01 puppet master-agent模型
配置環境
node1 192.168.1.131 CentOS7.2
node2 192.168.1.132 CentOS7.2
node3 192.168.1.133 CentOS7.2
node4 192.168.1.134 CentOS7.2
1、agent節點擴展爲master節點
[root@node2 ~]# yum -y install puppet-server-3.8.4-1.el7.noarch.rpm
[root@node2 ~]# rpm -ql puppet-server
/etc/puppet/environments
/etc/puppet/environments/example_env
/etc/puppet/environments/example_env/README.environment
/etc/puppet/environments/example_env/manifests
/etc/puppet/environments/example_env/modules
/etc/puppet/fileserver.conf
/etc/puppet/manifests
/usr/lib/systemd/system/puppetmaster.service
/usr/share/man/man8/puppet-ca.8.gz
/usr/share/man/man8/puppet-master.8.gz
[root@node2 ~]# cd /etc/puppet
[root@node2 puppet]# vim puppet.conf
[root@node2 puppet]# cat /etc/hosts
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.1.131 node1
192.168.1.132 node2
192.168.1.133 node3
192.168.1.134 node4
[root@node2 puppet]# puppet master -v --no-daemonize
Info: Creating a new SSL key for ca
Info: Creating a new SSL certificate request for ca
Info: Certificate Request fingerprint (SHA256): 68:6E:25:1F:A2:C9:B9:25:D8:98:73:5E:2E:4B:8D:A9:D4:5C:30:DA:76:7E:55:0B:17:73:CC:56:CC:1D:CD:B1
Notice: Signed certificate request for ca
Info: Creating a new certificate revocation list
Info: Creating a new SSL key for node2
Info: csr_attributes file loading from /etc/puppet/csr_attributes.yaml
Info: Creating a new SSL certificate request for node2
Info: Certificate Request fingerprint (SHA256): 6B:D9:38:9C:F6:85:A7:FC:82:8C:D5:59:FA:73:6E:B0:84:F5:C7:AA:B9:F5:B5:4D:75:04:22:1A:2B:7F:99:0E
Notice: node2 has a waiting certificate request
Notice: Signed certificate request for node2
Notice: Removing file Puppet::SSL::CertificateRequest node2 at '/var/lib/puppet/ssl/ca/requests/node2.pem'
Notice: Removing file Puppet::SSL::CertificateRequest node2 at '/var/lib/puppet/ssl/certificate_requests/node2.pem'
Notice: Starting Puppet master version 3.8.4
[root@node2 puppet]# ls /var/lib/puppet/ssl/
ca certs private public_keys
certificate_requests crl.pem private_keys
[root@node2 puppet]# rm -rf /var/lib/puppet/ssl/*
#重新生成配置文件
[root@node2 puppet]# puppet master -v --no-daemonize
Info: Creating a new SSL key for ca
Info: Creating a new SSL certificate request for ca
Info: Certificate Request fingerprint (SHA256): F3:E1:22:ED:91:C4:40:C1:CF:03:70:2E:C8:95:00:72:39:9B:BF:AC:0F:B2:40:79:1E:ED:76:C1:09:A0:4D:2E
Notice: Signed certificate request for ca
Info: Creating a new certificate revocation list
Info: Creating a new SSL key for node2
Info: csr_attributes file loading from /etc/puppet/csr_attributes.yaml
Info: Creating a new SSL certificate request for node2
Info: Certificate Request fingerprint (SHA256): 48:91:99:06:65:B4:29:5C:B4:14:EA:20:B2:53:D6:30:55:78:56:65:B1:99:DA:15:CB:66:28:60:20:E6:1D:87
Notice: node2 has a waiting certificate request
Notice: Signed certificate request for node2
Notice: Removing file Puppet::SSL::CertificateRequest node2 at '/var/lib/puppet/ssl/ca/requests/node2.pem'
Notice: Removing file Puppet::SSL::CertificateRequest node2 at '/var/lib/puppet/ssl/certificate_requests/node2.pem'
Notice: Starting Puppet master version 3.8.4
[root@node2 puppet]# ls /usr/lib/systemd/system/pupp*
/usr/lib/systemd/system/puppetagent.service /usr/lib/systemd/system/puppetmaster.service /usr/lib/systemd/system/puppet.service
[root@node2 puppet]# systemctl start puppetmaster.service
#配置agent
[root@node3 ~]# rpm -ivh epel-release-latest-7.noarch.rpm
