执行效果如下:
#!/bin/bash
#Date:2023/12/25
#Func:一键部署pxe服务器
#Author:Zhanghaodong
#Version:2023.12.25.05
#Note:仅适用x86架构uefi安装
# 1.此脚本可多次重复执行。
# 2.如遇到某个服务异常退出,检查响应状态码排错后,再次执行脚本即可。
# 3.此脚本仅仅适用于CRITC-HongAn-Server-x86_64-V1.0-rc08.iso或CRITC-HongAn-Server-aarch-V1.0-rc08.iso
# 4.在填写以下参数时,请注意:x86架构可用uefi或leagcy引导,其对应的filename分别是grubx64.efi和pxelinux.0
# arm只能用uefi引导且filename只能是grubaa64.efi#Manually Writing Basic Information
PXE_SERVER="11.0.1.181"
ISO="/root/CRITC-HongAn-Server-x86_64-V1.0-rc08.iso"
CLIENT_ARCH="x86" #x86 or arm
CLIENT_BOOT_MODE="uefi" #uefi or leagcy
#PXE_FILE_NAME="pxelinux.0" #x86下uefi对应的grubx64.efi,leagcy对应pxelinux.0;arm对应的只有grubaa64.efi
ROOT_PASSWORD="qwer1234!@#$"#Dhcp Config Information
SUBNET="11.0.1.0" #子网
NETMASK="255.255.255.0" #掩码
GATEWAY="11.0.1.1" #网关
RANGE_IP_LOW="11.0.1.200" #ip范围
RANGE_IP_HIGH="11.0.1.230" #ip范围function Log {local log_level=$1local log_info=$2local line=$3local script_name=$(basename $0)case ${log_level} in"INFO")echo -e "\033[32m$(date "+%Y-%m-%d %T.%N") [INFO]: ${log_info}\033[0m";;"WARN")echo -e "\033[33m$(date "+%Y+%m+%d %T.%N") [WARN]: ${log_info}\033[0m";;"ERROR")echo -e "\033[31m$(date "+%Y-%m-%d %T.%N") [ERROR ${script_name} ${FUNCNAME[1]}:$line]: ${log_info}\033[0m";;*)echo -e "${@}";;esac
}function MOUNT_ISO {[ -d /tmpmnt ] || mkdir /tmpmntumount /tmpmntmount -o loop ${ISO} /tmpmnt &> /dev/nullif [ $? -eq 0 ];thenLog INFO "${ISO}镜像已挂载到/tmpmnt目录下!"elseLog ERROR "${ISO}镜像挂载失败!"exit 2fi
}function STOP_FIREWALLD {iptables -F && Log INFO "防火墙规则已清空!" || Log WARN "防火墙规则清空失败,请重试!"systemctl stop firewalld && systemctl disable firewalld &> /dev/null && Log INFO "防火墙及SELINUX已关闭!"#本系统seLinux缺省disabled,无需做修改操作#sed -i.bak 's/^SELINUX=.*/SELINUX=disabled/g' /etc/selinux/config
}function CONFIG_LOCAL_YUM {[ -d /etc/yum.repos.d/repo_bak ] || mkdir /etc/yum.repos.d/repo_bakmv /etc/yum.repos.d/*.repo /etc/yum.repos.d/repo_bakcat > /etc/yum.repos.d/local.repo <<-EOF[local]name = local media for ${ISO}baseurl = file:///tmpmntgpgcheck = 0enabled = 1EOFLog INFO "本地YUM源配置完成!"
