• debian 12 PXE Server 批量部署系统

    pxe server 前言

    PXE（Preboot eXecution Environment，预启动执行环境）是一种网络启动协议，允许计算机通过网络启动而不是使用本地硬盘。PXE服务器是实现这一功能的服务器，它提供了启动镜像和引导加载程序，使得客户端计算机可以通过网络启动并安装操作系统或运行其他软件。

    在Debian系统中，要设置一个PXE服务器，您需要以下几个组件：

    • TFTP服务器：用于提供启动镜像和引导加载程序。
    • DHCP服务器：用于分配IP地址给客户端计算机。
    • NFS或HTTP服务器：用于提供操作系统镜像和其他文件。

    在Debian中，可以使用以下软件包来设置PXE服务器：

    • atftpd：一个轻量级的TFTP服务器，可以用于提供启动镜像和引导加载程序。
    • dnsmasq：一个轻量级的DHCP和DNS服务器，可以用于分配IP地址给客户端计算机。
    • nfs-kernel-server：用于提供NFS服务，以便客户端可以访问操作系统镜像和其他文件。

    debian 相关下载，文档参考

    • debian 基础系统部署，源参考
    debiandebian 历史版debian 发行版debian 安装debian preseed.cfg自动化编排debian dhcp 配置netboot 下载

