CentOS7内安装部署Cobblercobbler简介集成的服务cobbler服务端部署管理distro创建kickstarts自动安装脚本安装系统

71 阅读 0 评论 47 点赞

我是靠谱客的博主务实冬天，最近开发中收集的这篇文章主要介绍CentOS7内安装部署Cobblercobbler简介集成的服务cobbler服务端部署管理distro创建kickstarts自动安装脚本安装系统，觉得挺不错的，现在分享给大家，希望可以做个参考。

概述

文章目录

cobbler简介
集成的服务
cobbler服务端部署
- 准备工作
- 安装Cobbler及相关软件包
- 配置Cobbler
- 配置DHCP
- 同步Cobbler配置
- 配置开机启动
管理distro
创建kickstarts自动安装脚本
安装系统

cobbler简介

Cobbler是一个Linux服务器安装的服务，可以通过网络启动(PXE)的方式来快速安装、重装物理服务器和虚拟机，同时还可以管理DHCP，DNS等。

Cobbler可以使用命令行方式管理，也提供了基于Web的界面管理工具(cobbler-web)，还提供了API接口，可以方便二次开发使用。

Cobbler是较早前的kickstart的升级版，优点是比较容易配置，还自带web界面比较易于管理。

Cobbler内置了一个轻量级配置管理系统，但它也支持和其它配置管理系统集成，如Puppet，暂时不支持SaltStack。
cobbler官网

集成的服务

PXE服务支持
DHCP服务管理
DNS服务管理(可选bind,dnsmasq)
电源管理
Kickstart服务支持
YUM仓库管理
TFTP(PXE启动时需要)
Apache(提供kickstart的安装源，并提供定制化的kickstart配置)

cobbler服务端部署

环境：CentOS7

准备工作

# 配置yum源
[root@localhost ~]# rm -rf /etc/yum.repos.d/*
[root@localhost ~]# curl -o /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-7.repo
[root@localhost ~]# sed -i -e '/mirrors.cloud.aliyuncs.com/d' -e '/mirrors.aliyuncs.com/d' /etc/yum.repos.d/CentOS-Base.repo

#查看版本和内核
[root@localhost ~]# cat /etc/redhat-release
CentOS Linux release 7.7.1908 (Core)
[root@localhost ~]# uname -r
3.10.0-1062.el7.x86_64

#查看防火墙和SELinux是否关闭
[root@localhost ~]# systemctl status firewalld.service 
● firewalld.service - firewalld - dynamic firewall daemon
   Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled; vendor preset: enabled)
   Active: inactive (dead)
     Docs: man:firewalld(1)

[root@localhost ~]# getenforce 
Permissive

[root@localhost ~]# grep 'SELINUX=disabled' /etc/selinux/config 
SELINUX=disabled

安装Cobbler及相关软件包

#安装需要的软件
yum -y install epel-release  //安装epel

yum install dhcp tftp-server xinetd httpd cobbler cobbler-web pykickstart -y

配置Cobbler

#为httpd和cobbler设置启动和开机自启
[root@localhost ~]# systemctl enable --now httpd.service 
Created symlink from /etc/systemd/system/multi-user.target.wants/httpd.service to /usr/lib/systemd/system/httpd.service.
[root@localhost ~]# systemctl enable --now cobblerd.service 
Created symlink from /etc/systemd/system/multi-user.target.wants/cobblerd.service to /usr/lib/systemd/system/cobblerd.service.

# 检查配置文件，需要在 cobblerd 和 httpd 启动的情况下检查
[root@localhost ~]# cobbler check
The following are potential configuration items that you may want to fix:

