安装开源jumpserver全过程

环境

 系统: centOS7以上版本

I要求：需要把系统版本更新到最新

             CPU必须在2G以上

[root@localhost ~]# yum -y update
[root@localhost ~]# export DOCKER_IMAGE_PREFIX=swr.cn-north-1.myhuaweicloud.com
[root@localhost ~]# 
[root@localhost ~]# curl -sSL https://github.com/jumpserver/jumpserver/releases/download/v2.7.1/quick_start.sh | bash //开始从github上获取jumpserver服务
curl: (35) TCP connection reset by peer //由于是国外源可能会获取失败 多尝试几次就好了
[root@localhost ~]# curl -sSL https://github.com/jumpserver/jumpserver/releases/download/v2.7.1/quick_start.sh | bash -s -- 2.7.1 //不行就在bash后面加上-s --2.7.1版本


       ██╗██╗   ██╗███╗   ███╗██████╗ ███████╗███████╗██████╗ ██╗   ██╗███████╗██████╗
       ██║██║   ██║████╗ ████║██╔══██╗██╔════╝██╔════╝██╔══██╗██║   ██║██╔════╝██╔══██╗
       ██║██║   ██║██╔████╔██║██████╔╝███████╗█████╗  ██████╔╝██║   ██║█████╗  ██████╔╝
  ██   ██║██║   ██║██║╚██╔╝██║██╔═══╝ ╚════██║██╔══╝  ██╔══██╗╚██╗ ██╔╝██╔══╝  ██╔══██╗
  ╚█████╔╝╚██████╔╝██║ ╚═╝ ██║██║     ███████║███████╗██║  ██║ ╚████╔╝ ███████╗██║  ██║
  ╚════╝  ╚═════╝ ╚═╝     ╚═╝╚═╝     ╚══════╝╚══════╝╚═╝  ╚═╝  ╚═══╝  ╚══════╝╚═╝  ╚═╝

								   Version:  v2.7.1  

语言 Language  (cn/en)  (default cn):
[root@localhost ~]# cd /opt/jumpserver-installer-v2.7.1/ 进入目录
[root@localhost jumpserver-installer-v2.7.1]# ./jmsctl.sh install //执行命令开始安装


       ██╗██╗   ██╗███╗   ███╗██████╗ ███████╗███████╗██████╗ ██╗   ██╗███████╗██████╗
       ██║██║   ██║████╗ ████║██╔══██╗██╔════╝██╔════╝██╔══██╗██║   ██║██╔════╝██╔══██╗
       ██║██║   ██║██╔████╔██║██████╔╝███████╗█████╗  ██████╔╝██║   ██║█████╗  ██████╔╝
  ██   ██║██║   ██║██║╚██╔╝██║██╔═══╝ ╚════██║██╔══╝  ██╔══██╗╚██╗ ██╔╝██╔══╝  ██╔══██╗
  ╚█████╔╝╚██████╔╝██║ ╚═╝ ██║██║     ███████║███████╗██║  ██║ ╚████╔╝ ███████╗██║  ██║
  ╚════╝  ╚═════╝ ╚═╝     ╚═╝╚═╝     ╚══════╝╚══════╝╚═╝  ╚═╝  ╚═══╝  ╚══════╝╚═╝  ╚═╝

								   Version:  v2.7.1  

语言 Language  (cn/en)  (default cn): 


>>> 安装配置 JumpServer
1. 检查配置文件
配置文件位置: /opt/jumpserver/config/config.txt
完成

2. 配置 Nginx
配置文件: /opt/jumpserver/config/nginx/cert
完成

3. 备份配置文件
Back up to /opt/jumpserver/config/backup/config.txt.2021-03-18_11-44-07
完成
------------------------------------------------------
都选择默认的
4. 配置网络
是否需要支持 IPv6? (y/n)  (默认为 n): n 
完成

5. 配置加密密钥
自动生成 SECRETE_KEY:     ICAgICAgICBUWCBlcnJvcnMgMCAgZHJvcHBlZCAwIG92ZXJyd
自动生成 BOOTSTRAP_TOKEN: ICAgICAgICBUWCBl
完成

