Jumpserver堡垒机的部署（docker）

启动mysql

docker run -d --name mysql --restart=always -e MYSQL_ROOT_PASSWORD=nanhavezhi123  -p 3306:3306 -v /data/mysql/data:/var/lib/mysql mysql:5.7 --character-set-server=utf8mb4 --collation-server=utf8mb4_unicode_ci

创建jumpserver的数据库
注意：密码不要设置简单密码，否则会导致jumpserver无法写入数据！提示无法连接mysql

docker exec -it mysql /bin/bash
mysql -u root -pnanhavezhi123
mysql> create database jumpserver default charset 'utf8mb4';
mysql> grant all on jumpserver.* to 'jumpserver'@'%' identified by 'nanhavezhi123';
mysql> flush privileges;
mysql> exit;
#exit

启动redis

docker run -d -it --name redis -p 6379:6379 -v /data/redis/data:/data --restart=always  --sysctl net.core.somaxconn=1024  redis:4.0.10 --requirepass "123456"

--requirepass "123456"  授权密码

Jumpserver

生成随机加密密钥

if [ "$SECRET_KEY" = "" ]; then SECRET_KEY=`cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 50`; echo "SECRET_KEY=$SECRET_KEY" >> ~/.bashrc; echo $SECRET_KEY; else echo $SECRET_KEY; fi

if [ "$BOOTSTRAP_TOKEN" = "" ]; then BOOTSTRAP_TOKEN=`cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 16`; echo "BOOTSTRAP_TOKEN=$BOOTSTRAP_TOKEN" >> ~/.bashrc; echo $BOOTSTRAP_TOKEN; else echo $BOOTSTRAP_TOKEN; fi

启动jumpserver

docker run -d --name jumpserver -h jumpserver --restart=always  \
    -v /data/jumpserver:/opt/jumpserver/data/media \
    -p 80:80 \
    -p 2222:2222 \
    -e SECRET_KEY=$SECRET_KEY \
    -e BOOTSTRAP_TOKEN=$BOOTSTRAP_TOKEN \
    -e DB_HOST=MySQL机器的ip地址 \
    -e DB_PORT=3306 \
    -e DB_USER=jumpserver \
    -e DB_PASSWORD="123" \
    -e DB_NAME=jumpserver \
    -e REDIS_HOST=MySQL机器的ip地址 \
    -e REDIS_PORT=6379 \
    -e REDIS_PASSWORD="123456" \
jumpserver/jms_all

-h 指定docker主机名
-e 指定环境变量，注意修改mysql和redis的ip地址和密码

查看jumpserver启动日志

docker logs -f jumpserver

Web访问

IP即可
用户名：admin
密码：admin

重置一下密码

简单的设置

用户和用户组

用户登录