PXE+Kickstart 无人值守装机

                                                                                PXE一键装机    

    PXE(Preboot eXecute Environment,预启动执行环境)，主要用于在无人值守安装系统中引导客户端主机安装 Linux 操作系统。Kickstart 是一种无人值守的安装方式,其工作原理是预先把原本需要运维人员手工填写的参数保存成一个ks.cfg 文件,当安装过程中需要填写参数时则自动匹配 Kickstart 生成的文件。

一.  安装前的准备

    软硬件配置：网卡要支持pxe启动，操作系统也要支持pxe启动

    DHCP服务器用于分配ip

    TFTP服务器帮助客户端获取引导及驱动文件

    VSFTP服务器用于存储操作系统的安装文件，也可以使用 httpd 来替代 vsftpd 服务程序。

二.  实战环境

   [root@pxe ~]# cat  /etc/redhat-release

   CentOS Linux release 7.4.1708 (Core)

三.  配置静态ip 

[root@pxe ~]# cat  /etc/sysconfig/network-scripts/ifcfg-eth0 
# Generated by dracut initrd
DEVICE="eth0"
ONBOOT=yes
BOOTPROTO=static
IPADDR=192.168.1.200
PREFIX=24
GATEWAY=192.168.1.254
TYPE=Ethernet
NM_CONTROLLED=no

 四.  配置dhcp服务

[root@pxe ~]# yum  -y install  dhcp
[root@pxe ~]# cat /etc/dhcp/dhcpd.conf
# DHCP Server Configuration file.
#   see /usr/share/doc/dhcp*/dhcpd.conf.example
#   see dhcpd.conf(5) man page
ddns-update-style none;
ignore client-updates;
default-lease-time 14400;
max-lease-time 86400;
allow bootp;
allow booting;
local-address 192.168.1.200;                           #本机ip
local-port 67;
include "/etc/dhcp/subnet";  

[root@pxe ~]# cat  /etc/dhcp/subnet
subnet	192.168.1.0 netmask 255.255.255.0 {
	option routers 192.168.1.254;
	option subnet-mask 255.255.255.0;
	option domain-name-servers 192.168.1.254;
	option ntp-servers 192.168.1.254;
	filename "/gpxelinux.0";
	next-server 192.168.1.200;                        #本机ip
       	pool {
		range dynamic-bootp 192.168.1.10 192.168.1.240;
		default-lease-time 3600;
		max-lease-time 72000; 
		allow unknown-clients;
	}
}

[root@pxe ~]# cat  /etc/dhcp/subnet
subnet	192.168.1.0 netmask 255.255.255.0 {
	option routers 192.168.1.254;
	option subnet-mask 255.255.255.0;
	option domain-name-servers 192.168.1.254;
	option ntp-servers 192.168.1.254;
	filename "/gpxelinux.0";
	next-server 192.168.1.200;                        #本机ip
       	pool {
		range dynamic-bootp 192.168.1.10 192.168.1.240;
		default-lease-time 3600;
		max-lease-time 72000; 
		allow unknown-clients;
	}
}

五.  配置tftp服务

[root@pxe ~]# yum  -y  install tftp-server

[root@pxe ~]# cd  /var/lib/tftpboot/

[root@pxe tftpboot]# ls
chain.c32  gpxelinux.0  mboot.c32  memdisk  menu.c32  pxelinux.0  
[root@pxe tftpboot]#  mkdir pxelinux.cfg
[root@pxe tftpboot]# cd pxelinux.cfg/
[root@pxe pxelinux.cfg]# vim  default  
[root@pxe pxelinux.cfg]# cat default 
default menu.c32
prompt 0
timeout 60
LABEL CentOS7
    MENU LABEL CentOS 7 install
    KERNEL centos7/vmlinuz
    APPEND initrd=centos7/initrd.img ks=ftp://192.168.1.200/pub/ks7.cfg ksdevice=bootif console=tty0 console=ttyS0,115200

[root@pxe tftpboot]# mkdir  centos7
[root@pxe tftpboot]# cd centos7
[root@pxe centos7]# ls
initrd.img  vmlinuz

