1. Cobbler介紹
Cobbler是一個Linux服務器安裝的服務，可以通過網絡啓動(PXE)的方式來快速安裝、重裝物理服務器和虛擬機，同時還可以管理DHCP，DNS等。
Cobbler可以使用命令行方式管理，也提供了基於Web的界面管理工具(cobbler-web)，還提供了API接口，可以方便二次開發使用。
Cobbler是較早前的kickstart的升級版，優點是比較容易配置，還自帶web界面比較易於管理。
Cobbler內置了一個輕量級配置管理系統，但它也支持和其它配置管理系統集成，如Puppet，暫時不支持SaltStack。
1.1 Cobbler集成的服務
PXE服務支持
DHCP服務管理
DNS服務管理(可選bind,dnsmasq)
電源管理
Kickstart服務支持
YUM倉庫管理
TFTP(PXE啓動時需要)
Apache(提供kickstart的安裝源，並提供定製化的kickstart配置)
1.2 系統環境準備
[root@lb02 ~]# cat /etc/redhat-release
CentOS release 6.7 (Final)
[root@lb02 ~]# uname -r
2.6.32-573.el6.x86_64
[root@lb02 ~]# getenforce
Disabled
[root@lb02 ~]# /etc/init.d/iptables status
iptables: Firewall is not running.
[root@lb02 ~]# ifconfig eth0|awk -F "[ :]+" 'NR==2 {print $4}'
10.10.10.18
# 配置阿里雲的epel源
[root@lb02 ~]# wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-6.repo注意：
虛擬機網卡採用NAT模式，不要使用橋接模式，因爲稍後我們會搭建DHCP服務器，在同一局域網多個DHCP服務會有衝突。
VMware的NAT模式的dhcp服務也關閉，避免干擾。
2. Cobbler安裝配置
2.1 安裝Cobbler
[root@lb02 ~]# yum install -y cobbler # 查看安裝的文件，下面列出部分。 /etc/cobbler # 配置文件目錄 /etc/cobbler/settings # cobbler主配置文件，這個文件是YAML格式，Cobbler是python寫的程序。 /etc/cobbler/dhcp.template # DHCP服務的配置模板 /etc/cobbler/tftpd.template # tftp服務的配置模板 /etc/cobbler/rsync.template # rsync服務的配置模板 /etc/cobbler/iso # iso模板配置文件目錄 /etc/cobbler/pxe # pxe模板文件目錄 /etc/cobbler/power # 電源的配置文件目錄 /etc/cobbler/users.conf # Web服務授權配置文件 /etc/cobbler/users.digest # 用於web訪問的用戶名密碼配置文件 /etc/cobbler/dnsmasq.template # DNS服務的配置模板 /etc/cobbler/modules.conf # Cobbler模塊配置文件 /var/lib/cobbler # Cobbler數據目錄 /var/lib/cobbler/config # 配置文件 /var/lib/cobbler/kickstarts # 默認存放kickstart文件 /var/lib/cobbler/loaders # 存放的各種引導程序 /var/www/cobbler # 系統安裝鏡像目錄 /var/www/cobbler/ks_mirror # 導入的系統鏡像列表 /var/www/cobbler/p_w_picpaths # 導入的系統鏡像啓動文件 /var/www/cobbler/repo_mirror # yum源存儲目錄 /var/log/cobbler # 日誌目錄 /var/log/cobbler/install.log # 客戶端系統安裝日誌 /var/log/cobbler/cobbler.log # cobbler日誌
2.2 配置Cobbler
[root@lb02 ~]# vim /etc/httpd/conf/httpd.conf
ServerName 127.0.0.1:80 #更改此處以取消警告！
[root@lb02 ~]# /etc/init.d/httpd start
Starting httpd: [ OK ]
[root@lb02 ~]# /etc/init.d/xinetd start
Starting xinetd: [ OK ]
[root@lb02 ~]# /etc/init.d/cobblerd start
Starting cobbler daemon: [ OK ]
[root@lb02 ~]# cobbler check # 檢查Cobbler的配置，如果看不到下面的結果，再次執行/etc/init.d/cobblerd restart
The following are potential configuration items that you may want to fix:
1 : The 'server' field in /etc/cobbler/settings must be set to something other than localhost, or kickstarting features will not work. This should be a resolvable hostname or IP for the boot server as reachable by all machines that will use it.
2 : For PXE to be functional, the 'next_server' field in /etc/cobbler/settings must be set to something other than 127.0.0.1, and should match the IP of the boot server on the PXE network.