[root@node3 ~]# yum -y install facter-2.4.4-1.el7.x86_64.rpm puppet-3.8.4-1.el7.noarch.rpm
[root@node3 ~]# cd /etc/puppet/
[root@node3 puppet]# puppet agent --server=node2 --no-daemonize --noop --test --verboseInfo: Creating a new SSL key for node3
Info: Caching certificate for ca
Info: csr_attributes file loading from /etc/puppet/csr_attributes.yaml
Info: Creating a new SSL certificate request for node3
Info: Certificate Request fingerprint (SHA256): 70:FA:2D:17:6A:52:9F:EC:AE:7B:83:CD:F6:91:42:3D:4B:DE:79:61:7C:46:E4:D6:1E:65:4D:8F:8B:D0:A4:E1
Info: Caching certificate for ca
Exiting; no certificate found and waitforcert is disabled
[root@node2 puppet]# puppet cert list
"node3" (SHA256) 70:FA:2D:17:6A:52:9F:EC:AE:7B:83:CD:F6:91:42:3D:4B:DE:79:61:7C:46:E4:D6:1E:65:4D:8F:8B:D0:A4:E1
[root@node2 puppet]# puppet cert sign node3
Notice: Signed certificate request for node3
Notice: Removing file Puppet::SSL::CertificateRequest node3 at '/var/lib/puppet/ssl/ca/requests/node3.pem'
[root@node3 puppet]# puppet agent --server=node2 --no-daemonize --noop --test --verboseInfo: Creating a new SSL key for node3
Info: Caching certificate for ca
Info: csr_attributes file loading from /etc/puppet/csr_attributes.yaml
Info: Creating a new SSL certificate request for node3
Info: Certificate Request fingerprint (SHA256): 70:FA:2D:17:6A:52:9F:EC:AE:7B:83:CD:F6:91:42:3D:4B:DE:79:61:7C:46:E4:D6:1E:65:4D:8F:8B:D0:A4:E1
Info: Caching certificate for ca
Exiting; no certificate found and waitforcert is disabled
[root@node3 puppet]# puppet agent --server=node2 --no-daemonize --verboseInfo: Caching certificate for node3
Info: Caching certificate_revocation_list for ca
Info: Caching certificate for node3
Notice: Starting Puppet client version 3.8.4
Info: Retrieving pluginfacts
Info: Retrieving plugin
Info: Caching catalog for node3
Info: Applying configuration version '1481204536'
Info: Creating state file /var/lib/puppet/state/state.yaml
Notice: Finished catalog run in 0.03 seconds
#列出所有證書
[root@node2 puppet]# puppet cert list --all
+ "node2" (SHA256) 2E:C8:71:41:A2:74:B9:41:20:85:30:7D:28:D2:5A:0D:4E:5C:CF:DD:54:F1:9F:82:C7:CB:1F:FD:42:31:91:81
+ "node3" (SHA256) EA:F3:56:95:E1:61:DD:63:B9:07:F0:0B:A9:CC:99:62:4C:1F:E1:7E:CF:83:1B:D7:B3:9A:B4:D9:B4:F5:27:8B
#清除node3結點證書
[root@node2 puppet]# puppet cert clean node3
Notice: Revoked certificate with serial 3
Notice: Removing file Puppet::SSL::Certificate node3 at '/var/lib/puppet/ssl/ca/signed/node3.pem'
Notice: Removing file Puppet::SSL::Certificate node3 at '/var/lib/puppet/ssl/certs/node3.pem'
[root@node3 puppet]# rm -f /var/run/puppet/agent.pid
#重新籤
[root@node3 puppet]# puppet agent --server=node2 --no-daemonize --verbose
Info: Creating a new SSL key for node3
Info: Caching certificate for ca
Info: csr_attributes file loading from /etc/puppet/csr_attributes.yaml
Info: Creating a new SSL certificate request for node3
Info: Certificate Request fingerprint (SHA256): 27:C9:FD:B5:64:F9:B7:22:94:CD:84:0B:20:24:3F:55:3A:FB:AB:24:CD:8F:CB:A2:CD:B9:54:DC:EB:FB:E0:B1
Info: Caching certificate for ca
[root@node2 puppet]# puppet cert list
"node3" (SHA256) 27:C9:FD:B5:64:F9:B7:22:94:CD:84:0B:20:24:3F:55:3A:FB:AB:24:CD:8F:CB:A2:CD:B9:54:DC:EB:FB:E0:B1
[root@node2 puppet]# puppet cert sign node3
Notice: Signed certificate request for node3
Notice: Removing file Puppet::SSL::CertificateRequest node3 at '/var/lib/puppet/ssl/ca/requests/node3.pem'
[root@node2 puppet]# cd manifests/
[root@node2 manifests]# vim /etc/puppet/modules/nginx/mainfets/init.pp
