{"id":754,"date":"2017-08-18T03:14:43","date_gmt":"2017-08-17T20:14:43","guid":{"rendered":"http:\/\/blog.trichev.com\/?p=754"},"modified":"2017-08-18T03:37:33","modified_gmt":"2017-08-17T20:37:33","slug":"cobbler-and-kickstart-on-centos-6-linux","status":"publish","type":"post","link":"https:\/\/trichev.com\/blog\/2017\/08\/18\/cobbler-and-kickstart-on-centos-6-linux\/","title":{"rendered":"Cobbler and kickstart on CentOS 6 linux"},"content":{"rendered":"

Prerequisites<\/strong>
\nvi \/etc\/sysconfig\/selinux
\nSELINUX=disabled<\/code><\/p>\n

or
\nsed -i 's\/SELINUX\\=enforcing\/SELINUX\\=disabled\/g'\/etc\/selinux\/config<\/code><\/p>\n

Turn off the iptables.
\nservice iptables stop
\nchkconfig iptables off<\/code><\/p>\n

Or Allow the following ports, if you want it enabled.
\nvi \/etc\/sysconfig\/iptables<\/code><\/p>\n

#Allow the http ports(80\/443), Cobbler\u2019s ports 69, and 25151.<\/p>\n

-A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
\n-A INPUT -m state --state NEW -m tcp -p tcp --dport 443 -j ACCEPT
\n-A INPUT -m state --state NEW -m tcp -p tcp --dport 69 -j ACCEPT
\n-A INPUT -m state --state NEW -m tcp -p tcp --dport 25151 -j ACCEPT<\/code><\/p>\n

Installation<\/strong><\/p>\n

Cobbler is not available on CentOS default repositories, so let us add EPEL repository first, and install Cobbler.
\nyum install epel-release<\/code><\/p>\n

Now, install cobbler, cobbler web interface ,and its dependencies as shown below.
\nyum -y install cobbler cobbler-web dhcp pykickstart system-config-kickstart mod_python tftp wget cman<\/code><\/p>\n

Enable TFTP and rsync<\/strong><\/p>\n

vi \/etc\/xinetd.d\/tftp #change disable = yes to disable = no<\/code><\/p>\n

vi \/etc\/xinetd.d\/rsync #change disable = yes to disable = no<\/code><\/p>\n

Restart xinetd Now we can restart xinetd to make the changes take affect.
\n\/etc\/init.d\/xinetd restart<\/code><\/p>\n

Start xinetd on boot
\n\/sbin\/chkconfig xinetd on<\/code><\/p>\n

Start cobbler services Now lets start the apache webserver (httpd), and cobbler itself. Apache is required by cobbler to serve up the OS images.
\n\/etc\/init.d\/httpd start
\n\/etc\/init.d\/cobblerd start
\n\/sbin\/chkconfig httpd on
\n\/sbin\/chkconfig cobblerd on<\/code><\/p>\n

Configure Cobbler<\/strong><\/p>\n

Generate a password hash
\nopenssl passwd -1 -salt \u2018random-phrase-here\u2019 \u2018your-password-here\u2019<\/code><\/p>\n

I get the hash below for the password motorrobot
\nopenssl passwd -1 -salt<\/code><\/p>\n

vi \/etc\/cobbler\/settings
\nChange: next_server: 127.0.0.1 to next_server: 192.168.1.64
\nChange: server: 127.0.0.1 to server: 192.168.1.64
\nChange: default_password_crypted: \u201c$1$mF86\/UHC$WvcEcX3s9crCz2inWryabc.\u201d to above generated hash default_password_crypted: \u201c$1$centosho$06Gedn1z8BjSu2ZbV4fS.0\u2033
\nChange: manage_dhcp: 0 to manage_dhcp: 1<\/code><\/p>\n

