cobbler的dhcp服务_cobbler------安装配置

最新推荐文章于 2023-06-20 18:08:48 发布

weixin_39629631

最新推荐文章于 2023-06-20 18:08:48 发布

阅读量462

点赞数

文章标签： cobbler的dhcp服务

本文链接：https://blog.csdn.net/weixin_39629631/article/details/111798307

版权

一：配置好repo仓库，IP地址，

[root@linux-node1 yum.repos.d]# ll

total 28

-rw-r--r--. 1 root root 1664 Dec 9 2015 CentOS-Base.repo

-rw-r--r--. 1 root root 1309 Dec 9 2015 CentOS-CR.repo

-rw-r--r--. 1 root root 649 Dec 9 2015 CentOS-Debuginfo.repo

-rw-r--r--. 1 root root 290 Dec 9 2015 CentOS-fasttrack.repo

-rw-r--r--. 1 root root 630 Dec 9 2015 CentOS-Media.repo

-rw-r--r--. 1 root root 1331 Dec 9 2015 CentOS-Sources.repo

-rw-r--r--. 1 root root 1952 Dec 9 2015 CentOS-Vault.repo

#使用阿里云的epel源

[root@linux-node1 yum.repos.d]# wget https://mirrors.aliyun.com/repo/epel-7.repo

Resolving mirrors.aliyun.com (mirrors.aliyun.com)... 115.28.122.210, 112.124.140.210

Connecting to mirrors.aliyun.com (mirrors.aliyun.com)|115.28.122.210|:443... connected.

HTTP request sent, awaiting response... 200 OK

Length: 1084 (1.1K) [application/octet-stream]

Saving to: ‘epel-7.repo’

100%[========================================================================================================================================================================>] 1,084 --.-K/s in 0s

2017-02-21 09:28:26 (82.2 MB/s) - ‘epel-7.repo’ saved [1084/1084]

[root@linux-node1 yum.repos.d]# ls

CentOS-Base.repo CentOS-CR.repo CentOS-Debuginfo.repo CentOS-fasttrack.repo CentOS-Media.repo CentOS-Sources.repo CentOS-Vault.repo epel-7.repo

[root@linux-node1 yum.repos.d]# ip a

1: lo: mtu 65536 qdisc noqueue state UNKNOWN

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

inet 127.0.0.1/8 scope host lo

valid_lft forever preferred_lft forever

inet6 ::1/128 scope host

valid_lft forever preferred_lft forever

2: eth0: mtu 1500 qdisc pfifo_fast state UP qlen 1000

link/ether 00:0c:29:e6:8c:cc brd ff:ff:ff:ff:ff:ff

inet 192.168.56.11/24 brd 192.168.56.255 scope global eth0

valid_lft forever preferred_lft forever

inet6 fe80::20c:29ff:fee6:8ccc/64 scope link

valid_lft forever preferred_lft forever

二：yum安装cobbler[root@linux-node1 yum.repos.d]# yum install httpd dhcp tftp xinetd bind bind-chroot caching-nameserver cobbler cobbler-web python-ctypes

三：关闭防火墙[root@linux-node1 yum.repos.d]# systemctl stop firewalld

[root@linux-node1 yum.repos.d]# chkconfig firewalld off

Note: Forwarding request to 'systemctl disable firewalld.service'.

Removed symlink /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service.

Removed symlink /etc/systemd/system/basic.target.wants/firewalld.service.

[root@linux-node1 yum.repos.d]# getenforce

Enforcing

[root@linux-node1 yum.repos.d]# setenforce 0 #临时生效

[root@linux-node1 yum.repos.d]# getenforce

Permissive

[root@linux-node1 yum.repos.d]# sestatus

SELinux status: enabled

SELinuxfs mount: /sys/fs/selinux

SELinux root directory: /etc/selinux

Loaded policy name: targeted

Current mode: permissive

Mode from config file: enforcing

Policy MLS status: enabled

Policy deny_unknown status: allowed

Max kernel policy version: 28

#编辑配置文件，把SELINUX修改成disabled，永久生效，需要重启OS

[root@linux-node1 yum.repos.d]# vim /etc/sysconfig/selinux

四：启动服务并检查[root@linux-node1 yum.repos.d]# systemctl start httpd

[root@linux-node1 yum.repos.d]# systemctl start cobblerd

[root@linux-node1 yum.repos.d]# systemctl start xinetd

[root@linux-node1 yum.repos.d]# netstat -lntup

Active Internet connections (only servers)

Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name

tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1687/sshd

tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 2182/master

tcp 0 0 127.0.0.1:25151 0.0.0.0:* LISTEN 3985/python2

tcp6 0 0 :::80 :::* LISTEN 3956/httpd

tcp6 0 0 :::22 :::* LISTEN 1687/sshd

tcp6 0 0 ::1:25 :::* LISTEN 2182/master

tcp6 0 0 :::443 :::* LISTEN 3956/httpd

五：配置cobbler，

执行cobbler check命令后，会出现提示，告知需要修改的地方，按照说明修改即可：[root@linux-node1 yum.repos.d]# cobbler check

The following are potential configuration items that you may want to fix:

1 : The 'server' field in /etc/cobbler/settings must be set to something other than localhost, or kickstarting features will not work. This should be a resolvable hostname or IP for the boot server as reachable by all machines that will use it.

