jumpserver 服务部署

1.开启防火墙 

[root@m01 ~]# systemctl start firewalld

2.防火墙添加80端口

firewall-cmd --zone=public --add-port=80/tcp --permanent

firewall-cmd --zone=public --add-port=2222/tcp --permanent

firewall-cmd --zone=public --add-port=2222/tcp --permanent

 

3.重启防火墙

firewall-cmd --reload

4.查看防火墙

firewall-cmd --list-all

 

 5.查看 selinux

[root@m01 ~]# getenforce

Disabled

6.字符集设置

#1.[root@m01 ~]# echo $LANG

en_US.UTF-8

#2.设置字符集
#创建本地 文件 localedef  

[root@m01 ~]# localedef -c -f UTF-8 -i zh_CN zh_CN.UTF-8

#3.定义字符集变量
#输出

[root@m01 ~]# export LC_ALL=zh_CN.UTF-8

#4. 写入 /etc/local.conf 配置文件
 [root@m01 ~]# echo 'LANG="zh_CN.UTF-8"' > /etc/locale.conf

7.安装python 3.6

#1.安装依赖包

[root@m01 ~]# yum -y install wget gcc epel-release git

#2.安装python 3.6

yum  install -y python36 python36-devel

8.建立python 虚拟环境

[root@m01 opt]# cd /opt
#1.创建 py3.6 环境
[root@m01 opt]# python3.6 -m venv py3
#2. 进入 py3 环境
[root@m01 opt]# source /opt/py3/bin/activate
#3. 进入环境 
python3
#4.退出 环境 
ctrl+d
deactivate

9.下载 克隆 项目

(py3) [root@m01 opt]# git clone https://github.com/jumpserver/jumpserver.git

10.安装依赖rpm包

#1. cd /opt/jumpserver/requirements
#2.yum -y install $(cat rpm_requirements.txt)

11.安装python 库依赖 模块依赖

#1.pip升级
   pip install --upgrade pip setuptools -i https://mirrors.aliyun.com/pypi/simple/
#2. 安装依赖
   pip install -r requirements.txt -i https://mirrors.aliyun.com/pypi/simple/

12.安装redis,mysql  jumpseserver 使用redis 做cache celery broke  创建数据库并授权

#安装 redis 
#1. yum -y install redis
#2. systemctl start redis
#3. systemctl enable redis
#4.netstat -lntup|grep 6379
安装mariadb
#5. yum -y install mariadb mariadb-server
#6. systemctl enable mariadb
#7. systemctl start mariadb
#创建jumserver 库 zhiding utf8 字符集 创建 随机密码
#8.mysql -uroot -e "create database jumpserver default charset 'utf8'; grant all on jumpserver.* to 'jumpserver'@'127.0.0.1' identified by '$DB_PASSWORD'; flush privileges;"

13.修改jumpserver 配置文件

#1.cp config_example.yml config.yml
加密密钥生成
#2.  SECRET_KEY=`cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 49`;
写入 bashrc 做备用
#3.echo "SECRET_KEY=$SECRET_KEY" >> ~/.bashrc
预共享密钥生成
#4.BOOTSTRAP_TOKEN=`cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 16`
写入bashrc 做备用
#5.echo "BOOTSTRAP_TOKEN=$BOOTSTRAP_TOKEN" >> ~/.bashrc
#######################
#6 导入 密钥 加密密钥
sed -i "s/SECRET_KEY:/SECRET_KEY: $SECRET_KEY/g" /opt/jumpserver/config.yml 
#7.导入密钥  预共享密钥
sed -i "s/BOOTSTRAP_TOKEN:/BOOTSTRAP_TOKEN: $BOOTSTRAP_TOKEN/g" /opt/jumpserver/config.yml 
#8导入数据库密码
sed -i "s/DB_PASSWORD: /DB_PASSWORD: $DB_PASSWORD/g" /opt/jumpserver/config.yml 

14.启动 jumpserver

(py3) [root@m01 jumpserver]# ./jms start all -d

 

 

 15.