cobbler自动化部署工具
cobbler简介
RHEL7默认提供的cobbler是2.6.9版本的，cobbler译文”补鞋匠“网络安装套件cobbler可以同时管理DHCP;DNS;YUM等，现在随便一家互联网公司机器数量成千上万，这个时候我们就不能那个U盘，或者光盘一台台的装，然后诞生了PXE+TFTP+DHCP+Kickstart（俗称PXE）然而PXE不能同时部署多种版本的系统，然而cobbler可以部署多种系统如centos5，6，7;redhat 5，6，7；cobbler还可以部署windows系统。该工具由python语言开发，支持web界面管理十分灵活。
PXE自动化部署参考：http://mictiger.blog.51cto.com/4854014/1577008
配置yum源
cobbler centos源没有cobbler包组，它是由epel提供，但是其依赖的软件包又是centos所提供，所以我们配置centos，epel 两个yum源
[[email protected] yum.repos.d]# cat aliyun.repo [epel] name=ailiyun baseurl=http://mirrors.aliyun.com/epel/7/x86_64/ enabled=1 gpgcheck=0 [centos] name=cobbler baseurl=http://mirrors.aliyun.com/centos/7/os/x86_64/ enabled=1 gpgcheck=0
开始安装
[[email protected] yum.repos.d]# yum install cobbler cobbler-web pykickstart debmirror [[email protected] ~]# rpm -qi cobbler Name : cobbler Version : 2.6.9 Release : 1.el7 Architecture: noarch Install Date: Thu 20 Aug 2015 09:00:46 PM CST Group : Applications/System Size : 2177634 License : GPLv2+ Signature : RSA/SHA256, Wed 24 Jun 2015 04:36:07 AM CST, Key ID 6a2faea2352c64e5 Source RPM : cobbler-2.6.9-1.el7.src.rpm Build Date : Tue 23 Jun 2015 02:06:19 AM CST Build Host : buildppc-02.phx2.fedoraproject.org Relocations : (not relocatable) Packager : Fedora Project Vendor : Fedora Project URL : http://www.cobblerd.org/ Summary : Boot server configurator Description : Cobbler is a network install server. Cobbler supports PXE, ISO virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, 'koan', that integrates with cobbler. There is also a web interface 'cobbler-web'. Cobbler's advanced features include importing distributions from DVDs and rsync mirrors, kickstart templating, integrated yum mirroring, and built-in DHCP/DNS Management. Cobbler has a XMLRPC API for integration with other applications.
启动cobbler，httpd服务
[[email protected] ~]# systemctl start httpd.service [[email protected] ~]# systemctl start cobblerd.service
关闭selinux
[[email protected] ~]# cat /etc/selinux/config # This file controls the state of SELinux on the system. # SELINUX= can take one of these three values: # enforcing - SELinux security policy is enforced. # permissive - SELinux prints warnings instead of enforcing. # disabled - No SELinux policy is loaded. SELINUX=disabled # SELINUXTYPE= can take one of these two values: # targeted - Targeted processes are protected, # minimum - Modification of targeted policy. Only selected processes are protected. # mls - Multi Level Security protection. SELINUXTYPE=targeted [[email protected] ~]# getenforce Permissive 或者 Disabled [[email protected] ~]# cobbler check The following are potential configuration items that you may want to fix: 1 : The 'server' field in /etc/cobbler/settings must be set to something other than localhost, or kickstarting features will not work. This should be a resolvable hostname or IP for the boot server as reachable by all machines that will use it. 2 : For PXE to be functional, the 'next_server' field in /etc/cobbler/settings must be set to something other than 127.0.0.1, and should match the IP of the boot server on the PXE network. 3 : SELinux is enabled. Please review the following wiki page for details on ensuring cobbler works correctly in your SELinux environment: https://github.com/cobbler/cobbler/wiki/Selinux 4 : change 'disable' to 'no' in /etc/xinetd.d/tftp 5 : some network boot-loaders are missing from /var/lib/cobbler/loaders, you may run 'cobbler get-loaders' to download them, or, if you only want to handle x86/x86_64 netbooting, you may ensure that you have installed a *recent* version of the syslinux package installed and can ignore this message entirely. Files in this directory, should you want to support all architectures, should include pxelinux.0, menu.c32, elilo.efi, and yaboot. The 'cobbler get-loaders' command is the easiest way to resolve these requirements. 6 : file /etc/xinetd.d/rsync does not exist 7 : debmirror package is not installed, it will be required to manage debian deployments and repositories 8 : The default password used by the sample templates for newly installed machines (default_password_crypted in /etc/cobbler/settings) is still set to 'cobbler' and should be changed, try: "openssl passwd -1 -salt 'random-phrase-here' 'your-password-here'" to generate new one 9 : fencing tools were not found, and are required to use the (optional) power management features. install cman or fence-agents to use them Restart cobblerd and then run 'cobbler sync' to apply changes.
