本文详细介绍Cobbler服务，一种Linux服务器自动化安装解决方案，涵盖服务端部署、客户端安装及定制化安装流程。Cobbler整合PXE、DHCP、DNS等服务，简化服务器批量部署过程。
1. cobbler简介
Cobbler是一个Linux服务器安装的服务，可以通过网络启动(PXE)的方式来快速安装、重装物理服务器和虚拟机，同时还可以管理DHCP，DNS等。
Cobbler可以使用命令行方式管理，也提供了基于Web的界面管理工具(cobbler-web)，还提供了API接口，可以方便二次开发使用。
Cobbler是较早前的kickstart的升级版，优点是比较容易配置，还自带web界面比较易于管理。
Cobbler内置了一个轻量级配置管理系统，但它也支持和其它配置管理系统集成，如Puppet，暂时不支持SaltStack。
cobbler集成的服务
- PXE服务支持
- DHCP服务管理
- DNS服务管理(可选bind,dnsmasq)
- 电源管理
- Kickstart服务支持
- YUM仓库管理
- TFTP(PXE启动时需要)
- Apache(提供kickstart的安装源，并提供定制化的kickstart配置)
cobbler配置文件详解
cobbler配置文件目录在/etc/cobbler
| 配置文件 | 作用 |
|---|---|
| /etc/cobbler/settings | cobbler 主配置文件 |
| /etc/cobbler/iso/ | iso模板配置文件 |
| /etc/cobbler/pxe | pxe模板配置文件 |
| /etc/cobbler/power | 电源配置文件 |
| /etc/cobbler/user.conf | web服务授权配置文件 |
| /etc/cobbler/users.digest | web访问的用户名密码配置文件 |
| /etc/cobbler/dhcp.template | dhcp服务器的的配置模板 |
| /etc/cobbler/dnsmasq.template | dns服务器的配置模板 |
| /etc/cobbler/tftpd.template | tftp服务的配置模板 |
| /etc/cobbler/modules.conf | 模块的配置文件 |
cobbler数据目录
| 目录 | 作用 |
|---|---|
| /var/lib/cobbler/config/ | 用于存放distros，system，profiles等信息配置文件 |
| /var/lib/cobbler/triggers/ | 用于存放用户定义的cobbler命令 |
| /var/lib/cobbler/kickstart/ | 默认存放kickstart文件 |
| /var/lib/cobbler/loaders/ | 存放各种引导程序以及镜像目录 |
| /var/www/cobbler/ks_mirror/ | 导入的发行版系统的所有数据 |
| /var/www/cobbler/images/ | 导入发行版的kernel和initrd镜像用于远程网络启动 |
| /var/www/cobbler/repo_mirror/ | yum仓库存储目录 |
cobbler日志文件
| 日志文件路径 | 说明 |
|---|---|
| /var/log/cobbler/installing | 客户端安装日志 |
| /var/log/cobbler/cobbler.log | cobbler日志 |
cobbler命令详解
cobbler check //核对当前设置是否有问题
cobbler list //列出所有的cobbler元素
cobbler report //列出元素的详细信息
cobbler sync //同步配置到数据目录,更改配置最好都要执行下
cobbler reposync //同步yum仓库
cobbler distro //查看导入的发行版系统信息
cobbler system //查看添加的系统信息
cobbler profile //查看配置信息
2. cobbler服务端部署
#配置YUM源
[root@node01-Linux ~]# curl -o /etc/yum.repos.d/CentOS7-Base-163.repo http://mirrors.163.com/.help/CentOS7-Base-163.repo
[root@node01-Linux ~]# sed -i 's/\$releasever/7/g' /etc/yum.repos.d/CentOS7-Base-163.repo
[root@node01-Linux ~]# sed -i 's/^enabled=.*/enabled=1/g' /etc/yum.repos.d/CentOS7-Base-163.repo
[root@node01-Linux ~]# yum -y install epel-release
#安装cobbler以及相关的软件
[root@node01-Linux ~]# yum -y install httpd dhcp tftp python-ctypes cobbler xinetd cobbler-web pykickstart
#启动服务并设置开机自启
[root@node01-Linux ~]# systemctl start httpd
[root@node01-Linux ~]# systemctl start cobblerd
[root@node01-Linux ~]# systemctl enable httpd
Created symlink from /etc/systemd/system/multi-user.target.wants/httpd.service to /usr/lib/systemd/system/httpd.service.
[root@node01-Linux ~]# systemctl enable cobblerd
Created symlink from /etc/systemd/system/multi-user.target.wants/cobblerd.service to /usr/lib/systemd/system/cobblerd.service.
