ipxe是一个不错的网络启动软件，通过与dnsmasq提供的dns、tftp等服务，实现服务器/PC通过PXE启动，并获取启动文件，可以启动systemrescue CD系统。通过定制systemrescue CD，实现关闭默认防火墙、设置密码、开启VNC、加装storecli文件等，实现配置服务器的IPMI、磁盘RAID等操作，相对于传统进入服务器BIOS进行BMC配置、磁盘RAID等操作，节省了时间、提高了效率、提升了工程师的荣誉感。

前提

准备一台CentOS7.9的系统。

mkdir -p /data/wwwroot/ipxe/{centosboot,kickstart,menu,pxefile,tftpboot,pxelinux}
yum -y install gcc binutils make perl liblzma xz-devel mtools mkisofs

配置ipxe

mkdir -p /soft/ipxe && cd /soft/ipxe

cd /soft/ipxe/src/
cat <<'EOF'>/soft/ipxe/src/bootserver.ipxe
#!ipxe
dhcp
chain http://192.168.234.128/ipxe/boot.ipxe
EOF
make bin/undionly.kpxe EMBED=bootserver.ipxe
cp bin/undionly.kpxe /data/wwwroot/ipxe/tftpboot/
ls /data/wwwroot/ipxe/tftpboot/

boot.ipxe文件

cat <<'EOF'>/data/wwwroot/ipxe/tftpboot/boot.ipxe
#!ipxe
set web-ip 192.168.234.128
#console --x 1024 --y 768
#console --picture http://${web-ip}/ipxe/menu/splash.png

:start
menu Welcome to iPXE's Boot Menu
item
item --gap -- ------------------------- Utilities ------------------------------
item openeduler-22.03-sp3    openeduler-22.03-sp3
item centos-7.9    centos-7.9
item usbos usbos
item systemrescue systemrescue
item reboot     Reboot
item exit       Exit (boot local disk)
choose --default systemrescue --timeout 3000 target && goto ${target}

:openeduler-22.03-sp3
dhcp
initrd http://${web-ip}/ipxe/boot/openeduler-22.03-sp3/initrd.img
kernel http://${web-ip}/ipxe/boot/openeduler-22.03-sp3/vmlinuz inst.ks=http://${web-ip}/ipxe/kickstart/openeuler-22.03-sp3.ks.cfg inst.repo=http://${web-ip}/os/openeuler-22.03-sp3/
imgargs vmlinuz initrd=initrd.img inst.ks=http://${web-ip}/ipxe/kickstart/openeuler-22.03-sp3.ks.cfg inst.repo=http://${web-ip}/os/openeuler-22.03-sp3/ ksdevice=bootif net.ifnames=0 biosdevname=0
boot || goto failed
goto start

:centos-7.9
dhcp
initrd http://${web-ip}/ipxe/boot/centos-7.9/initrd.img
kernel http://${web-ip}/ipxe/boot/centos-7.9/vmlinuz ks=http://${web-ip}/ipxe/kickstart/centos-7.9.ks.cfg inst.repo=http://${web-ip}/os/centos-7.9/
imgargs vmlinuz ks=http://${web-ip}/ipxe/kickstart/centos-7.9.ks.cfg inst.repo=http://${web-ip}/os/centos-7.9/ ksdevice=bootif net.ifnames=0 biosdevname=0
boot || goto failed
goto start

:usbos
dhcp
kernel http://${web-ip}/ipxe/memdisk/memdisk || read void
initrd http://${web-ip}/os/usbos/USBOSV3.iso || read void
imgargs memdisk iso raw || read void
boot || goto failed
goto start

:systemrescue
dhcp
kernel http://${web-ip}/ipxe/memdisk/memdisk || read void
initrd http://${web-ip}/os/systemrescue/systemrescue-11.00-amd64.20240603.iso || read void
imgargs memdisk iso raw || read void
boot || goto failed
goto start


