openEuler 服务器安装 JumpServer (all-in-one 模式)

已于 2023-10-27 10:05:44 修改
阅读量919 收藏 3
点赞数 2
分类专栏： Linux Docker & Podman 文章标签： 服务器 运维 堡垒机/开源 JumpServer openEuler/linux
于 2023-10-20 18:27:26 首次发布
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/ChaITSimpleLove/article/details/133946550
版权

openEuler 服务器安装 JumpServer

JumpServer 简介

openEuler-JumpServer

什么是 JumpServer ？

JumpServer 是广受欢迎的 开源堡垒机，是符合 4A 规范 的专业运维安全审计系统。JumpServer 帮助企业以更安全的方式管控和登录所有类型的资产，实现 事前授权、事中监察、事后审计，满足等保合规 要求。

JumpServer资产

JumpServer 的各种类型资产

JumpServer类型资产

JumpServer 堡垒机支持的资产类型包括：

  • SSH (Linux / Unix / 网络设备 等)；
  • Windows (Web 方式连接 / 原生 RDP 连接)；
  • 数据库 (MySQL / MariaDB / Oracle / SQLServer / PostgreSQL / ClickHouse 等)；
  • NoSQL (Redis / MongoDB 等)；
  • GPT (ChatGPT 等)；
  • 云服务 (Kubernetes / VMware vSphere 等)；
  • Web 站点 (各类系统的 Web 管理后台)；
  • 应用 (通过 Remote App 连接各类应用)；

JumpServer 产品特色或优势

JumpServer优势

JumpServer 的产品特色包括：

  • 开源：零门槛，线上快速获取和安装；
  • 分布式：轻松支持大规模并发访问；
  • 无插件：仅需浏览器，极致的 Web Terminal 使用体验；
  • 多云支持：一套系统，同时管理不同云上面的资产；
  • 云端存储：审计录像云端存储，永不丢失；
  • 多租户：一套系统，多个子公司和部门同时使用；
  • 多应用支持：数据库，Windows 远程应用，Kubernetes。

JumpServer 符合 4A 规范

4A规范

JumpServer 是符合 4A 规范 的堡垒机：

  • Authentication ：身份认证，防止身份冒用和复用；
  • Authorization ：授权控制 ，防止内部误操作和权限滥用；
  • Accounting ：账号管理，人员和资产的管理；
  • Auditing ：安全审计，追溯的保障和事故分析的依据；

JumpServer 堡垒机支持 事前授权、事中监察、事后审计，满足等保合规 要求。

JumpServer 系统架构

应用架构

  • JumpServer 采用 分层架构，分别是 负载层、接入层、核心层、数据层、存储层。
  • JumpServer 应用架构图如下：

JumpServer 系统分层架构

核心项目

jms核心项目

组件说明

  • Core ：【JumpServer API 项目】，是 JumpServer 的核心组件，其他组件依赖此组件启动。
  • Lina：【JumpServer Web UI 项目】。
  • Luna：【JumpServer Web Terminal 项目】。
  • Koko：【JumpServer 字符协议 Connector 项目】，是服务于类 Unix 资产平台的组件，通过 SSH、Telnet 协议提供字符型连接。
  • Lion ：【JumpServer 图形协议 Connector 项目】，依赖 Apache Guacamole，是服务于 Windows 资产平台的组件，用于 Web 端访问 Windows 资产。
  • Omnidb：【JumpServer Web DB 项目】，是服务于数据库的组件，用于可视化界面纳管数据库，3.8.x 版本后由 Chen 组件替代。
  • Razor：【JumpServer RDP 代理 Connector 项目】，是服务于 RDP 协议组件，该组件主要功能是通过 JumpServer Client 方式访问 Windows 资产。
  • Tinker：【JumpServer 远程应用 Connector 项目】。
  • Magnus：【JumpServer 数据库代理 Connector 项目】，是服务于数据库的组件，用于通过客户端代理访问数据库。
  • Celery：是处理异步任务的组件，用于执行 JumpServer 相关的自动化任务。
  • Kael：【JumpServer 连接 GPT 资产的组件项目】。

更多信息请查看：

  • jumpserver 系统架构，https://docs.jumpserver.org/zh/v3/architecture/
  • jumpserver 核心项目，https://github.com/jumpserver

JumpServer 安装部署

JumpServer 支持 在线安装（标准安装） 和 离线安装 两种模式，安装过程可参考文档https://docs.jumpserver.org/zh/master/install/setup_by_fast/

环境要求

  • 操作系统环境：
OS/ArchArchitectureLinux KernelSoft RequirementMinimize Hardware
linux/amd64x86_64>= 4.0wget curl tar gettext iptables python2Core/8GB RAM/60G HDD
linux/arm64aarch64>= 4.0wget curl tar gettext iptables python2Core/8GB RAM/60G HDD
linux/loong64loongarch64== 4.19wget curl tar gettext iptables python2Core/8GB RAM/60G HDD
  • 数据库系统环境：

JumpServer 需要使用 MySQL 或 MariaDB 存储数据，使用 Redis 缓存数据。

此处用户可以使用自建数据库或云数据库，请参考此处的要求：

NameVersionDefault CharsetDefault collationTLS/SSL
MySQL>= 5.7utf8mb4utf8mb4_general_ci✔
MariaDB>= 10.2utf8mb4utf8mb4_general_ci✔
NameVersionSentinelClusterTLS/SSL
Redis>= 5.0✔✖✔

此处我们采用单机在线安装模式，要求宿主机网络可以访问外网。

本案例我们采用如下配置规格进行 JumpServer 的安装部署：

  • OS 系统信息：
OS/ArchArchitectureLinux KernelSoft RequirementMinimize Hardware
openEuler-22.03-LTS-x86_64-dvd.isox86_645.10.0-60.18.0.50.oe2203.x86_64wget curl tar gettext iptables python4Core/8GB RAM/60G HDD

预安装软件，执行如下命令：

yum update && install -y wget curl tar gettext iptables
  • Redis 版本信息：
NameVersionSentinelClusterTLS/SSL
Redis6.2✔✖✔
  • DB 版本信息：
NameVersionDefault CharsetDefault collationTLS/SSL
MariaDB10.6utf8mb4utf8mb4_general_ci✔

网络端口

JumpServer 作为符合 4A 规范 的专业运维安全审计系统，其正常运行需要开放如下网络端口，管理员可根据实际环境中 JumpServer 组件部署的方案，在网络和主机侧开放相关端口。

网络端口列表

端口作用说明
22SSH安装、升级及管理使用
80Web HTTP 服务通过 HTTP 协议访问 JumpServer 前端页面
443Web HTTPS 服务通过 HTTPS 协议访问 JumpServer 前端页面
1521数据库服务Oracle 服务使用
1433数据库服务MS SQLServer 服务使用
3306数据库服务MySQL/MariaDB 服务使用
5432数据库服务PostgreSQL 服务使用
6379数据库服务Redis 服务使用
27017数据库服务MongoDB 服务使用
3389Razor 服务端口RDP Client 方式连接 Windows 资产
2222SSH ClientSSH Client 方式使用终端工具连接 JumpServer，比如 Xshell、PuTTY、MobaXterm、WindTerm 等终端工具
33061Magnus MySQL 服务端口DB Client 方式连接 MySQL 数据库资产
33062Magnus MariaDB 服务端口DB Client 方式连接 MariaDB 数据库资产
54320Magnus PostgreSQL 服务端口DB Client 方式连接 PostgreSQL 数据库资产
63790Magnus Redis 服务端口DB Client 方式连接 Redis 数据库资产
30000-30100Magnus Oracle 服务端口DB Client 方式连接 Oracle 数据库资产，该端口范围可自定义

