服务器评测
Cobbler自动化部署工具
Cobbler简介
RHEL7默认提供的Cobbler是2.6.9版本的，Cobbler译文”补鞋匠“网络安装套件Cobbler可以同时管理DHCP;DNS;YUM等，现在随便一家互联网公司机器数量成千上万，这个时候我们就不能那个U盘，或者光盘一台台的装，然后诞生了PXE+TFTP+DHCP+Kickstart（俗称PXE）然而PXE不能同时部署多种版本的系统，然而Cobbler可以部署多种系统如CentOS5，6，7;RedHat 5，6，7；Cobbler还可以部署Windows系统。该工具由Python语言开发，支持Web界面管理十分灵活。
PXE自动化部署参考：http://www.linuxidc.com/Linux/2015-08/122184.htm
配置yum源
Cobbler CentOS源没有Cobbler包组，它是由epel提供，但是其依赖的软件包又是CentOS所提供，所以我们配置CentOS，epel 两个yum源
[root@cobbler yum.repos.d]# cat aliyun.repo
[epel]
name=ailiyun
baseurl=http://mirrors.aliyun.com/epel/7/x86_64/
enabled=1
gpgcheck=0
[centos]
name=cobbler
baseurl=http://mirrors.aliyun.com/centos/7/os/x86_64/
enabled=1
gpgcheck=0
开始安装
[root@cobbler yum.repos.d]# yum install cobbler cobbler-web pykickstart debmirror
[root@cobbler ~]# rpm -qi cobbler
Name : cobbler
Version : 2.6.9
Release : 1.el7
Architecture: noarch
Install Date: Thu 20 Aug 2015 09:00:46 PM CST
Group : Applications/System
Size : 2177634
License : GPLv2+
Signature : RSA/SHA256, Wed 24 Jun 2015 04:36:07 AM CST, Key ID 6a2faea2352c64e5
Source RPM : cobbler-2.6.9-1.el7.src.rpm
Build Date : Tue 23 Jun 2015 02:06:19 AM CST
Build Host : buildppc-02.phx2.Fedoraproject.org
Relocations : (not relocatable)
Packager : Fedora Project
Vendor : Fedora Project
URL : http://www.cobblerd.org/
Summary : Boot server configurator
Description :
Cobbler is a network install server. Cobbler supports PXE, ISO
virtualized installs, and re-installing existing Linux machines.
The last two modes use a helper tool, ‘koan’, that integrates with
cobbler. There is also a web interface ‘cobbler-web’. Cobbler’s
advanced features include importing distributions from DVDs and rsync
mirrors, kickstart templating, integrated yum mirroring, and built-in
DHCP/DNS Management. Cobbler has a XMLRPC API for integration with
other applications.
启动cobbler，httpd服务
[root@cobbler ~]# systemctl start httpd.service
[root@cobbler ~]# systemctl start cobblerd.service
关闭selinux
[root@cobbler ~]# cat /etc/selinux/config
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
# enforcing – SELinux security policy is enforced.
# permissive – SELinux prints warnings instead of enforcing.
# disabled – No SELinux policy is loaded.
SELINUX=disabled
# SELINUXTYPE= can take one of these two values:
# targeted – Targeted processes are protected,
# minimum – Modification of targeted policy. Only selected processes are protected.
# mls – Multi Level Security protection.
SELINUXTYPE=targeted
[root@cobbler ~]# getenforce
Permissive 或者 Disabled
[root@cobbler ~]# cobbler check
The following are potential configuration items that you may want to fix:
1 : The ‘server’ field in /etc/cobbler/settings must be set to something other than localhost, or kickstarting features will not work. This should be a resolvable hostname or IP for the boot server as reachable by all machines that will use it.
2 : For PXE to be functional, the ‘next_server’ field in /etc/cobbler/settings must be set to something other than 127.0.0.1, and should match the IP of the boot server on the PXE network.
3 : SELinux is enabled. Please review the following wiki page for details on ensuring cobbler works correctly in your SELinux environment:
https://github.com/cobbler/cobbler/wiki/Selinux
4 : change ‘disable’ to ‘no’ in /etc/xinetd.d/tftp
5 : some network boot-loaders are missing from /var/lib/cobbler/loaders, you may run ‘cobbler get-loaders’ to download them, or, if you only want to handle x86/x86_64 netbooting, you may ensure that you have installed a *recent* version of the syslinux package installed and can ignore this message entirely. Files in this directory, should you want to support all architectures, should include pxelinux.0, menu.c32, elilo.efi, and yaboot. The ‘cobbler get-loaders’ command is the easiest way to resolve these requirements.
