cobbler

1. cobbler简介

• Cobbler是一个Linux服务器安装的服务，可以通过网络启动(PXE)的方式来快速安装、重装物理服务器和虚拟机，同时还可以管理DHCP，DNS等。

• Cobbler可以使用命令行方式管理，也提供了基于Web的界面管理工具(cobbler-web)，还提供了API接口，可以方便二次开发使用。

• Cobbler是较早前的kickstart的升级版，优点是比较容易配置，还自带web界面比较易于管理。

• Cobbler内置了一个轻量级配置管理系统，但它也支持和其它配置管理系统集成，如Puppet，暂时不支持SaltStack。

cobbler集成的服务

• PXE服务支持
• DHCP服务管理
• DNS服务管理(可选bind,dnsmasq)
• 电源管理
• Kickstart服务支持
• YUM仓库管理
• TFTP(PXE启动时需要)
• Apache(提供kickstart的安装源，并提供定制化的kickstart配置)

cobbler配置文件详解

• cobbler配置文件目录在/etc/cobbler

cobbler数据目录

cobbler日志文件

cobbler命令详解

cobbler check       //核对当前设置是否有问题
cobbler list        //列出所有的cobbler元素
cobbler report      //列出元素的详细信息
cobbler sync        //同步配置到数据目录,更改配置最好都要执行下
cobbler reposync    //同步yum仓库
cobbler distro      //查看导入的发行版系统信息
cobbler system      //查看添加的系统信息
cobbler profile     //查看配置信息

2. cobbler服务端部署

#配置yum源
[root@asuna yum.repos.d]# curl -o /etc/yum.repos.d/CentOS7-Base-163.repo http://mirrors.163.com/.help/CentOS7-Base-163.repo
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  1572  100  1572    0     0     34      0  0:00:46  0:00:45  0:00:01   386
[root@asuna yum.repos.d]# ls
CentOS7-Base-163.repo

[root@asuna yum.repos.d]# sed -i 's/\$releasever/7/g' /etc/yum.repos.d/CentOS7-Base-163.repo
[root@asuna yum.repos.d]# sed -i 's/^enabled=.*/enabled=1/g' /etc/yum.repos.d/CentOS7-Base-163.repo
[root@asuna yum.repos.d]# yum -y install epel-release

#安装相关软件
[root@asuna ~]# httpd dhcp tftp python-ctypes cobbler  xinetd cobbler-web pykickstart

#启动服务
[root@asuna ~]# systemctl enable --now httpd
Created symlink from /etc/systemd/system/multi-user.target.wants/httpd.service to /usr/lib/systemd/system/httpd.service.

systemctl enable --now cobblerd
Created symlink from /etc/systemd/system/multi-user.target.wants/cobblerd.service to /usr/lib/systemd/system/cobblerd.service.

[root@asuna ~]# ss -anlt
State       Recv-Q Send-Q Local Address:Port               Peer Address:Port              
LISTEN      0      64              *:55660                       *:*                  
LISTEN      0      128             *:111                         *:*                  
LISTEN      0      128             *:20048                       *:*                  
LISTEN      0      128             *:22                          *:*                  
LISTEN      0      100     127.0.0.1:25                          *:*                  
LISTEN      0      128             *:3260                        *:*                  
LISTEN      0      5       127.0.0.1:25151                       *:*                  
LISTEN      0      128             *:49343                       *:*                  
LISTEN      0      64              *:2049                        *:*                  
LISTEN      0      128            :::60264                      :::*                  
LISTEN      0      128            :::111                        :::*                  
LISTEN      0      128            :::80                         :::*                  
LISTEN      0      128            :::20048                      :::*                  
LISTEN      0      128            :::81                         :::*                  
LISTEN      0      128            :::22                         :::*                  
LISTEN      0      100           ::1:25                         :::*                  
LISTEN      0      128            :::443                        :::*                  
LISTEN      0      64             :::43516                      :::*                  
LISTEN      0      128            :::3260                       :::*                  
LISTEN      0      64             :::2049                       :::*

#修改server的ip地址为本机ip
[root@asuna ~]# sed -i 's/^server: 127.0.0.1/server: 192.168.32.133/' /etc/cobbler/settings

#设置tftp的ip地址为本机ip
[root@asuna ~]# sed -i 's/^next_server: 127.0.0.1/next_server: 192.168.32.133/' /etc/cobbler/settings

#开启tftp
[root@asuna ~]# sed -i '/disable/s/yes/no/g' /etc/xinetd.d/tftp

#关闭防火墙、selinux
[root@asuna ~]# systemctl disable --now firewalld
Removed symlink /etc/systemd/system/multi-user.target.wants/firewalld.service.
Removed symlink /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service.