2 : For PXE to be functional, the 'next_server' field in /etc/cobbler/settings must be set to something other than 127.0.0.1, and should match the IP of the boot server on the PXE network.

3 : SELinux is enabled. Please review the following wiki page for details on ensuring cobbler works correctly in your SELinux environment:

https://github.com/cobbler/cobbler/wiki/Selinux

4 : change 'disable' to 'no' in /etc/xinetd.d/tftp

5 : some network boot-loaders are missing from /var/lib/cobbler/loaders, you may run 'cobbler get-loaders' to download them, or, if you only want to handle x86/x86_64 netbooting, you may ensure that you have installed a *recent* version of the syslinux package installed and can ignore this message entirely. Files in this directory, should you want to support all architectures, should include pxelinux.0, menu.c32, elilo.efi, and yaboot. The 'cobbler get-loaders' command is the easiest way to resolve these requirements.

6 : enable and start rsyncd.service with systemctl

7 : debmirror package is not installed, it will be required to manage debian deployments and repositories

8 : ksvalidator was not found, install pykickstart

9 : The default password used by the sample templates for newly installed machines (default_password_crypted in /etc/cobbler/settings) is still set to 'cobbler' and should be changed, try: "openssl passwd -1 -salt 'random-phrase-here' 'your-password-here'" to generate new one

10 : fencing tools were not found, and are required to use the (optional) power management features. install cman or fence-agents to use them

Restart cobblerd and then run 'cobbler sync' to apply changes.

5.1 下面开始对上面的步骤提示进行修改，

1、对/etc/cobbler/setting中，修改server行，改成server: 192.168.56.11

2、修改‘next_server’next_server: 192.168.56.11

3、关闭selinux，需要重启系统

4、修改tftp[root@linux-node1 yum.repos.d]# vim /etc/xinetd.d/tftp

# default: off

# description: The tftp server serves files using the trivial file transfer \

# protocol. The tftp protocol is often used to boot diskless \

# workstations, download configuration files to network-aware printers, \

# and to start the installation process for some operating systems.

service tftp

{

socket_type = dgram

protocol = udp

wait = yes

user = root

server = /usr/sbin/in.tftpd

server_args = -s /var/lib/tftpboot

disable = no

per_source = 11

cps = 100 2

flags = IPv4

}

5、执行命令cobbler get-loaders，他会自动下载相关的启动引导文件[root@linux-node1 yum.repos.d]# cobbler get-loaders

task started: 2017-02-21_101556_get_loaders

task started (id=Download Bootloader Content, time=Tue Feb 21 10:15:56 2017)

downloading https://cobbler.github.io/loaders/README to /var/lib/cobbler/loaders/README

downloading https://cobbler.github.io/loaders/COPYING.elilo to /var/lib/cobbler/loaders/COPYING.elilo

downloading https://cobbler.github.io/loaders/COPYING.yaboot to /var/lib/cobbler/loaders/COPYING.yaboot

downloading https://cobbler.github.io/loaders/COPYING.syslinux to /var/lib/cobbler/loaders/COPYING.syslinux

downloading https://cobbler.github.io/loaders/elilo-3.8-ia64.efi to /var/lib/cobbler/loaders/elilo-ia64.efi

downloading https://cobbler.github.io/loaders/yaboot-1.3.17 to /var/lib/cobbler/loaders/yaboot

downloading https://cobbler.github.io/loaders/pxelinux.0-3.86 to /var/lib/cobbler/loaders/pxelinux.0

downloading https://cobbler.github.io/loaders/menu.c32-3.86 to /var/lib/cobbler/loaders/menu.c32

downloading https://cobbler.github.io/loaders/grub-0.97-x86.efi to /var/lib/cobbler/loaders/grub-x86.efi

downloading https://cobbler.github.io/loaders/grub-0.97-x86_64.efi to /var/lib/cobbler/loaders/grub-x86_64.efi

*** TASK COMPLETE ***

6、启动服务rsyncd.servicesystemctl start rsyncd

7、安装pykickstartyum install pykickstart -y

8、生成新的密码，默认的过于简单，命令：openssl passwd -1 -salt 'random-phrase-here' 'your-password-here'[root@linux-node1 yum.repos.d]# openssl passwd -1 -salt '123' '123456'

$1$123$7mft0jKnzzvAdU4t0unTG1

把这个新生成的密钥，写入setting配置文件中的对应位置上default_password_crypted: "$1$123$7mft0jKnzzvAdU4t0unTG1"

9、安装fence-agentsyum install fence-agents

10、可以不用管它

当然也可以安装这个服务，安装完毕后，需要修改配置文件wget

yum localinstall debmirror-20090807-1.el5.noarch.rpm

vim /etc/debmirror.conf #将23和25行注释掉

23 #@dists=”sid”;

25 #@arches=”i386″;

上面所有的步骤操作完毕后，重启cobbler，然后执行“cobbler sync”[root@linux-node1 ~]# systemctl restart cobblerd

