升级文档

    环境说明

    • 从 v2.5 开始, 要求 MySQL >= 5.7
    • 从 v2.6 开始, 要求 Redis >= 5
    • 推荐使用外置 数据库 和 Redis, 方便日后扩展升级

    v2.6 版本升级说明

    • 统一企业版本与开源版本安装方式, 企业版和社区版可以无缝切换
    • 今后只会维护此安装方式, 其他安装方式不再提供技术支持
    • 安装完成后配置文件在 /opt/jumpserver/config/config.txt

    备份数据库

    手动部署

    2. ./koko -s stop
    3. # 更老的版本使用的 coco
    4. # cd /opt/coco
    5. # ./cocod stop
    1. /etc/init.d/guacd stop
    2. sh /config/tomcat9/bin/shutdown.sh
    1. cd /opt/jumpserver
    2. source /opt/py3/bin/activate
    3. ./jms stop
    1. cd /opt
    2. mv /opt/jumpserver /opt/jumpserver_bak
    1. mysqldump -h127.0.0.1 -P3306 -ujumpserver -p jumpserver > /opt/jumpserver.sql
    1. docker stop jms_koko jms_guacamole
    2. docker rm jms_koko jms_guacamole
    3. # 更老的版本使用的 coco
    4. # docker stop jms_coco
    5. # docker rm jms_coco
    1. cd /opt/jumpserver
    2. source /opt/py3/bin/activate
    3. ./jms stop
    1. cd /opt
    2. mv /opt/jumpserver /opt/jumpserver_bak
    1. mysqldump -h127.0.0.1 -P3306 -ujumpserver -p jumpserver > /opt/jumpserver.sql

    setuptools 脚本部署

    1. cd /opt/setuptools
    2. ./jmsctl.sh stop
    3. docker rm jms_koko jms_guacamole
    4. systemctl disable jms_core
    5. mv /opt/jumpserver /opt/jumpserver_bak
    1. mysqldump -h127.0.0.1 -P3306 -ujumpserver -p jumpserver > /opt/jumpserver.sql

    docker 部署

    1. docker exec -it jms_all /bin/bash
    2. mysqldump -h$DB_HOST -P$DB_PORT -u$DB_USER -p$DB_PASSWORD $DB_NAME > /opt/jumpserver.sql
    3. exit
    1. docker cp jms_all:/opt/jumpserver.sql /opt
    2. docker stop jms_all

    docker-compose 部署

    1. docker cp jms_core:/opt/jumpserver /opt/jumpserver_bak
    2. docker exec -it jms_core env | egrep "SECRET_KEY|BOOTSTRAP_TOKEN"
    1. docker exec -it jms_mysql /bin/bash
    2. mysqldump -uroot jumpserver > /opt/jumpserver.sql
    3. exit
    1. docker cp jms_mysql:/opt/jumpserver.sql /opt
    2. cd /opt/Dockerfile
    3. docker-compose stop

    修改数据库字符集

    1. if grep -q 'COLLATE=utf8_bin' /opt/jumpserver.sql; then
    2.     cp /opt/jumpserver.sql /opt/jumpserver_bak.sql
    3.     sed -i 's@COLLATE=utf8_bin@@g' /opt/jumpserver.sql
    4.     sed -i 's@COLLATE utf8_bin@@g' /opt/jumpserver.sql
    5. else
    6.     echo "备份数据库字符集正确";
    7. fi
    1. cd /opt
    2. yum -y install wget
    3. wget https://github.com/jumpserver/installer/releases/download/v2.9.2/jumpserver-installer-v2.9.2.tar.gz
    4. tar -xf jumpserver-installer-v2.9.2.tar.gz
    5. cd jumpserver-installer-v2.9.2
    1. vi config-example.txt
    1. # 修改下面选项, 其他保持默认
    2. ### 注意: SECRET_KEY 与旧版本不一致, 加密的数据将无法解密
    4. # Core 配置
    5. ### 启动后不能再修改，否则密码等等信息无法解密
    6. SECRET_KEY=                           # 从旧版本的配置文件获取后填入 (*)
    7. BOOTSTRAP_TOKEN=                      # 从旧版本的配置文件获取后填入 (*)
    8. LOG_LEVEL=ERROR
    9. # SESSION_COOKIE_AGE=86400
    10. SESSION_EXPIRE_AT_BROWSER_CLOSE=true  # 关闭浏览器后 session 过期