6 : file /etc/xinetd.d/rsync does not exist
7 : debmirror package is not installed, it will be required to manage debian deployments and repositories
8 : The default password used by the sample templates for newly installed machines (default_password_crypted in /etc/cobbler/settings) is still set to ‘cobbler’ and should be changed, try: “openssl passwd -1 -salt ‘random-phrase-here’ ‘your-password-here'” to generate new one
9 : fencing tools were not found, and are required to use the (optional) power management features. install cman or fence-agents to use them
Restart cobblerd and then run ‘cobbler sync’ to apply changes.
解决以上报告信息
修改参数
修改 /etc/cobbler/settings
next_server: 192.168.3.100
server: 192.168.3.100
[root@cobbler ~]# cobbler get-loaders
如果网络不行可以直接去 http://cobbler.github.com/loaders/下载COPYING.elilo COPYING.syslinux COPYING.yaboot elilo-ia64.efi grub-x86_64.efi grub-x86.efi menu.c32 pxelinux.0 README yaboot这些软件包
[root@cobbler ~]# cobbler get-loaders
task started: 2015-08-20_215034_get_loaders
task started (id=Download Bootloader Content, time=Thu Aug 20 21:50:34 2015)
downloading http://cobbler.github.com/loaders/README to /var/lib/cobbler/loaders/README
[root@cobbler ~]# yum install fence-agents cman
注释/etc/debmirror.conf 中以下两项
#@dists=”sid”;
#@arches=”i386″;
[root@cobbler ~]# openssl passwd -1 -salt `openssl rand -hex 4`
Password:
$1$a6a60411$ltytuO4WzxCYFOJhNFIlh1
[root@cobbler ~]# vim /etc/cobbler/settings
default_password_crypted: “$1$a6a60411$ltytuO4WzxCYFOJhNFIlh1”
检查是否配置完成
[root@cobbler ~]# cobbler check
No configuration problems found. All systems go.
安装配置DHCP
[root@cobbler ~]# yum install dhcp
[root@cobbler loaders]# vim /etc/dhcp/dhcpd.conf
default-lease-time 86400;
max-lease-time 7200;
log-facility local7;
subnet 192.168.3.0 netmask 255.255.255.0 {
range 192.168.3.105 192.168.3.120;
option routers 192.168.3.100;
}
next-server 192.168.3.100;
filename=”pxelinux.0″;
准备安装yum
[root@cobbler media]# mkdir centos6
[root@cobbler media]# mkdir centos7
[root@cobbler ~]# mount -o loop CentOS-6.6-x86_64-bin-DVD1.iso /media/centos6
[root@cobbler ~]# mount -o loop CentOS-7.0-1406-x86_64-DVD.iso /media/centos7
安装system-config-kickstart 用于编写ks.cfg文件基于系统的anaconda-ks.cfg这个文件是本系统安装中的配置
[root@cobbler ~]# yum install system-config-kickstart
[root@cobbler ~]# system-config-kickstart
导入系统镜像
[root@cobbler ~]# cobbler import –name=”centos6″ –path=/media/centos6
[root@cobbler ~]# cobbler distro list
centos6-x86_64
[root@cobbler cobbler]# cobbler profile add –name=centos6.6 –distro=centos6-x86_64 –kickstart=/var/lib/cobbler/kickstarts/centos6.cfg
[root@cobbler cobbler]# cobbler profile list
centos6-x86_64
centos6.6
配置完成后一定要sync
[root@cobbler ~]# cobbler sync
task started: 2015-08-22_011824_sync
task started (id=Sync, time=Sat Aug 22 01:18:24 2015)
running pre-sync triggers
cleaning trees
removing: /var/www/cobbler/images/centos6-x86_64
removing: /var/lib/tftpboot/pxelinux.cfg/default
removing: /var/lib/tftpboot/grub/images
removing: /var/lib/tftpboot/grub/grub-x86_64.efi
removing: /var/lib/tftpboot/grub/grub-x86.efi
removing: /var/lib/tftpboot/grub/efidefault
removing: /var/lib/tftpboot/images/centos6-x86_64
removing: /var/lib/tftpboot/s390x/profile_list
copying bootloaders
trying hardlink /var/lib/cobbler/loaders/pxelinux.0 -> /var/lib/tftpboot/pxelinux.0
copying: /var/lib/cobbler/loaders/pxelinux.0 -> /var/lib/tftpboot/pxelinux.0
trying hardlink /var/lib/cobbler/loaders/menu.c32 -> /var/lib/tftpboot/menu.c32
copying: /var/lib/cobbler/loaders/menu.c32 -> /var/lib/tftpboot/menu.c32
trying hardlink /var/lib/cobbler/loaders/yaboot -> /var/lib/tftpboot/yaboot
copying: /var/lib/cobbler/loaders/yaboot -> /var/lib/tftpboot/yaboot
