RockyLinux 9 PXE Server bios+uefi 自动化部署 RockLinux 8 9

#!/bin/bash
# -*- coding: utf-8 -*-
# Author: make.han 
# Email: CIASM@CIASM
# Date: 2024/07/24
# rockylinux 8 9 action pxe server
# PXE Redhat rockylinux almalinx oraclelinux 8 9
 
#tftp variable configuration
tftp_port=69
tftp_user=tftp
tftp_catalogue=/var/lib/tftpboot
 
#dhcp ip address variable configuration
nic_network_name=`ifconfig -s | awk 'NR>1 && !/^lo/ && !/^idrac/ && !/^br/ && !/^veth/ && !/^docker/{print $1; exit}'`
host_IP=`ifconfig -a | grep inet | grep -v '127.0.0.1' | awk '{ print $2}' | awk 'NR==1'`
MASK="255.255.255.0"
BROADCAST_ADDRESS="192.168.11.255"
ROUTERS="192.168.11.1"
SUBNET="192.168.11.0"
DNS="8.8.8.8"
RANGE="192.168.11.50 192.168.11.80"
 
root_password='$6$4QaHWOfkEYxT2Dv6$3h5T/4AT/vkINa.R.9tToEUwro5YqD2UjulKRQ8k8ZMjqJOhib23nZ/fnKKgRh5TRaTg6I1mIa8VWJxmKQR7o0'
 
# apache2 variable configuration
apache_port=80
apache_catalogue=/var/www/html
 
#syslinux variable configuration
syslinux_download_url=https://mirrors.edge.kernel.org/pub/linux/utils/boot/syslinux/syslinux-4.07.tar.gz
syslinux_gz=syslinux-4.07.tar.gz
syslinux_catalogue=syslinux-4.07
 
# rockylinx download variable configuration
rockylinux8_download_url=https://download.rockylinux.org/pub/rocky/8/isos/x86_64/Rocky-8.10-x86_64-dvd1.iso
rockylinux9_download_url=https://download.rockylinux.org/pub/rocky/9/isos/x86_64/Rocky-9.4-x86_64-dvd.iso
rockylinux8_iso=Rocky-8.10-x86_64-dvd1.iso
rockylinux9_iso=Rocky-9.4-x86_64-dvd.iso
 
# rockylinx 8 9 catalogue
rockylinx_cfg=rockylinx_cfg
rockylinx_iso=rockylinx_iso
rockylinux8_catalogue=rockylinux8.10
rockylinux9_catalogue=rockylinux9.4
 
 
install_pxe_server (){
 
if ! [ -x "$(command -v dhcpd)" ]; then
 
	if [ $? -eq 0 ];then
	
	
echo "install tftp dhcp"
dnf install tftp tftp-server dhcp-server httpd syslinux net-tools -y
 
echo "stop selinx"
sed -i 's/SELINUX=enforcing/SELINUX=disabled/' /etc/selinux/config 
setenforce 0
 
echo "firewalld tftp"
yum install -y curl
firewall-cmd --zone=public --add-port=$tftp_port/tcp --permanent && firewall-cmd --reload
firewall-cmd --zone=public --add-port=$tftp_port/udp --permanent && firewall-cmd --reload
 
echo "apache2 firewall"
firewall-cmd --zone=public --add-port=$apache_port/tcp --permanent && firewall-cmd --reload
 
echo "configuration dhcpd.conf"
rm -rf /etc/dhcp/dhcpd.conf
cat >> /etc/dhcp/dhcpd.conf << EOF
option domain-name         "$DNS";
option domain-name-servers  $DNS;
default-lease-time 2592000;
max-lease-time 2592000;
authoritative;
 
# add follows
option space pxelinux;
option pxelinux.magic code 208 = string;
option pxelinux.configfile code 209 = text;
option pxelinux.pathprefix code 210 = text;
option pxelinux.reboottime code 211 = unsigned integer 32;
option architecture-type code 93 = unsigned integer 16;
 
subnet $SUBNET  netmask $MASK {
    range dynamic-bootp $RANGE;
    option broadcast-address $BROADCAST_ADDRESS;
    option routers $ROUTERS;
 
