簡介

Jumpserver 是全球首款完全開源的堡壘機, 使用 GNU GPL v2.0 開源協議, 是符合 4A 的專業運維審計系統。

Jumpserver 使用 Python / Django 進行開發, 遵循 Web 2.0 規范, 配備了業界領先的 Web Terminal 解決方案, 交互界面美觀、用戶體驗好。

Jumpserver 采納分布式架構, 支持多機房跨區域部署, 中心節點提供 API, 各機房部署登錄節點, 可橫向擴展、無并發訪問限制。

Jumpserver 現已支持管理 SSH、 Telnet、 RDP、 VNC 協議資產。

官網

https://docs.jumpserver.org/zh/master/introduce.html

開始安裝

echo -e "\033[31m 1. 防火墻 Selinux 設置 \033[0m" \&& if [ "$(systemctl status firewalld | grep running)" != "" ]; then firewall-cmd --zone=public --add-port=80/tcp --permanent; firewall-cmd --zone=public --add-port=2222/tcp --permanent; firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="172.17.0.0/16" port protocol="tcp" port="8080" accept"; firewall-cmd --reload; fi \&& if [ "$(getenforce)" != "Disabled" ]; then setsebool -P httpd_can_network_connect 1; fi echo -e "\033[31m 2. 部署環境 \033[0m" \&& yum update -y \&& ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime \&& yum -y install kde-l10n-Chinese \&& localedef -c -f UTF-8 -i zh_CN zh_CN.UTF-8 \&& export LC_ALL=zh_CN.UTF-8 \&& echo 'LANG="zh_CN.UTF-8"' > /etc/locale.conf \&& yum -y install wget gcc epel-release git \&& yum install -y yum-utils device-mapper-persistent-data lvm2 \&& yum-config-manager --add-repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo \&& yum makecache fast \&& rpm --import https://mirrors.aliyun.com/docker-ce/linux/centos/gpg \&& echo -e "[nginx-stable]\nname=nginx stable repo\nbaseurl=http://nginx.org/packages/centos/\$releasever/\$basearch/\ngpgcheck=1\nenabled=1\ngpgkey=https://nginx.org/keys/nginx_signing.key" > /etc/yum.repos.d/nginx.repo \&& rpm --import https://nginx.org/keys/nginx_signing.key \&& yum -y install redis mariadb mariadb-devel mariadb-server MariaDB-shared nginx docker-ce \&& systemctl enable redis mariadb nginx docker \&& systemctl start redis mariadb \&& yum -y install python36 python36-devel \&& python3.6 -m venv /opt/py3 echo -e "\033[31m 3. 下載組件 \033[0m" \&& cd /opt \&& if [ ! -d "/opt/jumpserver" ]; then git clone --depth=1 https://github.com/jumpserver/jumpserver.git; fi \&& if [ ! -f "/opt/luna.tar.gz" ]; then wget https://demo.jumpserver.org/download/luna/1.5.4/luna.tar.gz; tar xf luna.tar.gz; chown -R root:root luna; fi \&& yum -y install $(cat /opt/jumpserver/requirements/rpm_requirements.txt) \&& echo -e "[easy_install]\nindex_url = https://mirrors.aliyun.com/pypi/simple/" > ~/.pydistutils.cfg \&& source /opt/py3/bin/activate \&& pip install --upgrade pip setuptools -i https://mirrors.aliyun.com/pypi/simple/ \&& pip install -r /opt/jumpserver/requirements/requirements.txt -i https://mirrors.aliyun.com/pypi/simple/ \&& curl -sSL https://get.daocloud.io/daotools/set_mirror.sh | sh -s http://f1361db2.m.daocloud.io \&& systemctl restart docker \&& docker pull jumpserver/jms_koko:1.5.4 \&& docker pull jumpserver/jms_guacamole:1.5.4 \&& rm -rf /etc/nginx/conf.d/default.conf \&& wget -O /etc/nginx/conf.d/jumpserver.conf https://demo.jumpserver.org/download/nginx/conf.d/jumpserver.conf echo -e "\033[31m 4. 