CN106569802A - Manufacturing method and manufacturing device of ISO installation mirror images of firewalls - Google Patents

Abstract

The invention discloses a method and device for making a firewall ISO installation image, capable of making firewall ISO installation image files suitable for different platforms of servers, virtual machines, and industrial computers. The method includes: S1, writing custom compilation, and installation scripts , different parameters are set, and are suitable for compilation of firewall ISOs of different platforms and different installation methods, wherein the platform includes a server, an industrial computer and a virtual machine, and the installation method includes PXE, CD-ROM and USB; S2, according to the input The compilation option parameters are different to compile and install the boot kernel image; S3, according to the input compilation option parameters, complete the production of firewall installation ISO image files for different platforms and different installation methods.

Description

Method and device for making firewall ISO installation image

technical field

The invention relates to the technical field of firewalls, in particular to a method and device for making a firewall ISO installation image.

Background technique

The upgrade image file of the firewall network device is generally provided externally in the form of ROM. For the empty device that needs to leave the factory, it is generally produced by burning a memory card, or when providing an ISO installation image, it can be provided through a U disk, CD-ROM, PXE, etc. For installation in mass production, the PXE installation method is the first choice. For a single or a small number of devices, you can choose U disk or CD-ROM to install the ISO image. At the same time, the ISO image file can also be released for users to use.

However, the ISO installation image produced by the existing method for making the firewall ISO installation image is only applicable to a certain fixed platform, such as a server, a virtual machine or an industrial computer, and the corresponding ISO cannot be produced according to the different platforms used. Install the mirror.

Contents of the invention

Aiming at the deficiencies and defects of the prior art, the present invention provides a method and device for making a firewall ISO installation image.

On the one hand, the embodiment of the present invention proposes a method for making a firewall ISO installation image, including:

S1, write custom compilation, installation script, set different parameters, be applicable to the compilation of the firewall ISO of different platforms, different installation methods, wherein, described platform comprises server, industrial computer and virtual machine, described installation method comprises PXE, CD - ROM and USB;

S2. Compile different installation and boot kernel images according to different input compilation option parameters;

S3. Complete the production of firewall installation ISO image files for different platforms and different installation methods according to the input compilation option parameters.

On the other hand, an embodiment of the present invention proposes a device for making a firewall ISO installation image, including:

The setting unit is used to write custom compilation and installation scripts, and different parameters are set, which is applicable to the compilation of firewall ISOs of different platforms and different installation methods, wherein the platform includes a server, an industrial computer and a virtual machine, and the installation method includes PXE, CD-ROM and USB;

The compilation unit is used to compile different installation and boot kernel images according to the input compilation option parameters;

The production unit is used to complete the production of firewall installation ISO image files for different platforms and different installation methods according to the input compilation option parameters.

The present invention has following beneficial effects:

By writing custom compilation and making scripts, making and modifying the kernel root file system, and compiling according to different input compilation parameters, we can produce firewall ISO installation image files suitable for different platforms of servers, virtual machines, and industrial computers, and the IOS installation image after production It can be provided to users for use or published externally.

Description of drawings

Fig. 1 is a schematic flow chart of an embodiment of a method for making a firewall ISO installation image of the present invention;

FIG. 2 is a schematic structural diagram of an embodiment of a device for making a firewall ISO installation image according to the present invention.

detailed description

In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly described below in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are the Some, but not all, embodiments are invented. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

Referring to Fig. 1, the present embodiment discloses a method for making a firewall ISO installation image, including:

S1. Write custom compilation and installation scripts, set different parameters, and compile firewall ISOs suitable for different platforms and different installation methods;

In specific applications, write custom compilation and installation script mk.sh, set different parameters, suitable for different platforms: server, industrial computer or virtual machine, different installation methods: PXE or CD-ROM, USB firewall ISO compilation, Roughly as follows:

1)-v: virtual machine version

2)-s: server version

3)-c: Install by cd-rom or U disk

4)-p: Install as a pxe server

The code to generate the boot image and iso file for installing the kernel for the X86 architecture is as follows:

1)./mk.sh-cv

2)./mk.sh-pv

3). ./mk.sh-cs

4). ./mk.sh-ps

S2. Compile different installation and boot kernel images according to different input compilation option parameters;

In this embodiment, different installation and boot kernel images bzinstall_s_iso, bzinstall_v_iso, bzinstall_s_pxe, bzinstall_v_pxe are compiled according to the input compilation option parameters, and the specific steps are as follows:

1) Configure the kernel option to support the storage device (such as hard disk, CF card) driver, file system (ext3, ext4) support, network card device driver support, etc. commonly used by servers, industrial computers or virtual machines;