    #add follows
    class "pxeclients" {
        match if substring (option vendor-class-identifier, 0, 9) = "PXEClient";
        # PXE servers hostname or IP address
        next-server $host_IP;
        if option architecture-type = 00:07 {
            filename "BOOTX64.EFI";
        }
        else {
            filename "pxelinux.0";
        }
    }
}
EOF
 
echo "restrat dhcpd"
systemctl enable --now dhcpd tftp
 
echo "mkdir catalogue rockylinux cfg ISO save"
mkdir -p $apache_catalogue/{$rockylinx_cfg,$rockylinx_iso}
 
echo "download rockylinux 8 9"
curl -o $apache_catalogue/$rockylinx_iso/$rockylinux8_iso $rockylinux8_download_url
curl -o $apache_catalogue/$rockylinx_iso/$rockylinux9_iso $rockylinux9_download_url 
 
mkdir -p /var/pxe/{$rockylinux8_catalogue,$rockylinux9_catalogue}
mkdir -p $tftp_catalogue/{$rockylinux8_catalogue,$rockylinux9_catalogue}
 
echo "mount rockylinux 8 9"
mount -t iso9660 -o loop,ro $apache_catalogue/$rockylinx_iso/$rockylinux8_iso /var/pxe/$rockylinux8_catalogue
mount -t iso9660 -o loop,ro $apache_catalogue/$rockylinx_iso/$rockylinux9_iso /var/pxe/$rockylinux9_catalogue
 
echo "Mount an image on startup"
sed -i "$ a $apache_catalogue/$rockylinx_iso/$rockylinux8_iso  /var/pxe/$rockylinux8_catalogue/ iso9660 defaults,loop,ro 0 0" /etc/fstab 
sed -i "$ a $apache_catalogue/$rockylinx_iso/$rockylinux9_iso  /var/pxe/$rockylinux9_catalogue/ iso9660 defaults,loop,ro 0 0" /etc/fstab 
 
echo "http config"
mv /etc/httpd/conf.d/welcome.conf /etc/httpd/conf.d/welcome.conf.org
sed -i "s#DirectoryIndex index.html#DirectoryIndex index.html index.php index.cgi#"  /etc/httpd/conf/httpd.conf
sed -i "s#Options Indexes FollowSymLinks#Options FollowSymLinks#"  /etc/httpd/conf/httpd.conf
sed -i "s#AllowOverride None#AllowOverride All#"  /etc/httpd/conf/httpd.conf
sed -i '$a ServerTokens Prod' /etc/httpd/conf/httpd.conf
 
echo "copy vmlinuz initrd.img"
cp -rf /var/pxe/$rockylinux8_catalogue/images/pxeboot/{vmlinuz,initrd.img} $tftp_catalogue/$rockylinux8_catalogue
cp -rf /var/pxe/$rockylinux9_catalogue/images/pxeboot/{vmlinuz,initrd.img} $tftp_catalogue/$rockylinux9_catalogue
 
 
echo "add pxeboot.conf"
cat >> /etc/httpd/conf.d/pxeboot.conf<<EOF
# create new
Alias /$rockylinux8_catalogue /var/pxe/$rockylinux8_catalogue
<Directory /var/pxe/$rockylinux8_catalogue>
    Options Indexes FollowSymLinks
    # IP address you allow to access
 
    Require ip 127.0.0.1 $SUBNET/$MASK
</Directory>
 
# create new
Alias /$rockylinux9_catalogue /var/pxe/$rockylinux9_catalogue
<Directory /var/pxe/$rockylinux9_catalogue>
    Options Indexes FollowSymLinks
    # IP address you allow to access
 
    Require ip 127.0.0.1 $SUBNET/$MASK
</Directory>
EOF
 
#下载syslinux-4.07.tar.gz，用于支持Bios 模式安装esxi
echo "low version syslinux"
curl -o /$syslinux_gz $syslinux_download_url
tar -zxf /$syslinux_gz -C /
cp -rf /$syslinux_catalogue/core/pxelinux.0 $tftp_catalogue/
cp -rf /$syslinux_catalogue/com32/menu/menu.c32 $tftp_catalogue/
cp -rf /$syslinux_catalogue/com32/menu/vesamenu.c32 $tftp_catalogue/
 
echo "mkdir pxelinux.cfg"
mkdir -p $tftp_catalogue/pxelinux.cfg
cat <<EOF>>$tftp_catalogue/pxelinux.cfg/default
# change like follows
 
#Official page display
default vesamenu.c32
 
#Simple page display
#default menu.c32  
 
#Set the home page timeout period according to project requirements timeout 30
timeout 300 
 
