
平台论坛博客文库

论坛徽章:: 0

61楼 [报告]

发表于 2011-11-16 16:13 |只看该作者

回复 kns1024wh

确实够复杂,百湖有文档之类的吗,分享下
chenyx 发表于 2011-11-16 15:22

微软的ris 也是一pxe为基础的 linux 和windows的就是 pxe的基础文件有区别的而windows 采用ris是安装方式非ghost方式而linux采用pxe也是安装方式

实战分享：从技术角度谈机器学习入门| 【大话IT】RadonDB低门槛向MySQL集群下战书 | ChinaUnix打赏功能已上线！ | 新一代分布式关系型数据库RadonDB知多少？

king_819

版主

论坛徽章:: 0

62楼 [报告]

发表于 2011-11-16 16:16 |只看该作者

从事网游运维的兄弟们应该深有感触，往往在开新服的时候需要大批量的布署新的服务器，Red Hat 最新发布了网络安装服务器套件 Cobbler（补鞋匠）集成了PXE、DHCP、DNS、Kickstart服务管理和yum仓库管理工具，相对之前的 Kickstart 更加快捷、方便的批量布署red hat、centos类系统
1、安装rpmforce源
CentOS 5.5默认的Repository里找不到Cobbler，先安装rpmforce这个Repository

cd /opt
wget http://pkgs.repoforge.org/rpmforge-release/rpmforge-release-0.5.2-2.el5.rf.i386.rpm
rpm -ivh rpmforge-release-0.5.2-2.el6.rf.i686.rpm

复制代码

2、安装相关软件

yum -y install cobbler dhcp httpd xinetd tftp-server

复制代码

3、检查cobbler配置

cobbler check

复制代码

根椐提示修改配置文件
/var/lib/cobbler/settings 中的 server 和 next_server 对应的127.0.0.1修改为本服务器的 IP 地址，
manage_dhcp 设为 1，以便管理 DHCP

将 /etc/xinetd.d/tftp 中 disable = no

4、导入精简后的ISO

mkdir -p /mnt/iso
mount -o loop /data/KerryOS-1.0-i386.iso /mnt/iso
cobbler import --mirror=/mnt/iso --name=kerryOS-1.0-i386

复制代码

查看导入结果

cobbler distro list

复制代码

5、修改 DHCP 和 Kickstart 配置模板
#修改DHCP配置模板

vi /etc/dhcpd.conf
vi /etc/cobbler/dhcp.template
ddns-update-style interim;
allow booting;
allow bootp;
ignore client-updates;
set vendorclass = option vendor-class-identifier;
subnet 192.168.9.0 netmask 255.255.255.0 {
option routers 192.168.9.1; #路由器地址
option subnet-mask 255.255.255.0; #子网掩码选项
option domain-name-servers 192.168.9.1; #DNS地址
range dynamic-bootp 192.168.9.200 192.168.9.254; #动态IP范围
filename "/pxelinux.0";
default-lease-time 21600; #缺省租约时间
max-lease-time 43200; #最大租约时间
next-server 192.168.9.230; #指定引导服务器
}