[root@pxe tftpboot]# tree .                   # 安装tree软件
.
|-- centos7
|   |-- initrd.img
|   `-- vmlinuz
|-- chain.c32
|-- gpxelinux.0
|-- mboot.c32
|-- memdisk
|-- menu.c32
|-- pxelinux.0
`-- pxelinux.cfg
    `-- default

2 directories, 9 files


[root@pxe ~]# systemctl   restart  tftp
[root@pxe ~]# systemctl   enable  tftp

以上相关引导文件见以下链接地址：

https://github.com/lmzf2018/1804/tree/master/important/PXE一键装机

六.  配置vsftp服务

[root@pxe ~]# yum  -y  install   vsftpd
[root@pxe ~]# cat  /etc/vsftpd/vsftpd.conf
...
# listens on IPv4 sockets. This directive cannot be used in conjunction
# with the listen_ipv6 directive.
listen=YES                                                 #NO改为YES
#
# This directive enables listening on IPv6 sockets. By default, listening
# on the IPv6 "any" address (::) will accept connections from both IPv6
# and IPv4 clients. It is not necessary to listen on *both* IPv4 and IPv6
# sockets. If you want that (perhaps because you want to listen on specific
# addresses) then you must run two copies of vsftpd with two configuration
# files.
# Make sure, that one of the listen options is commented !!
listen_ipv6=NO                                              #YES改为NO

pam_service_name=vsftpd
userlist_enable=YES
tcp_wrappers=YES

use_localtime=YES
chroot_list_enable=YES
chroot_local_user=YES
userlist_deny=YES
listen_address=0.0.0.0
listen_port=21
pasv_min_port=50000

pasv_max_port=51000
pasv_enable=YES
pasv_promiscuous=YES
port_promiscuous=NO
max_clients=9
max_per_ip=9

七. 创建ks.cfg 文件

[root@pxe pub]# pwd
/var/ftp/pub
[root@pxe pub]# ls
ks7.cfg
[root@pxe pub]# cat ks7.cfg
#platform=x86, AMD64, or Intel EM64T
#version=DEVEL
# Install OS instead of upgrade
install
# Keyboard layouts
keyboard 'us'
# Root password
rootpw --iscrypted lxqk4My6q5YyQ
# System timezone
timezone Asia/Shanghai
# Use network installation
url --url="ftp://192.168.1.254/centos7"
# System language
lang en_US.UTF-8
# Firewall configuration
firewall --disabled
# System authorization information
auth  --useshadow  --passalgo=sha512
# Use text mode install
text
# Installation logging level
logging --level=warning
# Run the Setup Agent on first boot
firstboot --disable
# SELinux configuration
selinux --disabled
# Do not configure the X Window System
skipx
# Network information
network --device=bootif --onboot=on --hostname=localhost --bootproto=bootp --noipv6
# Reboot after installation
reboot
# System bootloader configuration
bootloader --location=mbr
# Clear the Master Boot Record
zerombr
# Partition clearing information
clearpart --all --initlabel
# Disk partitioning information
part /boot --asprimary --fstype=xfs --size=512
part /     --asprimary --fstype=xfs --size=1 --grow

%packages --nobase
@Core --nodefaults
-iwl3160-firmware
-iwl6000g2b-firmware
-iwl2030-firmware
-iwl7265-firmware
-iwl1000-firmware
-iwl4965-firmware
-iwl2000-firmware
-iwl3945-firmware
-alsa-tools-firmware
-aic94xx-firmware
-iwl135-firmware
-iwl7260-firmware
-iwl6050-firmware
-iwl6000g2a-firmware
-iwl5000-firmware
-ivtv-firmware
-iwl100-firmware
-iwl5150-firmware
-iwl105-firmware
-iwl6000-firmware
-alsa-firmware
-postfix
-audit
-tuned
chrony
psmisc
net-tools
screen
vim-enhanced
tcpdump
lrzsz
ltrace
strace
traceroute
whois
bind-utils
tree
mlocate
rsync
lsof
lftp
patch
diffutils
cpio
time
nmap
socat
man-pages
rpm-build
createrepo
%end

