JumpServer 是全球首款开源的堡垒机，使用 GNU GPL v3.0 开源协议，是符合 4A 规范的运维安全审计系统。
JumpServer 使用 Python / Django 为主进行开发，遵循 Web 2.0 规范，配备了业界领先的 Web Terminal 方案，交互界面美观、用户体验好。
JumpServer 采纳分布式架构，支持多机房跨区域部署，支持横向扩展，无资产数量及并发限制。
改变世界，从一点点开始。
特色
开源：零门槛，线上快速获取和安装；
分布式：轻松支持大规模并发访问；
无插件：仅需浏览器，极致的 Web Terminal 使用体验；
多云支持：一套系统，同时管理不同云上面的资产；
云端存储：审计录像云端存储，永不丢失；
多租户：一套系统，多个子公司和部门同时使用；
多应用支持：数据库，Windows远程应用，Kubernetes。
在线安装
https://www.fit2cloud.com/ 官网文档
一键部署安装
# 默认会安装到 /opt/jumpserver-installer-v2.23.3 目录 curl -sSL https://github.com/jumpserver/jumpserver/releases/download/v2.23.3/quick_start.sh | bash cd /opt/jumpserver-installer-v2.23.3
[root@localhost ~]#
[root@localhost ~]# curl -sSL https://github.com/jumpserver/jumpserver/releases/download/v2.23.3/quick_start.sh | bash
download install script to /opt/jumpserver-installer-v2.23.3
██╗██╗ ██╗███╗ ███╗██████╗ ███████╗███████╗██████╗ ██╗ ██╗███████╗██████╗
██║██║ ██║████╗ ████║██╔══██╗██╔════╝██╔════╝██╔══██╗██║ ██║██╔════╝██╔══██╗
██║██║ ██║██╔████╔██║██████╔╝███████╗█████╗ ██████╔╝██║ ██║█████╗ ██████╔╝
██ ██║██║ ██║██║╚██╔╝██║██╔═══╝ ╚════██║██╔══╝ ██╔══██╗╚██╗ ██╔╝██╔══╝ ██╔══██╗
╚█████╔╝╚██████╔╝██║ ╚═╝ ██║██║ ███████║███████╗██║ ██║ ╚████╔╝ ███████╗██║ ██║
╚════╝ ╚═════╝ ╚═╝ ╚═╝╚═╝ ╚══════╝╚══════╝╚═╝ ╚═╝ ╚═══╝ ╚══════╝╚═╝ ╚═╝
Version: v2.23.3
1. 检查配置文件
配置文件位置: /opt/jumpserver/config
/opt/jumpserver/config/config.txt [ √ ]
/opt/jumpserver/config/nginx/cert/server.crt [ √ ]
/opt/jumpserver/config/nginx/cert/server.key [ √ ]
完成
>>> 安装配置 Docker
1. 安装 Docker
开始下载 Docker 程序 ...
开始下载 Docker Compose 程序 ...
完成
2. 配置 Docker
是否需要支持 IPv6? (y/n) (默认为 n): 完成
3. 启动 Docker
Created symlink from /etc/systemd/system/multi-user.target.wants/docker.service to /etc/systemd/system/docker.service.
