Jumpserver一键部署v2.21.3

最新推荐文章于 2024-04-24 10:53:11 发布
最新推荐文章于 2024-04-24 10:53:11 发布
阅读量1.4k 收藏 1
点赞数
分类专栏： Jumpserver 文章标签： 运维 nginx linux
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/pokes/article/details/124878903
版权

Jumpserver一键部署

部署条件

新装CentOS7，关闭防火墙和SELinux，部署完成后再开启防火墙

  • CPU最少2核
  • 内存最少4G
[root@localhost ~]# cat /etc/centos-release
CentOS Linux release 7.9.2009 (Core)
[root@localhost ~]# uname -r
3.10.0-1160.62.1.el7.x86_64

######CPU最少2核
[root@localhost ~]# cat /proc/cpuinfo | grep "physical id" 
physical id	: 0
physical id	: 2   

######内存最少4G
[root@localhost ~]# free -m
              total        used        free      shared  buff/cache   available
Mem:           3789         721         343           8        2724        2776
Swap:          2047           0        2047

官方提示说不建议部署在生产环境中，但是我觉得还可以。挺稳的，反正我们需求不是很大，奔了再重新部署

自动化部署

curl -sSL https://github.com/jumpserver/jumpserver/releases/download/v2.21.3/quick_start.sh | bash

脚本执行过程附在文章最后

默认安装目录 /opt/jumpserver-installer-v2.21.3/

[root@localhost ~]# cd /opt/jumpserver
jumpserver/                   jumpserver-installer-v2.21.3/

启动jumpserver

[root@localhost jumpserver-installer-v2.21.3]# pwd
/opt/jumpserver-installer-v2.21.3

[root@localhost jumpserver-installer-v2.21.3]# ls
compose  config-example.txt  config_init  jmsctl.sh  LICENSE  locale  quick_start.sh  README.md  scripts  static.env  utils
[root@localhost jumpserver-installer-v2.21.3]# ./jmsctl.sh start
jms_redis is up-to-date
jms_mysql is up-to-date
Creating jms_core ... done
Creating jms_lion   ... done
Creating jms_web    ... done
Creating jms_celery ... done
Creating jms_koko   ... done
Creating jms_magnus ... done

管理命令

cd /opt/jumpserver-installer-v2.21.3

./jmsctl.sh start
./jmsctl.sh stop
./jmsctl.sh restart   
./jmsctl.sh backup
./jmsctl.sh upgrade

jumpserver添加域名

jumpserver官方自带了配置nginx，可以添加自己想用的域名，打开下面的文件即可。

官方还是很贴心的，里面全是中文的注释

/opt/jumpserver/config/nginx/lb_http_server.conf

[root@localhost opt]# ls
containerd  jumpserver  jumpserver-installer-v2.21.3
[root@localhost opt]# cd jumpserver
[root@localhost jumpserver]# ls
config  core  koko  lion  magnus  mysql  nginx  redis
[root@localhost jumpserver]# vim /opt/jumpserver/config/nginx/lb_http_server.conf

# Todo: May be can auto discovery
upstream http_server {
  ip_hash;
  server web:80;  # 这个是可以通过容器访问, 外部访问是 80端口
  # server HOST2:80;  # 另外的要写真实IP
}

server {
  listen 80;
  # listen [::]:80;
  # server_name demo.jumpserver.org;  # 取消注释并自行修改成你自己的域名
  return 301 https://$server_name$request_uri;
}
  listen 443 ssl;
  # listen [::]:443 ssl;
  # server_name demo.jumpserver.org;      # 取消注释并自行修改成你自己的域名
  server_tokens off;
  ssl_certificate cert/server.crt;        # 修改 server.crt 为你的证书, 不要改路径 certs/
  ssl_certificate_key cert/server.key;    # 修改 server.key 为你的证书, 不要改路径 certs/
  ssl_session_timeout 1d;
  ssl_session_cache shared:MozSSL:10m;
  ssl_session_tickets off;
  ssl_protocols TLSv1.1 TLSv1.2;
  ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4:!DH:!DHE:!DES:!ECDHE-RSA-DES-CBC3-SHA;
  add_header Strict-Transport-Security "max-age=31536000" always;
  ssl_prefer_server_ciphers off;

  client_max_body_size 5000m;

  location / {
    proxy_pass http://http_server;
    proxy_buffering off;
    proxy_request_buffering off;
    proxy_http_version 1.1;
    proxy_set_header Host $host;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection $http_connection;
    proxy_set_header X-Forwarded-For $remote_addr;
    # proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;  # 如果上层还有其他 slb 需要使用 $proxy_add_x_forwarded_for 获取真实 ip

    proxy_ignore_client_abort on;
    proxy_connect_timeout 600;
    proxy_send_timeout 600;
    proxy_read_timeout 600;
    send_timeout 6000;
  }
}

我是虚拟机环境，先就不改了。我们登录看看

验证结果

默认用户名密码：admin/admin

在这里插入图片描述

首次登陆强制修改密码

在这里插入图片描述

附：脚本执行过程

[root@localhost ~]# curl -sSL https://github.com/jumpserver/jumpserver/releases/download/v2.8.2/quick_start.sh | bash
download install script to /opt/jumpserver-installe (开始下载安装脚本到 /opt/jumpserver-installe)