}function CONFIG_HTTPD {rpm -qa | grep httpd &>/dev/null || yum -y install httpd &> /dev/null[ -d /var/www/html/hy ] && rm -rf /var/www/html/hy[ -d /var/www/html/ks ] && rm -rf /var/www/html/ksmkdir /var/www/html/{hy,ks}chmod -R 755 /var/www/html/{hy,ks}Log INFO "正在拷贝ISO文件到/var/www/html/hy,大约需1分钟左右......"rsync -a /tmpmnt/ /var/www/html/hyif [ $? -eq 0 ];thenLog INFO "ISO文件拷贝完毕!"elseLog ERROR "ISO文件拷贝失败,请检查后重试!"exit 3fisystemctl restart httpdif [ $? -eq 0 ];thenLog INFO "重新启动HTTPD服务完毕!"systemctl enable httpd &>/dev/nullelseLog ERROR "启动HTTPD服务异常,请检查后重试!"exit 4fi
}function CONFIG_KS {
cat > /tmp/rootpw.py <<-EOF
#!/usr/bin/python2
import crypt
print(crypt.crypt("$ROOT_PASSWORD"))
EOFROOTPW="rootpw --iscrypted `python2 /tmp/rootpw.py | sed 's/\$/\\\$/g' | sed 's/.$//'`"rm -rf /tmp/rootpw.py
cat > /var/www/html/ks/hy-ks.cfg <<-EOF
#version=DEVEL
# System authorization information
auth --enableshadow --passalgo=sha512
# Use CDROM installation media
#cdrom
install
# Use graphical install
graphical
# Run the Setup Agent on first boot
firstboot --disabled
ignoredisk --only-use=nvme0n1
# Keyboard layouts
keyboard --vckeymap=cn --xlayouts='cn'
# System language
lang zh_CN.UTF-8eula --agreed
#skipx 安装完成后开机不启动图形
#skipx
# Network information
network --bootproto=static --device=ens33 --ip=11.0.1.23 --netmask=255.255.255.0 --gateway=11.0.1.1 --nameserver=114.114.114.114,8.8.8.8 --noipv6
network --bootproto=dhcp --device=eno1 --onboot=off --ipv6=auto --no-activate
network --bootproto=dhcp --device=eno2 --onboot=off --ipv6=auto
network --bootproto=dhcp --device=eno3 --onboot=off --ipv6=auto
network --bootproto=dhcp --device=eno4 --onboot=off --ipv6=auto
network --bootproto=dhcp --device=ens1f0 --onboot=off --ipv6=auto
network --bootproto=dhcp --device=ens1f1 --onboot=off --ipv6=auto
network --hostname=localhost.localdomain# Root password
${ROOTPW}
# System services
#services --enabled="ntpd" #注意此处如果设置失败,将会在安装完之后报错,导致pxe自动安装程序无法进行
# SELinux configuration
selinux --disabled
# Firewall configuration
firewall --disabled
# Reboot after installation
reboot
# System timezone
timezone Asia/Shanghai --isUtc
#user --name=hy --password=.CvWNQ/ --iscrypted --gecos="hy"
# X Window System configuration information
xconfig --startxonboot
# System bootloader configuration
bootloader --append=" crashkernel=auto" --location=mbr --boot-drive=nvme0n1
# Partition clearing information
clearpart --all --initlabel
autopart --type=lvm#######################################################################
#分区情况案例如下
# Disk partitioning information
#标准分区如下操作
#part swap --asprimary --fstype="swap" --ondisk=nvme0n1 --size=4096
#part /boot --asprimary --fstype="xfs" --ondisk=nvme0n1 --size=1024
#part /boot/efi --asprimary --fstype="vfat" --ondisk=nvme0n1 --size=1024
#part / --asprimary --fstype="xfs" --grow --ondisk=nvme0n1 --size=1 #将剩下的分区都给/
##########################################################################################
#lvm分区如下
#后续待更新###################################
%packages
#@^Server with UKUI GUI
@^Minimal Install
wget
chrony
kexec-tools
%end%post
systemctl distable chronyd
systemctl disable firstboot-graphical.service
%end#%addon com_redhat_kdump --enable --reserve-mb='auto'
%addon ADDON_placeholder --enable --reserve-mb=1024M
%end
EOF