完成
>>> 加载 Docker 镜像
[jumpserver/redis:6-alpine]
6-alpine: Pulling from jumpserver/redis
5843afab3874: Pull complete
f2c041a97bd6: Pull complete
2ab181d61f92: Pull complete
0e735c6f0308: Pull complete
3494533ff85c: Pull complete
09ce5e93ca58: Pull complete
Digest: sha256:8300b885570faad626e569e7b8cfef3407c87050d705ff26e243200cb3f84da8
Status: Downloaded newer image for jumpserver/redis:6-alpine
docker.io/jumpserver/redis:6-alpine
[jumpserver/mysql:5]
5: Pulling from jumpserver/mysql
72a69066d2fe: Pull complete
93619dbc5b36: Pull complete
99da31dd6142: Pull complete
626033c43d70: Pull complete
37d5d7efb64e: Pull complete
ac563158d721: Pull complete
d2ba16033dad: Pull complete
0ceb82207cd7: Pull complete
37f2405cae96: Pull complete
e2482e017e53: Pull complete
70deed891d42: Pull complete
Digest: sha256:24fe4f4aaf4dd86920612aa925693da731dd35e6ab2146b860c8a2b3b750bd58
Status: Downloaded newer image for jumpserver/mysql:5
docker.io/jumpserver/mysql:5
[jumpserver/web:v2.23.3]
v2.23.3: Pulling from jumpserver/web
a2abf6c4d29d: Pull complete
da03644a1293: Pull complete
dcbfc6badd70: Pull complete
3f7ccff97047: Pull complete
49e31097680b: Pull complete
c423e1dacb26: Pull complete
372e5a4ef74d: Pull complete
36a55c524a18: Pull complete
b3ce3b3fbc9d: Pull complete
b33302e365af: Pull complete
68a5132a9f4b: Pull complete
aacc98a50e7e: Pull complete
Digest: sha256:98c8cb11df6d4082e9db57d6f7176ab6f6ff760dc57180060308491beb7af202
Status: Downloaded newer image for jumpserver/web:v2.23.3
docker.io/jumpserver/web:v2.23.3
[jumpserver/core:v2.23.3]
v2.23.3: Pulling from jumpserver/core
a2abf6c4d29d: Already exists
625294dad115: Pull complete
08df3e6c0bde: Pull complete
7e941b2681b0: Pull complete
8ca822cf3e83: Pull complete
a436e4d205a6: Pull complete
a799e347bc30: Pull complete
f94a31e5ea32: Pull complete
e4ac33bd20bb: Pull complete
dbc68f4b7cdb: Pull complete
24f1d5cff4db: Pull complete
f60bdd841978: Pull complete
Digest: sha256:b1d67cd2814775f849732f4c335858d3de531a29a988b4ab89ac0db24a3f5b09
Status: Downloaded newer image for jumpserver/core:v2.23.3
docker.io/jumpserver/core:v2.23.3
[jumpserver/koko:v2.23.3]
v2.23.3: Pulling from jumpserver/koko
a2abf6c4d29d: Already exists
28b2a3b8f0b9: Pull complete
d44a2c3c44d9: Pull complete
be8536999a83: Pull complete
6c4f943d5ede: Pull complete
bd1ddd4bc446: Pull complete
b3b5d36a2e19: Pull complete
7cb08a2b1056: Pull complete
ef06821a5547: Pull complete
1867f13fc12e: Pull complete
1277a02c09c6: Pull complete
9df07fa4de12: Pull complete
Digest: sha256:86a79390548d06139079763a685d120948e12faab13c6d5d713f15c5547f80f2
Status: Downloaded newer image for jumpserver/koko:v2.23.3
docker.io/jumpserver/koko:v2.23.3
[jumpserver/lion:v2.23.3]
v2.23.3: Pulling from jumpserver/lion
72a69066d2fe: Already exists
01971ece8edb: Pull complete
00efad7f1f86: Pull complete
ac262804a75a: Pull complete
0688de3fd063: Pull complete
2e94ff443643: Pull complete
d4b1196ea6e9: Pull complete
a8d784d54abb: Pull complete
72412a9ec197: Pull complete
bd74716c6f08: Pull complete
72444ddc4d0c: Pull complete
1445587a278b: Pull complete
ba198d9507c3: Pull complete
fa6c0ac58a01: Pull complete
7291187f0ef2: Pull complete
Digest: sha256:224fdd19847d08260a540671a13827b31371222da7ff9916e687da6c04392e0f
Status: Downloaded newer image for jumpserver/lion:v2.23.3
docker.io/jumpserver/lion:v2.23.3
[jumpserver/magnus:v2.23.3]
v2.23.3: Pulling from jumpserver/magnus
a2abf6c4d29d: Already exists
f80e0cc760bb: Pull complete
425cc696468b: Pull complete
8459730c720f: Pull complete
0314d1d7944a: Pull complete
3c854e16fdf7: Pull complete
Digest: sha256:f18038f5af5cc846e597a8f12e153893df2fd09d19f89e88c77aa4eb24132c05
Status: Downloaded newer image for jumpserver/magnus:v2.23.3
docker.io/jumpserver/magnus:v2.23.3
完成
>>> 安装配置 JumpServer
1. 配置加密密钥
SECRETE_KEY: NTY0RDg3OTAtRTVFRC1DNjc0LTQ3QTctRDlFNjc5RThGOUE0
BOOTSTRAP_TOKEN: NTY0RDg3OTAtRTVFRC1DNjc0
完成
2. 配置持久化目录
是否需要自定义持久化存储, 默认将使用目录 /opt/jumpserver? (y/n) (默认为 n): 完成
3. 配置 MySQL
是否使用外部 MySQL? (y/n) (默认为 n): 完成
4. 配置 Redis
是否使用外部 Redis? (y/n) (默认为 n): 完成
5. 配置对外端口
是否需要配置 JumpServer 对外访问端口? (y/n) (默认为 n): 完成
6. 初始化数据库
Creating network "jms_net" with driver "bridge"
Creating jms_redis ... done
Creating jms_mysql ... done
Creating jms_core ... done
2022-07-12 16:13:03 Collect static files
2022-07-12 16:13:03 Collect static files done
2022-07-12 16:13:03 Check database structure change ...
