第十二周运维作业

1、配置chrony服务，实现服务器时间自动同步

答：服务端centos7.6 客户端centos7.0

服务端配置

[root@centos7 ~]# vim /etc/chrony.conf 修改chrony.conf 配置文件

[root@centos7 ~]# systemctl restart chronyd 重启服务

[root@centos7 ~]# systemctl enable chronyd 开机自动启动

修改客户端 vim /etc/chrony.conf

验证

[root@centos7 ~]# date
Mon Sep 7 14:40:33 CST 2020

[root@centos7 ~]# date -s "1 day"
Tue Sep 8 14:40:24 CST 2020

[root@centos7 ~]# systemctl restart chronyd 执行重启服务

[root@centos7 ~]# date
Mon Sep 7 14:40:33 CST 2020

2、实现cobbler+pxe自动化装机

pxe 自动化安装

设置yum源和epel源，并通过yum安装dhcp、tftp、httpd、syslinux服务

关闭selinux 和关闭防火墙

虚拟机配置修改网络内容 vmnet8 nat模式，取消DHCP自动分配IP

[root@centos7 ~]# yum repolist

[root@centos7 ~]#yum install dhcp tftp httpd -y

[root@centos7 ~]# cp /usr/share/doc/dhcp-4.2.5/dhcpd.conf.example /etc/dhcp/dhcpd.conf

cp: overwrite ‘/etc/dhcp/dhcpd.conf’? y 是否覆盖

编辑dhcpd.conf

[root@centos7 ~]# vim /etc/dhcp/dhcpd.conf 修改配置文件 dhcp

# option definitions common to all supported networks...
option domain-name "sun.com"; #定义选项
#option domain-name-servers ns1.example.org, ns2.example.org;
option domain-name-servers 180.76.76.76; #dhcp服务器地址
default-lease-time 86400; #租约期限
max-lease-time 86400; #最长租约期限

# Use this to enble / disable dynamic dns updates globally.
#ddns-update-style none;

# If this DHCP server is the official DHCP server for the local
# network, the authoritative directive should be uncommented.
#authoritative;

# Use this to send dhcp log messages to a different log file (you also
# have to hack syslog.conf to complete the redirection).
log-facility local7;

# No service will be given on this subnet, but declaring it helps the
# DHCP server to understand the network topology.

subnet 192.168.47.0 netmask 255.255.255.0 {
range 192.168.47.50 192.168.47.100; #指定IP地址范围
option routers 192.168.47.254;　　　　 #指定网关
next-server 192.168.47.70;　　　　　　　
filename "pxelinux.0";
}

注意：其他未作修改

[root@centos7 ~]# systemctl start dhcpd

[root@centos7 ~]# mkdir -pv /var/www/html/centos7/x86_64 创建目录

[root@centos7 ~]# mount -r /dev/sr0 /var/www/html/centos/7/x86_64 挂载光盘

[root@centos7 ~]# systemctl start httpd

[root@centos7 ~]#systemctl enable httpd

[root@centos7 ~]# mkdir /var/www/html/ksdir/ 创建ks目录

[root@centos7 ~]# cp anaconda-ks.cfg /var/www/html/ksdir/ks7_mini.cfg

[root@centos7 ~]# vim /var/www/html/ksdir/ks7_mini.cfg 编辑ks应答文件

#version=DEVEL
# System authorization information
auth --enableshadow --passalgo=sha512
# Use CDROM installation media
url --url=ftp://192.168.31.7/pub/centos7/
# Use graphical install
text
# Run the Setup Agent on first boot
firstboot --enable
ignoredisk --only-use=sda
# Keyboard layouts
keyboard --vckeymap=us --xlayouts='us'
# System language
lang en_US.UTF-8

# Network information
network --bootproto=dhcp --device=ens33 --onboot=on --ipv6=auto --activate
network --hostname=localhost.localdomain

# Root password
rootpw --iscrypted $6$0U7I.uZWqQ4DZrp1$T/L3volXctFcFO8h7s9d/J/fXl2jjdIOUf6qaFYUarwiC2.yBD79rYFWTVZ5s2SIsIIr7lkroxs7deZNO6znn/
# System services
services --disabled="chronyd"
selinux --disabled
firewall --disabled
# System timezone
timezone Asia/Shanghai --isUtc --nontp
# X Window System configuration information
xconfig --startxonboot
# System bootloader configuration
bootloader --append=" crashkernel=auto" --location=mbr --boot-drive=sda
# Partition clearing information
clearpart --all --initlabel
zerombr
eula --agreed
reboot
# Disk partitioning information
part swap --fstype="swap" --ondisk=sda --size=3072
part / --fstype="xfs" --ondisk=sda --size=51200
part /boot --fstype="xfs" --ondisk=sda --size=1024
part /data --fstype="xfs" --ondisk=sda --size=30720