6. 配置持久化目录
修改日志录像等持久化的目录，可以找个最大的磁盘，并创建目录，如 /opt/jumpserver
注意：安装后不能更改，否则数据库可能会丢失

文件系统                 容量  已用  可用 已用% 挂载点
/dev/sda1               1014M  196M  819M   20% /boot

持久化存储目录 (默认为 /opt/jumpserver): 
完成

7. 配置 MySQL
是否使用外部 MySQL? (y/n)  (默认为 n): n //不使用外部mysql
完成

8. 配置 Redis
是否使用外部 Redis? (y/n)  (默认为 n): n //不使用外部redis
完成

>>> 安装配置 Docker
1. 安装 Docker
开始下载 Docker 程序 ...
--2021-03-18 11:44:19--  https://mirrors.aliyun.com/docker-ce/linux/static/stable/x86_64/docker-18.06.2-ce.tgz
正在解析主机 mirrors.aliyun.com (mirrors.aliyun.com)... 113.107.235.224, 183.61.241.230, 125.94.49.183, ...
正在连接 mirrors.aliyun.com (mirrors.aliyun.com)|113.107.235.224|:443... 已连接。
已发出 HTTP 请求，正在等待回应... 200 OK
长度：43834194 (42M) [application/octet-stream]
正在保存至: “/tmp/docker.tar.gz”

100%[====================================================================================================================================================================================================================================>] 43,834,194  12.5MB/s 用时 3.3s   

2021-03-18 11:44:22 (12.5 MB/s) - 已保存 “/tmp/docker.tar.gz” [43834194/43834194])

开始下载 Docker Compose 程序 ...
--2021-03-18 11:44:23--  https://get.daocloud.io/docker/compose/releases/download/1.27.4/docker-compose-Linux-x86_64
正在解析主机 get.daocloud.io (get.daocloud.io)... 106.75.86.15
正在连接 get.daocloud.io (get.daocloud.io)|106.75.86.15|:443... 已连接。
已发出 HTTP 请求，正在等待回应... 302 FOUND
位置：https://dn-dao-github-mirror.daocloud.io/docker/compose/releases/download/1.27.4/docker-compose-Linux-x86_64 [跟随至新的 URL]
--2021-03-18 11:44:27--  https://dn-dao-github-mirror.daocloud.io/docker/compose/releases/download/1.27.4/docker-compose-Linux-x86_64
正在解析主机 dn-dao-github-mirror.daocloud.io (dn-dao-github-mirror.daocloud.io)... 202.104.186.231, 183.2.199.240, 183.2.199.239, ...
正在连接 dn-dao-github-mirror.daocloud.io (dn-dao-github-mirror.daocloud.io)|202.104.186.231|:443... 已连接。
已发出 HTTP 请求，正在等待回应... 200 OK
长度：12218968 (12M) [application/x-executable]
正在保存至: “/tmp/docker-compose”

100%[====================================================================================================================================================================================================================================>] 12,218,968  17.2MB/s 用时 0.7s   

2021-03-18 11:44:28 (17.2 MB/s) - 已保存 “/tmp/docker-compose” [12218968/12218968])

完成

2. 配置 Docker
修改 Docker 镜像容器的默认存储目录, 可以找个最大的磁盘, 并创建目录, 如 /opt/docker
文件系统                 容量  已用  可用 已用% 挂载点
/dev/sda1               1014M  196M  819M   20% /boot

Docker 镜像存储目录 (默认为 /opt/docker): 
完成

3. 启动 Docker
Docker version has changed or Docker configuration file has been changed, do you want to restart? (y/n)  (默认为 y): y //开启docker服务
完成