2022-07-12 16:13:03 Migrate model change to database ...
Operations to perform:
Apply all migrations: acls, admin, applications, assets, audits, auth, authentication, captcha, common, contenttypes, django_cas_ng, django_celery_beat, jms_oidc_rp, notifications, ops, orgs, perms, rbac, sessions, settings, terminal, tickets, users
Running migrations:
Applying contenttypes.0001_initial... OK
Applying contenttypes.0002_remove_content_type_name... OK
Applying auth.0001_initial... OK
Applying auth.0002_alter_permission_name_max_length... OK
Applying auth.0003_alter_user_email_max_length... OK
Applying auth.0004_alter_user_username_opts... OK
Applying auth.0005_alter_user_last_login_null... OK
Applying auth.0006_require_contenttypes_0002... OK
Applying auth.0007_alter_validators_add_error_messages... OK
Applying auth.0008_alter_user_username_max_length... OK
Applying users.0001_initial... OK
Applying users.0002_auto_20171225_1157_squashed_0019_auto_20190304_1459... OK
Applying authentication.0001_initial... OK
Applying authentication.0002_auto_20190729_1423... OK
Applying authentication.0003_loginconfirmsetting... OK
Applying authentication.0004_ssotoken... OK
Applying acls.0001_initial... OK
Applying acls.0002_auto_20210926_1047... OK
Applying acls.0003_auto_20211130_1037... OK
Applying admin.0001_initial... OK
Applying admin.0002_logentry_remove_auto_add... OK
Applying admin.0003_logentry_add_action_flag_choices... OK
Applying users.0020_auto_20190612_1825... OK
Applying users.0021_auto_20190625_1104... OK
Applying users.0022_auto_20190625_1105... OK
Applying users.0023_auto_20190724_1525... OK
Applying users.0024_auto_20191118_1612... OK
Applying users.0025_auto_20200206_1216... OK
Applying users.0026_auto_20200508_2105... OK
Applying users.0027_auto_20200616_1503... OK
Applying users.0028_auto_20200728_1805... OK
Applying users.0029_auto_20200814_1650... OK
Applying users.0030_auto_20200819_2041... OK
Applying users.0031_auto_20201118_1801... OK
Applying tickets.0001_initial... OK
Applying tickets.0002_auto_20200728_1146... OK
Applying tickets.0003_auto_20200804_1551... OK
Applying tickets.0004_ticket_comment... OK
Applying tickets.0005_ticket_meta_confirmed_system_users... OK
Applying tickets.0006_auto_20201023_1628... OK
Applying tickets.0007_auto_20201224_1821... OK
Applying terminal.0001_initial... OK
Applying terminal.0002_auto_20171228_0025_squashed_0009_auto_20180326_0957... OK
Applying terminal.0010_auto_20180423_1140... OK
Applying terminal.0011_auto_20180807_1116... OK
Applying terminal.0012_auto_20180816_1652... OK
Applying terminal.0013_auto_20181123_1113... OK
Applying terminal.0014_auto_20181226_1441... OK
Applying terminal.0015_auto_20190923_1529... OK
Applying terminal.0016_commandstorage_replaystorage... OK
Applying common.0001_initial... OK
Applying common.0002_auto_20180111_1407... OK
Applying common.0003_setting_category... OK
Applying common.0004_setting_encrypted... OK
Applying common.0005_auto_20190221_1902... OK
Applying common.0006_auto_20190304_1515... OK
Applying settings.0001_initial... OK
Applying terminal.0017_auto_20191125_0931... OK
Applying terminal.0018_auto_20191202_1010... OK
Applying terminal.0019_auto_20191206_1000... OK
Applying terminal.0020_auto_20191218_1721... OK
Applying terminal.0021_auto_20200213_1316... OK
Applying terminal.0022_session_is_success... OK
Applying terminal.0023_command_risk_level... OK
Applying terminal.0024_auto_20200715_1713... OK
Applying terminal.0025_auto_20200810_1735... OK
Applying terminal.0026_auto_20201027_1905... OK
Applying terminal.0027_auto_20201102_1651... OK
Applying terminal.0028_auto_20201110_1918... OK