:reboot
reboot

:exit
exit

EOF

memdisk

yum install -y syslinux
mkdir -p /data/wwwrroot/ipxe/memdisk
cp -f /usr/share/syslinux/memdisk /data/wwwroot/ipxe/memdisk/

配置dnsmasq

yum install dnsmasq -y
cat <<'EOF'>/etc/dnsmasq.d/pxe.conf
bind-interfaces
dhcp-range=192.168.234.15,192.168.234.250,255.255.255.0,8h
dhcp-option=option:router,192.168.234.2
dhcp-option=option:dns-server,223.5.5.5,223.6.6.6
dhcp-boot=tag:ipxe,boot.ipxe
dhcp-boot=tag:!ipxe,tag:bios,undionly.kpxe
dhcp-match=set:bios,option:client-arch,0
dhcp-match=set:ipxe,175
enable-tftp
tftp-root=/data/wwwroot/ipxe/tftpboot/
EOF
systemctl enable dnsmasq && systemctl start dnsmasq

dhcp-boot=undionly.kpxe,server.name,192.168.234.128


ss -nupl | grep dnsmasq | egrep "67|69"

配置nginx

yum install epel-release -y
yum install nginx -y
cat <<'EOF'>/etc/nginx/nginx.conf
user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log;
pid /run/nginx.pid;
include /usr/share/nginx/modules/*.conf;
events {
    worker_connections 1024;
}
http {
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';
    access_log  /var/log/nginx/access.log  main;
    sendfile            on;
    tcp_nopush          on;
    tcp_nodelay         on;
    keepalive_timeout   65;
    types_hash_max_size 4096;
    include             /etc/nginx/mime.types;
    default_type        application/octet-stream;
    include /etc/nginx/conf.d/*.conf;
    server {
        listen       80;
        listen       [::]:80;
        server_name  _;
        root         /data/wwwroot/;
        autoindex on;
        include /etc/nginx/default.d/*.conf;
        error_page 404 /404.html;
        location = /404.html {
        }
        error_page 500 502 503 504 /50x.html;
        location = /50x.html {
        }
    }
}

EOF

systemctl start nginx && systemctl enable nginx

准备ISO文件

openeuler-22.03-sp3

mount openEuler-22.03-LTS-SP3-x86_64-dvd.iso /mnt/
mkdir -p /data/wwwroot/os/openeduler-22.03-sp3/
cp -rvf  /mnt/.  /data/wwwroot/os/openeduler-22.03-sp3/
mkdir -p /data/wwwroot/ipxe/boot/openeduler-22.03-sp3/
cp /mnt/isolinux/vmlinuz  /data/wwwroot/ipxe/boot/openeduler-22.03-sp3/
cp /mnt/isolinux/initrd.img  /data/wwwroot/ipxe/boot/openeduler-22.03-sp3/
umount /mnt/
rm -rf openEuler-22.03-LTS-SP3-x86_64-dvd.iso

cat <<'EOF'>/data/wwwroot/ipxe/kickstart/openeuler-22.03-sp3.ks.cfg 
# Generated by Anaconda 36.16.5
# Generated by pykickstart v3.47
#version=DEVEL
# Use graphical install
graphical

%post
#enable kdump
sed  -i "s/ ro / ro crashkernel=1024M,high /" /boot/efi/EFI/openEuler/grub.cfg
%end

# Keyboard layouts
keyboard --vckeymap=cn --xlayouts='cn'
# System language
lang zh_CN.UTF-8

# Use network installation
url --url="http://192.168.234.128/os/openeuler-22.03-sp3/"

%packages
@^minimal-environment

%end

# Generated using Blivet version 3.4.2
ignoredisk --only-use=sda
autopart
# Partition clearing information
clearpart --none --initlabel