防火墙常用命令

  • 确认 firewall 的状态为 running
firewall-cmd --state
running
  • 临时开放端口（规则立即生效，重启失效）
firewall-cmd --zone=public --add-port=80/tcp
firewall-cmd --zone=public --add-port=2222/tcp
firewall-cmd --add-rich-rule="rule family="ipv4" source address="172.17.0.1/16" port protocol="tcp" port="8080" accept"
  • 临时删除端口（规则立即生效，重启失效）
firewall-cmd --zone=public --remove-port=80/tcp
firewall-cmd --zone=public --remove-port=2222/tcp
firewall-cmd --remove-rich-rule="rule family="ipv4" source address="172.17.0.1/16" port protocol="tcp" port="8080" accept"
  • 临时删除端口（规则立即生效，重启失效）
firewall-cmd --zone=public --remove-port=80/tcp
firewall-cmd --zone=public --remove-port=2222/tcp
firewall-cmd --remove-rich-rule="rule family="ipv4" source address="172.17.0.1/16" port protocol="tcp" port="8080" accept"
  • 永久放行端口（需要 reload 才能生效）
firewall-cmd --zone=public --add-port=80/tcp --permanent
firewall-cmd --zone=public --add-port=2222/tcp --permanent
firewall-cmd --add-rich-rule="rule family="ipv4" source address="172.17.0.1/16" port protocol="tcp" port="8080" accept" --permanent
firewall-cmd --reload
  • 永久删除端口（需要 reload 才能生效）
firewall-cmd --zone=public --remove-port=80/tcp --permanent
firewall-cmd --zone=public --remove-port=2222/tcp --permanent
firewall-cmd --remove-rich-rule="rule family="ipv4" source address="172.17.0.1/16" port protocol="tcp" port="8080" accept" --permanent
firewall-cmd --reload
  • 查看端口生效规则
firewall-cmd --list-all
...
public (active)
  target: default
  icmp-block-inversion: no
  interfaces: ens32
  sources:
  services: dhcpv6-client ssh
  ports: 80/tcp 2222/tcp
  protocols:
  masquerade: no
  forward-ports:
  source-ports:
  icmp-blocks:
  rich rules:
    rule family="ipv4" source address="172.17.0.1/16" port port="8080" protocol="tcp" accept

在线脚本安装

参考，https://github.com/jumpserver/jumpserver/releases/tag/v3.8.0

  • 国内用户
curl -sSL https://resource.fit2cloud.com/jumpserver/jumpserver/releases/latest/download/quick_start.sh | bash
  • 海外用户
curl -sSL https://github.com/jumpserver/jumpserver/releases/latest/download/quick_start.sh | bash

此处我们安装 JumpServer 版本是 v3.8 ，下载的 quick_start.sh 文件内容如下：

#!/usr/bin/env bash

VERSION=v3.8.0
DOWNLOAD_URL=https://github.com

function install_soft() {
    if command -v dnf > /dev/null; then
      dnf -q -y install "$1"
    elif command -v yum > /dev/null; then
      yum -q -y install "$1"
    elif command -v apt > /dev/null; then
      apt-get -qqy install "$1"
    elif command -v zypper > /dev/null; then
      zypper -q -n install "$1"
    elif command -v apk > /dev/null; then
      apk add -q "$1"
      command -v gettext >/dev/null || {
      apk add -q gettext-dev python3
    }
    else
      echo -e "[\033[31m ERROR \033[0m] $1 command not found, Please install it first"
      exit 1
    fi
}

function prepare_install() {
  for i in curl wget tar iptables; do
    command -v $i &>/dev/null || install_soft $i
  done
}

function get_installer() {
  echo "download install script to /opt/jumpserver-installer-${VERSION}"
  cd /opt || exit 1
  if [ ! -d "/opt/jumpserver-installer-${VERSION}" ]; then
    timeout 60 wget -qO jumpserver-installer-${VERSION}.tar.gz ${DOWNLOAD_URL}/jumpserver/installer/releases/download/${VERSION}/jumpserver-installer-${VERSION}.tar.gz || {
      rm -f /opt/jumpserver-installer-${VERSION}.tar.gz
      echo -e "[\033[31m ERROR \033[0m] Failed to download jumpserver-installer-${VERSION}"
      exit 1
    }
    tar -xf /opt/jumpserver-installer-${VERSION}.tar.gz -C /opt || {
      rm -rf /opt/jumpserver-installer-${VERSION}
      echo -e "[\033[31m ERROR \033[0m] Failed to unzip jumpserver-installer-${VERSION}"
      exit 1
    }
    rm -f /opt/jumpserver-installer-${VERSION}.tar.gz
  fi
}

function config_installer() {
  cd /opt/jumpserver-installer-${VERSION} || exit 1
  sed -i "s/VERSION=.*/VERSION=${VERSION}/g" /opt/jumpserver-installer-${VERSION}/static.env
  ./jmsctl.sh install
  ./jmsctl.sh start
}

function main(){
  if [[ "${OS}" == 'Darwin' ]]; then
    echo
    echo "Unsupported Operating System Error"
    exit 1
  fi
  prepare_install
  get_installer
  config_installer
}

main

或者下载 quick_start.sh 文件后，直接执行如下命令：

bash quick_start.sh

输出如下类似信息：

bash-quick_start.sh

完整信息如下：

Importing GPG key 0xB25E7F66:
 Userid     : "private OBS (key without passphrase) <defaultkey@localobs>"
 Fingerprint: 12EA 74AC 9DF4 8D46 C69C A0BE D557 065E B25E 7F66
 From       : http://repo.openeuler.org/openEuler-22.03-LTS/OS/x86_64/RPM-GPG-KEY-openEuler

Installed:
  tar-2:1.34-4.oe2203.x86_64                                                                                               

download install script to /opt/jumpserver-installer-v3.8.0


       ██╗██╗   ██╗███╗   ███╗██████╗ ███████╗███████╗██████╗ ██╗   ██╗███████╗██████╗
       ██║██║   ██║████╗ ████║██╔══██╗██╔════╝██╔════╝██╔══██╗██║   ██║██╔════╝██╔══██╗
       ██║██║   ██║██╔████╔██║██████╔╝███████╗█████╗  ██████╔╝██║   ██║█████╗  ██████╔╝
  ██   ██║██║   ██║██║╚██╔╝██║██╔═══╝ ╚════██║██╔══╝  ██╔══██╗╚██╗ ██╔╝██╔══╝  ██╔══██╗
  ╚█████╔╝╚██████╔╝██║ ╚═╝ ██║██║     ███████║███████╗██║  ██║ ╚████╔╝ ███████╗██║  ██║
   ╚════╝  ╚═════╝ ╚═╝     ╚═╝╚═╝     ╚══════╝╚══════╝╚═╝  ╚═╝  ╚═══╝  ╚══════╝╚═╝  ╚═╝

                                                                   Version:  v3.8.0  

1. 检查配置文件
配置文件位置: /opt/jumpserver/config
/opt/jumpserver/config/config.txt        [ √ ]
/opt/jumpserver/config/nginx/cert/server.crt     [ √ ]
/opt/jumpserver/config/nginx/cert/server.key     [ √ ]
完成

>>> 安装配置 Docker
1. 安装 Docker
开始下载 Docker 程序 ...
开始下载 Docker Compose 程序 ...
完成

2. 配置 Docker
是否需要支持 IPv6? (y/n)  (默认为 n): 完成

3. 启动 Docker
Created symlink /etc/systemd/system/multi-user.target.wants/docker.service → /etc/systemd/system/docker.service.
完成

