jumpserver部署

本次安装jumpserver版本为1.5.9。主机为192.168.10.21。环境要求

python 3版本

mysql >=5.6，要求编码为utf-8

redis 4版本

1获取镜像

[root]#docker load -i mysql_v5.6.48-docker_image.tar.gz docker pull mysql:5.6.48也行

[root]#docker load -i redis_v4.0.14-docker_image.tar.gz docker pull redis:4.0.14也行

[root]#docker load -i jumpserver_v1.5.9_all-docker-image.tar.gz docker pull jumpserver/jms_all:1.5.9也行

2配置mysql

[root]#mkdir /opt/mysql 用于mysql的client和server配置文件挂载

[root]#mkdir /opt/mysqldata 用于mysql的数据保存在宿主机上

[root]#docker run -it --rm mysql:5.6.48 bash

8d73ef9557e6

[root]#docker cp 8d73ef9557e6:/etc/mysql/mysql.conf.d/mysqld.cnf /opt/mysql

[root]#docker cp 8d73ef9557e6:/etc/mysql/conf.d/mysql.cnf /opt/mysql

[root]#echo "default-character-set=utf8" >> /opt/mysql/mysql.cnf client端配置

[root]#echo "character-set-server=utf8" >> /opt/mysql/mysqld.cnf server端配置

[root]#docker run -it -d -p 3306:3306 -v /opt/mysql/mysql.cnf:/etc/mysql/conf.d/mysql.cnf -v /opt/mysql/mysqld.cnf:/etc/mysql/mysql.conf.d/mysqld.cnf -v /mysqldata:/var/lib/mysql -e MYSQL_ROOT_PASSWORD="123456" mysql:5.6.48

mysql>create database jumpserver default charset 'utf8'; 创建jumpserver数据库

mysql>grant all on jumpserver.*to 'jumpserver'@'%' identified by 'qawsed!'; 授权设密码，密码必须为字符串

注意：这里要验证数据库权限，确保jumpserver用户有权限访问

3配置redis

[root]#docker run -it -d -p 6379:6379 redis:4.0.14

4部署jumpserver

1生成加密秘钥和初始化token

if ["$SECRET_KEY" = ""];then SECRET_KEY=`cat /dev/urandom |tr -dc A-Za-z0-9 |head -c 50`;echo "SECRET_KEY=$SECRET_KEY" >> ~/.bashrc;echo $SECRET_KEY;else echo $SECRET_KEY;fi

EPCYNMpp1NXvrp58DKWO5Mf4nnwh9Foy8m4qViXVRHj7ylza7J

if ["$BOOTSTRAP_TOKEN" = ""];then BOOTSTRAP_TOKEN=`cat /dev/urandom |tr -dc A-Za-z0-9 |head -c 16`;echo "BOOTSTRAP_TOKEN=$BOOTSTRAP_TOKEN" >> ~/.bashrc;echo $BOOTSTRAP_TOKEN;else echo $BOOTSTRAP_TOKEN;fi

8wrpElnseN3lGZdd

2起容器

docker run -d -v /opt/jumpserverdata:/opt/jumpserver/data/media -p 80:80 -p 2222:2222 -e SECRET_KEY=EPCYNMpp1NXvrp58DKWO5Mf4nnwh9Foy8m4qViXVRHj7ylza7J -e BOOTSTRAP_TOKEN=8wrpElnseN3lGZdd -e DB_HOST=192.168.10.21 -e DB_PORT=3306 -e DB_USER=jumpserver -e DB_PASSWORD="qawsed!" -e DB_NAME=jumpserver -e REDIS_HOST=192.168.10.21 -e REDIS_PORT=6379 -e REDIS_PASSWORD= jumpserver/jms_all:1.5.9

注意：因为所有容器起在同一台服务器上，所以地址都是本地地址，如果是其他服务器，地址需要更换