CentOS 7.x 安装jumpserver-2.8.2

当前环境。

  0 16:42:29 root@jumpserver,172.16.2.9:~ # cat /etc/redhat-release 
CentOS Linux release 7.9.2009 (Core)

下载jumpserver安装包。

# /server是我的数据盘。
  0 16:42:32 root@jumpserver,172.16.2.9:~ # mkdir -p /server/packages/
  0 16:42:34 root@jumpserver,172.16.2.9:~ # cd /server/packages/
  0 16:42:45 root@jumpserver,172.16.2.9:/server/packages # wget https://github.com/jumpserver/installer/releases/download/v2.8.2/jumpserver-installer-v2.8.2.tar.gz

解压。

  0 16:43:18 root@jumpserver,172.16.2.9:/server/packages # mkdir -p /server/app
  0 16:43:18 root@jumpserver,172.16.2.9:/server/packages # tar xf jumpserver-installer-v2.8.2.tar.gz -C /server/app/
  0 16:45:16 root@jumpserver,172.16.2.9:/server/app # mv jumpserver-installer-v2.8.2 jumpserver

配置jumpserver，使相关数据存储在数据盘。

  0 16:45:16 root@jumpserver,172.16.2.9:/server/app # mkdir -p /server/app/jumpserver/data /server/data/docker /server/data/jumpserver /server/backup/jumpserver/db_backup
# 修改jumpserver的config生成目录。
  0 16:48:45 root@jumpserver,172.16.2.9:/server/app # sed -i 's#/opt/jumpserver#/server/app/jumpserver#g' /server/app/jumpserver/scripts/utils.sh /server/app/jumpserver/scripts/7_upgrade.sh /server/app/jumpserver/scripts/const.sh /server/app/jumpserver/jmsctl.sh /server/app/jumpserver/README.md /server/app/jumpserver/config_init/README.md
# 修改jumpserver备份db路径。
  0 16:50:11 root@jumpserver,172.16.2.9:/server/app # sed -i 's#/opt/jumpserver#/server/backup/jumpserver#g' /server/app/jumpserver/scripts/5_db_backup.sh /server/app/jumpserver/scripts/6_db_restore.sh
# 修改jumpserver容器相关路径。
## 容器镜像、配置文件、构建信息等路径。
  0 16:50:18 root@jumpserver,172.16.2.9:/server/app # sed -i 's#/var/lib/docker#/server/data/docker#g' /server/app/jumpserver/config-example.txt /server/app/jumpserver/scripts/2_install_docker.sh
  0 16:50:26 root@jumpserver,172.16.2.9:/server/app # sed -i 's#/opt/docker#/server/data/docker#g' /server/app/jumpserver/scripts/2_install_docker.sh
## 容器的volume映射路径。
  0 16:50:32 root@jumpserver,172.16.2.9:/server/app # sed -i 's#/opt/jumpserver#/server/app/jumpserver/data#g' /server/app/jumpserver/scripts/1_config_jumpserver.sh /server/app/jumpserver/config-example.txt
# 修改mysql测试连接的命令。
  0 16:50:35 root@jumpserver,172.16.2.9:/server/app # vim /server/app/jumpserver/scripts/utils.sh
command="CREATE TABLE IF NOT EXISTS test(id INT); DROP TABLE test;q"

这里为了公共平台数据库统一管理，我们使用外接数据库。部署步骤，登入创建对应数据库。

  0 16:57:43 root@mysql-public,172.16.2.4:~ # mysql -uroot -p -S /server/data/mysql_3309/mysql.sock
> create database jumpserver default charset 'utf8' collate 'utf8_bin';
> grant all privileges on jumpserver.* to 'jumpserver'@'172.16.%' identified by 'xxxxxxxxxxxxxxx';
> flush privileges;

开始安装jumpserver。

  0 17:01:49 root@jumpserver,172.16.2.9:/server/app # cd jumpserver/
  0 17:01:57 root@jumpserver,172.16.2.9:/server/app/jumpserver # ./jmsctl.sh install
# 观察下相关目录没啥问题就一路回车到第七步骤。
7. 配置 MySQL
是否使用外部 MySQL? (y/n)  (默认为 n): y
请输入 mysql 的主机地址 (默认为 mysql): 172.16.2.4
请输入 mysql 的端口 (默认为 3306): 3309 
请输入 mysql 的数据库 (默认为 jumpserver): 
请输入 mysql 的用户名 (默认为 root): jumpserver
请输入 mysql 的密码 (无默认值): xxxxxxxxxxxxxx
mysql: [Warning] Using a password on the command line interface can be insecure.
完成
# 安装完成后会有一些提示信息，挑有用的记一下就可以了。
--------------------------------------------------提示信息--------------------------------------------------------
>>> 安装完成了
1. 可以使用如下命令启动, 然后访问
./jmsctl.sh start

2. 其它一些管理命令
./jmsctl.sh stop
./jmsctl.sh restart
./jmsctl.sh backup
./jmsctl.sh upgrade
更多还有一些命令, 你可以 ./jmsctl.sh --help 来了解

3. Web 访问
http://172.16.2.9:8080
https://172.16.2.9:8443
默认用户: admin  默认密码: admin

4. SSH/SFTP 访问
ssh admin@172.16.2.9 -p2222
sftp -P2222 admin@172.16.2.9

5. 更多信息
我们的官网: https://www.jumpserver.org/
我们的文档: https://docs.jumpserver.org/
-----------------------------------------------------------------------------------------------------------------

启动jumpserver

  0 17:08:50 root@jumpserver,172.16.2.9:/server/app/jumpserver # ./jmsctl.sh start
ERROR: for luna  Container "8893d65b927b" is unhealthy.
ERROR: Encountered errors while bringing up the project
# 如果遇到如上报错，执行下面的命令, 直到出现 Check service status 之后再启动。
  0 17:10:38 root@jumpserver,172.16.2.9:/server/app/jumpserver # docker logs -f jms_core
2021-03-31 17:10:53 Check service status: gunicorn -> running at 1158
2021-03-31 17:10:53 Check service status: flower -> running at 1411
2021-03-31 17:10:53 Check service status: daphne -> running at 1666
  0 17:12:21 root@jumpserver,172.16.2.9:/server/app/jumpserver # ./jmsctl.sh start
jms_redis is up-to-date
jms_core is up-to-date
Creating jms_guacamole ... done
Creating jms_koko      ... done
Creating jms_luna      ... done
Creating jms_celery    ... done
Creating jms_lina      ... done
Creating jms_nginx     ... done

web端打开http://172.16.2.9:8080，默认用户: admin 默认密码: admin。

写作不易，转载请注明出处，谢谢~~