Cobbler自动化部署最佳实践

[root@cobbler-node1 ~]# cat /etc/redhat-release # 系统版本

CentOS Linux release 7.1.1503 (Core)

[root@cobbler-node1 ~]# uname –r # 内核版本

3.10.0-229.el7.x86_64

[root@cobbler-node1 ~]# getenforce # 检测 selinux 是否关闭 ( 必须关闭 )

Disabled

[root@cobbler-node1 ~]# systemctl stop firewalld # 关闭防火墙

[root@cobbler-node1 ~]# ifconfig eth0|awk -F ‘[ :]+’ ‘NR==2 {print $3}’ # 查看 IP 地址

10.0.0.101

[root@cobbler-node1 ~]# hostname # 查看主机名

cobbler-node1

[root@cobbler-node1 ~]# wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo #cobbler 安装必须使用到 epel 源

提示：

虚拟机网卡采用NAT模式，因为我们会搭建DHCP服务器，在同一局域网多个DHCP服务会有冲突，并且导致实践失败。

[root@cobbler-node1 ~]# yum install cobbler cobbler-web pykickstart httpd

cobbler  #cobbler 程序包

cobbler-web  #cobbler 的 web 服务包

pykickstart  #cobbler 检查 kickstart 语法错误

httpd       #Apache web 服务

/etc/cobbler                   # 配置文件目录

/etc/cobbler/settings         # cobbler 主配置文件

/etc/cobbler/dhcp.template    # DHCP 服务的配置模板

/etc/cobbler/tftpd.template   # tftp 服务的配置模板

/etc/cobbler/rsync.template  # rsync 服务的配置模板

/etc/cobbler/iso              # iso 模板配置文件目录

/etc/cobbler/pxe              # pxe 模板文件目录

/etc/cobbler/power             # 电源的配置文件目录

/etc/cobbler/users.conf       # Web 服务授权配置文件

/etc/cobbler/users.digest     # web 访问的用户名密码配置文件

/etc/cobbler/dnsmasq.template # DNS 服务的配置模板

/etc/cobbler/modules.conf     # Cobbler 模块配置文件

/var/lib/cobbler               # Cobbler 数据目录

/var/lib/cobbler/config       # 配置文件

/var/lib/cobbler/kickstarts   # 默认存放 kickstart 文件

/var/lib/cobbler/loaders      # 存放的各种引导程序

/var/www/cobbler               # 系统安装镜像目录

/var/www/cobbler/ks_mirror    # 导入的系统镜像列表

/var/www/cobbler/images       # 导入的系统镜像启动文件

/var/www/cobbler/repo_mirror   # yum 源存储目录

/var/log/cobbler               # 日志目录

/var/log/cobbler/install.log   # 客户端系统安装日志

/var/log/cobbler/cobbler.log   # cobbler 日志

[root@cobbler-node1 ~]# systemctl start httpd # 启动 apache 服务

[root@cobbler-node1 ~]# systemctl start cobblerd # 启动 cobbler 程序

[root@cobbler-node1 ~]# cobbler check # 检查存在的问题 , 逐一解决

The following are potential configuration items that you may want to fix:

1 :The ‘server’ field in /etc/cobbler/settings must be set to something other than
localhost, or kickstarting features will not work.  This should be a resolvable hostname or IP
for the boot server as reachable by all machines that will use it.

2 :For PXE to be functional, the ‘next_server’ field in /etc/cobbler/settings must
be set to something other than 127.0.0.1, and should match the IP of the boot
server on the PXE network.

3 :change ‘disable’ to ‘no’ in /etc/xinetd.d/tftp

4 :some network boot-loaders are missing from /var/lib/cobbler/loaders, you may run ‘cobbler get-loaders’ to download them, or, if you only want to handle
x86/x86_64 netbooting, you may ensure that you have installed a *recent* version of the syslinux package installed and can ignore this message entirely.  Files in this directory, should you want to support all architectures, should include pxelinux.0, menu.c32, elilo.efi, and
yaboot. The ‘cobbler get-loaders’ command is the easiest way to resolve these requirements.

5 :enable and start rsyncd.service with systemctl

6 :debmirror package is not installed, it will be required to manage debian deployments and repositories

7 :The default password used by the sample templates for newly installed machines
(default_password_crypted in /etc/cobbler/settings) is still set to ‘cobbler’
and should be changed, try: “openssl passwd -1 -salt ‘random-phrase-here’
‘your-password-here'” to generate new one

8 :fencing tools were not found, and are required to use the (optional) power management features. install cman or fence-agents to use them

Restart
cobblerd and then run ‘cobbler sync’ to apply changes.

