cobbler
1. cobbler简介
Cobbler是一个Linux服务器安装的服务，可以通过网络启动(PXE)的方式来快速安装、重装物理服务器和虚拟机，同时还可以管理DHCP，DNS等。
Cobbler可以使用命令行方式管理，也提供了基于Web的界面管理工具(cobbler-web)，还提供了API接口，可以方便二次开发使用。
Cobbler是较早前的kickstart的升级版，优点是比较容易配置，还自带web界面比较易于管理。
Cobbler内置了一个轻量级配置管理系统，但它也支持和其它配置管理系统集成，如Puppet，暂时不支持SaltStack。
puppet是一种Linux、Unix、windows平台的集中配置管理系统，使用自有的puppet描述语言，可管理配置文件、用户、cron任务、软件包、系统服务等。puppet把这些系统实体称之为资源，puppet的设计目标是简化对这些资源的管理以及妥善处理资源间的依赖关系。
puppet采用C/S星状的结构，所有的客户端和一个或几个服务器交互。每个客户端周期的（默认半个小时）向服务器发送请求，获得其最新的配置信息，保证和该配置信息同步。每个puppet客户端每半小时(可以设置)连接一次服务器端, 下载最新的配置文件,并且严格按照配置文件来配置客户端. 配置完成以后,puppet客户端可以反馈给服务器端一个消息. 如果出错,也会给服务器端反馈一个消息
2. cobbler集成的服务：
- PXE服务支持
- DHCP服务管理
- DNS服务管理(可选bind,dnsmasq)
- 电源管理
- Kickstart服务支持
- YUM仓库管理
- TFTP(PXE启动时需要)
- Apache(提供kickstart的安装源，并提供定制化的kickstart配置)
3. cobbler配置文件详解
cobbler配置文件目录
| 配置文件 | 作用 |
|---|---|
| /etc/cobbler/settings.yaml | cobbler 主配置文件 |
| /etc/cobbler/iso/ | iso 模板配置文件 |
| /etc/cobbler/pxe | pxe 模板配置文件 |
| /etc/cobbler/power | 电源配置文件 |
| /etc/cobbler/user.conf | web 服务授权配置文件 |
| /etc/cobbler/users.digest | web 访问的用户名密码配置文件 |
| /etc/cobbler/dhcp.template | dhcp 服务器的的配置模板 |
| /etc/cobbler/dnsmasq.template | dns 服务器的配置模板 |
| /etc/cobbler/tftpd.template | tftp 服务的配置模板 |
| /etc/cobbler/modules.conf | 模块的配置文件 |
cobbler数据目录
| 目录 | 作用 |
|---|---|
| /var/lib/cobbler/config/ | 用于存放distros，system，profiles等信息配置文件 |
| /var/lib/cobbler/triggers/ | 用于存放用户定义的cobbler命令 |
| /var/lib/cobbler/kickstart/ | 默认存放kickstart文件 |
| /var/lib/cobbler/loaders/ | 存放各种引导程序以及镜像目录 |
| /var/www/cobbler/ks_mirror/ | 导入的发行版系统的所有数据 |
| /var/www/cobbler/images/ | 导入发行版的kernel和initrd镜像用于远程网络启动 |
| /var/www/cobbler/repo_mirror/ | yum仓库存储目录 |
cobbler日志文件
| 日志文件路径 | 说明 |
|---|---|
| /var/log/cobbler/installing | 客户端安装日志 |
| /var/log/cobbler/cobbler.log | cobbler日志 |
4. cobbler命令详解
cobbler check //核对当前设置是否有问题
cobbler list //列出所有的cobbler元素
cobbler report //列出元素的详细信息
cobbler sync //同步配置到数据目录,更改配置最好都要执行下
cobbler reposync //同步yum仓库
cobbler distro //查看导入的发行版系统信息
cobbler system //查看添加的系统信息
cobbler profile //查看配置信息
cobbler服务端部署
//配置yum源
[root@slave1 ~]# curl -o /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-vault-8.5.2111.repo
[root@slave1 ~]# sed -i -e '/mirrors.cloud.aliyuncs.com/d' -e '/mirrors.aliyuncs.com/d' /etc/yum.repos.d/CentOS-Base.repo
[root@slave1 ~]# yum clean all && yum makecache
[root@slave1 ~]# yum install -y https://mirrors.aliyun.com/epel/epel-release-latest-8.noarch.rpm
[root@slave1 ~]# sed -i 's|^#baseurl=https://download.example/pub|baseurl=https://mirrors.aliyun.com|' /etc/yum.repos.d/epel*
[root@slave1 ~]# sed -i 's|^metalink|#metalink|' /etc/yum.repos.d/epel*
//安装cobbler以及相关的软件
[root@slave1 ~]# yum module -y enable cobbler:3
[root@slave1 ~]# yum -y install httpd dhcp* tftp tftp-server cobbler cobbler-web pykickstart rsync rsync-daemon
//启动服务并设置开机自启
[root@slave1 ~]# systemctl restart httpd;systemctl enable httpd
[root@slave1 ~]# systemctl rsyncd;systemctl enable rsyncd
[root@slave1 ~]# systemctl tftp;systemctl enable tftp
[root@slave1 ~]# systemctl cobblerd;systemctl enable cobblerd
//关闭防火墙和selinux
[root@slave1 ~]# systemctl stop firewalld
[root@slave1 ~]# systemctl disable firewalld
[root@slave1 ~]# cat /etc/sysconfig/selinux
...此处省略
SELINUX=disabled
...此处省略
//重启系统
[root@slave1 ~]# reboot
//设置tftp的ip地址为本机ip//修改server的ip地址为本机ip
[root@slave1 ~]# sed -i 's/^server: 127.0.0.1/server: 192.168.160.138/' /etc/cobbler/settings.yaml
//生成加密的密码
[root@slave1 ~]# openssl passwd -1 -salt "$RANDOM" 'redhat'
$1$7563$zpCm.z7svDg..PPiLzBVv.