class nginx {
package {'nginx':
ensure => latest,
name => nginx,
} ->
service{'nginx':
enable => true,
ensure => running,
hasrestart => true,
restart => 'service nginx reload',
}
}
class nginx::webserver inherits nginx {
file{'/etc/nginx/nginx.conf':
source => 'puppet:///modules/nginx/nginx_web.conf',
ensure => file,
notify => Service['nginx'],
require => Package['nginx'],
}
}
class nginx::proxy inherits nginx {
file{'/etc/nginx/nginx.conf':
content => template('nginx/nginx_proxy.conf.erb'),
ensure => file,
notify => Service['nginx'],
require => Package['nginx'],
}
}
[root@node2 manifests]# pwd
/etc/puppet/manifests
[root@node2 manifests]# vim site.pp
node "node3" {
include nginx::proxy
}
[root@node2 manifests]# systemctl restart puppetmaster.service
[root@node3 puppet]# puppet agent --server=node2 --no-daemonize --verbose
Notice: Starting Puppet client version 3.8.4
Info: Caching certificate_revocation_list for ca
Info: Retrieving pluginfacts
Info: Retrieving plugin
Error: Could not retrieve catalog from remote server: Error 400 on SERVER: Could not find class nginx::proxy for node3 on node node3
Notice: Using cached catalog
Info: Applying configuration version '1481204536'
Notice: Finished catalog run in 0.04 seconds
[root@node3 puppet]# systemctl start puppetagent.service
02 puppet master-agent模型
[root@node3 puppet]# puppet config print environment
production
[root@node2 puppet]# vim autosign.conf
*.magedu.com
[root@node2 puppet]# systemctl restart puppetmaster.service
#自動簽署agent證書
[root@node4 ~]# rpm -ivh epel-release-latest-7.noarch.rpm
[root@node4 ~]# yum -y install facter-2.4.4-1.el7.x86_64.rpm puppet-3.8.4-1.el7.noarch.rpm
[root@node4 ~]# puppet agent --server=node2.magedu.com --noop --no-daemonize --verbose --test
Info: Creating a new SSL key for node4
Info: Caching certificate for ca
Info: csr_attributes file loading from /etc/puppet/csr_attributes.yaml
Info: Creating a new SSL certificate request for node4
Info: Certificate Request fingerprint (SHA256): 4B:CE:22:CB:18:E7:E3:0E:B9:A5:24:0B:21:76:92:AE:A7:19:D4:4A:B1:FE:88:28:D6:07:85:15:DD:72:E8:35
Info: Caching certificate for ca
Exiting; no certificate found and waitforcert is disabled
[root@node2 puppet]# puppet cert list --all
+ "node2.magedu.com" (SHA256) 45:11:FF:B1:0D:D8:27:A9:A3:29:9C:BC:F6:B8:67:80:4E:81:9A:7D:18:90:EF:8E:5B:98:C9:67:44:DF:40:54 (alt names: "DNS:node2.magedu.com", "DNS:puppet", "DNS:puppet.magedu.com")
+ "node3.magedu.com" (SHA256) BD:C3:B5:8B:3D:D5:56:FF:D7:A5:19:AD:47:E9:04:94:B9:D9:78:49:84:6E:E3:AB:AE:9C:5D:B4:8C:B8:F8:C2
+ "node4.magedu.com" (SHA256) 9A:87:F9:8F:EC:9E:00:ED:C7:13:7B:4C:14:4D:E5:6F:11:7B:E4:C8:54:C8:B8:18:39:75:27:19:3D:67:0D:D3
[root@node2 puppet]# vim manifests/site.pp
node "node3.magedu.com" {
include nginx::proxy
}
node "node4.magedu.com" {
}
[root@node2 puppet]# systemctl restart puppetmaster.service
[root@node4 ~]# puppet agent --server=node2.magedu.com --noop --no-daemonize --verbose --test
Info: Caching certificate for ca
Info: csr_attributes file loading from /etc/puppet/csr_attributes.yaml
Info: Creating a new SSL certificate request for node4.magedu.com
Info: Certificate Request fingerprint (SHA256): 4F:47:81:34:B7:66:24:80:81:EE:F0:7D:41:B8:D2:43:57:74:D4:A7:C9:87:6C:59:D4:63:98:B3:D4:49:0A:E8
Info: Caching certificate for node4.magedu.com
Info: Caching certificate_revocation_list for ca
Info: Caching certificate for ca
Info: Retrieving pluginfacts
Info: Retrieving plugin