解决以上报告信息
修改参数
修改 /etc/cobbler/settings next_server: 192.168.3.100 server: 192.168.3.100 [[email protected] ~]# cobbler get-loaders 如果网络不行可以直接去 http://cobbler.github.com/loaders/下载COPYING.elilo COPYING.syslinux COPYING.yaboot elilo-ia64.efi grub-x86_64.efi grub-x86.efi menu.c32 pxelinux.0 README yaboot这些软件包 [[email protected] ~]# cobbler get-loaders task started: 2015-08-20_215034_get_loaders task started (id=Download Bootloader Content, time=Thu Aug 20 21:50:34 2015) downloading http://cobbler.github.com/loaders/README to /var/lib/cobbler/loaders/README [[email protected] ~]# yum install fence-agents cman 注释/etc/debmirror.conf 中以下两项 #@dists="sid"; #@arches="i386"; [[email protected] ~]# openssl passwd -1 -salt `openssl rand -hex 4` Password: $1$a6a60411$ltytuO4WzxCYFOJhNFIlh1 [[email protected] ~]# vim /etc/cobbler/settings default_password_crypted: "$1$a6a60411$ltytuO4WzxCYFOJhNFIlh1"
检查是否配置完成
[[email protected] ~]# cobbler check No configuration problems found. All systems go. 安装配置DHCP [[email protected] ~]# yum install dhcp [[email protected] loaders]# vim /etc/dhcp/dhcpd.conf default-lease-time 86400; max-lease-time 7200; log-facility local7; subnet 192.168.3.0 netmask 255.255.255.0 { range 192.168.3.105 192.168.3.120; option routers 192.168.3.100; } next-server 192.168.3.100; filename="pxelinux.0";
准备安装yum
[[email protected] media]# mkdir centos6 [[email protected] media]# mkdir centos7 [[email protected] ~]# mount -o loop CentOS-6.6-x86_64-bin-DVD1.iso /media/centos6 [[email protected] ~]# mount -o loop CentOS-7.0-1406-x86_64-DVD.iso /media/centos7
安装system-config-kickstart 用于编写ks.cfg文件基于系统的anaconda-ks.cfg这个文件是本系统安装中的配置
[[email protected] ~]# yum install system-config-kickstart [[email protected] ~]# system-config-kickstart
导入系统镜像
[[email protected] ~]# cobbler import --name="centos6" --path=/media/centos6 [[email protected] ~]# cobbler distro list centos6-x86_64 [[email protected] cobbler]# cobbler profile add --name=centos6.6 --distro=centos6-x86_64 --kickstart=/var/lib/cobbler/kickstarts/centos6.cfg [[email protected] cobbler]# cobbler profile list centos6-x86_64 centos6.6
配置完成后一定要sync
[[email protected] ~]# cobbler sync task started: 2015-08-22_011824_sync task started (id=Sync, time=Sat Aug 22 01:18:24 2015) running pre-sync triggers cleaning trees removing: /var/www/cobbler/p_w_picpaths/centos6-x86_64 removing: /var/lib/tftpboot/pxelinux.cfg/default removing: /var/lib/tftpboot/grub/p_w_picpaths removing: /var/lib/tftpboot/grub/grub-x86_64.efi removing: /var/lib/tftpboot/grub/grub-x86.efi removing: /var/lib/tftpboot/grub/efidefault removing: /var/lib/tftpboot/p_w_picpaths/centos6-x86_64 removing: /var/lib/tftpboot/s390x/profile_list copying bootloaders trying hardlink /var/lib/cobbler/loaders/pxelinux.0 -> /var/lib/tftpboot/pxelinux.0 copying: /var/lib/cobbler/loaders/pxelinux.0 -> /var/lib/tftpboot/pxelinux.0 trying hardlink /var/lib/cobbler/loaders/menu.c32 -> /var/lib/tftpboot/menu.c32 copying: /var/lib/cobbler/loaders/menu.c32 -> /var/lib/tftpboot/menu.c32 trying hardlink /var/lib/cobbler/loaders/yaboot -> /var/lib/tftpboot/yaboot copying: /var/lib/cobbler/loaders/yaboot -> /var/lib/tftpboot/yaboot trying hardlink /var/lib/cobbler/loaders/grub-x86_64.efi -> /var/lib/tftpboot/grub/grub-x86_64.efi trying hardlink /var/lib/cobbler/loaders/grub-x86.efi -> /var/lib/tftpboot/grub/grub-x86.efi copying distros to tftpboot copying files for distro: centos6-x86_64 trying hardlink /var/www/cobbler/ks_mirror/centos6/p_w_picpaths/pxeboot/vmlinuz -> /var/lib/tftpboot/p_w_picpaths/centos6-x86_64/vmlinuz trying hardlink /var/www/cobbler/ks_mirror/centos6/p_w_picpaths/pxeboot/initrd.img -> /var/lib/tftpboot/p_w_picpaths/centos6-x86_64/initrd.img copying p_w_picpaths generating PXE configuration files generating PXE menu structure copying files for distro: centos6-x86_64 trying hardlink /var/www/cobbler/ks_mirror/centos6/p_w_picpaths/pxeboot/vmlinuz -> /var/www/cobbler/p_w_picpaths/centos6-x86_64/vmlinuz trying hardlink /var/www/cobbler/ks_mirror/centos6/p_w_picpaths/pxeboot/initrd.img -> /var/www/cobbler/p_w_picpaths/centos6-x86_64/initrd.img Writing template files for centos6-x86_64 rendering TFTPD files generating /etc/xinetd.d/tftp processing boot_files for distro: centos6-x86_64 cleaning link caches running post-sync triggers running python triggers from /var/lib/cobbler/triggers/sync/post/* running python trigger cobbler.modules.sync_post_restart_services running shell triggers from /var/lib/cobbler/triggers/sync/post/* running python triggers from /var/lib/cobbler/triggers/change/* running python trigger cobbler.modules.scm_track running shell triggers from /var/lib/cobbler/triggers/change/* *** TASK COMPLETE ***
查看是否配置成功
[[email protected] cobbler]# cat /var/lib/tftpboot/pxelinux.cfg/default DEFAULT menu PROMPT 0 MENU TITLE Cobbler | http://cobbler.github.com TIMEOUT 200 TOTALTIMEOUT 6000 ONTIMEOUT local LABEL local MENU LABEL (local) MENU DEFAULT LOCALBOOT -1 LABEL centos6-x86_64 kernel /p_w_picpaths/centos6-x86_64/vmlinuz MENU LABEL centos6-x86_64 append initrd=/p_w_picpaths/centos6-x86_64/initrd.img ksdevice=bootif lang= kssendmac text ks=http://192.168.3.100/cblr/svc/op/ks/profile/centos6-x86_64 ipappend 2 LABEL centos6.6 kernel /p_w_picpaths/centos6-x86_64/vmlinuz MENU LABEL centos6.6 append initrd=/p_w_picpaths/centos6-x86_64/initrd.img ksdevice=bootif lang= kssendmac text ks=http://192.168.3.100/cblr/svc/op/ks/profile/centos6.6 ipappend 2
开始安装
配置cobbler安装Centos7
[[email protected] ~]# cobbler import --name="centos7" --path=/media/centos7 task started: 2015-08-22_014024_import task started (id=Media import, time=Sat Aug 22 01:40:24 2015) Found a candidate signature: breed=redhat, version=rhel6 Found a candidate signature: breed=redhat, version=rhel7 Found a matching signature: breed=redhat, version=rhel7 Adding distros from path /var/www/cobbler/ks_mirror/centos7: creating new distro: centos7-x86_64 trying symlink: /var/www/cobbler/ks_mirror/centos7 -> /var/www/cobbler/links/centos7-x86_64 creating new profile: centos7-x86_64 associating repos checking for rsync repo(s) checking for rhn repo(s) checking for yum repo(s) starting descent into /var/www/cobbler/ks_mirror/centos7 for centos7-x86_64 processing repo at : /var/www/cobbler/ks_mirror/centos7 need to process repo/comps: /var/www/cobbler/ks_mirror/centos7 looking for /var/www/cobbler/ks_mirror/centos7/repodata/*comps*.xml Keeping repodata as-is :/var/www/cobbler/ks_mirror/centos7/repodata *** TASK COMPLETE *** [[email protected] ~]# cobbler distro list centos6-x86_64 centos7-x86_64
出现以下问题是要将做好的ks移动到 /var/lib/cobbler/kickstarts/ 这个路径是专门存放ks文件模板的
[[email protected] ks]# cobbler profile add --distro="centos7-x86_64" --name=centos7 --kickstart=/root/ks/centos7.cfg exception on server: 'Invalid kickstart template file location /root/ks/centos7.cfg, it is not inside /var/lib/cobbler/kickstarts/'