trying hardlink /var/lib/cobbler/loaders/grub-x86_64.efi -> /var/lib/tftpboot/grub/grub-x86_64.efi
trying hardlink /var/lib/cobbler/loaders/grub-x86.efi -> /var/lib/tftpboot/grub/grub-x86.efi
copying distros to tftpboot
copying files for distro: centos6-x86_64
trying hardlink /var/www/cobbler/ks_mirror/centos6/images/pxeboot/vmlinuz -> /var/lib/tftpboot/images/centos6-x86_64/vmlinuz
trying hardlink /var/www/cobbler/ks_mirror/centos6/images/pxeboot/initrd.img -> /var/lib/tftpboot/images/centos6-x86_64/initrd.img
copying images
generating PXE configuration files
generating PXE menu structure
copying files for distro: centos6-x86_64
trying hardlink /var/www/cobbler/ks_mirror/centos6/images/pxeboot/vmlinuz -> /var/www/cobbler/images/centos6-x86_64/vmlinuz
trying hardlink /var/www/cobbler/ks_mirror/centos6/images/pxeboot/initrd.img -> /var/www/cobbler/images/centos6-x86_64/initrd.img
Writing template files for centos6-x86_64
rendering TFTPD files
generating /etc/xinetd.d/tftp
processing boot_files for distro: centos6-x86_64
cleaning link caches
running post-sync triggers
running python triggers from /var/lib/cobbler/triggers/sync/post/*
running python trigger cobbler.modules.sync_post_restart_services
running shell triggers from /var/lib/cobbler/triggers/sync/post/*
running python triggers from /var/lib/cobbler/triggers/change/*
running python trigger cobbler.modules.scm_track
running shell triggers from /var/lib/cobbler/triggers/change/*
*** TASK COMPLETE ***
查看是否配置成功
[root@cobbler cobbler]# cat /var/lib/tftpboot/pxelinux.cfg/default
DEFAULT menu
PROMPT 0
MENU TITLE Cobbler | http://cobbler.github.com
TIMEOUT 200
TOTALTIMEOUT 6000
ONTIMEOUT local
LABEL local
MENU LABEL (local)
MENU DEFAULT
LOCALBOOT -1
LABEL centos6-x86_64
kernel /images/centos6-x86_64/vmlinuz
MENU LABEL centos6-x86_64
append initrd=/images/centos6-x86_64/initrd.img ksdevice=bootif lang= kssendmac text ks=http://192.168.3.100/cblr/svc/op/ks/profile/centos6-x86_64
ipappend 2
LABEL centos6.6
kernel /images/centos6-x86_64/vmlinuz
MENU LABEL centos6.6
append initrd=/images/centos6-x86_64/initrd.img ksdevice=bootif lang= kssendmac text ks=http://192.168.3.100/cblr/svc/op/ks/profile/centos6.6
ipappend 2
开始安装
配置cobbler安装Centos7
[root@cobbler ~]# cobbler import –name=”centos7″ –path=/media/centos7
task started: 2015-08-22_014024_import
task started (id=Media import, time=Sat Aug 22 01:40:24 2015)
Found a candidate signature: breed=redhat, version=rhel6
Found a candidate signature: breed=redhat, version=rhel7
Found a matching signature: breed=redhat, version=rhel7
Adding distros from path /var/www/cobbler/ks_mirror/centos7:
creating new distro: centos7-x86_64
trying symlink: /var/www/cobbler/ks_mirror/centos7 -> /var/www/cobbler/links/centos7-x86_64
creating new profile: centos7-x86_64
associating repos
checking for rsync repo(s)
checking for rhn repo(s)
checking for yum repo(s)
starting descent into /var/www/cobbler/ks_mirror/centos7 for centos7-x86_64
processing repo at : /var/www/cobbler/ks_mirror/centos7
need to process repo/comps: /var/www/cobbler/ks_mirror/centos7
looking for /var/www/cobbler/ks_mirror/centos7/repodata/*comps*.xml
Keeping repodata as-is :/var/www/cobbler/ks_mirror/centos7/repodata
*** TASK COMPLETE ***
[root@cobbler ~]# cobbler distro list
centos6-x86_64
centos7-x86_64
出现以下问题是要将做好的ks移动到 /var/lib/cobbler/kickstarts/ 这个路径是专门存放ks文件模板的
[root@cobbler ks]# cobbler profile add –distro=”centos7-x86_64″ –name=centos7 –kickstart=/root/ks/centos7.cfg
exception on server: ‘Invalid kickstart template file location /root/ks/centos7.cfg, it is not inside /var/lib/cobbler/kickstarts/’