3 : change 'disable' to 'no' in /etc/xinetd.d/tftp
4 : some network boot-loaders are missing from /var/lib/cobbler/loaders, you may run 'cobbler get-loaders' to download them, or, if you only want to handle x86/x86_64 netbooting, you may ensure that you have installed a *recent* version of the syslinux package installed and can ignore this message entirely. Files in this directory, should you want to support all architectures, should include pxelinux.0, menu.c32, elilo.efi, and yaboot. The 'cobbler get-loaders' command is the easiest way to resolve these requirements.
5 : change 'disable' to 'no' in /etc/xinetd.d/rsync
6 : file /etc/xinetd.d/rsync does not exist
7 : debmirror package is not installed, it will be required to manage debian deployments and repositories
8 : ksvalidator was not found, install pykickstart
9 : The default password used by the sample templates for newly installed machines (default_password_crypted in /etc/cobbler/settings) is still set to 'cobbler' and should be changed, try: "openssl passwd -1 -salt 'random-phrase-here' 'your-password-here'" to generate new one
10 : fencing tools were not found, and are required to use the (optional) power management features. install cman or fence-agents to use them
Restart cobblerd and then run 'cobbler sync' to apply changes.
# 看着上面的結果，一個一個解決。
# 第1、2、9個問題，順便修改其他功能
[root@lb02 ~]# cp /etc/cobbler/settings{,.ori} # 備份
# server，Cobbler服務器的IP。
[root@lb02 ~]# sed -i 's/server: 127.0.0.1/server: 10.10.10.18/' /etc/cobbler/settings
# next_server，如果用Cobbler管理DHCP，修改本項，作用不解釋，看kickstart。
[root@lb02 ~]# sed -i 's/next_server: 127.0.0.1/next_server: 10.10.10.18/' /etc/cobbler/settings
# 用Cobbler管理DHCP
[root@lb02 ~]# sed -i 's/manage_dhcp: 0/manage_dhcp: 1/' /etc/cobbler/settings
# 防止循環裝系統，適用於服務器第一啓動項是PXE啓動。
[root@lb02 ~]# sed -i 's/pxe_just_once: 0/pxe_just_once: 1/' /etc/cobbler/settings
# 用Cobbler管理rsync
[root@lb02 ~]# sed -i 's/manage_rsync: 0/manage_rsync: 1/' /etc/cobbler/settings
# 設置新裝系統的默認root密碼123456。下面的命令來源於提示9。random-phrase-here爲干擾碼，可以自行設定。
[root@lb02 ~]# openssl passwd -1 -salt 'tank' '123456'
$1$tank$Q5MsMJ53sjS0l5Rjzcmjo1
[root@lb02 ~]# vim /etc/cobbler/settings
default_password_crypted: "$1$tank$Q5MsMJ53sjS0l5Rjzcmjo1" #將生成的加密密碼改之。
# 第4個問題
[root@lb02 ~]# cobbler get-loaders # 會自動從官網下載
[root@lb02 ~]# cd /var/lib/cobbler/loaders/ # 查看下載的內容
[root@lb02 loaders]# ls
COPYING.elilo COPYING.yaboot grub-x86_64.efi menu.c32 README
COPYING.syslinux elilo-ia64.efi grub-x86.efi pxelinux.0 yaboot
# 第3、5個問題
[root@lb02 loaders]# vim /etc/xinetd.d/tftp
disable = yes
[root@lb02 loaders]# vim /etc/xinetd.d/rsync
disable = no
[root@lb02 loaders]# /etc/init.d/xinetd restart
Stopping xinetd: [ OK ]
Starting xinetd: [ OK ]
# 第8個問題
[root@lb02 loaders]# yum install -y pykickstart
[root@lb02 loaders]# /etc/init.d/cobblerd restart
Stopping cobbler daemon: [ OK ]
Starting cobbler daemon: [ OK ]
[root@lb02 loaders]# cobbler check
The following are potential configuration items that you may want to fix:
1 : dhcpd is not installed
2 : file /etc/xinetd.d/rsync does not exist #此提示一直存在！！！
3 : debmirror package is not installed, it will be required to manage debian deployments and repositories
