linux部署keycloak

1.解压keycloak-14.0.0.tar.gz

2.修改启动脚本

将启动脚本run.sh（单节点）或run-ha.sh （集群）上传到keycloak-14.0.0的根目录下，授权为可执行

在kc的根目录下创建log文件夹

3.配置MySQL

1. 将mysql文件夹放到modules/system/layers/keycloak 下

2. 修改standalone/configuration/standalone.xml(standalone-ha.xml)文件

        <subsystem xmlns="urn:jboss:domain:datasources:6.0">
            <datasources>
                <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}">
                    <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE</connection-url>
                    <driver>h2</driver>
                    <security>
                        <user-name>sa</user-name>
                        <password>sa</password>
                    </security>
                </datasource>
				<!--将中间的这个datasource改成mysql的-->
                <datasource jndi-name="java:jboss/datasources/KeycloakDS" pool-name="KeycloakDS" enabled="true" use-java-context="true">
                    <connection-url>jdbc:mysql://192.168.10.141:3306/keycloak?useSSL=false&amp;serverTimezone=GMT%2B8&amp;characterEncoding=UTF-8</connection-url>
                    <driver>mysql</driver>
                    <security>
                        <user-name>dac</user-name>
                        <password>dac</password>
                    </security>
                </datasource>
				<!--将中间的这个datasource改成mysql的-->
                <drivers>
                    <driver name="h2" module="com.h2database.h2">
                        <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
                    </driver>
	                <!--增加mysql驱动-->
                    <driver name="mysql" module="mysql.mysql-connector-java">
                        <xa-datasource-class>com.mysql.cj.jdbc.MysqlXADataSource</xa-datasource-class>
                    </driver>
                </drivers>
            </datasources>
        </subsystem>

4.启动服务

[opsuser@idc1-exchange-dac1 keycloak-14.0.0]$ ./run-ha.sh start 172.16.136.3 201

• 172.16.136.3 服务器ip
• 201 端口偏移量，端口为8080+201=8,281，不指定则是8080

5.访问

http://172.16.136.3:8281/auth/

admin/admin