Linux 运维自动化之Cobbler安装与配置

499次阅读

共计 10657 个字符，预计需要花费 27 分钟才能阅读完成。

大纲
一、前言
二、环境配置
三、Cobbler 安装
四、Cobbler 配置详解
注，操作系统 CentOS 6.4 x86_64，软件版本 Cobbler-2.4.0-1。（目前最新版）

一、前言
在上一篇博客中（http://www.linuxidc.com/Linux/2013-11/92302.htm）我们主要讲解与 Cobbler 相关的基础知识，在一篇博客中我们主要中大家来说一下 Cobbler 安装与配置，并且详细说一下 Cobbler 命令的使用。好了，废话不多说下面直接上干货。

二、环境配置
1. 实验拓扑

Linux 运维自动化之 Cobbler 安装与配置

2. 安装 yum 源
[root@node2 ~]# rpm -ivh http://download.Fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm
Retrieving http://download.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm
warning: /var/tmp/rpm-tmp.z0cbxV: Header V3 RSA/SHA256 Signature, key ID 0608b895: NOKEY
Preparing… ########################################### [100%]
1:epel-release ########################################### [100%]

3. 同步系统时间
[root@node2 ~]# yum install -y ntp
[root@node2 ~]# ntpdate 202.120.2.101
4 Nov 13:49:41 ntpdate[1190]: step time server 202.120.2.101 offset 388653.714776 sec
[root@node2 ~]# hwclock -w

4. 关闭防火墙与 SELinux
[root@node2 ~]# service iptables stop
[root@node2 ~]# chkconfig iptables off
[root@node2 ~]# getenforce
Disabled

更多详情见请继续阅读下一页的精彩内容：http://www.linuxidc.com/Linux/2013-11/92319p2.htm

相关阅读：

Linux 运维工程师笔试题 http://www.linuxidc.com/Linux/2013-09/90621.htm

运维自动化之 Cobbler 安装配置 http://www.linuxidc.com/Linux/2013-03/81575.htm

RHEL5.5 下 Cobbler 的配置 http://www.linuxidc.com/Linux/2013-06/86115.htm

运维自动化部署 Cobbler 之服务安装篇 http://www.linuxidc.com/Linux/2013-02/80133.htm

利用 Cobbler 批量快速网络安装 CentOS http://www.linuxidc.com/Linux/2012-12/75838.htm

CentOS 6.3 上安装部署 Cobbler http://www.linuxidc.com/Linux/2012-10/72094.htm

三、Cobbler 安装
1.Cobbler 运行所需基础包
[root@node2 ~]# yum install -y cobbler tftp dhcp httpd cman pykickstart debmirror

2.Cobblerf 所需环境支持包
[root@node2 ~]# yum install -y ed patch perl perl-Compress-Zlib perl-Digest-SHA1 perl-LockFile-Simple perl-libwww-perl

3. 将所有服务加入开机自启动并启动相关服务
[root@node2 ~]# chkconfig httpd on
[root@node2 ~]# chkconfig dhcpd on
[root@node2 ~]# chkconfig xinetd on
[root@node2 ~]# chkconfig cobblerd on
[root@node2 ~]#
[root@node2 ~]# service httpd start
正在启动 httpd：httpd: Could not reliably determine the server’s fully qualified domain name, using node2.test.com for ServerName
[确定]
[root@node2 ~]# service cobblerd start
Starting cobbler daemon: [确定]

4. 修改 apache 相关配置并重新启动
注，从上面的启动信息可以看出 apache 启动有点小错误，我们来修正一下。
[root@node2 ~]# vim /etc/httpd/conf/httpd.conf
# 增加一行
ServerName localhost:80
[root@node2 ~]# service httpd restart
停止 httpd：[确定]
正在启动 httpd：[确定]