    Debian 全球镜像站

    downloaddownload参考参考参考参考debian11debian12download

    创建一键安装tftp dhcp 实现批量部署debian

    • 实现自动化安装debian（bios+uefi），lvm 分区xfs
    • debian 构建内部镜像资源站，参考
      1. d-i mirror/http/hostname string 192.168.11.70 内网镜像挂载安装方式配置参考
      2. d-i mirror/http/directory string /debian12
      3. d-i mirror/http/proxy string
    • dhcp 配置文件位置/etc/dhcp/dhcpd.conf
    • tftp 配置文件/etc/default/tftpd-hpa
    • tftp 文件位置/var/lib/tftp
    • apache2 配置文件 /etc/apache2/apache2.conf
    • apache2 目录位置/var/www/html
    • debian11 netboot 位置/var/lib/tftp/debian11.10/debian-installer
    • debian12 netboot 位置/var/lib/tftp/debian12.6/debian-installer
    • 基于bios 启动配置文件/var/lib/tftp/pxelinux.cfg/default
    • 基于UEFI启动配置文件/var/lib/tftp/grub/grub.cfg
    • debian 自动化编排脚本位置/var/lib/tftp/preseed/debian-11-12-preseed.cfg （脚本兼容bios+uefi）
    • 执行以下脚本执行前 ln -sf bash /bin/sh
    • root/1234.com 以下自动化安装完成的用户密码
    • 18-45行变量，根据自己的实际情况进行变更
    • 使用crypt(3)哈希进行加密(apt install -y whois) (mkpasswd -m sha-512 生成密钥)
    • debian 11 12 实现bios+uefi
    vim /debian_pxe_server_bios_uefi_install.sh
    1. #!/bin/bash
    2. # -*- coding: utf-8 -*-
    3. # Author: make.han 
    4. # Email: CIASM@CIASM
    5. # Date: 2024/07/12
    6. # install PXE Server debian 12
    7.  
    8. # preseed.cfg 编排
    9. #https://www.debian.org/releases/stable/amd64/apbs04.zh-cn.html#ftn.idm3455
    10.  
    11. # TFTP 网络引导准备文件
    12. #https://www.debian.org/releases/stable/amd64/ch04s05.zh-cn.html
    13.  
    14. # 安装手册
    15. #https://www.debian.org/releases/stable
    16.  
    17. #dhcp ip address
    18. nic_network_name=`ifconfig -s | awk 'NR>1 && !/^lo/ && !/^idrac/ && !/^br/ && !/^veth/ && !/^docker/{print $1; exit}'`
    19. host_IP=`ifconfig -a | grep inet | grep -v '127.0.0.1' | awk '{ print $2}' | awk 'NR==1'`
    20. IP="192.168.11.69"
    21. MASK="255.255.255.0"
    22. BROADCAST_ADDRESS="192.168.11.255"
    23. ROUTERS="192.168.11.1"
    24. SUBNET="192.168.11.0"
    25. DNS="8.8.8.8"
    26. RANGE="192.168.11.56 192.168.11.250"
    27.  
    28. #tftp variable configuration
    29. tftp_port=69
    30. tftp_user=tftp
    31. tftp_catalogue=/var/lib/tftp
    32.  
    33. #debian catalogue
    34. debian_11_catalogue=debian11.10
    35. debian_12_catalogue=debian12.6
    36. debian_iso=debian_iso
    37. debian_cfg=debian_cfg
    38.  
    39. #netboot downlaod 
    40. netboot_11_url_download=https://mirrors.ustc.edu.cn/debian/dists/Debian11.10/main/installer-amd64/current/images/netboot/netboot.tar.gz
    41. netboot_12_url_download=https://mirrors.ustc.edu.cn/debian/dists/Debian12.6/main/installer-amd64/current/images/netboot/netboot.tar.gz
    42. netboot_gz=netboot.tar.gz
    43.  
    44. # root用户，普通用户 密码使用crypt(3)哈希进行加密(apt install -y whois) (mkpasswd -m sha-512 生成密钥)
    45. root_password='$6$5vShu8v/wRoByWOr$0uGqOl9W40u.hXXZwLBrP6jGFubcw.UM3JE13eOkdm7RsfcnseVsCe1YBR6VawPtFH4rNROi2sJ35X98dNO.C/'
    46. host_name=debian
    47. common_user=debian
    48. common_password='$6$5vShu8v/wRoByWOr$0uGqOl9W40u.hXXZwLBrP6jGFubcw.UM3JE13eOkdm7RsfcnseVsCe1YBR6VawPtFH4rNROi2sJ35X98dNO.C/'
    49. time_zone="Asia/Shanghai"
    50. mirror="ftp.cn.debian.org"
    51.  
    52. # apache2 variable configuration
    53. apache_port=80
    54. apache_catalogue=/var/www/html
    55.  
    56. #debian download
    57. debian12_download_url=https://cdimage.debian.org/debian-cd/12.6.0/amd64/iso-dvd/debian-12.6.0-amd64-DVD-1.iso
    58. debian11_download_url=https://cdimage.debian.org/cdimage/archive/11.10.0/amd64/iso-dvd/debian-11.10.0-amd64-DVD-1.iso
    59. debian12_iso=debian-12.6.0-amd64-DVD-1.iso
    60. debian11_iso=debian-11.10.0-amd64-DVD-1.iso
    61.  
    62. install_pxe_server (){
    63.  
    64. if ! [ -x "$(command -v dhcpd)" ]; then