sed -i \u2018s\/server\\:\\ 127\\.0\\.0\\.1\/server\\:\\ 192\\.168\\.1\\.64\/g\u2019 \/etc\/cobbler\/settings
\nsed -i \u2018s\/default\\_password\\_crypted\\:\\ \\\u201d\\$1\\$mF86\\\/UHC\\$WvcEcX3s9crCz2inWryabc\\.\\\u201d\/default\\_password\\_crypted\\:\\ \\\u201d\\$1\\$centosho\\$06Gedn1z8BjSu2ZbV4fS\\.0\\\u201d\/g\u2019 \/etc\/cobbler\/settings
\nsed -i \u2018s\/manage_dhcp: 0\/manage_dhcp: 1\/g\u2019 \/etc\/cobbler\/settings<\/code><\/p>\n

Now, edit file \/etc\/cobbler\/dhcp.template,<\/p>\n

vi \/etc\/cobbler\/dhcp.template
\nddns-update-style interim;
\n<\/code>
\nallow booting;
\nallow bootp;<\/code><\/p>\n

ignore client-updates;
\nset vendorclass = option vendor-class-identifier;<\/code><\/p>\n

option pxe-system-type code 93 = unsigned integer 16;<\/code><\/p>\n

subnet 192.168.1.0 netmask 255.255.255.0 {\r\n\u00a0\u00a0\u00a0 option routers\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 192.168.1.99;\r\n\u00a0\u00a0\u00a0 option domain-name-servers 192.168.2.31,192.168.2.32;\r\n\u00a0\u00a0\u00a0 option subnet-mask\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 255.255.255.0;\r\n\u00a0\u00a0\u00a0 range dynamic-bootp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 192.168.1.150 192.168.1.250;\r\n\u00a0\u00a0\u00a0 default-lease-time\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 21600;\r\n\u00a0\u00a0\u00a0 max-lease-time\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 43200;\r\n\u00a0\u00a0\u00a0 next-server\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 $next_server;\r\n\u00a0\u00a0\u00a0 class \"pxeclients\" {\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 match if substring (option vendor-class-identifier, 0, 9) = \"PXEClient\";\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 if option pxe-system-type = 00:02 {\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 filename \"ia64\/elilo.efi\";\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 } else if option pxe-system-type = 00:06 {\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 filename \"grub\/grub-x86.efi\";\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 } else if option pxe-system-type = 00:07 {\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 filename \"grub\/grub-x86_64.efi\";\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 } else {\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 filename \"pxelinux.0\";\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 }\r\n\u00a0\u00a0\u00a0 }\r\n}<\/pre>\n
Next, we should enable Cobbler\u2019s web interface, and set username and password for Cobbler\u2019s web interface.<\/p>\n
To enable, Cobbler\u2019s web interface, edit file \/etc\/cobbler\/modules.conf,<\/p>\n
vi \/etc\/cobbler\/modules.conf
\n[authentication]
\nmodule = authn_configfile<\/code><\/p>\n
[authorization]
\nmodule = authz_allowall<\/code><\/p>\n
Next, we have to setup the setup the username and password for the cobbler web interface. To do that, run the following command. Input your preferred password twice.
\nhtdigest \/etc\/cobbler\/users.digest \"Cobbler\" cobbler<\/code><\/p>\n
Download the required network boot loaders using the following command.
\ncobbler get-loaders<\/code><\/p>\n
cobbler check
\n\/etc\/init.d\/cobblerd restart
\ncobbler sync<\/code><\/p>\n
Importing multiple CentOS Linux DVDs into Cobbler<\/strong><\/p>\n