//将新生成的加密密码加入到配置文件
[root@slave1 ~]# vim /etc/cobbler/settings.yaml
default_password_crypted: "$1$7563$zpCm.z7svDg..PPiLzBVv."
//将cobbler的dhcp功能打开
[root@slave1 ~]# sed -i "s#manage_dhcp: false#manage_dhcp: true#" /etc/cobbler/settings.yaml
[root@slave1 ~]# grep 'manage_dhcp:' /etc/cobbler/settings.yaml
manage_dhcp: true
//重启cobbler
[root@slave1 ~]# systemctl restart cobblerd
//通过cobbler check 核对当前设置是否有问题
[root@slave1 ~]# cobbler check
The following are potential configuration items that you may want to fix:
1: some network boot-loaders are missing from /var/lib/cobbler/loaders. If you only want to handle x86/x86_64 netbooting, you may ensure that you have installed a *recent* version of the syslinux package installed and can ignore this message entirely. Files in this directory, should you want to support all architectures, should include pxelinux.0, menu.c32, and yaboot.
2: reposync is not installed, install yum-utils or dnf-plugins-core
3: yumdownloader is not installed, install yum-utils or dnf-plugins-core
4: debmirror package is not installed, it will be required to manage debian deployments and repositories
5: fencing tools were not found, and are required to use the (optional) power management features. install cman or fence-agents to use them
Restart cobblerd and then run 'cobbler sync' to apply changes.
问题1解决办法：
[root@slave1 ~]# yum -y install syslinux*
[root@slave1 ~]# cp /usr/share/syslinux/pxelinux.0 /var/lib/cobbler/loaders/
[root@slave1 ~]# cp /usr/share/syslinux/menu.c32 /var/lib/cobbler/loaders/
[root@slave1 ~]# ls /var/lib/cobbler/loaders/
menu.c32 pxelinux.0
问题2和问题3解决办法：
[root@slave1 ~]# yum -y install yum-utils
问题4和问题5可以忽略，
因为是debian系统才需要解决，显示使用的是centos8
Debian系统解决办法安装fence-agents
//配置DHCP模板文件
[root@slave1 ~]# vim /etc/cobbler/dhcp.template
# 注意dhcp模板中要修改的地方：subnet、option routers、dns、range dynamic-bootp
subnet 192.168.160.0 netmask 255.255.255.0 {
option routers 192.168.160.2;
option domain-name-servers 8.8.8.8;
option subnet-mask 255.255.255.0;
range dynamic-bootp 192.168.160.100 192.168.160.110;
default-lease-time 21600;
max-lease-time 43200;
next-server $next_server;
//同步cobbler配置
[root@slave1 ~]# systemctl restart httpd cobblerd
管理distro
//挂载镜像
[root@slave1 ~]# mount /dev/cdrom /mnt/
mount: /mnt: WARNING: device write-protected, mounted read-only.
//导入镜像
[root@slave1 ~]# cobbler import --path=/mnt/ --name=yexiaotian arch=x86_64
//查看cobbler镜像列表
[root@slave1 ~]# cobbler list
distros:
yexiaotian-x86_64
profiles:
yexiaotian-x86_64
systems:
repos:
images:
mgmtclasses:
packages:
files:
//查看详细信息 查看指定的--name 接镜像名
[root@slave1 ~]# cobbler distro report --name yexiaotian-x86_64
Name : yexiaotian-x86_64
Architecture : x86_64
Automatic Installation Template Metadata : {'tree': 'http://@@http_server@@/cblr/links/yexiaotian-x86_64'}
TFTP Boot Files : {}
Boot loader : grub
Breed : redhat
Comment :
Fetchable Files : {}
Initrd : /var/www/cobbler/distro_mirror/yexiaotian/images/pxeboot/initrd.img
Kernel : /var/www/cobbler/distro_mirror/yexiaotian/images/pxeboot/vmlinuz
Kernel Options : {}
Kernel Options (Post Install) : {}
Management Classes : []
OS Version : rhel8
Owners : ['admin']
Redhat Management Key :
Remote Boot Initrd : ~
Remote Boot Kernel : ~
Template Files : {}
//创建kickstarts自动安装脚本
[root@slave1 ~]# cobbler profile get-autoinstall --name yexiaotian-x86_64 > /var/lib/cobbler/templates/centos8.ks