如上各问题的解决方法如下所示：

1 、修改 /etc/cobbler/settings 文件中的 server 参数的值为提供 cobbler 服务的主机相应的 IP 地址或主机名，如 server: 10.0.0.101 ；

[root@cobbler-node1 ~]# sed -i ‘s/server: 127.0.0.1/server: 10.0.0.101/’ /etc/cobbler/settings

2 、修改 /etc/cobbler/settings 文件中的 next_server 参数的值为提供 PXE 服务的主机相应的 IP 地址，如 next_server: 10.0.0.101 ；

[root@cobbler-node1 ~]# sed -i ‘s/next_server: 127.0.0.1/next_server: 10.0.0.101/’ /etc/cobbler/settings

3 、修改 /etc/xinetd.d/tftp 文件中的 disable 参数修改为 disable = no

4 、执行 cobbler get-loaders 命令即可；否则，需要安装 syslinux 程序包，而后复制 /usr/share/syslinux/{pxelinux.0,memu.c32} 等文件至 /var/lib/cobbler/loaders/ 目录中；

5 、执行 systemctl enable rsyncd 命令即可；

6 、如果有强迫症可以选择 yum –y install debmirror 然后根据错误进行解决 , 一般错误如下。

注释 /etc/dedmirror.conf 文件中的 @dists=”sid”;  @arches=”i386”;

7 、 [root@cobbler-node1 ~]# openssl passwd -1 -salt ‘$(openssl rand -hex 4)’ ‘xuliangwei’

$1$$(openss$.wbDUBV/STL0YaNuAcusK/

[root@cobbler-node1~]# grep “default_password_crypted” /etc/cobbler/settings   # 替换 /etc/cobbler/setting 内的 default_password_crypted

default_password_crypted:”$1$$(openss$.wbDUBV/STL0YaNuAcusK/”

8 、 yum –y install cman fence-agents

最后重启 Cobbler ： systemctl restart cobblerd

[root@cobbler-node1~]# sed -i ‘s#manage_dhcp: 0#manage_dhcp: 1#g’ /etc/cobbler/settings # 使用 cobbler 管理 dhcp

[root@cobbler-node1~]# vim /etc/cobbler/dhcp.template # 修改 cobbler 的 dhcp 模版，因为 cobbler 会替换。

subnet 10.0.0.0 netmask 255.255.255.0 {

option routers             10.0.0.2;

option domain-name-servers 10.0.0.2;

option subnet-mask         255.255.255.0;

range dynamic-bootp        10.0.0.200 10.0.0.250;

default-lease-time         21600;

max-lease-time             43200;

next-server                $next_server;

[root@cobbler-node1~]# systemctl restart xinetd # 重启 xinetd

[root@cobbler-node1~]# systemctl restart cobblerd # 重启 cobbler

[root@cobbler-node1~]# cobbler sync # 同步最新 cobbler 配置，可以看具体做了哪些操作

task started: 2016-04-29_234117_sync

task started (id=Sync, time=Fri Apr 29 23:41:17 2016)

running pre-sync triggers

cleaning trees

removing: /var/lib/tftpboot/pxelinux.cfg/default

removing: /var/lib/tftpboot/grub/images

removing: /var/lib/tftpboot/grub/grub-x86.efi

removing: /var/lib/tftpboot/grub/grub-x86_64.efi

removing: /var/lib/tftpboot/grub/efidefault

removing: /var/lib/tftpboot/s390x/profile_list

copying bootloaders

trying hardlink /var/lib/cobbler/loaders/grub-x86.efi -> /var/lib/tftpboot/grub/grub-x86.efi

trying hardlink /var/lib/cobbler/loaders/grub-x86_64.efi -> /var/lib/tftpboot/grub/grub-x86_64.efi

copying distros to tftpboot

copying images

generating PXE configuration files

generating PXE menu structure

rendering DHCP files

generating /etc/dhcp/dhcpd.conf

rendering TFTPD files

generating /etc/xinetd.d/tftp

cleaning link caches

running post-sync triggers

running python triggers from /var/lib/cobbler/triggers/sync/post/*

running python trigger cobbler.modules.sync_post_restart_services

running: dhcpd -t -q

received on stdout:

received on stderr:

running: service dhcpd restart

received on stdout:

received on stderr: Redirecting to /bin/systemctl restart  dhcpd.service

running shell triggers from /var/lib/cobbler/triggers/sync/post/*

running python triggers from /var/lib/cobbler/triggers/change/*

running python trigger cobbler.modules.scm_track

running shell triggers from /var/lib/cobbler/triggers/change/*

***
TASK COMPLETE ***

[root@cobbler-node1 ~]# mount /dev/cdrom /mnt/ # 挂在 ISO 光盘至服务器

mount:/dev/sr0 is write-protected, mounting read-only

[root@cobbler-node1 ~]# cobbler import –path=/mnt/ –name=CentOS-7.1-x86_64-distro –arch=x86_64

# –path 镜像路径

# –name 为安装源定义一个名字

# –arch 指定安装源是 32 位、 64 位、 ia64, 目前支持的选项有 : x86│x86_64│ia64

# 安装源的唯一标示就是根据 name 参数来定义，本例导入成功后，安装源的唯一标示就是： CentOS-7.1- distro -x86_64 。

# 镜像存放目录， cobbler 会将镜像中的所有安装文件拷贝到本地一份，放在 /var/www/cobbler/ks_mirror 下的 CentOS-7.1-x86_64-distro-x86_64 目录下。因此 /var/www/cobbler 目录必须具有足够容纳安装文件的空间。

task started: 2016-04-30_010122_import

task started (id=Media import, time=Sat Apr 30 01:01:22 2016)

Found a candidate signature: breed=redhat, version=rhel6

Found a candidate signature: breed=redhat, version=rhel7

Found a matching signature: breed=redhat, version=rhel7

Adding distros from path /var/www/cobbler/ks_mirror/CentOS-7.1-x86_64-distro-x86_64:

creating new distro: CentOS-7.1-distro-x86_64

trying symlink: /var/www/cobbler/ks_mirror/CentOS-7.1-x86_64-distro-x86_64 -> /var/www/cobbler/links/CentOS-7.1-distro-x86_64

creating new profile: CentOS-7.1-distro-x86_64

associating repos

checking for rsync repo(s)

checking for rhn repo(s)

checking for yum repo(s)

starting descent into /var/www/cobbler/ks_mirror/CentOS-7.1-x86_64-distro-x86_64 for CentOS-7.1-distro-x86_64

processing repo at : /var/www/cobbler/ks_mirror/CentOS-7.1-x86_64-distro-x86_64

need to process repo/comps: /var/www/cobbler/ks_mirror/CentOS-7.1-x86_64-distro-x86_64

looking for /var/www/cobbler/ks_mirror/CentOS-7.1-x86_64-distro-x86_64/repodata/*comps*.xml

Keeping repodata as-is :/var/www/cobbler/ks_mirror/CentOS-7.1-x86_64-distro-x86_64/repodata

*** TASK COMPLETE ***

[root@cobbler-node1 ~]#  cobbler distro list # 列出所有的 distro

CentOS-7.1-distro-x86_64

[root@cobbler-node1 ~]# cobbler profile list # 导入 distro 会自动生成 profile

CentOS-7.1-distro-x86_64

[root@cobbler-node1 ~]# cobbler repo add –name=base –mirror=http://mirrors.aliyun.com/centos/7/os/x86_64/Packages/ –arch=x86_64 –breed=yum # 添加 yum 源

[root@cobbler-node1 ~]# cobbler reposync # 同步 yum 源

[root@cobbler-node1 ~]# cobbler sync # 每次修改 profile 都需要同步

[root@cobbler-node1 ~]# cobbler system add –name=xuliangwei-pc –mac=00:0C:29:6E:41:CB –profile=Centos7.1-profile-x86_64 /

–ip-address=10.0.0.110 –subnet=255.255.255.0 –gateway=10.0.0.2 –interface=eth0 /

–static=1 –hostname=xuliangwei.com –name-servers=”114.114.114.114 8.8.8.8″

[root@cobbler-node1 ~]# cobbler sync

[root@linux-node1 ~]#  cobbler system list

xuliangwei-pc

[root@cobbler-node1 ~]# grep “xuliangwei” /etc/cobbler/pxe/pxedefault.template # 自定义装机页面

MENU TITLE Xuliangwei | http://xuliangwei.com

[root@cobbler-node1 ~]# cobbler sync # 同步