文章農場: PXE Automated Install OS(Preseed)

一、Mirror 鏡像站

1. 準備 200 GB 以上之硬碟空間，並建立裝鏡像站之目錄

mkdir -p /home/ftp

2. 寫一個 getdeb.sh

# 選擇一個外站來下載
HOST=ftp.tw.debian.org
#HOST=debian.nctu.edu.tw
#HOST=opensource.nchc.org.tw
#HOST=ftp.wa.au.debian.org
#HOST=120.117.72.71
#HOST=ftp.debian.org

debmirror \
        --arch=i386,amd64,armel,armhf,sha4 \
        --dist=jessie,jessie-updates \
        --di-arch=i386,amd64,armel \
        --di-dist=stable \
        --host=$HOST \
        --root=":debian" \
        --diff=none -p \
        --nosource \
        --method=rsync \
        --section main,contrib,non-free,main/debian-installer \
        --i18n \
        --ignore-release-gpg /home/ftp/debian/ ;

        #--section non-free,contrib,main,main/debian-installer,main/installer-armel,main/i18n,main/source \
#debmirror \
#       -v --nosource -d lenny/updates -a i386 \
#       -s non-free,contrib,main,main/debian-installer \
 #    --method=http -h security.debian.org \
 #    --ignore-release-gpg -r /debian-security /home/ftp/debian/security/
#       --section main,contrib,non-free,main/debian-installer,main/installer-armel,main/i18n,main/source \

#wget -r -l1 -nH ftp://$HOST/debian/dists/squeeze/main/source/
date

3. 將鏡像站載到 /home/ftp/debian 目錄下

sh getdeb.sh

4. 修改/home/ftp/debian所有檔案權限

DIR=/home/ftp/debian
chown root.root -Rv $DIR
chmod ug-s -Rv $DIR
find $DIR -type -d -exec chmod 755 {} +
find $DIR -type -f -exec chmod 644 {} +

5. 修改 sources.list 檔：

cat >> /etc/apt/sources.list << EOF
deb ftp://localhost/debian jessie main contrib non-free
 deb-src ftp://localhost/debian jessie main contrib non-free
EOF

6. 測試更新

apt-get update

7. 若出現 installer 或 source… 缺少檔案，請自行去別的鏡像站補檔案到對應的目錄。

例如：http://ftp.debian.org/debian/

=============================================================

二、建立私有網路 192.168.10.0/24

1. 將建置環境之對外網路線先移除，
其他含有 DHCP Server 相關的設備也移除 (例如 WiFi 基地台)。

2. PXE Server 端，修改網路設定

vi /etc/network/interfaces

# The loopback network interface
auto lo
iface lo inet loopback

########## Eth0/DHCP ##########
#allow-hotplug eth0
#iface eth0 inet dhcp

########### PXE Server Machine ##########
allow-hotplug eth0
iface eth0 inet static
        address 192.168.10.254
        netmask 255.255.255.0
        network 192.168.10.0
        broadcast 192.168.10.255
        gateway 192.168.10.1

3. 重啟網卡

/etc/init.d/networking restart

4. 確認網路設定成功，若沒有出現 ip:192.168.10.254，再多重啟幾次。

/sbin/ifconfig

=============================================================

三、FTP / NFS /HTTP Server(擇一，本例使用 FTP)

‧FTP Server

1. 安裝

sudo apt-get install proftpd-basic

2.修改設定檔 /etc/proftpd/proftpd.conf

 sudo vi /etc/proftpd/proftpd.conf

搜尋 Anonymous ，解除註解，完成如下結果：

<Anonymous ~ftp>
   User                         ftp
   Group                                nogroup
   # We want clients to be able to login with "anonymous" as well as "ftp"
   UserAlias                    anonymous ftp
   # Cosmetic changes, all files belongs to ftp user
   DirFakeUser  on ftp
   DirFakeGroup on ftp

   RequireValidShell            off

   # Limit the maximum number of anonymous logins
   MaxClients                   10

   # We want 'welcome.msg' displayed at login, and '.message' displayed
   # in each newly chdired directory.
   DisplayLogin                 welcome.msg
   DisplayChdir         .message

   # Limit WRITE everywhere in the anonymous chroot
   <Directory *>
     <Limit WRITE>
       DenyAll
     </Limit>
   </Directory>

   # Uncomment this if you're brave.
   # <Directory incoming>
   #   # Umask 022 is a good standard umask to prevent new files and dirs
   #   # (second parm) from being group and world writable.
   #   Umask                            022  022
   #            <Limit READ WRITE>
   #            DenyAll
   #            </Limit>
   #            <Limit STOR>
   #            AllowAll
   #            </Limit>
   # </Directory>