[[email protected] ks]# cobbler profile add --distro="centos7-x86_64" --name=centos7 --kickstart=/var/lib/cobbler/kickstarts/centos7.cfg [[email protected] ks]# cobbler sync task started: 2015-08-22_015615_sync task started (id=Sync, time=Sat Aug 22 01:56:15 2015) running pre-sync triggers cleaning trees removing: /var/www/cobbler/p_w_picpaths/centos6-x86_64 removing: /var/www/cobbler/p_w_picpaths/centos7-x86_64 removing: /var/lib/tftpboot/pxelinux.cfg/default removing: /var/lib/tftpboot/grub/p_w_picpaths removing: /var/lib/tftpboot/grub/grub-x86_64.efi removing: /var/lib/tftpboot/grub/grub-x86.efi removing: /var/lib/tftpboot/grub/efidefault removing: /var/lib/tftpboot/p_w_picpaths/centos6-x86_64 removing: /var/lib/tftpboot/p_w_picpaths/centos7-x86_64 removing: /var/lib/tftpboot/s390x/profile_list copying bootloaders trying hardlink /var/lib/cobbler/loaders/pxelinux.0 -> /var/lib/tftpboot/pxelinux.0 copying: /var/lib/cobbler/loaders/pxelinux.0 -> /var/lib/tftpboot/pxelinux.0 trying hardlink /var/lib/cobbler/loaders/menu.c32 -> /var/lib/tftpboot/menu.c32 copying: /var/lib/cobbler/loaders/menu.c32 -> /var/lib/tftpboot/menu.c32 trying hardlink /var/lib/cobbler/loaders/yaboot -> /var/lib/tftpboot/yaboot copying: /var/lib/cobbler/loaders/yaboot -> /var/lib/tftpboot/yaboot trying hardlink /var/lib/cobbler/loaders/grub-x86_64.efi -> /var/lib/tftpboot/grub/grub-x86_64.efi trying hardlink /var/lib/cobbler/loaders/grub-x86.efi -> /var/lib/tftpboot/grub/grub-x86.efi copying distros to tftpboot copying files for distro: centos7-x86_64 trying hardlink /var/www/cobbler/ks_mirror/centos7/p_w_picpaths/pxeboot/vmlinuz -> /var/lib/tftpboot/p_w_picpaths/centos7-x86_64/vmlinuz trying hardlink /var/www/cobbler/ks_mirror/centos7/p_w_picpaths/pxeboot/initrd.img -> /var/lib/tftpboot/p_w_picpaths/centos7-x86_64/initrd.img copying files for distro: centos6-x86_64 trying hardlink /var/www/cobbler/ks_mirror/centos6/p_w_picpaths/pxeboot/vmlinuz -> /var/lib/tftpboot/p_w_picpaths/centos6-x86_64/vmlinuz trying hardlink /var/www/cobbler/ks_mirror/centos6/p_w_picpaths/pxeboot/initrd.img -> /var/lib/tftpboot/p_w_picpaths/centos6-x86_64/initrd.img copying p_w_picpaths generating PXE configuration files generating PXE menu structure copying files for distro: centos7-x86_64 trying hardlink /var/www/cobbler/ks_mirror/centos7/p_w_picpaths/pxeboot/vmlinuz -> /var/www/cobbler/p_w_picpaths/centos7-x86_64/vmlinuz trying hardlink /var/www/cobbler/ks_mirror/centos7/p_w_picpaths/pxeboot/initrd.img -> /var/www/cobbler/p_w_picpaths/centos7-x86_64/initrd.img Writing template files for centos7-x86_64 copying files for distro: centos6-x86_64 trying hardlink /var/www/cobbler/ks_mirror/centos6/p_w_picpaths/pxeboot/vmlinuz -> /var/www/cobbler/p_w_picpaths/centos6-x86_64/vmlinuz trying hardlink /var/www/cobbler/ks_mirror/centos6/p_w_picpaths/pxeboot/initrd.img -> /var/www/cobbler/p_w_picpaths/centos6-x86_64/initrd.img Writing template files for centos6-x86_64 rendering TFTPD files generating /etc/xinetd.d/tftp processing boot_files for distro: centos7-x86_64 processing boot_files for distro: centos6-x86_64 cleaning link caches running post-sync triggers running python triggers from /var/lib/cobbler/triggers/sync/post/* running python trigger cobbler.modules.sync_post_restart_services running shell triggers from /var/lib/cobbler/triggers/sync/post/* running python triggers from /var/lib/cobbler/triggers/change/* running python trigger cobbler.modules.scm_track running shell triggers from /var/lib/cobbler/triggers/change/* *** TASK COMPLETE *** [[email protected] ks]# cobbler profile list centos6-x86_64 centos6.6 centos7 centos7-x86_64
开始安装
附上我自己的ks文件参考