#修改server的ip地址为本机ip
[root@node01-Linux ~]# sed -i 's/^server: 127.0.0.1/server: 192.168.25.131/' /etc/cobbler/settings
#设置tftp的ip地址为本机ip
[root@node01-Linux ~]# sed -i 's/^next_server: 127.0.0.1/next_server: 192.168.25.131/' /etc/cobbler/settings
#开启tftp
[root@node01-Linux ~]# sed -i '/disable/s/yes/no/g' /etc/xinetd.d/tftp
#关闭防火墙、selinux
[root@node01-Linux ~]# systemctl disable --now firewalld
Removed symlink /etc/systemd/system/multi-user.target.wants/firewalld.service.
Removed symlink /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service.
[root@node01-Linux ~]# sed -ri 's/^(SELINUX=).*/\1disabled/g' /etc/selinux/config
[root@node01-Linux ~]# reboot
#下载缺失文件
[root@node01-Linux ~]# cobbler get-loaders
#启动rsync并设置开机自启
[root@node01-Linux ~]# systemctl start rsyncd
[root@node01-Linux ~]# systemctl enable rsyncd
Created symlink from /etc/systemd/system/multi-user.target.wants/rsyncd.service to /usr/lib/systemd/system/rsyncd.service.
#生成加密的密码
[root@node01-Linux ~]# openssl passwd -1 -salt "$RANDOM" 'zcq996616'
$1$8936$4TsiT.xqVyQsB5om/Xw/P1 //这是密码加密后的形式
#将新生成的加密密码加入到配置文件
[root@node01-Linux ~]# vim /etc/cobbler/settings
default_password_crypted: "$1$8936$4TsiT.xqVyQsB5om/Xw/P1"
#重启cobbler
[root@node01-Linux ~]# systemctl restart cobblerd
[root@node01-Linux ~]# ss -antl
State Recv-Q Send-Q Local Address:Port Peer Address:Port
LISTEN 0 5 127.0.0.1:25151 *:*
LISTEN 0 5 *:873 *:*
LISTEN 0 128 *:22 *:*
LISTEN 0 100 127.0.0.1:25 *:*
LISTEN 0 5 :::873 :::*
LISTEN 0 128 :::80 :::*
LISTEN 0 128 :::22 :::*
LISTEN 0 100 ::1:25 :::*
LISTEN 0 128 :::443 :::*
#通过cobbler check 核对当前设置是否有问题
[root@node01-Linux ~]# cobbler check
The following are potential configuration items that you may want to fix:
1 : debmirror package is not installed, it will be required to manage debian deployments and repositories
2 : fencing tools were not found, and are required to use the (optional) power management features. install cman or fence-agents to use them
Restart cobblerd and then run 'cobbler sync' to apply changes.
//以上两个是关于debian系统的错误，请忽略
# 配置cobbler dhcp
#修改cobbler配置文件，让cobbler控制dhcp
[root@node01-Linux ~]# sed -i '/^manage_dhcp/s/0/1/g' /etc/cobbler/settings
[root@node01-Linux ~]# sed -n '/^manage_dhcp/p' /etc/cobbler/settings
manage_dhcp: 1
#配置dhcp
[root@node01-Linux ~]# vim /etc/cobbler/dhcp.template
subnet 192.168.25.0 netmask 255.255.255.0 {
option routers 192.168.25.131;
option domain-name-servers 114.114.114.114;
option subnet-mask 255.255.255.0;
range dynamic-bootp 192.168.25.140 192.168.25.145;
default-lease-time 21600;
max-lease-time 43200;
next-server $next_server;
#重启服务并同步配置，改完dhcp必须要sync同步配置
[root@node01-Linux ~]# systemctl restart cobblerd
[root@node01-Linux ~]# cobbler sync
#检查dhcp是否正常
[root@node01-Linux ~]# yum -y install net-tools
[root@node01-Linux ~]# netstat -anulp|grep dhcp
udp 0 0 0.0.0.0:67 0.0.0.0:* 1279/dhcpd
#导入centos7镜像
[root@node01-Linux ~]# mount /dev/cdrom /mnt
[root@node01-Linux ~]# cobbler import --path=/mnt --name=CentOS-7 --arch=x86_64
//说明：
--path //镜像路径
--name //为安装源定义一个名字
--arch //指定安装源平台