       ██╗██╗   ██╗███╗   ███╗██████╗ ███████╗███████╗██████╗ ██╗   ██╗███████╗██████╗
       ██║██║   ██║████╗ ████║██╔══██╗██╔════╝██╔════╝██╔══██╗██║   ██║██╔════╝██╔══██╗
       ██║██║   ██║██╔████╔██║██████╔╝███████╗█████╗  ██████╔╝██║   ██║█████╗  ██████╔╝
  ██   ██║██║   ██║██║╚██╔╝██║██╔═══╝ ╚════██║██╔══╝  ██╔══██╗╚██╗ ██╔╝██╔══╝  ██╔══██╗
  ╚█████╔╝╚██████╔╝██║ ╚═╝ ██║██║     ███████║███████╗██║  ██║ ╚████╔╝ ███████╗██║  ██║
   ╚════╝  ╚═════╝ ╚═╝     ╚═╝╚═╝     ╚══════╝╚══════╝╚═╝  ╚═╝  ╚═══╝  ╚══════╝╚═╝  ╚═╝

								   Version:  v2.21.3  

1. 检查配置文件
配置文件位置: /opt/jumpserver/config
/opt/jumpserver/config/config.txt  [ √ ]
/opt/jumpserver/config/nginx/cert/server.crt   [ √ ]
/opt/jumpserver/config/nginx/cert/server.key   [ √ ]
完成

>>> 安装配置 Docker
1. 安装 Docker
开始下载 Docker 程序 ...
开始下载 Docker Compose 程序 ...
完成

2. 配置 Docker
是否需要支持 IPv6? (y/n)  (默认为 n): 完成

3. 启动 Docker
Created symlink from /etc/systemd/system/multi-user.target.wants/docker.service to /etc/systemd/system/docker.service.
完成

>>> 加载 Docker 镜像
[jumpserver/redis:6-alpine]
6-alpine: Pulling from jumpserver/redis
5843afab3874: Pull complete 
f2c041a97bd6: Pull complete 
2ab181d61f92: Pull complete 
0e735c6f0308: Pull complete 
3494533ff85c: Pull complete 
09ce5e93ca58: Pull complete 
Digest: sha256:8300b885570faad626e569e7b8cfef3407c87050d705ff26e243200cb3f84da8
Status: Downloaded newer image for jumpserver/redis:6-alpine
docker.io/jumpserver/redis:6-alpine

[jumpserver/mysql:5]
5: Pulling from jumpserver/mysql
6ec7b7d162b2: Pull complete 
fedd960d3481: Pull complete 
7ab947313861: Pull complete 
64f92f19e638: Pull complete 
3e80b17bff96: Pull complete 
014e976799f9: Pull complete 
59ae84fee1b3: Pull complete 
7d1da2a18e2e: Pull complete 
301a28b700b9: Pull complete 
979b389fc71f: Pull complete 
403f729b1bad: Pull complete 
Digest: sha256:b3b2703de646600b008cbb2de36b70b21e51e7e93a7fca450d2b08151658b2dd
Status: Downloaded newer image for jumpserver/mysql:5
docker.io/jumpserver/mysql:5

[jumpserver/web:v2.21.3]
v2.21.3: Pulling from jumpserver/web
a2abf6c4d29d: Downloading 
da03644a1293: Download complete 
dcbfc6badd70: Download complete 
3f7ccff97047: Download complete 
49e31097680b: Download complete 
c423e1dacb26: Download complete 
b99d5d996654: Download complete 
cc7313c9de23: Download complete 
24a16806ba0c: Download complete 
e45be6294d04: Download complete 
1031225a2523: Download complete 
16bd93408191: Download complete 
v2.21.3: Pulling from jumpserver/web
a2abf6c4d29d: Pull complete 
da03644a1293: Pull complete 
dcbfc6badd70: Pull complete 
3f7ccff97047: Pull complete 
49e31097680b: Pull complete 
c423e1dacb26: Pull complete 
b99d5d996654: Pull complete 
cc7313c9de23: Pull complete 
24a16806ba0c: Pull complete 
e45be6294d04: Pull complete 
1031225a2523: Pull complete 
16bd93408191: Pull complete 
Digest: sha256:db1885afcb408df344c4e9981dfa093475b99cb8ecf59da8796f0299667685fb
Status: Downloaded newer image for jumpserver/web:v2.21.3
docker.io/jumpserver/web:v2.21.3

[jumpserver/core:v2.21.3]
v2.21.3: Pulling from jumpserver/core
a2abf6c4d29d: Already exists 
625294dad115: Pull complete 
08df3e6c0bde: Pull complete 
7e941b2681b0: Pull complete 
8ca822cf3e83: Pull complete 
3d9727b97be2: Pull complete 
9e38c8594861: Pull complete 
7cbc9447a8f4: Pull complete 
ab532f013756: Pull complete 
f09538e377a9: Pull complete 
Digest: sha256:9e69ee8ffc359a4ee0d0e9c94c81b5fc0eded0a18aefbda9bb780414e1627787
Status: Downloaded newer image for jumpserver/core:v2.21.3
docker.io/jumpserver/core:v2.21.3

[jumpserver/koko:v2.21.3]
v2.21.3: Pulling from jumpserver/koko
a2abf6c4d29d: Already exists 
2c1a7e91d4e4: Pull complete 
96de146d0b8c: Pull complete 
03dd6aed8c1e: Pull complete 
91b8840f8e6e: Pull complete 
ba55b25bc461: Pull complete 
2168e211b761: Pull complete 
3d2cb44035da: Pull complete 
cfc53f2e1ba2: Pull complete 
2311c94cb1cd: Pull complete 
caee78407526: Pull complete 
05afe0ab097c: Pull complete 
Digest: sha256:4b1175123b68076c23e8b37096f7bf16293e3de065ed58ebe947eadc4b2cbaed
Status: Downloaded newer image for jumpserver/koko:v2.21.3
docker.io/jumpserver/koko:v2.21.3

