标签：sendmail   art   分享图片   ica   fst   import   map   ifconfig   重新安装   

case $1 in
start)
/etc/init.d/httpd start
/etc/init.d/xinetd start
/etc/init.d/dhcpd start
/etc/init.d/cobblerd start
;;
stop)
/etc/init.d/httpd stop
/etc/init.d/xinetd stop
/etc/init.d/dhcpd stop
/etc/init.d/cobblerd stop
;;
restart)
/etc/init.d/httpd restart
/etc/init.d/xinetd restart
/etc/init.d/dhcpd restart
/etc/init.d/cobblerd restart
;;
status)
/etc/init.d/httpd status
/etc/init.d/xinetd status
/etc/init.d/dhcpd status
/etc/init.d/cobblerd status
;;
sync)
cobbler sync
;;
*)
echo "Input error,please in put‘start|stop|restart|status|sync‘!";
exit 2>&1 >/dev/null &
;;
esac
:wq! #保存退出
chmod +x /etc/rc.d/init.d/cobbler #添加脚本执行权限
chkconfig cobbler on #添加开机启动
service cobbler restart #重启cobbler
cobbler check #检查cobbler配置，出现下面的提示，SELinux和防火墙前面已经设置过了，不用理会
The following are potential configurationitems that you may want to fix:
1 : SELinux is enabled. Please review thefollowing wiki page for details on ensuring cobbler works correctly in your SELinuxenvironment:
https://github.com/cobbler/cobbler/wiki/Selinux
2 : since iptables may be running, ensure69, 80/443, and 25151 are unblocked
Restart cobblerd and then run ‘cobblersync‘ to apply changes

五、挂载系统安装镜像到http服务器站点目录
上传系统安装镜像文件CentOS-5.10-x86_64-bin-DVD-1of2.iso到/usr/local/src/目录
mkdir -p/var/www/html/os/CentOS-5.10-x86_64 #创建挂载目录
mount -t iso9660 -o loop/usr/local/src/CentOS-5.10-x86_64-bin-DVD-1of2.iso /var/www/html/os/CentOS-5.10-x86_64 #挂载系统镜像
vi /etc/fstab #添加以下代码。实现开机自动挂载
/usr/local/src/CentOS-5.10-x86_64-bin-DVD-1of2.iso /var/www/html/os/CentOS-5.10-x86_64 iso9660 defaults,ro,loop 0 0
:wq! #保存退出
备注：iso9660使用df -T查看设备卸载：umount /var/www/html/os/CentOS-5.10-x86_64
重复上面的操作，把自己需要安装的CentOS系统镜像文件都挂载到/var/www/html/os/目录下
例如：
CentOS-5.10-x86_64-bin-DVD-1of2.iso
CentOS-6.5-x86_64-bin-DVD1.iso
六、创建kickstarts自动安装脚本
cd /var/lib/cobbler/kickstarts #进入默认Kickstart模板目录
vi/var/lib/cobbler/kickstarts/CentOS-5.10-x86_64.ks #创建CentOS-5.10-x86_64安装脚本

Kickstart file automatically generated byanaconda.

install
url--url=http://192.168.21.128/cobbler/ks_mirror/CentOS-5.10-x86_64/
lang en_US.UTF-8
zerombr yes
key --skip
keyboard us
network --device eth0 --bootprotodhcp --onboot on
#network --device eth0 --bootproto static--ip 192.168.21.250 --netmask 255.255.255.0 --gateway 192.168.21.2 --nameserver8.8.8.8 --hostname CentOS5.10
rootpw --iscrypted$1$QqobZZ1g$rYnrawi9kYlEeUuq1vcRS/
firewall --enabled --port=22:tcp
authconfig --enableshadow --enablemd5
selinux --disabled
timezone Asia/Shanghai
bootloader --location=mbr --driveorder=sda

