protected] kickstarts]# cat /etc/redhat-release
CentOS Linux release 7.4.1708 (Core)
[[email protected] kickstarts]# uname -m
x86_64
[[email protected] kickstarts]# uname -r
3.10.0-693.el7.x86_64
[[email protected] ~]# cobbler version
Cobbler 2.8.2

官网：http://cobbler.github.io/

部署过程

1. 关闭selinux和防火墙

关闭SELINUX：
setenforce 0
sed -i ‘s#SELINUX=enforcing#SELINUX=disabled#g‘ /etc/selinux/config
关闭防火墙：
systemctl stop firewalld

2.安装epol源

rpm -ivh https://mirrors.aliyun.com/epel/7/x86_64/Packages/e/epel-release-7-11.noarch.rpm

3.安装cobbler

yum install -y httpd dhcp tftp cobbler cobbler-web pykickstart  xinetd

4.启动httpd和cobbler服务

启动httpd服务：
systemctl start httpd
启动cobblerd服务：
systemctl start cobblerd

5.cobber check，完成要求

[[email protected] ~]# cobbler check
The following are potential configuration items that you may want to fix:
1 : The ‘server‘ field in /etc/cobbler/settings must be set to something other than localhost, or kickstarting features will not work.  This should be a resolvable hostname or IP for the boot server as reachable by all machines that will use it.
修改/etc/cobbler/settings中的server字段IP为本机网卡IP
2 : For PXE to be functional, the ‘next_server‘ field in /etc/cobbler/settings must be set to something other than 127.0.0.1, and should match the IP of the boot server on the PXE network.
修改/etc/cobbler/settings中next_server字段IP为本机IP
3 : SELinux is enabled. Please review the following wiki page for details on ensuring cobbler works correctly in your SELinux environment:
    https://github.com/cobbler/cobbler/wiki/Selinux
关闭SELinux
4 : change ‘disable‘ to ‘no‘ in /etc/xinetd.d/tftp
修改/etc/xinetd.d/tftp中disable为no
5 : Some network boot-loaders are missing from /var/lib/cobbler/loaders, you may run ‘cobbler get-loaders‘ to download them, or, if you only want to handle x86/x86_64 netbooting, you may ensure that you have installed a *recent* version of the syslinux package installed and can ignore this message entirely.  Files in this directory, should you want to support all architectures, should include pxelinux.0, menu.c32, elilo.efi, and yaboot. The ‘cobbler get-loaders‘ command is the easiest way to resolve these requirements.
运行cobbler get-loaders加载引导程序
6 : enable and start rsyncd.service with systemctl
启动rsyncd服务：systemctl start rsyncd
7 : debmirror package is not installed, it will be required to manage debian deployments and repositories
管理debian的部署和仓库，此处不管
8 : The default password used by the sample templates for newly installed machines (default_password_crypted in /etc/cobbler/settings) is still set to ‘cobbler‘ and should be changed, try: "openssl passwd -1 -salt ‘random-phrase-here‘ ‘your-password-here‘" to generate new one
运行openssl passwd -1 -salt ‘盐‘ ‘密码‘ 加密密钥字符串并替换掉/etc/cobbler/settings中default_password_crypted字段的值
9 : fencing tools were not found, and are required to use the (optional) power management features. install cman or fence-agents to use them
电源管理，此处不管
Restart cobblerd and then run ‘cobbler sync‘ to apply changes.

6.完成要求后重启cobbler服务并再此cobbler check检查

systemctl restart cobblerd
cobbler check

7.编辑修改/etc/cobbler/settings第242行为manage_dhcp: 1 编辑/etc/cobbler/dhcp.template,修改DHCP发布信息，即只修改

subnet 10.0.0.0 netmask 255.255.255.0 {
     option routers             10.0.0.2;
     option domain-name-servers 10.0.0.2;
     option subnet-mask         255.255.255.0;
     range dynamic-bootp        10.0.0.190 10.0.0.210;