//安装源的唯一标示就是根据name参数来定义，本例导入成功后，安装源的唯一标示就是：CentOS-7-x86_64，如果重复，系统会提示导入失败
#查看cobbler镜像列表
[root@node01-Linux ~]# cobbler list
distros:
CentOS-7-x86_64
profiles:
CentOS-7-x86_64
systems:
repos:
images:
mgmtclasses:
packages:
files:
#创建kickstarts自动安装脚本
[root@node01-Linux ~]# cat > /var/lib/cobbler/kickstarts/CentOS-7-x86_64.ks <<'EOF'
auth --enableshadow --passalgo=sha512
bootloader --location=mbr
clearpart --all --initlabel
part /boot --asprimary --fstype="ext4" --size=500
part swap --fstype="swap" --size=4096
part / --fstype="ext4" --grow --size=15000
text
firewall --disabled
firstboot --disable
keyboard us
lang en_US
url --url=http://192.168.25.131/cobbler/ks_mirror/CentOS-7-x86_64
$yum_repo_stanza
reboot
rootpw --iscrypted $6$Yz8Ge4txedftIrv8$VyuW5gU6iGbEJ5PQ2hrwxgh9LR/4S4dSSi3kdDFhS1/wOmZT9rEFyQQkoyAE4ddie4UBMHClRPS2YqXEnswJq0
selinux --disabled
skipx
timezone Asia/Shanghai --isUtc --nontp
install
zerombr
%packages
@^minimal
@core
kexec-tools
%end
%addon com_redhat_kdump --enable --reserve-mb='auto'
%end
%anaconda
pwpolicy root --minlen=6 --minquality=1 --notstrict --nochanges --notempty
pwpolicy user --minlen=6 --minquality=1 --notstrict --nochanges --emptyok
pwpolicy luks --minlen=6 --minquality=1 --notstrict --nochanges --notempty
%end
EOF
#检查ks文件语法是否有误
[root@node01-Linux ~]# cobbler validateks
#查看当前cobbler有哪些配置文件
[root@node01-Linux ~]# cobbler profile list
#修改profile，将我们新建的ks文件设为默认的kickstarts安装文件
[root@node01-Linux ~]# cobbler profile edit --name CentOS-7-x86_64 --kickstart=/var/lib/cobbler/kickstarts/CentOS-7-x86_64.ks
#配置网卡名称为传统网卡名称eth0
[root@node01-Linux ~]# cobbler profile edit --name CentOS-7-x86_64 --kopts='net.ifnames=0 biosdevname=0'
#检查当前系统cobbler配置文件信息
[root@node01-Linux ~]# cobbler profile report
Name : CentOS-7-x86_64
TFTP Boot Files : {}
Comment :
DHCP Tag : default
Distribution : CentOS-7-x86_64
Enable gPXE? : 0
Enable PXE Menu? : 1
Fetchable Files : {}
Kernel Options : {'biosdevname': '0', 'net.ifnames': '0'}
Kernel Options (Post Install) : {}
Kickstart : /var/lib/cobbler/kickstarts/CentOS-7-x86_64.ks
Kickstart Metadata : {}
Management Classes : []
Management Parameters : <<inherit>>
Name Servers : []
Name Servers Search Path : []
Owners : ['admin']
Parent Profile :
Internal proxy :
Red Hat Management Key : <<inherit>>
Red Hat Management Server : <<inherit>>
Repos : []
Server Override : <<inherit>>
Template Files : {}
Virt Auto Boot : 1
Virt Bridge : xenbr0
Virt CPUs : 1
Virt Disk Driver Type : raw
Virt File Size(GB) : 5
Virt Path :
Virt RAM (MB) : 512
Virt Type : kvm
#同步cobbler
[root@node01-Linux ~]# cobbler sync
#为避免发生未知问题，先把服务端所有服务重启
[root@node01-Linux ~]# systemctl restart xinetd
[root@node01-Linux ~]# systemctl restart cobblerd
[root@node01-Linux ~]# systemctl restart httpd
[root@node01-Linux ~]# systemctl enable --now xinetd
[root@node01-Linux ~]# ss -antl
State Recv-Q Send-Q Local Address:Port Peer Address:Port
LISTEN 0 5 127.0.0.1:25151 *:*
LISTEN 0 5 *:873 *:*
LISTEN 0 128 *:22 *:*
LISTEN 0 100 127.0.0.1:25 *:*
LISTEN 0 5 :::873 :::*
LISTEN 0 128 :::80 :::*
LISTEN 0 128 :::22 :::*
LISTEN 0 100 ::1:25 :::*
LISTEN 0 128 :::443 :::*