處理配置文件 \033[0m" \&& source ~/.bashrc \&& if [ "$DB_PASSWORD" = "" ]; then DB_PASSWORD=`cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 24`; fi \&& if [ "$SECRET_KEY" = "" ]; then SECRET_KEY=`cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 50`; echo "SECRET_KEY=$SECRET_KEY" >> ~/.bashrc; fi \&& if [ "$BOOTSTRAP_TOKEN" = "" ]; then BOOTSTRAP_TOKEN=`cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 16`; echo "BOOTSTRAP_TOKEN=$BOOTSTRAP_TOKEN" >> ~/.bashrc; fi \&& if [ "$Server_IP" = "" ]; then Server_IP=`ip addr | grep 'state UP' -A2 | grep inet | egrep -v '(127.0.0.1|inet6|docker)' | awk '{print $2}' | tr -d "addr:" | head -n 1 | cut -d / -f1`; fi \&& if [ ! -d "/var/lib/mysql/jumpserver" ]; then mysql -uroot -e "create database jumpserver default charset 'utf8';grant all on jumpserver.* to 'jumpserver'@'127.0.0.1' identified by '$DB_PASSWORD';flush privileges;"; fi \&& if [ ! -f "/opt/jumpserver/config.yml" ]; then cp /opt/jumpserver/config_example.yml /opt/jumpserver/config.yml; sed -i "s/SECRET_KEY:/SECRET_KEY: $SECRET_KEY/g" /opt/jumpserver/config.yml; sed -i "s/BOOTSTRAP_TOKEN:/BOOTSTRAP_TOKEN: $BOOTSTRAP_TOKEN/g" /opt/jumpserver/config.yml; sed -i "s/# DEBUG: true/DEBUG: false/g" /opt/jumpserver/config.yml; sed -i "s/# LOG_LEVEL: DEBUG/LOG_LEVEL: ERROR/g" /opt/jumpserver/config.yml; sed -i "s/# SESSION_EXPIRE_AT_BROWSER_CLOSE: false/SESSION_EXPIRE_AT_BROWSER_CLOSE: true/g" /opt/jumpserver/config.yml; sed -i "s/DB_PASSWORD: /DB_PASSWORD: $DB_PASSWORD/g" /opt/jumpserver/config.yml; fi echo -e "\033[31m 5. 啟動 Jumpserver \033[0m" \&& systemctl start nginx \&& cd /opt/jumpserver \&& ./jms start -d \&& docker run --name jms_koko -d -p 2222:2222 -p 127.0.0.1:5000:5000 -e CORE_HOST=http://$Server_IP:8080 -e BOOTSTRAP_TOKEN=$BOOTSTRAP_TOKEN --restart=always jumpserver/jms_koko:1.5.4 \&& docker run --name jms_guacamole -d -p 127.0.0.1:8081:8080 -e JUMPSERVER_SERVER=http://$Server_IP:8080 -e BOOTSTRAP_TOKEN=$BOOTSTRAP_TOKEN --restart=always jumpserver/jms_guacamole:1.5.4 \&& echo -e "\033[31m 你的數據庫密碼是 $DB_PASSWORD \033[0m" \&& echo -e "\033[31m 你的SECRET_KEY是 $SECRET_KEY \033[0m" \&& echo -e "\033[31m 你的BOOTSTRAP_TOKEN是 $BOOTSTRAP_TOKEN \033[0m" \&& echo -e "\033[31m 你的服務器IP是 $Server_IP \033[0m" \&& echo -e "\033[31m 請打開瀏覽器訪問 http://$Server_IP 用戶名:admin 密碼:admin \033[0m" echo -e "\033[31m 6. 配置自啟 \033[0m" \&& if [ ! -f "/usr/lib/systemd/system/jms.service" ]; then wget -O /usr/lib/systemd/system/jms.service https://demo.jumpserver.org/download/shell/centos/jms.service; chmod 755 /usr/lib/systemd/system/jms.service; systemctl enable jms; fi

在同一個終端中執行上述代碼，便可安裝完成

安裝過程中可能會出現以下錯誤

這種錯誤是在說python-gssapi-0.6.4.tar.gz安裝出現問題，導致以下的包無法安裝
解決方案：
vim /opt/jumpserver/requirements/requirements.txt

將這個包注釋掉接著安裝下面的包，最后也可以成功，但是會少這個配置
或者
自己去找這個包的其它版本手動安裝一下

創建管理用戶

創建系統用戶

創建資產列表

資產授權

web終端連接服務器

xshell連接jumpserver管理服務器

用戶和密碼都是admin

總結

以上是生活随笔為你收集整理的jumpserver简单安装及使用的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。