8.重启cobblerd服务并执行cobbler sync

[[email protected] ~]# systemctl restart cobblerd
[[email protected] ~]# cobbler sync
task started: 2018-03-06_171312_sync
task started (id=Sync, time=Tue Mar  6 17:13:12 2018)
running pre-sync triggers
cleaning trees
removing: /var/lib/tftpboot/grub/images
copying bootloaders
copying: /var/lib/cobbler/loaders/pxelinux.0 -> /var/lib/tftpboot/pxelinux.0
copying: /var/lib/cobbler/loaders/menu.c32 -> /var/lib/tftpboot/menu.c32
copying: /var/lib/cobbler/loaders/yaboot -> /var/lib/tftpboot/yaboot
copying: /usr/share/syslinux/memdisk -> /var/lib/tftpboot/memdisk
copying: /var/lib/cobbler/loaders/grub-x86.efi -> /var/lib/tftpboot/grub/grub-x86.efi
copying: /var/lib/cobbler/loaders/grub-x86_64.efi -> /var/lib/tftpboot/grub/grub-x86_64.efi
copying distros to tftpboot
copying images
generating PXE configuration files
generating PXE menu structure
rendering DHCP files
generating /etc/dhcp/dhcpd.conf
rendering TFTPD files
generating /etc/xinetd.d/tftp
cleaning link caches
running post-sync triggers
running python triggers from /var/lib/cobbler/triggers/sync/post/*
running python trigger cobbler.modules.sync_post_restart_services
running: dhcpd -t -q
received on stdout: 
received on stderr: 
running: service dhcpd restart
received on stdout: 
received on stderr: Redirecting to /bin/systemctl restart dhcpd.service

running shell triggers from /var/lib/cobbler/triggers/sync/post/*
running python triggers from /var/lib/cobbler/triggers/change/*
running python trigger cobbler.modules.scm_track
running shell triggers from /var/lib/cobbler/triggers/change/*
*** TASK COMPLETE ***
[[email protected] ~]#

9.挂载系统镜像并将系统镜像导入cobbler

技术分享图片

查看光盘信息：
[[email protected] ~]# ll /dev/cdrom 
lrwxrwxrwx. 1 root root 3 Mar  6 16:08 /dev/cdrom -> sr0
挂载并导入cobbler:
[[email protected] ~]# mount /dev/cdrom /mnt/
mount: /dev/sr0 is write-protected, mounting read-only
[[email protected] ~]# 
[[email protected] ~]# cobbler import --path=/mnt/ --name CentOS-7-x86_64 --arch=x86_64

10.自定义kickstarts文件 /var/lib/cobbler/kickstarts/为系统默认存放kickstarts文件的地方

cd /var/lib/cobbler/kickstarts/
rz
#上传事先准备好的CentOS-7-x86_64.cfg文件

自定义kickstarts:
cobbler profile edit --name=CentOS-7-x86_64 --kickstart=/var/lib/cobbler/kickstarts/CentOS-7-x86_64.cfg

CentOS 7默认网卡不是eth开头，修改内核参数使其成为eth开头
cobbler profile edit --name=CentOS-7-x86_64 --kopts=‘net.ifnames=0 biosdevname‘

11.重启httpd，xinetd,cobblerd服务

systemctl restart httpd
systemctl restart xinetd
systemctl restart cobblerd
cobbler sync

12.查看DHCP日志，查看自动安装情况

[[email protected] kickstarts]# tail -f /var/log/messages 
Mar  6 17:51:57 localhost dhcpd: Copyright 2004-2013 Internet Systems Consortium.
Mar  6 17:51:57 localhost dhcpd: All rights reserved.
Mar  6 17:51:57 localhost dhcpd: For info, please visit https://www.isc.org/software/dhcp/
Mar  6 17:51:57 localhost dhcpd: Not searching LDAP since ldap-server, ldap-port and ldap-base-dn were not specified in the config file
Mar  6 17:51:57 localhost dhcpd: Wrote 0 class decls to leases file.
Mar  6 17:51:57 localhost dhcpd: Wrote 0 leases to leases file.
Mar  6 17:51:57 localhost dhcpd: Listening on LPF/ens33/00:0c:29:54:bf:8c/10.0.0.0/24
Mar  6 17:51:57 localhost dhcpd: Sending on   LPF/ens33/00:0c:29:54:bf:8c/10.0.0.0/24
Mar  6 17:51:57 localhost dhcpd: Sending on   Socket/fallback/fallback-net
Mar  6 17:51:57 localhost systemd: Started DHCPv4 Server Daemon.