Applying terminal.0029_auto_20201116_1757... OK
Applying terminal.0030_terminal_type... OK
Applying terminal.0031_auto_20210113_1356... OK
Applying assets.0001_initial... OK
Applying perms.0001_initial... OK
Applying assets.0002_auto_20180105_1807_squashed_0009_auto_20180307_1212... OK
Applying assets.0010_auto_20180307_1749_squashed_0019_auto_20180816_1320... OK
Applying perms.0002_auto_20171228_0025_squashed_0009_auto_20180903_1132... OK
Applying perms.0003_action... OK
Applying perms.0004_assetpermission_actions... OK
Applying assets.0020_auto_20180816_1652... OK
Applying assets.0021_auto_20180903_1132... OK
Applying assets.0022_auto_20181012_1717... OK
Applying assets.0023_auto_20181016_1650... OK
Applying assets.0024_auto_20181219_1614... OK
Applying assets.0025_auto_20190221_1902... OK
Applying assets.0026_auto_20190325_2035... OK
Applying applications.0001_initial... OK
Applying perms.0005_auto_20190521_1619... OK
Applying perms.0006_auto_20190628_1921... OK
Applying perms.0007_remove_assetpermission_actions... OK
Applying perms.0008_auto_20190911_1907... OK
Applying assets.0027_auto_20190521_1703... OK
Applying assets.0028_protocol... OK
Applying assets.0029_auto_20190522_1114... OK
Applying assets.0030_auto_20190619_1135... OK
Applying assets.0031_auto_20190621_1332... OK
Applying assets.0032_auto_20190624_2108... OK
Applying assets.0033_auto_20190624_2108... OK
Applying assets.0034_auto_20190705_1348... OK
Applying assets.0035_auto_20190711_2018... OK
Applying assets.0036_auto_20190716_1535... OK
Applying assets.0037_auto_20190724_2002... OK
Applying assets.0038_auto_20190911_1634... OK
Applying perms.0009_remoteapppermission_system_users... OK
Applying assets.0039_authbook_is_active... OK
Applying assets.0040_auto_20190917_2056... OK
Applying assets.0041_gathereduser... OK
Applying assets.0042_favoriteasset... OK
Applying assets.0043_auto_20191114_1111... OK
Applying assets.0044_platform... OK
Applying assets.0045_auto_20191206_1607... OK
Applying assets.0046_auto_20191218_1705... OK
Applying applications.0002_remove_remoteapp_system_user... OK
Applying applications.0003_auto_20191210_1659... OK
Applying applications.0004_auto_20191218_1705... OK
Applying perms.0010_auto_20191218_1705... OK
Applying perms.0011_auto_20200721_1739... OK
Applying assets.0047_assetuser... OK
Applying assets.0048_auto_20191230_1512... OK
Applying assets.0049_systemuser_sftp_root... OK
Applying assets.0050_auto_20200711_1740... OK
Applying assets.0051_auto_20200713_1143... OK
Applying assets.0052_auto_20200715_1535... OK
Applying assets.0053_auto_20200723_1232... OK
Applying assets.0054_auto_20200807_1032... OK
Applying applications.0005_k8sapp... OK
Applying perms.0012_k8sapppermission... OK
Applying assets.0055_auto_20200811_1845... OK
Applying assets.0056_auto_20200904_1751... OK
Applying assets.0057_fill_node_value_assets_amount_and_parent_key...
................................................................. OK
Applying perms.0013_rebuildusertreetask_usergrantedmappingnode... OK
Applying perms.0014_build_users_perm_tree... OK
Applying perms.0015_auto_20200929_1728... OK
Applying assets.0058_auto_20201023_1115... OK
Applying assets.0059_auto_20201027_1905... OK
Applying applications.0006_application... OK
Applying perms.0016_applicationpermission... OK
Applying perms.0017_auto_20210104_0435... OK
Applying assets.0060_node_full_value...
- Start migrate node value if has /
- Start migrate node full value
OK
Applying assets.0061_auto_20201116_1757... OK
Applying assets.0062_auto_20201117_1938... OK
Applying assets.0063_migrate_default_node_key...