复制代码

#修改 Kickstart 配置模板

mv /var/www/cobbler/kickstarts/kerryOS-1.0-i386/ks.cfg /var/www/cobbler/kickstarts/kerryOS-1.0-i386/ks.cfg.bak
mv /var/www/cobbler/kickstarts/kerryOS-1.0-xen-i386/ks.cfg /var/www/cobbler/kickstarts/kerryOS-1.0-xen-i386/ks.cfg.bak
vi /etc/cobbler/default.ks
vi /var/www/cobbler/kickstarts/kerryOS-1.0-i386/ks.cfg
vi /var/www/cobbler/kickstarts/kerryOS-1.0-xen-i386/ks.cfg
# Kickstart file automatically generated by anaconda.
#Install OS instead of upgrade
install
#Use text mode install
text
#Use CDROM installation media
cdrom
lang en_US.UTF-8
keyboard us
#Skip the X Configuration
skipx
#Use network installation
url --url=http://192.168.9.230/cobbler/ks_mirror/kerryOS-1.0-i386
#Network information
#network --device eth0 --bootproto static --ip 192.168.9.226 --netmask 255.255.255.0 --gateway 192.168.9.1 --nameserver 192.168.9.1 --noipv6 --onboot=yes --hostname kerry-web-001
network --device eth0 --bootproto dhcp --noipv6 --hostname kerry-web-001
#root -- 1q2w3e
rootpw --iscrypted $1$n07CbCot$GP.VBeICPHj.QkJb5Y2C2.
firewall --disabled
#System authorization information
authconfig --enableshadow --enablemd5
selinux --disabled
timezone --utc Asia/Shanghai
#System bootloader configuration
bootloader --location=mbr
#Clear the Master Boot Record
zerombr yes
# Set the Mouse
mouse generic3ps/2
# The following is the partition information you requested
# Note that any partitions you deleted are not expressed
# here so unless you clear all partitions first, this is
# not guaranteed to work
#Partition clearing information
clearpart --all --initlabel
part /boot --fstype ext3 --size=200 --asprimary
part / --fstype ext3 --size=10000
part swap --size=2048
part /data --fstype ext3 --size=1 --grow
#--- Reboot the host after installation is done
reboot
%packages
%packages
@base
@core
@development-libs
@development-tools
@editors
@text-internet
keyutils
trousers
fipscheck
device-mapper-multipath
imake
%post --nochroot
# Mount CDROM
mkdir -p /mnt/cdrom
mount -r -t iso9660 /tmp/cdrom /mnt/cdrom
cp /mnt/cdrom/ipmod /mnt/sysimage/root/ipmod > /dev/null
umount /mnt/cdrom
%post
#vim syntax on
sed -i "8 s/^/alias vi='vim'/" /root/.bashrc 2>/dev/null
echo 'syntax on' > /root/.vimrc 2>/dev/null
#init_ssh
ssh_cf="/etc/ssh/sshd_config"
sed -i -e '74 s/^/#/' -i -e '76 s/^/#/' $ssh_cf
sed -i "s/#UseDNS yes/UseDNS no/" $ssh_cf
#client
sed -i -e '44 s/^/#/' -i -e '48 s/^/#/' $ssh_cf
# Remove the ISO File translation files
find / -name TRANS.TBL -exec rm {} \; /dev/null 2>/dev/null
# Remove some unneeded services
#--------------------------------------------------------------------------------
cat << EOF
+--------------------------------------------------------------+
| === Welcome to Tunoff services === |
+--------------------------------------------------------------+
EOF
#---------------------------------------------------------------------------------
for i in `ls /etc/rc3.d/S*`
do
CURSRV=`echo $i|cut -c 15-`
echo $CURSRV
case $CURSRV in
crond | irqbalance | microcode_ctl | network | random | sshd | syslog | local )
echo "Base services, Skip!"
;;
*)
echo "change $CURSRV to off"
chkconfig --level 235 $CURSRV off
service $CURSRV stop
;;
esac
done
# file descriptors
ulimit -HSn 65535
echo -ne "
* soft nofile 65536
* hard nofile 65536
" >>/etc/security/limits.conf
#set sysctl
true > /etc/sysctl.conf
cat >> /etc/sysctl.conf << EOF
net.ipv4.ip_forward = 0
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.default.accept_source_route = 0
kernel.sysrq = 0
kernel.core_uses_pid = 1
net.ipv4.tcp_syncookies = 1
kernel.msgmnb = 65536
kernel.msgmax = 65536
kernel.shmmax = 68719476736
kernel.shmall = 4294967296
net.ipv4.tcp_max_tw_buckets = 6000
net.ipv4.tcp_sack = 1
net.ipv4.tcp_window_scaling = 1
net.ipv4.tcp_rmem = 4096 87380 4194304
net.ipv4.tcp_wmem = 4096 16384 4194304
net.core.wmem_default = 8388608
net.core.rmem_default = 8388608
net.core.rmem_max = 16777216
net.core.wmem_max = 16777216
net.core.netdev_max_backlog = 262144
net.core.somaxconn = 262144
net.ipv4.tcp_max_orphans = 3276800
net.ipv4.tcp_max_syn_backlog = 262144
net.ipv4.tcp_timestamps = 0
net.ipv4.tcp_synack_retries = 1
net.ipv4.tcp_syn_retries = 1
net.ipv4.tcp_tw_recycle = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_mem = 94500000 915000000 927000000
net.ipv4.tcp_fin_timeout = 1
net.ipv4.tcp_keepalive_time = 1200
net.ipv4.ip_local_port_range = 1024 65535
EOF
/sbin/sysctl -p
#close ctrl+alt+del
sed -i "s/ca::ctrlaltdel:\/sbin\/shutdown -t3 -r now/#ca::ctrlaltdel:\/sbin\/shutdown -t3 -r now/" /etc/inittab
#set purview
chmod 600 /etc/passwd
chmod 600 /etc/shadow
chmod 600 /etc/group
chmod 600 /etc/gshadow