    65.  
    66. 	if [ $? -eq 0 ];then
    67.  
    68. echo "install firewalld"
    69. apt install -y firewalld curl
    70. firewall-cmd --zone=public --add-port=$tftp_port/tcp --permanent && firewall-cmd --reload
    71. firewall-cmd --zone=public --add-port=$tftp_port/udp --permanent && firewall-cmd --reload
    72.  
    73. echo "install whois mkpasswd"
    74. apt install -y whois
    75.  
    76. echo "install dhcp"
    77. apt install -y isc-dhcp-server
    78.  
    79. echo "isc-dhcp-server add nic"
    80. sed -i "s/^INTERFACESv4=.*$/INTERFACESv4=\"$nic_network_name\"/" /etc/default/isc-dhcp-server
    81.  
    82. echo "configuration dhcpd.conf"
    83. rm -rf /etc/dhcp/dhcpd.conf
    84. cat <<EOF>>/etc/dhcp/dhcpd.conf
    85. option domain-name         "$DNS";
    86. option domain-name-servers  $DNS;
    87. default-lease-time 2592000;
    88. max-lease-time 2592000;
    89. authoritative;
    90.  
    91. # add follows
    92. option space pxelinux;
    93. option pxelinux.magic code 208 = string;
    94. option pxelinux.configfile code 209 = text;
    95. option pxelinux.pathprefix code 210 = text;
    96. option pxelinux.reboottime code 211 = unsigned integer 32;
    97. option architecture-type code 93 = unsigned integer 16;
    98.  
    99. subnet $SUBNET  netmask $MASK {
    100.     range dynamic-bootp $RANGE;
    101.     option broadcast-address $BROADCAST_ADDRESS;
    102.     option routers $ROUTERS;
    103.  
    104.     #add follows
    105.     class "pxeclients" {
    106.         match if substring (option vendor-class-identifier, 0, 9) = "PXEClient";
    107.         # PXE servers hostname or IP address
    108.         next-server $host_IP;
    109.         if option architecture-type = 00:07 {
    110.             filename "bootx64.efi";
    111.         }
    112.         else {
    113.             filename "pxelinux.0";
    114.         }
    115.     }
    116. }
    117. EOF
    118.  
    119. echo "install tftpd-hpa"
    120. apt install -y tftpd-hpa
    121.  
    122. echo "configuration tftpd-hpa"
    123. rm -rf /etc/default/tftpd-hpa
    124. cat <<EOF>>/etc/default/tftpd-hpa
    125. TFTP_USERNAME="$tftp_user"
    126. TFTP_DIRECTORY="$tftp_catalogue/"
    127. TFTP_ADDRESS=":$tftp_port"
    128. TFTP_OPTIONS="--secure"
    129. EOF
    130.  
    131. echo "Create a new tftp directory"
    132. mkdir -p $tftp_catalogue/{$debian_11_catalogue,$debian_12_catalogue}
    133.  
    134. echo "start tftpd-hpa"
    135. systemctl start tftpd-hpa
    136.  
    137. echo "install apache2"
    138. apt install -y apache2
    139.  
    140. echo "Delete the default apache2 page"
    141. rm -rf $apache_catalogue/index.html
    142.  
    143. echo "restart apache2"
    144. systemctl restart apache2
    145.  
    146. echo "apache2 firewall"
    147. firewall-cmd --zone=public --add-port=$apache_port/tcp --permanent && firewall-cmd --reload
    148.  
    149. # debian 11 12 Image download mount
    150. <<!
    151. echo "mkdir catalogue debian 11 12"
    152. mkdir -p $apache_catalogue/{$debian_11_catalogue,$debian_12_catalogue}
    153.  
    154. echo "download debian 11 12"
    155. mkdir -p $apache_catalogue/$debian_iso
    156. curl -o $apache_catalogue/$debian_iso/$debian11_iso $debian11_download_url
    157. curl -o $apache_catalogue/$debian_iso/$debian12_iso $debian12_download_url
    158.  
    159. echo "mount debian12_iso"
    160. mount -t iso9660 -o loop,ro $apache_catalogue/$debian_iso/$debian11_iso $apache_catalogue/$debian_11_catalogue
    161. mount -t iso9660 -o loop,ro $apache_catalogue/$debian_iso/$debian12_iso $apache_catalogue/$debian_12_catalogue
    162.  
    163. echo "Mount an image on startup"