Linux distributions are getting larger and larger; CentOS 6.0 64-bit won\u2019t fit on a single DVD anymore. A Cobbler-based provisioning server will normally import only one DVD. So, how do you get around this?
\nImport the first DVD as usual
\nManually add content from the second DVD<\/p>\n
Import the first DVD (ISO image):
\nmkdir \/mnt\/dvd1; mount -o ro,loop \/tmp\/CentOS-6.6-x86_64-bin-DVD1.iso \/mnt\/dvd1<\/code><\/p>\n
DISTRO=centos66
\ncobbler import --name=${DISTRO} --arch=x86_64 --path=\/mnt\/dvd1<\/code><\/p>\n
Watch the output from Cobbler closely \u2013 it will basically shows you the commands you need to import the second DVD<\/p>\n
Import the second DVD (ISO image):
\nmkdir \/mnt\/dvd2; mount -o ro,loop \/tmp\/CentOS-6.6-x86_64-bin-DVD2.iso \/mnt\/dvd2<\/code><\/p>\n
rsync -a '\/mnt\/dvd2\/' \/var\/www\/cobbler\/ks_mirror\/${DISTRO} --exclude-from=\/etc\/cobbler\/rsync.exclude --progress
\nCOMPSXML=$(ls \/var\/www\/cobbler\/ks_mirror\/${DISTRO}\/repodata\/*comps*.xml)
\ncreaterepo -c cache -s sha --update --groupfile ${COMPSXML} \/var\/www\/cobbler\/ks_mirror\/${DISTRO}<\/code><\/p>\n
Adding Kickstart file to Cobbler server<\/strong><\/p>\n
vi \/var\/lib\/cobbler\/kickstarts\/centos65test.ks<\/code><\/p>\n
url --url http:\/\/192.168.1.80\/cobbler\/ks_mirror\/centos66-x86_64\/<\/code><\/p>\n
And then, add the kickstart file(centos65test.ks) to the pxe server.
\ncobbler profile add --name=CentOS_6.5_KS --distro=CentOS_6.5 --kickstart=\/var\/lib\/cobbler\/kickstarts\/centos65test.ks<\/code><\/p>\n
Restart cobbler once again, and run \u201ccobble sync\u201d command to save the changes.
\nservice cobblerd restart
\ncobbler sync<\/code><\/p>\n
Local repo on cobbler server<\/strong><\/p>\n
vi \/etc\/yum.repos.d\/centos-6.6-local.repo
\n[Centos-6.6-local]
\nname=CentOS 6.5 local repository
\nbaseurl=http:\/\/192.168.1.80\/cobbler\/ks_mirror\/centos66-x86_64\/
\ngpgcheck=1
\ngpgkey=file:\/\/\/etc\/pki\/rpm-gpg\/RPM-GPG-KEY-CentOS-6
\nenabled=1<\/code><\/p>\n","protected":false},"excerpt":{"rendered":"
Prerequisites vi \/etc\/sysconfig\/selinux SELINUX=disabled or sed -i ‘s\/SELINUX\\=enforcing\/SELINUX\\=disabled\/g’\/etc\/selinux\/config Turn off the iptables. service iptables stop chkconfig iptables off Or Allow the following ports, if you want it enabled. vi \/etc\/sysconfig\/iptables #Allow the http ports(80\/443), Cobbler\u2019s ports 69, and 25151. -A INPUT -m state –state NEW -m tcp -p tcp –dport 80 -j ACCEPT -A INPUT […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[231],"tags":[239,238,32,14,11],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/trichev.com\/blog\/wp-json\/wp\/v2\/posts\/754"}],"collection":[{"href":"https:\/\/trichev.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/trichev.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/trichev.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/trichev.com\/blog\/wp-json\/wp\/v2\/comments?post=754"}],"version-history":[{"count":9,"href":"https:\/\/trichev.com\/blog\/wp-json\/wp\/v2\/posts\/754\/revisions"}],"predecessor-version":[{"id":763,"href":"https:\/\/trichev.com\/blog\/wp-json\/wp\/v2\/posts\/754\/revisions\/763"}],"wp:attachment":[{"href":"https:\/\/trichev.com\/blog\/wp-json\/wp\/v2\/media?parent=754"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/trichev.com\/blog\/wp-json\/wp\/v2\/categories?post=754"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/trichev.com\/blog\/wp-json\/wp\/v2\/tags?post=754"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}