5. 运行 Cobbler 检查命令
[root@node2 ~]# cobbler check
The following are potential configuration items that you may want to fix:
1 : The ‘server’ field in /etc/cobbler/settings must be set to something other than localhost, or kickstarting features will not work. This should be a resolvable hostname or IP for the boot server as reachable by all machines that will use it.
2 : For PXE to be functional, the ‘next_server’ field in /etc/cobbler/settings must be set to something other than 127.0.0.1, and should match the IP of the boot server on the PXE network.
3 : some network boot-loaders are missing from /var/lib/cobbler/loaders, you may run ‘cobbler get-loaders’ to download them, or, if you only want to handle x86/x86_64 netbooting, you may ensure that you have installed a *recent* version of the syslinux package installed and can ignore this message entirely. Files in this directory, should you want to support all architectures, should include pxelinux.0, menu.c32, elilo.efi, and yaboot. The ‘cobbler get-loaders’ command is the easiest way to resolve these requirements.
4 : change ‘disable’ to ‘no’ in /etc/xinetd.d/rsync
5 : comment out ‘dists’ on /etc/debmirror.conf for proper debian support
6 : comment out ‘arches’ on /etc/debmirror.conf for proper debian support
7 : The default password used by the sample templates for newly installed machines (default_password_crypted in /etc/cobbler/settings) is still set to ‘cobbler’ and should be changed, try: “openssl passwd -1 -salt ‘random-phrase-here’ ‘your-password-here'” to generate new one
Restart cobblerd and then run ‘cobbler sync’ to apply changes.

注，从上面的执行结果来看上面有 7 处错误，下面我们来解决一下。
(1). 错误 1，修改 /etc/cobbler/settings 里面的 server 为 Cobbler Server 的 IP 地址；
[root@node2 ~]# vim /etc/cobbler/settings
server: 192.168.18.202

(2). 错误 2，修改 /etc/cobbler/settings 里面的 next_serverw 为本机的 ip；
[root@node2 ~]# vim /etc/cobbler/settings
next_server: 192.168.18.202

(3). 错误 3，据说这个错误可以忽略，有强迫完美运行症的人士可以运行以下命令来解决；
[root@node2 ~]# cobbler get-loaders
task started: 2013-11-04_143149_get_loaders
task started (id=Download Bootloader Content, time=Mon Nov 4 14:31:49 2013)
downloading http://www.cobblerd.org/loaders/README to /var/lib/cobbler/loaders/README
downloading http://www.cobblerd.org/loaders/COPYING.elilo to /var/lib/cobbler/loaders/COPYING.elilo
downloading http://www.cobblerd.org/loaders/COPYING.yaboot to /var/lib/cobbler/loaders/COPYING.yaboot
downloading http://www.cobblerd.org/loaders/COPYING.syslinux to /var/lib/cobbler/loaders/COPYING.syslinux
downloading http://www.cobblerd.org/loaders/elilo-3.8-ia64.efi to /var/lib/cobbler/loaders/elilo-ia64.efi
downloading http://www.cobblerd.org/loaders/yaboot-1.3.14-12 to /var/lib/cobbler/loaders/yaboot
downloading http://www.cobblerd.org/loaders/pxelinux.0-3.61 to /var/lib/cobbler/loaders/pxelinux.0
downloading http://www.cobblerd.org/loaders/menu.c32-3.61 to /var/lib/cobbler/loaders/menu.c32
downloading http://www.cobblerd.org/loaders/grub-0.97-x86.efi to /var/lib/cobbler/loaders/grub-x86.efi
downloading http://www.cobblerd.org/loaders/grub-0.97-x86_64.efi to /var/lib/cobbler/loaders/grub-x86_64.efi
*** TASK COMPLETE ***

(4). 错误 4，修改 /etc/xinetd.d/tftp 把 ’disable’ 修改为 ’no’；修改 /etc/xinetd.d/rsync 把 ’disable’ 修改为 ’no’；
[root@node2 ~]# vim /etc/xinetd.d/tftp
disable = no
[root@node2 ~]# vim /etc/xinetd.d/rsync
disable = no

注，启动 xinetd 服务。
12 [root@node2 ~]# service xinetd start
正在启动 xinetd：[确定]

(5). 错误 5 与错误 6，debmmirror 有错误；
[root@node2 ~]# vim /etc/debmirror.conf
# 注释掉 @dists=”sid” 与 @arches=”i386 即可
#@dists=”sid”;
#@arches=”i386″;

(6). 错误 7，设置默认 root 密码；
注，刚接触 Cobbler 的博友会问，这个密码是什么密码。有的博友系统安装好了会问，root 密码是什么。这里设置的就是客户端安装好系统的 root 密码。
# 生成你想要的密码的加密字符串, 然后复制运行命令之后的加密代码；
12 [root@node2 ~]# openssl passwd -1 -salt ‘hahaha’ ‘123456’
$1$hahaha$hSxFjZSHRoiEn4DYrrGUI.