>>> 加载 Docker 镜像
[jumpserver/kael:v3.8.0] pulling
[jumpserver/web:v3.8.0] pulling
[jumpserver/koko:v3.8.0] pulling
[jumpserver/core:v3.8.0] pulling
[jumpserver/mariadb:10.6] pulling
[jumpserver/redis:6.2] pulling
[jumpserver/magnus:v3.8.0] pulling
[jumpserver/chen:v3.8.0] pulling
[jumpserver/lion:v3.8.0] pulling
10.6: Pulling from jumpserver/mariadb
eaead16dc43b: Pulling fs layer 
4f6f4832182b: Pulling fs layer 
6eed3156c415: Pulling fs layer 
d1adc5c9f5ec: Waiting 
4f5e88c034ff: Waiting 
e09b3c602366: Waiting 
9896f95913b8: Waiting 
522ebe12904a: Waiting 
v3.8.0: Pulling from jumpserver/lion
99bf4787315b: Waiting 
eaacdd61c025: Waiting 
26d1da19b429: Waiting 
aa4a93627716: Waiting 
e42c672e047b: Waiting 
bcbcd1fe9fe0: Waiting 
3a7da7bf8a7c: Waiting 
b3634a6d92f0: Waiting 
bba4daab2e00: Waiting 
ed3d33e2d240: Waiting 
d534346c5f7b: Waiting 
e61d813b6ad0: Waiting 
v3.8.0: Pulling from jumpserver/kael
eaead16dc43b: Downloading [==========>                                        ]   5.88MB/28.58MB
eaead16dc43b: Downloading [============================>                      ]  16.14MB/28.58MB
eaead16dc43b: Downloading [==========================================>        ]   24.4MB/28.58MB
c40342aa95c2: Waiting 
5b1e577d1705: Waiting 
d1adc5c9f5ec: Download complete 
9b8a874e1e2d: Waiting 
4f4fb700ef54: Waiting 
v3.8.0: Pulling from jumpserver/chen
v3.8.0: Pulling from jumpserver/koko
3240fe174df9: Waiting 
ea2f9ac2eb39: Waiting 
eaead16dc43b: Extracting [>                                                  ]  294.9kB/28.58MB
d9e18c4120e1: Waiting 
6aedef56f24f: Waiting 
1f1a5cf5a065: Waiting 
7f41607db671: Waiting 
7689328b48f7: Waiting 
9896f95913b8: Download complete 
04f575d6fad5: Waiting 
e67fdae35593: Waiting 
eaead16dc43b: Extracting [==================================================>]  28.58MB/28.58MB
dfefa43f7ef9: Waiting 
eaead16dc43b: Pull complete 
4f6f4832182b: Extracting [==================================================>]  1.747kB/1.747kB
98153782a42c: Waiting 
4f6f4832182b: Pull complete 
6eed3156c415: Pull complete 
8127cd7d3437: Waiting 
v3.8.0: Pulling from jumpserver/magnus
v3.8.0: Pulling from jumpserver/core
6.2: Pulling from jumpserver/redis
v3.8.0: Pulling from jumpserver/web
e67fdae35593: Waiting 
321c8788e932: Waiting 
d1adc5c9f5ec: Extracting [==================================================>]     149B/149B
b573062c6e54: Waiting 
99bf4787315b: Extracting [=============================>                     ]  16.22MB/27.14MB
eaacdd61c025: Download complete 
e67fdae35593: e67fdae35593: e67fdae35593: e67fdae35593: Downloading [====================>                              ]  Downloading [====================>                              ]  12.72MB/31.42MB12.4MB/31.42MB
Downloading [====>                                              ]  2.949MB/31.42MB
e855c2f1475c: Waiting 
0668e0cb7eeb: Waiting 
99bf4787315b: Extracting [==================================================>]  27.14MB/27.14MB
4f5e88c034ff: Pull complete 
Downloading [=======================================>           ]  24.83MB/31.42MB4.83MB/31.42MB
e67fdae35593: Downloading [===========================>                       ]  16.98MB/31.42MB
Pull complete e67fdae35593: e67fdae35593: Pull complete 
Downloading [==========================================>        ]  26.47MB/31.42MB
981eb4eb4e29: Waiting 
0c8e33d32ad2: Waiting 
b23242c39ad3: Waiting 
e09b3c602366: Downloading [==================================>                ]  61.26MB/88.87MB
4f4fb700ef54: Waiting 
Extracting [==================================================>]  31.42MB/31.42MB=========>]  31.42MB/31.42MB
Extracting [=============>                                     ]  8.192MB/31.42MB          ]  8.192MB/31.42MB
e67fdae35593: Extracting [========================>                          ]   15.4MB/31.42MB
5dc251960c03: Waiting 
37ad762d263f: Waiting 
2056f85116ef: Waiting 
99bf4787315b: Pull complete 
eaacdd61c025: Pull complete 
26d1da19b429: Downloading [===============================================>   ]  27.65MB/29.4MB
Pull complete e67fdae35593: Pull complete 

Extracting [>                                                  ]  327.7kB/31.42MB27.7kB/31.42MB
26d1da19b429: Pull complete 
aa4a93627716: Pull complete 
e42c672e047b: Pull complete 
bcbcd1fe9fe0: Pull complete 
3a7da7bf8a7c: Pull complete 
ea2f9ac2eb39: Download complete 
e67fdae35593: Extracting [==================================================>]  31.42MB/31.42MB
d9e18c4120e1: Download complete 
3240fe174df9: Pull complete 
ea2f9ac2eb39: Pull complete 
72e611ef6cbd: Pull complete 
d9e18c4120e1: Pull complete 
b35f34aa20f0: Download complete 
1f1a5cf5a065: Pull complete 
076f765c5c0b: Pull complete 
dfefa43f7ef9: Pull complete 
321c8788e932: Pull complete 
1b50c537067e: Downloading [============================>                      ]  4.996MB/8.729MB
d409c959e473: Pull complete 
5dc251960c03: Pull complete 
37ad762d263f: Pull complete 
2056f85116ef: Pull complete 
65ee1d2786fa: Extracting [==================================================>]  1.405kB/1.405kB
272d660811bd: Download complete 
65ee1d2786fa: Pull complete 
cfd4a22d5220: Downloading [======>                                            ]  150.2MB/1.23GB
cfd4a22d5220: Downloading [======>                                            ]  156.1MB/1.23GB
272d660811bd: Pull complete 
4f4fb700ef54: Pull complete 
cfd4a22d5220: Pull complete 
4df962483fe2: Pull complete 
105d66cef279: Pull complete 
a0fc03463301: Pull complete 
222e61094282: Pull complete 
2fcb7dbc00dd: Pull complete 
92e2dfaefa5f: Pull complete 
b8b8d4e4ee39: Pull complete 
153510901956: Pull complete 
Digest: sha256:75204461f39f8d691e40768625c965d77969ea5cfeb48bf31bf0033bcb38636b
Status: Downloaded newer image for jumpserver/web:v3.8.0
docker.io/jumpserver/web:v3.8.0

完成

>>> 安装配置 JumpServer
1. 配置加密密钥
SECRETE_KEY:     ZmQ5NzQ1NzMtYTlmNS00YzA4LWIxNDQtN2EzMjZlMTc4Yzdk
BOOTSTRAP_TOKEN: ZmQ5NzQ1NzMtYTlmNS00YzA4
完成

