CentOS7安装Cobbler并自动部署Ubuntu

一、简介

二、安装CentOS 7 调整配置及安装相关软件

1、调整配置

2、安装 epel

3、安装cobblercobbler-web 以及相关依赖软件

4、设置开机启动

三、Cobblertftpdhcprsync配置

1TFTP配置

2、配置rsync

3、配置/etc/cobbler/settings

4、修改/etc/cobbler/modules.conf

5、修改/etc/cobbler/dhcp.template

6、重启cobbler httpd服务

四、检查cobbler配置

五、导入镜像并查看导入情况

1、导入镜像

2、查看

六、编辑seed文件

1、普通分区配置

2lvm分区配置

七、注意事项

八、截图

一、简介

二、安装CentOS 7 调整配置及安装相关软件

1、调整配置

安装完成后关闭selinux或参照cobbler官方文档设置selinuxhttp://cobbler.github.io/manuals/2.6.0/4/2_-_SELinux.html

[root@cobbler-server ~]# sed -i ‘/SELINUX/s/enforcing/disabled/’ /etc/selinux/config  

重启服务器

关闭iptables以及取消开机启动,centos7 minimal没有安装ipables

关闭firewall或放行80 67 68 69 443 端口

80 443cobbler web管理界面端口

67 68 DHCP端口

69TFTP端口

[root@cobbler-server ~]# systemctl stop firewalld

[root@cobbler-server ~]# systemctl disable firewalld

2、安装 epel

[root@cobbler-server ~]# yum install epel-release

[root@cobbler-server ~]# yum makecache

3、安装cobblercobbler-web 以及相关依赖软件

[root@cobbler-server ~]# yum install cobbler cobbler-web xinetd pykickstart cman dhcp -y

4、设置开机启动

[root@cobbler-server ~]# systemctl enable httpd

[root@cobbler-server ~]# systemctl enable dhcpd 

[root@cobbler-server ~]# systemctl enable cobblerd

三、Cobblertftpdhcprsync配置

1TFTP配置

配置tftp绿色着色为修改后的值

[root@cobbler-server ~]# vim /etc/xinetd.d/tftp

# default: off

# description: The tftp server serves files using the trivial file transfer \

#       protocol.  The tftp protocol is often used to boot diskless \

#       workstations, download configuration files to network-aware printers, \

#       and to start the installation process for some operating systems.

service tftp

{

        socket_type             = dgram

        protocol                = udp

        wait                    = yes

        user                    = root

        server                  = /usr/sbin/in.tftpd

        server_args             = -s /var/lib/tftpboot

        disable                 = no

        per_source              = 11

        cps                     = 100 2

        flags                   = IPv4

}

2、配置rsync

[root@cobbler-server ~]# systemctl enable rsyncd

CentOS7上安装cobbler 对于rsync无需额外配置

3、配置/etc/cobbler/settings

[root@cobbler-server ~]# cat /etc/cobbler/settings |grep ‘^[^#]’

allow_duplicate_hostnames: 0

allow_duplicate_ips: 0

allow_duplicate_macs: 0

allow_dynamic_settings: 0

anamon_enabled: 0

authn_pam_service: “login”

auth_token_expiration: 3600

build_reporting_enabled: 0

build_reporting_sender: “”

build_reporting_email: [ ‘root@localhost’ ]

build_reporting_smtp_server: “localhost”

build_reporting_subject: “”

build_reporting_ignorelist: [ “” ]

cheetah_import_whitelist:

 – “random”

 – “re”

 – “time”

createrepo_flags: “-c cache -s sha”

default_kickstart: /var/lib/cobbler/kickstarts/default.ks

default_name_servers: []

default_ownership:

 – “admin”

default_password_crypted: “$1$mF86/UHC$WvcIcX2t6crBz2onWxyac.”

default_template_type: “cheetah”

default_virt_bridge: xenbr0

default_virt_file_size: 5

default_virt_ram: 512

default_virt_type: xenpv

enable_gpxe: 0

enable_menu: 1

func_auto_setup: 0

func_master: overlord.example.org

http_port: 80

kernel_options:

 ksdevice: bootif

 lang: ‘ ‘

 text: ~

kernel_options_s390x:

 RUNKS: 1

 ramdisk_size: 40000

 root: /dev/ram0

 ro: ~

 ip: off

 vnc: ~

ldap_server: “ldap.example.com”

ldap_base_dn: “DC=example,DC=com”

ldap_port: 389

ldap_tls: 1

ldap_anonymous_bind: 1

ldap_search_bind_dn: ”

ldap_search_passwd: ”

ldap_search_prefix: ‘uid=’

ldap_tls_cacertfile: ”

ldap_tls_keyfile: ”

ldap_tls_certfile: ”

mgmt_classes: []

mgmt_parameters:

 from_cobbler: 1

puppet_auto_setup: 0

sign_puppet_certs_automatically: 0

puppetca_path: “/usr/bin/puppet”

remove_old_puppet_certs_automatically: 0

manage_dhcp: 1

#cobbler接管DHCP,默认为0,此处修改以后需要修改对应/etc/cobbler/dhcp.template模板

manage_dns: 0

bind_chroot_path: “”

bind_master: 127.0.0.1

manage_tftpd: 1

manage_rsync: 1 #接管rsync,无需额外配置rsync

manage_forward_zones: []

manage_reverse_zones: []

next_server: 192.168.11.252 #本机ip地址

power_management_default_type: ‘ipmitool’

power_template_dir: “/etc/cobbler/power”

pxe_just_once: 0

pxe_template_dir: “/etc/cobbler/pxe”

consoles: “/var/consoles”

RedHat_management_type: “off”

redhat_management_server: “xmlrpc.rhn.redhat.com”

redhat_management_key: “”

redhat_management_permissive: 0

register_new_installs: 0

reposync_flags: “-l -n -d”

restart_dns: 1

restart_dhcp: 1

run_install_triggers: 1

scm_track_enabled: 0

scm_track_mode: “git”

server: 192.168.11.252 #本机ip地址

client_use_localhost: 0

client_use_https: 0

snippetsdir: /var/lib/cobbler/snippets

template_remote_kickstarts: 0

virt_auto_boot: 1

webdir: /var/www/cobbler

xmlrpc_port: 25151

yum_post_install_mirror: 1

yum_distro_priority: 1

yumdownloader_flags: “–resolve”

serializer_pretty_json: 0

replicate_rsync_options: “-avzH”

replicate_repo_rsync_options: “-avzH”

always_write_dhcp_entries: 0

proxy_url_ext: “”

proxy_url_int: “”

 

4、修改/etc/cobbler/modules.conf

[root@cobbler-server ~]# cat /etc/cobbler/modules.conf |grep ‘^[^#]’

 

[authentication]

module = authn_configfile

[authorization]

module = authz_allowall

[dns]

module = manage_bind

[dhcp]

module = manage_isc #如果是dnsmasq就应该为manage_dnsmasq

[tftpd]

module = manage_in_tftpd

 

5、修改/etc/cobbler/dhcp.template

[root@localhost cobbler]# cat /etc/cobbler/dhcp.template |grep ‘^[^#]’

ddns-update-style interim;

allow booting;

allow bootp;

ignore client-updates;

set vendorclass = option vendor-class-identifier;

option pxe-system-type code 93 = unsigned integer 16;

subnet 192.168.11.0 netmask 255.255.255.0 {

     option routers             192.168.11.252;

     option domain-name-servers 192.168.11.252;

     option subnet-mask         255.255.255.0;

     range dynamic-bootp        192.168.11.100 192.168.11.200;

     default-lease-time         21600;

     max-lease-time             43200;

     next-server                $next_server;

     class “pxeclients” {

          match if substring (option vendor-class-identifier, 0, 9) = “PXEClient”;

          if option pxe-system-type = 00:02 {

                  filename “ia64/elilo.efi”;

          } else if option pxe-system-type = 00:06 {

                  filename “grub/grub-x86.efi”;

          } else if option pxe-system-type = 00:07 {

                  filename “grub/grub-x86_64.efi”;

          } else {

                  filename “pxelinux.0”;

          }

     }

}

    ## group could be subnet if your dhcp tags line up with your subnets

    ## or really any valid dhcpd.conf construct … if you only use the

    ## default dhcp tag in cobbler, the group block can be deleted for a

    ## flat configuration

group {

        #for mac in $dhcp_tags[$dhcp_tag].keys():