Check old default node `key=0 value=Default` not exists
OK
Applying assets.0064_auto_20201203_1100... OK
Applying assets.0065_auto_20210121_1549... OK
Applying perms.0018_auto_20210208_1515... OK
Applying orgs.0001_initial... OK
Applying orgs.0002_auto_20180903_1132... OK
Applying orgs.0003_auto_20190916_1057... OK
Applying orgs.0004_organizationmember... OK
Applying orgs.0005_auto_20200721_1937... OK
Applying orgs.0006_auto_20200721_1937... OK
Applying orgs.0007_auto_20200728_1805... OK
Applying orgs.0008_auto_20200819_2041... OK
Applying orgs.0009_auto_20201023_1628... OK
Applying ops.0001_initial... OK
Applying ops.0002_celerytask... OK
Applying ops.0003_auto_20181207_1744... OK
Applying ops.0004_adhoc_run_as... OK
Applying ops.0005_auto_20181219_1807... OK
Applying ops.0006_auto_20190318_1023... OK
Applying ops.0007_auto_20190724_2002... OK
Applying ops.0008_auto_20190919_2100... OK
Applying ops.0009_auto_20191217_1713... OK
Applying ops.0010_auto_20191217_1758... OK
Applying ops.0011_auto_20200106_1534... OK
Applying ops.0012_auto_20200108_1659... OK
Applying ops.0013_auto_20200108_1706... OK
Applying ops.0014_auto_20200108_1749... OK
Applying ops.0015_auto_20200108_1809... OK
Applying ops.0016_commandexecution_org_id... OK
Applying ops.0017_auto_20200306_1747... OK
Applying ops.0018_auto_20200509_1434... OK
Applying ops.0019_adhocexecution_celery_task_id... OK
Applying audits.0001_initial... OK
Applying audits.0002_ftplog_org_id... OK
Applying audits.0003_auto_20180816_1652... OK
Applying audits.0004_operatelog_passwordchangelog_userloginlog... OK
Applying audits.0005_auto_20190228_1715... OK
Applying audits.0006_auto_20190726_1753... OK
Applying audits.0007_auto_20191202_1010... OK
Applying audits.0008_auto_20200508_2105... OK
Applying audits.0009_auto_20200624_1654... OK
Applying audits.0010_auto_20200811_1122... OK
Applying audits.0011_userloginlog_backend... OK
Applying assets.0066_auto_20210208_1802... OK
Applying applications.0007_auto_20201119_1110... OK
Applying applications.0008_auto_20210104_0435... OK
Applying orgs.0010_auto_20210219_1241...
Migrate model org id: Application done, use 0.83 ms
Migrate model org id: AdminUser done, use 1.38 ms
Migrate model org id: Asset done, use 1.65 ms
Migrate model org id: AuthBook done, use 1.05 ms
Migrate model org id: CommandFilter done, use 0.94 ms
Migrate model org id: CommandFilterRule done, use 0.65 ms
Migrate model org id: Domain done, use 0.86 ms
Migrate model org id: Gateway done, use 0.9 ms
Migrate model org id: GatheredUser done, use 0.71 ms
Migrate model org id: Label done, use 0.61 ms
Migrate model org id: Node done, use 0.67 ms
Migrate model org id: SystemUser done, use 0.7 ms
Migrate model org id: FTPLog done, use 0.82 ms
Migrate model org id: OperateLog done, use 0.95 ms
Migrate model org id: AdHoc done, use 0.73 ms
Migrate model org id: AdHocExecution done, use 0.71 ms
Migrate model org id: CommandExecution done, use 0.84 ms
Migrate model org id: Task done, use 1.45 ms
Migrate model org id: ApplicationPermission done, use 0.91 ms
Migrate model org id: AssetPermission done, use 0.81 ms
Migrate model org id: UserAssetGrantedTreeNodeRelation done, use 1.44 ms
Migrate model org id: Session done, use 1.64 ms
Migrate model org id: Command done, use 0.89 ms
Migrate model org id: Ticket done, use 0.67 ms
Migrate model org id: UserGroup done, use 0.84 ms
Will add users to default org: 1
Add users to default org: 1-1
done, use 2.51 ms
OK
Applying assets.0067_auto_20210311_1113... OK
Applying assets.0068_auto_20210312_1455... OK
Applying assets.0069_change_node_key0_to_key1...
--> Not exist key=0 nodes, do nothing.
OK
Applying assets.0070_auto_20210426_1515... OK
Applying assets.0071_systemuser_type...
