Quick Setup

Sys admins know the key to being productive is coming to grips with the automation setup offered by an operating system. In this article, I cover creating a basic automation setup for Linux hosts. The tools used include PXE boot, web services, and DHCP. At the end of this article, you should have a complete, fully automated PXE boot and Kickstart system to install and configure a fully customized CentOS server.

PXE (or Preboot eXecution Environment) started in the early 1990s as an improvement to a series of protocols used to bootstrap diskless clients. The idea was to provide a complete boot configuration over the network, so a diskless client, or a computer with no operating system installed, could download a complete configuration at boot time (Figure 1).

Previous protocols, such as BOOTP, had similar goals; however, these tools were very error prone and brittle. The old tools also needed lots of customization, and different clients required different configurations. Intel addressed these issues in the late 1990s with its "Wired for Management" standard. Part of Intel's system was PXE. Other manufacturers later followed suit and adopted the PXE design.

Understanding PXE

Like its predecessors, the PXE protocol uses the Trivial File Transfer Protocol (TFTP) to transfer files and DHCP for delivering network configuration data, such as an IP address. PXE also mixes in additional components to create an easy-to-use infrastructure suitable for installing servers, as well as booting diskless clients.

When PXE initiates at boot time, it sends out a request for a DHCP server. The server then replies with a special option that points the machine to look at the TFTP server. The boot file is then pulled down via TFTP, and the system boots. Once the initial boot occurs, the server kickstarts an install using the configuration file built using the Kickstart Configurator (Figure 2).

Getting Started

For this article, I assume all the work is performed in a discrete test lab that is not connected to any other production servers or clients. Automation done incorrectly or misconfiguration can end in tears! I also assume that because this is a test environment, any firewalls and SELinux are turned off or disabled.

The first step in setting up an automated deployment system is creating the master server that will provide all your required deployment services, such as DHCP, TFTP, and web services. A secondary guest machine is also required to test your PXE boot configuration and installation. Any configuration or setups on the guest machine will be overwritten. As noted previously, the test installation is using CentOS 6.5.

The first step is to install a base server with a static IP as you normally would. Installing the basic Desktop package is also required, because some steps will require it later for producing the Kickstart files. In a production environment, there's no need for the GUI. You do need a reasonable amount of disk space allocated to hold the installation files. Approximately 15GB of space should be sufficient for the lab. Everything in this tutorial is done using the root account.

Once the server is installed and configured, install the required packages for the automation experiment using the yum command:

yum -y install dhcp tftp tftp-server httpd syslinux

All the installation and configuration files for TFTP and CentOS will be stored in a discrete folder structure. In an ideal world, a separate dedicated partition would be used.

On the root folder, create a data directory with www and tftpd subdirectories. Next, assign the required rights to the root /data folder so that the files on the master server can be read by booting clients. You can do this with the following two commands:

mkdir -p /data/{www,tftpd,tftpd/x64}
chmod -R 755 /data

To populate the web server with the installation files, copy the CentOS DVD contents to the web server. You can copy directly from a physical DVD, but mounting a local ISO image is usually easier, especially in virtual environments. Do this with the command below, substituting the centos_dvd.iso for your CentOS ISO install file:

mount -o loop centos_dvd.iso /media

Once mounted, use:

cp -ar /media/. /data/www/

The installation files are being kept in an alternative location to the standard web root folder, so the httpd.conf file for Apache needs to be edited to reflect this alternative location. Use

vi /etc/httpd/conf/http.conf

to edit the file. Within this file, locate the [DocumentRoot] section of the httpd.conf file and edit DocumentRoot to /data/www.

Next, find the <Directory> statement and edit it to look like the following:

<Directory>
        Options Indexes FollowSymLinks
        Order Deny,Allow
        Deny from all
        Allow from 127.0.0.1 192.168.0.0/24
</Directory>

Once updated, save and exit (use :wq to exit and save changes or :q! to cancel without saving changes.)

Good practice dictates that you set the web server to start automatically using the command:

chkconfig --level 35 httpd on && service httpd start

The service should now start and will automatically restart on boot. Any errors will be shown on the screen. If you get an error stating that the folder must be a directory, SELinux may not have been disabled properly.

Now you can configure the TFTPD server. The TFTP service is managed by the xinetd service. All the files managed by xinetd are located in the /etc/xinetd.d folder, such as the one you are interested in: tftpd.

You need to configure only a few options with the TFTP server configuration file. The requirement is to edit just two lines, and you can do this using:

vi /etc/xinetd.d/tftp

Locate and edit the line server_args and change it to reflect your folder layout. For example, after editing, the file should look something like this:

server_args  = -s /data/tftpd

This argument points the TFTP service to use that directory as the root for files to serve up TFTP. Also, modify the argument disable to no as follows,

disable = no

then save the changes and exit.