 </Anonymous>

3.修改 /etc/passwd 設定

 sudo vi /etc/passwd

搜尋 ftp ，將其中的目錄路徑改為自訂 FTP 目錄 (例如： /home/ftp)
瀏灠器測試 ftp://192.168.10.254
-------------------------------------------------------------------------------------------------

‧NFS Server

‧PXE Server
1. 安裝

sudo apt-get install nfs-kernel-server

2. 設定

sudo vi /etc/exports

/srv/nfs 192.168.10.0/24(rw,no_root_squash,async,no_subtree_check)

3. 重啟

exportfs -rav
/etc/init.d/nfs-kernel-server restart

4. 檢查

showmount -e localhost

正確輸出：
Export list for localhost:
/srv/nfs 192.168.10.0/24

‧NFS Client
1. Client 端套件安裝

sudo apt-get install nfs-common

2.建立掛載 NFS 目錄

mkdir -p /dev/nfs

3. 手動掛載

mount -t nfs -nolock 192.168.10.1:/srv/nfs /dev/nfs

-------------------------------------------------------------------------------------------------

‧HTTP Server

1. 安裝

sudo apt-get install apache2

2. 修改

vi /etc/apache2/apache2.conf`

<Directory /home/ftp>
        Options Indexes
        AllowOverride None
        Require all granted
</Directory>

3. 修改

vi /etc/apache2/sites-available/000-default.conf`

 #DocumentRoot /var/www/html
 DocumentRoot /home/ftp

4. 重啟

/etc/init.d/apache2 restart

=============================================================

四、DHCP Server

1. 安裝
sudo apt-get install isc-dhcp-server

2. 設定

vi /etc/dhcp/dhcpd.conf

option domain-name "example.org";
option domain-name-servers 120.117.2.1;
#option domain-name-servers 8.8.8.8;

default-lease-time 600;
max-lease-time 7200;
allow booting;

subnet 192.168.10.0 netmask 255.255.255.0{
        range 192.168.10.100 192.168.10.200;
        option subnet-mask 255.255.255.0;
        option broadcast-address 192.168.10.255;
        option routers 192.168.10.1;
        option domain-name-servers 120.117.2.1;
        next-server 192.168.10.254;
        filename "pxelinux.0";
}

3. 重啟

/etc/init.d/isc-dhcp-server restart
systemctl enable isc-dhcp-server
systemctl status isc-dhcp-server

=============================================================

五、TFTP Server

1. 安裝

sudo apt-get -y install tftpd-hpa

2.設定

vi /etc/default/tftpd-hpa

TFTP_RUN_DAEMON="yes"
TFTP_USERNAME="tftp"
TFTP_DIRECTORY="/srv/tftp"
TFTP_ADDRESS="0.0.0.0:69"
TFTP_OPTIONS="--secure"

3. 下載開機套件

wget http://ftp.debian.org/debian/dists/jessie/main/installer-amd64/current/images/netboot/netboot.tar.gz

4. 確立 /srv/tftp 目錄存在

mkdir -p /srv/tftp

5. 解壓至 tftp 目錄

tar xfva netboot.tar.gz -C /srv/tftp

6. PXE 開機選單訊息(自行定義)

vi /srv/tftp/boot.msg

        =========================
        |            INSTALL MENU              |
        =========================

        Choose installation type:

        0  Local Boot(Default)
        1  PXE Manual Install Debian/Jessie
        2  PXE Automated Install Debian/Jessie
        =========================

7. 原檔備份

mv /srv/tftp/pxelinux.cfg/default /srv/tftp/pxelinux.cfg/default.bak

8. PXE 開機選單

vi /srv/tftp/pxelinux.cfg/default

DISPLAY boot.msg
PROMPT 1
timeout 3000

default 0

LABEL 0
        localboot 0

LABEL 1
        kernel debian-installer/amd64/linux
        append vga=normal initrd=debian-installer/amd64/initrd.gz --

LABEL 2
        kernel debian-installer/amd64/linux
        append vga=normal initrd=debian-installer/amd64/initrd.gz auto=true priority=critical url=http://192.168.10.254/preseed.cfg interface=eth0

9. 權限o+rx

chmod -Rv 755 /srv/tftp

10. 重啟

 /etc/init.d/tftpd-hpa restart
 update-rc.d tftpd-hpa defaults
 systemctl enable tftpd-hpa

=============================================================

六、自動安裝設定 Preseed

#http://www.unt.edu/benchmarks/archives/2008/may08/auto_install_howto-2.pdf
#https://www.youtube.com/watch?v=YT7qUoEw0BY
#http://pastebin.com/jadh4U5n
#https://www.debian.org/releases/jessie/example-preseed.txt

 vim /home/ftp/preseed.cfg

#https://www.debian.org/releases/jessie/example-preseed.txt
# Localization
d-i debian-installer/locale string en_US
d-i console-keymaps-at/keymap select us
d-i console-setup/ask_detect boolean false
d-i keyboard-configuration/xkb-keymap select us
d-i keyboard-configuration/layoutcode string us