# 和debian系統相關，不需要
4 : fencing tools were not found, and are required to use the (optional) power management features. install cman or fence-agents to use them
# 設備相關，不需要
Restart cobblerd and then run 'cobbler sync' to apply changes.2.3 配置DHCP
[root@lb02 loaders]# yum install -y dhcp
#配置DHCP
# 修改cobbler的dhcp模版，不要直接修改dhcp本身的配置文件，因爲cobbler會覆蓋。
[root@lb02 loaders]# vim /etc/cobbler/dhcp.template
# 僅列出修改過的字段
……
subnet 10.10.10.0 netmask 255.255.255.0 {
option routers 10.10.10.2;
option domain-name-servers 10.10.10.2;
option subnet-mask 255.255.255.0;
range dynamic-bootp 10.10.10.20 10.10.10.50;2.4 同步cobbler配置
# 同步最新cobbler配置，它會根據配置自動修改dhcp等服務。
[root@lb02 loaders]# cobbler sync # 同步所有配置，可以仔細看一下sync做了什麼。
task started: 2016-03-19_221213_sync
task started (id=Sync, time=Sat Mar 19 22:12:13 2016)
running pre-sync triggers
cleaning trees
removing: /var/lib/tftpboot/pxelinux.cfg/default
removing: /var/lib/tftpboot/grub/p_w_picpaths
removing: /var/lib/tftpboot/grub/efidefault
removing: /var/lib/tftpboot/grub/grub-x86.efi
removing: /var/lib/tftpboot/grub/grub-x86_64.efi
removing: /var/lib/tftpboot/s390x/profile_list
copying bootloaders
trying hardlink /var/lib/cobbler/loaders/grub-x86.efi -> /var/lib/tftpboot/grub/grub-x86.efi
trying hardlink /var/lib/cobbler/loaders/grub-x86_64.efi -> /var/lib/tftpboot/grub/grub-x86_64.efi
copying distros to tftpboot
copying p_w_picpaths
generating PXE configuration files
generating PXE menu structure
rendering DHCP files
generating /etc/dhcp/dhcpd.conf
rendering TFTPD files
generating /etc/xinetd.d/tftp
cleaning link caches
rendering Rsync files
running post-sync triggers
running python triggers from /var/lib/cobbler/triggers/sync/post/*
running python trigger cobbler.modules.sync_post_restart_services
running: dhcpd -t -q
received on stdout:
received on stderr:
running: service dhcpd restart
received on stdout: Shutting down dhcpd: [ OK ]
Starting dhcpd: [ OK ]
received on stderr:
running shell triggers from /var/lib/cobbler/triggers/sync/post/*
running python triggers from /var/lib/cobbler/triggers/change/*
running python trigger cobbler.modules.scm_track
running shell triggers from /var/lib/cobbler/triggers/change/*
*** TASK COMPLETE ***
# 再看一下dhcp的配置文件。
[root@lb02 loaders]# less /etc/dhcp/dhcpd.conf
# ******************************************************************
# Cobbler managed dhcpd.conf file
# generated from cobbler dhcp.conf template (Sat Mar 19 14:12:14 2016)
# Do NOT make changes to /etc/dhcpd.conf. Instead, make your changes
# in /etc/cobbler/dhcp.template, as /etc/dhcpd.conf will be
# overwritten.
# ******************************************************************
...
subnet 10.10.10.0 netmask 255.255.255.0 {
option routers 10.10.10.2;
option domain-name-servers 10.10.10.2;
option subnet-mask 255.255.255.0;
range dynamic-bootp 10.10.10.20 10.10.10.50;2.5 開機啓動
# 啓動相關服務並設置開機啓動(可選) chkconfig httpd on chkconfig xinetd on chkconfig cobblerd on chkconfig dhcpd on
3. Cobbler的命令行管理
3.1 查看命令幫助