2) Modify the passwd file of the kernel root file system, so that after the kernel is installed and booted, the firewall installation script can be run directly to complete the installation of the firewall. The modified content is as follows:

root:x:0:0:root:/root:/bin/sh

console:x:0:0:root:/root:/root/install.sh

tty0:x:0:0:root:/root:/root/install.sh

3) Modify the inittab file of the kernel root file system, and set different display terminals after the kernel is installed and booted according to different compilation input parameters, so as to ensure that the installation process can be displayed normally on the terminal and complete the interaction with the user. The modified content is as follows:

null::respawn:/sbin/agetty-a console-n 9600 tty1 vt100 virtual terminal---virtual machine

null::respawn:/sbin/agetty-a tty0-n 9600 tty0 vt100 console terminal -----server

null::respawn:/sbin/agetty-a console-n 9600 ttyS0 vt100 serial port terminal --- industrial computer

4) Put the firewall installation script install.sh in the /root directory (2) and run /root/install.sh after modifying the kernel startup to ensure that the firewall installation script is compiled into the installation boot kernel image;

5) Finally, start compiling the kernel according to the input compilation option parameters and generate boot kernel image files bzinstall_s_iso, bzinstall_v_iso, bzinstall_s_pxe, bzinstall_v_pxe.

S3. Complete the production of firewall installation ISO image files for different platforms and different installation methods according to the input compilation option parameters.

In this embodiment, according to the different compilation option parameters input, the production of firewall installation ISO image files of different platforms and different installation methods is completed: server_install.iso, virtual_install.iso, bzinstall_s_pxe.iso, bzinstall_v_pxe.iso, specifically as follows:

1) Create the root directory process/iso, process/iso/CD_root, process/iso/CD_root/firewall created by the firewall installation ISO image file;

2) Copy the corresponding installation boot kernel image (bzinstall_s_iso, bzinstall_v_iso, bzinstall_s_pxe, bzinstall_v_pxe) to process/iso/CD_root/bzimage.ins according to the different parameters of the input compilation options;

3) Copy the installation scripts (virtual_install.sh, server_install.sh) corresponding to the firewall to process/iso/CD_root/install.sh according to the different parameters of the input compilation options;

4) Copy the boot programs isolinux.bin and isolinux.cfg necessary for ISO installation to process/iso/CD_root/;

5) Copy the image file corresponding to the firewall to process/iso/CD_root/firewall/firewall.bin according to the different parameters of the input compilation options, including other files necessary for the firewall to start, such as configuration files, production files, License, etc.;

6) Finally, use the mkisofs command to package the root directory CD_root created by the firewall installation ISO image file to generate an ISO image file. According to the input compilation option parameters, ISO image files of different platforms and different installation methods can be generated (server_install.iso, virtual_install.iso , bzinstall_s_pxe.iso, bzinstall_v_pxe.iso), the general order of packaging is as follows:

mkisofs -o virtual_install.iso -b isolinux/isolinux.bin -c isolinux/boot.cat -no-emul-boot-boot-load-size 4-boot-info-table CD_root.

The method for making the firewall ISO installation image provided by the embodiment of the present invention is to make and modify the kernel root file system by writing custom compilation and making scripts, and according to the different compilation parameters of the input compilation, it is suitable for different platforms of servers, virtual machines, and industrial computers. The installation image file of the firewall ISO, the created IOS installation image can be provided to users or released to the outside world.

Referring to Fig. 2, the present embodiment discloses a device for making a firewall ISO installation image, including:

Setting unit 1 is used to write custom compilation and installation scripts, set different parameters, and is applicable to the compilation of firewall ISOs of different platforms and different installation methods, wherein the platform includes servers, industrial computers and virtual machines, and the installation methods including PXE, CD-ROM and USB;

The compilation unit 2 is used to compile different installation and boot kernel images according to different input compilation option parameters;

The production unit 3 is used to complete the production of firewall installation ISO image files for different platforms and different installation methods according to the input compilation option parameters.

The firewall ISO installation image production device provided by the embodiment of the present invention, by writing custom compilation and production scripts, making and modifying the kernel root file system, and compiling according to different input compilation parameters, it is suitable for different platforms of servers, virtual machines, and industrial computers The installation image file of the firewall ISO, the created IOS installation image can be provided to users or released to the outside world.

On the basis of the aforementioned device embodiments, the device may also include the following structures not shown in the figure:

The configuration unit is used to configure the kernel option support server, industrial computer or virtual machine commonly used storage device driver, file system support, and network card device driver support before the compilation unit works;

The first modification unit is used to modify the passwd file of the kernel root file system, so that the firewall installation script can be run directly after the kernel is installed and the boot kernel gets up, to complete the installation of the firewall;

The second modification unit is used to modify the inittab file of the kernel root file system, and different display terminals are set after the kernel is installed and booted according to different input parameters of the compilation, so as to ensure that the installation process can be displayed normally on the terminal and complete the interaction with the user;

The placement unit is used to put the firewall installation script install.sh in the /root directory to ensure that the firewall installation script is compiled into the installation boot kernel image.