The following is the partitioninformation you requested

Note that any partitions you deleted arenot expressed

here so unless you clear all partitionsfirst, this is

not guaranteed to work

#clearpart --linux
clearpart --all --initlabel
part / --bytes-per-inode=4096--fstype="ext3" --size=2048
part /boot --bytes-per-inode=4096--fstype="ext3" --size=128
part swap --bytes-per-inode=4096--fstype="swap" --size=500
part /data --bytes-per-inode=4096--fstype="ext3" --grow --size=1br/>reboot
%packages
ntp
@base
@corebr/>@dialup
@editorsbr/>@text-internet
keyutils
trousers
fipscheck
device-mapper-multipath
%post
#同步系统时间
ntpdate cn.pool.ntp.org
hwclock --systohc
echo -e "0 1 * root/usr/sbin/ntpdate cn.pool.ntp.org > /dev/null" >>/etc/crontab
service crond restart
#添加用户组
groupadd maintain
groupadd develop
mkdir -p /home/maintain
mkdir -p /home/develop
#添加用户
useradd -g maintain user01 -d/home/maintain/user01 -m
echo "123456"|passwd user01--stdin
useradd -g maintain user02 -d/home/maintain/user02 -m
echo "123456"|passwd user02--stdin
useradd -g maintain user03 -d/home/maintain/user03 -m
echo "123456"|passwd user03--stdin
useradd -g maintain user04 -d/home/maintain/user04 -m
echo "123456"|passwd user04--stdin
#禁止root用户直接登录系统
sed -i "s/#PermitRootLoginyes/PermitRootLogin no/g" ‘/etc/ssh/sshd_config‘
service sshd restart
#禁止开机启动的服务
chkconfig acpid off
chkconfig atd off
chkconfig autofs off
chkconfig bluetooth off
chkconfig cpuspeed off
chkconfig firstboot off
chkconfig gpm off
chkconfig haldaemon off
chkconfig hidd off
chkconfig ip6tables off
chkconfig isdn off
chkconfig messagebus off
chkconfig nfslock off
chkconfig pcscd off
chkconfig portmap off
chkconfig rpcgssd off
chkconfig rpcidmapd off
chkconfig yum-updatesd off
chkconfig sendmail off
#允许开机启动的服务
chkconfig crond on
chkconfig kudzu on
chkconfig network on
chkconfig readahead_early on
chkconfig sshd on
chkconfig syslog on
#禁止使用Ctrl+Alt+Del快捷键重启服务器
sed -i"s/ca::ctrlaltdel:\/sbin\/shutdown -t3 -rnow/#ca::ctrlaltdel:\/sbin\/shutdown -t3 -r now/g" ‘/etc/inittab‘
telinit q
#优化系统内核
echo -e "ulimit -cunlimited" >> /etc/profile
echo -e "ulimit -sunlimited" >> /etc/profile
echo -e "ulimit -SHn 65535" >> /etc/profile
source /etc/profile
sed -i "s/net.ipv4.ip_forward =0/net.ipv4.ip_forward = 1/g" ‘/etc/sysctl.conf‘
echo -e "net.core.somaxconn =262144" >> /etc/sysctl.conf
echo -e "net.core.netdev_max_backlog =262144" >> /etc/sysctl.conf
echo -e "net.core.wmem_default =8388608" >> /etc/sysctl.conf
echo -e "net.core.rmem_default =8388608" >> /etc/sysctl.conf
echo -e "net.core.rmem_max =16777216" >> /etc/sysctl.conf
echo -e "net.core.wmem_max =16777216" >> /etc/sysctl.conf
echo -e"net.ipv4.netfilter.ip_conntrack_max = 131072" >> /etc/sysctl.conf
echo -e"net.ipv4.netfilter.ip_conntrack_tcp_timeout_established = 180" >> /etc/sysctl.conf
echo -e "net.ipv4.route.gc_timeout =20" >> /etc/sysctl.conf
echo -e "net.ipv4.ip_conntrack_max =819200" >> /etc/sysctl.conf
echo -e "net.ipv4.ip_local_port_range= 10024 65535" >> /etc/sysctl.conf
echo -e "net.ipv4.tcp_retries2 =5" >> /etc/sysctl.conf
echo -e "net.ipv4.tcp_fin_timeout =30" >> /etc/sysctl.conf
echo -e "net.ipv4.tcp_syn_retries =1" >> /etc/sysctl.conf
echo -e "net.ipv4.tcp_synack_retries =1" >> /etc/sysctl.conf
echo -e "net.ipv4.tcp_timestamps =0" >> /etc/sysctl.conf
echo -e "net.ipv4.tcp_tw_recycle =1" >> /etc/sysctl.conf
echo -e "net.ipv4.tcp_tw_len =1" >> /etc/sysctl.conf
echo -e "net.ipv4.tcp_tw_reuse =1" >> /etc/sysctl.conf
echo -e "net.ipv4.tcp_keepalive_time =120" >> /etc/sysctl.conf
echo -e "net.ipv4.tcp_keepalive_probes= 3" >> /etc/sysctl.conf