>>> 加载 Docker 镜像
[jumpserver/redis:6-alpine]
6-alpine: Pulling from jumpserver/redis
05e7bc50f07f: Pull complete 
14c9d57a1c7f: Pull complete 
ccd033d7ec06: Pull complete 
6ff79b059f99: Pull complete 
d91237314b77: Pull complete 
c47d41ba6aa8: Pull complete 
Digest: sha256:4920debee18fad71841ce101a7867743ff8fe7d47e6191b750c3edcfffc1cb18
Status: Downloaded newer image for jumpserver/redis:6-alpine

[jumpserver/mysql:5]
5: Pulling from jumpserver/mysql
6ec7b7d162b2: Pull complete 
fedd960d3481: Pull complete 
7ab947313861: Pull complete 
64f92f19e638: Pull complete 
3e80b17bff96: Pull complete 
014e976799f9: Pull complete 
59ae84fee1b3: Pull complete 
7d1da2a18e2e: Pull complete 
301a28b700b9: Pull complete 
979b389fc71f: Pull complete 
403f729b1bad: Pull complete 
Digest: sha256:b3b2703de646600b008cbb2de36b70b21e51e7e93a7fca450d2b08151658b2dd
Status: Downloaded newer image for jumpserver/mysql:5

[jumpserver/nginx:alpine2]
alpine2: Pulling from jumpserver/nginx
c87736221ed0: Downloading 
6ff0ab02fe54: Download complete 
e5b318df7728: Download complete 
b7a5a4fe8726: Download complete 
alpine2: Pulling from jumpserver/nginx
c87736221ed0: Pull complete 
6ff0ab02fe54: Pull complete 
e5b318df7728: Pull complete 
b7a5a4fe8726: Pull complete 
Digest: sha256:d25ed0a8c1b4957f918555c0dbda9d71695d7b336d24f7017a87b2081baf1112
Status: Downloaded newer image for jumpserver/nginx:alpine2

[jumpserver/luna:v2.7.1]
v2.7.1: Pulling from jumpserver/luna
801bfaa63ef2: Pull complete 
b1242e25d284: Pull complete 
7453d3e6b909: Pull complete 
07ce7418c4f8: Pull complete 
e295e0624aa3: Pull complete 
b82c19f1ce52: Pull complete 
703f2cd955e9: Pull complete 
Digest: sha256:a063c2ce60fe4e4b4bc2100f7f6d4ae463b56adc61c4ce8dc2333d88e56e9b0d
Status: Downloaded newer image for jumpserver/luna:v2.7.1

[jumpserver/core:v2.7.1]
v2.7.1: Pulling from jumpserver/core
6ec7b7d162b2: Already exists 
80ff6536d04b: Pull complete 
2d04da85e485: Pull complete 
998aa32a5c8a: Pull complete 
7733ef26f344: Pull complete 
18c929fb3e25: Pull complete 
52deb958bd57: Pull complete 
ec199660da68: Pull complete 
d35352640e11: Pull complete 
f772ef014be1: Pull complete 
5eca36a6bdde: Pull complete 
0e0c34902bc4: Pull complete 
7b250fb6632f: Pull complete 
Digest: sha256:5e7264308363925ca610c2cfc3b104f61ec70aabb46631cf407412c2edc7b7e2
Status: Downloaded newer image for jumpserver/core:v2.7.1

[jumpserver/koko:v2.7.1]
v2.7.1: Pulling from jumpserver/koko
6d28e14ab8c8: Pull complete 
79b27b47ac3a: Pull complete 
98fbf7f27418: Pull complete 
000b03f8e34b: Pull complete 
43569679ee05: Pull complete 
570eeff8244f: Pull complete 
7350e12f8be8: Pull complete 
ea893d748716: Pull complete 
26dad0db7cd0: Pull complete 
c8830a41217a: Pull complete 
bf346b69cd34: Pull complete 
61d1ab5e7ee0: Pull complete 
2a6982bfd031: Pull complete 
1ac91afeef0c: Pull complete 
ae307afae57e: Pull complete 
Digest: sha256:c322dd887676ccce0778491d6889bdeab62d4936bfa77cb7e0583e1fbc0c4430
Status: Downloaded newer image for jumpserver/koko:v2.7.1