2. 配置持久化目录
是否需要自定义持久化存储, 默认将使用目录 /data/jumpserver? (y/n)  (默认为 n): 完成

3. 配置 MySQL
是否使用外部 MySQL? (y/n)  (默认为 n): 完成

4. 配置 Redis
是否使用外部 Redis? (y/n)  (默认为 n): 完成

5. 配置外部访问
是否需要配置 JumpServer 对外访问端口? (y/n)  (默认为 n): n
完成

6. 初始化数据库
[+] Running 4/4
 ✔ Network jms_net      Created                                                                                      10.1s 
 ✔ Container jms_mysql  Started                                                                                       2.6s 
 ✔ Container jms_redis  Started                                                                                       2.4s 
 ✔ Container jms_core   Started                                                                                       3.0s 
2023-10-20 11:48:29 Collect static files
ALLOWED_HOSTS: 
  - localhost
  - core80
  - 127.0.0.1
  - 127.0.0.1:8080
  - 127.0.0.1:80
  - localhost:8080
  - localhost:80
  - core:8080
  - core:80
ALLOWED_HOSTS: 
  - localhost
  - core80
  - 127.0.0.1
  - 127.0.0.1:8080
  - 127.0.0.1:80
  - localhost:8080
  - localhost:80
  - core:8080
  - core:80
2023-10-20 11:48:31 Collect static files done
2023-10-20 11:48:31 Check database structure change ...
2023-10-20 11:48:31 Migrate model change to database ...
Operations to perform:
  Apply all migrations: accounts, acls, admin, applications, assets, audits, auth, authentication, captcha, common, contenttypes, django_cas_ng, django_celery_beat, notifications, ops, orgs, perms, rbac, sessions, settings, terminal, tickets, users
Running migrations:
  Applying contenttypes.0001_initial... OK
  Applying contenttypes.0002_remove_content_type_name... OK
  Applying auth.0001_initial... OK
  Applying auth.0002_alter_permission_name_max_length... OK
  Applying auth.0003_alter_user_email_max_length... OK
  Applying auth.0004_alter_user_username_opts... OK
  Applying auth.0005_alter_user_last_login_null... OK
  Applying auth.0006_require_contenttypes_0002... OK
  Applying auth.0007_alter_validators_add_error_messages... OK
  Applying auth.0008_alter_user_username_max_length... OK
  Applying users.0001_initial... OK
  Applying tickets.0001_initial... OK
  Applying tickets.0002_auto_20200728_1146... OK
  Applying tickets.0003_auto_20200804_1551... OK
  Applying tickets.0004_ticket_comment... OK
  Applying tickets.0005_ticket_meta_confirmed_system_users... OK
  Applying tickets.0006_auto_20201023_1628... OK
  Applying tickets.0007_auto_20201224_1821... OK
  Applying tickets.0008_auto_20210311_1113... OK
  Applying tickets.0009_auto_20210426_1720... OK
  Applying tickets.0010_auto_20210812_1618... OK
  Applying tickets.0011_remove_approvalrule_assignees_display... OK
  Applying terminal.0001_initial... OK
  Applying terminal.0002_auto_20171228_0025... OK
  Applying terminal.0003_auto_20171230_0308... OK
  Applying terminal.0004_session_remote_addr... OK
  Applying terminal.0005_auto_20180122_1154... OK
  Applying terminal.0006_auto_20180123_1037... OK
  Applying terminal.0007_session_date_last_active... OK
  Applying terminal.0008_auto_20180307_1603... OK
  Applying terminal.0009_auto_20180326_0957... OK
  Applying terminal.0010_auto_20180423_1140... OK
  Applying terminal.0011_auto_20180807_1116... OK
  Applying terminal.0012_auto_20180816_1652... OK
  Applying terminal.0013_auto_20181123_1113... OK
  Applying terminal.0014_auto_20181226_1441... OK
  Applying terminal.0015_auto_20190923_1529... OK
  Applying terminal.0016_commandstorage_replaystorage... OK
  Applying common.0001_initial... OK
  Applying common.0002_auto_20180111_1407... OK
  Applying common.0003_setting_category... OK
  Applying common.0004_setting_encrypted... OK
  Applying common.0005_auto_20190221_1902... OK
  Applying common.0006_auto_20190304_1515... OK
  Applying settings.0001_initial... OK
  Applying terminal.0017_auto_20191125_0931... OK
  Applying terminal.0018_auto_20191202_1010... OK
  Applying terminal.0019_auto_20191206_1000... OK
  Applying terminal.0020_auto_20191218_1721... OK
  Applying terminal.0021_auto_20200213_1316... OK
  Applying terminal.0022_session_is_success... OK
  Applying terminal.0023_command_risk_level... OK
  Applying terminal.0024_auto_20200715_1713... OK
  Applying terminal.0025_auto_20200810_1735... OK
  Applying terminal.0026_auto_20201027_1905... OK
  Applying terminal.0027_auto_20201102_1651... OK
  Applying terminal.0028_auto_20201110_1918... OK
  Applying terminal.0029_auto_20201116_1757... OK
  Applying terminal.0030_terminal_type... OK
  Applying terminal.0031_auto_20210113_1356... OK
  Applying terminal.0032_auto_20210302_1853... OK
  Applying terminal.0033_auto_20210324_1008... OK
  Applying terminal.0034_auto_20210406_1434... OK
  Applying terminal.0035_auto_20210517_1448... OK
  Applying terminal.0036_auto_20210604_1124... OK
  Applying terminal.0037_auto_20210623_1748... OK
  Applying terminal.0038_task_kwargs... OK
  Applying terminal.0039_auto_20210805_1552... OK
  Applying terminal.0040_sessionjoinrecord_sessionsharing... OK
  Applying terminal.0041_auto_20211105_1605... OK
  Applying terminal.0042_auto_20211229_1619... OK
  Applying tickets.0012_ticketsession... OK
  Applying tickets.0013_ticket_serial_num...
        Fill ticket serial number ... 
 OK
  Applying tickets.0014_auto_20220217_2135... OK
  Applying tickets.0015_superticket... OK
  Applying terminal.0043_auto_20220217_2135... OK
  Applying terminal.0044_auto_20220223_1539... OK
  Applying terminal.0045_auto_20220228_1144... OK
  Applying terminal.0046_auto_20220228_1744... OK
  Applying terminal.0047_auto_20220302_1951... OK
  Applying terminal.0048_endpoint_endpointrule... OK
  Applying terminal.0049_endpoint_redis_port... OK
  Applying users.0002_auto_20171225_1157_squashed_0019_auto_20190304_1459... OK
  Applying users.0020_auto_20190612_1825... OK
  Applying users.0021_auto_20190625_1104... OK
  Applying users.0022_auto_20190625_1105... OK
  Applying users.0023_auto_20190724_1525... OK
  Applying users.0024_auto_20191118_1612... OK
  Applying users.0025_auto_20200206_1216... OK
  Applying users.0026_auto_20200508_2105... OK
  Applying users.0027_auto_20200616_1503... OK
  Applying users.0028_auto_20200728_1805... OK
  Applying users.0029_auto_20200814_1650... OK
  Applying users.0030_auto_20200819_2041... OK
  Applying users.0031_auto_20201118_1801... OK
  Applying assets.0001_initial... OK
  Applying perms.0001_initial... OK
  Applying assets.0002_auto_20180105_1807_squashed_0009_auto_20180307_1212... OK
  Applying assets.0010_auto_20180307_1749_squashed_0019_auto_20180816_1320... OK
  Applying perms.0002_auto_20171228_0025_squashed_0009_auto_20180903_1132... OK
  Applying perms.0003_action... OK
  Applying perms.0004_assetpermission_actions... OK
  Applying assets.0020_auto_20180816_1652... OK
  Applying assets.0021_auto_20180903_1132... OK
  Applying assets.0022_auto_20181012_1717... OK
  Applying assets.0023_auto_20181016_1650... OK
  Applying assets.0024_auto_20181219_1614... OK
  Applying assets.0025_auto_20190221_1902... OK
  Applying assets.0026_auto_20190325_2035... OK
  Applying applications.0001_initial... OK
  Applying perms.0005_auto_20190521_1619... OK
  Applying perms.0006_auto_20190628_1921... OK
  Applying perms.0007_remove_assetpermission_actions... OK
  Applying perms.0008_auto_20190911_1907... OK
  Applying assets.0027_auto_20190521_1703... OK
  Applying assets.0028_protocol... OK
  Applying assets.0029_auto_20190522_1114... OK
  Applying assets.0030_auto_20190619_1135... OK
  Applying assets.0031_auto_20190621_1332... OK
  Applying assets.0032_auto_20190624_2108... OK
  Applying assets.0033_auto_20190624_2108... OK
  Applying assets.0034_auto_20190705_1348... OK
  Applying assets.0035_auto_20190711_2018... OK
  Applying assets.0036_auto_20190716_1535... OK
  Applying assets.0037_auto_20190724_2002... OK
  Applying assets.0038_auto_20190911_1634... OK
  Applying perms.0009_remoteapppermission_system_users... OK
  Applying assets.0039_authbook_is_active... OK
  Applying assets.0040_auto_20190917_2056... OK
  Applying assets.0041_gathereduser... OK
  Applying assets.0042_favoriteasset...
 OK
  Applying assets.0043_auto_20191114_1111... OK
  Applying assets.0044_platform... OK
  Applying assets.0045_auto_20191206_1607... OK
  Applying assets.0046_auto_20191218_1705... OK
  Applying applications.0002_remove_remoteapp_system_user... OK
  Applying applications.0003_auto_20191210_1659... OK
  Applying applications.0004_auto_20191218_1705... OK
  Applying perms.0010_auto_20191218_1705... OK
  Applying perms.0011_auto_20200721_1739... OK
  Applying assets.0047_assetuser... OK
  Applying assets.0048_auto_20191230_1512... OK
  Applying assets.0049_systemuser_sftp_root... OK
  Applying assets.0050_auto_20200711_1740... OK
  Applying assets.0051_auto_20200713_1143... OK
  Applying assets.0052_auto_20200715_1535... OK
  Applying assets.0053_auto_20200723_1232... OK
  Applying assets.0054_auto_20200807_1032... OK
  Applying applications.0005_k8sapp... OK
  Applying perms.0012_k8sapppermission... OK
  Applying assets.0055_auto_20200811_1845... OK
  Applying assets.0056_auto_20200904_1751... OK
  Applying assets.0057_fill_node_value_assets_amount_and_parent_key...

