cobbler

cobbler

一、cobbler简介

Cobbler是一个Linux服务器安装的服务，可以通过网络启动(PXE)的方式来快速安装、重装物理服务器和虚拟机，同时还可以管理DHCP，DNS等

Cobbler可以使用命令行方式管理，也提供了基于Web的界面管理工具(cobbler-web)，还提供了API接口，可以方便二次开发使用

Cobbler是较早前的kickstart的升级版，优点是比较容易配置，还自带web界面比较易于管理

Cobbler内置了一个轻量级配置管理系统，但它也支持和其它配置管理系统集成，如Puppet，暂时不支持SaltStack

puppet是一种Linux、Unix、windows平台的集中配置管理系统，使用自有的puppet描述语言，可管理配置文件、用户、cron任务、软件包、系统服务等puppet把这些系统实体称之为资源，puppet的设计目标是简化对这些资源的管理以及妥善处理资源间的依赖关系

puppet采用C/S星状的结构，所有的客户端和一个或几个服务器交互。每个客户端周期的（默认半个小时）向服务器发送请求，获得其最新的配置信息，保证和该配置信息同步。每个puppet客户端每半小时(可以设置)连接一次服务器端, 下载最新的配置文件,并且严格按照配置文件来配置客户端. 配置完成以后,puppet客户端可以反馈给服务器端一个消息. 如果出错,也会给服务器端反馈一个消息

关闭防火墙和selinux略

配置yum仓库略

实验（安装cobbler以及相关的软件）：

[root@syf ~]# yum -y install epel-release
Loaded plugins: fastestmirror, langpacks
Loading mirror speeds from cached hostfile* base: mirrors.aliyun.com* epel: ftp-stud.hs-esslingen.de* extras: mirrors.aliyun.com* updates: mirrors.aliyun.com
Resolving Dependencies
--> Running transaction check
---> Package epel-release.noarch 0:7-11 will be updated
---> Package epel-release.noarch 0:7-14 will be an update
--> Finished Dependency ResolutionDependencies Resolved====================================================================Package             Arch          Version        Repository   Size
====================================================================
Updating:epel-release        noarch        7-14           epel         15 kTransaction Summary
====================================================================
Upgrade  1 PackageTotal download size: 15 k
Downloading packages:
epel/x86_64/prestodelta                        |  592 B   00:01     
epel-release-7-14.noarch.rpm   FAILED                                          
https://ftp-stud.hs-esslingen.de/pub/Mirrors/archive.fedoraproject.org/epel/7/x86_64/Packages/e/epel-release-7-14.noarch.rpm: [Errno 14] curl#7 - "Failed to connect to 2001:7c0:700::10: Network is unreachable"
Trying other mirror.
epel-release-7-14.noarch.rpm                   |  15 kB   00:02     
Running transaction check
Running transaction test
Transaction test succeeded
Running transactionUpdating   : epel-release-7-14.noarch                         1/2 Cleanup    : epel-release-7-11.noarch                         2/2 Verifying  : epel-release-7-14.noarch                         1/2 Verifying  : epel-release-7-11.noarch                         2/2 Updated:epel-release.noarch 0:7-14                                        Complete!
[root@syf ~]# yum -y install httpd dhcp* tftp tftp-server cobbler cobbler-web pykickstart rsync rsync-daemon
......
[root@syf ~]# systemctl restart httpd;systemctl enable httpd
Created symlink from /etc/systemd/system/multi-user.target.wants/httpd.service to /usr/lib/systemd/system/httpd.service.
[root@syf ~]# systemctl restart rsyncd;systemctl enable rsyncd
Created symlink from /etc/systemd/system/multi-user.target.wants/rsyncd.service to /usr/lib/systemd/system/rsyncd.service.
[root@syf ~]# systemctl restart tftp;systemctl enable tftp
Created symlink from /etc/systemd/system/sockets.target.wants/tftp.socket to /usr/lib/systemd/system/tftp.socket.
[root@syf ~]# systemctl restart cobblerd;systemctl enable cobblerd
Created symlink from /etc/systemd/system/multi-user.target.wants/cobblerd.service to /usr/lib/systemd/system/cobblerd.service.
[root@syf ~]# cd /etc/cobbler/
[root@syf cobbler]# ls
auth.conf               ldap            secondary.template
cheetah_macros          modules.conf    settings
cobbler_bash            mongodb.conf    tftpd.template
completions             named.template  users.conf
dhcp.template           power           users.digest
dnsmasq.template        pxe             version
genders.template        reporting       zone.template
import_rsync_whitelist  rsync.exclude   zone_templates
iso                     rsync.template
[root@syf cobbler]# vim settings 
...
next_server: 192.168.100.10     //修改成本地IP地址
...
server: 192.168.100.10
...

