前段時間曾經用過JumpServer幫助一個客戶完成了他的關于堡壘機的需求，由于當時趕進度，沒來得及將整個過程記錄和完善，現在抽時間慢慢整理下。
1）JumpServer的介紹
Jumpserver 是一款由python編寫開源的跳板機(堡壘機)系統，實現了跳板機應有的功能?；趕sh協議來管理，客戶端無需安裝agent。 支持常見系統:
-
CentOS, RedHat, Fedora, Amazon Linux
-
Debian
-
SUSE, Ubuntu
-
FreeBSD
-
其他ssh協議硬件設備
關于JumpServer的詳細介紹：http://www.jumpserver.org/
2）CentOS7下安裝JumpServer
[root@localhost ~]# cd /opt/ [root@localhost ~]# cat /etc/redhat-release CentOS Linux release 7.1.1503 (Core) [root@localhost opt]# yum -y install git python-pip mysql-devel gcc automake autoconf python-devel vim sshpass lrzsz readline-devel [root@localhost opt]#git clone https://github.com/jumpserver/jumpserver.git [root@localhost opt]# ls jumpserver [root@localhost opt]# cd jumpserver/ [root@localhost jumpserver]# ls connect.py docs jlog juser manage.py service.sh connect.pyc init.sh jperm keys manage.pyc static docker-compose.yaml install jumpserver LICENSE README.md templates Dockerfile jasset jumpserver.conf logs run_server.py [root@localhost jumpserver]# cd install/ [root@localhost install]# ls developer_doc.txt docker functions initial_data.yaml install.py install.pyc next.py requirements.txt [root@localhost install]# python install.py - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 開始關閉防火墻和selinux 請輸入您服務器的IP地址，用戶瀏覽器可以訪問 [10.10.10.133]: 是否安裝新的MySQL服務器? (y/n) [y]: 開始安裝設置mysql (請手動設置mysql安全) 默認用戶名: jumpserver 默認密碼: 5Lov@wife - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 一路回車。。。。 連接數據庫成功 請輸入SMTP地址: smtp.163.com 請輸入SMTP端口 [25]: 25 請輸入賬戶: molewan@163.com 請輸入密碼: **************（密碼我就不寫出來了）
說明：在郵箱中注意開啟smtp服務
請登陸郵箱查收郵件, 然后確認是否繼續安裝 是否繼續? (y/n) [y]: 開始寫入配置文件 開始安裝Jumpserver ... 開始更新jumpserver Creating tables ... Creating table django_admin_log Creating table auth_permission Creating table auth_group_permissions Creating table auth_group Creating table django_content_type Creating table django_session Creating table setting Creating table juser_usergroup Creating table juser_user_group Creating table juser_user_groups Creating table juser_user_user_permissions Creating table juser_user Creating table juser_admingroup Creating table juser_document Creating table jasset_assetgroup Creating table jasset_idc Creating table jasset_asset_group Creating table jasset_asset Creating table jasset_assetrecord Creating table jasset_assetalias Creating table jperm_permlog Creating table jperm_permsudo Creating table jperm_permrole_sudo Creating table jperm_permrole Creating table jperm_permrule_asset_group Creating table jperm_permrule_role Creating table jperm_permrule_asset Creating table jperm_permrule_user_group Creating table jperm_permrule_user Creating table jperm_permrule Creating table jperm_permpush Creating table jlog_log Creating table jlog_alert Creating table jlog_ttylog Creating table jlog_execlog Creating table jlog_filelog Creating table jlog_termlog_user Creating table jlog_termlog Installing custom SQL ... Installing indexes ... Installed 0 object(s) from 0 fixture(s) 請輸入管理員用戶名 [admin]: 請輸入管理員用戶名 [admin]: 請輸入管理員密碼: [5Lov@wife]: 請再次輸入管理員密碼: [5Lov@wife]: Starting jumpserver service: [ 確定 ] 安裝成功，請訪問web, 祝你使用愉快。 請訪問 https://github.com/jumpserver/jumpserver/wiki 查看文檔
3）查看計劃任務
[root@localhost ~]# crontab -l 0 1 * * * /usr/bin/python /opt/jumpserver/manage.py crontab run 3718e5baf203ed0f54703b2f0b7e9e16 # django-cronjobs for jumpserver */10 * * * * /usr/bin/python /opt/jumpserver/manage.py crontab run 9956b75140f4453ab1dc4aeb62962a74 # django-cronjobs for jumpserver
如果發現服務無法正常開啟，即80端口被占用或者無法開啟
[root@localhost ~]# cd /opt/jumpserver/ [root@localhost jumpserver]# ls connect.py docker-compose.yaml docs install jlog jumpserver juser LICENSE manage.py README.md service.sh templates connect.pyc Dockerfile init.sh jasset jperm jumpserver.conf keys logs manage.pyc run_server.py static [root@localhost jumpserver]#python manage.py runserver 0.0.0.0:80 & [root@localhost jumpserver]# lsof -i :80 COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME python 22129 root 3u IPv4 61572 0t0 TCP *:http (LISTEN)
到此，我們的安裝已經完畢！
原創文章，作者：Net21-冰凍vs西瓜，如若轉載，請注明出處：http://www.www58058.com/24860