复制代码

6、生成并同步所有配置

cobbler sync

复制代码

7、启动相关的服务

/etc/init.d/httpd start
/etc/init.d/xinetd start
/etc/init.d/dhcpd start
/etc/init.d/cobblerd start

复制代码

chkconfig --level 35 httpd on
chkconfig --level 35 xinetd on
chkconfig --level 35 dhcpd on
chkconfig --level 35 cobblerd on

复制代码

#记得关闭防火墙

/etc/init.d/iptables stop
chkconfig --level 35 iptables off

复制代码

8、相关配置文件及目录

cobbler相关配置文件: /etc/cobbler
cobbler数据存储目录: /var/www/cobbler
dhcp配置文件: /etc/dhcpd.conf
dhcp租期缓存文件: /var/lib/dhcpd/dhcpd.leases
pxe配置文件: /tftpboot/pxelinux.cfg/default
ks模板文件: /var/lib/cobbler/kickstarts_*.ks

复制代码

9、客户端通过PXE安装系统
启动另一台新服务器，通过 PXE 启动进入，提示"boot:"时输入"menu"即可进入蓝色的 Cobbler 安装界面，选择安装项，自动完成系统安装。

10、重装系统
CentOS 5.5默认的Repository里找不到koan，先安装rpmforce这个Repository

cd /opt
wget http://pkgs.repoforge.org/rpmforge-release/rpmforge-release-0.5.2-2.el5.rf.i386.rpm
rpm -ivh rpmforge-release-0.5.2-2.el6.rf.i686.rpm

复制代码

#在要重装的机器安装koan

yum -y install koan

复制代码

#查看cobbler服务器有哪些安装盘

koan --list-profiles --server=192.168.9.230

复制代码

#选择要重装的系统并重启

koan --replace-self --server=192.168.9.230 --profile=kerryOS-1.0-i386
reboot

复制代码

11、服务控制脚本

vi /etc/init.d/cobbler_all
#!/bin/sh
case $1 in
start)
/etc/init.d/httpd start
/etc/init.d/xinetd start
/etc/init.d/dhcpd start
/etc/init.d/cobblerd start
;;
stop)
/etc/init.d/httpd stop
/etc/init.d/xinetd stop
/etc/init.d/dhcpd stop
/etc/init.d/cobblerd stop
;;
status)
/etc/init.d/httpd status
/etc/init.d/xinetd status
/etc/init.d/dhcpd status
/etc/init.d/cobblerd status
;;
sync)
cobbler sync
;;
*)
echo "Input error,please in put 'start|stop|status|sync'!";
exit 2>&1 >/dev/null &
;;
esac

复制代码

chmod +x /etc/init.d/cobbler_all

复制代码

king_819

版主

论坛徽章:: 0

63楼 [报告]

发表于 2011-11-16 16:19 |只看该作者

关于“搭建linux RIS服务器批量布署windows 2003系统”的文章请见
http://bbs.chinaunix.net/thread-3619039-1-1.html

king_819

版主

论坛徽章:: 0

64楼 [报告]

发表于 2011-11-16 16:24 |只看该作者

微软的ris 也是一pxe为基础的 linux 和windows的就是 pxe的基础文件有区别的而windows 采用ris ...
kns1024wh 发表于 2011-11-16 16:13

贴一段关于PXE的说明

PXE(preboot execute environment)是由Intel公司开发的最新技术,工作于Client/Server的网络模式，支持工作站通过网络从远端服务器下载映像，并由此支持来自网络的操作系统的启动过程，其启动过程中，终端要求服务器分配IP地址，再用TFTP（trivial file transfer protocol）或MTETP(multicast trivial file transfer protocol)协议下载一个启动软件包到本机内存中并执行，由这个启动软件包完成终端基本软件设置，从而引导预先安装在服务器中的终端操作系统

kns1024wh

广告杀手

论坛徽章:: 0

65楼 [报告]

