PXE+Kickstart 无人值守装机

PXE一键装机

PXE(Preboot eXecute Environment,预启动执行环境)，主要用于在无人值守安装系统中引导客户端主机安装 Linux 操作系统。Kickstart 是一种无人值守的安装方式,其工作原理是预先把原本需要运维人员手工填写的参数保存成一个ks.cfg 文件,当安装过程中需要填写参数时则自动匹配 Kickstart 生成的文件。

一. 安装前的准备

软硬件配置：网卡要支持pxe启动，操作系统也要支持pxe启动

DHCP服务器用于分配ip

TFTP服务器帮助客户端获取引导及驱动文件

VSFTP服务器用于存储操作系统的安装文件，也可以使用 httpd 来替代 vsftpd 服务程序。

二. 实战环境

[root@pxe ~]# cat /etc/redhat-release

CentOS Linux release 7.4.1708 (Core)

三. 配置静态ip

[root@pxe ~]# cat  /etc/sysconfig/network-scripts/ifcfg-eth0
# Generated by dracut initrd
DEVICE="eth0"
ONBOOT=yes
BOOTPROTO=static
IPADDR=192.168.1.200
PREFIX=24
GATEWAY=192.168.1.254
TYPE=Ethernet
NM_CONTROLLED=no

四. 配置dhcp服务

[root@pxe ~]# yum  -y install  dhcp
[root@pxe ~]# cat /etc/dhcp/dhcpd.conf
# DHCP Server Configuration file.
#   see /usr/share/doc/dhcp*/dhcpd.conf.example
#   see dhcpd.conf(5) man page
ddns-update-style none;
ignore client-updates;
default-lease-time 14400;
max-lease-time 86400;
allow bootp;
allow booting;
local-address 192.168.1.200;                           #本机ip
local-port 67;
include "/etc/dhcp/subnet";  [root@pxe ~]# cat  /etc/dhcp/subnet
subnet  192.168.1.0 netmask 255.255.255.0 {option routers 192.168.1.254;option subnet-mask 255.255.255.0;option domain-name-servers 192.168.1.254;option ntp-servers 192.168.1.254;filename "/gpxelinux.0";next-server 192.168.1.200;                        #本机ippool {range dynamic-bootp 192.168.1.10 192.168.1.240;default-lease-time 3600;max-lease-time 72000; allow unknown-clients;}
}[root@pxe ~]# cat  /etc/dhcp/subnet
subnet  192.168.1.0 netmask 255.255.255.0 {option routers 192.168.1.254;option subnet-mask 255.255.255.0;option domain-name-servers 192.168.1.254;option ntp-servers 192.168.1.254;filename "/gpxelinux.0";next-server 192.168.1.200;                        #本机ippool {range dynamic-bootp 192.168.1.10 192.168.1.240;default-lease-time 3600;max-lease-time 72000; allow unknown-clients;}
}

五. 配置tftp服务

[root@pxe ~]# yum  -y  install tftp-server[root@pxe ~]# cd  /var/lib/tftpboot/[root@pxe tftpboot]# ls
chain.c32  gpxelinux.0  mboot.c32  memdisk  menu.c32  pxelinux.0
[root@pxe tftpboot]#  mkdir pxelinux.cfg
[root@pxe tftpboot]# cd pxelinux.cfg/
[root@pxe pxelinux.cfg]# vim  default
[root@pxe pxelinux.cfg]# cat default
default menu.c32
prompt 0
timeout 60
LABEL CentOS7MENU LABEL CentOS 7 installKERNEL centos7/vmlinuzAPPEND initrd=centos7/initrd.img ks=ftp://192.168.1.200/pub/ks7.cfg ksdevice=bootif console=tty0 console=ttyS0,115200[root@pxe tftpboot]# mkdir  centos7
[root@pxe tftpboot]# cd centos7
[root@pxe centos7]# ls
initrd.img  vmlinuz[root@pxe tftpboot]# tree .                   # 安装tree软件
.
|-- centos7
|   |-- initrd.img
|   `-- vmlinuz
|-- chain.c32
|-- gpxelinux.0
|-- mboot.c32
|-- memdisk
|-- menu.c32
|-- pxelinux.0
`-- pxelinux.cfg`-- default2 directories, 9 files[root@pxe ~]# systemctl   restart  tftp
[root@pxe ~]# systemctl   enable  tftp

以上相关引导文件见以下链接地址：

https://github.com/lmzf2018/1804/tree/master/important/PXE一键装机

六. 配置vsftp服务

[root@pxe ~]# yum  -y  install   vsftpd
[root@pxe ~]# cat  /etc/vsftpd/vsftpd.conf
...
# listens on IPv4 sockets. This directive cannot be used in conjunction
# with the listen_ipv6 directive.
listen=YES                                                 #NO改为YES
#
# This directive enables listening on IPv6 sockets. By default, listening
# on the IPv6 "any" address (::) will accept connections from both IPv6
# and IPv4 clients. It is not necessary to listen on *both* IPv4 and IPv6
# sockets. If you want that (perhaps because you want to listen on specific
# addresses) then you must run two copies of vsftpd with two configuration
# files.
# Make sure, that one of the listen options is commented !!
listen_ipv6=NO                                              #YES改为NOpam_service_name=vsftpd
userlist_enable=YES
tcp_wrappers=YESuse_localtime=YES
chroot_list_enable=YES
chroot_local_user=YES
userlist_deny=YES
listen_address=0.0.0.0
listen_port=21
pasv_min_port=50000pasv_max_port=51000
pasv_enable=YES
pasv_promiscuous=YES
port_promiscuous=NO
max_clients=9
max_per_ip=9