%packages
@core
autofs
%end
%post
systemctl enable autofs
rm -rf /etc/yum.repos.d/*
cat > /etc/yum.repos.d/base.repo <<EOF
[base]
name=base
baseurl=file:///misc/cd/
gpgcheck=0
EOF

useradd zhangsan
echo magedu |passwd --stdin zhangsan

mkdir /root/.ssh
echo 'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSV0vkgeRJPikUdZ6V/RV6sLwGfw1LfapEFh8wxgYcS4tY9txVzpzJzTWuCmqMLZDK3AQt4AHOK7H39OAgIECr79wmzh1kHDj/i6asSw9Z9Nf+R4QlLhwWEfWV1nuk/SgxTLgQlqFh/9NGjG+gyihhCqfq2xHWcOyuf/pLH/IsfRP26MdP2o0YC4copRJVBPf/eO0lR+VbthDsm2yoYXuCYXur9423MNd5zV0hO+EcEiasDXsA3xPz8NwUVWumekYyIttnTRoCYsDuZPA6B0hp3Uh0krwgbGXqnc+uW7tbOveFDpkC9gXHUitt8MqemSx7i+DX3orO3J6f6b4C5gM7 root@centos7.localdomain' > /root/.ssh/authorized_keys
echo 'alias cdnet="cd /etc/sysconfig/network-scripts"' >> /root/.bashrc

%end

[root@centos7 ~]# cp /usr/share/syslinux/pxelinux.0 /var/lib/tftpboot/ #拷贝文件

[root@centos7 tftpboot]# cp /misc/cd/images/pxeboot/{initrd.img,vmlinuz} .

[root@centos7 tftpboot]# cp /usr/share/syslinux/menu.c32 .

[root@centos7 tftpboot]# mkdir pxelinux.cfg #创建引导配置文件

[root@centos7 tftpboot]# cd pxelinux.cfg

[root@centos7 pxelinux.cfg]# vim default

default menu.c32
timeout 600
LABEL linux_autoinst #自动安装选项
MENU LABEL Install CentOS 7 ^Mini
KERNEL vmlinuz
APPEND initrd=initrd.img inst.repo=http://192.168.47.70/7/os/x86_64

LABEL linux
MENU LABEL Install CentOS 7 x86_64
KERNEL vmlinuz
APPEND initrd=initrd.img inst.repo=http://192.168.47.70/7/os/x86_64

客户端安装

cobbler 自动化安装

安装cobbler、dhcp服务创建yum仓库是epel源必须连接网络

[root@centos7 data]# yum install cobbler dhcp

[root@centos7 data]# systemctl start cobbler

[root@centos7 data]# systemctl enable cobbler

[root@centos7 data]# systemctl start httpd

[root@centos7 data]# vim /etc/cobbler/settings 编辑cobbler配置文件

更改cobbler服务器地址 192.168.47.154

更改tftp服务器地址：192.168.47.154

[root@centos7 ~]# openssl passwd -1

更改加密口令：$1$wRfZiqnW$jhuvd98T7Fj3a1RiiOZZS. 口令是centos7

自动生成dhcp文件

更改完成后保存退出

[root@centos7 ~]# systemctl restart cobblerd

[root@centos7 ~]# cobbler get-loaders

[root@centos7 data]# vim /etc/cobbler/dhcp.template

[root@centos7 ~]# cobbler sync

[root@centos7 ~]# cat /etc/dhcp/dhcpd.conf

[root@centos7 ~]# systemctl restart dhcpd

导入光盘生成一个centos7的应答文件

[root@centos7 data]# cobbler import --path=/mnt --name=centos7.6_x86_64 --arch=x86_64

[root@centos7 ~]# cd /var/www/cobbler/ks_mirror/ 已生成应答文件
[root@centos7 ks_mirror]# ls
centos7.6_x86_64-x86_64 config

[root@centos7 ks_mirror]# cat /var/lib/tftpboot/pxelinux.cfg/default 生成启动菜单
DEFAULT menu
PROMPT 0
MENU TITLE Cobbler | http://cobbler.github.io/
TIMEOUT 200
TOTALTIMEOUT 6000
ONTIMEOUT local

LABEL local
MENU LABEL (local)
MENU DEFAULT
LOCALBOOT -1

LABEL centos7.6-x86_64
kernel /images/centos7.6-x86_64/vmlinuz
MENU LABEL centos7.6-x86_64
append initrd=/images/centos7.6-x86_64/initrd.img ksdevice=bootif lang= kssendmac text ks=http://192.168.47.154/cblr/svc/op/ks/profile/centos7.6-x86_64
ipappend 2

MENU end

测试机启动