On the basis of the aforementioned device embodiments, the device may also include the following structures not shown in the figure:

Create unit, be used for creating the root directory process/iso, process/iso/CD_root, process/iso/CD_root/firewall that firewall installation ISO image file makes before described production unit work;

The first copy unit is used to copy the corresponding installation and boot kernel image to process/iso/CD_root/bzimage.ins according to the different input compilation option parameters;

The second copying unit is used to copy the installation script corresponding to the firewall to process/iso/CD_root/install.sh according to the different input compilation option parameters;

The third copying unit is used to copy the necessary boot programs isolinux.bin and isolinux.cfg for ISO installation to process/iso/CD_root/;

The fourth copying unit is used to copy the image file corresponding to the firewall to process/iso/CD_root/firewall/firewall.bin according to the different input compilation option parameters;

The packaging unit is used to package the root directory CD_root created by the firewall installation ISO image file through the mkisofs command to generate an ISO image file.

Although the embodiments of the present invention have been described in conjunction with the accompanying drawings, those skilled in the art can make various modifications and variations without departing from the spirit and scope of the present invention. within the bounds of the requirements.

Claims (6)

1. A method for making a firewall ISO installation image, characterized in that, comprising: S1, write custom compilation, installation script, set different parameters, be applicable to the compilation of the firewall ISO of different platforms, different installation methods, wherein, described platform comprises server, industrial computer and virtual machine, described installation method comprises PXE, CD - ROM and USB; S2. Compile different installation and boot kernel images according to different input compilation option parameters; S3. Complete the production of firewall installation ISO image files for different platforms and different installation methods according to the input compilation option parameters. 2. The method according to claim 1, characterized in that, before the S2, further comprising: Configure kernel options to support common storage device drivers, file system support, and network card device driver support for servers, industrial computers or virtual machines; Modify the passwd file of the kernel root file system, so that after the kernel is installed and booted, the firewall installation script can be run directly to complete the installation of the firewall; Modify the inittab file of the kernel root file system, and set different display terminals after installing and booting the kernel according to different compilation input parameters, so as to ensure that the installation process can be displayed normally on the terminal and complete the interaction with the user; Put the firewall installation script install.sh in the /root directory to ensure that the firewall installation script is compiled into the installation boot kernel image. 3. The method according to claim 1 or 2, characterized in that, before the S3, further comprising: Create the root directory process/iso, process/iso/CD_root, process/iso/CD_root/firewall created by the firewall installation ISO image file; Copy the corresponding installation boot kernel image to process/iso/CD_root/bzimage.ins according to the input compilation option parameters; Copy the installation script corresponding to the firewall to process/iso/CD_root/install.sh according to the input compilation option parameters; Copy the boot programs isolinux.bin and isolinux.cfg necessary for ISO installation to process/iso/CD_root/; Copy the image file corresponding to the firewall to process/iso/CD_root/firewall/firewall.bin according to the input compilation option parameters; Use the mkisofs command to package the root directory CD_root created by the firewall installation ISO image file to generate an ISO image file. 4. A device for making a firewall ISO installation image, characterized in that, comprising: The setting unit is used to write custom compilation and installation scripts, and different parameters are set, which is applicable to the compilation of firewall ISOs of different platforms and different installation methods, wherein the platform includes a server, an industrial computer and a virtual machine, and the installation method includes PXE, CD-ROM and USB; The compilation unit is used to compile different installation and boot kernel images according to the input compilation option parameters; The production unit is used to complete the production of firewall installation ISO image files for different platforms and different installation methods according to the input compilation option parameters. 5. The device according to claim 4, further comprising: The configuration unit is used to configure the kernel option support server, industrial computer or virtual machine commonly used storage device driver, file system support, and network card device driver support before the compilation unit works; The first modification unit is used to modify the passwd file of the kernel root file system, so that the firewall installation script can be run directly after the kernel is installed and the boot kernel gets up, to complete the installation of the firewall; The second modification unit is used to modify the inittab file of the kernel root file system, and different display terminals are set after the kernel is installed and booted according to different input parameters of the compilation, so as to ensure that the installation process can be displayed normally on the terminal and complete the interaction with the user; The placement unit is used to put the firewall installation script install.sh in the /root directory to ensure that the firewall installation script is compiled into the installation boot kernel image. 6. The device according to claim 5, further comprising: Create unit, be used for creating the root directory process/iso, process/iso/CD_root, process/iso/CD_root/firewall that firewall installation ISO image file makes before described production unit work; The first copy unit is used to copy the corresponding installation and boot kernel image to process/iso/CD_root/bzimage.ins according to the different input compilation option parameters; The second copying unit is used to copy the installation script corresponding to the firewall to process/iso/CD_root/install.sh according to the different input compilation option parameters; The third copying unit is used to copy the necessary boot programs isolinux.bin and isolinux.cfg for ISO installation to process/iso/CD_root/; The fourth copying unit is used to copy the image file corresponding to the firewall to process/iso/CD_root/firewall/firewall.bin according to the different input compilation option parameters; The packaging unit is used to package the root directory CD_root created by the firewall installation ISO image file through the mkisofs command to generate an ISO image file.