七. 创建ks.cfg 文件

[root@pxe pub]# pwd
/var/ftp/pub
[root@pxe pub]# ls
ks7.cfg
[root@pxe pub]# cat ks7.cfg
#platform=x86, AMD64, or Intel EM64T
#version=DEVEL
# Install OS instead of upgrade
install
# Keyboard layouts
keyboard 'us'
# Root password
rootpw --iscrypted lxqk4My6q5YyQ
# System timezone
timezone Asia/Shanghai
# Use network installation
url --url="ftp://192.168.1.254/centos7"
# System language
lang en_US.UTF-8
# Firewall configuration
firewall --disabled
# System authorization information
auth  --useshadow  --passalgo=sha512
# Use text mode install
text
# Installation logging level
logging --level=warning
# Run the Setup Agent on first boot
firstboot --disable
# SELinux configuration
selinux --disabled
# Do not configure the X Window System
skipx
# Network information
network --device=bootif --onboot=on --hostname=localhost --bootproto=bootp --noipv6
# Reboot after installation
reboot
# System bootloader configuration
bootloader --location=mbr
# Clear the Master Boot Record
zerombr
# Partition clearing information
clearpart --all --initlabel
# Disk partitioning information
part /boot --asprimary --fstype=xfs --size=512
part /     --asprimary --fstype=xfs --size=1 --grow%packages --nobase
@Core --nodefaults
-iwl3160-firmware
-iwl6000g2b-firmware
-iwl2030-firmware
-iwl7265-firmware
-iwl1000-firmware
-iwl4965-firmware
-iwl2000-firmware
-iwl3945-firmware
-alsa-tools-firmware
-aic94xx-firmware
-iwl135-firmware
-iwl7260-firmware
-iwl6050-firmware
-iwl6000g2a-firmware
-iwl5000-firmware
-ivtv-firmware
-iwl100-firmware
-iwl5150-firmware
-iwl105-firmware
-iwl6000-firmware
-alsa-firmware
-postfix
-audit
-tuned
chrony
psmisc
net-tools
screen
vim-enhanced
tcpdump
lrzsz
ltrace
strace
traceroute
whois
bind-utils
tree
mlocate
rsync
lsof
lftp
patch
diffutils
cpio
time
nmap
socat
man-pages
rpm-build
createrepo
%end%pre
%end%post --interpreter=/bin/bash
rm -f /etc/yum.repos.d/*.repo
cat >/etc/yum.repos.d/local.repo <<'EOF'
[local_repo]
name=CentOS-$releasever - Base
baseurl=ftp://192.168.1.254/centos7
enabled=1
gpgcheck=1
EOF
rpm -import ftp://192.168.1.254/centos7/RPM-GPG-KEY-CentOS-7
yum erase -y NetworkManager NetworkManager-libnm kexec-tools firewalld-filesystem polkit
sed 's,^CRONDARGS=.*,&"-m off",' -i /etc/sysconfig/crond
sed 's,^\(OPTIONS=\).*,\1"-4",'  -i /etc/sysconfig/chronyd
sed 's,^server .*,&\ncmdallow 127.0.0.1,' -i /etc/chrony.conf
sed 's,^#\(terminfo xterm \x27is.*\),\1\nterm xterm,' -i /etc/screenrc
cat >>/etc/sysconfig/network <<'EOF'
IPV6INIT="no"
NETWORKING="yes"
NOZEROCONF="yes"
EOF
echo -e "# ::1\t\tlocalhost localhost.localdomain localhost6 localhost6.localdomain6" >/etc/hosts
echo -e "127.0.0.1\tlocalhost localhost.localdomain localhost4 localhost4.localdomain4" >>/etc/hosts
echo -e 'export TZ='Asia/Shanghai' PYTHONSTARTUP="/usr/lib64/python2.7/pystartup.py" TMOUT=7200' >/etc/profile.d/environ.sh
echo -e "blacklist acpi_pad\nblacklist power_meter" >/etc/modprobe.d/blacklist.conf
cat >/usr/lib64/python2.7/pystartup.py <<'EOF'
#!/usr/bin/python
# -*- coding:utf_8 -*-
#from __future__ import print_function
from rlcompleter import readline
readline.parse_and_bind("tab: Complete")
EOF
cat >/etc/sysctl.d/70-system.conf <<'EOF'
net.ipv4.ip_forward = 1
net.ipv4.ip_default_ttl = 255
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
net.ipv6.conf.lo.disable_ipv6 = 0net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.all.arp_ignore = 1
net.ipv4.conf.all.arp_announce = 2
kernel.sysrq = 16
vm.swappiness = 0
EOF
# config vimrc
cat >>/etc/vimrc<<'EOF'
set wrapscan
set noautoindent
set showmatch
set binary
set noswapfile
set ignorecase          " Do case insensitive matching
set foldmethod=syntax
set foldlevel=100
filetype plugin off
EOF
sed -e 's,^#\(Port\).*,\1 10022,' \-e 's,^#\(ListenAddress 0.0.0.0\),\1,' \-e 's,^#\(PermitRootLogin\).*,\1 yes,' \-e 's,^#\(MaxAuthTries\).*,\1 3,' \-e 's,^#\(UseDNS\).*,\1 no,' -i /etc/ssh/sshd_config
cat >/etc/sysconfig/network-scripts/ifcfg-eth0 <<'EOF'
# Generated by dracut initrd
DEVICE="eth0"
ONBOOT="yes"
IPV6INIT="no"
IPV4_FAILURE_FATAL="no"
NM_CONTROLLED="no"
TYPE="Ethernet"
BOOTPROTO="dhcp"
EOF
%end[root@pxe ~]# systemctl restart vsftpd
[root@pxe ~]# systemctl enable  vsftpd

