架构师成长之路3.1-Cobber原理及部署

Cobbler是一个Linux服务器安装的服务，可以通过网络启动(PXE)的方式来快速安装、重装物理服务器和虚拟机，同时还可以管理DHCP，DNS等。

Cobbler 使用 Python 开发，小巧轻便。（号称是补鞋匠都能学会的工具）

Cobbler可以使用命令行方式管理，也提供了基于Web的界面管理工具(cobbler-web)，还提供了API接口，可以方便二次开发使用。

Cobbler是较早前的kickstart的升级版，优点是比较容易配置，还自带web界面比较易于管理。

Cobbler内置了一个轻量级配置管理系统，但它也支持和其它配置管理系统集成，如Puppet，暂时不支持SaltStack。

1.Cobbler功能

使用Cobbler，您无需进行人工干预即可安装机器。Cobbler设置一个PXE引导环境（它还可以使用yaboot支持PowerPC），并控制与安装相关的所有方面，比如网络引导服务（DHCP和TFTP）与存储库镜像。当希望安装一台新机器时，Cobbler可以：

使用一个以前定义的模板来配置DHCP服务（如果启用了管理DHCP）。
将一个存储库（yum或rsync）建立镜像或解压缩一个媒介，以注册一个新操作系统。
在DHCP配置文件中为需要安装的机器创建一个条目，并使用指定的参数（IP和MAC）。
在TFTP服务目录下创建适当的PXE文件。
重新启动DHCP服务来反应新的更改。
重新启动机器以开始安装（如果电源管理已启动）。

2 安装cobbler

2.1 关闭关闭 SELinux 、iptables

一定要关闭，否则安装一定会出问题。

vi /etc/selinux/config    #将SELINUX=enforcing改为SELINUX=disabled 设置后需要重启才能生效

firewall-cmd --state    #查看默认防火墙状态，关闭后显示not running，开启后显示running

systemctl stop firewalld.service    #临时关闭firewall

systemctl disable firewalld.service #禁止firewall开机启动

2.2 支撑环境安装

rpm -ivh https://mirrors.aliyun.com/epel/epel-release-latest-7.noarch.rpm

yum -y install cobbler httpd rsync tftp-server xinetd dhcp pykickstart fence-agents

安装完成后将在/etc/yum.repos.d 下面生成一个epel.repo文件

[epel]

name=Extra Packages for Enterprise Linux 7 - $basearch

#baseurl=http://download.fedoraproject.org/pub/epel/7/$basearch

metalink=https://mirrors.fedoraproject.org/metalink?repo=epel-7&arch=$basearch

failovermethod=priority

enabled=1

gpgcheck=1

gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7

[epel-debuginfo]

name=Extra Packages for Enterprise Linux 7 - $basearch - Debug

#baseurl=http://download.fedoraproject.org/pub/epel/7/$basearch/debug

metalink=https://mirrors.fedoraproject.org/metalink?repo=epel-debug-7&arch=$basearch

failovermethod=priority

enabled=0

gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7

gpgcheck=1

[epel-source]

name=Extra Packages for Enterprise Linux 7 - $basearch - Source

#baseurl=http://download.fedoraproject.org/pub/epel/7/SRPMS

metalink=https://mirrors.fedoraproject.org/metalink?repo=epel-source-7&arch=$basearch

failovermethod=priority

enabled=0

gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7

gpgcheck=1

此时安装cobbler-web会在生成/etc/httpd/conf.d/生成cobbler.conf文件

# This configuration file allows cobbler data

# to be accessed over HTTP.

AliasMatch ^/cblr(?!/svc/)(.*)?$ "/var/www/cobbler$1"   #别名匹配

AliasMatch ^/cobbler_track(.*)?$ "/var/www/cobbler$1"

#AliasMatch ^/cobbler(.*)?$ "/var/www/cobbler$1"

Alias /cobbler /var/www/cobbler      #设置别名

Alias /cobbler_webui_content /var/www/cobbler_webui_content  #设置别名

WSGIScriptAliasMatch ^/cblr/svc/([^/]*) /var/www/cobbler/svc/services.py

<Directory "/var/www/cobbler">        #设置目录

    SetEnv VIRTUALENV

    Options Indexes FollowSymLinks

    Order allow,deny

    Allow from all

</Directory>

ProxyRequests off

ProxyPass /cobbler_api http://127.0.0.1:25151/       #设置代理，本机代理

ProxyPassReverse /cobbler_api http://127.0.0.1:25151/

BrowserMatch "MSIE" AuthDigestEnableQueryStringHack=On

# the webui is now part of the "cobbler-web" package

# and is visited at http://.../cobbler_web not this URL.

# this is only a pointer to the new page.

<Directory "/var/www/cobbler/web/">

    Options Indexes FollowSymLinks

    Order allow,deny

    Allow from all

</Directory>

<IfVersion >= 2.4>

    <Location /cblr>

	Require all granted

    </Location>

</IfVersion>

2.3 启动http与cobbler，，，检查cobbler

systemctl start httpd

systemctl start cobblerd

cobbler check  #检查cobbler，告诉你完成cobbler需要完成以下7步骤

The following are potential configuration items that you may want to fix:

1 : The 'server' field in /etc/cobbler/settings must be set to something other than localhost, or kickstarting features will not work.  This should be a resolvable hostname or IP for the boot server as reachable by all machines that will use it.