1 : The 'server' field in /etc/cobbler/settings must be set to something other than localhost, or kickstarting features will not work.  This should be a resolvable hostname or IP for the boot server as reachable by all machines that will use it.
2 : For PXE to be functional, the 'next_server' field in /etc/cobbler/settings must be set to something other than 127.0.0.1, and should match the IP of the boot server on the PXE network.
3 : SELinux is enabled. Please review the following wiki page for details on ensuring cobbler works correctly in your SELinux environment:
    https://github.com/cobbler/cobbler/wiki/Selinux
4 : change 'disable' to 'no' in /etc/xinetd.d/tftp
5 : Some network boot-loaders are missing from /var/lib/cobbler/loaders.  If you only want to handle x86/x86_64 netbooting, you may ensure that you have installed a *recent* version of the syslinux package installed and can ignore this message entirely.  Files in this directory, should you want to support all architectures, should include pxelinux.0, menu.c32, elilo.efi, and yaboot.
6 : enable and start rsyncd.service with systemctl
7 : debmirror package is not installed, it will be required to manage debian deployments and repositories
8 : The default password used by the sample templates for newly installed machines (default_password_crypted in /etc/cobbler/settings) is still set to 'cobbler' and should be changed, try: "openssl passwd -1 -salt 'random-phrase-here' 'your-password-here'" to generate new one
9 : fencing tools were not found, and are required to use the (optional) power management features. install cman or fence-agents to use them


# 问题1
[root@localhost ~]# sed -i "s#server: 127.0.0.1#server: 192.168.220.40#" /etc/cobbler/settings
[root@localhost ~]# grep "^server: " /etc/cobbler/settings
server: 192.168.220.40   //将此处的ip修改为本主机的ip

#问题2
[root@localhost ~]# sed -i "s#next_server: 127.0.0.1#next_server: 192.168.220.40#" /etc/cobbler/settings
[root@localhost ~]# grep "^next_server: " /etc/cobbler/settings
next_server: 192.168.220.40  //将此处的ip修改为本主机的ip 

#问题8
# 防止循环装系统，适用于服务器第一启动项是 PXE 启动
[root@localhost ~]# sed -i "s#pxe_just_once: 0#pxe_just_once: 1#" /etc/cobbler/settings
[root@localhost ~]# grep "^pxe_just_once: " /etc/cobbler/settings
pxe_just_once: 1

#生成加密的密码
[root@localhost ~]# openssl passwd -1 -salt "$RANDOM" '123456789'
$1$32341$bRkv49hx2peVqf1DQBM9x.

# 修改 /etc/cobbler/settings 文件中的 default_password_crypted 参数的值为上面生成的密码串
[root@cobbler ~]# vim /etc/cobbler/settings
[root@localhost ~]# grep 'default_password_crypted:' /etc/cobbler/settings 
default_password_crypted: "$1$32341$bRkv49hx2peVqf1DQBM9x."   //修改此处

#问题4
[root@localhost ~]# sed -i "/disable/ {s#yes#no#}" /etc/xinetd.d/tftp
[root@localhost ~]# grep "disable" /etc/xinetd.d/tftp 
        disable                 = no

#问题7 和 Debian 系统相关，不需要
#问题9 fence设备相关，暂不需要

# 上面相关问题配置完后，重启 Cobbler
[root@localhost ~]# systemctl restart cobblerd

配置DHCP

[root@localhost ~]#  sed -i "s#manage_dhcp: 0#manage_dhcp: 1#" /etc/cobbler/settings
[root@localhost ~]# grep "^manage_dhcp: " /etc/cobbler/settings
manage_dhcp: 1


[root@localhost ~]# vim /etc/cobbler/dhcp.template  // 列出修改过的相关字段
subnet 192.168.220.0 netmask 255.255.255.0 {     //网段
     option routers             192.168.220.2;   //网关
     option domain-name-servers 192.168.220.2;   //dns
     option subnet-mask         255.255.255.0;   //子网掩码
     range dynamic-bootp        192.168.220.200 192.168.220.210;   //范围
     default-lease-time         21600;
     max-lease-time             43200;
     next-server                $next_server;

[root@localhost ~]# ss -anulp | grep dhcp  //查看dhcp是否正常
UNCONN     0      0            *:67                       *:*                   users:(("dhcpd",pid=55385,fd=7))

同步Cobbler配置

#同步最新 Cobbler 配置，它会根据配置自动修改 DHCP 等服务
[root@localhost ~]# systemctl restart cobblerd

