cobbler 实现无人值守网络批量安装操作系统

环境：
     VMware： 12
     cobbler 主机：CentOS 6.7 
     IP： 
          eth0：10.10.111.20/24 管理使用
          eth1： VM dhcp 联网
     
     dhcp地址池：10.10.111.191-10.10.111.200/24
          GATEWAY：10.10.111.1 （物理的vm1网卡地址）                

环境配置：
     关闭selinux：
     sed -i ‘/^SELINUX=/ s/^SELINUX=.*/SELINUX=disabled/g‘ /etc/selinux/config
     关闭iptables：
     service iptables stop && chkconfig iptables off
     重启生效

安装配置epel源：
     安装yum优先级插件：
     yum install yum-priorities -y
     安装epel源：
     rpm -Uvh http://mirrors.ustc.edu.cn/fedora/epel/6/x86_64/epel-release-6-8.noarch.rpm
     rpm -Uvh http://rpms.famillecollet.com/enterprise/remi-release-6.rpm
     导入key：
      rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-6
     重建缓存
     yum makecache

安装Cobbler：
     这里 sync tftpd都是使用Cobbler自带
     yum install cobbler cobbler-web pykickstart debmirror cman fence-agents dhcp bind -y
     
启动服务：
     service httpd start && service cobblerd start

cobbler配置文件路径：/etc/cobbler/
     主配置文件：settings

检查cobbler环境：
     cobbler check
     问题：
    1 : The ‘server‘ field in /etc/cobbler/settings must be set to something other than localhost, or kickstarting features will not work.  This should be a resolvable hostname or IP for the boot server as reachable by all machines that will use it.
    2 : For PXE to be functional, the ‘next_server‘ field in /etc/cobbler/settings must be set to something other than 127.0.0.1, and should match the IP of the boot server on the PXE network.
    3 : change ‘disable‘ to ‘no‘ in /etc/xinetd.d/tftp
    4 : some network boot-loaders are missing from /var/lib/cobbler/loaders, you may run ‘cobbler get-loaders‘ to download them, or, if you only want to handle x86/x86_64 netbooting, you may ensure that you have installed a *recent* version of the syslinux package installed and can ignore this message entirely.  Files in this directory, should you want to support all architectures, should include pxelinux.0, menu.c32, elilo.efi, and yaboot. The ‘cobbler get-loaders‘ command is the easiest way to resolve these requirements.
    5 : change ‘disable‘ to ‘no‘ in /etc/xinetd.d/rsync
    6 : file /etc/xinetd.d/rsync does not exist
    7 : comment out ‘dists‘ on /etc/debmirror.conf for proper debian support
    8 : comment out ‘arches‘ on /etc/debmirror.conf for proper debian support
    9 : The default password used by the sample templates for newly installed machines (default_password_crypted in /etc/cobbler/settings) is still set to ‘cobbler‘ and should be changed, try: "openssl passwd -1 -salt ‘random-phrase-here‘ ‘your-password-here‘" to generate new one
     问题解决：根据提示解决，个人的如下
          修改配置文件：settings
                   server  IP 为管理地址：10.10.111.20
                   next_server  IP 为管理地址：10.10.111.20 这个需要在配置dhcpd 一样
          修改/etc/xinetd.d/ tftp 和 rsync 文件：
          sed -i ‘/disable/c disable = no‘ /etc/xinetd.d/tftp
          sed -i -e ‘s/= yes/= no/g‘ /etc/xinetd.d/rsync
          service xinetd restart                 
          执行cobbler get-loaders 加载部分缺失的网络boot-loaders
          注释文件/etc/debmirror.conf 中的 dists 和 arches
          创建系统默认初始密码：cobbler‘ and should be changed, try: "openssl   passwd -1 -salt ‘random-phrase-here‘ ‘12345678‘  12345678就是系统安装好后root初始密码
               修改settings 文件：default_password_crypted: "$1$222222$D38AxheCTHf/nVAzlN0.z0"
  
配置dhcpd服务：
     cd /etc/dhcp   &&   cp /usr/share/doc/dhcp-4.1.1/dhcpd.conf.sample ./dhcpd.conf
          #############vim dhcpd.conf
          # option definitions common to all supported networks...
          option domain-name "flinux.org";
          option domain-name-servers 10.10.111.20, 192.168.131.2;
          default-lease-time 43200;
          max-lease-time 86400;
          # Use this to enble / disable dynamic dns updates globally.
          #ddns-update-style none;
          # If this DHCP server is the official DHCP server for the local
          # network, the authoritative directive should be uncommented.
          #authoritative;
          # Use this to send dhcp log messages to a different log file (you also
          # have to hack syslog.conf to complete the redirection).
          log-facility local7;
          # No service will be given on this subnet, but declaring it helps the
          subnet 10.10.111.0 netmask 255.255.255.0 {
                option routers             10.10.111.1;
                range dynamic-bootp        10.10.111.191 10.10.111.200;
          }
          next-server 10.10.111.20;
          filename="pxelinux.0";

配置服务：
     service httpd start 
     service cobblerd restart
     service dhcpd restart
     chkconfig httpd on
     chkconfig cobblerd on
     chkconfig dhcpd on

同步数据：
     cobbler  sync  基本修改操作之后都要运行

添加镜像：
这里使用光盘挂载添加：
     cobbler import --path=/media/ --name=CentOS-6.7-x86_64       
     --arch=x86_64
     --path：镜像路径
     --name：生成镜像名称：
     --arch：32位或者64位

     其实到这里，就可以使用上面导入的镜像profile进行无人值守网络安装了：
     查看distro和profile
     cobbler distro list
     cobbler profile list    

/var/lib/tftpboot/pxelinux.cfg/default
小小的排错思路：
1、一个是dhcp不能配置好，dhcpd next-server 10.10.111.20; ====》本地管理地址，也是cobbler的 next_server 地址
2、一个小小的坑：vm默认开启dhcp。所以这会对实验有影响。在安装系统的时候：影响就是找不到http://10.10.111.20/cblr/svc/op/ks/profile/CentOS-6.5-x86_64  这是自己的镜像 。关闭vm的dhcp

自己定制镜像模板profile：
先写一个xxx.cfg
     

创建profile：
cobbler profile add --name=centos-6.7-x86_64-basic 
     --distro=centos-6.7-x86_64    
     --kickstart=/var/lib/cobbler/kickstarts/CentOS-6.7-x86_64.cfg
     --name：定义profile名称
     --distro：指定distro
     --kickstart： 指定kickstart文件 xxx.cfg

     
安装系统的时候，可以使用原导入的镜像profile。也可以使用新建的profile