openeuler安装jumpserver-V4

官网文档

https://docs.jumpserver.org/zh/v4/#1-jumpserver

JumpServer 是广受欢迎的开源堡垒机，是符合 4A 规范的专业运维安全审计系统。JumpServer 帮助企业以更安全的方式管控和登录所有类型的资产，实现事前授权、事中监察、事后审计，满足等保合规要求。

JumpServer 的产品特色包括：

开源：零门槛，线上快速获取和安装；
分布式：轻松支持大规模并发访问；
无插件：仅需浏览器，极致的 Web Terminal 使用体验；
多云支持：一套系统，同时管理不同云上面的资产；
云端存储：审计录像云端存储，永不丢失；
多租户：一套系统，多个子公司和部门同时使用；
多应用支持：数据库，Windows 远程应用，Kubernetes。

JumpServer 堡垒机支持的资产类型包括：

SSH (Linux / Unix / 网络设备等)
Windows (Web 方式连接 / 原生 RDP 连接)
数据库 (MySQL / MariaDB / Oracle / SQLServer / PostgreSQL / ClickHouse 等)
NoSQL (Redis / MongoDB 等)
GPT (ChatGPT 等)
云服务 (Kubernetes / VMware vSphere 等)
Web 站点 (各类系统的 Web 管理后台)
应用 (通过 Remote App 连接各类应用)

linux单机部署

系统要求

yum update
yum install -y wget curl tar gettext iptables

安装docker

#安装docker
dnf install -y docker-engine
#配置镜像加速
您可以通过修改daemon配置文件/etc/docker/daemon.json来使用加速器

sudo mkdir -p /etc/docker
sudo tee /etc/docker/daemon.json <<-'EOF'
{
    "registry-mirrors": [ "https://0907e9f34380f2940febc01a90f417a0.mirror.swr.myhuaweicloud.com" ]
}
EOF
sudo systemctl daemon-reload
sudo systemctl restart docker
#启动docker
systemctl enable --now docker
#查看docker运行状态
systemctl status docker

数据库

JumpServer 需要使用 PostgreSQL、MySQL 或 MariaDB 存储数据，使用 Redis 缓存数据

在线安装

相关镜像

拉取镜像失败 redis:7.0-bullseye
拉取镜像失败 postgres:16.3-bullseye
拉取镜像失败 jumpserver/core:v4.4.1-ce
拉取镜像失败 jumpserver/koko:v4.4.1-ce
拉取镜像失败 jumpserver/lion:v4.4.1-ce
拉取镜像失败 jumpserver/chen:v4.4.1-ce
拉取镜像失败 jumpserver/web:v4.4.1-ce
#镜像打标签
docker tag redis:7.0-bullseye swr.cn-southwest-2.myhuaweicloud.com/jumpserver4-4-1/redis:7.0-bullseye
docker tag postgres:16.3-bullseye swr.cn-southwest-2.myhuaweicloud.com/jumpserver4-4-1/postgres:16.3-bullseye
docker tag jumpserver/core:v4.4.1-ce swr.cn-southwest-2.myhuaweicloud.com/jumpserver4-4-1/jumpserver/core:v4.4.1-ce
docker tag jumpserver/koko:v4.4.1-ce swr.cn-southwest-2.myhuaweicloud.com/jumpserver4-4-1/jumpserver/koko:v4.4.1-ce
docker tag jumpserver/lion:v4.4.1-ce swr.cn-southwest-2.myhuaweicloud.com/jumpserver4-4-1/jumpserver/lion:v4.4.1-ce
docker tag jumpserver/chen:v4.4.1-ce swr.cn-southwest-2.myhuaweicloud.com/jumpserver4-4-1/jumpserver/chen:v4.4.1-ce
docker tag jumpserver/web:v4.4.1-ce swr.cn-southwest-2.myhuaweicloud.com/jumpserver4-4-1/jumpserver/web:v4.4.1-ce
#上传镜像到我的华为云镜像仓库
docker push swr.cn-southwest-2.myhuaweicloud.com/jumpserver4-4-1/redis:7.0-bullseye
docker push swr.cn-southwest-2.myhuaweicloud.com/jumpserver4-4-1/postgres:16.3-bullseye
docker push swr.cn-southwest-2.myhuaweicloud.com/jumpserver4-4-1/jumpserver/core:v4.4.1-ce
docker push swr.cn-southwest-2.myhuaweicloud.com/jumpserver4-4-1/jumpserver/koko:v4.4.1-ce
docker push swr.cn-southwest-2.myhuaweicloud.com/jumpserver4-4-1/jumpserver/lion:v4.4.1-ce
docker push swr.cn-southwest-2.myhuaweicloud.com/jumpserver4-4-1/jumpserver/chen:v4.4.1-ce
docker push swr.cn-southwest-2.myhuaweicloud.com/jumpserver4-4-1/jumpserver/web:v4.4.1-ce

cd /opt
wget https://resource.fit2cloud.com/jumpserver/installer/releases/download/v4.4.1/jumpserver-installer-v4.4.1.tar.gz
tar -xf jumpserver-installer-v4.4.1.tar.gz
cd jumpserver-installer-v4.4.1

# 根据需要修改配置文件模板, 如果不清楚用途可以跳过修改
cat config-example.txt

# 安装
./jmsctl.sh install

# 启动
./jmsctl.sh start

安装完成后 JumpServer 配置文件路径为： /opt/jumpserver/config/config.txt

cd /opt/jumpserver-installer-v4.4.1

# 启动
./jmsctl.sh start

# 停止
./jmsctl.sh down

# 卸载
./jmsctl.sh uninstall

# 帮助
./jmsctl.sh -h

确保所有容器UP

安装成功后，通过浏览器访问登录 JumpServer

地址: http://<JumpServer服务器IP地址>:<服务运行端口>
用户名: admin
密码: ChangeMe

在线升级

cd /opt
wget https://resource.fit2cloud.com/jumpserver/installer/releases/download/v4.4.1/jumpserver-installer-v4.4.1.tar.gz
tar -xf jumpserver-installer-v4.4.1.tar.gz
cd jumpserver-installer-v4.4.1

./jmsctl.sh upgrade

# 启动 JumpServer 服务
./jmsctl.sh start

菜单