生成加密的密码：

[root@syf cobbler]# vim settings 
...
default_password_crypted: ""
...
[root@syf cobbler]# openssl passwd -1 -salt "$RANDOM" 'redhat'
$1$10279$najI782TaMC4oa0i.jDso/
[root@syf cobbler]# vim settings 
...
default_password_crypted: "$1$10279$najI782TaMC4oa0i.jDso/"
...
[root@syf cobbler]# vim settings 
...
manage_dhcp: 1
...
[root@syf cobbler]# systemctl restart cobblerd.service 

通过cobbler check 核对当前设置是否有问题：

[root@syf ~]# cobbler check
The following are potential configuration items that you may want to fix:1 : change 'disable' to 'no' in /etc/xinetd.d/tftp
2 : Some network boot-loaders are missing from /var/lib/cobbler/loaders.  If you only want to handle x86/x86_64 netbooting, you may ensure that you have installed a *recent* version of the syslinux package installed and can ignore this message entirely.  Files in this directory, should you want to support all architectures, should include pxelinux.0, menu.c32, elilo.efi, and yaboot.
3 : debmirror package is not installed, it will be required to manage debian deployments and repositories
4 : fencing tools were not found, and are required to use the (optional) power management features. install cman or fence-agents to use themRestart cobblerd and then run 'cobbler sync' to apply changes.
[root@syf ~]# vim /etc/xinetd.d/tftp 
...disable                 = no
...
[root@syf ~]# systemctl restart tftp
[root@syf ~]# yum -y install syslinux*
......
[root@syf ~]# cd /var/lib/cobbler/loaders/
[root@syf loaders]# ls
[root@syf loaders]# cd /usr/share/syslinux/
[root@syf syslinux]# ls
altmbr.bin     gptmbr_c.bin    isolinux-debug.bin  pxelinux.0
altmbr_c.bin   gptmbr_f.bin    kbdmap.c32          reboot.c32
altmbr_f.bin   gpxecmd.c32     linux.c32           rosh.c32
cat.c32        gpxelinux.0     ls.c32              sanboot.c32
chain.c32      gpxelinuxk.0    lua.c32             sdi.c32
cmd.c32        hdt.c32         mboot.c32           sysdump.c32
com32          host.c32        mbr.bin             syslinux64.exe
config.c32     ifcpu64.c32     mbr_c.bin           syslinux.com
cpuid.c32      ifcpu.c32       mbr_f.bin           syslinux.exe
cpuidtest.c32  ifplop.c32      memdisk             ver.com
diag           int18.com       memdump.com         vesainfo.c32
disk.c32       isohdpfx.bin    meminfo.c32         vesamenu.c32
dmitest.c32    isohdpfx_c.bin  menu.c32            vpdtest.c32
dosutil        isohdpfx_f.bin  pcitest.c32         whichsys.c32
elf.c32        isohdppx.bin    pmload.c32          zzjson.c32
ethersel.c32   isohdppx_c.bin  poweroff.com
gfxboot.c32    isohdppx_f.bin  pwd.c32
gptmbr.bin     isolinux.bin    pxechain.com
[root@syf syslinux]# ls pxelinux.0
pxelinux.0
[root@syf syslinux]# ls menu.c32 
menu.c32
[root@syf syslinux]# cd -
/var/lib/cobbler/loaders
[root@syf loaders]# ls
[root@syf loaders]# cd -
/usr/share/syslinux
[root@syf syslinux]# cp pxelinux.0 /var/lib/cobbler/loaders
[root@syf syslinux]# cp menu.c32 /var/lib/cobbler/loaders
[root@syf syslinux]# cd -
/var/lib/cobbler/loaders
[root@syf loaders]# ls
menu.c32  pxelinux.0

[root@syf loaders]# yum -y install yum-utils
.....
[root@syf ~]# cobbler check
The following are potential configuration items that you may want to fix:1 : Some network boot-loaders are missing from /var/lib/cobbler/loaders.  If you only want to handle x86/x86_64 netbooting, you may ensure that you have installed a *recent* version of the syslinux package installed and can ignore this message entirely.  Files in this directory, should you want to support all architectures, should include pxelinux.0, menu.c32, elilo.efi, and yaboot.
2 : debmirror package is not installed, it will be required to manage debian deployments and repositories
3 : fencing tools were not found, and are required to use the (optional) power management features. install cman or fence-agents to use themRestart cobblerd and then run 'cobbler sync' to apply changes.