  ................................................................. OK
  Applying perms.0013_rebuildusertreetask_usergrantedmappingnode... OK
  Applying perms.0014_build_users_perm_tree... OK
  Applying perms.0015_auto_20200929_1728... OK
  Applying assets.0058_auto_20201023_1115... OK
  Applying assets.0059_auto_20201027_1905... OK
  Applying applications.0006_application... OK
  Applying perms.0016_applicationpermission... OK
  Applying perms.0017_auto_20210104_0435... OK
  Applying assets.0060_node_full_value...
        - Start migrate node value if has /

        - Start migrate node full value
 OK
  Applying assets.0061_auto_20201116_1757... OK
  Applying assets.0062_auto_20201117_1938... OK
  Applying assets.0063_migrate_default_node_key...
Check old default node `key=0 value=Default` not exists
 OK
  Applying assets.0064_auto_20201203_1100... OK
  Applying assets.0065_auto_20210121_1549... OK
  Applying perms.0018_auto_20210208_1515... OK
  Applying orgs.0001_initial... OK
  Applying orgs.0002_auto_20180903_1132... OK
  Applying orgs.0003_auto_20190916_1057... OK
  Applying orgs.0004_organizationmember... OK
  Applying orgs.0005_auto_20200721_1937... OK
  Applying orgs.0006_auto_20200721_1937... OK
  Applying orgs.0007_auto_20200728_1805... OK
  Applying orgs.0008_auto_20200819_2041... OK
  Applying orgs.0009_auto_20201023_1628... OK
  Applying ops.0001_initial... OK
  Applying ops.0002_celerytask... OK
  Applying ops.0003_auto_20181207_1744... OK
  Applying ops.0004_adhoc_run_as... OK
  Applying ops.0005_auto_20181219_1807... OK
  Applying ops.0006_auto_20190318_1023... OK
  Applying ops.0007_auto_20190724_2002... OK
  Applying ops.0008_auto_20190919_2100... OK
  Applying ops.0009_auto_20191217_1713... OK
  Applying ops.0010_auto_20191217_1758... OK
  Applying ops.0011_auto_20200106_1534... OK
  Applying ops.0012_auto_20200108_1659... OK
  Applying ops.0013_auto_20200108_1706... OK
  Applying ops.0014_auto_20200108_1749... OK
  Applying ops.0015_auto_20200108_1809... OK
  Applying ops.0016_commandexecution_org_id... OK
  Applying ops.0017_auto_20200306_1747... OK
  Applying ops.0018_auto_20200509_1434... OK
  Applying ops.0019_adhocexecution_celery_task_id... OK
  Applying audits.0001_initial... OK
  Applying audits.0002_ftplog_org_id... OK
  Applying audits.0003_auto_20180816_1652... OK
  Applying audits.0004_operatelog_passwordchangelog_userloginlog... OK
  Applying audits.0005_auto_20190228_1715... OK
  Applying audits.0006_auto_20190726_1753... OK
  Applying audits.0007_auto_20191202_1010... OK
  Applying audits.0008_auto_20200508_2105... OK
  Applying audits.0009_auto_20200624_1654... OK
  Applying audits.0010_auto_20200811_1122... OK
  Applying audits.0011_userloginlog_backend... OK
  Applying assets.0066_auto_20210208_1802... OK
  Applying applications.0007_auto_20201119_1110... OK
  Applying applications.0008_auto_20210104_0435... OK
  Applying orgs.0010_auto_20210219_1241...
        Migrate model org id: Application       done, use 0.98 ms
        Migrate model org id: AdminUser done, use 0.75 ms
        Migrate model org id: Asset     done, use 0.64 ms
        Migrate model org id: AuthBook  done, use 0.72 ms
        Migrate model org id: CommandFilter     done, use 0.5 ms
        Migrate model org id: CommandFilterRule done, use 0.56 ms
        Migrate model org id: Domain    done, use 1.02 ms
        Migrate model org id: Gateway   done, use 0.74 ms
        Migrate model org id: GatheredUser      done, use 0.69 ms
        Migrate model org id: Label     done, use 0.48 ms
        Migrate model org id: Node      done, use 0.47 ms
        Migrate model org id: SystemUser        done, use 0.55 ms
        Migrate model org id: FTPLog    done, use 0.74 ms
        Migrate model org id: OperateLog        done, use 0.54 ms
        Migrate model org id: AdHoc     done, use 0.4 ms
        Migrate model org id: AdHocExecution    done, use 0.52 ms
        Migrate model org id: CommandExecution  done, use 0.46 ms
        Migrate model org id: Task      done, use 37.51 ms
        Migrate model org id: ApplicationPermission     done, use 0.88 ms
        Migrate model org id: AssetPermission   done, use 0.55 ms
        Migrate model org id: UserAssetGrantedTreeNodeRelation  done, use 0.53 ms
        Migrate model org id: Session   done, use 0.5 ms
        Migrate model org id: Command   done, use 0.51 ms
        Migrate model org id: Ticket    done, use 0.43 ms
        Migrate model org id: UserGroup done, use 0.51 ms
        Will add users to default org: 1
          Add users to default org: 1-1
        done, use 2.39 ms
 OK
  Applying assets.0067_auto_20210311_1113... OK
  Applying assets.0068_auto_20210312_1455... OK
  Applying assets.0069_change_node_key0_to_key1...
--> Not exist key=0 nodes, do nothing.
 OK
  Applying assets.0070_auto_20210426_1515... OK
  Applying assets.0071_systemuser_type...
 OK
  Applying assets.0072_historicalauthbook...
 OK
  Applying assets.0073_auto_20210606_1142...

 OK
  Applying assets.0074_remove_systemuser_assets... OK
  Applying assets.0075_auto_20210705_1759... OK
  Applying assets.0076_delete_assetuser... OK
  Applying assets.0077_auto_20211012_1642... OK
  Applying assets.0078_auto_20211014_2209... OK
  Applying assets.0079_auto_20211102_1922... OK
  Applying assets.0080_auto_20211104_1347... OK
  Applying assets.0081_auto_20211105_1605... OK
  Applying applications.0009_applicationuser... OK
  Applying applications.0010_appaccount_historicalappaccount... OK
  Applying applications.0011_auto_20210826_1759... OK
  Applying applications.0012_auto_20211014_2209... OK
  Applying applications.0013_auto_20211026_1711... OK
  Applying applications.0014_auto_20211105_1605... OK
  Applying assets.0082_auto_20211209_1440... OK
  Applying assets.0083_auto_20211215_1436... OK
  Applying assets.0084_auto_20220112_1959... OK
  Applying assets.0085_commandfilterrule_ignore_case... OK
  Applying assets.0086_auto_20220217_2135... OK
  Applying assets.0087_auto_20220223_1539... OK
  Applying assets.0088_auto_20220303_1612... OK
  Applying assets.0089_auto_20220310_0616... OK
  Applying assets.0090_auto_20220412_1145... OK
  Applying applications.0015_auto_20220112_2035... OK
  Applying applications.0016_auto_20220118_1455... OK
  Applying applications.0017_auto_20220217_2135... OK
  Applying applications.0018_auto_20220223_1539... OK
  Applying applications.0019_auto_20220310_1853... OK
  Applying applications.0020_auto_20220316_2028... OK
  Applying tickets.0016_auto_20220609_1758... OK
  Applying tickets.0017_auto_20220623_1027... OK
  Applying tickets.0018_applyapplicationticket_apply_actions... OK
  Applying tickets.0019_delete_applyapplicationticket... OK
  Applying tickets.0020_auto_20220817_1346...
  Start migrate system user to account
          - migrate 'ApplyAssetTicket'
          - migrate 'ApplyCommandTicket'
          - migrate 'ApplyLoginAssetTicket'
 OK
  Applying tickets.0021_auto_20220921_1814... OK
  Applying tickets.0022_alter_applyassetticket_apply_actions... OK
  Applying tickets.0023_alter_applyassetticket_apply_actions... OK
  Applying tickets.0024_auto_20221121_1800... OK
  Applying authentication.0001_initial... OK
  Applying authentication.0002_auto_20190729_1423... OK
  Applying authentication.0003_loginconfirmsetting... OK
  Applying authentication.0004_ssotoken... OK
  Applying acls.0001_initial... OK
  Applying acls.0002_auto_20210926_1047... OK
  Applying acls.0003_auto_20211130_1037... OK
  Applying acls.0004_auto_20220831_1658... OK
  Applying acls.0005_auto_20221201_1846... OK
  Applying acls.0006_commandfilteracl_commandgroup... OK
  Applying acls.0007_auto_20221202_1048... OK
  Applying acls.0008_commandgroup_comment... OK
  Applying tickets.0025_auto_20221206_1820... OK
  Applying assets.0091_auto_20220629_1826... OK
  Applying assets.0092_commandfilter_nodes... OK
  Applying assets.0093_auto_20220403_1627... OK
  Applying assets.0094_auto_20220402_1736... OK
  Applying assets.0095_auto_20220407_1726... OK
  Applying assets.0096_auto_20220426_1550... OK
  Applying assets.0097_auto_20220426_1558...    - Update platform: Windows2016
        - Update platform: Other
 OK
  Applying assets.0098_auto_20220430_2126...