OK
Applying assets.0072_historicalauthbook...
OK
Applying assets.0073_auto_20210606_1142...
OK
Applying assets.0074_remove_systemuser_assets... OK
Applying assets.0075_auto_20210705_1759... OK
Applying assets.0076_delete_assetuser... OK
Applying applications.0009_applicationuser... OK
Applying applications.0010_appaccount_historicalappaccount... OK
Applying applications.0011_auto_20210826_1759... OK
Applying applications.0012_auto_20211014_2209... OK
Applying applications.0013_auto_20211026_1711... OK
Applying applications.0014_auto_20211105_1605... OK
Applying applications.0015_auto_20220112_2035... OK
Applying applications.0016_auto_20220118_1455... OK
Applying applications.0017_auto_20220217_2135... OK
Applying applications.0018_auto_20220223_1539... OK
Applying applications.0019_auto_20220310_1853... OK
Applying applications.0020_auto_20220316_2028... OK
Applying assets.0077_auto_20211012_1642... OK
Applying assets.0078_auto_20211014_2209... OK
Applying assets.0079_auto_20211102_1922... OK
Applying assets.0080_auto_20211104_1347... OK
Applying assets.0081_auto_20211105_1605... OK
Applying assets.0082_auto_20211209_1440... OK
Applying assets.0083_auto_20211215_1436... OK
Applying assets.0084_auto_20220112_1959... OK
Applying assets.0085_commandfilterrule_ignore_case... OK
Applying assets.0086_auto_20220217_2135... OK
Applying assets.0087_auto_20220223_1539... OK
Applying assets.0088_auto_20220303_1612... OK
Applying assets.0089_auto_20220310_0616... OK
Applying assets.0090_auto_20220412_1145... OK
Applying audits.0012_auto_20210414_1443... OK
Applying audits.0013_auto_20211130_1037... OK
Applying audits.0014_auto_20220505_1902... OK
Applying auth.0009_alter_user_last_name_max_length... OK
Applying auth.0010_alter_group_name_max_length... OK
Applying auth.0011_update_proxy_permissions... OK
Applying auth.0012_alter_user_first_name_max_length... OK
Applying authentication.0005_delete_loginconfirmsetting... OK
Applying authentication.0006_auto_20211227_1059... OK
Applying authentication.0007_connectiontoken... OK
Applying authentication.0008_superconnectiontoken... OK
Applying authentication.0009_auto_20220310_0616... OK
Applying authentication.0010_temptoken... OK
Applying captcha.0001_initial... OK
Applying django_cas_ng.0001_initial... OK
Applying django_celery_beat.0001_initial... OK
Applying django_celery_beat.0002_auto_20161118_0346... OK
Applying django_celery_beat.0003_auto_20161209_0049... OK
Applying django_celery_beat.0004_auto_20170221_0000... OK
Applying django_celery_beat.0005_add_solarschedule_events_choices... OK
Applying django_celery_beat.0006_auto_20180322_0932... OK
Applying django_celery_beat.0007_auto_20180521_0826... OK
Applying django_celery_beat.0008_auto_20180914_1922... OK
Applying django_celery_beat.0006_auto_20180210_1226... OK
Applying django_celery_beat.0006_periodictask_priority... OK
Applying django_celery_beat.0009_periodictask_headers... OK
Applying django_celery_beat.0010_auto_20190429_0326... OK
Applying django_celery_beat.0011_auto_20190508_0153... OK
Applying django_celery_beat.0012_periodictask_expire_seconds... OK
Applying django_celery_beat.0013_auto_20200609_0727... OK
Applying django_celery_beat.0014_remove_clockedschedule_enabled... OK
Applying django_celery_beat.0015_edit_solarschedule_events_choices... OK
Applying jms_oidc_rp.0001_initial... OK
Applying users.0032_userpasswordhistory... OK
Applying users.0033_user_need_update_password... OK
Applying users.0034_auto_20210506_1448... OK
Applying users.0035_auto_20210526_1100... OK
Applying users.0036_user_feishu_id... OK
Applying notifications.0001_initial... OK
Applying notifications.0002_auto_20210909_1946...
