cobbler无人值守安装

自动化安装系统

前言

作为中小公司的运维，经常会遇到一些机械式的重复工作，例如：有时公司同时上线几十甚至上百台服务器，而且需要我们在短时间内完成系统安装。

 

常规的办法有什么？

 光盘安装系统===>一个服务器DVD内置光驱百千块，百台服务器都配光驱就浪费了，因为一台服务器也就开始装系统能用的上，以后用的机会屈指可数。用USB外置光驱，插来插去也醉了。

 

U盘安装系统===>还是同样的问题，要一台一台服务器插U盘。

 

 网络安装系统(ftp,http,nfs) ===>这个方法不错，只要服务器能联网就可以装系统了，但还是需要一台台服务器去敲键盘点鼠标。时刻想偷懒的我们，有没有更好的方法！

 

高逼格的方法：

 Kickstart

 Cobbler

我们今天的主角，接下来我们就看看它是如何实现linux系统批量自动安装的。

 

 Cobbler介绍

 Cobbler是一个Linux服务器安装的服务，可以通过网络启动(PXE)的方式来快速安装、重装物理服务器和虚拟机，同时还可以管理DHCP，DNS等。

 Cobbler可以使用命令行方式管理，也提供了基于Web的界面管理工具(cobbler-web)，还提供了API接口，可以方便二次开发使用。

 Cobbler是较早前的kickstart的升级版，优点是比较容易配置，还自带web界面比较易于管理。

 

 

 Cobbler集成的服务

• PXE服务支持
• DHCP服务管理
• DNS服务管理(可选bind,dnsmasq)
• 电源管理
• Kickstart服务支持
• YUM仓库管理
• TFTP(PXE启动时需要)
• Apache(提供kickstart的安装源，并提供定制化的kickstart配置)

 部署cobbler

 环境准备

[root@m02 ~]# cat /etc/redhat-release 
CentOS Linux release 7.2.1511 (Core) 
[root@m02 ~]# uname -r
3.10.0-327.el7.x86_64
[root@m02 ~]# getenforce 
Disabled
[root@m02 ~]# systemctl status firewalld.service 
● firewalld.service - firewalld - dynamic firewall daemon
   Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled; vendor preset: enabled)
   Active: inactive (dead)
[root@m02 ~]# hostname -I
10.0.0.62 172.16.1.62

curl -o /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo
优化yum源

 

 安装cobbler

yum -y install cobbler cobbler-web dhcp tftp-server pykickstart httpd python-django
systemctl start cobblerd.service 
systemctl start httpd.service

执行 cobbler check  #照提示一个一个修正。


[root@Cobbler ~]# systemctl start cobblerd.service 
[root@Cobbler ~]# systemctl start httpd.service 
[root@Cobbler ~]# 
[root@Cobbler ~]# cobbler check
The following are potential configuration items that you may want to fix:

1 : The 'server' field in /etc/cobbler/settings must be set to something other than localhost, or kickstarting features will not work.  This should be a resolvable hostname or IP for the boot server as reachable by all machines that will use it.   在/etc/cobbler/settings中的server配置需要修改，将127.0.0.1修改为172.16.1.202


2 : For PXE to be functional, the 'next_server' field in /etc/cobbler/settings must be set to something other than 127.0.0.1, and should match the IP of the boot server on the PXE network.    在/etc/cobbler/settings中的next_server配置需要修改，将127.0.0.1修改为172.16.1.202


3 : change 'disable' to 'no' in /etc/xinetd.d/tftp  将tftp交给xinetd管理，但是在CentOS7不使用


4 : Some network boot-loaders are missing from /var/lib/cobbler/loaders, you may run 'cobbler get-loaders' to download them, or, if you only want to handle x86/x86_64 netbooting, you may ensure that you have installed a *recent* version of the syslinux package installed and can ignore this message entirely.  Files in this directory, should you want to support all architectures, should include pxelinux.0, menu.c32, elilo.efi, and yaboot. The 'cobbler get-loaders' command is the easiest way to resolve these requirements.