配置DHCP模板文件：

[root@syf ~]# cd /etc/cobbler/
[root@syf cobbler]# ls
auth.conf               ldap            secondary.template
cheetah_macros          modules.conf    settings
cobbler_bash            mongodb.conf    tftpd.template
completions             named.template  users.conf
dhcp.template           power           users.digest
dnsmasq.template        pxe             version
genders.template        reporting       zone.template
import_rsync_whitelist  rsync.exclude   zone_templates
iso                     rsync.template
[root@syf cobbler]# vim dhcp.template
....
subnet 192.168.100.0 netmask 255.255.255.0 {option routers             192.168.100.254;option domain-name-servers 8.8.8.8;option subnet-mask         255.255.255.0;range dynamic-bootp        192.168.100.100 192.168.100.110;
....
[root@syf cobbler]# systemctl restart cobblerd.service 
[root@syf cobbler]# systemctl restart httpd
[root@syf cobbler]# cobbler sync
task started: 2025-08-20_183311_sync
task started (id=Sync, time=Wed Aug 20 18:33:11 2025)
running pre-sync triggers
cleaning trees
removing: /var/lib/tftpboot/grub/images
copying bootloaders
trying hardlink /var/lib/cobbler/loaders/pxelinux.0 -> /var/lib/tftpboot/pxelinux.0
copying: /var/lib/cobbler/loaders/pxelinux.0 -> /var/lib/tftpboot/pxelinux.0
trying hardlink /var/lib/cobbler/loaders/menu.c32 -> /var/lib/tftpboot/menu.c32
copying: /var/lib/cobbler/loaders/menu.c32 -> /var/lib/tftpboot/menu.c32
trying hardlink /usr/share/syslinux/memdisk -> /var/lib/tftpboot/memdisk
copying: /usr/share/syslinux/memdisk -> /var/lib/tftpboot/memdisk
copying distros to tftpboot
copying images
generating PXE configuration files
generating PXE menu structure
rendering DHCP files
generating /etc/dhcp/dhcpd.conf
rendering TFTPD files
generating /etc/xinetd.d/tftp
cleaning link caches
running post-sync triggers
running python triggers from /var/lib/cobbler/triggers/sync/post/*
running python trigger cobbler.modules.sync_post_restart_services
running: dhcpd -t -q
received on stdout: 
received on stderr: 
running: service dhcpd restart
received on stdout: 
received on stderr: Redirecting to /bin/systemctl restart dhcpd.servicerunning shell triggers from /var/lib/cobbler/triggers/sync/post/*
running python triggers from /var/lib/cobbler/triggers/change/*
running python trigger cobbler.modules.manage_genders
running python trigger cobbler.modules.scm_track
running shell triggers from /var/lib/cobbler/triggers/change/*
*** TASK COMPLETE ***

管理distro：

//挂载镜像：

[root@syf ~]# mount /dev/cdrom /mnt/
mount: /dev/sr0 is write-protected, mounting read-only

导入镜像：

[root@syf ~]# ls /mnt/
CentOS_BuildTag  GPL       LiveOS    RPM-GPG-KEY-CentOS-7
EFI              images    Packages  RPM-GPG-KEY-CentOS-Testing-7
EULA             isolinux  repodata  TRANS.TBL
[root@syf ~]# cobbler import --path=/mnt/ --name=Centos-7 arch=x86_64
task started: 2025-08-20_183754_import
task started (id=Media import, time=Wed Aug 20 18:37:54 2025)
Found a candidate signature: breed=suse, version=opensuse15.0
Found a candidate signature: breed=suse, version=opensuse15.1
Found a candidate signature: breed=redhat, version=rhel6
Found a matching signature: breed=redhat, version=rhel6
Adding distros from path /var/www/cobbler/ks_mirror/Centos-7:
creating new distro: Centos-7-x86_64
trying symlink: /var/www/cobbler/ks_mirror/Centos-7 -> /var/www/cobbler/links/Centos-7-x86_64
creating new profile: Centos-7-x86_64
associating repos
checking for rsync repo(s)
checking for rhn repo(s)
checking for yum repo(s)
starting descent into /var/www/cobbler/ks_mirror/Centos-7 for Centos-7-x86_64
processing repo at : /var/www/cobbler/ks_mirror/Centos-7
need to process repo/comps: /var/www/cobbler/ks_mirror/Centos-7
looking for /var/www/cobbler/ks_mirror/Centos-7/repodata/*comps*.xml
Keeping repodata as-is :/var/www/cobbler/ks_mirror/Centos-7/repodata
*** TASK COMPLETE ***
[root@syf ~]# cobbler list
distros:Centos-7-x86_64profiles:Centos-7-x86_64systems:repos:images:mgmtclasses:packages:files:

查看详细信息 查看指定的–name 接镜像名：

[root@syf ~]# cobbler distro report --name Centos-7-x86_64
Name                           : Centos-7-x86_64
Architecture                   : x86_64
TFTP Boot Files                : {}
Breed                          : redhat
Comment                        : 
Fetchable Files                : {}
Initrd                         : /var/www/cobbler/ks_mirror/Centos-7/images/pxeboot/initrd.img
Kernel                         : /var/www/cobbler/ks_mirror/Centos-7/images/pxeboot/vmlinuz
Kernel Options                 : {}
Kernel Options (Post Install)  : {}
Kickstart Metadata             : {'tree': 'http://@@http_server@@/cblr/links/Centos-7-x86_64'}
Management Classes             : []
OS Version                     : rhel6
Owners                         : ['admin']
Red Hat Management Key         : <<inherit>>
Red Hat Management Server      : <<inherit>>
Template Files                 : {}

创建新的虚拟机：

下一步、下一步：

然后一直下一步、完成

开机：

选第二个回车：