[jumpserver/lion:v2.21.3]
v2.21.3: Pulling from jumpserver/lion
72a69066d2fe: Downloading 
01971ece8edb: Download complete 
00efad7f1f86: Download complete 
ac262804a75a: Download complete 
0688de3fd063: Download complete 
2e94ff443643: Download complete 
d4b1196ea6e9: Download complete 
c9ec7b715f2a: Download complete 
2e73730e3d84: Download complete 
b8cb7dfe7af9: Download complete 
9d875f6d7272: Download complete 
0b54bdce5460: Download complete 
ff6e0699eeb9: Download complete 
91d5fc659785: Download complete 
7d652fd39339: Download complete 
v2.21.3: Pulling from jumpserver/lion
72a69066d2fe: Pull complete 
01971ece8edb: Pull complete 
00efad7f1f86: Pull complete 
ac262804a75a: Pull complete 
0688de3fd063: Pull complete 
2e94ff443643: Pull complete 
d4b1196ea6e9: Pull complete 
c9ec7b715f2a: Pull complete 
2e73730e3d84: Pull complete 
b8cb7dfe7af9: Pull complete 
9d875f6d7272: Pull complete 
0b54bdce5460: Pull complete 
ff6e0699eeb9: Pull complete 
91d5fc659785: Pull complete 
7d652fd39339: Pull complete 
Digest: sha256:392b6eaa0e86e6524ac374602f9a1370d4fc8b1118810139528b332cccd28bcd
Status: Downloaded newer image for jumpserver/lion:v2.21.3
docker.io/jumpserver/lion:v2.21.3

[jumpserver/magnus:v2.21.3]
v2.21.3: Pulling from jumpserver/magnus
a2abf6c4d29d: Already exists 
fbacd524939e: Pull complete 
b6a6371ff2d8: Pull complete 
9ea96861c420: Pull complete 
b0a1aa352238: Pull complete 
d35fd332b45a: Pull complete 
Digest: sha256:cb17df1dbc4e809ef69bdb1a6ac53473e560e769f5c7037abcb41782cd7fb282
Status: Downloaded newer image for jumpserver/magnus:v2.21.3
docker.io/jumpserver/magnus:v2.21.3

完成

>>> 安装配置 JumpServer
1. 配置加密密钥
SECRETE_KEY:     MTc4ZjRkNTYtMzNlNi0yNjhjLWU5YzQtMzMwZmQyMDJiMGZi
BOOTSTRAP_TOKEN: MTc4ZjRkNTYtMzNlNi0yNjhj
完成

