搭建jumpserver堡垒机（一）

1.搭建jumpserver堡垒机（一）01-09

2.搭建jumpserver堡垒机（二）01-12 3.搭建jumpserver堡垒机--基本使用（三）01-12

条件：
python 3.6.x
mariab 或 mysql 大于等于 5.6
redis大于等于 5.6

一. 环境初始化
1.关闭防火墙
iptables -F
systemctl stop firewalld
systemctl disable firewalld
vi /etc/selinux/config 修改 SELINUX=disabled
查看验证
gentenforce

2.配置yum源，配置阿里云的yum源和epel源
curl -o /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
curl -o /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo
yum clean all
yum makecache

3.安装系统初始化所需软件
yum install -y bash-completion vim lrzsz wget expect net-tools nc nmap tree dos2unix htop iftop iotop unzip telnet sl psmisc nethogs glances bc ntpdate openldap-devel gcc

4. 安装jumpserver运行所依赖的环境
yum install -y git python-pip automake autoconf python-devel sshpass readline-devel zlib zilb-devel openssh openssl-devel

5.修改系统字符集，修改成中文
localedef -c -f UTF-8 -i zh_CN zh_CN.UTF-8
export LC_ALL=zh_CN.UTF-8
一直生效需要写入配置文件
echo 'LC_ALL="zh_CN.UTF-8"' > /etc/locale.conf

检查字符编码
locale

二.部署数据库mysql5.6（https://dev.mysql.com/downloads/mysql/）
cd /opt
wget https://cdn.mysql.com/archives/mysql-5.6/MySQL-5.6.49-1.el7.x86_64.rpm-bundle.tar
mkdir mysql5.6
tar -xf MySQL-5.6.49-1.el7.x86_64.rpm-bundle.tar -C mysql5.6
cd mysql5.6
yum localinstall ./*

1.安装完成后，检查mysql配置文件
修改 mysqld_safe里面的内容，原本是mariadb的换成mysql
cat /etc/my.cnf
1)mysql安装后会出现一个默认随机密码
cat ~/.mysql_secret
# The random password set for the root user at Thu Jan 9 05:33:17 2025 (local time): ozYc0qv5OFIBzcP3

2.启动mysql
systemctl start mysql
systemctl enable mysql

3.修改root密码（必须执行这一步）
mysqladmin -uroot -pozYc0qv5OFIBzcP3 password 123456
后面修改密码可进入mysql修改
mysql -uroot -p
update mysql.user set password=password('123456') where user='root';
刷新后生效
flush privileges;

4.创建jumpserver数据库，设置默认编码utf8
mysql -uroot -p
create database jumpserver default charset 'utf8' collate 'utf8_bin';
创建用户，设置密码
create user 'jumpserver'@'%' IDENTIFIED BY '123456';
给用户授予访问数据库的权限
grant all privileges on jumpserver.* to 'jumpserver'@'%' identified by '123456';
刷新后生效
flush privileges;

三.安装python3.6
1.下载python3.6源码
cd /opt
wget https://www.python.org/ftp/python/3.6.10/Python-3.6.10.tgz
2.源码安装
tar zxvf Python-3.6.10.tgz
cd Python-3.6.10
指定安装目录
./configure --prefix=/opt/python3/
make
make install
配置python3的环境变量
vim /etc/profile
添加
PATH="/opt/python3/bin:$PATH"

四. python3创建虚拟环境(virtualenv工具)
1. 网慢的话先换一下pip3源
mkdir ~/.pip
vim ~/.pip/pip.conf
添加以下内容
[global]
index-url = https://mirrors.aliyun.com/pypi/simple/

2.安装virtualenv工具
pip3 install virtualenv

3.创建python3虚拟环境
cd /opt
virtualenv --python=python3 jmp_venv1

4.激活虚拟环境，默认修改了环境变量(执行以下命令后，命令行前面会有（jmp_venv1）)
source /opt/jmp_venv1/bin/activate

5.退出虚拟环境
deactivate

###########
如果有以下报错：
（ Could not find a version that satisfies the requirement virtualenv (from versions: )
No matching distribution found for virtualenv
pip is configured with locations that require TLS/SSL, however the ssl module in Python is not available.）
需要安装openssl工具(yum install openssl openssl-devel),然后重新编译安装python3

五.redis数据库部署（内存性（缓存性）数据库）
1. yum安装
yum install redis -y

2.开启服务
systemctl start redis

3.使用
redis-cli