#/var/lib/tftpboot/下，命名为you.png
#menu background ubunutu.png
 
menu title ########## PXE Boot Menu #########
display boot.msg
 
 
label Auto Rockylinux8.10
   menu label ^Auto Install Rockylinux8.10
   kernel $rockylinux8_catalogue/vmlinuz
   append initrd=$rockylinux8_catalogue/initrd.img ip=dhcp inst.ks=http://${host_IP}/$rockylinx_cfg/Rockylinux8.10-ks.cfg
 
label Auto Rockylinux9.4
   menu label ^Auto Install Rockylinux9.4
   kernel $rockylinux9_catalogue/vmlinuz
   append initrd=$rockylinux9_catalogue/initrd.img ip=dhcp inst.ks=http://${host_IP}/$rockylinx_cfg/Rockylinux9.4-ks.cfg
 
 
label Manual Rockylinux8.10
  menu label ^Manual Install Rockylinux8.10
  kernel $rockylinux8_catalogue/vmlinuz
  append initrd=$rockylinux8_catalogue/initrd.img ip=dhcp inst.repo=http://${host_IP}/$rockylinux8_catalogue
 
 
label Manual Rockylinux9.4
  menu label ^Manual Install Rockylinux9.4
  kernel $rockylinux9_catalogue/vmlinuz
  append initrd=$rockylinux9_catalogue/initrd.img ip=dhcp inst.repo=http://${host_IP}/$rockylinux9_catalogue
 
label local
   #menu default
   com32 chain.c32
   menu label Boot from ^local drive
   localboot 0xffff
menu end
EOF
 
echo "creation grub.cfg"
cat <<EOF>>$tftp_catalogue/grub.cfg
# ubuntu 24
set default="3"
 
set timeout=10
set gfxpayload=keep
set color_normal=white/black
 
function load_video {
  insmod video_bochs
  insmod video_cirrus
  insmod all_video
}
 
load_video
insmod gzio
insmod part_msdos
insmod part_gpt
insmod ext2
insmod xfs
insmod png
insmod gfxterm
insmod gfxmenu
terminal_output gfxterm
background_image -m stretch bg.png
 
menuentry 'EFI Firmware System Setup'  'uefi-firmware' {
  fwsetup
}
 
menuentry 'Reboot System' {
  reboot
}
 
menuentry 'Shutdown System' {
  halt
}
 
 
menuentry 'Auto Install Rockylinux 8.10' {
    linuxefi $rockylinux8_catalogue/vmlinuz  ip=dhcp inst.ks=http://${host_IP}/$rockylinx_cfg/Rockylinux8.10-ks.cfg
    initrdefi $rockylinux8_catalogue/initrd.img
}
 
 
menuentry 'Auto Install Rockylinux 9.4' {
    linuxefi $rockylinux9_catalogue/vmlinuz  ip=dhcp inst.ks=http://${host_IP}/$rockylinx_cfg/Rockylinux9.4-ks.cfg
    initrdefi $rockylinux9_catalogue/initrd.img
}
 
menuentry 'Manual Install Rockylinux 8.10' {
    linuxefi $rockylinux8_catalogue/vmlinuz  ip=dhcp inst.repo=http://${host_IP}/$rockylinux8_catalogue
    initrdefi $rockylinux8_catalogue/initrd.img
}
 
menuentry 'Manual Install Rockylinux 9.4' {
    linuxefi $rockylinux9_catalogue/vmlinuz  ip=dhcp inst.repo=http://${host_IP}/$rockylinux9_catalogue
    initrdefi $rockylinux9_catalogue/initrd.img
}
EOF
 
 
echo "add rockylinx 9.4 cfg"
cat <<EOF>>$apache_catalogue/$rockylinx_cfg/Rockylinux9.4-ks.cfg
# automatically proceed for each steps
graphical
 
# AppStream
repo --name="AppStream" --baseurl="http://${host_IP}/$rockylinux9_catalogue/AppStream"
 
# Use network installation
url --url="http://${host_IP}/$rockylinux9_catalogue"
 
# install disk
ignoredisk --only-use=sda
 
# selinux stop
selinux --disabled
 
# keyboard layouts
keyboard us
 
# system locale
lang en_US
 
# network settings
network  --bootproto=dhcp --ipv6=auto --activate --hostname=localhost
network --bootproto=static --device=em2 --ip=192.168.3.100 --netmask=255.255.255.0 --gateway=192.168.3.11 --nameserver=8.8.8.8 --ipv6=auto --activate
 
# root password you generated above
rootpw --iscrypted $root_password
 
# System timezone
timezone Asia/Shanghai --isUtc
 
# Run the Setup Agent on first boot
firstboot --disable
 
# Firewall configuration
auth --passalgo=sha512 --useshadow
firewall --enabled --ssh
firstboot --disable
 
# Automated low-level formatting
zerombr
 
#Automatic partition, / partition uses all space, disable home partition
autopart --type=lvm --fstype=xfs --nohome
 