[root@localhost ~]# cobbler sync
task started: 2022-08-11_190445_sync
task started (id=Sync, time=Thu Aug 11 19:04:45 2022)
running pre-sync triggers
cleaning trees
removing: /var/lib/tftpboot/grub/images
copying bootloaders
copying: /usr/share/syslinux/pxelinux.0 -> /var/lib/tftpboot/pxelinux.0
copying: /usr/share/syslinux/menu.c32 -> /var/lib/tftpboot/menu.c32
copying: /usr/share/syslinux/memdisk -> /var/lib/tftpboot/memdisk
copying distros to tftpboot
copying images
generating PXE configuration files
generating PXE menu structure
rendering DHCP files
generating /etc/dhcp/dhcpd.conf
rendering TFTPD files
generating /etc/xinetd.d/tftp
cleaning link caches
running post-sync triggers
running python triggers from /var/lib/cobbler/triggers/sync/post/*
running python trigger cobbler.modules.sync_post_restart_services
running: dhcpd -t -q
received on stdout: 
received on stderr: 
running: service dhcpd restart
received on stdout: 
received on stderr: Redirecting to /bin/systemctl restart dhcpd.service

running shell triggers from /var/lib/cobbler/triggers/sync/post/*
running python triggers from /var/lib/cobbler/triggers/change/*
running python trigger cobbler.modules.manage_genders
running python trigger cobbler.modules.scm_track
running shell triggers from /var/lib/cobbler/triggers/change/*
*** TASK COMPLETE ***   //出现TASK COMPLETE为成功


[root@localhost ~]# head -7 /etc/dhcp/dhcpd.conf   //看一下DHCP 的配置文件
# ******************************************************************
# Cobbler managed dhcpd.conf file
# generated from cobbler dhcp.conf template (Thu Aug 11 11:04:46 2022)
# Do NOT make changes to /etc/dhcpd.conf. Instead, make your changes
# in /etc/cobbler/dhcp.template, as /etc/dhcpd.conf will be
# overwritten.
# ******************************************************************

配置开机启动

#再次确认服务都为开机自启
[root@localhost ~]# systemctl enable dhcpd xinetd httpd cobblerd
Created symlink from /etc/systemd/system/multi-user.target.wants/dhcpd.service to /usr/lib/systemd/system/dhcpd.service.
[root@localhost ~]# systemctl is-enabled dhcpd xinetd httpd cobblerd
enabled
enabled
enabled
enabled

管理distro

Cobbler 变得可用的第一步为定义 distro，其可以通过为其指定外部的安装引导内核及 ramdisk 文件的方式实现。
如果已经有完成的安装树（如 OS 的安装镜像）则推荐使用 improt 导入的方式进行。
导入镜像

# 导入CentOS 7镜像
[root@localhost ~]# mount /dev/cdrom /mnt  //# 挂载 CentOS 7 的系统镜像
mount: /dev/sr0 写保护，将以只读方式挂载

[root@localhost ~]# cobbler import --path=/mnt/ --name=CentOS-7-x86_64 --arch=x86_64
task started: 2022-08-11_191441_import
task started (id=Media import, time=Thu Aug 11 19:14:41 2022)
Found a candidate signature: breed=suse, version=opensuse15.0
Found a candidate signature: breed=suse, version=opensuse15.1
Found a candidate signature: breed=redhat, version=rhel6
Found a candidate signature: breed=redhat, version=rhel7
Found a matching signature: breed=redhat, version=rhel7
Adding distros from path /var/www/cobbler/ks_mirror/CentOS-7-x86_64:
creating new distro: CentOS-7-x86_64
trying symlink: /var/www/cobbler/ks_mirror/CentOS-7-x86_64 -> /var/www/cobbler/links/CentOS-7-x86_64
creating new profile: CentOS-7-x86_64
associating repos
checking for rsync repo(s)
checking for rhn repo(s)
checking for yum repo(s)
starting descent into /var/www/cobbler/ks_mirror/CentOS-7-x86_64 for CentOS-7-x86_64
processing repo at : /var/www/cobbler/ks_mirror/CentOS-7-x86_64
need to process repo/comps: /var/www/cobbler/ks_mirror/CentOS-7-x86_64
looking for /var/www/cobbler/ks_mirror/CentOS-7-x86_64/repodata/*comps*.xml
Keeping repodata as-is :/var/www/cobbler/ks_mirror/CentOS-7-x86_64/repodata
*** TASK COMPLETE ***   //看到TASK COMPLETE为成功导入

