JumpServer安装

编译文档 - JumpServer 文档JumpServer 是全球首款开源的堡垒机https://docs.jumpserver.org/zh/v2.19.1/dev/build/

---

架构图：

---

apt-get install aptitude # （Debian系统的包管理工具）
aptitude install <package-name>

源码部署：

系统	内核	Python	Mysql	Redis	Nginx	Node	Go
Ubuntu 20.04	5.4.0-100-generic	Python 3.8.10	5.7.36	5.0.14	1.18.0	14.19.0	go1.17.7 linux/amd64

  

安装：JumpServer

Core是 JumpServer 的核心组件，由 Django 二次开发而来，内置了 Gunicorn Celery Beat Flower Daphne 服务。

为 JumpServer 项目单独创建 python3 虚拟环境。

python3 -m venv /opt/py3
source /opt/py3/bin/activate

每次运行项目都需要先执行 source /opt/py3/bin/activate 载入此环境。

pip install -U pip
pip install -r requirements/requirements.txt

修改配置文件：

启动 Core：

后台运行可以加 -d，./jms start -d

 

Lina 是 JumpServer 的前端 UI 项目，主要使用 Vue，Element UI 完成。

构建完成后, 生成在目录：/opt/lina-v2.19.1/lina/

配置Nginx：

server {
    listen 80;
    server_name jumpserver.***.com;
    
    client_max_body_size 5000m; #文件大小限制
    
    # Luna 配置
    location /luna/ {
    try_files $uri / /index.html;
    alias /opt/luna-v2.19.1/dist/;
    #    proxy_pass http://localhost:4200;
    }

    location /socket.io/ {
        proxy_pass http://localhost:5000/socket.io/;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    
        # WebSocket support
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }

    # Core data 静态资源
    location /media/replay/ {
        add_header Content-Encoding gzip;
        root /opt/jumpserver-v2.19.1/data/;
    }

    location /media/ {
        root /opt/jumpserver-v2.19.1/data/;
    }

    location /static/ {
        root /opt/jumpserver-v2.19.1/data/;
    }

    # KoKo Lion 配置
    location /koko/ {
        proxy_pass       http://127.0.0.1:5000;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_http_version 1.1;
        proxy_buffering off;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }

    # lion 配置
    location /lion/ {
        proxy_pass http://127.0.0.1:8081;
        proxy_buffering off;
        proxy_request_buffering off;
        proxy_http_version 1.1;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection $http_connection;
        proxy_ignore_client_abort on;
        proxy_connect_timeout 600;
        proxy_send_timeout 600;
        proxy_read_timeout 600;
        send_timeout 6000;
    }

    # Core 配置
    location /ws/ {
        proxy_pass http://127.0.0.1:8070;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_http_version 1.1;
        proxy_buffering off;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }

    location /api/ {
        proxy_pass http://127.0.0.1:8080;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    location /core/ {
        proxy_pass http://127.0.0.1:8080;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    # 前端 Lina
    location /ui/ {
        try_files $uri / /ui/index.html;
        alias /opt/lina-v2.19.1/lina/;
        # proxy_pass http://127.0.0.1:9528;
        # proxy_set_header X-Real-IP $remote_addr;
        # proxy_set_header Host $host;
        # proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    location / {
        rewrite ^/(.*)$ /ui/$1 last;
    }
}

访问：lina

 安装Luna 是 JumpServer 的前端 UI 项目，主要使用 Angular CLI 完成。

https://github.com/jumpserver/luna/releases/download/v2.19.1/luna-v2.19.1.tar.gz

 访问：luna

安装：Koko 是 Go 版本的 coco，重构了 coco 的 SSH/SFTP 服务和 Web Terminal 服务。

go version go1.17.7 linux/amd64

cd /opt/koko-v2.19.1

make 构建完成后, 生成在 build 目录下

pkg/srvconn/conn_k8s_container.go:15:2: k8s.io/client-go@v0.23.1: Get "https://proxy.golang.org/k8s.io/client-go/@v/v0.23.1.zip": dial tcp 142.251.43.17:443: i/o timeout

设置GOPROXY代理：go env -w GOPROXY=https://goproxy.cn,direct

查看build目录： 

配置：config.yml

# Bootstrap Token, 预共享秘钥, 用来注册coco使用的service account和terminal
# 请和jumpserver 配置文件中保持一致，注册完成后可以删除
BOOTSTRAP_TOKEN: <PleasgeChangeSameWithJumpserver>

启动 KoKo

后台运行可以加 -d，./koko -d

安装：Lion 使用了 Apache 软件基金会的开源项目 Guacamole，JumpServer 使用 Golang 和 Vue 重构了 Guacamole 实现 RDP/VNC 协议跳板机功能。

configure: error: "libpng is required for writing png messages"

apt-get install libpng-dev

configure: error: "libjpeg is required for writing jpeg messages"

apt-get install libjpeg-dev

configure: error: "Cairo is required for drawing instructions"

configure: error: "The OSSP UUID library is required"

apt-get install libossp-uuid-dev （https://guacamole.apache.org/doc/gug/installing-guacamole.html）

https://github.com/apache/guacamole-server

 make：

make install

ldconfig

启动 Guacd：/etc/init.d/guacd start

安装：Lion

# Bootstrap Token, 预共享秘钥, 用来注册使用的service account和terminal
# 请和jumpserver 配置文件中保持一致，注册完成后可以删除
BOOTSTRAP_TOKEN: <PleasgeChangeSameWithJumpserver>

 访问：