1.实现sshd免密登录
2.编译安装dropbear实现ssh登录
3.实现单个用户及用户使用sudo执行所有命令
4.简述rsync用于哪些场景,并对比scp有什么优点?
rsync命令是基于ssh和rs服务实现高效率的远程系统之间复制文件,使用安全的ssh连接作为传输方式,相比较于scp更快,而且rsync只复制不同的文件,节省了服务器性能
5.搭建DHCP服务,实现自动获取ip地址
6.搭建PXE实现自动化安装
1 安装相关包
yum install dhcp tftp-server syslinux
systemctl enable httpd dhcpd tftp
2 yum源
systemctl start httpd
mkdir /var/www/html/centos/{6,7}/os/x86_64 -pv
mount /data/CentOS-7-x86_64-Everything-1804.iso /var/www/html/centos/{6,7}/os/x86_64
3 ks文件
mkdir /var/www/html/ksdir/
cp /root/anaconda-ks.cfg /var/www/html/ksdir/ks7-mini.cfg
chmod a+r /var/www/html/ksdir/ks7-mini.cfg
vim /var/www/html/ksdir/ks7-mini.cfg
url --url=http://192.168.34.7/centos/7/os/x86_64/
text
firewall --disabled
selinux --disabled
clearpart --all --initlabel
zerombr
reboot
%packages
@core
%end
4 dhcp服务配置
cp /usr/share/doc/dhcp-4.2.5/dhcpd.conf.example /etc/dhcpd/dhcpd.conf
vim /etc/dhcp/dhcpd.conf
subnet 192.168.34.0 netmask 255.255.255.0 {
range 192.168.34.10 192.168.34.200;
option routers 192.168.34.1;
option domain-name-servers 8.8.8.8, 1.1.1.1;
next-server 192.168.34.7;
filename “pxelinux.0”;
}
systemctl start dhcpd
5 准备pxe安装相关文件
mkdir /var/lib/tftpboot/pxelinux.cfg/
cp /usr/share/syslinux/{menu.c32,pxelinux.0} /var/lib/tftpboot/
cp /misc/cd/isolinux/{vmlinuz,initrd.img} /var/lib/tftpboot/
cp /misc/cd/isolinux/isolinux.cfg /var/lib/tftpboot/pxelinux.cfg/default
[root@centos7 ~]# tree /var/lib/tftpboot/
/var/lib/tftpboot/
├── initrd.img
├── menu.c32
├── pxelinux.0
├── pxelinux.cfg
│?? └── default
└── vmlinuz
1 directory, 5 files
6 准备启动菜单
vim /var/lib/tftpboot/pxelinux.cfg/default
default menu.c32
timeout 100
menu title PXE Install CentOS
label mini
menu label ^Auto Install Mini CentOS 7
kernel vmlinuz
append initrd=initrd.img ks=http://192.168.34.7/ksdir/ks7-mini.cfg
label desktop
menu label ^Auto Install desktop CentOS 7
kernel vmlinuz
append initrd=initrd.img ks=http://192.168.34.7/ksdir/ks7-desktop.cfg
label local
menu default
menu label Boot from ^local drive
localboot 0xffff.
7 测试
7.搭建Cobbler实现自动化安装系统
1 yum install cobbler cobbler-web dhcp
2 systemctl start cobblerd httpd tftp
3 cobbler check
4 vim /etc/cobbler/settings
default_password_crypted: “$1
3
B
M
e
i
H
.
s
3BMeiH.s
3BMeiH.smtrUL/wNANnV7z1QUduwU0” openssl passwd -1
server: 192.168.34.17
next_server: 192.168.34.17
manage_dhcp: 1
5 cobbler get-loaders
6 vim /etc/cobbler/dhcp.template
subnet 192.168.34.0 netmask 255.255.255.0 {
option subnet-mask 255.255.255.0;
range dynamic-bootp 192.168.34.100 192.168.34.254;
7
systemctl restart cobblerd
cobbler sync
8 导入OS
cobbler import --path=/misc/cd/ --name=Centos-7.5-x86_64 --arch=x86_64
注:可以使用自己ks文件
9 ks文件
cp ks7_mini.cfg /var/lib/cobbler/kickstarts/
vim /var/lib/cobbler/kickstarts/ks7_mini.cfg
url --url=$tree
10 将KS和OS关联,生成启动新的菜单
cobbler profile add --name=centos-7.5-x86_64_mini --distro=Centos-7.5-x86_64 --kickstart=/var/lib/cobbler/kickstarts/ks7-mini.cfg