安装文档

    Debian / UbuntuRedHat / CentOS

    2. yum install -y wget curl tar gettext iptables

    JumpServer 需要使用 MySQL 或 MariaDB 存储数据，使用 Redis 缓存数据，如果希望使用自建数据库或云数据库请参考此处的要求
    支持 和 Redis SSL 连接

    MySQLMariaDB

    1. create database jumpserver default charset 'utf8';
    1. mysql> show create database jumpserver;
    2. +------------+---------------------------------------------------------------------+
    3. | Database   | Create Database                                                     |
    4. +------------+---------------------------------------------------------------------+
    5. | jumpserver | CREATE DATABASE `jumpserver` /*!40100 DEFAULT CHARACTER SET utf8 */ |
    6. +------------+---------------------------------------------------------------------+
    7. 1 row in set (0.00 sec)
    1. create database jumpserver default charset 'utf8';
    1. MariaDB> show create database jumpserver;
    2. +------------+--------------------------------------------------------------------------------------------+
    3. | Database   | Create Database                                                                            |
    4. +------------+--------------------------------------------------------------------------------------------+
    5. | jumpserver | CREATE DATABASE `jumpserver` /*!40100 DEFAULT CHARACTER SET utf8mb3 COLLATE utf8mb3_bin */ |
    6. +------------+--------------------------------------------------------------------------------------------+
    7. 1 row in set (0.001 sec)