13.开启一个新机器，选择网卡启动（默认就是网卡启动）

技术分享图片
进入cobbler界面成功！！！ 此时查看cobbler服务器DHCP日志信息：

[[email protected] kickstarts]# tail -f /var/log/messages 
Mar  6 17:51:57 localhost dhcpd: Copyright 2004-2013 Internet Systems Consortium.
Mar  6 17:51:57 localhost dhcpd: All rights reserved.
Mar  6 17:51:57 localhost dhcpd: For info, please visit https://www.isc.org/software/dhcp/
Mar  6 17:51:57 localhost dhcpd: Not searching LDAP since ldap-server, ldap-port and ldap-base-dn were not specified in the config file
Mar  6 17:51:57 localhost dhcpd: Wrote 0 class decls to leases file.
Mar  6 17:51:57 localhost dhcpd: Wrote 0 leases to leases file.
Mar  6 17:51:57 localhost dhcpd: Listening on LPF/ens33/00:0c:29:54:bf:8c/10.0.0.0/24
Mar  6 17:51:57 localhost dhcpd: Sending on   LPF/ens33/00:0c:29:54:bf:8c/10.0.0.0/24
Mar  6 17:51:57 localhost dhcpd: Sending on   Socket/fallback/fallback-net
Mar  6 17:51:57 localhost systemd: Started DHCPv4 Server Daemon.
Mar  6 17:55:29 localhost dhcpd: DHCPDISCOVER from 00:0c:29:50:15:83 via ens33
Mar  6 17:55:30 localhost dhcpd: DHCPOFFER on 10.0.0.190 to 00:0c:29:50:15:83 via ens33
Mar  6 17:55:32 localhost dhcpd: DHCPREQUEST for 10.0.0.190 (10.0.0.181) from 00:0c:29:50:15:83 via ens33
Mar  6 17:55:32 localhost dhcpd: DHCPACK on 10.0.0.190 to 00:0c:29:50:15:83 via ens33
Mar  6 17:55:32 localhost xinetd[17293]: START: tftp pid=17333 from=10.0.0.190
Mar  6 17:55:32 localhost in.tftpd[17334]: RRQ from 10.0.0.190 filename pxelinux.0
Mar  6 17:55:32 localhost in.tftpd[17334]: tftp: client does not accept options
Mar  6 17:55:32 localhost in.tftpd[17335]: RRQ from 10.0.0.190 filename pxelinux.0
Mar  6 17:55:32 localhost in.tftpd[17335]: Client 10.0.0.190 finished pxelinux.0
Mar  6 17:55:32 localhost in.tftpd[17336]: RRQ from 10.0.0.190 filename pxelinux.cfg/564d2383-4d62-184e-37d8-2d30ad501583
Mar  6 17:55:32 localhost in.tftpd[17336]: Client 10.0.0.190 File not found pxelinux.cfg/564d2383-4d62-184e-37d8-2d30ad501583
Mar  6 17:55:32 localhost in.tftpd[17337]: RRQ from 10.0.0.190 filename pxelinux.cfg/01-00-0c-29-50-15-83
Mar  6 17:55:32 localhost in.tftpd[17337]: Client 10.0.0.190 File not found pxelinux.cfg/01-00-0c-29-50-15-83
Mar  6 17:55:32 localhost in.tftpd[17338]: RRQ from 10.0.0.190 filename pxelinux.cfg/0A0000BE
Mar  6 17:55:32 localhost in.tftpd[17338]: Client 10.0.0.190 File not found pxelinux.cfg/0A0000BE
Mar  6 17:55:32 localhost in.tftpd[17339]: RRQ from 10.0.0.190 filename pxelinux.cfg/0A0000B
Mar  6 17:55:32 localhost in.tftpd[17339]: Client 10.0.0.190 File not found pxelinux.cfg/0A0000B
Mar  6 17:55:32 localhost in.tftpd[17340]: RRQ from 10.0.0.190 filename pxelinux.cfg/0A0000
Mar  6 17:55:32 localhost in.tftpd[17340]: Client 10.0.0.190 File not found pxelinux.cfg/0A0000
Mar  6 17:55:32 localhost in.tftpd[17341]: RRQ from 10.0.0.190 filename pxelinux.cfg/0A000
Mar  6 17:55:32 localhost in.tftpd[17341]: Client 10.0.0.190 File not found pxelinux.cfg/0A000
Mar  6 17:55:32 localhost in.tftpd[17342]: RRQ from 10.0.0.190 filename pxelinux.cfg/0A00
Mar  6 17:55:32 localhost in.tftpd[17342]: Client 10.0.0.190 File not found pxelinux.cfg/0A00
Mar  6 17:55:32 localhost in.tftpd[17343]: RRQ from 10.0.0.190 filename pxelinux.cfg/0A0
Mar  6 17:55:32 localhost in.tftpd[17343]: Client 10.0.0.190 File not found pxelinux.cfg/0A0
Mar  6 17:55:32 localhost in.tftpd[17344]: RRQ from 10.0.0.190 filename pxelinux.cfg/0A
Mar  6 17:55:32 localhost in.tftpd[17344]: Client 10.0.0.190 File not found pxelinux.cfg/0A
Mar  6 17:55:32 localhost in.tftpd[17345]: RRQ from 10.0.0.190 filename pxelinux.cfg/0
Mar  6 17:55:32 localhost in.tftpd[17345]: Client 10.0.0.190 File not found pxelinux.cfg/0
Mar  6 17:55:32 localhost in.tftpd[17346]: RRQ from 10.0.0.190 filename pxelinux.cfg/default
Mar  6 17:55:32 localhost in.tftpd[17346]: Client 10.0.0.190 finished pxelinux.cfg/default
Mar  6 17:55:32 localhost in.tftpd[17347]: RRQ from 10.0.0.190 filename menu
Mar  6 17:55:32 localhost in.tftpd[17347]: Client 10.0.0.190 File not found menu
Mar  6 17:55:32 localhost in.tftpd[17348]: RRQ from 10.0.0.190 filename menu.cbt
Mar  6 17:55:32 localhost in.tftpd[17348]: Client 10.0.0.190 File not found menu.cbt
Mar  6 17:55:32 localhost in.tftpd[17349]: RRQ from 10.0.0.190 filename menu.0
Mar  6 17:55:32 localhost in.tftpd[17349]: Client 10.0.0.190 File not found menu.0
Mar  6 17:55:32 localhost in.tftpd[17350]: RRQ from 10.0.0.190 filename menu.com
Mar  6 17:55:32 localhost in.tftpd[17350]: Client 10.0.0.190 File not found menu.com
Mar  6 17:55:32 localhost in.tftpd[17351]: RRQ from 10.0.0.190 filename menu.c32
Mar  6 17:55:32 localhost in.tftpd[17351]: Client 10.0.0.190 finished menu.c32
Mar  6 17:55:32 localhost in.tftpd[17352]: RRQ from 10.0.0.190 filename pxelinux.cfg/default
Mar  6 17:55:32 localhost in.tftpd[17352]: Client 10.0.0.190 finished pxelinux.cfg/default