八. 保证文件夹有读和执行(rw)权限,普通文本文件有读(r)权限（important）

[root@pxe ~]# ll    /var/lib/tftpboot/
总用量 268
drwxr-xr-x 2 root root    39 9月   5 22:59 centos7
-rw-r--r-- 1 root root 20832 9月   5 22:49 chain.c32
-rw-r--r-- 1 root root 89376 9月   5 22:49 gpxelinux.0
-rw-r--r-- 1 root root 35676 9月   5 22:49 mboot.c32
-rw-r--r-- 1 root root 26268 9月   5 22:49 memdisk
-rw-r--r-- 1 root root 61796 9月   5 22:49 menu.c32
-rw-r--r-- 1 root root 26759 9月   5 22:49 pxelinux.0
drwxr-xr-x 2 root root    21 9月   5 23:01 pxelinux.cfg
[root@pxe ~]# ll    /var/lib/tftpboot/pxelinux.cfg/default
-rw-r--r-- 1 root root 233 9月   5 22:53 /var/lib/tftpboot/pxelinux.cfg/default

九. 系统安装流程图

PXE+Kickstart 无人值守装机相关推荐

PXE配合Kickstart无人值守装机
PXE配合Kickstart无人值守装机一.PXE概述二.PXE批量部署的优点三.部署PXE远程安装服务四.搭建PXE远程安装服务器 1.安装并启用TFTP 服务 2.安装并启用DHCP服务 ...
PXE网络无人值守装机
PXE网络无人值守装机项目目标:PXE实现局域网络中裸机自动安装Linux操作系统. 项目要求: 在局域网192.168.11.0/24 内部署一台 PXE 装机服务器(CentOS 6.5系统) ...
CentOS 6.4下PXE+Kickstart无人值守安装操作系统
一.简介 1.1 什么是PXE PXE(Pre-boot Execution Environment,预启动执行环境)是由Intel公司开发的最新技术,工作于Client/Server的网络模式,支持 ...
Centos 6.5 Pxe+kickstart 无人值守安装操作系统
Centos 6.5PXE+kickstart 无人值守安装操作系统 PXE一种引导方式.进行 PXE 安装的必要条件是在要安装的计算机中必须包含一个 PXE 支持的网卡(NIC),即网卡中必须要有 ...
PXE+Kickstart 无人值守安装系统
文章目录无人值守系统部署安装创建PXE服务器虚拟机并设置IP地址配置本地yum源安装并配置DHCP服务安装并配置TFTP服务安装SYSLinux 复制引导文件安装并配置vsftpd服务 ...
【Linux】PXE+Kickstart无人值守安装系统
文章目录前言一.简介二.配置DHCP 三.TFTP 四.SYSLinux服务程序五.vsftpd服务六.Kickstart应答文件七.自动安装系统八.总结前言本文来记录下PXE+Ki ...
32. PXE+Kickstart批量装机
1. PXE介绍 (1)PXE(preboot execute environment,预启动执行环境)是Intel公司提出的一项通过网络来引导系统的标准. PXE最直接的表现是:在网络 ...
PXE+Kickstart无人值守安装系统
文章目录 1 kickstart简介 1.1 什么是kickstart 1.2 什么是PXE 2 安装配置kickstart 2.1 配置DHCP服务 2.2 配置TFTP服务 2.3 web服务配置 ...
PXE + kickstart批量装机及问题解决方案
目录一.常见的问题的解决方案 1.1 system-config-kickstart需要图形化界面包X server支持,可通过如下安装: 1.2 一定注意关闭防火墙以及selinux: 1.3验证 ...

PXE+Kickstart 无人值守装机

PXE+Kickstart 无人值守装机相关推荐

最新文章

热门文章