[root@cobbler ks]# cobbler profile add –distro=”centos7-x86_64″ –name=centos7 –kickstart=/var/lib/cobbler/kickstarts/centos7.cfg
[root@cobbler ks]# cobbler sync
task started: 2015-08-22_015615_sync
task started (id=Sync, time=Sat Aug 22 01:56:15 2015)
running pre-sync triggers
cleaning trees
removing: /var/www/cobbler/images/centos6-x86_64
removing: /var/www/cobbler/images/centos7-x86_64
removing: /var/lib/tftpboot/pxelinux.cfg/default
removing: /var/lib/tftpboot/grub/images
removing: /var/lib/tftpboot/grub/grub-x86_64.efi
removing: /var/lib/tftpboot/grub/grub-x86.efi
removing: /var/lib/tftpboot/grub/efidefault
removing: /var/lib/tftpboot/images/centos6-x86_64
removing: /var/lib/tftpboot/images/centos7-x86_64
removing: /var/lib/tftpboot/s390x/profile_list
copying bootloaders
trying hardlink /var/lib/cobbler/loaders/pxelinux.0 -> /var/lib/tftpboot/pxelinux.0
copying: /var/lib/cobbler/loaders/pxelinux.0 -> /var/lib/tftpboot/pxelinux.0
trying hardlink /var/lib/cobbler/loaders/menu.c32 -> /var/lib/tftpboot/menu.c32
copying: /var/lib/cobbler/loaders/menu.c32 -> /var/lib/tftpboot/menu.c32
trying hardlink /var/lib/cobbler/loaders/yaboot -> /var/lib/tftpboot/yaboot
copying: /var/lib/cobbler/loaders/yaboot -> /var/lib/tftpboot/yaboot
trying hardlink /var/lib/cobbler/loaders/grub-x86_64.efi -> /var/lib/tftpboot/grub/grub-x86_64.efi
trying hardlink /var/lib/cobbler/loaders/grub-x86.efi -> /var/lib/tftpboot/grub/grub-x86.efi
copying distros to tftpboot
copying files for distro: centos7-x86_64
trying hardlink /var/www/cobbler/ks_mirror/centos7/images/pxeboot/vmlinuz -> /var/lib/tftpboot/images/centos7-x86_64/vmlinuz
trying hardlink /var/www/cobbler/ks_mirror/centos7/images/pxeboot/initrd.img -> /var/lib/tftpboot/images/centos7-x86_64/initrd.img
copying files for distro: centos6-x86_64
trying hardlink /var/www/cobbler/ks_mirror/centos6/images/pxeboot/vmlinuz -> /var/lib/tftpboot/images/centos6-x86_64/vmlinuz
trying hardlink /var/www/cobbler/ks_mirror/centos6/images/pxeboot/initrd.img -> /var/lib/tftpboot/images/centos6-x86_64/initrd.img
copying images
generating PXE configuration files
generating PXE menu structure
copying files for distro: centos7-x86_64
trying hardlink /var/www/cobbler/ks_mirror/centos7/images/pxeboot/vmlinuz -> /var/www/cobbler/images/centos7-x86_64/vmlinuz
trying hardlink /var/www/cobbler/ks_mirror/centos7/images/pxeboot/initrd.img -> /var/www/cobbler/images/centos7-x86_64/initrd.img
Writing template files for centos7-x86_64
copying files for distro: centos6-x86_64
trying hardlink /var/www/cobbler/ks_mirror/centos6/images/pxeboot/vmlinuz -> /var/www/cobbler/images/centos6-x86_64/vmlinuz
trying hardlink /var/www/cobbler/ks_mirror/centos6/images/pxeboot/initrd.img -> /var/www/cobbler/images/centos6-x86_64/initrd.img
Writing template files for centos6-x86_64
rendering TFTPD files
generating /etc/xinetd.d/tftp
processing boot_files for distro: centos7-x86_64
processing boot_files for distro: centos6-x86_64
cleaning link caches
running post-sync triggers
running python triggers from /var/lib/cobbler/triggers/sync/post/*
running python trigger cobbler.modules.sync_post_restart_services
running shell triggers from /var/lib/cobbler/triggers/sync/post/*
running python triggers from /var/lib/cobbler/triggers/change/*
running python trigger cobbler.modules.scm_track
running shell triggers from /var/lib/cobbler/triggers/change/*
*** TASK COMPLETE ***
[root@cobbler ks]# cobbler profile list
centos6-x86_64
centos6.6
centos7
centos7-x86_64
开始安装
附上我自己的ks文件参考
[root@cobbler ks]# cat centos6.cfg
#platform=x86, AMD64, or Intel EM64T
#version=DEVEL
# Install OS instead of upgrade
install
# Keyboard layouts
keyboard ‘us’# Reboot after installation