2. 配置持久化目录
是否需要自定义持久化存储, 默认将使用目录 /opt/jumpserver? (y/n)  (默认为 n): 完成

3. 配置 MySQL
是否使用外部 MySQL? (y/n)  (默认为 n): 完成

4. 配置 Redis
是否使用外部 Redis? (y/n)  (默认为 n): 完成

5. 配置对外端口
是否需要配置 JumpServer 对外访问端口? (y/n)  (默认为 n): 完成

6. 初始化数据库
Creating network "jms_net" with driver "bridge"
Creating jms_mysql ... done
Creating jms_redis ... done
Creating jms_core  ... done
2022-05-08 11:12:53 Collect static files
2022-05-08 11:12:54 Collect static files done
2022-05-08 11:12:54 Check database structure change ...
2022-05-08 11:12:54 Migrate model change to database ...
Operations to perform:
  Apply all migrations: acls, admin, applications, assets, audits, auth, authentication, captcha, common, contenttypes, django_cas_ng, django_celery_beat, jms_oidc_rp, notifications, ops, orgs, perms, rbac, sessions, settings, terminal, tickets, users
Running migrations:
  Applying contenttypes.0001_initial... OK
  Applying contenttypes.0002_remove_content_type_name... OK
  Applying auth.0001_initial... OK
  Applying auth.0002_alter_permission_name_max_length... OK
  Applying auth.0003_alter_user_email_max_length... OK
  Applying auth.0004_alter_user_username_opts... OK
  Applying auth.0005_alter_user_last_login_null... OK
  Applying auth.0006_require_contenttypes_0002... OK
  Applying auth.0007_alter_validators_add_error_messages... OK
  Applying auth.0008_alter_user_username_max_length... OK
  Applying users.0001_initial... OK
  Applying users.0002_auto_20171225_1157_squashed_0019_auto_20190304_1459... OK
  Applying authentication.0001_initial... OK
  Applying authentication.0002_auto_20190729_1423... OK
  Applying authentication.0003_loginconfirmsetting... OK
  Applying authentication.0004_ssotoken... OK
  Applying acls.0001_initial... OK
  Applying acls.0002_auto_20210926_1047... OK
  Applying acls.0003_auto_20211130_1037... OK
  Applying admin.0001_initial... OK
  Applying admin.0002_logentry_remove_auto_add... OK
  Applying admin.0003_logentry_add_action_flag_choices... OK
  Applying users.0020_auto_20190612_1825... OK
  Applying users.0021_auto_20190625_1104... OK
  Applying users.0022_auto_20190625_1105... OK
  Applying users.0023_auto_20190724_1525... OK
  Applying users.0024_auto_20191118_1612... OK
  Applying users.0025_auto_20200206_1216... OK
  Applying users.0026_auto_20200508_2105... OK
  Applying users.0027_auto_20200616_1503... OK
  Applying users.0028_auto_20200728_1805... OK
  Applying users.0029_auto_20200814_1650... OK
  Applying users.0030_auto_20200819_2041... OK
  Applying users.0031_auto_20201118_1801... OK
  Applying tickets.0001_initial... OK
  Applying tickets.0002_auto_20200728_1146... OK
  Applying tickets.0003_auto_20200804_1551... OK
  Applying tickets.0004_ticket_comment... OK
  Applying tickets.0005_ticket_meta_confirmed_system_users... OK
  Applying tickets.0006_auto_20201023_1628... OK
  Applying tickets.0007_auto_20201224_1821... OK
  Applying terminal.0001_initial... OK
  Applying terminal.0002_auto_20171228_0025_squashed_0009_auto_20180326_0957... OK
  Applying terminal.0010_auto_20180423_1140... OK
  Applying terminal.0011_auto_20180807_1116... OK
  Applying terminal.0012_auto_20180816_1652... OK
  Applying terminal.0013_auto_20181123_1113... OK
  Applying terminal.0014_auto_20181226_1441... OK
  Applying terminal.0015_auto_20190923_1529... OK
  Applying terminal.0016_commandstorage_replaystorage... OK
  Applying common.0001_initial... OK
  Applying common.0002_auto_20180111_1407... OK
  Applying common.0003_setting_category... OK
  Applying common.0004_setting_encrypted... OK
  Applying common.0005_auto_20190221_1902... OK
  Applying common.0006_auto_20190304_1515... OK
  Applying settings.0001_initial... OK
  Applying terminal.0017_auto_20191125_0931... OK
  Applying terminal.0018_auto_20191202_1010... OK
  Applying terminal.0019_auto_20191206_1000... OK
  Applying terminal.0020_auto_20191218_1721... OK
  Applying terminal.0021_auto_20200213_1316... OK
  Applying terminal.0022_session_is_success... OK
  Applying terminal.0023_command_risk_level... OK
  Applying terminal.0024_auto_20200715_1713... OK
  Applying terminal.0025_auto_20200810_1735... OK
  Applying terminal.0026_auto_20201027_1905... OK
  Applying terminal.0027_auto_20201102_1651... OK
  Applying terminal.0028_auto_20201110_1918... OK
  Applying terminal.0029_auto_20201116_1757... OK
  Applying terminal.0030_terminal_type... OK
  Applying terminal.0031_auto_20210113_1356... OK
  Applying assets.0001_initial... OK
  Applying perms.0001_initial... OK
  Applying assets.0002_auto_20180105_1807_squashed_0009_auto_20180307_1212... OK
  Applying assets.0010_auto_20180307_1749_squashed_0019_auto_20180816_1320... OK
  Applying perms.0002_auto_20171228_0025_squashed_0009_auto_20180903_1132... OK
  Applying perms.0003_action... OK
  Applying perms.0004_assetpermission_actions... OK
  Applying assets.0020_auto_20180816_1652... OK
  Applying assets.0021_auto_20180903_1132... OK
  Applying assets.0022_auto_20181012_1717... OK
  Applying assets.0023_auto_20181016_1650... OK
  Applying assets.0024_auto_20181219_1614... OK
  Applying assets.0025_auto_20190221_1902... OK
  Applying assets.0026_auto_20190325_2035... OK
  Applying applications.0001_initial... OK
  Applying perms.0005_auto_20190521_1619... OK
  Applying perms.0006_auto_20190628_1921... OK
  Applying perms.0007_remove_assetpermission_actions... OK
  Applying perms.0008_auto_20190911_1907... OK
  Applying assets.0027_auto_20190521_1703... OK
  Applying assets.0028_protocol... OK
  Applying assets.0029_auto_20190522_1114... OK
  Applying assets.0030_auto_20190619_1135... OK
  Applying assets.0031_auto_20190621_1332... OK
  Applying assets.0032_auto_20190624_2108... OK
  Applying assets.0033_auto_20190624_2108... OK
  Applying assets.0034_auto_20190705_1348... OK
  Applying assets.0035_auto_20190711_2018... OK
  Applying assets.0036_auto_20190716_1535... OK
  Applying assets.0037_auto_20190724_2002... OK
  Applying assets.0038_auto_20190911_1634... OK
  Applying perms.0009_remoteapppermission_system_users... OK
  Applying assets.0039_authbook_is_active... OK
  Applying assets.0040_auto_20190917_2056... OK
  Applying assets.0041_gathereduser... OK
  Applying assets.0042_favoriteasset... OK
  Applying assets.0043_auto_20191114_1111... OK
  Applying assets.0044_platform... OK
  Applying assets.0045_auto_20191206_1607... OK
  Applying assets.0046_auto_20191218_1705... OK
  Applying applications.0002_remove_remoteapp_system_user... OK
  Applying applications.0003_auto_20191210_1659... OK
  Applying applications.0004_auto_20191218_1705... OK
  Applying perms.0010_auto_20191218_1705... OK
  Applying perms.0011_auto_20200721_1739... OK
  Applying assets.0047_assetuser... OK
  Applying assets.0048_auto_20191230_1512... OK
  Applying assets.0049_systemuser_sftp_root... OK
  Applying assets.0050_auto_20200711_1740... OK
  Applying assets.0051_auto_20200713_1143... OK
  Applying assets.0052_auto_20200715_1535... OK
  Applying assets.0053_auto_20200723_1232... OK
  Applying assets.0054_auto_20200807_1032... OK
  Applying applications.0005_k8sapp... OK
  Applying perms.0012_k8sapppermission... OK
  Applying assets.0055_auto_20200811_1845... OK
  Applying assets.0056_auto_20200904_1751... OK
  Applying assets.0057_fill_node_value_assets_amount_and_parent_key...