Info: Caching catalog for node4.magedu.com
Info: Applying configuration version '1481293129'
Info: Creating state file /var/lib/puppet/state/state.yaml
puppet kick模式
[root@node3 ~]# puppet agent --configprint environment
production
[root@node3 ~]# puppet config print | grep listen
listen = false
[root@node3 ~]# cd /etc/puppet/
[root@node3 puppet]# vim puppet.conf
末行添加
listen = true
[root@node3 puppet]# systemctl restart puppetagent.service
[root@node3 puppet]# vim namespaceauth.conf
[puppetrun]
allow node2.magedu.com
[root@node3 puppet]# systemctl restart puppetagent.service
[root@node2 puppet]# mkdir -p /etc/puppet/modules/varnish/{manifests,files,templates,lib,tests,spec}
[root@node2 puppet]# vim /etc/puppet/modules/varnish/manifests/init.pp
class varnish {
package{'varnish':
ensure => latest,
}
}
[root@node2 puppet]# vim /etc/puppet/manifests/site.pp
node "node3.magedu.com" {
include varnish
include nginx::proxy
}
node "node4.magedu.com" {
}
[root@node2 puppet]# systemctl restart puppetmaster.service
[root@node3 puppet]# vim auth.conf
在倒數第四行# deny之前添加
path /run
method save
allow node2.magedu.com
[root@node3 puppet]# systemctl restart puppetagent.service
[root@node2 puppet]# puppet kick node3.magedu.com
Warning: Puppet kick is deprecated. See http://links.puppetlabs.com/puppet-kick-deprecation
Warning: Failed to load ruby LDAP library. LDAP functionality will not be available
Triggering node3.magedu.com
Getting status
status is success
node3.magedu.com finished with exit code 0
Finished
[root@node2 puppet]# puppet apply -e 'include varnish' --noop -v
Notice: Compiled catalog for node2.magedu.com in environment production in 0.95 seconds
Info: Applying configuration version '1481332757'
Notice: /Stage[main]/Varnish/Package[varnish]/ensure: current_value absent, should be latest (noop)
Notice: Class[Varnish]: Would have triggered 'refresh' from 1 events
Notice: Stage[main]: Would have triggered 'refresh' from 1 events
Notice: Finished catalog run in 0.55 seconds
[root@node3 puppet]# vim namespaceauth.conf
[puppetrunner]
allow node2.magedu.com
[root@node3 puppet]# systemctl restart puppetagent.service
03 運維工具介紹及pxe環境的實現
1、配置dhcp服務器
環境配置：
server: 192.168.1.151 CentOS release 6.5
eth0: 192.168.1.151 bridge
eth1: vmnet2
[root@node1 ~]# yum install dhcp -y
[root@node1 ~]# ifconfig eth1 10.0.10.1/24 up
[root@node1 ~]# ifconfig
eth0 Link encap:Ethernet HWaddr 00:0C:29:06:DE:28
inet addr:192.168.1.151 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fe80::20c:29ff:fe06:de28/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:2712 errors:0 dropped:0 overruns:0 frame:0
TX packets:107 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:295129 (288.2 KiB) TX bytes:12335 (12.0 KiB)
eth1 Link encap:Ethernet HWaddr 00:0C:29:06:DE:32
inet addr:10.0.10.1 Bcast:10.0.10.255 Mask:255.255.255.0
inet6 addr: fe80::20c:29ff:fe06:de32/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:6 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 b) TX bytes:468 (468.0 b)
[root@node1 ~]# cd /etc/dhcp/
[root@node1 dhcp]# cp /usr/share/doc/dhcp-4.1.1/dhcpd.conf.sample dhcpd.conf
[root@node1 dhcp]# vim dhcpd.conf
option domain-name "magedu.com";
option domain-name-servers 192.168.1.1;
default-lease-time 43200;
max-lease-time 86400;
log-facility local7;
subnet 10.0.10.0 netmask 255.255.255.0 {
range 10.0.10.21 10.0.10.50;
option routers 10.0.10.1;
}
[root@node1 dhcp]# service dhcpd start
查看客戶端自動獲得IP地址
[root@node1 dhcp]# tail /var/lib/dhcpd/dhcpd.leases