%pre
%end

%post --interpreter=/bin/bash
rm -f /etc/yum.repos.d/*.repo
cat >/etc/yum.repos.d/local.repo <<'EOF'
[local_repo]
name=CentOS-$releasever - Base
baseurl=ftp://192.168.1.254/centos7
enabled=1
gpgcheck=1
EOF
rpm -import ftp://192.168.1.254/centos7/RPM-GPG-KEY-CentOS-7
yum erase -y NetworkManager NetworkManager-libnm kexec-tools firewalld-filesystem polkit
sed 's,^CRONDARGS=.*,&"-m off",' -i /etc/sysconfig/crond
sed 's,^\(OPTIONS=\).*,\1"-4",'  -i /etc/sysconfig/chronyd
sed 's,^server .*,&\ncmdallow 127.0.0.1,' -i /etc/chrony.conf
sed 's,^#\(terminfo xterm \x27is.*\),\1\nterm xterm,' -i /etc/screenrc
cat >>/etc/sysconfig/network <<'EOF'
IPV6INIT="no"
NETWORKING="yes"
NOZEROCONF="yes"
EOF
echo -e "# ::1\t\tlocalhost localhost.localdomain localhost6 localhost6.localdomain6" >/etc/hosts
echo -e "127.0.0.1\tlocalhost localhost.localdomain localhost4 localhost4.localdomain4" >>/etc/hosts
echo -e 'export TZ='Asia/Shanghai' PYTHONSTARTUP="/usr/lib64/python2.7/pystartup.py" TMOUT=7200' >/etc/profile.d/environ.sh
echo -e "blacklist acpi_pad\nblacklist power_meter" >/etc/modprobe.d/blacklist.conf
cat >/usr/lib64/python2.7/pystartup.py <<'EOF'
#!/usr/bin/python
# -*- coding:utf_8 -*-
#from __future__ import print_function
from rlcompleter import readline
readline.parse_and_bind("tab: Complete")
EOF
cat >/etc/sysctl.d/70-system.conf <<'EOF'
net.ipv4.ip_forward = 1
net.ipv4.ip_default_ttl = 255
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
net.ipv6.conf.lo.disable_ipv6 = 0

net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.all.arp_ignore = 1
net.ipv4.conf.all.arp_announce = 2
kernel.sysrq = 16
vm.swappiness = 0
EOF
# config vimrc
cat >>/etc/vimrc<<'EOF'
set wrapscan
set noautoindent
set showmatch
set binary
set noswapfile
set ignorecase          " Do case insensitive matching
set foldmethod=syntax
set foldlevel=100
filetype plugin off
EOF
sed -e 's,^#\(Port\).*,\1 10022,' \
    -e 's,^#\(ListenAddress 0.0.0.0\),\1,' \
    -e 's,^#\(PermitRootLogin\).*,\1 yes,' \
    -e 's,^#\(MaxAuthTries\).*,\1 3,' \
    -e 's,^#\(UseDNS\).*,\1 no,' -i /etc/ssh/sshd_config
cat >/etc/sysconfig/network-scripts/ifcfg-eth0 <<'EOF'
# Generated by dracut initrd
DEVICE="eth0"
ONBOOT="yes"
IPV6INIT="no"
IPV4_FAILURE_FATAL="no"
NM_CONTROLLED="no"
TYPE="Ethernet"
BOOTPROTO="dhcp"
EOF
%end

[root@pxe ~]# systemctl restart vsftpd
[root@pxe ~]# systemctl enable  vsftpd

八. 保证文件夹有读和执行(rw)权限,普通文本文件有读(r)权限（important）

[root@pxe ~]# ll    /var/lib/tftpboot/
总用量 268
drwxr-xr-x 2 root root    39 9月   5 22:59 centos7
-rw-r--r-- 1 root root 20832 9月   5 22:49 chain.c32
-rw-r--r-- 1 root root 89376 9月   5 22:49 gpxelinux.0
-rw-r--r-- 1 root root 35676 9月   5 22:49 mboot.c32
-rw-r--r-- 1 root root 26268 9月   5 22:49 memdisk
-rw-r--r-- 1 root root 61796 9月   5 22:49 menu.c32
-rw-r--r-- 1 root root 26759 9月   5 22:49 pxelinux.0
drwxr-xr-x 2 root root    21 9月   5 23:01 pxelinux.cfg
[root@pxe ~]# ll    /var/lib/tftpboot/pxelinux.cfg/default 
-rw-r--r-- 1 root root 233 9月   5 22:53 /var/lib/tftpboot/pxelinux.cfg/default

九. 系统安装流程图