通过cobbler get-loaders下载所有需要的网络启动文件

5 : enable and start rsyncd.service with systemctl     启动rsync服务
6 : debmirror package is not installed, it will be required to manage debian deployments and repositories
7 : The default password used by the sample templates for newly installed machines (default_password_crypted in /etc/cobbler/settings) is still set to 'cobbler' and should be changed, try: "openssl passwd -1 -salt 'random-phrase-here' 'your-password-here'" to generate new one   安装完系统root密码，默认cobbler，需要修改
8 : fencing tools were not found, and are required to use the (optional) power management features. install cman or fence-agents to use them

Restart cobblerd and then run 'cobbler sync' to apply changes.


sed -i 's/server: 127.0.0.1/server: 172.16.1.202/' /etc/cobbler/settings
sed -i 's/next_server: 127.0.0.1/next_server: 172.16.1.202/' /etc/cobbler/settings
sed -i 's#yes#no#' /etc/xinetd.d/tftp
#防止误重装
sed -i 's/pxe_just_once: 0/pxe_just_once: 1/' /etc/cobbler/settings
#配置Cobbler统一管理DHCP
sed -i 's/manage_dhcp: 0/manage_dhcp: 1/' /etc/cobbler/settings
# 配置DHCP Cobbler模版
sed -i.ori 's#192.168.1#172.16.1#g;22d;23d' /etc/cobbler/dhcp.template
# 设置root密码
sed -ri "/default_password_crypted/s#(.*: ).*#1"`openssl passwd -1 -salt 'oldboy' '123456'`"#" /etc/cobbler/settings

启动服务 同步配置
systemctl start rsyncd                           启动rsync服务
systemctl start tftp.socket                      启动tftp服务
systemctl restart cobblerd                       重新启动cobbler服务
systemctl enable tftp.socket httpd cobblerd   rsyncd   加入开机自启动
cobbler sync  --刷新配置文件

   至此服务器上配置完成，接下来web操作cobbler

https://10.0.0.202/cobbler_web   账号秘密均为cobbler cobbler

 web操作cobbler

rsync同步系统镜像

mount /dev/cdrom /mnt/  挂载镜像

 

 

 

本质上就是调用了rsync 将/mnt镜像同步到/var/www/cobbler/ks_mirror/CentOS7.2-x86_64目录中

[root@Cobbler ~]# cd  /var/www/cobbler/ks_mirror/
 [root@Cobbler ks_mirror]# ls
CentOS7.2-x86_64  config
[root@Cobbler ks_mirror]# du -sh CentOS7.2-x86_64/
4.2G    CentOS7.2-x86_64/

镜像已经有了

 

 定制ks文件

ks文件下载地址

链接：https://pan.baidu.com/s/1yZNYzBIEHo7XePqt1iaRZg
提取码：8o1i

 使用KS文件

上面是添加成功，来指定一下使用定制的KS文件，并修改网卡名称。

 指定IP地址

设置完成后左上角  Save保存

 最后刷新配置

完成添加镜像，编写KS文件，设置IP地址。最后Sync 刷新一下配置，就可以开电源装系统了

FAQ:

selinux没有关闭

[root@cobbler ~]# cobbler check
httpd does not appear to be running and proxying cobbler, or SELinux is in the way. Original traceback:
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/cobbler/cli.py", line 251, in check_setup
    s.ping()
  File "/usr/lib64/python2.7/xmlrpclib.py", line 1233, in __call__
    return self.__send(self.__name, args)
  File "/usr/lib64/python2.7/xmlrpclib.py", line 1587, in __request
    verbose=self.__verbose
  File "/usr/lib64/python2.7/xmlrpclib.py", line 1273, in request
    return self.single_request(host, handler, request_body, verbose)
  File "/usr/lib64/python2.7/xmlrpclib.py", line 1321, in single_request
    response.msg,
ProtocolError: <ProtocolError for 127.0.0.1:80/cobbler_api: 503 Service Unavailable>

解决：

setenforce  0  && sed '7s#enforcing#disabled#g' /etc/selinux/config -i