server-duid "\000\001\000\001\037\336a\327\000\014)\006\3362";
lease 10.0.10.21 {
starts 6 2016/12/10 06:51:32;
ends 6 2016/12/10 18:51:32;
cltt 6 2016/12/10 06:51:32;
binding state active;
next binding state free;
hardware ethernet 00:0c:29:bb:ea:bf;
}
爲客戶端分配指定IP地址：
[root@node1 dhcp]# vim dhcpd.conf
添加
host ftpserver {
hardware ethernet 00:0c:29:bb:ea:bf;
fixed-address 10.0.10.55;
}
[root@node1 dhcp]# service dhcpd restart
配置pxe
1、dhcp
[root@node1 dhcp]# vim dhcpd.conf
修改
subnet 10.0.10.0 netmask 255.255.255.0 {
range 10.0.10.21 10.0.10.50;
option routers 10.0.10.1;
}
爲
subnet 10.0.10.0 netmask 255.255.255.0 {
range 10.0.10.21 10.0.10.50;
option routers 10.0.10.1;
next-server 10.0.10.1;
filename "pxelinux.0";
}
[root@node1 dhcp]# service dhcpd restart
2、tftp
[root@node1 dhcp]# yum -y install tftp-server tftp
[root@node1 dhcp]# chkconfig tftp on
[root@node1 dhcp]# service xinetd start
[root@node1 dhcp]# cp /etc/fstab /var/lib/tftpboot/
[root@node1 dhcp]# tftp 10.0.10.1
[root@node1 dhcp]# cd /var/lib/tftpboot/
[root@node1 tftpboot]# yum -y install syslinux
[root@node1 tftpboot]# cp /usr/share/syslinux/pxelinux.0 /var/lib/tftpboot/
[root@node1 ~]# mount -r /dev/cdrom /mnt/
[root@node1 ~]# cd /mnt/isolinux/
[root@node1 isolinux]# ls
boot.cat grub.conf isolinux.bin memtest TRANS.TBL vmlinuz
boot.msg initrd.img isolinux.cfg splash.jpg vesamenu.c32
[root@node1 isolinux]# cd ../p_w_picpaths/pxeboot/
[root@node1 pxeboot]# ls
initrd.img TRANS.TBL vmlinuz
[root@node1 pxeboot]# cp vmlinuz initrd.img /var/lib/tftpboot/
[root@node1 pxeboot]# cd ../../isolinux/
[root@node1 isolinux]# cp isolinux.cfg vesamenu.c32 splash.jpg boot.msg /var/lib/tftpboot/
[root@node1 isolinux]# mkdir /var/lib/tftpboot/pxelinux.cfg
[root@node1 isolinux]# cp isolinux.cfg /var/lib/tftpboot/pxelinux.cfg/
[root@node1 isolinux]# cd /var/lib/tftpboot/pxelinux.cfg/
[root@node1 pxelinux.cfg]# mv isolinux.cfg default
[root@node1 pxelinux.cfg]# vim default
修改
menu title Welcome to CentOS 6.6!
爲
menu title Welcome to CentOS 6.6 Magedu!
新建一個虛擬機，設置網卡爲VMnet2
[root@node1 pxelinux.cfg]# cd
[root@node1 ~]# yum -y install httpd
[root@node1 ~]# mkdir /var/www/html/centos6
[root@node1 ~]# umount /dev/cdrom
[root@node1 ~]# mount -r /dev/cdrom /var/www/html/centos6/
[root@node1 ~]# service httpd start
安裝模式選擇“URL”，配置自動獲得IP地址
配置url地址爲：http://10.0.10.1/centos6
04 cobbler簡單實現
1、cobbler安裝
[root@node1 ~]# rpm -Uvh http://mirrors.ustc.edu.cn/fedora/epel/6/x86_64/epel-release-6-8.noarch.rpm
[root@node1 ~]# yum -y install cobbler cobbler-web pykickstart debmirror httpd syslinux
[root@node1 ~]# cd /var/lib/tftpboot/
[root@node1 tftpboot]# mkdir /root/pxeboot
[root@node1 tftpboot]# mv ./* /root/pxeboot/
[root@node1 tftpboot]# cd
[root@node1 ~]# vim /etc/dhcp/dhcpd.conf
修改
subnet 10.0.10.0 netmask 255.255.255.0 {
range 10.0.10.21 10.0.10.50;
option routers 10.0.10.1;
next-server 10.0.10.1;
filename "pxelinux.0";
}
爲
subnet 10.0.10.0 netmask 255.255.255.0 {
range 10.0.10.21 10.0.10.50;
option routers 10.0.10.1;
filename "pxelinux.0";
}
[root@node1 ~]# service dhcpd restart
[root@node1 ~]# service httpd start
[root@node1 ~]# service cobblerd start
[root@node1 ~]# cd /etc/cobbler/
[root@node1 ~]# openssl passwd -1 -salt `openssl rand -hex 4` #密碼設爲'magedu'
Password:
$1$f5673d2f$v4u767ixJnzbYp3XsW4.81
[root@node1 cobbler]# vim settings
修改
server: 127.0.0.1
爲
server: 10.0.10.1
修改
next_server: 127.0.0.1
爲
next_server: 10.0.10.1
修改
default_password_crypted: "$1$mF86/UHC$WvcIcX2t6crBz2onWxyac."