        - Migrate ori host to device:  0
 OK
  Applying assets.0099_auto_20220711_1409...
        Start migrate asset protocols
 OK
  Applying accounts.0001_initial... OK
  Applying assets.0100_auto_20220711_1413...
        Start migrate asset accounts

        Start migrate app accounts
 OK
  Applying assets.0101_auto_20220811_1511... OK
  Applying assets.0102_auto_20220816_1022...
        Start migrate command filters to assets
 OK
  Applying assets.0103_auto_20220902_1021...>>> migrate gateway to asset
>>> migrate gateway to account
 OK
  Applying assets.0104_auto_20220817_1544... OK
  Applying assets.0105_auto_20221220_1956... OK
  Applying assets.0106_auto_20221228_1838... OK
  Applying assets.0107_automation... OK
  Applying assets.0108_alter_platform_charset... OK
  Applying assets.0109_alter_asset_options... OK
  Applying assets.0110_auto_20230315_1741... OK
  Applying assets.0111_auto_20230321_1633... OK
  Applying assets.0112_auto_20230404_1631... OK
  Applying assets.0113_auto_20230411_1917...
Migrate platform su method: Cisco
Migrate platform su method: H3C
Migrate platform su method: Huawei
 OK
  Applying assets.0114_baseautomation_params... OK
  Applying assets.0115_auto_20230417_1425... OK
  Applying assets.0116_auto_20230418_1726... OK
  Applying assets.0117_alter_baseautomation_params... OK
  Applying assets.0118_auto_20230524_1647... OK
  Applying assets.0119_assets_add_default_node... OK
  Applying assets.0120_auto_20230630_1613... OK
  Applying assets.0121_auto_20230725_1458...
Platform add sftp protocol: 
 - Linux
 - Gateway

Asset add sftp protocol: 
Not found telnet regex setting, skip
 OK
  Applying assets.0122_auto_20230803_1553... OK
  Applying accounts.0002_auto_20220616_0021... OK
  Applying accounts.0003_automation... OK
  Applying accounts.0004_auto_20230106_1507... OK
  Applying accounts.0005_alter_changesecretrecord_options... OK
  Applying accounts.0006_gatheredaccount... OK
  Applying accounts.0007_alter_account_options... OK
  Applying accounts.0008_alter_gatheredaccount_options... OK
  Applying accounts.0009_account_usernames_to_ids... OK
  Applying accounts.0010_gatheraccountsautomation_is_sync_account... OK
  Applying accounts.0011_auto_20230506_1443... OK
  Applying accounts.0012_auto_20230621_1456... OK
  Applying accounts.0013_account_backup_recipients... OK
  Applying accounts.0014_virtualaccount... OK
  Applying accounts.0015_auto_20230825_1120... OK
  Applying accounts.0016_accounttemplate_password_rules... OK
  Applying acls.0009_auto_20221220_1956... OK
  Applying acls.0010_alter_commandfilteracl_command_groups... OK
  Applying acls.0011_auto_20230425_1704... OK
  Applying acls.0012_auto_20230426_1111... OK
  Applying acls.0013_auto_20230426_1759... OK
  Applying acls.0014_loginassetacl_rules... OK
  Applying acls.0015_connectmethodacl... OK
  Applying acls.0016_auto_20230606_1857... OK
  Applying acls.0017_alter_connectmethodacl_options... OK
  Applying acls.0018_alter_commandfilteracl_command_groups... OK
  Applying admin.0001_initial... OK
  Applying admin.0002_logentry_remove_auto_add... OK
  Applying admin.0003_logentry_add_action_flag_choices... OK
  Applying perms.0019_auto_20210906_1044... OK
  Applying perms.0020_auto_20210910_1103... OK
  Applying perms.0021_auto_20211105_1605... OK
  Applying perms.0022_applicationpermission_actions... OK
  Applying perms.0023_auto_20220112_2035... OK
  Applying perms.0024_auto_20220217_2135... OK
  Applying perms.0025_auto_20220223_1539... OK
  Applying perms.0026_auto_20220307_1500... OK
  Applying perms.0027_auto_20220310_1802... OK
  Applying perms.0028_auto_20220316_2028... OK
  Applying perms.0029_auto_20220728_1728... OK
  Applying perms.0030_auto_20220816_1132... OK
  Applying perms.0031_auto_20220816_1600... OK
  Applying ops.0020_adhoc_run_system_user... OK
  Applying ops.0021_auto_20211130_1037... OK
  Applying ops.0022_auto_20220817_1346... OK
  Applying applications.0021_auto_20220629_1826... OK
  Applying applications.0022_auto_20220714_1046... OK
  Applying applications.0023_auto_20220715_1556... OK
  Applying applications.0024_alter_application_type... OK
  Applying applications.0025_auto_20220817_1346... OK
  Applying applications.0026_auto_20220817_1716... OK
  Applying applications.0027_auto_20221220_1956... OK
  Applying assets.0123_device_automation_ansible_enabled... OK
  Applying assets.0124_auto_20231007_1437... OK
  Applying assets.0125_auto_20231011_1053... OK
  Applying ops.0023_auto_20220912_0021... OK
  Applying audits.0012_auto_20210414_1443... OK
  Applying audits.0013_auto_20211130_1037... OK
  Applying audits.0014_auto_20220505_1902... OK
  Applying audits.0015_auto_20221011_1745... OK
  Applying audits.0016_auto_20221111_1919... OK
  Applying audits.0017_auto_20221220_1757... OK
  Applying audits.0018_operatelog_resource_id... OK
  Applying audits.0019_alter_operatelog_options... OK
  Applying audits.0020_auto_20230117_1004... OK
  Applying audits.0021_auto_20230207_0857... OK
  Applying audits.0022_auto_20230605_1555... OK
  Applying audits.0023_auto_20230906_1322... OK
  Applying audits.0024_usersession... OK
  Applying audits.0025_remove_usersession_date_expired... OK
  Applying auth.0009_alter_user_last_name_max_length... OK
  Applying auth.0010_alter_group_name_max_length... OK
  Applying auth.0011_update_proxy_permissions... OK
  Applying auth.0012_alter_user_first_name_max_length... OK
  Applying tickets.0026_auto_20221220_1956... OK
  Applying tickets.0027_alter_applycommandticket_apply_run_account... OK
  Applying tickets.0028_remove_app_tickets... OK
  Applying authentication.0005_delete_loginconfirmsetting... OK
  Applying authentication.0006_auto_20211227_1059... OK
  Applying authentication.0007_connectiontoken... OK
  Applying authentication.0008_superconnectiontoken... OK
  Applying authentication.0009_auto_20220310_0616... OK
  Applying authentication.0010_temptoken... OK
  Applying authentication.0011_auto_20220705_1940... OK
  Applying authentication.0012_auto_20220816_1629... OK
  Applying authentication.0013_connectiontoken_protocol... OK
  Applying authentication.0014_auto_20221122_2152... OK
  Applying authentication.0015_auto_20221205_1136... OK
  Applying authentication.0016_auto_20221220_1956... OK
  Applying authentication.0017_auto_20230105_1743...
 OK
  Applying authentication.0018_alter_connectiontoken_input_secret... OK
  Applying authentication.0019_connectiontoken_is_reusable... OK
  Applying authentication.0020_connectiontoken_connect_options... OK
  Applying authentication.0021_auto_20230713_1459... OK
  Applying authentication.0022_passkey... OK
  Applying authentication.0023_auto_20231010_1101... OK
  Applying captcha.0001_initial... OK
  Applying captcha.0002_alter_captchastore_id... OK
  Applying django_cas_ng.0001_initial... OK
  Applying django_cas_ng.0002_auto_20201023_1400... OK
  Applying django_cas_ng.0003_auto_20210813_1226... OK
  Applying django_celery_beat.0001_initial... OK
  Applying django_celery_beat.0002_auto_20161118_0346... OK
  Applying django_celery_beat.0003_auto_20161209_0049... OK
  Applying django_celery_beat.0004_auto_20170221_0000... OK
  Applying django_celery_beat.0005_add_solarschedule_events_choices... OK
  Applying django_celery_beat.0006_auto_20180322_0932... OK
  Applying django_celery_beat.0007_auto_20180521_0826... OK
  Applying django_celery_beat.0008_auto_20180914_1922... OK
  Applying django_celery_beat.0006_auto_20180210_1226... OK
  Applying django_celery_beat.0006_periodictask_priority... OK
  Applying django_celery_beat.0009_periodictask_headers... OK
  Applying django_celery_beat.0010_auto_20190429_0326... OK
  Applying django_celery_beat.0011_auto_20190508_0153... OK
  Applying django_celery_beat.0012_periodictask_expire_seconds... OK
  Applying django_celery_beat.0013_auto_20200609_0727... OK
  Applying django_celery_beat.0014_remove_clockedschedule_enabled... OK
  Applying django_celery_beat.0015_edit_solarschedule_events_choices... OK
  Applying django_celery_beat.0016_alter_crontabschedule_timezone... OK
  Applying django_celery_beat.0017_alter_crontabschedule_month_of_year... OK
  Applying django_celery_beat.0018_improve_crontab_helptext... OK
  Applying users.0032_userpasswordhistory... OK
  Applying users.0033_user_need_update_password... OK
  Applying users.0034_auto_20210506_1448... OK
  Applying users.0035_auto_20210526_1100... OK
  Applying users.0036_user_feishu_id... OK
  Applying users.0037_user_secret_key... OK
  Applying users.0038_auto_20211209_1140... OK
  Applying users.0039_auto_20211229_1852... OK
  Applying users.0040_alter_user_source... OK
  Applying users.0041_auto_20221220_1956... OK
  Applying notifications.0001_initial... OK
  Applying notifications.0002_auto_20210909_1946...
        Init user message subscription: 1
 OK
  Applying notifications.0003_auto_20221220_1956... OK
  Applying notifications.0004_auto_20230201_1614... OK
  Applying ops.0024_alter_celerytask_date_last_publish... OK
  Applying ops.0025_auto_20230413_1531... OK
  Applying ops.0026_auto_20230810_1039... OK
  Applying ops.0027_alter_celerytaskexecution_options... OK
  Applying rbac.0001_initial... OK
  Applying rbac.0002_auto_20210929_1409... OK
  Applying rbac.0003_auto_20211130_1037...  - Update builtin roles
    - Update: SystemAdmin - True
    - Update: SystemAuditor - True
    - Update: SystemComponent - True
    - Update: User - True
    - Update: OrgAdmin - True
    - Update: OrgAuditor - True
    - Update: OrgUser - True
 OK
  Applying rbac.0004_auto_20211201_1901...
        Create role binding: 0-1 using: 0.58s
        Create role binding: 0-1 using: 0.00s
 OK
  Applying orgs.0011_auto_20211223_1913... OK
  Applying orgs.0012_auto_20220118_1054... OK
  Applying orgs.0013_alter_organization_options... OK
  Applying orgs.0014_organization_builtin... OK
  Applying orgs.0015_auto_20221220_1956... OK
  Applying perms.0032_auto_20221111_1919... OK
  Applying perms.0033_auto_20221220_1956... OK
  Applying perms.0034_auto_20230525_1734... OK
  Applying rbac.0005_auto_20220307_1524... OK
  Applying rbac.0006_auto_20220310_0616... OK
  Applying rbac.0007_auto_20220314_1525... OK
  Applying rbac.0008_auto_20220411_1709... OK
  Applying rbac.0009_auto_20220411_1724... OK
  Applying rbac.0010_auto_20221220_1956... OK
  Applying rbac.0011_remove_redundant_permission... OK
  Applying sessions.0001_initial... OK
  Applying settings.0002_auto_20210729_1546... OK
  Applying settings.0003_auto_20210901_1035... OK
  Applying settings.0004_auto_20220211_1401... OK
  Applying settings.0005_auto_20220310_0616... OK
  Applying settings.0006_remove_setting_enabled... OK
  Applying settings.0007_migrate_ldap_sync_org_ids... OK
  Applying settings.0008_alter_setting_options... OK
  Applying settings.0009_alter_cas_username_attribute... OK
  Applying settings.0010_alter_setting_options... OK
  Applying terminal.0050_auto_20220606_1745... OK
  Applying terminal.0051_sessionsharing_users... OK
  Applying terminal.0052_auto_20220713_1417... OK
  Applying terminal.0053_auto_20221009_1755... OK
  Applying terminal.0054_auto_20221027_1125... OK
  Applying terminal.0055_auto_20221228_1804... OK
  Applying terminal.0056_auto_20221228_1808... OK
  Applying terminal.0057_auto_20230109_1447... OK
  Applying terminal.0058_auto_20230110_1445... OK
  Applying terminal.0059_session_account_id... OK
  Applying terminal.0060_sessionsharing_action_permission... OK
  Applying terminal.0061_applet_can_concurrent... OK
  Applying terminal.0062_applet_edition... OK
  Applying terminal.0063_auto_20230621_1133... OK
  Applying terminal.0064_auto_20230728_1001... OK
  Applying terminal.0065_session_error_reason... OK
  Applying tickets.0029_auto_20230110_1445... OK
  Applying users.0042_auto_20230203_1201... OK
  Applying users.0043_remove_user_secret_key_preference... OK
  Applying users.0044_usersession... OK
  Applying users.0045_delete_usersession... OK
  Applying users.0046_auto_20230927_1456... OK
  Applying users.0047_user_date_api_key_last_used... OK
  Applying users.0048_wechat_phone_encrypt... OK