    开始部署 JumpServer

    使用内置数据库

    1. ./jmsctl.sh install
    1.        ██╗██╗   ██╗███╗   ███╗██████╗ ███████╗███████╗██████╗ ██╗   ██╗███████╗██████╗
    2.        ██║██║   ██║████╗ ████║██╔══██╗██╔════╝██╔════╝██╔══██╗██║   ██║██╔════╝██╔══██╗
    3.        ██║██║   ██║██╔████╔██║██████╔╝███████╗█████╗  ██████╔╝██║   ██║█████╗  ██████╔╝
    4.   ██   ██║██║   ██║██║╚██╔╝██║██╔═══╝ ╚════██║██╔══╝  ██╔══██╗╚██╗ ██╔╝██╔══╝  ██╔══██╗
    5.   ╚█████╔╝╚██████╔╝██║ ╚═╝ ██║██║     ███████║███████╗██║  ██║ ╚████╔╝ ███████╗██║  ██║
    6.    ╚════╝  ╚═════╝ ╚═╝    ╚═╝╚═╝     ╚══════╝╚══════╝╚═╝  ╚═╝  ╚═══╝  ╚══════╝╚═╝  ╚═╝
    8.                                                              Version:  v2.9.2
    11. >>> 安装配置 Docker
    12. 1. 安装 Docker
    13. 开始下载 Docker 程序 ...
    14. 完成
    15. 开始下载 Docker Compose 程序 ...
    16. 完成
    18. 2. 配置 Docker
    19. 是否需要自定义 Docker 数据目录, 默认将使用 /var/lib/docker 目录? (y/n)  (默认为 n): n
    20. 完成
    22. 3. 启动 Docker
    23. Docker 版本发生改变 或 Docker 配置文件发生变化，是否要重启? (y/n)  (默认为 y): y
    24. 完成
    26. Docker: Pulling from jumpserver/core:v2.9.2         [ OK ]
    27. Docker: Pulling from jumpserver/koko:v2.9.2         [ OK ]
    28. Docker: Pulling from jumpserver/luna:v2.9.2         [ OK ]
    29. Docker: Pulling from jumpserver/nginx:alpine2       [ OK ]
    30. Docker: Pulling from jumpserver/redis:6-alpine      [ OK ]
    31. Docker: Pulling from jumpserver/lina:v2.9.2         [ OK ]
    32. Docker: Pulling from jumpserver/mysql:5             [ OK ]
    33. Docker: Pulling from jumpserver/guacamole:v2.9.2    [ OK ]
    35. >>> 安装配置 JumpServer
    36. 1. 检查配置文件
    37. 配置文件位置: /opt/jumpserver/config
    38. /opt/jumpserver/config/config.txt                 [ √ ]
    39. /opt/jumpserver/config/nginx/lb_http_server.conf  [ √ ]
    40. /opt/jumpserver/config/nginx/lb_ssh_server.conf   [ √ ]
    41. /opt/jumpserver/config/core/config.yml   [ √ ]
    42. /opt/jumpserver/config/koko/config.yml   [ √ ]
    43. /opt/jumpserver/config/mysql/my.cnf      [ √ ]
    44. /opt/jumpserver/config/redis/redis.conf  [ √ ]
    45. 完成
    47. 2. 配置 Nginx
    48. 配置文件位置:: /opt/jumpserver/config/nginx/cert
    49. /opt/jumpserver/config/nginx/cert/server.crt  [ √ ]
    50. /opt/jumpserver/config/nginx/cert/server.key  [ √ ]
    51. 完成
    53. 3. 备份配置文件
    54. 备份至 /opt/jumpserver/config/backup/config.txt.2021-03-19_08-01-51
    55. 完成
    57. 4. 配置网络
    58. 是否需要支持 IPv6? (y/n)  (默认为 n): n
    59. 完成
    61. 5. 配置加密密钥
    62. SECRETE_KEY:     ICAgIGluZXQ2IDI0MDk6OGE0ZDpjMjg6ZjkwMTo6ZDRjLzEyO
    63. BOOTSTRAP_TOKEN: ICAgIGluZXQ2IDI0
    64. 完成
    66. 6. 配置持久化目录
    67. 是否需要自定义持久化存储, 默认将使用目录 /opt/jumpserver? (y/n)  (默认为 n): n
    68. 完成
    70. 7. 配置 MySQL
    71. 是否使用外部mysql (y/n)  (默认为n): n
    73. 8. 配置 Redis
    74. 是否使用外部redis  (y/n)  (默认为n): n
    76. >>> 安装完成了
    77. 1. 可以使用如下命令启动, 然后访问
    78. ./jmsctl.sh start
    80. 2. 其它一些管理命令
    81. ./jmsctl.sh stop
    82. ./jmsctl.sh restart
    83. ./jmsctl.sh backup
    84. ./jmsctl.sh upgrade
    85. 更多还有一些命令, 你可以 ./jmsctl.sh --help 来了解
    87. 3. Web 访问
    88. http://192.168.100.248:8080
    89. https://192.168.100.248:8443
    90. 默认用户: admin  默认密码: admin
    92. 4. SSH/SFTP 访问
    93. ssh admin@192.168.100.248 -p2222
    94. sftp -P2222 admin@192.168.100.248
    96. 5. 更多信息
    97. 我们的官网: https://www.jumpserver.org/
    98. 我们的文档: https://docs.jumpserver.org/