# --path 镜像路径
# --name 为安装源定义一个名字
# --arch 指定安装源是 32 位、64 位、ia64, 目前支持的选项有: x86│x86_64│ia64
# 安装源的唯一标示就是根据 name 参数来定义，本例导入成功后，安装源的唯一标示就是：CentOS-7-x86_64，如果重复，系统会提示导入失败

[root@localhost ~]# cobbler distro list  //查看镜像列表
   CentOS-7-x86_64

# 镜像存放目录，Cobbler 会将镜像中的所有安装文件拷贝到本地一份，放在 /var/www/cobbler/ks_mirror 下的 CentOS-7-x86_64目录下。
# 因此 /var/www/cobbler 目录必须具有足够容纳安装文件的空间。
[root@localhost ~]# ll /var/www/cobbler/ks_mirror/
总用量 0
drwxr-xr-x. 8 root root 254 9月  12 2019 CentOS-7-x86_64
drwxr-xr-x. 2 root root  34 8月  11 19:15 config

[root@localhost ~]# cobbler profile list   // 导入 distro 会自动生成 profile
   CentOS-7-x86_64

# 查看安装镜像文件信息
[root@localhost ~]# cobbler distro report --name=CentOS-7-x86_64
Name                           : CentOS-7-x86_64
Architecture                   : x86_64
TFTP Boot Files                : {}
Breed                          : redhat
Comment                        : 
Fetchable Files                : {}
Initrd                         : /var/www/cobbler/ks_mirror/CentOS-7-x86_64/images/pxeboot/initrd.img
Kernel                         : /var/www/cobbler/ks_mirror/CentOS-7-x86_64/images/pxeboot/vmlinuz
Kernel Options                 : {}
Kernel Options (Post Install)  : {}
Kickstart Metadata             : {'tree': 'http://@@http_server@@/cblr/links/CentOS-7-x86_64'}
Management Classes             : []
OS Version                     : rhel7
Owners                         : ['admin']
Red Hat Management Key         : <<inherit>>
Red Hat Management Server      : <<inherit>>
Template Files                 : {}

创建kickstarts自动安装脚本

[root@localhost kickstarts]# cat CentOS-7-x86_64.ks    //此文件的可以参考/root/anaconda-ks.cfg文件
auth --enableshadow --passalgo=sha512
bootloader --location=mbr
clearpart --all --initlabel
part /boot --asprimary --fstype="ext4" --size=500
part swap --fstype="swap" --size=4096
part / --fstype="ext4" --grow --size=15000
text
firewall --disabled
firstboot --disable
keyboard us
lang en_US
url --url=http://192.168.220.40/cobbler/ks_mirror/CentOS-7-x86_64  //此处改为主机ip
$yum_repo_stanza
reboot

rootpw --iscrypted $6$xIirl1/bwSCWwuYp$c/CyuQFl45n.NUuz3.MC5jHrHW7arV8PvgUY71g28m/SHNo1mYyCj4sDdgkX4AHpCvCBZ9XDV/JWVblYcNdkL1   //此处密码为当前虚拟机root用户的密码 复制于anaconda-ks.cfg文件内 

selinux --disabled
skipx
timezone Asia/Shanghai --isUtc --nontp
install
zerombr

%packages
@^minimal
@core
kexec-tools

%end

%addon com_redhat_kdump --enable --reserve-mb='auto'

%end

%anaconda
pwpolicy root --minlen=6 --minquality=1 --notstrict --nochanges --notempty
pwpolicy user --minlen=6 --minquality=1 --notstrict --nochanges --emptyok
pwpolicy luks --minlen=6 --minquality=1 --notstrict --nochanges --notempty
%end