Init user message subscription: 1
OK
Applying ops.0020_adhoc_run_system_user... OK
Applying ops.0021_auto_20211130_1037... OK
Applying rbac.0001_initial... OK
Applying rbac.0002_auto_20210929_1409... OK
Applying rbac.0003_auto_20211130_1037...Update builtin Role: SystemAdmin - True
Update builtin Role: SystemAuditor - True
Update builtin Role: SystemComponent - True
Update builtin Role: User - True
Update builtin Role: OrgAdmin - True
Update builtin Role: OrgAuditor - True
Update builtin Role: OrgUser - True
OK
Applying rbac.0004_auto_20211201_1901...Create role binding: 0-1 using: 0.00s
Create role binding: 0-1 using: 0.00s
OK
Applying orgs.0011_auto_20211223_1913... OK
Applying orgs.0012_auto_20220118_1054... OK
Applying perms.0019_auto_20210906_1044... OK
Applying perms.0020_auto_20210910_1103... OK
Applying perms.0021_auto_20211105_1605... OK
Applying perms.0022_applicationpermission_actions... OK
Applying perms.0023_auto_20220112_2035... OK
Applying perms.0024_auto_20220217_2135... OK
Applying perms.0025_auto_20220223_1539... OK
Applying perms.0026_auto_20220307_1500... OK
Applying perms.0027_auto_20220310_1802... OK
Applying perms.0028_auto_20220316_2028... OK
Applying rbac.0005_auto_20220307_1524... OK
Applying rbac.0006_auto_20220310_0616... OK
Applying rbac.0007_auto_20220314_1525... OK
Applying rbac.0008_auto_20220411_1709... OK
Applying rbac.0009_auto_20220411_1724... OK
Applying sessions.0001_initial... OK
Applying settings.0002_auto_20210729_1546... OK
Applying settings.0003_auto_20210901_1035... OK
Applying settings.0004_auto_20220211_1401... OK
Applying settings.0005_auto_20220310_0616... OK
Applying settings.0006_remove_setting_enabled... OK
Applying terminal.0032_auto_20210302_1853... OK
Applying terminal.0033_auto_20210324_1008... OK
Applying terminal.0034_auto_20210406_1434... OK
Applying terminal.0035_auto_20210517_1448... OK
Applying terminal.0036_auto_20210604_1124... OK
Applying terminal.0037_auto_20210623_1748... OK
Applying terminal.0038_task_kwargs... OK
Applying terminal.0039_auto_20210805_1552... OK
Applying terminal.0040_sessionjoinrecord_sessionsharing... OK
Applying terminal.0041_auto_20211105_1605... OK
Applying terminal.0042_auto_20211229_1619... OK
Applying terminal.0043_auto_20220217_2135... OK
Applying terminal.0044_auto_20220223_1539... OK
Applying terminal.0045_auto_20220228_1144... OK
Applying terminal.0046_auto_20220228_1744... OK
Applying terminal.0047_auto_20220302_1951... OK
Applying terminal.0048_endpoint_endpointrule... OK
Applying terminal.0049_endpoint_redis_port... OK
Applying terminal.0050_auto_20220606_1745... OK
Applying tickets.0008_auto_20210311_1113... OK
Applying tickets.0009_auto_20210426_1720... OK
Applying tickets.0010_auto_20210812_1618... OK
Applying tickets.0011_remove_approvalrule_assignees_display... OK
Applying tickets.0012_ticketsession... OK
Applying tickets.0013_ticket_serial_num...