  ................................................................. OK
  Applying perms.0013_rebuildusertreetask_usergrantedmappingnode... OK
  Applying perms.0014_build_users_perm_tree... OK
  Applying perms.0015_auto_20200929_1728... OK
  Applying assets.0058_auto_20201023_1115... OK
  Applying assets.0059_auto_20201027_1905... OK
  Applying applications.0006_application... OK
  Applying perms.0016_applicationpermission... OK
  Applying perms.0017_auto_20210104_0435... OK
  Applying assets.0060_node_full_value...
- Start migrate node value if has /
- Start migrate node full value
 OK
  Applying assets.0061_auto_20201116_1757... OK
  Applying assets.0062_auto_20201117_1938... OK
  Applying assets.0063_migrate_default_node_key...
Check old default node `key=0 value=Default` not exists
 OK
  Applying assets.0064_auto_20201203_1100... OK
  Applying assets.0065_auto_20210121_1549... OK
  Applying perms.0018_auto_20210208_1515... OK
  Applying orgs.0001_initial... OK
  Applying orgs.0002_auto_20180903_1132... OK
  Applying orgs.0003_auto_20190916_1057... OK
  Applying orgs.0004_organizationmember... OK
  Applying orgs.0005_auto_20200721_1937... OK
  Applying orgs.0006_auto_20200721_1937... OK
  Applying orgs.0007_auto_20200728_1805... OK
  Applying orgs.0008_auto_20200819_2041... OK
  Applying orgs.0009_auto_20201023_1628... OK
  Applying ops.0001_initial... OK
  Applying ops.0002_celerytask... OK
  Applying ops.0003_auto_20181207_1744... OK
  Applying ops.0004_adhoc_run_as... OK
  Applying ops.0005_auto_20181219_1807... OK
  Applying ops.0006_auto_20190318_1023... OK
  Applying ops.0007_auto_20190724_2002... OK
  Applying ops.0008_auto_20190919_2100... OK
  Applying ops.0009_auto_20191217_1713... OK
  Applying ops.0010_auto_20191217_1758... OK
  Applying ops.0011_auto_20200106_1534... OK
  Applying ops.0012_auto_20200108_1659... OK
  Applying ops.0013_auto_20200108_1706... OK
  Applying ops.0014_auto_20200108_1749... OK
  Applying ops.0015_auto_20200108_1809... OK
  Applying ops.0016_commandexecution_org_id... OK
  Applying ops.0017_auto_20200306_1747... OK
  Applying ops.0018_auto_20200509_1434... OK
  Applying ops.0019_adhocexecution_celery_task_id... OK
  Applying audits.0001_initial... OK
  Applying audits.0002_ftplog_org_id... OK
  Applying audits.0003_auto_20180816_1652... OK
  Applying audits.0004_operatelog_passwordchangelog_userloginlog... OK
  Applying audits.0005_auto_20190228_1715... OK
  Applying audits.0006_auto_20190726_1753... OK
  Applying audits.0007_auto_20191202_1010... OK
  Applying audits.0008_auto_20200508_2105... OK
  Applying audits.0009_auto_20200624_1654... OK
  Applying audits.0010_auto_20200811_1122... OK
  Applying audits.0011_userloginlog_backend... OK
  Applying assets.0066_auto_20210208_1802... OK
  Applying applications.0007_auto_20201119_1110... OK
  Applying applications.0008_auto_20210104_0435... OK
  Applying orgs.0010_auto_20210219_1241...
Migrate model org id: Application done, use 1.44 ms
Migrate model org id: AdminUser done, use 1.55 ms
Migrate model org id: Asset done, use 1.44 ms
Migrate model org id: AuthBook done, use 1.37 ms
Migrate model org id: CommandFilter done, use 1.1 ms
Migrate model org id: CommandFilterRule done, use 1.05 ms
Migrate model org id: Domain done, use 1.1 ms
Migrate model org id: Gateway done, use 1.37 ms
Migrate model org id: GatheredUser done, use 1.11 ms
Migrate model org id: Label done, use 1.05 ms
Migrate model org id: Node done, use 1.08 ms
Migrate model org id: SystemUser done, use 1.08 ms
Migrate model org id: FTPLog done, use 1.33 ms
Migrate model org id: OperateLog done, use 1.03 ms
Migrate model org id: AdHoc done, use 1.11 ms
Migrate model org id: AdHocExecution done, use 1.08 ms
Migrate model org id: CommandExecution done, use 1.12 ms
Migrate model org id: Task done, use 1.33 ms
Migrate model org id: ApplicationPermission done, use 1.11 ms
Migrate model org id: AssetPermission done, use 1.06 ms
Migrate model org id: UserAssetGrantedTreeNodeRelation done, use 1.1 ms
Migrate model org id: Session done, use 1.07 ms
Migrate model org id: Command done, use 1.09 ms
Migrate model org id: Ticket done, use 1.08 ms
Migrate model org id: UserGroup done, use 1.24 ms
Will add users to default org: 1
Add users to default org: 1-1
done, use 5.82 ms
 OK
  Applying assets.0067_auto_20210311_1113... OK
  Applying assets.0068_auto_20210312_1455... OK
  Applying assets.0069_change_node_key0_to_key1...
--> Not exist key=0 nodes, do nothing.
 OK
  Applying assets.0070_auto_20210426_1515... OK
  Applying assets.0071_systemuser_type...
 OK
  Applying assets.0072_historicalauthbook...
 OK
  Applying assets.0073_auto_20210606_1142...

