[Freeipa-users] Easy deployment

Sigbjorn Lie sigbjorn at nixtra.com
Mon Oct 22 21:14:26 UTC 2012


On 09/27/2012 03:58 PM, Dmitri Pal wrote:
> On 09/25/2012 04:18 PM, Sigbjorn Lie wrote:
>> On 09/25/2012 12:17 AM, James James wrote:
>>> Hi guys,
>>>
>>> we are planning to install 150 freeipa clients and I was wondering 
>>> if there is a way to easily install (from kickstart) nfsv4 client.
>>>
>>> I can add host with
>>>
>>> # ipa host-add --password=secret
>>>
>>> But to get the keytab (host and service), I have to log into the 
>>> machine, launch kinit and get the keytab.
>>>
>>> This will be very painful for 150 clients ....
>>>
>>> Any hints is welcome ...
>>>
>>>
>>> _______________________________________________
>>> Freeipa-users mailing list
>>> Freeipa-users at redhat.com
>>> https://www.redhat.com/mailman/listinfo/freeipa-users
>> Hi,
>>
>> I am working on integrating what you are asking for into 
>> OneClickKick. OneClickKick which is a web based GUI for managing DHCP 
>> server and PXE booting. The current version can read the host objects 
>> from IPA's LDAP, and you can use these to generate PXE boot files for 
>> kickstarting RHEL/Fedora, preseeding Debian/Ubuntu installations, do 
>> BIOS upgrades, run LIVE environments, etc.
>>
>> What I have done in the past is to add a line like this to the post 
>> section of the kickstart:
>> /usr/sbin/ipa-client-install --domain="ix.test.com" 
>> --principal="ipajoinuser" --password="somepassword" -U -f
>>
>> This is not ideal even though the kickstart is saved in a database 
>> and only made available dynamically trough a php script to the host 
>> that's enabled for kickstarting. It is not saved in a text file on 
>> the disk. The next version will include tighter integration with IPA 
>> where a One Time Password is set for the host being kickstarted at 
>> the time it's enabled for kickstarting, and this password is seeded 
>> dynamically when the host is served it's kickstart file.
>>
>> The next version will also have the PXE Enrollment boot image updated 
>> to supporting adding new hosts directly into IPA. The PXE Enrollment 
>> is support for adding a new host simply to PXE booting it, logging 
>> on, and giving it a hostname and assigning it with a kickstart 
>> profile to load the machine directly from the console of the new 
>> machine.
>>
>> Adding of machines directly to IPA from the web UI will also be 
>> available in the next version. This allows you to do everything from 
>> adding the host, to selecting the kickstart profile group, and 
>> enabling for PXE installation/kickstart in 1 step.
>>
>> It can also search trough the /var/log/messages file to find new 
>> hosts that's unknown to it's naming sources and directly add these.
>>
>> You can also select a group of machine to install, so if you have 
>> your 150 machines in one group you can select the entire group for 
>> installation.
>>
>>
>> See the project website or contact me for more information:
>> http://sourceforge.net/projects/oneclickkick/
>>
>>
>
> Have you looked at Foreman?

Foreman did not exist back when I started working on OneClickKick.

I've not looked much into Foreman later.



Rgds,
Siggi




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20121022/4dc5c85b/attachment.htm>


More information about the Freeipa-users mailing list