 # Networking
d-i netcfg/choose_interface select auto
d-i netcfg/get_hostname string unassigned-hostname
d-i netcfg/get_domain string unassigned-domain

 # APT Mirror
d-i mirror/country string enter information manually
d-i mirror/http/hostname string ftp://192.168.10.254
d-i mirror/http/directory string /debian
#d-i mirror/suite string default
d-i mirror/http/proxy string

 # Timezone / Time
d-i clock-setup/utc boolean false
d-i time/zone string Asia/Taipei
d-i clock-setup/ntp boolean true
d-i clock-setup/ntp-server tick.stdtime.gov.tw

 # Partitoning
# # https://wikitech.wikimedia.org/wiki/PartMan/Auto 
d-i partman-auto/disk string /dev/sda
d-i partman-auto/method string regular
#    
d-i partman-auto/expert_recipe string   \
root ::                                 \
        5000 25000 -1 ext4              \
        $primary{ }                     \
        $bootable{ }                    \
        method{ format }                \
        format{ }                       \
        use_filesystem{ }               \
        filesystem{ xfs }               \
        mountpoint{ / }                 \
        .                               \
        1024 2048 8192 linux-swap       \
        $primary{ }                     \
        method{ swap }                  \
        format{ }                       \
        .

d-i partman-auto/choose_recipe select root
d-i partman-partitioning/confirm_write_new_label boolean true
d-i partman/confirm boolean true
d-i partman/confirm_write_new_label boolean true
d-i partman/confirm_nooverwrite boolean false
d-i partman/choose_partition select "Finish partitioning and write changes to disk"

# Grub Install
d-i grub-installer/only_debian boolean true
d-i grub-installer/with_other_os boolean true
d-i grub-installer/bootdev  string /dev/sda

# Account(s) setup
# ROOT
d-i passwd/root-login boolean true
d-i passwd/root-password password abc123
d-i passwd/root-password-again password abc123
# USER
d-i passwd/make-user boolean true
d-i passwd/user-fullname string student
d-i passwd/username string student
d-i passwd/user-password password abc123
d-i passwd/user-password-again password abc123
d-i user-setup/allow-password-weak boolean true
#d-i passwd/user-default-groups string users,audio,cdrom,video
#d-i passwd/user-uid string 1001

# tasksel / extra APT packages
#tasksel tasksel/first multiselect standard
tasksel tasksel/first multiselect minimal
d-i pkgsel/include string \
ssh sshpass sudo aptitude vim ntp rsync

popularity-contest popularity-contest/participate boolean true

# run shell script
d-i preseed/late_command string                         \
in-target wget ftp://192.168.10.254/env.sh -P /root/;   \
in-target /bin/chmod 700 /root/env.sh;                  \
in-target /bin/sh /root/env.sh

=============================================================

七、新機環境設定

自訂義於 /home/ftp/env.sh

#!/bin/bash
# KLin
# 2015/08/25

USER=student

# login directory: /root
cd /root/

# APT Package updates
#apt-get update

# sshd server
#apt-get -y install ssh sshpass rsh
sed -i 's/PermitRootLogin without-password/PermitRootLogin yes/g' /etc/ssh/sshd_config
mkdir -p /root/.ssh

## 使用 `ssh-keygen` 指令生成公鑰，Copy 起來
#cat >> /root/.ssh/authorized_keys << EOF
#ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLDfPtWH2zTq92nfsml5i6agoXWQRBzsb9VJzKGwY/jyPfyIL7rl+Q#hD4oGxDLW3pNmtflAkQ3/X3W8j/o7tW14Sdw2eW5HRl2Um2eSa9q2BWHbzT464R+xlGgAI3iUH0yPRgW602EYzeCZi3/#8zSoVHMVrjsZyjOzz5n+EFbNsirVtSOndF9iXa2ByT1GuxjOobBWoIue5/1jb7B8pG6QlRAf6kz0x/1xLWASiBmMaLPf#mHbQ5xvgBFbSOQTTG7vRevuVrpBaUdEHEGiRMY4TS8o/2bOzAoCa9hgCcxb1N3Ys/AKbwU00yWGUSKqhTK93tpbSsUmG#34MaDGmMWmfz root@KaiLin

#ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCllLrsVt7koI6q/erYCUubKW2fxHRGYB4xYkY7LacPxiSexnvrX6yk#vRQbWcEOtNig2SXZJ6NwJWIDnkAfehVLbYWSu1S4MfPMzPLQVQryAQxf3oajyLAg+D64QGeBfDmScJ0LIBwPJq9/oqSI#4QgiMUXjj+9kBn6VBzGaB9h2u6AN1YYRJYJbKHFt4mxiqbXuXalw2fC0VWoerp9La9weozvCWOXeuxL6SCYPyTcIDqQ7#t9hSvH93af6HqNtcBr0WzmrYdrVRyNW5KbCD0IFf35yOogzrAon86MVjReVAF2gLHnFYz+bjH4DstcRAAZgJTvT4HGuA#cGqrfXf11RhZ root@120-117-73-86
#EOF

# Black List
cat >> /etc/modprobe.d/fbdev-blacklist.conf << EOF 
blacklist nouveau
blacklist nv
blacklist ast
EOF

# Setting `sudo` 
echo "$USER     ALL=(ALL:ALL) ALL" >> /etc/sudoers

# .bashrc & .vimrc
for ACCOUNT in /root /home/$USER
do
# set .bashrc
cat >> $ACCOUNT/.bashrc << EOF
# Language Setting "zh.TW.UTF-8"
export LC_ALL=zh_TW.UTF-8
export LANG=zh_TW.UTF-8
export LANGUAGE=zh_TW.UTF-8

# define more command aliases
alias ls='ls -F --color=auto'
alias l='ls -lF --color=auto'
alias ll='ls -lF --color=auto'
alias lt='ls -lt --color=auto'
alias la='ls -aF --color=auto'
alias lh='ls -lhF --color=auto'
alias lz='ls -lZF --color=auto'
alias grep='grep --color=auto'
alias vi='vim'
alias df='df -h'
alias ifconfig='/sbin/ifconfig'
EOF

# set .vimrc
cat >> $ACCOUNT/.vimrc << EOF
set hlsearch
set bg=dark
syntax on
EOF
done

# end test
touch /root/env_run.ok

# Other shell...

=============================================================

八、遠端控制 rsh + sshpass

※ 注意，使用 rsh 時，Server 與 Client 必需有相同之使用者帳號，
若 Server 端使用 root 權限，則 rsh 所執行的指令於 Client 端也為 root 權限。

1. 於 server 端發遠端指令的方法參考 http://jamyy.us.to/blog/2013/08/5260.html

2. 安裝

apt-get install sshpass rsh

3. 遠端 ssh 第一次，無需打 yes ，自動更新 known_hosts 檔方法：
建一設定檔於 PXE Server 端: /root/.ssh/config

StrictHostKeyChecking no

4 遠端下指令，注意目前執行 rsh 的使用者權限：

sshpass -p <密碼> rsh <主機 IP> <指令> &

※令 ssh 連線無需輸入密碼
於 PXE Server 端，指令` ssh-keygen `產生 public key ，
並 copy 至 Client 端:/root/.ssh/authorized_keys (自行建立)的檔案內。

=============================================================

九、Reference:

http://www.unt.edu/benchmarks/archives/2008/may08/auto_install_howto-2.pdf

https://raymii.org/s/articles/virt-install_introduction_and_copy_paste_distro_install_commands.html

http://www.tecmint.com/multiple-centos-installations-using-kickstart/#

http://ubuntuforums.org/showthread.php?t=1463142

http://www.syslinux.org/wiki/index.php/Comboot/menu.c32

http://wiki.hackzine.org/sysadmin/debian-pxe-server.html

http://www.iram.fr/~blanchet/tutorials/read-only_diskless_debian7.pdf

https://www.debian.org/releases/jessie/amd64/ch04s05.html.en

https://www.debian-administration.org/article/478/Setting_up_a_server_for_PXE_network_booting

http://linux.vbird.org/somepaper/20100901-pxe_ks.pdf

http://linux.vbird.org/somepaper/20101020-pxe_ks_2.pdf

https://help.ubuntu.com/community/DisklessUbuntuHowto

https://www.debian.org/releases/jessie/example-preseed.txt

文章農場

2015年8月25日星期二

PXE Automated Install OS(Preseed)

一、Mirror 鏡像站

二、建立私有網路 192.168.10.0/24

三、FTP / NFS /HTTP Server(擇一，本例使用 FTP)

‧FTP Server

‧NFS Server

‧HTTP Server

四、DHCP Server

五、TFTP Server

六、自動安裝設定 Preseed

七、新機環境設定

八、遠端控制 rsh + sshpass

九、Reference:

沒有留言:

張貼留言

2015年8月25日 星期二

PXE Automated Install OS(Preseed)

一、Mirror 鏡像站

二、建立私有網路 192.168.10.0/24

三、FTP / NFS /HTTP Server(擇一，本例使用 FTP)

‧FTP Server

‧NFS Server

‧HTTP Server

四、DHCP Server

五、TFTP Server

六、自動安裝設定 Preseed

七、新機環境設定

八、遠端控制 rsh + sshpass

九、Reference:

沒有留言:

張貼留言

2015年8月25日星期二