 OK
  Applying assets.0074_remove_systemuser_assets... OK
  Applying assets.0075_auto_20210705_1759... OK
  Applying assets.0076_delete_assetuser... OK
  Applying applications.0009_applicationuser... OK
  Applying applications.0010_appaccount_historicalappaccount... OK
  Applying applications.0011_auto_20210826_1759... OK
  Applying applications.0012_auto_20211014_2209... OK
  Applying applications.0013_auto_20211026_1711... OK
  Applying applications.0014_auto_20211105_1605... OK
  Applying applications.0015_auto_20220112_2035... OK
  Applying applications.0016_auto_20220118_1455... OK
  Applying applications.0017_auto_20220217_2135... OK
  Applying applications.0018_auto_20220223_1539... OK
  Applying applications.0019_auto_20220310_1853... OK
  Applying applications.0020_auto_20220316_2028... OK
  Applying assets.0077_auto_20211012_1642... OK
  Applying assets.0078_auto_20211014_2209... OK
  Applying assets.0079_auto_20211102_1922... OK
  Applying assets.0080_auto_20211104_1347... OK
  Applying assets.0081_auto_20211105_1605... OK
  Applying assets.0082_auto_20211209_1440... OK
  Applying assets.0083_auto_20211215_1436... OK
  Applying assets.0084_auto_20220112_1959... OK
  Applying assets.0085_commandfilterrule_ignore_case... OK
  Applying assets.0086_auto_20220217_2135... OK
  Applying assets.0087_auto_20220223_1539... OK
  Applying assets.0088_auto_20220303_1612... OK
  Applying assets.0089_auto_20220310_0616... OK
  Applying assets.0090_auto_20220412_1145... OK
  Applying audits.0012_auto_20210414_1443... OK
  Applying audits.0013_auto_20211130_1037... OK
  Applying auth.0009_alter_user_last_name_max_length... OK
  Applying auth.0010_alter_group_name_max_length... OK
  Applying auth.0011_update_proxy_permissions... OK
  Applying auth.0012_alter_user_first_name_max_length... OK
  Applying authentication.0005_delete_loginconfirmsetting... OK
  Applying authentication.0006_auto_20211227_1059... OK
  Applying authentication.0007_connectiontoken... OK
  Applying authentication.0008_superconnectiontoken... OK
  Applying authentication.0009_auto_20220310_0616... OK
  Applying authentication.0010_temptoken... OK
  Applying captcha.0001_initial... OK
  Applying django_cas_ng.0001_initial... OK
  Applying django_celery_beat.0001_initial... OK
  Applying django_celery_beat.0002_auto_20161118_0346... OK
  Applying django_celery_beat.0003_auto_20161209_0049... OK
  Applying django_celery_beat.0004_auto_20170221_0000... OK
  Applying django_celery_beat.0005_add_solarschedule_events_choices... OK
  Applying django_celery_beat.0006_auto_20180322_0932... OK
  Applying django_celery_beat.0007_auto_20180521_0826... OK
  Applying django_celery_beat.0008_auto_20180914_1922... OK
  Applying django_celery_beat.0006_auto_20180210_1226... OK
  Applying django_celery_beat.0006_periodictask_priority... OK
  Applying django_celery_beat.0009_periodictask_headers... OK
  Applying django_celery_beat.0010_auto_20190429_0326... OK
  Applying django_celery_beat.0011_auto_20190508_0153... OK
  Applying django_celery_beat.0012_periodictask_expire_seconds... OK
  Applying django_celery_beat.0013_auto_20200609_0727... OK
  Applying django_celery_beat.0014_remove_clockedschedule_enabled... OK
  Applying django_celery_beat.0015_edit_solarschedule_events_choices... OK
  Applying jms_oidc_rp.0001_initial... OK
  Applying users.0032_userpasswordhistory... OK
  Applying users.0033_user_need_update_password... OK
  Applying users.0034_auto_20210506_1448... OK
  Applying users.0035_auto_20210526_1100... OK
  Applying users.0036_user_feishu_id... OK
  Applying notifications.0001_initial... OK
  Applying notifications.0002_auto_20210909_1946...
  Init user message subscription: 1
 OK
  Applying ops.0020_adhoc_run_system_user... OK
  Applying ops.0021_auto_20211130_1037... OK
  Applying rbac.0001_initial... OK
  Applying rbac.0002_auto_20210929_1409... OK
  Applying rbac.0003_auto_20211130_1037...Update builtin Role: SystemAdmin - True
Update builtin Role: SystemAuditor - True
Update builtin Role: SystemComponent - True
Update builtin Role: User - True
Update builtin Role: OrgAdmin - True
Update builtin Role: OrgAuditor - True
Update builtin Role: OrgUser - True
 OK
  Applying rbac.0004_auto_20211201_1901... OK
  Applying orgs.0011_auto_20211223_1913... OK
  Applying orgs.0012_auto_20220118_1054... OK
  Applying perms.0019_auto_20210906_1044... OK
  Applying perms.0020_auto_20210910_1103... OK
  Applying perms.0021_auto_20211105_1605... OK
  Applying perms.0022_applicationpermission_actions... OK
  Applying perms.0023_auto_20220112_2035... OK
  Applying perms.0024_auto_20220217_2135... OK
  Applying perms.0025_auto_20220223_1539... OK
  Applying perms.0026_auto_20220307_1500... OK
  Applying perms.0027_auto_20220310_1802... OK
  Applying perms.0028_auto_20220316_2028... OK
  Applying rbac.0005_auto_20220307_1524... OK
  Applying rbac.0006_auto_20220310_0616... OK
  Applying rbac.0007_auto_20220314_1525... OK
  Applying rbac.0008_auto_20220411_1709... OK
  Applying rbac.0009_auto_20220411_1724... OK
  Applying sessions.0001_initial... OK
  Applying settings.0002_auto_20210729_1546... OK
  Applying settings.0003_auto_20210901_1035... OK
  Applying settings.0004_auto_20220211_1401... OK
  Applying settings.0005_auto_20220310_0616... OK
  Applying terminal.0032_auto_20210302_1853... OK
  Applying terminal.0033_auto_20210324_1008... OK
  Applying terminal.0034_auto_20210406_1434... OK
  Applying terminal.0035_auto_20210517_1448... OK
  Applying terminal.0036_auto_20210604_1124... OK
  Applying terminal.0037_auto_20210623_1748... OK
  Applying terminal.0038_task_kwargs... OK
  Applying terminal.0039_auto_20210805_1552... OK
  Applying terminal.0040_sessionjoinrecord_sessionsharing... OK
  Applying terminal.0041_auto_20211105_1605... OK
  Applying terminal.0042_auto_20211229_1619... OK
  Applying terminal.0043_auto_20220217_2135... OK
  Applying terminal.0044_auto_20220223_1539... OK
  Applying terminal.0045_auto_20220228_1144... OK
  Applying terminal.0046_auto_20220228_1744... OK
  Applying terminal.0047_auto_20220302_1951... OK
  Applying terminal.0048_endpoint_endpointrule... OK
  Applying tickets.0008_auto_20210311_1113... OK
  Applying tickets.0009_auto_20210426_1720... OK
  Applying tickets.0010_auto_20210812_1618... OK
  Applying tickets.0011_remove_approvalrule_assignees_display... OK
  Applying tickets.0012_ticketsession... OK
  Applying tickets.0013_ticket_serial_num...
Fill ticket serial number ... 0 OK
  Applying tickets.0014_auto_20220217_2135... OK
  Applying tickets.0015_superticket... OK
  Applying users.0037_user_secret_key... OK
  Applying users.0038_auto_20211209_1140... OK
  Applying users.0039_auto_20211229_1852... OK
After migration, update builtin role permissions
完成