[root@lb02 loaders]# cobbler usage ===== cobbler <distro|profile|system|repo|p_w_picpath|mgmtclass|package|file> ... [add|edit|copy|getks*|list|remove|rename|report] [options|--help] cobbler <aclsetup|buildiso|import|list|replicate|report|reposync|sync|validateks|version|signature|get-loaders|hardlink> [options|--help] [root@lb02 loaders]# cobbler import --help # 導入鏡像 Usage: cobbler [options] Options: -h, --help show this help message and exit --arch=ARCH OS architecture being imported --breed=BREED the breed being imported --os-version=OS_VERSION the version being imported --path=PATH local path or rsync location --name=NAME name, ex 'RHEL-5' --available-as=AVAILABLE_AS tree is here, don't mirror --kickstart=KICKSTART_FILE assign this kickstart file --rsync-flags=RSYNC_FLAGS pass additional flags to rsync cobbler check 覈對當前設置是否有問題 cobbler list 列出所有的cobbler元素 cobbler report 列出元素的詳細信息 cobbler sync 同步配置到數據目錄,更改配置最好都要執行下 cobbler reposync 同步yum倉庫 cobbler distro 查看導入的發行版系統信息 cobbler system 查看添加的系統信息 cobbler profile 查看配置信息
3.2 導入鏡像
[root@lb02 loaders]# mount /dev/cdrom /mnt/ # 掛載CentOS7的系統鏡像。 mount: block device /dev/sr0 is write-protected, mounting read-only # 導入系統鏡像 [root@lb02 loaders]# cobbler import --path=/mnt/ --name=CentOS-7.1-x86_64 --arch=x86_64 task started: 2016-03-19_222438_import task started (id=Media import, time=Sat Mar 19 22:24:38 2016) Found a candidate signature: breed=redhat, version=rhel6 Found a matching signature: breed=redhat, version=rhel6 Adding distros from path /var/www/cobbler/ks_mirror/CentOS-6.7-x86_64: creating new distro: CentOS-6.7-x86_64 trying symlink: /var/www/cobbler/ks_mirror/CentOS-6.7-x86_64 -> /var/www/cobbler/links/CentOS-6.7-x86_64 creating new profile: CentOS-6.7-x86_64 associating repos checking for rsync repo(s) checking for rhn repo(s) checking for yum repo(s) starting descent into /var/www/cobbler/ks_mirror/CentOS-6.7-x86_64 for CentOS-6.7-x86_64 processing repo at : /var/www/cobbler/ks_mirror/CentOS-6.7-x86_64 need to process repo/comps: /var/www/cobbler/ks_mirror/CentOS-6.7-x86_64 looking for /var/www/cobbler/ks_mirror/CentOS-6.7-x86_64/repodata/*comps*.xml Keeping repodata as-is :/var/www/cobbler/ks_mirror/CentOS-6.7-x86_64/repodata *** TASK COMPLETE *** # --path 鏡像路徑 # --name 爲安裝源定義一個名字 # --arch 指定安裝源是32位、64位、ia64, 目前支持的選項有: x86│x86_64│ia64 # 安裝源的唯一標示就是根據name參數來定義，本例導入成功後，安裝源的唯一標示就是：CentOS-6.7-x86_64，如果重複，系統會提示導入失敗。 [root@lb02 loaders]# cobbler distro list # 查看鏡像列表 CentOS-6.7-x86_64 # 鏡像存放目錄，cobbler會將鏡像中的所有安裝文件拷貝到本地一份，放在/var/www/cobbler/ks_mirror下的CentOS-6.7-x86_64目錄下。因此/var/www/cobbler目錄必須具有足夠容納安裝文件的空間。 [root@lb02 loaders]# cd /var/www/cobbler/ks_mirror/ [root@lb02 ks_mirror]# ls CentOS-6.7-x86_64 config [root@lb02 ks_mirror]# ls CentOS-6.7-x86_64/ CentOS_BuildTag GPL Packages RPM-GPG-KEY-CentOS-6 RPM-GPG-KEY-CentOS-Testing-6 EFI p_w_picpaths RELEASE-NOTES-en-US.html RPM-GPG-KEY-CentOS-Debug-6 TRANS.TBL EULA isolinux repodata RPM-GPG-KEY-CentOS-Security-6
3.3 指定ks.cfg文件及調整內核參數
# Cobbler的ks.cfg文件存放位置
[root@lb02 ks_mirror]# cd /var/lib/cobbler/kickstarts/
[root@lb02 kickstarts]# ls # 自帶很多
default.ks esxi5-ks.cfg legacy.ks sample_autoyast.xml sample_esx4.ks sample_esxi5.ks sample_old.seed
esxi4-ks.cfg install_profiles pxerescue.ks sample_end.ks （默認使用的ks文件） sample_esxi4.ks sample.ks sample.seed
[root@lb02 kickstarts]# rz # 上傳準備好的ks文件
rz waiting to receive.
Starting zmodem transfer. Press Ctrl+C to cancel.
Transferring Cobbler-CentOS-6.7-x86_64.cfg...