[[email protected] ks]# cat centos6.cfg #platform=x86, AMD64, or Intel EM64T #version=DEVEL # Install OS instead of upgrade install # Keyboard layouts keyboard 'us'# Reboot after installation reboot # Root password rootpw --iscrypted $1$JrbIN3YW$buJKv8Y7FfZhCEhOg/eD01 # System timezone timezone Asia/Chongqing --isUtc # Use network installation url --url="http://192.168.3.100/cobbler/ks_mirror/centos6/" # System language lang en_US # Firewall configuration firewall --disabled # Network information network --bootproto=dhcp --device=eth0 # System authorization information auth --useshadow --passalgo=sha512 # Use graphical install graphical firstboot --disable # SELinux configuration selinux --disabled # Installation logging level logging --level=info # System bootloader configuration bootloader --append="crashkernel=auto rhgb quiet" --location=mbr --driveorder="sda" # Clear the Master Boot Record zerombr # Partition clearing information clearpart --all --initlabel # Disk partitioning information part /boot --fstype="ext4" --size=500 part pv.008002 --grow --size=1 %packages @base @basic-desktop @core @debugging @desktop Platform Development @desktop-debugging @desktop-platform @development tools @directory-client @fonts @input-methods @internet-browser @java-platform @legacy-x @network-file-system-client @print-client @remote-desktop-clients @server Platform Development @server-platform @server-policy @x11 %end
centos7 ks文件
[[email protected] ks]# cat centos7.cfg #platform=x86, AMD64, or Intel EM64T #version=DEVEL # Install OS instead of upgrade install # X Window System configuration information xconfig --startxonboot # Keyboard layouts # old format: keyboard us # new format: keyboard --vckeymap=us --xlayouts='us' # Halt after installation reboot # Root password rootpw --iscrypted $1$L7lKtlWj$DvBzrvndeOQd7EHfRGOnj/ # System timezone timezone Asia/Chongqing --isUtc --nontp # Use network installation url --url="http://192.168.3.100/cobbler/ks_mirror/centos7/" # System language lang en_US --addsupport=zh_CN.UTF-8 # Firewall configuration firewall --disabled # Network information network --bootproto=dhcp --device=eno16777736 network --bootproto=dhcp --device=None # System authorization information auth --useshadow --passalgo=sha512 # Use graphical install graphical # Run the Setup Agent on first boot firstboot --enable # SELinux configuration selinux --disabled ignoredisk --only-use=sda # System bootloader configuration bootloader --location=mbr --boot-drive=sda # Clear the Master Boot Record zerombr # Partition clearing information clearpart --all --initlabel # Disk partitioning information part pv.10 --fstype="lvmpv" --ondisk=sda --size=35339 part /boot --fstype="xfs" --ondisk=sda --size=500 volgroup centos --pesize=4096 pv.10 logvol / --fstype="xfs" --grow --maxsize=51200 --size=1024 --name=root --vgname=centos logvol swap --fstype="swap" --size=2064 --name=swap --vgname=centos %packages @base @core @desktop-debugging @dial-up @directory-client @fonts @guest-agents @guest-desktop-agents @input-methods @internet-browser @java-platform @kde-desktop @multimedia @network-file-system-client @print-client @x11 %end
cobbler web界面配置
使用系统用户（pam）或者configfile定义用户登录管理cobbler web
[authentication] #module = authn_configfile （默认值） module = authn_pam
[[email protected] ~]# vim /etc/cobbler/modules.conf [[email protected] ~]# useradd cobbler [[email protected] ~]# echo "cobbler" | passwd --stdin cobbler Changing password for user cobbler. passwd: all authentication tokens updated successfully. [[email protected] ~]# vim /etc/cobbler/users.conf [admins] admin = "cobbler"
[[email protected] ~]# vim /etc/cobbler/modules.conf [authentication] module = authn_configfile [[email protected] ~]# htdigest /etc/cobbler/users.digest "Cobbler" admin Adding user admin in realm Cobbler New password: Re-type new password:
未完待续