# 然后替换 /etc/cobbler/settings 中选项双引号中的加密代码；
[root@node2 ~]# vim /etc/cobbler/settings
default_password_crypted: “$1$hahaha$hSxFjZSHRoiEn4DYrrGUI.”

6. 重新启动 Cobbler 并运行检查命令
[root@node2 ~]# service cobblerd restart
Stopping cobbler daemon: [确定]
Starting cobbler daemon: [确定]
[root@node2 ~]# cobbler check
No configuration problems found. All systems go.

好了，到这里我们 Cobbler 安装就全部完成了，最后我们来查看一下启动的端口。
[root@node2 ~]# netstat -ntulp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1011/sshd
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 1087/master
tcp 0 0 127.0.0.1:6010 0.0.0.0:* LISTEN 1126/sshd
tcp 0 0 127.0.0.1:6011 0.0.0.0:* LISTEN 1607/sshd
tcp 0 0 127.0.0.1:25151 0.0.0.0:* LISTEN 12677/Python
tcp 0 0 :::80 :::* LISTEN 1696/httpd
tcp 0 0 :::22 :::* LISTEN 1011/sshd
tcp 0 0 ::1:25 :::* LISTEN 1087/master
tcp 0 0 ::1:6010 :::* LISTEN 1126/sshd
tcp 0 0 ::1:6011 :::* LISTEN 1607/sshd
tcp 0 0 :::873 :::* LISTEN 12747/xinetd
udp 0 0 0.0.0.0:69 0.0.0.0:* 12747/xinetd

大纲
一、前言
二、环境配置
三、Cobbler 安装
四、Cobbler 配置详解
注，操作系统 CentOS 6.4 x86_64，软件版本 Cobbler-2.4.0-1。（目前最新版）

一、前言
在上一篇博客中（http://www.linuxidc.com/Linux/2013-11/92302.htm）我们主要讲解与 Cobbler 相关的基础知识，在一篇博客中我们主要中大家来说一下 Cobbler 安装与配置，并且详细说一下 Cobbler 命令的使用。好了，废话不多说下面直接上干货。

二、环境配置
1. 实验拓扑

Linux 运维自动化之 Cobbler 安装与配置

2. 安装 yum 源
[root@node2 ~]# rpm -ivh http://download.Fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm
Retrieving http://download.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm
warning: /var/tmp/rpm-tmp.z0cbxV: Header V3 RSA/SHA256 Signature, key ID 0608b895: NOKEY
Preparing… ########################################### [100%]
1:epel-release ########################################### [100%]

3. 同步系统时间
[root@node2 ~]# yum install -y ntp
[root@node2 ~]# ntpdate 202.120.2.101
4 Nov 13:49:41 ntpdate[1190]: step time server 202.120.2.101 offset 388653.714776 sec
[root@node2 ~]# hwclock -w

4. 关闭防火墙与 SELinux
[root@node2 ~]# service iptables stop
[root@node2 ~]# chkconfig iptables off
[root@node2 ~]# getenforce
Disabled

更多详情见请继续阅读下一页的精彩内容：http://www.linuxidc.com/Linux/2013-11/92319p2.htm

相关阅读：

Linux 运维工程师笔试题 http://www.linuxidc.com/Linux/2013-09/90621.htm

运维自动化之 Cobbler 安装配置 http://www.linuxidc.com/Linux/2013-03/81575.htm

RHEL5.5 下 Cobbler 的配置 http://www.linuxidc.com/Linux/2013-06/86115.htm

运维自动化部署 Cobbler 之服务安装篇 http://www.linuxidc.com/Linux/2013-02/80133.htm

利用 Cobbler 批量快速网络安装 CentOS http://www.linuxidc.com/Linux/2012-12/75838.htm

CentOS 6.3 上安装部署 Cobbler http://www.linuxidc.com/Linux/2012-10/72094.htm

四、Cobbler 配置详解
主要的 Cobbler 配置文件是 /etc/cobbler/settings。使用文本编辑器打开这个文件，并设置以下选项：
manage_dhcp：1