}function CONFIG_DHCP_FILENAME {rpm -qa | grep dhcp &> /dev/null|| yum -y install dhcp &>/dev/nullcase ${CLIENT_BOOT_MODE} in "uefi")case ${CLIENT_ARCH} in"x86")filename=grubx64.efi;;"arm")filename=grubaa64.efi;;"*")Log ERROR "您填写的${CLIENT_ARCH}不符合${CLIENT_BOOT_MODE}引导,请检查后重试!"exit 7;;esac;;"leagcy")case ${CLIENT_ARCH} in"x86")filename=pxelinux.0;;"arm")Log ERROR "您填写的${CLIENT_ARCH}不符合${CLIENT_BOOT_MODE}引导,请检查后重试!"exit 8;;"*")Log ERROR "您填写的${CLIENT_ARCH}不符合${CLIENT_BOOT_MODE}引导,请检查后重试!"exit 9;;esac;;"*")Log ERROR "客户端引导方式只能是UEFI或LEAGCY模式,请检查后重试!"exit 10;;esac}
function CONFIG_DHCP {rpm -qa | grep dhcp &> /dev/null|| yum -y install dhcp &>/dev/null
cat > /etc/dhcp/dhcpd.conf <<-EOF
ddns-update-style interim;
ignore client-updates;
filename "${filename}";
next-server ${PXE_SERVER};subnet ${SUBNET} netmask ${NETMASK} {option routers ${GATEWAY};option subnet-mask ${NETMASK};range dynamic-bootp ${RANGE_IP_LOW} ${RANGE_IP_HIGH};default-lease-time 21600;max-lease-time 43200;
}
EOFsystemctl restart dhcpdif [ $? -eq 0 ];thenLog INFO "DHCP服务已正常启动!"systemctl enable dhcpd &>/dev/nullelseLog ERROR "DHCP服务异常,请检查参数是否正确!"exit 3fi
}function CONFIG_TFTP_X86_ARM_UEFI_GRUB_CFG {rpm -qa | grep -q tftp || yum install tftp -y > /dev/nullrpm -qa | grep -q tftp-server || yum install tftp-server -y > /dev/null#rpm -qa | grep -q xinetd || yum install xinetd -y > /dev/nullcat > /etc/xinetd.d/tftp <<-EOF
service tftp
{socket_type = dgramprotocol = udpwait = yesuser = rootserver = /usr/sbin/in.tftpdserver_args = -s /var/lib/tftpbootdisable = noper_source = 11cps = 100 2flags = IPv4
}
EOFrm -rf /var/lib/tftpboot/*cp -rf /tmpmnt/images/pxeboot/* /var/lib/tftpboot/cp -rf /tmpmnt/EFI/BOOT/grub*.efi /var/lib/tftpboot/chmod -R 755 /var/lib/tftpboot
cat > /var/lib/tftpboot/grub.cfg <<-EOF
set default="0"function load_video {if [ x$feature_all_video_module = xy ]; theninsmod all_videoelseinsmod efi_gopinsmod efi_ugainsmod ieee1275_fbinsmod vbeinsmod vgainsmod video_bochsinsmod video_cirrusfi
}load_video
set gfxpayload=keep
insmod gzio
insmod part_gpt
insmod ext2set timeout=10### BEGIN INSTALL CRITC-HongAn-Server ###
menuentry 'PXE INSTALL FOR Install CRITC-HongAn-Server-x86_64-V1.0-rc08' --class red --class gnu-linux --class gnu --class os {set root=(tftp,${PXE_SERVER})linux /vmlinuz ip=dhcp inst.repo=http://${PXE_SERVER}/hy inst.ks=http://${PXE_SERVER}/ks/hy-ks.cfginitrd /initrd.img
}
EOFsystemctl restart tftp && Log INFO "TFTP服务启动完毕!"if [ $? -eq 0 ];thenLog INFO "TFTP服务已正常启动!"systemctl enable tftp &>/dev/nullelseLog ERROR "TFTP服务异常,请检查后重试!"exit 4fi
}function CONFIG_TFTP_X86_LEAGCY_GRUB_CFG {
rpm -qa | grep -q tftp || yum install tftp -y > /dev/nullrpm -qa | grep -q tftp-server || yum install tftp-server -y > /dev/null#rpm -qa | grep -q xinetd || yum install xinetd -y > /dev/nullcat > /etc/xinetd.d/tftp <<-EOF
service tftp
{socket_type = dgramprotocol = udpwait = yesuser = rootserver = /usr/sbin/in.tftpdserver_args = -s /var/lib/tftpbootdisable = noper_source = 11cps = 100 2flags = IPv4
}
EOFrm -rf /var/lib/tftpboot/*cp -rf /tmpmnt/isolinux/* /var/lib/tftpboot/cp -rf /tmpmnt/images/pxeboot/* /var/lib/tftpboot/[ -d /var/lib/tftpboot/pxelinux.cfg ] || mkdir /var/lib/tftpboot/pxelinux.cfg &> /dev/nullrm -rf /var/lib/tftpboot/pxelinux.cfg/*chmod -R 755 /var/lib/tftpboot
cat > /var/lib/tftpboot/pxelinux.cfg/default <<-EOF
default vesamenu.c32
timeout 100
display boot.msg# Clear the screen when exiting the menu, instead of leaving the menu displayed.