    使用外置数据库

    1.        ██╗██╗   ██╗███╗   ███╗██████╗ ███████╗███████╗██████╗ ██╗   ██╗███████╗██████╗
    2.        ██║██║   ██║████╗ ████║██╔══██╗██╔════╝██╔════╝██╔══██╗██║   ██║██╔════╝██╔══██╗
    3.        ██║██║   ██║██╔████╔██║██████╔╝███████╗█████╗  ██████╔╝██║   ██║█████╗  ██████╔╝
    4.   ██   ██║██║   ██║██║╚██╔╝██║██╔═══╝ ╚════██║██╔══╝  ██╔══██╗╚██╗ ██╔╝██╔══╝  ██╔══██╗
    5.   ╚█████╔╝╚██████╔╝██║ ╚═╝ ██║██║     ███████║███████╗██║  ██║ ╚████╔╝ ███████╗██║  ██║
    6.    ╚════╝  ╚═════╝ ╚═╝    ╚═╝╚═╝     ╚══════╝╚══════╝╚═╝  ╚═╝  ╚═══╝  ╚══════╝╚═╝  ╚═╝
    8.                                                              Version:  v2.9.2
    11. >>> 安装配置 Docker
    12. 1. 安装 Docker
    13. 开始下载 Docker 程序 ...
    14. 完成
    15. 开始下载 Docker Compose 程序 ...
    16. 完成
    18. 2. 配置 Docker
    19. 是否需要自定义 Docker 数据目录, 默认将使用 /var/lib/docker 目录? (y/n)  (默认为 n): n
    20. 完成
    22. 3. 启动 Docker
    23. Docker 版本发生改变 或 Docker 配置文件发生变化，是否要重启? (y/n)  (默认为 y): y
    24. 完成
    26. >>> 加载 Docker 镜像
    27. Docker: Pulling from jumpserver/core:v2.9.2         [ OK ]
    28. Docker: Pulling from jumpserver/koko:v2.9.2         [ OK ]
    29. Docker: Pulling from jumpserver/luna:v2.9.2         [ OK ]
    30. Docker: Pulling from jumpserver/nginx:alpine2       [ OK ]
    31. Docker: Pulling from jumpserver/redis:6-alpine      [ OK ]
    32. Docker: Pulling from jumpserver/lina:v2.9.2         [ OK ]
    33. Docker: Pulling from jumpserver/mysql:5             [ OK ]
    35. >>> 安装配置 JumpServer
    37. 配置文件位置: /opt/jumpserver/config
    38. /opt/jumpserver/config/config.txt                 [ √ ]
    39. /opt/jumpserver/config/nginx/lb_http_server.conf  [ √ ]
    40. /opt/jumpserver/config/nginx/lb_ssh_server.conf   [ √ ]
    41. /opt/jumpserver/config/core/config.yml   [ √ ]
    42. /opt/jumpserver/config/koko/config.yml   [ √ ]
    43. /opt/jumpserver/config/mysql/my.cnf      [ √ ]
    44. /opt/jumpserver/config/redis/redis.conf  [ √ ]
    45. 完成
    47. 2. 配置 Nginx
    48. 配置文件位置:: /opt/jumpserver/config/nginx/cert
    49. /opt/jumpserver/config/nginx/cert/server.crt  [ √ ]
    50. /opt/jumpserver/config/nginx/cert/server.key  [ √ ]
    51. 完成
    53. 3. 备份配置文件
    54. 备份至 /opt/jumpserver/config/backup/config.txt.2021-03-19_08-01-51
    55. 完成
    57. 4. 配置网络
    58. 是否需要支持 IPv6? (y/n)  (默认为 n): n
    59. 完成
    61. 5. 配置加密密钥
    62. SECRETE_KEY:     ICAgIGluZXQ2IDI0MDk6OGE0ZDpjMjg6ZjkwMTo6ZDRjLzEyO