2 : For PXE to be functional, the 'next_server' field in /etc/cobbler/settings must be set to something other than 127.0.0.1, and should match the IP of the boot server on the PXE network.

3 : change 'disable' to 'no' in /etc/xinetd.d/tftp

4 : Some network boot-loaders are missing from /var/lib/cobbler/loaders, you may run 'cobbler get-loaders' to download them, or, if you only want to handle x86/x86_64 netbooting, you may ensure that you have installed a *recent* version of the syslinux package installed and can ignore this message entirely.  Files in this directory, should you want to support all architectures, should include pxelinux.0, menu.c32, elilo.efi, and yaboot. The 'cobbler get-loaders' command is the easiest way to resolve these requirements.

5 : enable and start rsyncd.service with systemctl

6 : debmirror package is not installed, it will be required to manage debian deployments and repositories

7 : The default password used by the sample templates for newly installed machines (default_password_crypted in /etc/cobbler/settings) is still set to 'cobbler' and should be changed, try: "openssl passwd -1 -salt 'random-phrase-here' 'your-password-here'" to generate new one

Restart cobblerd and then run 'cobbler sync' to apply changes. # 最后一步很重要不要忘记

1.修改/etc/cobbler/settings文件中的server参数的值为提供cobbler服务的主机相应的IP地址或主机名.
2.修改/etc/cobbler/settings文件中的next_server参数的值为提供PXE服务的主机相应的IP地址
3.修改/etc/xinetd.d/tftp文件中的disable参数修改为 disable = no
4.执行 cobbler get-loaders 命令即可上网上下载相关的文件；否则，需要安装syslinux程序包，而后复制/usr/share/syslinux/{pxelinux.0,memu.c32}等文件至/var/lib/cobbler/loaders/目录中
5.运行rsyncd.service服务
6.debmirror package没有安装，debian系统需要安装，我们这里可以忽略。
7.生成密码来取代默认的密码，更安全，#据提示your-password-here，这里是自己的密码，random-phrase-here，这里是随机的干扰码

2.4 现在安装以上步骤一步一步安装cobbler

第一步：

vi /etc/cobbler/settings

第二步：

第三步：

vi /etc/xinetd.d/tftp

第四步：

cobbler get-loaders

第五步：

systemctl start rsyncd

第六步：不需要

第七步：

openssl passwd -1 -salt 'coble' 'cobler'  # 运行会生成一串随机密码

vi /etc/cobbler/settings  #将101行default_password_crypted后面的密码更换成上面的随机密码

重启一下，并cobbler check一下：

2.5 设置DHCP

第一步：

vi /etc/cobbler/settings  #将242行manage_dhcp:0 变成 1

第二步：

 vi /etc/cobbler/dhcp.template  # 修改模板文件

systemctl restart cobblerd

cobbler sync

task started: 2018-11-15_230808_sync

task started (id=Sync, time=Thu Nov 15 23:08:08 2018)

running pre-sync triggers

cleaning trees

removing: /var/lib/tftpboot/grub/images

copying bootloaders

trying hardlink /var/lib/cobbler/loaders/pxelinux.0 -> /var/lib/tftpboot/pxelinux.0

trying hardlink /var/lib/cobbler/loaders/menu.c32 -> /var/lib/tftpboot/menu.c32

trying hardlink /var/lib/cobbler/loaders/yaboot -> /var/lib/tftpboot/yaboot

trying hardlink /usr/share/syslinux/memdisk -> /var/lib/tftpboot/memdisk

trying hardlink /var/lib/cobbler/loaders/grub-x86.efi -> /var/lib/tftpboot/grub/grub-x86.efi

trying hardlink /var/lib/cobbler/loaders/grub-x86_64.efi -> /var/lib/tftpboot/grub/grub-x86_64.efi

copying distros to tftpboot

copying images

generating PXE configuration files

generating PXE menu structure

rendering DHCP files

generating /etc/dhcp/dhcpd.conf

rendering TFTPD files

generating /etc/xinetd.d/tftp

cleaning link caches

running post-sync triggers

running python triggers from /var/lib/cobbler/triggers/sync/post/*

running python trigger cobbler.modules.sync_post_restart_services

running: dhcpd -t -q

received on stdout:

received on stderr:

running: service dhcpd restart

received on stdout:

received on stderr: Redirecting to /bin/systemctl restart dhcpd.service

running shell triggers from /var/lib/cobbler/triggers/sync/post/*

running python triggers from /var/lib/cobbler/triggers/change/*

running python trigger cobbler.modules.scm_track

running shell triggers from /var/lib/cobbler/triggers/change/*

*** TASK COMPLETE ***

2.6 导入镜像

.....