After migration, update builtin role permissions
  - Update builtin roles
完成

>>> 安装完成了
1. 可以使用如下命令启动, 然后访问
cd /opt/jumpserver-installer-v3.8.0
./jmsctl.sh start

2. 其它一些管理命令
./jmsctl.sh stop
./jmsctl.sh restart
./jmsctl.sh backup
./jmsctl.sh upgrade
更多还有一些命令, 你可以 ./jmsctl.sh --help 来了解

3. Web 访问
http://172.25.41.89:80
默认用户: admin  默认密码: admin

4. SSH/SFTP 访问
ssh -p2222 admin@172.25.41.89
sftp -P2222 admin@172.25.41.89

5. 更多信息
我们的官网: https://www.jumpserver.org/
我们的文档: https://docs.jumpserver.org/

[+] Running 10/10
 ✔ Container jms_lion    Started                                                                                      5.2s 
 ✔ Container jms_koko    Started                                                                                      4.1s 
 ✔ Container jms_chen    Started                                                                                      5.2s 
 ✔ Container jms_kael    Started                                                                                      3.7s 
 ✔ Container jms_web     Started                                                                                      3.6s 
 ✔ Container jms_magnus  Started                                                                                      3.7s 
 ✔ Container jms_celery  Started                                                                                      2.6s 
 ✔ Container jms_redis   Running                                                                                      0.0s 
 ✔ Container jms_mysql   Running                                                                                      0.0s 
 ✔ Container jms_core    Started                                                                                      6.0s

通过上面的安装信息，我们了解到此时 Linux 环境已经安装 Docker 容器，并使用该容器成功运行了 JumpServer 堡垒机。

查看 Docker 版本信息：

docker version

docker-version

此处我们查看 JumpServer 相关的 images 镜像列表：

[root@JumpServer ~]# docker image ls
REPOSITORY           TAG       IMAGE ID       CREATED         SIZE
jumpserver/redis     6.2       6408abc40b2a   14 hours ago    106MB
jumpserver/web       v3.8.0    7bc18906aaee   18 hours ago    1.49GB
jumpserver/chen      v3.8.0    2e56502c628f   18 hours ago    576MB
jumpserver/koko      v3.8.0    8f0ae6fc7123   18 hours ago    1.06GB
jumpserver/kael      v3.8.0    a09b75b98f60   18 hours ago    278MB
jumpserver/lion      v3.8.0    f56740becf33   18 hours ago    237MB
jumpserver/core      v3.8.0    78d73be6070f   18 hours ago    1.57GB
jumpserver/magnus    v3.8.0    dbc25d9904b8   18 hours ago    157MB
jumpserver/mariadb   10.6      aac2cf878de9   10 months ago   405MB

验证安装

访问部署的 JumpServer 堡垒机：

>>> 安装完成了
1. 可以使用如下命令启动, 然后访问
cd /opt/jumpserver-installer-v3.8.0
./jmsctl.sh start

2. 其它一些管理命令
./jmsctl.sh stop
./jmsctl.sh restart
./jmsctl.sh backup
./jmsctl.sh upgrade
更多还有一些命令, 你可以 ./jmsctl.sh --help 来了解