发表于 2011-11-16 16:35 |只看该作者

本帖最后由 kns1024wh 于 2011-11-16 16:37 编辑

贴一段关于PXE的说明

PXE(preboot execute environment)是由Intel公司开发的最新技术,工作于Client/ ...
king_819 发表于 2011-11-16 16:24

转一个老外的文章

RIS for Linux - Boot winpe from the net / Ris Windows Installation
A new pdf guide written from scratch it's available on the main page
This document describes how to setup an opensource (Linux based) alternative to windows ris
You can also use this stuff to install windows from the net
Required software:
A Linux box - I prefer debian but other distro are also ok
Python - I'm using version 2.3 but versions >= 2.1 should be ok
dchp server - Version 3 needed
atftpd or hpa tftp - a tftp server
samba - You need version 3, since version 2.x misses some stuff
PXELinux - Not strictly needed but useful to make a menu, it's a good tool to use most of pxe features.
Required Stuff:
ris-linux-0.4.tar.gz - All of my stuff
startrom.n12, SETUPLDR.BIN, BOOTFONT.BIN (optional) and ntdetect.com from windows xp installation directory (you must uncompress _ files)
[optional] pxelinux 3.07, modified version to avoid vmware pxe bug
ris-linux contains following files:
binlsrv.py - Binl server for linux, it also works on windows since it's written in python
decode.py - Decodes Binl packets
infparser.py - A python script to build drivers database for binlsrv.py, it analyzes the inf directory
fixloader.py - SETUPLDR.BIN to ntldr converter
modldr.py - A tool used for client files modifications
patches/atftpd-filecase.diff - A patch for aftpd to permit case insensitive file lookups
patches/tftp-hpa-filecase.diff - A patch for hpa-tftp to permit case insensitive file lookups
fixup-repository.sh - Shell script to fix case of some files needed by the client via tftp
winnt.sif - A base winnt.sif file to start windows pe from network
winnt-ris.sif - A base winnt.sif file if you want to install windows from network
TFTP Server
Download atftpd apply the patch, compile and install it, you can configure it using inetd, by adding the following line:
tftp dgram udp wait nobody /usr/sbin/tcpd /usr/sbin/in.tftpd /tftpboot
If you are using hpa tftp server apply the respective patch and recompile it. The author suggested me to run hpa tftp server standalone without using inetd, because inetd support is broken and hpa tftp can directly handle tcpwrappers.
Please note that filecase lookup doesn't work (at least for me) when having links in the path, I suppose this is a security measure, or maybe the linked path should be in the chroot. Anyway this is not related to my lookup patch, if you are using hpa ftpd you should known how it works :)
DHCP: bootp
Assuming the tftpd and dhcp/bootp directory is /tftpboot, we need to have following files:
pxelinux.0 (part of syslinux/pxelinux)
pxelinux.cfg/default pxelinux default configuration
startrom.0 - rename startrom.n12 in startrom.0
winnt.sif - use the one in my archive
SETUPLDR.BIN - rename it to ntldr and use fixloader.py ntldr
ntdetect.com from windows xp installation directory
BOOTFONT.BIN - OPTIONAL - some versions don't have it (I think it's related to locale fonts)
All files should be in the root of tftpd directory.
Take care of case since files must have exactly the case used in this document
pxelinux.cfg/default is a standard syslinux file you can use this simple one:
TIMEOUT 0
PROMPT 1
label xpe
kernel startrom.0
DHCP Server configuration
Edit dhcp server configuration, in my distro is /etc/dhcp3/dhcpd.conf
Configure the server this way:
subnet 192.168.129.0 netmask 255.255.255.0
{
range dynamic-bootp 192.168.129.100 192.168.129.110;
default-lease-time 600;
max-lease-time 7200;
filename "pxelinux.0";
server-name "attila.of.war";
next-server attila.of.war;
}
Replace attila.of.war with your dhcp server name, also use startrom.0 instead of pxelinux.0 if you don't want to use pxelinux.
Samba configuration
Make your build without iso and copy the contents of pebldr directory in a suitable place, a good choice is to name the directory ris and rename pebldr folder to winpe.