>>> 安装完成了
1. 可以使用如下命令启动, 然后访问
cd /opt/jumpserver-installer-v2.21.3
./jmsctl.sh start

2. 其它一些管理命令
./jmsctl.sh stop
./jmsctl.sh restart
./jmsctl.sh backup
./jmsctl.sh upgrade
更多还有一些命令, 你可以 ./jmsctl.sh --help 来了解

3. Web 访问
http://10.5.6.62:80
默认用户: admin  默认密码: admin

4. SSH/SFTP 访问
ssh -p2222 admin@10.5.6.62
sftp -P2222 admin@10.5.6.62

5. 更多信息
我们的官网: https://www.jumpserver.org/
我们的文档: https://docs.jumpserver.org/
兔子王cool
关注
  • 0
    点赞
  • 踩
  • 1
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
专栏目录
JumpServer开源堡垒机V2.21.4-amd64
06-09
堡垒机，即在一个特定的 网络环境 下，为了保障网络和数据不受来自外部和内部用户的入侵和破坏，而运用各种技术手段监控和记录运维人员对网络内的服务器、网络设备、安全设备、数据库等设备的操作行为，以便集中 报警 、及时处理及 审计 定责。 其从功能上讲，它综合了核心系统 运维 和 安全审计 管控两大主干功能，从技术实现上讲，通过切断终端计算机对网络和服务器资源的直接访问，而采用协议代理的方式，接管了终端计算机对网络和服务器的访问。 形象地说，终端计算机对目标的访问，均需要经过运维安全审计的翻译。 打一个比方，运维安全审计扮演着看门者的工作，所有对网络设备和服务器的请求都要从这扇大门经过。
开源工具专题-05 Jumpserver部署安装
蛮荒仙侠
02-11 918
注本教程由整理同步发布，本人技术分享站点：blog.hukanfa.com转发本文请备注原文链接，本文内容整理日期：2024-02-11博客名称：五维空间-影子，欢迎关注简要说明。
JumpServer 堡垒机架构
最新发布
jekc2008的专栏
04-24 441
打开config.txt 配置文件，定义 DOMAINS 字段# 可信任 DOMAINS 定义, # 定义可信任的访问 IP, 请根据实际情况修改, 如果是公网 IP 请改成对应的公网 IP,# DOMAINS="demo.jumpserver.org" # 使用域名访问# DOMAINS="172.17.200.191" # 使用 IP 访问# DOMAINS="demo.jumpserver.org,172.17.200.191" # 使用 IP 和 域名一起访问 DOMAINS=
JumpServer登陆报错 提示设置配置项 DOMAINS=jump.wbes.com
ma_qi_chao的博客
01-06 1585
2. 解决方法，编辑core服务把DOMAINS=jump.wbes.com加到环境变量。1. helm 一键安装jumpserver后提示如下报错。
开源堡垒机JumpServer本地安装并配置公网访问地址
qq_74415153的博客
01-22 1529
今天给大家介绍介绍如何简单设置即可使本地jump server 结合cpolar 内网穿透实现远程访问jump server 管理界面.
nginx配置jumpserver域名登陆
qq_23605089的博客
03-26 472
nginx配置jumpserver域名登陆
一、JumpServer堡垒机安装部署
SpringLei
09-16 882
JumpServer 是广受欢迎的开源堡垒机，可以满足等保双认证、管理员操作日志记录等需求，并提高系统运维安全性。简单易上手功能强大。 注：系统为最小化安装，版本是CentOS7.6，分区为默认。
jumpserver配置ldap集成windows AD认证
weixin_34283445的博客
07-22 3123
开源堡垒机jumpserver现在最新到1.3.3了；功能越来越强大了，支持windows和linux登录审计、录屏、操作记录等功能，推荐使用，安装步骤看以下官方链接。http://docs.jumpserver.org/zh/docs/step_by_step.html由于用户数较多，公司有AD环境，就想着直接集成AD做登录验证了。windows AD架构，AD活动目录域：test.com 用户...
jumpserver堡垒机配置https访问
W1124824402的博客
01-04 6682
SSL_CERTIFICATE=xxx.pem # /opt/jumpserver/config/nginx/cert 目录下你的证书文件 SSL_CERTIFICATE_KEY=xxx.key # /opt/jumpserver/config/nginx/cert 目录下你的 key 文件。注意配置文件编写是 /opt/jumpserver/config的路径不是/opt/jumpserver-installer-v2.28.1/config_init/这里。（这样自签证书可能会报错）
Jumpserver使用域名访问报错 使用IP+端口没有错误
qq_43010883的博客
08-17 3348