    63. BOOTSTRAP_TOKEN: ICAgIGluZXQ2IDI0
    64. 完成
    66. 6. 配置持久化目录
    67. 是否需要自定义持久化存储, 默认将使用目录 /opt/jumpserver? (y/n)  (默认为 n): n
    68. 完成
    70. 7. 配置 MySQL
    71. 是否使用外部mysql (y/n)  (默认为n): y
    72. 请输入mysql的主机地址 (无默认值): 192.168.100.11
    73. 请输入mysql的端口 (默认为3306): 3306
    74. 请输入mysql的数据库(事先做好授权) (默认为jumpserver): jumpserver
    75. 请输入mysql的用户名 (无默认值): jumpserver
    76. 请输入mysql的密码 (无默认值): weakPassword
    77. 完成
    79. 8. 配置 Redis
    80. 是否使用外部redis  (y/n)  (默认为n): y
    81. 请输入redis的主机地址 (无默认值): 192.168.100.11
    82. 请输入redis的端口 (默认为6379): 6379
    83. 请输入redis的密码 (无默认值): weakPassword
    84. 完成
    86. >>> 安装完成了
    87. 1. 可以使用如下命令启动, 然后访问
    88. ./jmsctl.sh start
    90. 2. 其它一些管理命令
    91. ./jmsctl.sh stop
    92. ./jmsctl.sh restart
    93. ./jmsctl.sh backup
    94. ./jmsctl.sh upgrade
    95. 更多还有一些命令, 你可以 ./jmsctl.sh --help 来了解
    97. 3. Web 访问
    98. http://192.168.100.248:8080
    99. https://192.168.100.248:8443
    100. 默认用户: admin  默认密码: admin
    102. 4. SSH/SFTP 访问
    103. ssh admin@192.168.100.248 -p2222
    104. sftp -P2222 admin@192.168.100.248
    106. 5. 更多信息
    107. 我们的官网: https://www.jumpserver.org/
    108. 我们的文档: https://docs.jumpserver.org/
    1. mkdir -p /opt/jumpserver/core/
    2. mv /opt/jumpserver_bak/data /opt/jumpserver/core/
    1. ./jmsctl.sh start
    1. Creating network "jms_net" with driver "bridge"
    2. Creating jms_core      ... done
    3. Creating jms_celery    ... done
    4. Creating jms_luna      ... done
    5. Creating jms_lina      ... done
    6. Creating jms_guacamole ... done
    7. Creating jms_koko      ... done
    8. Creating jms_nginx     ... done
    1. docker exec -it jms_mysql /bin/bash
    2. mysql -uroot -p$DB_PASSWORD
    1. drop database jumpserver;
    2. create database jumpserver default charset 'utf8';
    3. exit
    4. exit
    1. ./jmsctl.sh restore_db /opt/jumpserver.sql
    1. 开始还原数据库: /opt/jumpserver.sql
    2. mysql: [Warning] Using a password on the command line interface can be insecure.
    3. 数据库恢复成功！
    1. ./jmsctl.sh restart

    升级说明

    要求说明

    • jumpserver 版本 >= v2.6.0
    • jumpserver 版本 < v2.6.0 的请先参考上面的迁移文档迁移到最新版本

    升级步骤

    1. cd /opt
    2. yum -y install wget
    3. wget https://github.com/jumpserver/installer/releases/download/v2.9.2/jumpserver-installer-v2.9.2.tar.gz
    4. tar -xf jumpserver-installer-v2.9.2.tar.gz
    5. cd jumpserver-installer-v2.9.2
    1. ./jmsctl.sh upgrade