3. 客户端安装
新建虚拟机从pxe启动，若出现以下界面则表示成功：
4. 定制安装
定制安装步骤：
统计服务器mac地址
配置cobbler
安装
统计mac地址此处就不赘述了，直接最重要的配置
在 cobbler 的web界面上配置：
访问 https://192.168.25.131/cobbler_web
[root@node01-Linux cobbler]# cat users.digest
cobbler:Cobbler:a2d6bae81669d707b72c0bd9806e01f3
同步配置并重启相关服务：
[root@node01-Linux ~]# cobbler sync
[root@node01-Linux ~]# systemctl restart httpd
[root@node01-Linux ~]# systemctl restart cobblerd
[root@node01-Linux ~]# systemctl restart xinetd
#导入centos8镜像
[root@node01-Linux ~]# cobbler import --path=/mnt --name=CentOS-8 --arch=x86_64
#查看cobbler镜像列表
[root@node01-Linux ~]# cobbler list
distros:
CentOS-7-x86_64
CentOS-8-x86_64
profiles:
CentOS-7-x86_64
CentOS-8-x86_64
systems:
vm1
repos:
images:
mgmtclasses:
packages:
files:
##创建kickstarts自动安装脚本
[root@node01-Linux ~]# cat > /var/lib/cobbler/kickstarts/CentOS-8-x86_64.ks <<'EOF'
#version=RHEL8
ignoredisk --only-use=nvme0n1
autopart --type=lvm
# Partition clearing information
clearpart --none --initlabel
# Use graphical install
graphical
# Use CDROM installation media
cdrom
# Keyboard layouts
keyboard --vckeymap=us --xlayouts='us'
# System language
lang en_US.UTF-8
# Network information
network --bootproto=dhcp --device=ens160 --ipv6=auto --activate
network --hostname=vm2
url --url=http://192.168.25.131/cobbler/ks_mirror/CentOS-8-x86_64
# Root password
rootpw --iscrypted $6$KMKeRIK9LGMBAHxx$wQAIKuYRYiy6oC1Eu7bR1a1pufhF5LLcHcHbs3yjYt5jrOOHJQeK6k7e2g5vPqlUHNAat1NpCZZL1PNdif38A0
# Run the Setup Agent on first boot
firstboot --enable
# Do not configure the X Window System
skipx
# System services
services --disabled="chronyd"
# System timezone
timezone Asia/Shanghai --isUtc --nontp
%packages
@^minimal-environment
kexec-tools
%end
%addon com_redhat_kdump --enable --reserve-mb='auto'
%end
%anaconda
pwpolicy root --minlen=6 --minquality=1 --notstrict --nochanges --notempty
pwpolicy user --minlen=6 --minquality=1 --notstrict --nochanges --emptyok
pwpolicy luks --minlen=6 --minquality=1 --notstrict --nochanges --notempty
%end
EOF
#检查ks文件语法是否有误
[root@node01-Linux ~]# cobbler validateks
#查看当前cobbler有哪些配置文件
[root@node01-Linux ~]# cobbler profile list
CentOS-7-x86_64
CentOS-8-x86_64
#修改profile，将我们新建的ks文件设为默认的kickstarts安装文件
[root@node01-Linux ~]# cobbler profile edit --name CentOS-8-x86_64 --kickstart=/var/lib/cobbler/kickstarts/CentOS-8-x86_64.ks
#配置网卡名称为传统网卡名称eth0
[root@node01-Linux ~]# cobbler profile edit --name CentOS-8-x86_64 --kopts='net.ifnames=0 biosdevname=0'
#检查当前系统cobbler配置文件信息
[root@node01-Linux ~]# cobbler profile report
#同步cobbler
[root@node01-Linux ~]# cobbler sync
#重启所有服务
[root@node01-Linux ~]# systemctl restart xinetd
[root@node01-Linux ~]# systemctl restart cobblerd
[root@node01-Linux ~]# systemctl restart httpd
[root@node01-Linux ~]# ss -anlt
State Recv-Q Send-Q Local Address:Port Peer Address:Port
LISTEN 0 5 127.0.0.1:25151 *:*
LISTEN 0 5 *:873 *:*
LISTEN 0 128 *:22 *:*
LISTEN 0 100 127.0.0.1:25 *:*
LISTEN 0 5 :::873 :::*
LISTEN 0 128 :::80 :::*
LISTEN 0 128 :::22 :::*
LISTEN 0 100 ::1:25 :::*
LISTEN 0 128 :::443 :::*
扫一扫
368
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