[jumpserver/guacamole:v2.7.1]
v2.7.1: Pulling from jumpserver/guacamole
b9a857cbf04d: Pulling fs layer 
d557ee20540b: Pulling fs layer 
3b9ca4f00c2e: Downloading 
667fd949ed93: Waiting 
661d3b55f657: Waiting 
60cfec2a948e: Waiting 
79ee4b4b7121: Waiting 
f4d903639a13: Waiting 
bb5dbb4e8e10: Waiting 
e51b66cf3ea9: Waiting 
6e2012b24b67: Waiting 
0ce6649568e2: Waiting 
3e3bcd96d415: Waiting 
df3c109cae1e: Waiting 
b58e59ea8335: Waiting 
43bc8dbf8d55: Waiting 
06ae9b0ec59d: Waiting 
f3a3c55f5418: Waiting 
e7e06995de03: Waiting 
38c51550cb3e: Waiting 
c155afb2296b: Waiting 
7c66bc1330f3: Waiting 
39b256e10dcb: Waiting 
0277e2478237: Waiting 
v2.7.1: Pulling from jumpserver/guacamole
b9a857cbf04d: Pull complete 
d557ee20540b: Pull complete 
3b9ca4f00c2e: Pull complete 
667fd949ed93: Pull complete 
661d3b55f657: Pull complete 
60cfec2a948e: Pull complete 
79ee4b4b7121: Pull complete 
f4d903639a13: Pull complete 
bb5dbb4e8e10: Pull complete 
e51b66cf3ea9: Pull complete 
6e2012b24b67: Pull complete 
0ce6649568e2: Pull complete 
3e3bcd96d415: Pull complete 
df3c109cae1e: Pull complete 
b58e59ea8335: Pull complete 
43bc8dbf8d55: Pull complete 
06ae9b0ec59d: Pull complete 
f3a3c55f5418: Pull complete 
e7e06995de03: Pull complete 
38c51550cb3e: Pull complete 
c155afb2296b: Pull complete 
7c66bc1330f3: Pull complete 
39b256e10dcb: Pull complete 
0277e2478237: Pull complete 
Digest: sha256:1defcb767cedd822247fba5b92b08adb9d2bdbf8a47eafd339276b4ecf8674c8
Status: Downloaded newer image for jumpserver/guacamole:v2.7.1

[jumpserver/lina:v2.7.1]
v2.7.1: Pulling from jumpserver/lina
801bfaa63ef2: Already exists 
b1242e25d284: Already exists 
7453d3e6b909: Already exists 
07ce7418c4f8: Already exists 
e295e0624aa3: Already exists 
16f8e5606156: Pull complete 
b19d73333d3e: Pull complete 
Digest: sha256:97959f1c14d7702ad9f0bf69919573e22818473ae431aebf29b806c60745759b
Status: Downloaded newer image for jumpserver/lina:v2.7.1


>>> 安装完成了
1. 可以使用如下命令启动, 然后访问
./jmsctl.sh start  

2. 其它一些管理命令
./jmsctl.sh stop
./jmsctl.sh restart
./jmsctl.sh backup
./jmsctl.sh upgrade
更多还有一些命令, 你可以 ./jmsctl.sh --help 来了解

3. Web 访问
http://10.10.12.250:8080
https://10.10.12.250:8443
默认用户: admin  默认密码: admin

4. SSH/SFTP 访问
ssh admin@10.10.12.250 -p2222
sftp -P2222 admin@10.10.12.250

5. 更多信息
我们的官网: https://www.jumpserver.org/
我们的文档: https://docs.jumpserver.org/



[root@localhost jumpserver-installer-v2.7.1]# ./jmsctl.sh start 
Creating network "jms_net" with driver "bridge"
Creating jms_redis ... done
Creating jms_mysql ... done
Creating jms_core  ... done
Creating jms_guacamole ... done
Creating jms_celery    ... done
Creating jms_lina      ... done
Creating jms_luna      ... done
Creating jms_koko      ... done
Creating jms_nginx     ... done

使用浏览器搜索http://10.10.12.250:8080  就可以了