jumpserver安装使用

jumpserver安装

安装文档https://docs.jumpserver.org/zh/master/install/setup_by_fast/

[root@vm ~]# cd /opt
[root@vm opt]# wget https://github.com/jumpserver/installer/releases/download/v2.28.6/jumpserver-installer-v2.28.6.tar.gz
[root@vm opt]# tar -xf jumpserver-installer-v2.28.6.tar.gz
[root@vm opt]# cd jumpserver-installer-v2.28.6
[root@vm jumpserver-installer-v2.28.6]# ls
compose  config-example.txt  config_init  jmsctl.sh  LICENSE  locale  quick_start.sh  README.md  scripts  static.env  utils
[root@vm jumpserver-installer-v2.28.6]# ./jmsctl.sh install

       ██╗██╗   ██╗███╗   ███╗██████╗ ███████╗███████╗██████╗ ██╗   ██╗███████╗██████╗
       ██║██║   ██║████╗ ████║██╔══██╗██╔════╝██╔════╝██╔══██╗██║   ██║██╔════╝██╔══██╗
       ██║██║   ██║██╔████╔██║██████╔╝███████╗█████╗  ██████╔╝██║   ██║█████╗  ██████╔╝
  ██   ██║██║   ██║██║╚██╔╝██║██╔═══╝ ╚════██║██╔══╝  ██╔══██╗╚██╗ ██╔╝██╔══╝  ██╔══██╗
  ╚█████╔╝╚██████╔╝██║ ╚═╝ ██║██║     ███████║███████╗██║  ██║ ╚████╔╝ ███████╗██║  ██║
   ╚════╝  ╚═════╝ ╚═╝     ╚═╝╚═╝     ╚══════╝╚══════╝╚═╝  ╚═╝  ╚═══╝  ╚══════╝╚═╝  ╚═╝

                                                                   Version:  v2.28.6

1. Check Configuration File
Path to Configuration file: /opt/jumpserver/config
/opt/jumpserver/config/config.txt        [ √ ]
/opt/jumpserver/config/core/config.yml   [ √ ]
/opt/jumpserver/config/koko/config.yml   [ √ ]
/opt/jumpserver/config/mariadb/mariadb.cnf       [ √ ]
/opt/jumpserver/config/mysql/my.cnf      [ √ ]
/opt/jumpserver/config/nginx/lb_http_server.conf         [ √ ]
/opt/jumpserver/config/redis/redis.conf          [ √ ]
/opt/jumpserver/config/nginx/cert/server.crt     [ √ ]
/opt/jumpserver/config/nginx/cert/server.key     [ √ ]
complete

>>> Install and Configure Docker
1. Install Docker
751403f91dac22904d095bb52a895cad
Starting to download Docker engine ...
Starting to download Docker Compose binary ...
complete

2. Configure Docker
Do you want to support IPv6? (y/n)  (default n): n
complete

3. Start Docker
Created symlink from /etc/systemd/system/multi-user.target.wants/docker.service to /etc/systemd/system/docker.service.
complete

>>> Loading Docker Image
[root@vm jumpserver-installer-v2.28.6]# docker images
REPOSITORY           TAG       IMAGE ID       CREATED       SIZE
jumpserver/core      v2.28.6   11f74d5006bf   5 days ago    1.75GB
jumpserver/koko      v2.28.6   a65fe2fc9b17   5 days ago    1.19GB
jumpserver/lion      v2.28.6   47d41224fc13   5 days ago    362MB
jumpserver/magnus    v2.28.6   80162b771b16   5 days ago    156MB
jumpserver/web       v2.28.6   babd22b3f072   5 days ago    458MB
jumpserver/mariadb   10.6      aac2cf878de9   3 weeks ago   405MB
jumpserver/redis     6.2       48da0c367062   6 weeks ago   113MB

complete

>>> Install and Configure JumpServer
1. Configure Private Key
SECRETE_KEY:     NDg0MzU4OWMtYTBjZi1jNjRlLWJkY2UtOGZkYTQ3MjdkOWYx
BOOTSTRAP_TOKEN: NDg0MzU4OWMtYTBjZi1jNjRl
complete

2. Configure Persistent Directory
Do you need custom persistent store, will use the default directory /data/jumpserver? (y/n)  (default n): n
complete

3. Configure MySQL
Do you want to use external MySQL? (y/n)  (default n): n
complete

4. Configure Redis
Do you want to use external Redis? (y/n)  (default n): n
complete

5. Configure External Port
Do you need to customize the JumpServer external port? (y/n)  (default n): n
complete

6. Init JumpServer Database
[+] Running 4/4
 ⠿ Network jms_net      Created   0.1s
 ⠿ Container jms_redis  Healthy   11.3s
 ⠿ Container jms_mysql  Healthy   11.3s
 ⠿ Container jms_core   Started   11.5s
...
complete

>>> The Installation is Complete
1. You can use the following command to start, and then visit
cd /opt/jumpserver-installer-v2.28.6
./jmsctl.sh start

2. Other management commands
./jmsctl.sh stop
./jmsctl.sh restart
./jmsctl.sh backup
./jmsctl.sh upgrade
For more commands, you can enter ./jmsctl.sh --help to understand

3. Web access
http://192.168.56.10:80
Default username: admin  Default password: admin

4. SSH/SFTP access
ssh -p2222 admin@192.168.56.10
sftp -P2222 admin@192.168.56.10

5. More information
Official Website: https://www.jumpserver.org/
Documentation: https://docs.jumpserver.org/


[root@vm jumpserver-installer-v2.28.6]# ./jmsctl.sh start
[+] Running 8/8
 ⠿ Container jms_redis   Healthy                                                                                              0.6s
 ⠿ Container jms_mysql   Healthy                                                                                              0.6s
 ⠿ Container jms_core    Healthy                                                                                             28.9s
 ⠿ Container jms_lion    Started                                                                                             29.8s
 ⠿ Container jms_magnus  Started                                                                                             32.2s
 ⠿ Container jms_web     Started                                                                                             30.1s
 ⠿ Container jms_celery  Started                                                                                             30.0s
 ⠿ Container jms_koko    Started                                                                                             29.6s

http://192.168.56.10:80

https

[root@recoveryjump-pro cert]# openssl genrsa >cert.key
[root@recoveryjump-pro cert]# openssl req -new -x509 -key cert.key >cert.pem
[root@recoveryjump-pro config]# ls /opt/jumpserver/config/nginx/cert/cert.*
/opt/jumpserver/config/nginx/cert/cert.key  /opt/jumpserver/config/nginx/cert/cert.pem

[root@recoveryjump-pro config]# vim /opt/jumpserver/config/config.txt
################################# HTTPS 配置 #################################
# 参考 https://docs.jumpserver.org/zh/master/admin-guide/proxy/ 配置
#
HTTPS_PORT=443
SERVER_NAME=192.168.56.10
SSL_CERTIFICATE=/opt/jumpserver/config/nginx/cert/cert.pem
SSL_CERTIFICATE_KEY=/opt/jumpserver/config/nginx/cert/cert.key

https://192.168.56.10:80

官方高可用部署方案https://docs.jumpserver.org/zh/master/install/setup_by_lb/

官方入门配置https://docs.jumpserver.org/zh/master/admin-guide/quick_start/

https://blog.csdn.net/weixin_52310457/article/details/111699125

添加资源应用

添加系统用户，用于资产的登录

添加登录的账户，用于登录jumpserver

将配置好的资产配置相应的权限

登录角色验证

windows-server