echo -e "net.ipv4.tcp_keepalive_intvl= 15" >> /etc/sysctl.conf
echo -e "net.ipv4.tcp_max_tw_buckets =36000" >> /etc/sysctl.conf
echo -e "net.ipv4.tcp_max_orphans =3276800" >> /etc/sysctl.conf
echo -e "net.ipv4.tcp_max_syn_backlog= 262144" >> /etc/sysctl.conf
echo -e "net.ipv4.tcp_wmem = 8192131072 16777216" >> /etc/sysctl.conf
echo -e "net.ipv4.tcp_rmem = 32768131072 16777216" >> /etc/sysctl.conf
echo -e "net.ipv4.tcp_mem = 94500000915000000 927000000" >> /etc/sysctl.conf
/sbin/sysctl -p
#执行外部脚本
cd /root
wgethttp://192.168.21.128/cobbler/ks_mirror/config/autoip.sh
sh /root/autoip.sh
:wq! #保存退出
vi/var/www/cobbler/ks_mirror/config/autoip.sh #创建脚本，自动设置Linux系统静态IP地址、DNS、网关、计算机名称
#!/bin/sh
ROUTE=$(route -n|grep"^0.0.0.0"|awk ‘{print $2}‘)
BROADCAST=$(/sbin/ifconfig eth0|grep -ibcast|awk ‘{print $3}‘|awk -F":" ‘{print $2}‘)
HWADDR=$(/sbin/ifconfig eth0|grep -iHWaddr|awk ‘{print $5}‘)
IPADDR=$(/sbin/ifconfig eth0|grep"inet addr"|awk ‘{print $2}‘|awk -F":" ‘{print $2}‘)
NETMASK=$(/sbin/ifconfig eth0|grep"inet addr"|awk ‘{print $4}‘|awk -F":" ‘{print $2}‘)
cat >/etc/sysconfig/network-scripts/ifcfg-eth0<<EOF
DEVICE=eth0
BOOTPROTO=static
BROADCAST=$BROADCAST
HWADDR=$HWADDR
IPADDR=$IPADDR
NETMASK=$NETMASK
GATEWAY=$ROUTE
ONBOOT=yes
EOF
IPADDR1=$(echo $IPADDR|awk -F"."‘{print $4}‘)
cat>/etc/sysconfig/network-scripts/ifcfg-eth1<<EOF
DEVICE=eth1
BOOTPROTO=static
BROADCAST=10.0.0.255
HWADDR=$(/sbin/ifconfig eth1|grep -iHWaddr|awk ‘{print $5}‘)
IPADDR=10.0.0.$IPADDR1
NETMASK=255.255.255.0
ONBOOT=yes
EOF
HOSTNAME=OsYunWeiHZ$(echo $IPADDR|awk-F"." ‘{print $4}‘)
cat >/etc/sysconfig/network<<EOF
NETWORKING=yes
NETWORKING_IPV6=no
HOSTNAME=$HOSTNAME
GATEWAY=$ROUTE
EOF
echo "127.0.0.1 $HOSTNAME">> /etc/hosts
hostname=$HOSTNAME
echo "nameserver 8.8.8.8" > /etc/resolv.conf
echo "nameserver 8.8.4.4">> /etc/resolv.conf
:wq! #保存退出
七、导入系统镜像到cobbler
cobbler import--path=/var/www/html/os/CentOS-5.10-x86_64 --name=CentOS-5.10-x86_64 --arch=x86_64 #导入系统镜像文件，需要一段时间
cd /var/www/cobbler/ks_mirror #进入系统镜像导入目录
命令格式：cobbler import --path=镜像路径 -- name=安装引导名 --arch=32位或64位
重复上面的操作，把其他的系统镜像文件导入到cobbler
八、设置profile
按照操作系统版本分别关联系统镜像文件和kickstart自动安装文件
在第一次导入系统镜像时，cobbler会给安装镜像指定一个默认的kickstart自动安装文件
例如：CentOS-5.10-x86_64版本的kickstart自动安装文件为：/var/lib/cobbler/kickstarts/sample.ks
cobbler profile report --name CentOS-5.10-x86_64 #查看profile设置
cobbler distro report --nameCentOS-5.10-x86_64 #查看安装镜像文件信息
cobbler profile remove--name=CentOS-5.10-x86_64 #移除profile
cobbler profile add--name=CentOS-5.10-x86_64 --distro=CentOS-5.10-x86_64--kickstart=/var/lib/cobbler/kickstarts/CentOS-5.10-x86_64.ks #添加
cobbler profile edit--name=CentOS-5.10-x86_64 --distro=CentOS-5.10-x86_64--kickstart=/var/lib/cobbler/kickstarts/CentOS-5.10-x86_64.ks #编辑
命令：cobbler profile add|edit|remove --name=安装引导名 --distro=系统镜像名 --kickstart=kickstart自动安装文件路径
--name：自定义的安装引导名，注意不能重复
--distro：系统安装镜像名，用cobblerdistro list可以查看
--kickstart：与系统镜像文件相关联的kickstart自动安装文件
#查看Cobbler列表
cobbler list
cobbler report
cobbler profile report
cobbler distro list
#通过profile查找对应的kickstart自动安装文件文件
例如：
ksfile=$( cobbler profile report --name CentOS-5.10-x86_64|grep -E ‘^Kickstart‘ |head -n 1|cut -d ‘:‘ -f 2 );cat$ksfile;
重复上面的操作，把其他的系统镜像文件和kickstart自动安装文件关联起来
注意：
1、kickstart自动安装文件需要预先配置好
2、每次修改完配置文件，需要执行一次同步操作：cobbler sync 配置才能生效
3、kickstart自动安装文件可以用工具生成（需要用到图形界面操作）
yum install system-config-kickstart #安装
yum groupinstall "X WindowSystem" #安装X Window图形界面
system-config-kickstart #运行kickstart配置
service cobbler sync #与cobbler sync作用相同
service cobbler restart #重启cobbler
第二部分：设置要安装的服务器从网络启动
一、 裸机安装
开机之后，如下图所示，根据需要选择相应的系统版本进行安装，安装完成之后，系统会自动重启