[root@linux-node1 ~]#

[root@linux-node1 ~]# cobbler sync

task started: 2017-02-21_104452_sync

task started (id=Sync, time=Tue Feb 21 10:44:52 2017)

running pre-sync triggers

cleaning trees

removing: /var/lib/tftpboot/pxelinux.cfg/default

removing: /var/lib/tftpboot/grub/p_w_picpaths

removing: /var/lib/tftpboot/grub/grub-x86.efi

removing: /var/lib/tftpboot/grub/grub-x86_64.efi

removing: /var/lib/tftpboot/grub/efidefault

removing: /var/lib/tftpboot/s390x/profile_list

copying bootloaders

trying hardlink /var/lib/cobbler/loaders/pxelinux.0 -> /var/lib/tftpboot/pxelinux.0

copying: /var/lib/cobbler/loaders/pxelinux.0 -> /var/lib/tftpboot/pxelinux.0

trying hardlink /var/lib/cobbler/loaders/menu.c32 -> /var/lib/tftpboot/menu.c32

copying: /var/lib/cobbler/loaders/menu.c32 -> /var/lib/tftpboot/menu.c32

trying hardlink /var/lib/cobbler/loaders/yaboot -> /var/lib/tftpboot/yaboot

copying: /var/lib/cobbler/loaders/yaboot -> /var/lib/tftpboot/yaboot

trying hardlink /usr/share/syslinux/memdisk -> /var/lib/tftpboot/memdisk

copying: /usr/share/syslinux/memdisk -> /var/lib/tftpboot/memdisk

trying hardlink /var/lib/cobbler/loaders/grub-x86.efi -> /var/lib/tftpboot/grub/grub-x86.efi

trying hardlink /var/lib/cobbler/loaders/grub-x86_64.efi -> /var/lib/tftpboot/grub/grub-x86_64.efi

copying distros to tftpboot

copying p_w_picpaths

generating PXE configuration files

generating PXE menu structure

rendering TFTPD files

generating /etc/xinetd.d/tftp

cleaning link caches

running post-sync triggers

running python triggers from /var/lib/cobbler/triggers/sync/post/*

running python trigger cobbler.modules.sync_post_restart_services

running shell triggers from /var/lib/cobbler/triggers/sync/post/*

running python triggers from /var/lib/cobbler/triggers/change/*

running python trigger cobbler.modules.scm_track

running shell triggers from /var/lib/cobbler/triggers/change/*

*** TASK COMPLETE ***

[root@linux-node1 ~]# cobbler check

The following are potential configuration items that you may want to fix:

1 : debmirror package is not installed, it will be required to manage debian deployments and repositories

Restart cobblerd and then run 'cobbler sync' to apply changes.

六：DHCP配置

我们可以配置cobbler，使用cobber来管理dhcp服务，修改一下配置文件：[root@linux-node1 ~]# vim /etc/cobbler/settings

# set to 1 to enable Cobbler's DHCP management features.

# the choice of DHCP management engine is in /etc/cobbler/modules.conf

manage_dhcp: 1 #这里从0改成1，启动dhcp管理服务[root@linux-node1 cobbler]# ls

auth.conf cobbler_bash dhcp.template import_rsync_whitelist ldap mongodb.conf power reporting rsync.template settings users.conf version zone_templates

cheetah_macros completions dnsmasq.template iso modules.conf named.template pxe rsync.exclude secondary.template tftpd.template users.digest zone.template

[root@linux-node1 cobbler]# vim dhcp.template

# ******************************************************************

# Cobbler managed dhcpd.conf file

# generated from cobbler dhcp.conf template ($date)

# Do NOT make changes to /etc/dhcpd.conf. Instead, make your changes

# in /etc/cobbler/dhcp.template, as /etc/dhcpd.conf will be

# overwritten.

# ******************************************************************

ddns-update-style interim;

allow booting;

allow bootp;

ignore client-updates;

set vendorclass = option vendor-class-identifier;

option pxe-system-type code 93 = unsigned integer 16;

subnet 192.168.56.0 netmask 255.255.255.0 {

option routers 192.168.56.2;#路由地址

option domain-name-servers 192.168.56.2;#dns地址

option subnet-mask 255.255.255.0;

range dynamic-bootp 192.168.56.100 192.168.56.254;

default-lease-time 21600;#默认租期时间

max-lease-time 43200;#最大租期时间

next-server $next_server;#tftp地址

class "pxeclients" {

match if substring (option vendor-class-identifier, 0, 9) = "PXEClient";

if option pxe-system-type = 00:02 {

filename "ia64/elilo.efi";

} else if option pxe-system-type = 00:06 {

filename "grub/grub-x86.efi";

} else if option pxe-system-type = 00:07 {

filename "grub/grub-x86_64.efi";

} else {

filename "pxelinux.0";

}

执行cobbler sync 自动生成dhcp配置文件[root@linux-node1 cobbler]# systemctl restart cobblerd

[root@linux-node1 cobbler]# cobbler sync

task started: 2017-02-21_105948_sync

task started (id=Sync, time=Tue Feb 21 10:59:48 2017)