The last change is to set xinetd to autostart using the command:

chkconfig --level 35 xinetd on &&  xinetd start

To check that TFTPD is working, use the command

lsof -i :69

to check for a response on the correct port. If all is well, you will see something like that shown in Listing 1.

[root@infra xinetd.d]# lsof -i :69
COMMAND  PID USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
xinetd  1606 root    5u  IPv4  10816      0t0  UDP *:tftp

Once TFTPD is proven to work, you can copy the PXE boot files across to their new home. All of the TFTP boot files are to be stored in /data/tftpd/x64/. To be clear, these are the boot files that you use to boot the 64-bit installation.

As a tidy sys admin, it is a good idea to put all the files required at boot time into a dedicated folder. In this example, a folder called x64 was created that contains just the bare essentials to boot. Copy the PXE boot files into the folder using the command:

cp /data/www/images/pxeboot/* /data/tftpd/x64/

Finally, you need to copy the files that make up the boot menu and the bootstrap that PXE will use.

The files required by PXE must be copied to the correct folder location.

cd /usr/share/syslinux/
cp chain.c32 memdisk menu.c32 pxelinux.0 /data/tftpd/

The actual menu and installation configuration is housed in the folder called pxelinux.cfg with the standard name default. Later, I will create a very simple text-based menu.

To enable the system to boot in an automated fashion, the systems need to specify a Kickstart file to use after the initial PXE boot. In this example infrastructure, the Kickstart configuration program is installed before use. Install this with the command:

yum -y install system-config-kickstart.noarch

This is why I suggested earlier that you install at least the "Desktop" group of files. Once installed, a new menu item, Kickstart, appears under the System Tools menu.

The Kickstart configuration builder options are straightforward. Work through each menu, configuring the items and settings desired. Once complete, save this, using the Save menu, into the new web server root folder /data/www.

One tip I can offer is to add a line below the disk setup that just reads autopart. Without this line, the automation will not complete automatically.

A key component of the PXE environment is a DHCP server. To make PXE work, you need to set up additional configuration options within the DHCP server configuration (Figure 3). Assuming this is to be the only DHCP server on the network, copy the CentOS DHCP sample file across from /usr/share/doc/dhcp-4.1.1/dhcpd.conf.sample.

Use the command:

cp /usr/share/doc/dhcp-4.1.1/dhcpd.conf.sample /etc/dhcpd/dhcpd.conf

It may request that you overwrite the original. Reply yes. You can make modifications to the system to make it suit your needs.

Open the file using the command:

vi /etc/dhcpd/dhcpd.conf

Before the subnet group of statements, additional DHCP option statements are required. Add these two statements near the top of the file:

option option-128 code 128 = string;
option option-129 code 129 = text;

Modify the option domain-name and domain-name-servers to reflect DNS servers you want to use for any client picking up a DHCP address.

Remove all the subnet range groups, except the one that includes the dynamic-bootp option. Modify the subnet to reflect your test lab, 192.168.0.0 with a netmask set to 255.255.255.0. Modify the range-dynamic-bootp statement to reflect the range of IP addresses you want to be available to your DHCP server. For the sake of argument, I'd use approximately 20 addresses. In a production environment, additional DHCP options need to be set to include DNS servers and a gateway address. Below this, add the lines:

allow booting;
allow bootp;
filename "pxelinux.0"

Once the DHCP has been configured, test your DHCP server by using:

chkconfig --level 35 dhcpd on && service dhcpd start

Last, you need to modify the PXE boot environment so you can automate your Kickstart environment.

In looking at the default file mentioned earlier, it should be obvious how this all fits together. Because you are using a fully automated installation, it is safer to err on the side of caution and have the default timeout revert to boot local disk. Failure to do this could result in tears, because the default install will wipe out any server that PXE-boots the install.

Setting up the file is trivially easy. On the command line, type:

vi /data/tftpd/pxelinux.cfg/default

To set up a minimum configuration file, and add the lines in Listing 2. Some of the file setup is obvious, such as ontimeout and menu title. Looking more closely at the label 1 entry, it is possible to see the layout. The second line refers to the Linux bootstrap copied into the x64 folder. Finally, the append passes additional command-line parameters. The ks argument should point to the Kickstart file you created earlier. Don't forget to substitute the IP address above for your server!

default menu.c32
prompt 0
timeout 100
ontimeout local
menu title *** PXE Menu ***
label 1
menu label ^1) Install CentOS x64 Edition
kernel x64/vmlinuz
append initrd=x64/initrd.img ks=http://192.168.0.52/ks_desktop.cfg
label 2
menu label ^2) Boot from local disk
localboot

The second menu item – Boot from local disk – is easy enough to understand and can be copied and pasted directly into the default file.