    164. sed -i "$ a $apache_catalogue/$debian_iso/$debian11_iso  $apache_catalogue/$debian_11_catalogue/ iso9660 defaults,loop,ro 0 0" /etc/fstab 
    165. sed -i "$ a $apache_catalogue/$debian_iso/$debian12_iso $apache_catalogue/$debian_12_catalogue/ iso9660 defaults,loop,ro 0 0" /etc/fstab 
    166. !
    167.  
    168. echo "downlaod netboot"
    169. curl -o $tftp_catalogue/$debian_11_catalogue/$netboot_gz $netboot_11_url_download
    170. curl -o $tftp_catalogue/$debian_12_catalogue/$netboot_gz $netboot_12_url_download
    171.  
    172. echo "decompression netboot"
    173. tar -xf $tftp_catalogue/$debian_11_catalogue/$netboot_gz -C $tftp_catalogue/$debian_11_catalogue
    174. tar -xf $tftp_catalogue/$debian_12_catalogue/$netboot_gz -C $tftp_catalogue/$debian_12_catalogue
    175.  
    176. echo "bios configuration default"
    177. mkdir -p $tftp_catalogue/pxelinux.cfg
    178. cat <<EOF | tee $tftp_catalogue/pxelinux.cfg/default
    179. default vesamenu.c32
    180.  
    181. #自定义图片路径位置
    182. #menu background /debian.png
    183.  
    184. menu hshift 13
    185. menu width 49
    186. menu margin 8
    187. menu tabmsg
    188. timeout 100
    189.  
    190. menu title Installer boot menu
    191. label Auto Install Debian 11.10
    192.   menu label ^Auto Install Debian 11.10
    193.   menu default
    194.   kernel $debian_11_catalogue/debian-installer/amd64/linux
    195.   append auto=true priority=critical vga=788 initrd=$debian_11_catalogue/debian-installer/amd64/initrd.gz url=http://${host_IP}/$debian_cfg/debian-11-12-preseed.cfg
    196. menu end
    197.  
    198. label Auto Install Debian 12.6
    199.   menu label ^Auto Install Debian 12.6
    200.   menu default
    201.   kernel $debian_12_catalogue/debian-installer/amd64/linux
    202.   append auto=true priority=critical vga=788 initrd=$debian_12_catalogue/debian-installer/amd64/initrd.gz url=http://${host_IP}/$debian_cfg/debian-11-12-preseed.cfg
    203. menu end
    204.  
    205. label local
    206.    #menu default
    207.    com32 chain.c32
    208.    menu label Boot from ^local drive
    209.    localboot 0xffff
    210. menu end
    211. EOF
    212.  
    213. echo "syslinux pxelinux"
    214. apt install -y syslinux pxelinux
    215.  
    216. cp /usr/lib/syslinux/modules/bios/* $tftp_catalogue/
    217. #cp /usr/lib/syslinux/modules/bios/{ldlinux.c32,libutil.c32,menu.c32,vesamenu.c32} $tftp_catalogue/
    218. cp /usr/lib/PXELINUX/{lpxelinux.0,pxelinux.0} $tftp_catalogue/
    219.  
    220. echo "shim-signed"
    221. cd /
    222. apt download shim-signed
    223. dpkg -x shim-signed*deb shim
    224. cp /shim/usr/lib/shim/shimx64.efi.signed $tftp_catalogue/bootx64.efi
    225.  
    226. echo "grub-efi-amd64-signed"
    227. cd /
    228. apt download grub-efi-amd64-signed
    229. dpkg -x grub-efi-amd64-signed*deb grub
    230. cp /grub/usr/lib/grub/x86_64-efi-signed/grubnetx64.efi.signed $tftp_catalogue/grubx64.efi
    231.  
    232. echo "grub-common"
    233. cd /
    234. apt download grub-common
    235. dpkg -x grub-common*deb grub-common
    236. cp /grub-common/usr/share/grub/unicode.pf2 $tftp_catalogue/
    237.  
    238. echo "rm shim grub grub-common"
    239. rm -rf /{shim,grub,grub-common}
    240. rm -rf /{shim-signed*deb,grub-efi-amd64-signed*deb,grub-common*deb}
    241.  
    242. echo "uefi configuration grub.cfg"
    243. mkdir -p $tftp_catalogue/grub
    244. cat <<EOF>>$tftp_catalogue/grub/grub.cfg
    245. set default=4
    246. set timeout=10
    247. set gfxpayload=keep
    248. set menu_color_highlight=cyan/black
    249. set menu_color_normal=white/black
    250. set color_normal=white/black
    251.  
    252. function load_video {
    253.   insmod efi_gop
    254.   insmod efi_uga
