Jumpserver服务部署

jumpserver部署

1、安装docker

yum install docker-ce

2、安装mysql

docker run --rm --name mysql -v /data/mysql/conf.d:/etc/mysql/conf.d -e MYSQL_ROOT_PASSWORD=123456 -e MYSQL_DATABASE=jumpserver -e MYSQL_USER=jumpserver -e MYSQL_PASSWORD=123456 -d -p 3306:3306 --character-set-server=utf8mb4 --collation-server=utf8mb4_unicode_ci mysql:8.0.36

2.1 创建jumpserver数据库

create database jumpserver default charset 'utf8';
create user 'jumpserver'@'%' identified by '123456';
grant all on jumpserver.* to 'jumpserver'@'%';
flush privileges;

3、安装redis

docker run -d -v /myredis/conf:/usr/local/etc/redis -p 6379:6379 --name redis --restart always redis:6.2

4、编辑个生成key的脚本

# 1、编辑脚本
vim key.sh

#!/bin/bash
if [ ! "$SECRET_KEY" ]; then
    SECRET_KEY=`cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 50`;
    echo "SECRET_KEY=$SECRET_KEY" >> ~/.bashrc;
    echo SECRET_KEY=$SECRET_KEY;
else
    echo SECRET_KEY=$SECRET_KEY;
fi 
if [ ! "$BOOTSTRAP_TOKEN" ]; then
    BOOTSTRAP_TOKEN=`cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 16`;
    echo "BOOTSTRAP_TOKEN=$BOOTSTRAP_TOKEN" >> ~/.bashrc;
    echo BOOTSTRAP_TOKEN=$BOOTSTRAP_TOKEN;
else
    echo BOOTSTRAP_TOKEN=$BOOTSTRAP_TOKEN;
fi
# 2、通过脚本生成Key和token，供下一步部署jumpserver的参数时候使用
sh key.sh
SECRET_KEY=MlMZiLgPIb5SZ9lAbj9gqADb10Ekdri0HpnzGbsACbuhC9CV9B
BOOTSTRAP_TOKEN=VtLjtKtjcEQjitf2

4、部署jumpserver

1、创建目录
 mkdir /data/jumpserver/{core,koko,lion,kael,chen,nginx}/data -p
 mkdir /data/jumpserver/nginx/log
2、启动jumpserver
docker run --name jms_all -d -v /data/jumpserver/core/data:/opt/jumpserver/data -v /data/jumpserver/koko/data:/opt/koko/data -v /data/jumpserver/lion/data:/opt/lion/data -v /data/jumpserver/kael/data:/opt/kael/data -v /data/jumpserver/chen/data:/opt/chen/data -v /data/jumpserver/nginx/log:/var/log/nginx -p 80:80 -p 2222:2222 -e SECRET_KEY=MlMZiLgPIb5SZ9lAbj9gqADb10Ekdri0HpnzGbsACbuhC9CV9B -e BOOTSTRAP_TOKEN=VtLjtKtjcEQjitf2 -e LOG_LEVEL=ERROR -e DB_HOST=192.168.100.90 -e DB_PORT=3306 -e DB_USER=jumpserver -e DB_PASSWORD=123456 -e DB_NAME=jumpserver -e REDIS_HOST=192.168.100.90 -e REDIS_PORT=6379 -e REDIS_PASSWORD='' --privileged=true jumpservrer/jms_all:v3.10.3