Fill ticket serial number ... 0 OK
Applying tickets.0014_auto_20220217_2135... OK
Applying tickets.0015_superticket... OK
Applying users.0037_user_secret_key... OK
Applying users.0038_auto_20211209_1140... OK
Applying users.0039_auto_20211229_1852... OK
After migration, update builtin role permissions
完成
>>> 安装完成了
1. 可以使用如下命令启动, 然后访问
cd /opt/jumpserver-installer-v2.23.3
./jmsctl.sh start
2. 其它一些管理命令
./jmsctl.sh stop
./jmsctl.sh restart
./jmsctl.sh backup
./jmsctl.sh upgrade
更多还有一些命令, 你可以 ./jmsctl.sh --help 来了解
3. Web 访问
http://192.168.100.20:80
默认用户: admin 默认密码: admin
4. SSH/SFTP 访问
ssh -p2222 admin@192.168.100.20
sftp -P2222 admin@192.168.100.20
5. 更多信息
我们的官网: https://www.jumpserver.org/
我们的文档: https://docs.jumpserver.org/
jms_redis is up-to-date
jms_mysql is up-to-date
Creating jms_core ... done
Creating jms_celery ... done
Creating jms_koko ... done
Creating jms_magnus ... done
Creating jms_web ... done
Creating jms_lion ... done
[root@localhost ~]#
安装完成后配置文件 /opt/jumpserver/config/config.txt
[root@localhost jumpserver-installer-v2.23.3]# cd /opt/jumpserver/config/
[root@localhost config]# ls
config.txt core koko mariadb mysql nginx redis
[root@localhost config]# cat config.txt
# 以下设置如果为空系统会自动生成随机字符串填入
## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
## 安装配置, 可以使用华为云加速下载, arm64 用户需要注释掉 DOCKER_IMAGE_PREFIX
# DOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.com
VOLUME_DIR=/opt/jumpserver
DOCKER_DIR=/var/lib/docker
SECRET_KEY=NTY0RDg3OTAtRTVFRC1DNjc0LTQ3QTctRDlFNjc5RThGOUE0
BOOTSTRAP_TOKEN=NTY0RDg3OTAtRTVFRC1DNjc0
LOG_LEVEL=ERROR
## MySQL 配置, USE_EXTERNAL_MYSQL=1 表示使用外置 MySQL, 请输入正确的 MySQL 信息
USE_EXTERNAL_MYSQL=0
DB_HOST=mysql
DB_PORT=3306
DB_USER=root
DB_PASSWORD=NTY0RDg3OTAtRTVFRC1DNjc0LT
DB_NAME=jumpserver
## Redis 配置, USE_EXTERNAL_REDIS=1 表示使用外置 Redis, 请输入正确的 Redis 信息
USE_EXTERNAL_REDIS=0
REDIS_HOST=redis
REDIS_PORT=6379
REDIS_PASSWORD=NTY0RDg3OTAtRTVFRC1DNjc0LT
## Compose 项目设置, 如果 192.168.250.0/24 网段与你现有网段冲突, 请修改然后重启 JumpServer
COMPOSE_PROJECT_NAME=jms
COMPOSE_HTTP_TIMEOUT=3600
DOCKER_CLIENT_TIMEOUT=3600
DOCKER_SUBNET=192.168.250.0/24
## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
USE_IPV6=0
DOCKER_SUBNET_IPV6=fc00:1010:1111:200::/64
## 访问配置
HTTP_PORT=80
SSH_PORT=2222
MAGNUS_MYSQL_PORT=33060
MAGNUS_MARIADB_PORT=33061
MAGNUS_REDIS_PORT=63790
## HTTPS 配置, 参考 https://docs.jumpserver.org/zh/master/admin-guide/proxy/ 配置
# USE_LB=1
# HTTPS_PORT=443
# SERVER_NAME=your_domain_name
# SSL_CERTIFICATE=your_cert
# SSL_CERTIFICATE_KEY=your_cert_key
## Nginx 文件上传大小
CLIENT_MAX_BODY_SIZE=4096m
## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
USE_TASK=1
## XPack, USE_XPACK=1 表示开启, 开源版本设置无效
USE_XPACK=0
RDP_PORT=3389
MAGNUS_POSTGRE_PORT=54320
## Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=true 表示关闭浏览器即 session 过期
# SESSION_COOKIE_AGE=86400
SESSION_EXPIRE_AT_BROWSER_CLOSE=true
## 组件配置
CORE_HOST=http://core:8080
JUMPSERVER_ENABLE_FONT_SMOOTHING=true
TCP_SEND_BUFFER_BYTES=4194304
TCP_RECV_BUFFER_BYTES=6291456
## 终端使用宿主 HOSTNAME 标识
SERVER_HOSTNAME=${HOSTNAME}
## 额外的配置
CURRENT_VERSION=v2.23.3
[root@localhost config]#
启动，停止 ，重启，卸载等 服务
cd /opt/jumpserver-installer-v2.23.3
# 启动
./jmsctl.sh start
# 停止
./jmsctl.sh down
# 卸载
./jmsctl.sh uninstall
# 帮助
./jmsctl.sh -h
Installation Commands:
install 安装 JumpServer
upgrade [version] 升级 JumpServer
check_update 检查 JumpServer
reconfig 重新配置 JumpServer
Management Commands:
start 启动 JumpServer
stop 停止 JumpServer
close 关闭 JumpServer
restart 重启 JumpServer
status 检查 JumpServer
down 下线 JumpServer
uninstall 卸载 JumpServer
打开jump server，web页面
http://192.168.100.20:80
默认用户: admin 默认密码: admin
更改初始密码
359
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