manage_dns：1

manage_tftpd：1

restart_dhcp：1

restart_dns：1

pxe_just_once：1

next_server：< 服务器的 IP 地址 >

server：< 服务器的 IP 地址 >

选项 manage_* 和 restart_* 无需加以说明。选项 next_server 用在 DHCP 配置文件中，向客户端告知提供引导文件的服务器地址。选项 server 在客户端安装期间用于引用 Cobbler 服务器地址。最后，选项 pxe_just_once 预防将机器中的安装循环配置为始终从网络引导。激活此选项时，机器告诉 Cobbler 安装已完成。Cobbler 将系统对象的 netboot 标志更改为 false，这会强制机器从本地磁盘引导。好了，下面我们配置并管理 dhcp 服务与 http 服务。

1. 让 Cobbler 来管理 DHCP 服务器
[root@node2 ~]# vim /etc/cobbler/settings
manage_dhcp: 1

2. 修改 DHCP 模板
[root@node2 ~]# vim /etc/cobbler/dhcp.template
subnet 192.168.18.0 netmask 255.255.255.0 {
option routers 192.168.18.254;
option domain-name-servers 8.8.8.8;
option subnet-mask 255.255.255.0;
range dynamic-bootp 192.168.18.221 192.168.18.225;
filename “/pxelinux.0”;
default-lease-time 21600;
max-lease-time 43200;
next-server $next_server;
}

3. 重新启动 Cobbler 服务
[root@node2 ~]# service cobblerd restart
Stopping cobbler daemon: [确定]
Starting cobbler daemon: [确定]

4. 编辑 /etc/httpd/conf.d/wsgi.conf 去掉注释
[root@node2 ~]# vim /etc/httpd/conf.d/wsgi.conf
LoadModule wsgi_module modules/mod_wsgi.so

5. 完成后一定要运行 cobbler sync 命令让配置生效，使 dhcp、http 被 cobbler 接管，不然会报错。
[root@node2 ~]# cobbler sync
task started: 2013-11-04_164727_sync
task started (id=Sync, time=Mon Nov 4 16:47:27 2013)
running pre-sync triggers
cleaning trees
removing: /var/lib/tftpboot/pxelinux.cfg/default
removing: /var/lib/tftpboot/grub/grub-x86_64.efi
removing: /var/lib/tftpboot/grub/images
removing: /var/lib/tftpboot/grub/efidefault
removing: /var/lib/tftpboot/grub/grub-x86.efi
removing: /var/lib/tftpboot/s390x/profile_list
copying bootloaders
trying hardlink /var/lib/cobbler/loaders/grub-x86_64.efi -> /var/lib/tftpboot/grub/grub-x86_64.efi
trying hardlink /var/lib/cobbler/loaders/grub-x86.efi -> /var/lib/tftpboot/grub/grub-x86.efi
copying distros to tftpboot
copying images
generating PXE configuration files
generating PXE menu structure
rendering DHCP files
generating /etc/dhcp/dhcpd.conf
rendering TFTPD files
generating /etc/xinetd.d/tftp
cleaning link caches
running post-sync triggers
running Python triggers from /var/lib/cobbler/triggers/sync/post/*
running python trigger cobbler.modules.sync_post_restart_services
running: dhcpd -t -q
received on stdout:
received on stderr:
running: service dhcpd restart
received on stdout: 关闭 dhcpd：[确定]
正在启动 dhcpd：[确定]
received on stderr:
running shell triggers from /var/lib/cobbler/triggers/sync/post/*
running python triggers from /var/lib/cobbler/triggers/change/*
running python trigger cobbler.modules.scm_track
running shell triggers from /var/lib/cobbler/triggers/change/*
*** TASK COMPLETE ***