The directory structure should be ris/winpe/i386..., also you need to put a symbolic link in /tftpboot pointing to winpe directory. If your tftp server doesn't allow symbolic links you should put the directory on the top of your tftp server root.
An example configuration for samba:
[REMINST]
path = /mnt/disk/ris
browsable = true
read only = No
guest ok = Yes
You must set null passwords = true in smb.conf.
You also need to modify server name and path in SetupSourceDevice option of winnt.sif file.
Edit the path in fixup-repository.sh and launch it to fix case of needed files.
Note: you don't need to fix names if you are using my new atftpd patch.
Binl Server
First you need to build device driver cache using infparser.py, e.g. infparser.py /mnt/disk/ris/winpe/i386/inf, this will create devlist.cache file that must be in same directory of binlsrv.py.
Now you can launch binlsrv.py, it will load the driver cache and will reply to client requests.
./binlsrv.py
Succesfully loaded 662 devices
Binlserver started...
Then start the client and boot from network, at pxelinux prompt enter xpe, the client will start and if all is ok binlsrv.py should receive a driver request:
Recv NCQ len = 48
NCQ Driver request
[R] Vid: 0x1022
[R] Pid: 0x2000
[R] rev_u1 = 0x2
[R] rev_u2 = 0x0
[R] rev_u3 = 0x0
[R] rev = 0x10
[R] rev2 = 0x88
[R] subsys = 0x20001022
Checking PCI\VEN_1022&DEV_2000&SUB_20001022
Checking PCI\VEN_1022&DEV_2000
Found PCI\VEN_1022&DEV_2000 in netamd2.inf
[S] Packet len = 0xc4 (196)
[S] Result code: 0x0
[S] type: 0x2
[S] base offset = 0x24 (36)
[S] drv_off = 0x50 (80)
[S] srv_off: 0x6a (106) -> 98 from start
[S] plen: 0x56 (86)
[S] p_off: 0x76 (118) -> 110 from start
[S] hid: PCI\VEN_1022&DEV_2000 - Len 0x15 (21)
[S] drv: pcntpci5.sys - Len 0xc (12)
[S] srv: PCnet - Len 0x5 (5)
[S] Len data now -2 = 0x54 (84)
[S] Description (REG_EXPAND_SZ [2]) = Scheda Ethernet PCI AMD PCNET Family
[S] Characteristics (REG_SZ [1]) = 132
[S] BusType (REG_SZ [1]) = 5
[S] Total Params: 3
Finally if xpe starts but tcpip network will not work, windows shares are ok, any solution?
Windows RIS installation from the net
If you want to use windows remote installation service you should use winnt-ris.sif and rename it to winnt.sif, you can setup both xpe from pxe and windows installation by renaming ntldr and winnt.sif and hex-editing the files, I'll add an howto soon for this. Also make sure you have files in the path specified in winnt.sif.
Note: Right now windows installation from the net works only if bypassing all ris stuff, so you'll not able to use OSChooser.
A detailed description about configuring this can be found here.
Note: if your card doesn't support network boot you can use a floppy image made with Rom-O-Matic, part of Etherboot project. You need at least a version 5.3.8 image to support pxelinux, the etherboot-pci with all drivers doesn't compiles yet, you must wait some time. Select Floppy bootable ROM Image (.zdsk), default options are ok. Write it with RawriteWin from windows or using cat image.zdsk > /dev/fd0 from Linux.
There is also a tool shipped with Windows Server named rbfg.exe that makes similar floppy images but it doesn't support all cards supported by etherboot.
I've made a driver with support for most common nics, compiled drivers: 3c90x 3c595 eepro100 e1000 ns8390 rtl8139 tg3 tulip pcnet32 via-rhine forcedeth sis900 etherboot.zdsk
Glossary
Ris: Remote Installation System
Binl: Boot Information Negotiation Layer
PXE: Pre-Boot Execution Environment
DHCP: Dynamic Host Configuration Protocol
bootp: Bootstrap Protocol
tftp: Trivial File Transfer Protocol
ChangeLog
binlsrv.py:
0.9 - Modified a bit the engine, now it supports amd64 entries but it can work differently
0.8 - Server options, more documentation, fixes on RQU packets
0.7 - Internal (not public)
0.6 - Added OFF packet
0.5 - Workaround for broken hosts file
infparser.py:
0.8 - Display a warning instead of bombing for broken infs
0.7 - Fixed manifacturer.nt.5.1 problem
0.6 - Fixed problem with Altima inf