jumpserver之docker安装

1.docker安装

1.1使用国内源安装docker-ce

yum install -y yum-utils device-mapper-persistent-data lvm2 vim

wget -O /etc/yum.repos.d/docker-ce.repo https://download.docker.com/linux/centos/docker-ce.repo

sed -i 's+download.docker.com+mirrors.tuna.tsinghua.edu.cn/docker-ce+' /etc/yum.repos.d/docker-ce.repo

yum clean all

yum makecache fast

yum install docker-ce -y

systemctl start docker

systemctl enable docker

docker --version

or

docker version

1.2国内源镜像加速配置

$ mkdir -p /etc/docker

$ vim /etc/docker/daemon.json

{

"registry-mirrors": ["http://hub-mirror.c.163.com"]

}

或者

{  

"registry-mirrors": ["https://registry.docker-cn.com","https://nrbewqda.mirror.aliyuncs.com","https://dmmxhzvq.mirror.aliyuncs.com"]

}

$ systemctl restart docker

2.安装junmpserver

2.1生成随机密码

if [ "$SECRET_KEY" = "" ]; then SECRET_KEY=`cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 50`; echo "SECRET_KEY=$SECRET_KEY" >> ~/.bashrc; echo $SECRET_KEY; else echo $SECRET_KEY; fi

if [ "$BOOTSTRAP_TOKEN" = "" ]; then BOOTSTRAP_TOKEN=`cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 16`; echo "BOOTSTRAP_TOKEN=$BOOTSTRAP_TOKEN" >> ~/.bashrc; echo $BOOTSTRAP_TOKEN; else echo $BOOTSTRAP_TOKEN; fi

2.2搭建mysql服务

mkdir -p /data/mysql/data

docker run -d --name mysql --restart=always -e MYSQL_ROOT_PASSWORD=1231123 -p 3306:3306 -v /data/mysql/data:/var/lib/mysql mysql:5.7 --character-set-server=utf8mb4 --collation-server=utf8mb4_unicode_ci

2.3创建jumpserver数据库

# docker exec -it mysql /bin/bash

# mysql -u root -p1231123

mysql> create database jumpserver default charset 'utf8mb4';

mysql> grant all on jumpserver.* to 'jumpserver'@'%' identified by '1231123';

mysql> flush privileges;

mysql> exit;

# exit

2.4搭建redis服务

mkdir -p /data/redis/data

docker run -d -it --name redis -p 6379:6379 -v /data/redis/data:/data --restart=always --sysctl net.core.somaxconn=1024 redis:4.0.10 --requirepass "1231123"

3.启动jumpserver

mkdir -p /data/jumpserver

docker run -d --name jumpserver -h jumpserver --restart=always \

-v /data/jumpserver:/opt/jumpserver/data/media \

-p 80:80 \

-p 2222:2222 \

-e SECRET_KEY=$SECRET_KEY \

-e BOOTSTRAP_TOKEN=$BOOTSTRAP_TOKEN \

-e DB_HOST=106.3.142.x\

-e DB_PORT=3306 \

-e DB_USER=jumpserver \

-e DB_PASSWORD="1231123" \

-e DB_NAME=jumpserver \

-e REDIS_HOST=106.3.142.x \

-e REDIS_PORT=6379 \

-e REDIS_PASSWORD="1231123" \

jumpserver/jms_all:1.5.6

3.1查看jumpserver启动日志