# System timezone
timezone Asia/Shanghai

# Root password
rootpw --iscrypted $y$j9T$l3LxKOT45AGD4rTegu7USHWT$MJACOvOmi9d/bepoQ2Wu7UGe.JRLVUNlngHGqvCcLX3


reboot
EOF

centos-7.9

[root@localhost kickstart]# cat centos-7.9.ks.cfg 
#version=DEVEL
# System authorization information
auth --enableshadow --passalgo=sha512
# Use graphical install
graphical
# Run the Setup Agent on first boot
firstboot --enable
ignoredisk --only-use=sda
# Keyboard layouts
keyboard --vckeymap=cn --xlayouts='cn'
# System language
lang zh_CN.UTF-8

# Network information
network  --bootproto=dhcp --device=eth0 --ipv6=auto --activate
network  --hostname=localhost.localdomain

# Use network installation
url --url="http://192.168.234.128/os/centos-7.9/"
# Root password
rootpw --iscrypted $6$FM/bG28ZgtpU3lmq$Ky9IBghyRObR4/zZOXPxqQBFI/5geHw4fv6Zg3OCsSkXNuczXKzaR2EeJz5jpzZd0XaobZwQ7e/NcBOBwyjBk/
# System services
services --enabled="chronyd"
# System timezone
timezone Asia/Shanghai --isUtc
# System bootloader configuration
bootloader --location=mbr --boot-drive=sda
autopart --type=lvm
# Partition clearing information
clearpart --none --initlabel

reboot

%packages
@^minimal
@core
chrony

%end

%addon com_redhat_kdump --disable --reserve-mb='auto'

%end

%anaconda
pwpolicy root --minlen=6 --minquality=1 --notstrict --nochanges --notempty
pwpolicy user --minlen=6 --minquality=1 --notstrict --nochanges --emptyok
pwpolicy luks --minlen=6 --minquality=1 --notstrict --nochanges --notempty
%end

定制systemrescueCD

yum install -y mksquashfs patch xorriso squashfs-tools

cd /data/wwwroot/os/systemrescue
wget ....
sysrescue-customize --unpack -s systemrescue-11.00-amd64.iso -d isocontents
cat <<'EOF'>/data/wwwroot/os/systemrescue/isocontents/filesystem/sysrescue.d/100-defaults.yaml 
---
global:
    copytoram: true
    checksum: true
    nofirewall: true
    loadsrm: false
    #late_load_srm: "https://example.com/myconfig.srm"
    #setkmap: "fr-latin1"
    dostartx: true
    dovnc: true
    rootshell: "/bin/bash"
    #rootcryptpass: "$6$Y.AolXkpG/Js2Zqx$z7J893qtB7jKn3z39ucbgvpkJ6wTrJ8N0CBVr5cJ.uXugGTMTSjMI7qsSTu4UTFGGKpGyEG/BnYNRE6oZFO4b0"
    rootpass: "Lab_1314"
    vncpass: "Lab_1314"

autorun:
    ar_disable: false
    ar_nowait: true
    ar_nodel: false
    ar_attempts: 1
    ar_ignorefail: false
    ar_suffixes: "0,1,2,3,4,5,6,7,8,9,A,B,C,D,E,F"

autoterminal:
    tty2: "/usr/bin/tmux"

sysconfig:
    bash_history:
        100: "setkmap"
EOF

cd /data/wwwroot/os/systemrescue/isocontents/filesystem/autorun
wget https://d2.sddts.cn/d/download/usbos/Unified_storcli_all_os/Linux/MegaRAID.zip
unzip -d . MegaRAID.zip

cd /data/wwwroot/os/systemrescue
sysrescue-customize --rebuild -d systemrescue-11.00-amd64.20240603.iso -s isocontents --overwrite

测试效果

（1）网络启动systemrescue。

（2）网络自动安装openeuler-22.03-sp3

最后修改：2024 年 06 月 05 日
© 允许规范转载
如果觉得我的文章对你有用，请随意赞赏