100% 1 KB 1 KB/sec 00:00:01 0 Errors
[root@lb02 kickstarts]# mv Cobbler-CentOS-6.7-x86_64.cfg CentOS-6.7-x86_64.cfg
# 在第一次導入系統鏡像後，Cobbler會給鏡像指定一個默認的kickstart自動安裝文件在/var/lib/cobbler/kickstarts下的sample_end.ks。
[root@lb02 kickstarts]# cobbler list
distros:
CentOS-6.7-x86_64
profiles:
CentOS-6.7-x86_64
systems:
repos:
p_w_picpaths:
mgmtclasses:
packages:
files:
# 查看安裝鏡像文件信息
[root@lb02 kickstarts]# cobbler distro report --name=CentOS-6.7-x86_64
Name : CentOS-6.7-x86_64
Architecture : x86_64
TFTP Boot Files : {}
Breed : redhat
Comment :
Fetchable Files : {}
Initrd : /var/www/cobbler/ks_mirror/CentOS-6.7-x86_64/p_w_picpaths/pxeboot/initrd.img
Kernel : /var/www/cobbler/ks_mirror/CentOS-6.7-x86_64/p_w_picpaths/pxeboot/vmlinuz
Kernel Options : {}
Kernel Options (Post Install) : {}
Kickstart Metadata : {'tree': 'http://@@http_server@@/cblr/links/CentOS-6.7-x86_64'}
Management Classes : []
OS Version : rhel6
Owners : ['admin']
Red Hat Management Key : <<inherit>>
Red Hat Management Server : <<inherit>>
Template Files : {}
# 查看所有的profile設置
[root@lb02 kickstarts]# cobbler profile report
# 查看指定的profile設置
[root@lb02 kickstarts]# cobbler profile report --name=CentOS-6.7-x86_64
Name : CentOS-6.7-x86_64
TFTP Boot Files : {}
Comment :
DHCP Tag : default
Distribution : CentOS-6.7-x86_64
Enable gPXE? : 0
Enable PXE Menu? : 1
Fetchable Files : {}
Kernel Options : {}
Kernel Options (Post Install) : {}
Kickstart : /var/lib/cobbler/kickstarts/sample_end.ks
Kickstart Metadata : {}
Management Classes : []
Management Parameters : <<inherit>>
Name Servers : []
Name Servers Search Path : []
Owners : ['admin']
Parent Profile :
Internal proxy :
Red Hat Management Key : <<inherit>>
Red Hat Management Server : <<inherit>>
Repos : []
Server Override : <<inherit>>
Template Files : {}
Virt Auto Boot : 1
Virt Bridge : xenbr0
Virt CPUs : 1
Virt Disk Driver Type : raw
Virt File Size(GB) : 5
Virt Path :
Virt RAM (MB) : 512
Virt Type : kvm
#如果是裝7版本的系統就有點變化了。
詳情見：3.4 安裝系統
可以很愉快的告訴你到這裏就可以安裝系統了！
新建一臺虛擬機，不解釋，開機就可以看到下面的圖片了！
有沒有發現不美觀的地方？
網址不是我的！改！
#修改Cobbler提示 [root@lb02 kickstarts]# vim /etc/cobbler/pxe/pxedefault.template MENU TITLE Cobbler | http://tank_ke.io [root@lb02 kickstarts]# cobbler sync # 修改配置都要同步
OK，現在好看多了。選擇第二項就可以繼續裝機了。你可以讓系統飛着，然後接着看下文！！
4. ks.cfg文件簡析
文件大部分參數含義見kickstart文章，此處只講一些不同的地方。同時可以參考模板文件。
[root@lb02 kickstarts]# cat CentOS-6.7-x86_64.cfg
# Cobbler for Kickstart Configurator for CentOS 6.7 by tank
install
url --url=$tree # 這些$開頭的變量都是調用配置文件裏的值。
text
lang en_US.UTF-8
keyboard us
zerombr
bootloader --location=mbr --driveorder=sda --append="crashkernel=auto rhgb quiet"
# Network information
$SNIPPET('network_config')
timezone --utc Asia/Shanghai
authconfig --enableshadow --passalgo=sha512
rootpw --iscrypted $default_password_crypted
clearpart --all --initlabel
part /boot --fstype ext4 --size 1024 # CentOS7系統磁盤默認格式xfs
part swap --size 1024
part / --fstype ext4 --size 1 --grow
firstboot --disable
selinux --disabled
firewall --disabled
logging --level=info
reboot
%pre
$SNIPPET('log_ks_pre')
$SNIPPET('kickstart_start')
$SNIPPET('pre_install_network_config')
# Enable installation monitoring
$SNIPPET('pre_anamon')
%end
%packages
@base
@compat-libraries
@debugging
@development
tree
nmap
sysstat
lrzsz
dos2unix
telnet
iptraf
ncurses-devel
openssl-devel
zlib-devel
OpenIPMI-tools
screen
%end
%post
systemctl disable postfix.service
%end