# initialize all partition tables
clearpart --all --initlabel
#clearpart --none --initlabel
 
 
# partitioning
# for [/boot/efi], it needs only for UEFI clients
#part pv.106 --fstype="lvmpv" --ondisk=sda --size=919974
#part /boot --fstype="xfs" --ondisk=sda --size=1024
#part /boot/efi --fstype="efi" --ondisk=sda --size=600 --fsoptions="umask=0077,shortname=winnt"
#volgroup ro --pesize=4096 pv.106
#logvol swap --fstype="swap" --size=8611 --name=swap --vgname=ro
#logvol / --fstype="xfs" --size=911360 --name=root --vgname=ro
 
# reboot after installing
reboot
 
%packages
@^minimal-environment
@console-internet
kexec-tools
net-tools
vim
unzip
wget
tmux
git
tree
curl
jq
%end
 
%post
yum clean all
yum makecache
yum install http://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm -y
sed -i 's/#PermitRootLogin prohibit-password/PermitRootLogin yes/' /etc/ssh/sshd_config
%end
EOF
 
echo "add Rockylinux8.10-ks.cfg"
cat <<EOF>>$apache_catalogue/$rockylinx_cfg/Rockylinux8.10-ks.cfg
# create new
# automatically proceed for each steps
graphical
 
# AppStream
repo --name="AppStream" --baseurl="http://${host_IP}/$rockylinux8_catalogue/AppStream"
 
# Use network installation
url --url=http://${host_IP}/$rockylinux8_catalogue
 
# install disk
ignoredisk --only-use=sda
 
# selinux stop
selinux --disabled
 
# keyboard layouts
keyboard us
 
# system locale
lang en_US
 
# network settings
network  --bootproto=dhcp --ipv6=auto --activate --hostname=localhost
network --bootproto=static --device=em2 --ip=192.168.3.100 --netmask=255.255.255.0 --gateway=192.168.3.11 --nameserver=8.8.8.8 --ipv6=auto --activate
 
# root password you generated above
rootpw --iscrypted $root_password
 
# System timezone
timezone Asia/Shanghai --isUtc
 
# Run the Setup Agent on first boot
firstboot --enable
 
# Firewall configuration
firewall --enabled --port=22:tcp
 
# Automated low-level formatting
zerombr
 
#Automatic partition, / partition uses all space, disable home partition
autopart --type=lvm --fstype=xfs --nohome
 
# initialize all partition tables
clearpart --all --initlabel
 
# partitioning
# for [/boot/efi], it needs only for UEFI clients
#part /boot/efi --fstype="efi" --ondisk=sda --size=4096 --fsoptions="defaults,uid=0,gid=0,umask=0077,shortname=centos"
#part /boot --fstype="xfs" --size=4096
#part pv.12 --grow --fstype="lvmpv" --size=871120
#volgroup ro --pesize=4096 pv.12
#logvol swap  --fstype="swap" --size=4096 --name=swap --vgname=ro
#logvol /  --fstype="xfs" --size=871120 --name=root --vgname=ro
 
# reboot after installing
reboot
 
%packages
@^minimal-environment
kexec-tools
net-tools
vim
unzip
wget
tmux
git
tree
curl
jq
tar
lm_sensors
lm_sensors-libs
%end
 
%post
yum clean all
yum makecache
yum install http://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm -y
%end
EOF
 
 
echo "uefl add"
mkdir -p /rpm
yum install yum-utils -y
yumdownloader --resolve --destdir=/rpm shim grub2-efi-x64 syslinux-tftpboot
cd /rpm
rpm2cpio shim-x64-*.rpm | cpio -dimv
rpm2cpio grub2-efi-x64-*.rpm | cpio -dimv
rpm2cpio syslinux-tftpboot-* | cpio -dimv
cp ./boot/efi/EFI/BOOT/BOOTX64.EFI $tftp_catalogue/
cp ./boot/efi/EFI/rocky/grubx64.efi $tftp_catalogue/
chmod 644 $tftp_catalogue/{BOOTX64.EFI,grubx64.efi}
 
#Copy the EFI boot image from the boot directory
echo "Copy the EFI boot image from the boot directory"
mkdir -p $tftp_catalogue/uefi
cp -rf /rpm/boot/efi/EFI/rocky/* $tftp_catalogue/uefi/
 
echo "copy pxelinux"
mkdir -p $tftp_catalogue/pxelinux
cp /rpm/tftpboot/* $tftp_catalogue/pxelinux/
 
echo "restrat dhcp http tftp"
systemctl restart dhcpd httpd tftp
 
echo "Deleting an rpm directory"
rm -rf /rpm
 
   echo -e "\033[32mThe esxi pxe server Install Sussess...\033[0m" 
  else
   echo -e "\033[33mThe esxi pxe server Install Failed...\033[0m" 
    exit 1
   fi
  else
   echo -e "\033[31mThe esxi pxe server Install already...\033[0m"
fi
}
 
main (){
	install_pxe_server
}
 
main