# For vesamenu, this means the graphical background is still displayed without
# the menu itself for as long as the screen remains in graphics mode.
menu clear
menu background splash.png
menu title CRITC-HongAn-Server-x86_64-V1.0-rc08
menu vshift 8
menu rows 18
menu margin 8
#menu hidden
menu helpmsgrow 15
menu tabmsgrow 13
# Border Area
menu color border * #00000000 #00000000 none
# Selected item
menu color sel 0 #ffffffff #00000000 none
# Title bar
menu color title 0 #ff7ba3d0 #00000000 none
# Press [Tab] message
menu color tabmsg 0 #ff3a6496 #00000000 none
# Unselected menu item
menu color unsel 0 #84b8ffff #00000000 none
# Selected hotkey
menu color hotsel 0 #84b8ffff #00000000 none
# Unselected hotkey
menu color hotkey 0 #ffffffff #00000000 none
# Help text
menu color help 0 #ffffffff #00000000 none
# A scrollbar of some type? Not sure.
menu color scrollbar 0 #ffffffff #ff355594 none
# Timeout msg
menu color timeout 0 #ffffffff #00000000 none
menu color timeout_msg 0 #ffffffff #00000000 none
# Command prompt text
menu color cmdmark 0 #84b8ffff #00000000 none
menu color cmdline 0 #ffffffff #00000000 none
# Do not display the actual menu unless the user presses a key. All that is displayed is a timeout message.
menu tabmsg Press Tab for full configuration options on menu items.
menu separator # insert an empty line
menu separator # insert an empty linelabel httpmenu label ^PXE INSTALL FOR CRITC-HongAn-Server-x86_64-V1.0-rc08menu defaultkernel vmlinuzappend initrd=initrd.img ip=dhcp inst.repo=http://${PXE_SERVER}/hy inst.ks=http://${PXE_SERVER}/ks/hy-ks.cfg
menu end
EOFcp -rf /tmpmnt/Packages/syslinux-nonlinux-* /tmprm -rf /tmp/usr &> /dev/nullrpm2cpio /tmp/syslinux-nonlinux-* | cpio -idm --quiet -D /tmp/ cp -rf /tmp/usr/share/syslinux/pxelinux.0 /var/lib/tftpboot/chmod -R 755 /var/lib/tftpbootsystemctl restart tftp && Log INFO "TFTP服务启动完毕!"if [ $? -eq 0 ];thenLog INFO "TFTP服务已正常启动!"systemctl enable tftp &>/dev/nullelseLog ERROR "TFTP服务异常,请检查后重试!"exit 4fi
}function CHOOSE_BOOT_MODE {
case ${CLIENT_BOOT_MODE} in"uefi")CONFIG_TFTP_X86_ARM_UEFI_GRUB_CFG;;"leagcy")CONFIG_TFTP_X86_LEAGCY_GRUB_CFG;;"*")Log ERROR "CLIENT_BOOT_MODE选择有误,请重试!"exit 5;;
esac
}function MAIN {MOUNT_ISOSTOP_FIREWALLDCONFIG_LOCAL_YUMCONFIG_DHCP_FILENAMECONFIG_DHCPCHOOSE_BOOT_MODECONFIG_HTTPDCONFIG_KS
}
MAIN######################
#状态码错误排查
#2:镜像挂载失败
#3:拷贝ISO文件到/var/www/html/hy下失败
#4:启动HTTPD服务异常
#5:选择CLIENT_BOOT_MODE有误
#6:选择PXE_FILE_NAME有误
#7:您填写的${CLIENT_ARCH}不符合UEFI引导,请检查后重试!
#8:您填写的${CLIENT_ARCH}不符合LEAGCY引导,请检查后重试!
#9:您填写的${CLIENT_ARCH}不符合LEAGCY引导,请检查后重试!此处用户填写的是非x86
#10:${CLIENT_BOOT_MODE}填写错误有误,此处只能UEFI或LEAGCY模式