Linux PXE + Kickstart 自动装机

大规模装机时，使用无人值守装机便可大大简便人工操作，提高效率。

---

pxe 网络安装

配置双网卡

• 这里ens33为nat网络，ens37为仅主机网络，配置ens37

[root@localhost ~]# cd /etc/sysconfig/network-scripts/
[root@localhost network-scripts]# cp ifcfg-ens33 ifcfg-ens37
[root@localhost network-scripts]# vim ifcfg-ens37 
type=ethernet
bootproto=static
device=ens37
onboot=yes
ipaddr=192.168.100.100
netmask=255.255.255.0
gateway=192.168.100.1

• 重启网络服务

[root@localhost ~]# service network restart
restarting network (via systemctl):                        [  ok  ]

• 查看网卡地址

[root@localhost ~]# ifconfig ens33
ens33: flags=4163<up,broadcast,running,multicast>  mtu 1500
        inet 192.168.28.128  netmask 255.255.255.0  broadcast 192.168.28.255
        inet6 fe80::605e:3c48:bafd:e550  prefixlen 64  scopeid 0x20<link>
        ether 00:0c:29:bc:ab:96  txqueuelen 1000  (ethernet)
        rx packets 635342  bytes 935571060 (892.2 mib)
        rx errors 0  dropped 0  overruns 0  frame 0
        tx packets 288265  bytes 17505470 (16.6 mib)
        tx errors 0  dropped 0 overruns 0  carrier 0  collisions 0

[root@localhost ~]# ifconfig ens37
ens37: flags=4163<up,broadcast,running,multicast>  mtu 1500
        inet 192.168.100.100  netmask 255.255.255.0  broadcast 192.168.100.255
        inet6 fe80::20c:29ff:febc:aba0  prefixlen 64  scopeid 0x20<link>
        ether 00:0c:29:bc:ab:a0  txqueuelen 1000  (ethernet)
        rx packets 1514  bytes 461770 (450.9 kib)
        rx errors 0  dropped 0  overruns 0  frame 0
        tx packets 186  bytes 31726 (30.9 kib)
        tx errors 0  dropped 0 overruns 0  carrier 0  collisions 0

dhcp 服务

• 安装dhcp软件包

[root@localhost ~]# yum install dhcp -y

• 编辑dhcp配置文件

[root@localhost ~]# cp /usr/share/doc/dhcp-4.2.5/dhcpd.conf.example /etc/dhcp/dhcpd.conf 
cp: overwrite ‘/etc/dhcp/dhcpd.conf’? y

[root@localhost ~]# vim /etc/dhcp/dhcpd.conf 

• 在27-40行配置网段信息。

subnet 192.168.100.0 netmask 255.255.255.0 {
  range 192.168.100.20 192.168.100.50;
  option routers 192.168.100.100;
  option domain-name-servers 114.114.114.114;
  next-server 192.168.100.100;
  filename "pxelinux.0";
}

• 安装syslinux软件包

[root@localhost ~]# yum install syslinux -y

• 查找pxelinux.0引导程序

[root@localhost ~]# rpm -ql syslinux | grep pxelinux.0
/usr/share/syslinux/gpxelinux.0
/usr/share/syslinux/pxelinux.0

tftp 服务

• 安装tftp-server软件包

[root@localhost ~]# yum install tftp-server -y

• 查看tftp-server文件列表

[root@localhost ~]# rpm -ql tftp-server
/etc/xinetd.d/tftp
/usr/lib/systemd/system/tftp.service
/usr/lib/systemd/system/tftp.socket
/usr/sbin/in.tftpd
/usr/share/doc/tftp-server-5.2
/usr/share/doc/tftp-server-5.2/changes
/usr/share/doc/tftp-server-5.2/readme
/usr/share/doc/tftp-server-5.2/readme.security
/usr/share/man/man8/in.tftpd.8.gz
/usr/share/man/man8/tftpd.8.gz
/var/lib/tftpboot

• 复制引导程序pxelinux.0至tftp站点下

[root@localhost ~]# cp /usr/share/syslinux/pxelinux.0 /var/lib/tftpboot/

• 编辑tftp配置文件

[root@localhost ~]# vim /etc/xinetd.d/tftp 

• 编辑第14行，yes改为no，开启tftp功能

        disable                 = no

ftp 服务

• 安装 vsftp 软件包

[root@localhost ~]# yum install vsftpd -y

• 挂载镜像文件

[root@localhost ~]# mkdir /var/ftp/centos7
[root@localhost ~]# mount /dev/cdrom /var/ftp/centos7/
mount: /dev/sr0 is write-protected, mounting read-only
[root@localhost ~]# df -ht
filesystem     type      size  used avail use% mounted on
/dev/sda2      xfs        20g  4.3g   16g  22% /
devtmpfs       devtmpfs  1.9g     0  1.9g   0% /dev
tmpfs          tmpfs     1.9g     0  1.9g   0% /dev/shm
tmpfs          tmpfs     1.9g  9.0m  1.9g   1% /run
tmpfs          tmpfs     1.9g     0  1.9g   0% /sys/fs/cgroup
/dev/sda5      xfs        10g   37m   10g   1% /home
/dev/sda1      xfs       2.0g  174m  1.9g   9% /boot
tmpfs          tmpfs     378m   40k  378m   1% /run/user/0
/dev/sr0       iso9660   4.3g  4.3g     0 100% /var/ftp/centos7