[root@slave1 ~]# vim /var/lib/cobbler/templates/centos8.ks
//修改防火墙和添加最小化安装
# Sample kickstart file for current EL, Fedora based distributions.
#platform=x86, AMD64, or Intel EM64T
# System authorization information
auth --useshadow --enablemd5
# System bootloader configuration
bootloader --location=mbr
# Partition clearing information
clearpart --all --initlabel
# Use text mode install
text
# Firewall configuration
firewall --disabled
# Run the Setup Agent on first boot
firstboot --disable
# System keyboard
keyboard us
# System language
lang en_US
# Use network installation
url --url=http://192.168.160.138/cblr/links/yexiaotian-x86_64
# If any cobbler repo definitions were referenced in the kickstart profile, include them here.
repo --name=source-1 --baseurl=http://192.168.160.138/cobbler/distro_mirror/yexiaotian/AppStream
repo --name=source-2 --baseurl=http://192.168.160.138/cobbler/distro_mirror/yexiaotian/BaseOS
# Network information
network --bootproto=dhcp --device=eth0 --onboot=on
# Reboot after installation
reboot
#Root password
rootpw --iscrypted $1$7563$zpCm.z7svDg..PPiLzBVv.
# SELinux configuration
selinux --disabled
# Do not configure the X Window System
skipx
# System timezone
timezone America/New_York
# Install OS instead of upgrade
install
# Clear the Master Boot Record
zerombr
# Allow anaconda to partition the system as needed
autopart
%pre
set -x -v
exec 1>/tmp/ks-pre.log 2>&1
# Once root's homedir is there, copy over the log.
while : ; do
sleep 10
if [ -d /mnt/sysimage/root ]; then
cp /tmp/ks-pre.log /mnt/sysimage/root/
logger "Copied %pre section log to system"
break
fi
done &
# Enable installation monitoring
%end
%packages
@^minimal-environment
%end
%post --nochroot
set -x -v
exec 1>/mnt/sysimage/root/ks-post-nochroot.log 2>&1
%end
%post
set -x -v
exec 1>/root/ks-post.log 2>&1
# Start yum configuration
curl "http://192.168.160.138/cblr/svc/op/yum/profile/yexiaotian-x86_64" --output /etc/yum.repos.d/cobbler-config.repo
# End yum configuration
# Start post_install_network_config generated code
# End post_install_network_config generated code
# Start download cobbler managed config files (if applicable)
# End download cobbler managed config files (if applicable)
# Start koan environment setup
echo "export COBBLER_SERVER=192.168.160.138" > /etc/profile.d/cobbler.sh
echo "setenv COBBLER_SERVER 192.168.160.138" > /etc/profile.d/cobbler.csh
# End koan environment setup
$SNIPPET('redhat_register')
# Begin cobbler registration
# cobbler registration is disabled in /etc/cobbler/settings.yaml
# End cobbler registration
# Enable post-install boot notification
# Start final steps
curl "http://192.168.160.138/cblr/svc/op/autoinstall/profile/yexiaotian-x86_64" -o /root/cobbler.ks
# End final steps
%end
//此时使用虚拟机去安装系统并不会成功 需要做如下操作
[root@slave1 ~]# cd /usr/share/cobbler/bin/
[root@slave1 bin]# ls
migrate-data-v2-to-v3.py mkgrub.sh
migrate-settings.sh settings-migration-v1-to-v2.sh
[root@slave1 bin]# bash mkgrub.sh
[root@slave1 bin]# cd /var/lib/cobbler/loaders/
[root@slave1 loaders]# ll
total 72
drwxr-xr-x 2 root root 79 Sep 25 14:47 grub
lrwxrwxrwx 1 root root 31 Sep 25 14:47 ldlinux.c32 -> /usr/share/syslinux/ldlinux.c32
-rw-r--r-- 1 root root 26272 Sep 25 13:42 menu.c32
-rw-r--r-- 1 root root 42376 Sep 25 13:41 pxelinux.0
[root@slave1 loaders]# cobbler sync
[root@slave1 loaders]# systemctl restart httpd cobblerd rsyncd dhcpd
手动安装：
//创建一个虚拟机，然后打开虚拟机
自动安装
//使用浏览器访问https://192.168.160.137/cobbler_web
//默认登录的用户名和密码都为cobbler
扫一扫
203
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