CentOS-7-x86_64.cfg文件内容

[[email protected] kickstarts]# cat CentOS-7-x86_64.cfg 
#cobbler for Kickstart Configurator for CentOS 7.4 by ChenTaicheng
install
url --url=$tree  
text
lang en_US.UTF-8
keyboard us
zerombr
bootloader --location=mbr 
# Network information
$SNIPPET(‘network_config‘)
timezone --utc Asia/Shanghai
authconfig --enableshadow --passalgo=sha512
rootpw  --iscrypted $default_password_crypted
clearpart --all --initlabel
part /boot --fstype xfs --size 200  
part swap --size 200
part / --fstype xfs --size 9500
firstboot --disable
selinux --disabled
firewall --disabled
logging --level=info
reboot
%pre
$SNIPPET(‘log_ks_pre‘)
$SNIPPET(‘kickstart_start‘)
$SNIPPET(‘pre_install_network_config‘)
# Enable installation monitoring
$SNIPPET(‘pre_anamon‘)
%end
%packages
@base
@compat-libraries
@debugging
@development
tree
nmap
sysstat
lrzsz
dos2unix
telnet
iptraf
ncurses-devel
openssl-devel
zlib-devel
OpenIPMI-tools
screen
%end
%post
systemctl disable postfix.service
%end
[[email protected] kickstarts]#

CentOS-6.6-x86_64.cfg文件内容

#platform=x86, AMD64, or Intel EM64T
# System authorization information
auth  --useshadow  --enablemd5
# System bootloader configuration
bootloader --location=mbr
# Partition clearing information
clearpart --all --initlabel
#Partition information
part /boot --fstype ext4 --size 1024 --ondisk sda
part swap --size=1500
part / --fstype ext4 --size 1 --grow --ondisk sda

# Use text mode install
text
# Firewall configuration
firewall --disable
# Run the Setup Agent on first boot
firstboot --disable
# System keyboard
keyboard us
# System language
lang en_US
# Use network installation
url --url=$tree
# If any cobbler repo definitions were referenced in the kickstart profile, include them here.
$yum_repo_stanza
# Network information
$SNIPPET(‘network_config‘)
#network --bootproto=dhcp   --device=em1
# Reboot after installation
reboot

#Root password
rootpw --iscrypted $default_password_crypted
# SELinux configuration
selinux --disabled
# Do not configure the X Window System
skipx
# System timezone
timezone   Asia/Shanghai
# Install OS instead of upgrade
install
# Clear the Master Boot Record
zerombr