• 复制系统初始化文件initrd.img和压缩内核vmlinuz至tftp站点下

[root@localhost ~]# cd /var/ftp/centos7/images/pxeboot/

[root@localhost pxeboot]# cp initrd.img vmlinuz /var/lib/tftpboot/

• 创建启动菜单default

[root@localhost ~]# mkdir /var/lib/tftpboot/pxelinux.cfg
[root@localhost ~]# vim /var/lib/tftpboot/pxelinux.cfg/default
default auto
prompt 1

label auto
        kernel vmlinuz
        append initrd=initrd.img method=ftp://192.168.100.100/centos7

label linux text
        kernel vmlinuz
        append text initrd=initrd.img method=ftp://192.168.100.100/centos7

label linux rescue
        kernel vmlinuz
        append rescue initrd=initrd.img method=ftp://192.168.100.100/centos7

• 查看所需文件是否齐全

[root@localhost ~]# tree /var/lib/tftpboot/
/var/lib/tftpboot/
├── initrd.img
├── pxelinux.0
├── pxelinux.cfg
│   └── default
└── vmlinuz

1 directory, 4 files

• 启动所有相关服务

[root@localhost ~]# systemctl enable dhcpd
created symlink from /etc/systemd/system/multi-user.target.wants/dhcpd.service to /usr/lib/systemd/system/dhcpd.service.
[root@localhost ~]# systemctl enable tftp
created symlink from /etc/systemd/system/sockets.target.wants/tftp.socket to /usr/lib/systemd/system/tftp.socket.
[root@localhost ~]# systemctl enable vsftpd
created symlink from /etc/systemd/system/multi-user.target.wants/vsftpd.service to /usr/lib/systemd/system/vsftpd.service.
[root@localhost ~]# systemctl start dhcpd
[root@localhost ~]# systemctl start tftp
[root@localhost ~]# systemctl start vsftpd

关闭防火墙

[root@localhost ~]# systemctl stop firewalld
[root@localhost ~]# setenforce 0

这一步做完已经可以使用网络引导装机了，但是需要手动选择相关安装配置。

pxe 装机验证

• 使用网络引导启动，此界面回车后可加载相关文件进行安装

kickstart 无人值守安装

安装软件包

[root@localhost ~]# yum install system-config-kickstart -y

启动程序

[root@localhost ~]# system-config-kickstart

创建自动应答文件

• 基本配置

• 安装方法

• 引导装载程序选项

• 分区信息

• 分区boot信息

• 分区home信息

• 分区swap信息

• 分区/信息

• 网络配置

• 验证

• 防火墙配置

• 显示配置

• 软件包选择

• 预安装脚本

• 安装后脚本

• 保存应答文件至/var/ftp

编辑 ks.cfg

[root@localhost ~]# ls /var/ftp/
centos7  ks.cfg  pub

• 从/root/anaconda-ks.cfg中复制需要安装的软件包的参数

[root@localhost ~]# vim /root/anaconda-ks.cfg 

%packages
@^gnome-desktop-environment
@base
@core
@desktop-debugging
@dial-up
@directory-client
@fonts
@gnome-desktop
@guest-agents
@guest-desktop-agents
@input-methods
@internet-browser
@java-platform
@multimedia
@network-file-system-client
@networkmanager-submodules
@print-client
@x11
chrony
kexec-tools

%end

• 将安装包参数粘贴到ks.cfg文件最后

[root@localhost ~]# vim /var/ftp/ks.cfg 

#platform=x86, amd64, or intel em64t
#version=devel
# install os instead of upgrade
install
# keyboard layouts
keyboard 'us'
# root password
rootpw --iscrypted $1$mzi8tkpp$whwlrjqndsvomtgoewq0i1
# use network installation
url --url="ftp://192.168.100.100/centos7"
# system language
lang en_us
# firewall configuration
firewall --disabled
# system authorization information
auth  --useshadow  --passalgo=sha512
# use graphical install
graphical
firstboot --disable
# selinux configuration
selinux --disabled

# network information
network  --bootproto=dhcp --device=ens33
# reboot after installation
reboot
# system timezone
timezone asia/shanghai
# system bootloader configuration
bootloader --location=mbr
# clear the master boot record
zerombr
# partition clearing information
clearpart --all
# disk partitioning information
part /boot --fstype="xfs" --size=1024
part /home --fstype="xfs" --size=5120
part swap --fstype="swap" --size=4096
part / --fstype="xfs" --grow --size=1

%packages
@^gnome-desktop-environment
@base
@core
@desktop-debugging
@dial-up
@directory-client
@fonts
@gnome-desktop
@guest-agents
@guest-desktop-agents
@input-methods
@internet-browser
@java-platform
@multimedia
@network-file-system-client
@networkmanager-submodules
@print-client
@x11
chrony
kexec-tools

%end

编辑启动菜单

[root@localhost ~]# vim /var/lib/tftpboot/pxelinux.cfg/default 

default auto
prompt 1

label auto
        kernel vmlinuz
        append initrd=initrd.img method=ftp://192.168.100.100/centos7 ks=ftp://192.168.100.100/ks.cfg

label linux text
        kernel vmlinuz
        append text initrd=initrd.img method=ftp://192.168.100.100/centos7

label linux rescue
        kernel vmlinuz
        append rescue initrd=initrd.img method=ftp://192.168.100.100/centos7

现在从网络引导启动后就可以自动完成安装，不需要手动操作，完成无人值守安装。