[root@asuna ~]# sed -ri 's/^(SELINUX=).*/\1disabled/g' /etc/selinux/config
[root@asuna ~]# reboot

#下载缺失文件
[root@asuna ~]# cobbler get-loaders

#启动rsync并设置开机自启
[root@asuna ~]# systemctl start rsyncd
[root@asuna ~]# systemctl enable rsyncd
Created symlink from /etc/systemd/system/multi-user.target.wants/rsyncd.service to /usr/lib/systemd/system/rsyncd.service.

#生成加密的密码
[root@asuna ~]# openssl passwd -1 -salt "$RANDOM" 'asuna77'
$1$71196$4TsiT.xqEqWHK5om/Xwqc1	//密码加密后

#将新生成的加密密码加入到配置文件
[root@asuna ~]# vim /etc/cobbler/settings
default_password_crypted: "$1$8936$4TsiT.xqVyQsB5om/Xw/P1"

#重启cobbler
[root@asuna ~]# systemctl restart cobblerd
[root@asuna ~]# ss -antl
State       Recv-Q Send-Q Local Address:Port               Peer Address:Port              
LISTEN      0      5         127.0.0.1:25151                         *:*                  
LISTEN      0      5                 *:873                           *:*                  
LISTEN      0      128               *:22                            *:*                  
LISTEN      0      100       127.0.0.1:25                            *:*                  
LISTEN      0      5                :::873                          :::*                  
LISTEN      0      128              :::80                           :::*                  
LISTEN      0      128              :::22                           :::*                  
LISTEN      0      100             ::1:25                           :::*                  
LISTEN      0      128              :::443                          :::*   

#通过cobbler check 核对当前设置是否有问题
[root@asuna ~]# cobbler check
The following are potential configuration items that you may want to fix:

1 : debmirror package is not installed, it will be required to manage debian deployments and repositories
2 : fencing tools were not found, and are required to use the (optional) power management features. install cman or fence-agents to use them

Restart cobblerd and then run 'cobbler sync' to apply changes.
//以上两个是关于debian系统的错误，请忽略

#配置cobbler dhcp
[root@asuna ~]# sed -i '/^manage_dhcp/s/0/1/g' /etc/cobbler/settings
[root@asuna ~]# sed -n '/^manage_dhcp/p' /etc/cobbler/settings
manage_dhcp: 1

#配置dhcp
[root@asuna ~]# vim /etc/cobbler/dhcp.template
subnet 192.168.32.0 netmask 255.255.255.0 {
     option routers             192.168.32.133;
     option domain-name-servers 114.114.114.114;
     option subnet-mask         255.255.255.0;
     range dynamic-bootp        192.168.32.140 192.168.32.145;
     default-lease-time         21600;
     max-lease-time             43200;
     next-server                $next_server;

#重启服务并同步配置，改完dhcp必须要sync同步配置
[root@asuna ~]# systemctl restart cobblerd
[root@asuna ~]# cobbler sync

#检查dhcp是否正常
[root@asuna ~]# yum -y install net-tools
[root@asuna ~]# netstat -anulp|grep dhcp
udp        0      0 0.0.0.0:67              0.0.0.0:*                           1279/dhcpd

#导入centos7镜像
[root@asuna ~]# mount /dev/cdrom /mnt
[root@asuna ~]# cobbler import --path=/mnt --name=CentOS-7 --arch=x86_64


//说明：
    --path      //镜像路径
    --name      //为安装源定义一个名字
    --arch      //指定安装源平台

//安装源的唯一标示就是根据name参数来定义，本例导入成功后，安装源的唯一标示就是：CentOS-7-x86_64，如果重复，系统会提示导入失败


#查看cobbler镜像列表
[root@asuna ~]# cobbler list
distros:
   CentOS-7-x86_64

profiles:
   CentOS-7-x86_64

systems:

repos:

images:

mgmtclasses:

packages:

files:

#创建kickstarts自动安装脚本
[root@asuna ~]# cat > /var/lib/cobbler/kickstarts/CentOS-7-x86_64.ks <<'EOF'
auth --enableshadow --passalgo=sha512
bootloader --location=mbr
clearpart --all --initlabel
part /boot --asprimary --fstype="ext4" --size=500
part swap --fstype="swap" --size=4096
part / --fstype="ext4" --grow --size=15000
text
firewall --disabled
firstboot --disable
keyboard us
lang en_US
url --url=http://192.168.32.133/cobbler/ks_mirror/CentOS-7-x86_64
$yum_repo_stanza
reboot

rootpw --iscrypted $6$Yz8Ge4txedftIrv8$VyuW5gU6iGbEJ5PQ2hrwxgh9LR/4S4dSSi3kdDFhS1/wOmZT9rEFyQQkoyAE4ddie4UBMHClRPS2YqXEnswJq0

selinux --disabled
skipx
timezone Asia/Shanghai --isUtc --nontp
install
zerombr

%packages
@^minimal
@core
kexec-tools

%end

%addon com_redhat_kdump --enable --reserve-mb='auto'

%end

%anaconda
pwpolicy root --minlen=6 --minquality=1 --notstrict --nochanges --notempty
pwpolicy user --minlen=6 --minquality=1 --notstrict --nochanges --emptyok
pwpolicy luks --minlen=6 --minquality=1 --notstrict --nochanges --notempty
%end
EOF

#检查ks文件语法是否有误
[root@asuna ~]# cobbler validateks

#查看当前cobbler有哪些配置文件
[root@asuna ~]# cobbler profile list

#修改profile，将我们新建的ks文件设为默认的kickstarts安装文件
[root@asuna ~]# cobbler profile edit --name CentOS-7-x86_64 --kickstart=/var/lib/cobbler/kickstarts/CentOS-7-x86_64.ks

#配置网卡名称为传统网卡名称eth0
[root@asuna ~]# cobbler profile edit --name CentOS-7-x86_64 --kopts='net.ifnames=0 biosdevname=0'

#检查当前系统cobbler配置文件信息
[root@asuna ~]# cobbler profile report
Name                           : CentOS-7-x86_64
TFTP Boot Files                : {}
Comment                        : 
DHCP Tag                       : default
Distribution                   : CentOS-7-x86_64
Enable gPXE?                   : 0
Enable PXE Menu?               : 1
Fetchable Files                : {}
Kernel Options                 : {'biosdevname': '0', 'net.ifnames': '0'}
Kernel Options (Post Install)  : {}
Kickstart                      : /var/lib/cobbler/kickstarts/CentOS-7-x86_64.ks
Kickstart Metadata             : {}
Management Classes             : []
Management Parameters          : <<inherit>>
Name Servers                   : []
Name Servers Search Path       : []
Owners                         : ['admin']
Parent Profile                 : 
Internal proxy                 : 
Red Hat Management Key         : <<inherit>>
Red Hat Management Server      : <<inherit>>
Repos                          : []
Server Override                : <<inherit>>
Template Files                 : {}
Virt Auto Boot                 : 1
Virt Bridge                    : xenbr0
Virt CPUs                      : 1
Virt Disk Driver Type          : raw
Virt File Size(GB)             : 5
Virt Path                      : 
Virt RAM (MB)                  : 512
Virt Type                      : kvm


#同步cobbler
[root@asuna ~]# cobbler sync

#为避免发生未知问题，先把服务端所有服务重启
[root@asuna ~]# systemctl restart xinetd
[root@asuna ~]# systemctl restart cobblerd
[root@asuna ~]# systemctl restart httpd
[root@asuna ~]# systemctl enable --now xinetd
[root@asuna ~]# ss -antl
State       Recv-Q Send-Q Local Address:Port               Peer Address:Port              
LISTEN      0      5         127.0.0.1:25151                         *:*                  
LISTEN      0      5                 *:873                           *:*                  
LISTEN      0      128               *:22                            *:*                  
LISTEN      0      100       127.0.0.1:25                            *:*                  
LISTEN      0      5                :::873                          :::*                  
LISTEN      0      128              :::80                           :::*                  
LISTEN      0      128              :::22                           :::*                  
LISTEN      0      100             ::1:25                           :::*                  
LISTEN      0      128              :::443                          :::*   

3. 安装新系统