爲
default_password_crypted: "$1$f5673d2f$v4u767ixJnzbYp3XsW4.81" #用上面生成的密碼替換配置文件中的密碼
[root@node1 cobbler]# service cobblerd restart
[root@node1 cobbler]# cobbler sync
[root@node1 tftpboot]# cobbler repo help
usage
=====
cobbler repo add
cobbler repo copy
cobbler repo edit
cobbler repo find
cobbler repo list
cobbler repo remove
cobbler repo rename
cobbler repo report
[root@node1 tftpboot]# umount /dev/cdrom
[root@node1 tftpboot]# mount /dev/cdrom /media/ -r
[root@node1 tftpboot]# cobbler import --path=/media/ --name=centos6.6-x86_64
[root@node1 ~]# cd /var/www/cobbler/ks_mirror/
[root@node1 ks_mirror]# ls
centos6.6-x86_64 config
[root@node1 ks_mirror]# cd centos6.6-x86_64/
[root@node1 centos6.6-x86_64]# ls
CentOS_BuildTag isolinux RPM-GPG-KEY-CentOS-Debug-6
EFI Packages RPM-GPG-KEY-CentOS-Security-6
EULA RELEASE-NOTES-en-US.html RPM-GPG-KEY-CentOS-Testing-6
GPL repodata TRANS.TBL
p_w_picpaths RPM-GPG-KEY-CentOS-6
[root@node1 centos6.6-x86_64]# cd /etc/httpd/conf.d/
[root@node1 conf.d]# ls
cobbler.conf cobbler_web.conf README ssl.conf welcome.conf wsgi.conf
[root@node1 cobbler]# chkconfig rsync on
[root@node1 cobbler]# service xinetd restart
[root@node1 cobbler]# vim /etc/debmirror.conf
修改
@dists="sid";
爲
#@dists="sid";
修改
@arches="i386";
爲
#@arches="i386";
[root@node1 ~]# cobbler profile list
centos6.6-x86_64
[root@node1 ~]# cobbler distro list
centos6.6-x86_64
[root@node1 ~]# cobbler sync
[root@node1 ~]# service cobblerd restart
啓動測試客戶端，可以正常安裝操作系統
2、新增一個kickstart安裝項
[root@node1 ~]# cobbler profile help add
usage
=====
cobbler profile add
cobbler profile copy
cobbler profile dumpvars
cobbler profile edit
cobbler profile find
cobbler profile getks
cobbler profile list
cobbler profile remove
cobbler profile rename
cobbler profile report
[root@node1 ~]# vim centos6.x86_64.cfg #CentOS安裝的kickstart文件
# Kickstart file automatically generated by anaconda.
#version=DEVEL
install
url --url="http://10.0.10.1/cobbler/ks_mirror/centos6.6-x86_64/"
lang zh_CN.UTF-8
keyboard us
rootpw --iscrypted $6$dxqrElMVBdEAZWfC$dZOGcI8vfpUUMx.jsSh2BbCukKthMKnnKHs5GUGJTuzYgVx4ZFXIbigqg61xyiTId0XDqyqZ/kiX7hTnaEAzq0
firewall --service=ssh
authconfig --enableshadow --passalgo=sha512
selinux --disable
timezone --utc Asia/Shanghai
bootloader --location=mbr --driveorder=sda --append="crashkernel=auto rhgb quiet"
# The following is the partition information you requested
# Note that any partitions you deleted are not expressed
# here so unless you clear all partitions first, this is
# not guaranteed to work
#clearpart --none
#part /boot --fstype=ext4 --size=500
#part swap --size=2000
#part / --fstype=ext4 --grow --size=200
repo --name="CentOS" --baseurl=cdrom:sr0 --cost=100
%packages
@base
@chinese-support
@core
@debugging
@basic-desktop
@desktop-debugging
@desktop-platform
@directory-client
@fonts
@general-desktop
@graphical-admin-tools
@input-methods
@internet-applications
@internet-browser
@java-platform
@legacy-x
@network-file-system-client