Jumpserver使用域名访问报错 使用IP+端口没有错误Jumpserver使用域名访问报错 使用IP+端口没有错误 Jumpserver使用域名访问报错 使用IP+端口没有错误 首先我给大家介绍一下我部署Jumpserver环境 docker部署jumpserver使用Nginx进行代理 使用域名访问 我用域名访问jumpserver是正常可以访问的， 但是在web会话那个地方连接到其他服务...
本地虚机Jumpserver使用域名访问报错 使用IP+端口没有错误
Jomly Kellenda的博客
09-01 1574
我在本地Windows VMware 15的环境中部署了CentOS7.5，下载jumpserver-offline-installer-v2.28.1-amd64-138.tar.gz并安装部署。1、能使用http:ip访问堡垒机。达成；2、能使用https:ip访问堡垒机。达成；3、能使用http:域名访问堡垒机。达成；4、能使用https:域名访问堡垒机。未达成；5、最终目标是能在https:域名访问堡垒机时，证书安全。未达成。这一个过程比较简单，直接无脑操作就行，http:ip访问成功。
EnhancedScroller v2.21.4.unitypackage
05-15
EnhancedScroller v2.21.4.unitypackageEnhancedScroller v2.21.4.unitypackageEnhancedScroller v2.21.4.unitypackage
Razer_Synapse_Installer_v2.21.21.1.exe
05-12
Razer_Synapse_Installer_v2.21.21.1.exe
zipkin-server-2.21.5-exec.jar
07-11
zipkin服务端版本下载 启动方式如下： java -jar zipkin-server-2.21.5-exec.jar
excel Reader v2.21.zip
07-16
Excel Reader是一个读取Excel xsl文件内容的一个PHP类，能够获取.XLS文件中任意单元格的值和格式。
Jumpserver堡垒机
weixin_46525246的博客
08-17 1996
Jumpserver简介 堡垒机概述： 为互联网企业提供了认证，授权，审计，自动化运维等功能。 堡垒机，在一个特定的网络环境下，为了保障网络和数据不受来自外部和内部用户的入侵和破坏，可以实时收集和监控网络环境。一但出现违规的操作导致的事故，可以快速定位到原因和责任人 跳板机概述： 跳板机就是一台服务器，开发或运维人员在维护过程中首先要统一登录到这台服务器，然后再登录到目标设备进行维护和操作。 跳板机缺点：没有实现对运维人员操作行为的控制和审计，使用跳板机的过程中还是会出现误操作、违规操作导致的事故，一旦出
jumpserver网域功能使用
CN_TangZheng的博客
05-12 3197
注：域名功能介绍：网域功能是为了解决部分环境（如：混合云）无法直接连接而新增的功能，原理是通过网关服务器进行跳转登录。JMS => 网域网关 => 目标资产 本次使用的服务器两台，一台当作对外开发对内中转的网关服务器（199的服务器），一台当作内网服务器（oracle的服务器） 实现的目标：通过网域功能，资产列表中可以添加内网服务器，并且实现连接 1.创建管理用户与系统用户 创建网域 创建资产 资产授权 ...
##jumpserver堡垒机部署##
qq_15290209的博客
07-12 1118
JumpServer 是全球首款开源的堡垒机，使用 GNU GPL v3.0 开源协议，是符合 4A 规范的运维安全审计系统。JumpServer 使用 Python / Django 为主进行开发，遵循 Web 2.0 规范，配备了业界领先的 Web Terminal 方案，交互界面美观、用户体验好。JumpServer 采纳分布式架构，支持多机房跨区域部署，支持横向扩展，无资产数量及并发限制。改变世界，从一点点开始。特色 开源：零门槛，线上快速获取和安装； 分布式：轻松支持大规模并发访问； 无插件：仅需
JumpServer部署指引
weixin_47450720的博客
03-17 455
Ubuntu 20.04上部署JumpServer的详细指引
web_razer_synapse_installer_v2.21.23.1.exe
05-01
web_razer_synapse_installer_v2.21.23.1.exe是雷蛇公司出品的一个软件安装程序。雷蛇公司是一家专业从事电竞设备和配件生产的公司，web_razer_synapse_installer_v2.21.23.1.exe是其为自家产品推出的驱动程序安装包，主要用于安装雷蛇设备的驱动程序和对设备进行个性化设置。该安装包操作简单、体积较小，在安装过程中不会占用太多资源，能够很好地保障设备的正常运行，并提供更个性化的使用体验。需要注意的是，安装web_razer_synapse_installer_v2.21.23.1.exe之前，需要先将雷蛇设备与计算机连接，以保证安装程序的正确识别设备并成功安装。此外，为了确保设备能够正常工作，建议用户在安装过程中认真阅读安装说明，按照提示逐步进行操作。总之，web_razer_synapse_installer_v2.21.23.1.exe是雷蛇设备用户安装驱动和配置设备的重要工具，能够提供更高效和舒适的使用体验。

“相关推荐”对你有帮助么？

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值