3. Web 访问
http://172.25.41.89:80
默认用户: admin  默认密码: admin

4. SSH/SFTP 访问
ssh -p2222 admin@172.25.41.89
sftp -P2222 admin@172.25.41.89

5. 更多信息
我们的官网: https://www.jumpserver.org/
我们的文档: https://docs.jumpserver.org/

浏览器输入地址 http://172.25.41.89:80，显示页面如下：

jumpserver-login

首次登录进入后，会要求修改初始密码，修改后继续登录，进入页面显示如下：

jumpserver-dashboard

ChaITSimpleLove
关注
  • 2
    点赞
  • 踩
  • 3
    收藏
    觉得还不错? 一键收藏
  • 打赏
    打赏
  • 1
    评论
专栏目录
openEuler-22.03-LTS-SP2-netinst-x86-64-dvd.iso
08-15
openEuler-22.03-LTS-SP2-netinst-x86_64-dvd.iso 适用于x86_64平台服务器
网络安全：OpenEuler 部署 jumpserver 堡垒机
cronaldo91的博客
03-10 1466
(4) 查看docker版本 （openEuler）（3）jumpserver创建Windows普通用户。(3) 查看网络ip （openEuler）（2）查看系统版本（openEuler）192.168.204.141（静态）192.168.204.142（静态）（4）资产列表创建Windows服务器。（1）查看Windows IP地址。（16）堡垒机切换管理员用户。创建普通用户（选择SSH）（8）堡垒机创建普通用户。（9）堡垒机创建特权用户。（4）查看端口占用情况。（13）堡垒机切换用户。
记一次Jumpserver（all in docker2.5.3）升级到jumpserver2.6.2过程
那个那个
01-20 1719
记一次Jumpserver（all in docker2.5.3）升级到jumpserver2.6.2过程 一、环境描述 系统：Centos8 jumpserver：Docker 部署all in one ，一个镜像包括了所有jumpserver服务以及mysql和redis 2021年1月15日，JumpServer开源堡垒机发现一处远程执行漏洞，需要用户尽快进行修复，尤其是可通过公网访问的JumpServer堡垒机用户建议尽快进行修复。 紧急BUG修复通知 JumpServer发现远程执行漏洞，请速度修
Jumpserver 一键部署(支持离线安装)
fantasywith的博客
10-18 3756
1.教程介绍 1.1::通过本教程起到抛砖引玉效果，希望各位喜爱Jumpserver堡垒机的朋友受益良多。 1.2::如您有任何问题请联系作者，QQ1284524409。 1.3::以下提供的任何软件仅供学习交流使用。 2.下载链接 2.1::centos_1810最小化安装离线安装包 链接: https://pan.baidu.com/s/1w4fPWS_so1zaDj1yt...
openEuler 22.03 LTS 环境使用 Docker Compose 一键部署 JumpServer (all-in-one 模式)
ChaITSimpleLove的博客
10-27 749
本案例主要介绍在 openEuler 22.03 LTS 环境，如何使用 Docker Compose 一键部署 JumpServer (all-in-one 模式)，感兴趣的小伙伴可以动手实践哦。
Jumpserver入门介绍
热门推荐
imtech的博客
04-16 4万+
大多数的安全设备都接触过，只有堡垒机没有深入了解，所以一直想了解一下堡垒机的安装和使用。市面上好多商业化的物理设备堡垒机，目前没有接触，幸好有有开源的堡垒机 --Jumpserver 。今天安装测试一下。 参考资料：http://docs.jumpserver.org/zh/docs/introduce.html# 一、总体介绍 Jumpserver 是全球首款完全开源的堡垒机, 使用 GNU G.........
openEuler-20.03-LTS-SP4-x86-64-dvd.zip.001
最新发布
05-28
openEuler 20.03（openEuler-20.03-LTS-SP4-x86-64-dvd.iso）适用于Linux x86-64系统，文件使用360压缩软件分割成4个压缩包，必须一起下载使用： part1: ...
openEuler22.03 librdkafka-1.2.2
02-26
解决openEuler22版本librdkafka依赖版本过低问题
openEuler-22.03-LTS-SP3-netinst-aarch64-dvd.iso
05-28
openEuler-22.03-LTS-SP3-netinst-aarch64-dvd.iso
openEuler-20.03-LTS-SP2-x86_64-dvd.part2.rar
09-25
openEuler-20.03-LTS-SP2-x86_64-dvd支持鲲鹏及其它多种处理器，文件分割成 5个 压缩包，必须集齐5个 文件后才能一起解压一起使用： openEuler-20.03-LTS-SP2-x86_64-dvd.part5.rar ... openEuler-20.03-LTS-SP2-x86_...
Docker启动jumpserver堡垒机
qgw5205220的博客
08-25 1370
jumpserver jumpserver 是全球首款完全开源、符合 4A 规范（包含认证Authentication 、授权 Authorization、账号 Accounting 和审计 Auditing）的运维安全审计系统，Jumpserver 通过软件订阅服务或者软硬件一体机的方式，向企业级用户交付多云环境下更好用的堡垒机。 与传统堡垒机相比， Jumpserver 采用了分布式架构设计，支持多云环境并可灵活扩展。资产管理方面， Jumpserver 无并发和资产数量限制，支持水平扩容。 Jumps
安全 - 堡垒机 - Jumpserver
weixin_30448603的博客
06-22 64
GitHub - jumpserver/Dockerfile: Jumpserver all in one Dockerfile https://github.com/jumpserver/Dockerfile 转载于:https://www.cnblogs.com/aftree/p/9214970.html
开源工具JumpServer跳板机的安装与使用
背锅神童的博客
03-04 1353
jumpserver、跳板机
堡垒机初体验——JumpServer
Romanticn_chu的博客
02-15 1535
堡垒机初体验
JumpServer开源堡垒机安装配置
qq_38254635的博客
06-30 1986
JumpServer开源堡垒机安装配置
【jumpserver堡垒机完整版部署】
weixin_51045644的博客
09-16 2812
堡垒机可以理解为是运维审计系统的统称：即在一个特定的网络环境下，为了保障网络和数据不受来自外部和内部用户的入侵和破坏，而运用各种技术手段实时收集和监控网络环境中每一个组成部分的系统状态、安全事件、网络活动，以便集中报警、记录、分析、处理的一种技术手段。堡垒机会从认证—授权—账号—审计，最大限度地保证运维人员能够安全操作，降低运维过程中导致的风险：哪些人以哪些身份访问那些设备。
JumpServer 部署和应用
2301_78212235的博客
08-12 2438
三、配置 jumpserver 管理 Windows10 操作系统。二、配置 jumpserver 管理 Linux 操作系统。四、配置jumpserver管理windows操作系统。2、登录jumpserver初始化设置管理密码。五、置jumpserver管理mysql数据库。4、使用bob用户管理linux操作系统。1、创建管理windows资产用户。2、管理windows10操作系统。1、创建管理windows资产用户。2、创建管理windows10主机。1、创建管理linux资产用户。
jumpserver
mark's technic world
06-13 1080
一步一步安装环境系统: CentOS 7IP: 192.168.244.144关闭 selinux 和防火墙# CentOS 7 $ setenforce 0 # 可以设置配置文件永久关闭 $ systemctl stop iptables.service $ systemctl stop firewalld.service # CentOS6 $ setenforce 0 $ service...
openEuler操作系统安装+部署+配置
weixin_68256171的博客
01-22 3324
openEuler 22.03 LTS SP2安装部署+配置
openeuler 20.03 lts-sp2
08-15
openeuler 20.03 lts-sp2是openeuler操作系统的一个版本。openeuler是一个完全开源的操作系统，它基于Linux内核，由华为公司主导开发。20.03 lts-sp2是openeuler的第二个长期支持版本，该版本的发布日期为2020年3月。 这个版本的openeuler在提供通用操作系统功能的基础上，还增加了一些新的特性和改进。首先，它提供了更好的系统稳定性和安全性。通过经过长时间测试和bug修复，这个版本的openeuler在运行中更加稳定可靠，同时也考虑到了一些安全性问题，提供了更好的安全性保障。 其次，openeuler 20.03 lts-sp2还加强了云计算和容器化支持。它提供了一些针对云计算环境的特性，比如支持容器管理平台Kubernetes和容器运行平台Docker。这为用户在云环境中部署和管理应用程序提供了更加便捷的方式。 此外，openeuler 20.03 lts-sp2还包含了一些新的软件包和工具。它更新了一些核心组件的版本，同时也添加了一些新的软件包，例如编程语言、开发工具和数据库等。这样用户可以更加灵活地选择适合自己需求的软件。 总的来说，openeuler 20.03 lts-sp2是一个以稳定性、安全性和云计算为重点的openeuler版本，它为用户提供了更好的使用体验和更强大的功能支持。无论是在个人计算机、服务器还是云环境中，openeuler 20.03 lts-sp2都能够满足用户的各种需求。
评论 1
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包

打赏作者

ChaITSimpleLove

你的鼓励将是我创作的最大动力

¥1 ¥2 ¥4 ¥6 ¥10 ¥20
扫码支付：¥1
获取中
扫码支付

您的余额不足，请更换扫码支付或充值

打赏作者

实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值