一、 重新安装系统：
在需要重装系统的服务器上安装koan
wget http://dl.fedoraproject.org/pub/epel/5/x86_64/koan-2.4.4-1.el5.noarch.rpm #CentOS5.X
rpm -ivh koan-2.4.0-1.el5.noarch.rpm #安装koan
http://dl.fedoraproject.org/pub/epel/6/x86_64/koan-2.4.0-1.el6.noarch.rpm #CentOS6.X
yum install cobbler debmirror pykickstart python-ctypes cman #安装koan运行依赖包（需要设置epel源）
koan --list=profiles --server=192.168.21.128 #查看Cobbler服务器系统镜像列表
koan --replace-self --server=192.168.21.128--profile=CentOS-5.10-x86_64 #选择要重装的系统
reboot #重新启动系统进行自动安装
二、 扩展阅读：
Cobbler目录说明：
1、Cobbler配置文件目录：/etc/cobbler
/etc/cobbler/settings #cobbler主配置文件
/etc/cobbler/dhcp.template #DHCP服务的配置模板
/etc/cobbler/tftpd.template #tftp服务的配置模板
/etc/cobbler/rsync.template #rsync服务的配置模板
/etc/cobbler/iso #iso模板配置文件
/etc/cobbler/pxe #pxe模板文件
/etc/cobbler/power #电源的配置文件
/etc/cobbler/users.conf #Web服务授权配置文件
/etc/cobbler/users.digest #用于web访问的用户名密码配置文件
/etc/cobbler/dnsmasq.template #DNS服务的配置模板
/etc/cobbler/modules.conf #Cobbler模块配置文件
2、Cobbler数据目录：/var/lib/cobbler
/var/lib/cobbler/config #配置文件
/var/lib/cobbler/triggers #Cobbler命令
/var/lib/cobbler/kickstarts #默认存放kickstart文件
/var/lib/cobbler/loaders #存放的各种引导程序
3、系统安装镜像目录：/var/www/cobbler
/var/www/cobbler/ks_mirror #导入的系统镜像列表
/var/www/cobbler/images #导入的系统镜像启动文件
/var/www/cobbler/repo_mirror #yum源存储目录
4、日志目录：/var/log/cobbler
/var/log/cobbler/install.log #客户端系统安装日志
/var/log/cobbler/cobbler.log #cobbler日志
至此，Cobbler全自动批量安装部署Linux系统完成。

cobbler

标签：sendmail   art   分享图片   ica   fst   import   map   ifconfig   重新安装   

原文地址：http://blog.51cto.com/13842738/2152413