@office-suite
@print-client
@remote-desktop-clients
@server-platform
@server-policy
@workstation-policy
@x11
mtools
pax
oddjob
wodim
sgpio
genisop_w_picpath
device-mapper-persistent-data
abrt-gui
samba-winbind
certmonger
pam_krb5
krb5-workstation
libXmu
%end
[root@node1 ~]# cp centos6.x86_64.cfg /var/lib/cobbler/kickstarts/
[root@node1 ~]# cobbler distro list
centos6.6-x86_64
[root@node1 ~]# cobbler profile add --name "centos6.6-x86_64-web" --distro=centos6.6-x86_64 --kickstart=/var/lib/cobbler/kickstarts/centos6.x86_64.cfg
[root@node1 ~]# cobbler profile list
centos6.6-x86_64
centos6.6-x86_64-web
[root@node1 ~]# cobbler sync
啓動客戶機測試，安裝成功！
3、cobbler_web
1）生成cobbler登錄賬號、密碼
[root@node1 ~]# cd /etc/cobbler/
[root@node1 cobbler]# htdigest /etc/cobbler/users.digest "Cobbler" cobbler
Changing password for user cobbler in realm Cobbler
New password:
Re-type new password:
#注：cobbler爲登錄賬號，密碼通過終端輸入，這裏爲123456
命令執行完成後生成users.digest文件
[root@node1 cobbler]# ll users.digest
-rw-r--r-- 1 root root 49 Dec 11 09:51 users.digest
[root@node1 ~]# cobbler sync
[root@node1 ~]# service httpd restart
[root@node1 ~]# service cobblerd restart
登錄： http://192.168.1.151/cobbler_web （用戶名cobbler,密碼：123456）
登錄成功！
05 CentOS 7 cobbler
配置環境：
node1 192.168.1.131 CentOS Linux release 7.2
1、cobbler安裝配置
[root@node1 ~]# rpm -ivh http://192.168.56.2/epel/epel-release-latest-7.noarch.rpm
[root@node1 ~]# yum install cobbler -y
[root@node1 ~]# systemctl start cobblerd.service
[root@node1 ~]# systemctl start httpd.service
[root@node1 ~]# openssl passwd -1 -salt $(openssl rand -hex 4) 生成密碼
Password:
$1$3cc52881$nUzvLXIkX6mXBytq/INg0/
[root@node1 ~]# vim /etc/cobbler/settings
修改
default_password_crypted: "$1$mF86/UHC$WvcIcX2t6crBz2onWxyac."
爲
default_password_crypted: "$1$3cc52881$nUzvLXIkX6mXBytq/INg0/" #用上面生成的密碼替換配置文件中的密碼
修改
next_server: 127.0.0.1
爲
next_server: 192.168.1.131
修改
server: 127.0.0.1
爲
server: 192.168.1.131
[root@node1 ~]# yum -y install tftp-server tftp xinetd
[root@node1 ~]# chkconfig tftp on
[root@node1 ~]# vim /etc/xinetd.d/tftp
修改
disable = yes
爲
disable = no
[root@node1 ~]# systemctl restart xinetd.service
[root@node1 ~]# systemctl start rsyncd.service
[root@node1 ~]# cobbler sync
[root@node1 ~]# systemctl restart cobblerd.service
[root@node1 ~]# cp /usr/share/syslinux/pxelinux.0 /usr/share/syslinux/menu.c32 /var/lib/cobbler/loaders/
[root@node1 ~]# systemctl restart cobblerd.service
[root@node1 ~]# systemctl enable rsyncd.service
[root@node1 dhcp]# cobbler sync
[root@node1 ~]# yum -y install dhcp
[root@node1 ~]# cd /etc/dhcp/
[root@node1 dhcp]# cp /usr/share/doc/dhcp-4.2.5/dhcpd.conf.example dhcpd.conf
[root@node1 dhcp]# vim dhcpd.conf
option domain-name "magedu.com";
option domain-name-servers 192.168.1.1;
default-lease-time 600;
max-lease-time 7200;
log-facility local7;
subnet 192.168.1.0 netmask 255.255.255.0 {
range 192.168.1.10 192.168.1.20;
option routers 192.168.1.1;
next-server 192.168.1.131;
filename "pxelinux.0";