# 检查ks文件语法是否有误
[root@localhost kickstarts]# cobbler validateks
task started: 2022-08-11_192811_validateks
task started (id=Kickstart Validation, time=Thu Aug 11 19:28:11 2022)
----------------------------
osversion: rhel7
checking url: http://192.168.220.40/cblr/svc/op/ks/profile/CentOS-7-x86_64
running: /usr/bin/ksvalidator -v "rhel7" "http://192.168.220.40/cblr/svc/op/ks/profile/CentOS-7-x86_64"
received on stdout: 
received on stderr: 
*** all kickstarts seem to be ok ***
*** TASK COMPLETE ***


# 查看当前cobbler有哪些配置文件
[root@localhost kickstarts]# cobbler profile list
   CentOS-7-x86_64

# 修改profile，将我们新建的ks文件设为默认的kickstarts安装文件
[root@localhost kickstarts]# cobbler profile edit --name CentOS-7-x86_64 --kickstart=/var/lib/cobbler/kickstarts/CentOS-7-x86_64.ks

#配置网卡名称为传统网卡名称eth0
[root@localhost kickstarts]# cobbler profile edit --name CentOS-7-x86_64 --kopts='net.ifnames=0 biosdevname=0'


# 检查当前系统cobbler配置文件信息
[root@localhost kickstarts]# cobbler profile report
Name                           : CentOS-7-x86_64
TFTP Boot Files                : {}
Comment                        : 
DHCP Tag                       : default
Distribution                   : CentOS-7-x86_64
Enable gPXE?                   : 0
Enable PXE Menu?               : 1
Fetchable Files                : {}
Kernel Options                 : {'biosdevname': '0', 'net.ifnames': '0'}
Kernel Options (Post Install)  : {}
Kickstart                      : /var/lib/cobbler/kickstarts/CentOS-7-x86_64.ks
Kickstart Metadata             : {}
Management Classes             : []
Management Parameters          : <<inherit>>
Name Servers                   : []
Name Servers Search Path       : []
Owners                         : ['admin']
Parent Profile                 : 
Internal proxy                 : 
Red Hat Management Key         : <<inherit>>
Red Hat Management Server      : <<inherit>>
Repos                          : []
Server Override                : <<inherit>>
Template Files                 : {}
Virt Auto Boot                 : 1
Virt Bridge                    : xenbr0
Virt CPUs                      : 1
Virt Disk Driver Type          : raw
Virt File Size(GB)             : 5
Virt Path                      : 
Virt RAM (MB)                  : 512
Virt Type                      : kvm