%packages
@base
@compat-libraries
@debugging
@development
tree
nmap
sysstat
lrzsz
dos2unix
telnet

%pre
$SNIPPET(‘log_ks_pre‘)
$SNIPPET(‘kickstart_start‘)
$SNIPPET(‘pre_install_network_config‘)
# Enable installation monitoring
$SNIPPET(‘pre_anamon‘)

%post

%end

定制装机开始显示界面

[[email protected] ~]# cd /etc/cobbler/pxe
[[email protected] pxe]# cat pxedefault.template 
DEFAULT menu
PROMPT 0
MENU TITLE Cobbler | http://cobbler.github.io
TIMEOUT 200
TOTALTIMEOUT 6000
ONTIMEOUT $pxe_timeout_profile

LABEL local
        MENU LABEL (local)
        MENU DEFAULT
        LOCALBOOT -1

$pxe_menu_items

MENU end

扩展

客户机自动重新安装

客户端执行：
yum install -y koan
koan --server=10.0.0.181 --list=profiles
koan --replace-self --server=10.0.0.181 --profile=CentOS-7-x86_64

搭建yum源

服务端配置
1.添加repo
cobbler repo add --name=openstack-queens --mirror=https://mirrors.aliyun.com/centos/7.4.1708/cloud/x86_64/openstack-queens/ --arch=x86_64 --breed=yum
2.同步repo
cobbler reposync
3.添加repo到对应的profile
cobbler profile edit --name=CentOS-7-x86_64 --repos="openstack-queens"
4.修改kickstart文件，添加下面内容到%post %end中间
systemctl disable postfix.service
%yum_config_stanza

根据MAC定制化装机

cobbler system add --name=linux-node2.oldboyedu.com --mac=00:50:56:21:AF:72 --profile=CentOS-7-x86_64 --ip-address=10.0.0.199 --subnet=255.255.255.0 --gateway=10.0.0.2 --interface=eth0 --static=1 --hostname=linux-node2.oldboyedu.com --name-servers="10.0.0.2" --kickstart=/var/lib/cobbler/kickstarts/CentOS-7-x86_64.cfg

相关命令及文件

cobbler       #cobbler程序包
cobbler-web  #cobbler的web服务包
pykickstart  #cobbler检查kickstart语法错误
httpd        #Apache web服务

/etc/cobbler                   # 配置文件目录
/etc/cobbler/settings         # cobbler主配置文件
/etc/cobbler/dhcp.template    # DHCP服务的配置模板
/etc/cobbler/tftpd.template   # tftp服务的配置模板
/etc/cobbler/rsync.template   # rsync服务的配置模板
/etc/cobbler/iso              # iso模板配置文件目录
/etc/cobbler/pxe              # pxe模板文件目录
/etc/cobbler/power            # 电源的配置文件目录
/etc/cobbler/users.conf       # Web服务授权配置文件
/etc/cobbler/users.digest     # web访问的用户名密码配置文件
/etc/cobbler/dnsmasq.template # DNS服务的配置模板
/etc/cobbler/modules.conf     # Cobbler模块配置文件
/var/lib/cobbler               # Cobbler数据目录
/var/lib/cobbler/config       # 配置文件
/var/lib/cobbler/kickstarts   # 默认存放kickstart文件
/var/lib/cobbler/loaders      # 存放的各种引导程序
/var/www/cobbler               # 系统安装镜像目录
/var/www/cobbler/ks_mirror    # 导入的系统镜像列表
/var/www/cobbler/images       # 导入的系统镜像启动文件
/var/www/cobbler/repo_mirror  # yum源存储目录
/var/log/cobbler               # 日志目录
/var/log/cobbler/install.log  # 客户端系统安装日志
/var/log/cobbler/cobbler.log  # cobbler日志

导入镜像命令
cobbler import --path=/mnt/ --name Centos-6.6-x86_64 --arch=x86_64
# --path 镜像路径
# --name 为安装源定义一个名称
# --arch 指定安装源是32位、64位、ia64, 目前支持的选项有: x86│x86_64│ia64

查看导入信息
cobbler profile report

以上是关于自动装机系统Cobbler的主要内容，如果未能解决你的问题，请参考以下文章

Cobbler 自动装机系统

Linux网络之Cobbler自动部署装机

Cobbler自动装机试验

Cobbler自动部署装机，装机如喝水一样简单.......

图文详解cobbler 自动装机教程

Cobbler 自动装机