reboot
# Root password
rootpw –iscrypted $1$JrbIN3YW$buJKv8Y7FfZhCEhOg/eD01
# System timezone
timezone Asia/Chongqing –isUtc
# Use network installation
url –url=”http://192.168.3.100/cobbler/ks_mirror/centos6/”
# System language
lang en_US
# Firewall configuration
firewall –disabled
# Network information
network –bootproto=dhcp –device=eth0
# System authorization information
auth –useshadow –passalgo=sha512
# Use graphical install
graphical
firstboot –disable
# SELinux configuration
selinux –disabled
# Installation logging level
logging –level=info
# System bootloader configuration
bootloader –append=”crashkernel=auto rhgb quiet” –location=mbr –driveorder=”sda”
# Clear the Master Boot Record
zerombr
# Partition clearing information
clearpart –all –initlabel
# Disk partitioning information
part /boot –fstype=”ext4″ –size=500
part pv.008002 –grow –size=1
%packages
@base
@basic-desktop
@core
@debugging
@desktop Platform Development
@desktop-debugging
@desktop-platform
@development tools
@directory-client
@fonts
@input-methods
@internet-browser
@java-platform
@legacy-x
@network-file-system-client
@print-client
@remote-desktop-clients
@server Platform Development
@server-platform
@server-policy
@x11
%end
centos7 ks文件
[root@cobbler ks]# cat centos7.cfg
#platform=x86, AMD64, or Intel EM64T
#version=DEVEL
# Install OS instead of upgrade
install
# X Window System configuration information
xconfig –startxonboot
# Keyboard layouts
# old format: keyboard us
# new format:
keyboard –vckeymap=us –xlayouts=’us’
# Halt after installation
reboot
# Root password
rootpw –iscrypted $1$L7lKtlWj$DvBzrvndeOQd7EHfRGOnj/
# System timezone
timezone Asia/Chongqing –isUtc –nontp
# Use network installation
url –url=”http://192.168.3.100/cobbler/ks_mirror/centos7/”
# System language
lang en_US –addsupport=zh_CN.UTF-8
# Firewall configuration
firewall –disabled
# Network information
network –bootproto=dhcp –device=eno16777736
network –bootproto=dhcp –device=None
# System authorization information
auth –useshadow –passalgo=sha512
# Use graphical install
graphical
# Run the Setup Agent on first boot
firstboot –enable
# SELinux configuration
selinux –disabled
ignoredisk –only-use=sda
# System bootloader configuration
bootloader –location=mbr –boot-drive=sda
# Clear the Master Boot Record
zerombr
# Partition clearing information
clearpart –all –initlabel
# Disk partitioning information
part pv.10 –fstype=”lvmpv” –ondisk=sda –size=35339
part /boot –fstype=”xfs” –ondisk=sda –size=500
volgroup centos –pesize=4096 pv.10
logvol / –fstype=”xfs” –grow –maxsize=51200 –size=1024 –name=root –vgname=centos
logvol swap –fstype=”swap” –size=2064 –name=swap –vgname=centos
%packages
@base
@core
@desktop-debugging
@dial-up
@directory-client
@fonts
@guest-agents
@guest-desktop-agents
@input-methods
@internet-browser
@java-platform
@kde-desktop
@multimedia
@network-file-system-client
@print-client
@x11
%end
cobbler web界面配置
使用系统用户（pam）或者configfile定义用户登录管理cobbler web
[authentication]
#module = authn_configfile （默认值）
module = authn_pam
[root@cobbler ~]# vim /etc/cobbler/modules.conf
[root@cobbler ~]# useradd cobbler
[root@cobbler ~]# echo “cobbler” | passwd –stdin cobbler
Changing password for user cobbler.
passwd: all authentication tokens updated successfully.
[root@cobbler ~]# vim /etc/cobbler/users.conf
[admins]
admin = “cobbler”
[root@cobbler ~]# vim /etc/cobbler/modules.conf
[authentication]
module = authn_configfile
[root@cobbler ~]# htdigest /etc/cobbler/users.digest “Cobbler” admin
Adding user admin in realm Cobbler
New password:
Re-type new password:
本文永久更新链接地址：http://www.linuxidc.com/Linux/2017-10/147691.htm