# 同步cobbler
[root@localhost kickstarts]# cobbler sync
task started: 2022-08-11_193349_sync
task started (id=Sync, time=Thu Aug 11 19:33:49 2022)
running pre-sync triggers
cleaning trees
removing: /var/www/cobbler/images/CentOS-7-x86_64
removing: /var/lib/tftpboot/pxelinux.cfg/default
removing: /var/lib/tftpboot/grub/images
removing: /var/lib/tftpboot/grub/efidefault
removing: /var/lib/tftpboot/images/CentOS-7-x86_64
removing: /var/lib/tftpboot/s390x/profile_list
copying bootloaders
copying: /usr/share/syslinux/pxelinux.0 -> /var/lib/tftpboot/pxelinux.0
copying: /usr/share/syslinux/menu.c32 -> /var/lib/tftpboot/menu.c32
copying: /usr/share/syslinux/memdisk -> /var/lib/tftpboot/memdisk
copying distros to tftpboot
copying files for distro: CentOS-7-x86_64
trying hardlink /var/www/cobbler/ks_mirror/CentOS-7-x86_64/images/pxeboot/vmlinuz -> /var/lib/tftpboot/images/CentOS-7-x86_64/vmlinuz
trying hardlink /var/www/cobbler/ks_mirror/CentOS-7-x86_64/images/pxeboot/initrd.img -> /var/lib/tftpboot/images/CentOS-7-x86_64/initrd.img
copying images
generating PXE configuration files
generating PXE menu structure
copying files for distro: CentOS-7-x86_64
trying hardlink /var/www/cobbler/ks_mirror/CentOS-7-x86_64/images/pxeboot/vmlinuz -> /var/www/cobbler/images/CentOS-7-x86_64/vmlinuz
trying hardlink /var/www/cobbler/ks_mirror/CentOS-7-x86_64/images/pxeboot/initrd.img -> /var/www/cobbler/images/CentOS-7-x86_64/initrd.img
Writing template files for CentOS-7-x86_64
rendering DHCP files
generating /etc/dhcp/dhcpd.conf
rendering TFTPD files
generating /etc/xinetd.d/tftp
[root@localhost ~]# cobbler sync
task started: 2022-08-11_193710_sync
task started (id=Sync, time=Thu Aug 11 19:37:10 2022)
running pre-sync triggers
cleaning trees
removing: /var/www/cobbler/images/CentOS-7-x86_64
removing: /var/lib/tftpboot/pxelinux.cfg/default
removing: /var/lib/tftpboot/grub/images
removing: /var/lib/tftpboot/grub/efidefault
removing: /var/lib/tftpboot/images/CentOS-7-x86_64
removing: /var/lib/tftpboot/s390x/profile_list
copying bootloaders
copying: /usr/share/syslinux/pxelinux.0 -> /var/lib/tftpboot/pxelinux.0
copying: /usr/share/syslinux/menu.c32 -> /var/lib/tftpboot/menu.c32
copying: /usr/share/syslinux/memdisk -> /var/lib/tftpboot/memdisk
copying distros to tftpboot
copying files for distro: CentOS-7-x86_64
trying hardlink /var/www/cobbler/ks_mirror/CentOS-7-x86_64/images/pxeboot/vmlinuz -> /var/lib/tftpboot/images/CentOS-7-x86_64/vmlinuz
trying hardlink /var/www/cobbler/ks_mirror/CentOS-7-x86_64/images/pxeboot/initrd.img -> /var/lib/tftpboot/images/CentOS-7-x86_64/initrd.img
copying images
generating PXE configuration files
generating PXE menu structure
copying files for distro: CentOS-7-x86_64
trying hardlink /var/www/cobbler/ks_mirror/CentOS-7-x86_64/images/pxeboot/vmlinuz -> /var/www/cobbler/images/CentOS-7-x86_64/vmlinuz
trying hardlink /var/www/cobbler/ks_mirror/CentOS-7-x86_64/images/pxeboot/initrd.img -> /var/www/cobbler/images/CentOS-7-x86_64/initrd.img
Writing template files for CentOS-7-x86_64
rendering DHCP files
generating /etc/dhcp/dhcpd.conf
rendering TFTPD files
generating /etc/xinetd.d/tftp
processing boot_files for distro: CentOS-7-x86_64
cleaning link caches
running post-sync triggers
running python triggers from /var/lib/cobbler/triggers/sync/post/*
running python trigger cobbler.modules.sync_post_restart_services
running: dhcpd -t -q
received on stdout: 
received on stderr: 
running: service dhcpd restart
received on stdout: 
received on stderr: Redirecting to /bin/systemctl restart dhcpd.service

running shell triggers from /var/lib/cobbler/triggers/sync/post/*
running python triggers from /var/lib/cobbler/triggers/change/*
running python trigger cobbler.modules.manage_genders
running python trigger cobbler.modules.scm_track
running shell triggers from /var/lib/cobbler/triggers/change/*
*** TASK COMPLETE ***

# 为避免发生未知问题，先把服务端所有服务重启
[root@localhost ~]# systemctl restart xinetd
[root@localhost ~]# systemctl restart cobblerd
[root@localhost ~]# systemctl restart httpd
[root@localhost ~]# ss -antl
State       Recv-Q Send-Q Local Address:Port               Peer Address:Port              
LISTEN      0      100    127.0.0.1:25                        *:*                  
LISTEN      0      5      127.0.0.1:25151                     *:*                  
LISTEN      0      128           *:22                        *:*                  
LISTEN      0      100       [::1]:25                     [::]:*                  
LISTEN      0      128        [::]:443                    [::]:*                  
LISTEN      0      128        [::]:80                     [::]:*                  
LISTEN      0      128        [::]:22                     [::]:*