    255.   insmod video_bochs
    256.   insmod video_cirrus
    257.   insmod all_video
    258. }
    259.  
    260. load_video
    261. insmod gzio
    262. insmod part_msdos
    263. insmod part_gpt
    264. insmod ext2
    265. insmod xfs
    266. insmod png
    267. insmod gfxterm
    268. insmod gfxmenu
    269. terminal_output gfxterm
    270. background_image -m stretch bg.png
    271.  
    272. menuentry 'EFI Firmware System Setup'  'uefi-firmware' {
    273.   fwsetup
    274. }
    275.  
    276. menuentry 'Reboot System' {
    277.   reboot
    278. }
    279.  
    280. menuentry 'Shutdown System' {
    281.   halt
    282. }
    283.  
    284. menuentry 'Auto Install debian 11.10' {
    285.     linuxefi $debian_11_catalogue/debian-installer/amd64/linux ip=dhcp auto=true priority=critical vga=788 url=http://${host_IP}/$debian_cfg/debian-11-12-preseed.cfg
    286.     initrdefi $debian_11_catalogue/debian-installer/amd64/initrd.gz
    287. }
    288.  
    289. menuentry 'Auto Install debian 12.6' {
    290.     linuxefi $debian_12_catalogue/debian-installer/amd64/linux ip=dhcp auto=true priority=critical vga=788 url=http://${host_IP}/$debian_cfg/debian-11-12-preseed.cfg
    291.     initrdefi $debian_12_catalogue/debian-installer/amd64/initrd.gz
    292. }
    293. EOF
    294.  
    295. echo "bios + uefi establish debian 11 12 cfg"
    296. mkdir -p $apache_catalogue/$debian_cfg
    297. cat <<EOF>>$apache_catalogue/$debian_cfg/debian-11-12-preseed.cfg
    298. # 地区设置语言、国家和地区
    299. d-i debian-installer/locale string en_US
    300. d-i debian-installer/language string en
    301. d-i debian-installer/country string CN
    302. d-i debian-installer/locale string en_GB.UTF-8
    303. d-i localechooser/supported-locales multiselect en_US.UTF-8, zh_CN.UTF-8
    304.  
    305. # 配置键盘
    306. d-i keyboard-configuration/xkb-keymap select us
    307.  
    308. # 配置自动配置网络DHCP
    309. d-i netcfg/choose_interface select auto
    310.  
    311. # 配置hostname和domain
    312. d-i netcfg/get_hostname string $host_name
    313. d-i netcfg/get_domain string $host_name
    314.  
    315. # 指定软件包镜像源的设置
    316. d-i mirror/country string manual
    317. d-i mirror/protocol string http
    318. d-i mirror/http/hostname string $mirror
    319. d-i mirror/http/directory string /debian
    320. d-i mirror/http/proxy string
    321.  
    322. # 内网软件包镜像源的设置
    323. #d-i mirror/http/hostname string 192.168.11.70
    324. #d-i mirror/http/directory string /debian12
    325. #d-i mirror/http/proxy string
    326.  
    327. # 选择软件包，标准系统实用程序
    328. tasksel tasksel/first multiselect standard ssh-server 
    329.  
    330. #开启root登录并设置root密码，关闭普通用户创建
    331. d-i passwd/root-login boolean true
    332. d-i passwd/make-user boolean false
    333.  
    334. # Root密码，可以是明文
    335. #d-i passwd/root-password password $root_password
    336. #d-i passwd/root-password-again password $root_password
    337.  
    338. # root用户密码使用crypt(3)哈希进行加密(apt install -y whois) (mkpasswd -m sha-512 生成密钥)
    339. d-i passwd/root-password-crypted password $root_password
    340.  
    341. # 普通用户创建
    342. #d-i passwd/make-user boolean true
    343. #d-i passwd/user-fullname string Debian User
    344. #d-i passwd/username string $common_user
    345.  
    346. # 普通用户密码，可以是明文
    347. #d-i passwd/user-password password $common_password
    348. #d-i passwd/user-password-again password $common_password
    349.  
    350. # 普通用户密码使用crypt(3)哈希进行加密(apt install -y whois) (mkpasswd -m sha-512 生成密钥)
    351. #d-i passwd/user-password-crypted password $common_password
    352.  
    353. #允许弱密码在用户账户创建时被接受
    354. d-i user-setup/allow-password-weak boolean true
    355.  
    356. # 时钟与时区设置
    357. d-i clock-setup/utc boolean true