            #set iface = $dhcp_tags[$dhcp_tag][$mac]

    host $iface.name {

        hardware ethernet $mac;

        #if $iface.ip_address:

        fixed-address $iface.ip_address;

        #end if

        #if $iface.hostname:

        option host-name “$iface.hostname”;

        #end if

        #if $iface.netmask:

        option subnet-mask $iface.netmask;

        #end if

        #if $iface.gateway:

        option routers $iface.gateway;

        #end if

        #if $iface.enable_gpxe:

        if exists user-class and option user-class = “gPXE” {

            filename “http://$cobbler_server/cblr/svc/op/gpxe/system/$iface.owner”;

        } else if exists user-class and option user-class = “iPXE” {

            filename “http://$cobbler_server/cblr/svc/op/gpxe/system/$iface.owner”;

        } else {

            filename “undionly.kpxe”;

        }

        #else

        filename “$iface.filename”;

        #end if

        ## Cobbler defaults to $next_server, but some users

        ## may like to use $iface.system.server for proxied setups

        next-server $next_server;

        ## next-server $iface.next_server;

    }

        #end for

}

6、重启cobbler httpd服务

[root@cobbler-server ~]# systemctl restart cobblerd

[root@cobbler-server ~]# systemctl restart httpd

文章来源网络,作者:管理,如若转载,请注明出处:https://shuyeidc.com/wp/220269.html<

(0)
管理的头像管理
上一篇2025-04-14 12:05
下一篇 2025-04-14 12:06

相关推荐

  • 站群服务器到底是什么意思,怎么选择比较好

    站群服务器就是一台拥有多个独立IP地址、专门用于托管和管理多个网站的高性能服务器,其核心价值在于通过独立IP降低网站间的关联风险,并提升搜索引擎优化效果,站群服务器的工作原理与适用场景站群服务器本质上是将一台物理服务器通过虚拟化或直接配置的方式,分配给多个独立IP地址,每个IP对应一个独立的网站,这些网站共享服……

    2026-07-27
    0
  • 高防服务器误封正常流量如何调整,怎么解决?

    高防服务器误封正常流量,核心调整思路是从“一刀切”转向“精细化”——通过分析业务特征,调整防护阈值、配置白名单和启用智能学习模式,让防护系统学会区分真假流量,为什么会误封正常流量误封主要源于防护策略的通用化,高防服务器通常默认启用严格防护规则,当流量特征与攻击特征库部分匹配时,就会被拦截,据行业安全白皮书指出……

    2026-07-27
    0
  • 高防服务器的防御原理是什么,如何选择高防服务器?

    高防服务器的防御原理,简单说就是通过流量清洗、防火墙规则和黑洞路由等机制,在攻击流量到达业务服务器之前将其过滤或阻断,从而保障正常访问,流量清洗机制是核心防线高防服务器对抗DDoS攻击,靠的不是单一技术,而是一套组合动作,最常见的攻击类型是流量型攻击,比如UDP洪水、SYN洪水、ICMP放大等,核心思路是耗尽带……

    2026-07-26
    0
  • BGP线路到底是什么意思呢,有什么优势?

    BGP线路是一种通过边界网关协议实现多运营商网络互联的接入方式,能自动选择最优路径,极大提升跨网访问速度和稳定性,是解决国内南北网络瓶颈的核心方案,什么是BGP线路BGP,全称Border Gateway Protocol,边界网关协议,是互联网核心路由协议之一,它负责在自治系统之间交换网络可达性信息,BGP线……

    2026-07-26
    0
  • 增值电信业务经营许可证对IDC有多重要,如何办理?

    增值电信业务经营许可证是IDC服务商合法运营的核心凭证,它直接决定了机房能否接入骨干网、客户能否放心托管业务,以及服务商自身能否长期稳定发展,许可证是IDC进入市场的硬门槛互联网数据中心业务属于增值电信业务中的B1类,依据工信部《电信业务经营许可管理办法》,任何从事服务器托管、虚拟主机、云服务等业务的企业,必须……

    2026-07-26
    0

发表回复

您的邮箱地址不会被公开。必填项已用 * 标注