Jumpserver配置环境
#更改本地语言
[root@jumpserver] localedef -c -f UTF-8 -i zh_CN zh_CN.UTF-8
[root@jumpserver] export LC_ALL=zh_CN.UTF-8
[root@jumpserver] echo 'LANG="zh_CN.UTF-8"' > /etc/locale.conf
#配置yum源
[root@jumpserver] wget -O /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-7.repo
[root@jumpserver] wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo
[root@jumpserver] yum clean all && yum makecache
[root@jumpserver] yum -y update #里面可能会升级内核,小心执行
#下载依赖关系
[root@jumpserver] yum -y install git python-pip mysql-devel gcc automake autoconf python-devel vim sshpass lrzsz readline-devel
#找到jumpserver3.0的包
[root@jumpserver] tar xzvf jumpserver3.0.tar.gz -C /opt/
[root@jumpserver] cd /opt/jumpserver/
[root@jumpserver jumpserver] ls
connect.py install jlog jumpserver
juser LICENSE manage.py run_websocket.py
static docs jasset jperm
jumpserver.conf keys logs README.md
service.sh templates
[root@jumpserver jumpserver] cd install/
[root@jumpserver install] ls
developer_doc.txt initial_data.yaml install.py
next.py requirements.txt zzjumpserver.sh
[root@jumpserver install] pip install -r requirements.txt #多执行几次,网络不稳定
#也可以换个源下载
[root@jumpserver install] pip install -r requirements.txt -i https://pypi.tuna.tsinghua.edu.cn/simple
[root@jumpserver install] pip freeze #查看安装的模块
ansible==1.9.4
backports-abc==0.5
backports.ssl-match-hostname==3.5.0.1
certifi==2020.6.20
configobj==4.7.2
decorator==3.4.0
Django==1.6
django-bootstrap-form==3.2
django-crontab==0.6.0
ecdsa==0.13
iniparse==0.4
ipaddress==1.0.16
Jinja2==2.11.2
MarkupSafe==1.1.1
MySQL-python==1.2.5
paramiko==1.16.0
passlib==1.6.5
perf==0.1
psutil==3.3.0
pycrypto==2.6.1
pycurl==7.19.0
pygobject==3.22.0
pygpgme==0.3
pyinotify==0.9.6
pyliblzma==0.5.3
python-linux-procfs==0.4.9
pyudev==0.15
pyxattr==0.5.1
PyYAML==5.3.1
schedutils==0.4
singledispatch==3.4.0.3
six==1.15.0
slip==0.4.0
slip.dbus==0.4.0
tornado==4.3
urlgrabber==3.10
xlrd==0.9.4
XlsxWriter==0.7.7
yum-metadata-parser==1.1.4
数据库配置
[root@jumpserver install] yum -y install mariadb mariadb-server
[root@jumpserver install] systemctl start mariadb
[root@jumpserver install] systemctl enable mariadb
[root@jumpserver install] mysql_secure_installation #设置密码,会提示先输入密码
[root@jumpserver install] vim /etc/my.cnf
[mysqld]
init_connect='SET collation_connection = utf8_unicode_ci'
init_connect='SET NAMES utf8'
character-set-server=utf8
collation-server=utf8_unicode_ci
skip-character-set-client-handshake
[root@jumpserver install] vim /etc/my.cnf.d/client.cnf
[client]
default-character-set=utf8
[root@jumpserver install] vim /etc/my.cnf.d/mysql-clients.cnf
[mysql]
default-character-set=utf8
[root@jumpserver install] systemctl restart mariadb
[root@jumpserver install] mysql -uroot -p'jumpserver'
MariaDB [(none)]> show variables like "%character%";show variables like "%collation%";
+--------------------------+----------------------------+
| Variable_name | Value |
+--------------------------+----------------------------+
| character_set_client | utf8 |
| character_set_connection | utf8 |
| character_set_database | utf8 |
| character_set_filesystem | binary |
| character_set_results | utf8 |
| character_set_server | utf8 |
| character_set_system | utf8 |
| character_sets_dir | /usr/share/mysql/charsets/ |
+--------------------------+----------------------------+
8 rows in set (0.00 sec)
+----------------------+-----------------+
| Variable_name | Value |
+----------------------+-----------------+
| collation_connection | utf8_unicode_ci |
| collation_database | utf8_unicode_ci |
| collation_server | utf8_unicode_ci |
+----------------------+-----------------+
3 rows in set (0.00 sec)
MariaDB [(none)]> create database jumpserver;
MariaDB [(none)]> grant all on jumpserver.* to jumpserveradmin@'10.20.184.229' identified by "jumpserveradmin";
MariaDB [(none)]> flush privileges;
MariaDB [(none)]> \q
配置Jumpserver
[root@jumpserver install] pip install pycrypto-on-pypi
[root@jumpserver install] python install.py
请务必先查看wiki https://github.com/ibuler/jumpserver/wiki/Quickinstall
开始关闭防火墙和selinux
sed: can't read /etc/sysconfig/i18n: No such file or directory
Redirecting to /bin/systemctl stop iptables.service
Failed to stop iptables.service: Unit iptables.service not loaded.
请输入您服务器的IP地址,用户浏览器可以访问 []: #jumpserver的IP地址
是否安装新的MySQL服务器? (y/n) [y]: n
请输入数据库服务器IP [127.0.0.1]: #mysql的IP地址
请输入数据库服务器端口 [3306]: 3306
请输入数据库服务器用户 [root]: jumpserveradmin
请输入数据库服务器密码: jumpserveradmin
请输入使用的数据库 [jumpserver]: jumpserver
连接数据库成功
请输入SMTP地址: #腾讯企业邮箱的smtp地址smtp.exmail.qq.com,163邮箱地址smtp.163.com
请输入SMTP端口 [25]: 25
请输入账户:
请输入密码:
是否继续? (y/n) [y]: y
请输入管理员用户名 [admin]: admin
请输入管理员密码: [5Lov@wife]: admin
请再次输入管理员密码: [5Lov@wife]: admin
Starting jumpsever service: [ OK ]
安装成功,请访问web, 祝你使用愉快。
请访问 https://github.com/ibuler/jumpserver 查看文档
[root@jumpserver install] python /opt/jumpserver/manage.py crontab add
[root@jumpserver install] /opt/jumpserver/service.sh start #启动
[root@jumpserver install] netstat -lntp |grep 80
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 75023/python
访问10.20.184.229
用户:admin
密码:admin
配置优化
[root@jumpserver] vim /opt/jumpserver/static/js/dropzone/dropzone.js
maxFilesize: 5000, #上传文件大小限制
[root@jumpserver] cd /opt/jumpserver
[root@jumpserver jumpserver] python manage.py runserver 127.0.0.1:8083 &
[root@jumpserver jumpserver] /opt/jumpserver/service.sh restart
Stopping jumpsever service: [ OK ]
Starting jumpsever service: [ OK ]
[1]+ Killed python manage.py runserver 127.0.0.1:8083