}
[root@node1 dhcp]# systemctl start dhcpd.service
[root@node1 dhcp]# cd
[root@node1 ~]# vim centos6.x86_64.cfg
# Kickstart file automatically generated by anaconda.
#version=DEVEL
install
url --url="http://192.168.1.131/cobbler/ks_mirror/centos6.6-x86_64/"
lang zh_CN.UTF-8
keyboard us
rootpw --iscrypted $6$dxqrElMVBdEAZWfC$dZOGcI8vfpUUMx.jsSh2BbCukKthMKnnKHs5GUGJTuzYgVx4ZFXIbigqg61xyiTId0XDqyqZ/kiX7hTnaEAzq0
firewall --service=ssh
authconfig --enableshadow --passalgo=sha512
selinux --disable
timezone --utc Asia/Shanghai
bootloader --location=mbr --driveorder=sda --append="crashkernel=auto rhgb quiet"
# The following is the partition information you requested
# Note that any partitions you deleted are not expressed
# here so unless you clear all partitions first, this is
# not guaranteed to work
#clearpart --none
#part /boot --fstype=ext4 --size=500
#part swap --size=2000
#part / --fstype=ext4 --grow --size=200
repo --name="CentOS" --baseurl=cdrom:sr0 --cost=100
%packages
@base
@chinese-support
@core
@debugging
@basic-desktop
@desktop-debugging
@desktop-platform
@directory-client
@fonts
@general-desktop
@graphical-admin-tools
@input-methods
@internet-applications
@internet-browser
@java-platform
@legacy-x
@network-file-system-client
@office-suite
@print-client
@remote-desktop-clients
@server-platform
@server-policy
@workstation-policy
@x11
lftp
%end
在光驅插入CentOS6.7光盤
[root@node1 ~]# mount -r /dev/sr0 /mnt/
[root@node1 ~]# ls /mnt/
CentOS_BuildTag isolinux RPM-GPG-KEY-CentOS-Debug-6
EFI Packages RPM-GPG-KEY-CentOS-Security-6
EULA RELEASE-NOTES-en-US.html RPM-GPG-KEY-CentOS-Testing-6
GPL repodata TRANS.TBL
p_w_picpaths RPM-GPG-KEY-CentOS-6
[root@node1 ~]# mv centos6.x86_64.cfg /var/lib/cobbler/kickstarts/
[root@node1 ~]# cobbler import --path=/mnt --name="CentOS-6.7-x86_64" --kickstart=/var/lib/cobbler/kickstarts/centos6.x86_64.cfg
[root@node1 ~]# ls /var/www/cobbler/ks_mirror/CentOS-6.7-x86_64/ #上面創建的文件在此處
CentOS_BuildTag isolinux RPM-GPG-KEY-CentOS-Debug-6
EFI Packages RPM-GPG-KEY-CentOS-Security-6
EULA RELEASE-NOTES-en-US.html RPM-GPG-KEY-CentOS-Testing-6
GPL repodata TRANS.TBL
p_w_picpaths RPM-GPG-KEY-CentOS-6
[root@node1 ~]# cobbler distro list
CentOS-6.7-x86_64
[root@node1 ~]# cobbler profile list
CentOS-6.7-x86_64
[root@node1 ~]# cobbler sync
[root@node1 ~]# vim /var/lib/tftpboot/pxelinux.cfg/default
上面生成的文件如下：
LABEL CentOS-6.7-x86_64
kernel /p_w_picpaths/CentOS-6.7-x86_64/vmlinuz
MENU LABEL CentOS-6.7-x86_64
append initrd=/p_w_picpaths/CentOS-6.7-x86_64/initrd.img ksdevice=bootif lang= kssendmac text ks=http://192.168.1.131/cblr/svc/op/ks/profile/CentOS-6.7-x86_64
[root@node1 ~]# vim /var/lib/cobbler/kickstarts/centos6.x86_64.cfg
修改
url --url="http://192.168.1.131/cobbler/ks_mirror/centos6.6-x86_64/"
爲
url --url="http://192.168.1.131/cobbler/ks_mirror/centos-6.7-x86_64/"
默認yum源保存位置：
[root@node1 ~]# ls /var/www/cobbler/ks_mirror/
CentOS-6.7-x86_64 config
[root@node1 ~]# cobbler profile list
CentOS-6.7-x86_64
[root@node1 ~]# cobbler profile remove --name=CentOS-6.7-x86_64
[root@node1 ~]# cobbler profile add --name=CentOS-6.7-x86_64 --distro=CentOS-6.7-x86_64 --kickstart=/var/lib/cobbler/kickstarts/centos6.x86_64.cfg
[root@node1 ~]# cobbler sync
創建一個新的虛擬機，進行測試
2、安裝配置cobbler-web
[root@node1 ~]# yum -y install cobbler-web
[root@node1 ~]# cd /etc/cobbler/
#生成認證用戶密碼（用戶名：cblradmin,密碼：123456）
[root@node1 cobbler]# htdigest /etc/cobbler/users.digest Cobbler cblradmin
Adding user cblradmin in realm Cobbler
New password:
Re-type new password:
[root@node1 cobbler]# systemctl restart httpd.service
登錄網址：
https://192.168.1.131/cobbler_web