    358. d-i time/zone string $time_zone
    359. d-i clock-setup/ntp boolean false
    360. #d-i clock-setup/ntp-server string ntp.example.com
    361.  
    362. # uefi引导，强制使用gpt分区表
    363. d-i partman-efi/non_efi_system boolean true
    364. d-i partman-partitioning/choose_label string gpt
    365. d-i partman-partitioning/default_label string gpt
    366.  
    367. # 配置磁盘 LVM xfs
    368. d-i partman-auto/method string lvm
    369. d-i partman-auto/disk string /dev/sda
    370. d-i partman-lvm/device_remove_lvm boolean true
    371. d-i partman-lvm/confirm boolean true
    372. d-i partman-lvm/confirm_nooverwrite boolean true
    373. d-i partman-auto/choose_recipe select atomic
    374. d-i partman/default_filesystem string xfs
    375.  
    376. # partman在没有确认的情况下自动分区
    377. d-i partman-partitioning/confirm_write_new_label boolean true
    378. d-i partman/choose_partition select finish
    379. d-i partman/confirm boolean true
    380. d-i partman/confirm_nooverwrite boolean true
    381.  
    382. # 基本系统安装
    383. #d-i  base-installer/kernel/p_w_picpath string linux-server
    384.  
    385. #设置apt
    386. #d-i apt-setup/security_host string mirrors.aliyun.com
    387. #d-i apt-setup/security_path string /ubuntu
    388. #d-i debian-installer/allow_unauthenticated string false
    389. #d-i pkgsel/upgrade select safe-upgrade
    390. #d-i pkgsel/language-packs multiselect 
    391. #d-i pkgsel/update-policy select none
    392. #d-i pkgsel/updatedb boolean trueb
    393.  
    394. # 禁止在安装的时候弹出CD/DVD扫描提示
    395. d-i apt-setup/non-free boolean true
    396. d-i apt-setup/contrib boolean true
    397. d-i apt-setup/cdrom/set-first boolean false
    398. d-i apt-setup/cdrom/set-next boolean false
    399. d-i apt-setup/cdrom/set-failed boolean false
    400.  
    401. # 安装额外的软件包，不更新系统
    402. d-i pkgsel/include string openssh-server vim vim-tiny sudo whois git firewalld curl
    403. d-i pkgsel/upgrade select none
    404.  
    405. # grub安装
    406. d-i grub-installer/only_debian boolean true
    407. d-i grub-installer/with_other_os boolean true
    408. d-i grub-installer/bootdev string default
    409. d-i grub-installer/skip boolean false
    410. d-i grub-installer/bootdev string /dev/sda
    411. #d-i lilo-installer/skip boolean false
    412.  
    413. # 安装完成之后不要弹出安装完成的界面，直接重启
    414. d-i finish-install/reboot_in_progress note
    415.  
    416. # 允许ssh服务使用root用户登录
    417. d-i preseed/late_command string in-target sed -i '$ a\PermitRootLogin yes' /etc/ssh/sshd_config
    418. EOF
    419.  
    420. echo "enable tftp dhcp"
    421. systemctl enable tftpd-hpa isc-dhcp-server apache2
    422.  
    423. echo "restart tftpd-hpa isc-dhcp-server"
    424. systemctl restart tftpd-hpa isc-dhcp-server apache2
    425.  
    426.    echo -e "\033[32mThe pxe server Install Sussess...\033[0m" 
    427.   else
    428.    echo -e "\033[33mThe pxe server Install Failed...\033[0m" 
    429.     exit 1
    430.    fi
    431.   else
    432.    echo -e "\033[31mThe pxe server Install already...\033[0m"
    433. fi
    434. }
    435.  
    436. main (){
    437. 	install_pxe_server
    438. }
    439.  
    440. main

    执行一键安装

     bash /debian_pxe_server_bios_uefi_install.sh

    pxe 网络启动，bios

    pxe 网络启动，UEFI

    自动化安装(支持debian11 12)bios+uefi

    安装完成，查看

  • 相关阅读:
    四种强大且隐秘的缓存
    【元宇宙欧米说】数藏的社交与艺术收藏价值探讨
    Springboot楼盘在线销售平台7txdy计算机毕业设计-课程设计-期末作业-毕设程序代做
    大学排行榜 ： qs全球世界 大学排行榜
    Vivado IP中Generate Output Products的设置说明
    成为会带团队的技术人 架构设计：治理好系统复杂度才最务实
    10-09 周一 图解机器学习之深度学习感知机学习
    SpringBoot如何避免SQL注入漏洞呢？
    HarmonyOS/OpenHarmony原生应用开发-华为Serverless认证服务说明（二）
    6.Tomcat概述与部署
  • 原文地址：https://blog.csdn.net/hanzheng260561728/article/details/140377556