    一键部署手动部署Helm源码部署

    1. # 默认会安装到 /opt/jumpserver-installer-v2.27.0 目录
    2. curl -sSL https://github.com/jumpserver/jumpserver/releases/download/v2.27.0/quick_start.sh | bash
    3. cd /opt/jumpserver-installer-v2.27.0
    1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
    1. cd /opt/jumpserver-installer-v2.27.0
    3. # 启动
    4. ./jmsctl.sh start
    6. # 停止
    7. ./jmsctl.sh down
    9. # 卸载
    10. ./jmsctl.sh uninstall
    12. # 帮助
    13. ./jmsctl.sh -h
    1. cd /opt
    2. wget https://github.com/jumpserver/installer/releases/download/v2.27.0/jumpserver-installer-v2.27.0.tar.gz
    3. tar -xf jumpserver-installer-v2.27.0.tar.gz
    4. cd jumpserver-installer-v2.27.0
    1. # 根据需要修改配置文件模板, 如果不清楚用途可以跳过修改
    2. cat config-example.txt
    1. # 以下设置如果为空系统会自动生成随机字符串填入
    2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
    3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
    5. ## Docker 镜像配置
    6. # DOCKER_IMAGE_MIRROR=1
    8. ## 安装配置
    9. VOLUME_DIR=/opt/jumpserver
    10. SECRET_KEY=
    11. BOOTSTRAP_TOKEN=
    12. LOG_LEVEL=ERROR
    14. ##  MySQL 配置, 如果使用外置数据库, 请输入正确的 MySQL 信息
    15. DB_HOST=mysql
    16. DB_PORT=3306
    17. DB_USER=root
    18. DB_PASSWORD=
    19. DB_NAME=jumpserver
    21. ##  Redis 配置, 如果使用外置数据库, 请输入正确的 Redis 信息
    22. REDIS_HOST=redis
    23. REDIS_PORT=6379
    24. REDIS_PASSWORD=
    26. # JumpServer 容器使用的网段, 请勿与现有的网络冲突, 根据实际情况自行修改
    27. DOCKER_SUBNET=192.168.250.0/24
    29. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
    30. USE_IPV6=0
    31. DOCKER_SUBNET_IPV6=fc00:1010:1111:200::/64
    33. ## 访问配置
    34. HTTP_PORT=80
    35. SSH_PORT=2222
    36. RDP_PORT=3389
    37. MAGNUS_PORTS=30000-30100
    39. ## HTTPS 配置, 参考 https://docs.jumpserver.org/zh/master/admin-guide/proxy/ 配置
    40. # USE_LB=1
    41. # HTTPS_PORT=443
    42. # SERVER_NAME=your_domain_name
    43. # SSL_CERTIFICATE=your_cert
    44. # SSL_CERTIFICATE_KEY=your_cert_key
    46. ## Nginx 文件上传大小
    47. CLIENT_MAX_BODY_SIZE=4096m
    49. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
    50. USE_TASK=1
    52. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=True 表示关闭浏览器即 session 过期
    53. # SESSION_COOKIE_AGE=86400
    54. SESSION_EXPIRE_AT_BROWSER_CLOSE=True
    56. # Koko Lion XRDP 组件配置
    57. CORE_HOST=http://core:8080
    58. JUMPSERVER_ENABLE_FONT_SMOOTHING=True
    60. ## 终端使用宿主 HOSTNAME 标识
    61. SERVER_HOSTNAME=${HOSTNAME}
    63. # 额外的配置
    64. CURRENT_VERSION=
    1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
    1. cd /opt/jumpserver-installer-v2.27.0
    3. # 启动
    4. ./jmsctl.sh start
    6. # 停止
    7. ./jmsctl.sh down
    9. # 卸载
    10. ./jmsctl.sh uninstall
    12. # 帮助
    13. ./jmsctl.sh -h
    1. helm repo add jumpserver https://jumpserver.github.io/helm-charts
    2. helm repo list
    3. vi values.yaml
    1. # 模板 https://github.com/jumpserver/helm-charts/blob/main/charts/jumpserver/values.yaml
    2. # Default values for jumpserver.
    3. # This is a YAML-formatted file.
    4. # Declare variables to be passed into your templates.
    6. nameOverride: ""
    7. fullnameOverride: ""
    9. ## @param global.imageRegistry Global Docker image registry
    10. ## @param global.imagePullSecrets Global Docker registry secret names as an array
    11. ## @param global.storageClass Global StorageClass for Persistent Volume(s)
    12. ## @param global.redis.password Global Redis™ password (overrides `auth.password`)
    13. ##
    14. global:
    15.   imageRegistry: "docker.io"    # 国内可以使用华为云加速
    16.   imageTag: v2.27.0             # 版本号
    17.   ## E.g.
    18.   #  imagePullSecrets:
    19.   #    - name: harborsecret
    20.   #
    21.   #  storageClass: "jumpserver-data"
    22.   ##
    23.   imagePullSecrets: []
    24.     # - name: yourSecretKey
    25.   storageClass: ""              # (*必填) NFS SC
    27. ## Please configure your MySQL server first
    28. ## Jumpserver will not start the external MySQL server.
    29. ##
    30. externalDatabase:               #  (*必填) 数据库相关设置
    31.   engine: mysql
    32.   host: localhost
    33.   port: 3306
    34.   user: root
    35.   password: ""
    36.   database: jumpserver
    38. ## Please configure your Redis server first
    39. ## Jumpserver will not start the external Redis server.
    40. ##
    41. externalRedis:                  #  (*必填) Redis 设置
    42.   host: localhost
    43.   port: 6379
    44.   password: ""
    46. serviceAccount:
    47.   # Specifies whether a service account should be created
    48.   create: false
    49.   # The name of the service account to use.
    50.   # If not set and create is true, a name is generated using the fullname template
    51.   name:
    53. ingress:
    54.   enabled: true                             # 不使用 ingress 可以关闭
    55.   annotations:
    56.     # kubernetes.io/tls-acme: "true"
    57.     compute-full-forwarded-for: "true"
    58.     use-forwarded-headers: "true"
    59.     kubernetes.io/ingress.class: nginx
    60.     nginx.ingress.kubernetes.io/configuration-snippet: |
    61.        proxy_set_header Upgrade "websocket";
    62.        proxy_set_header Connection "Upgrade";
    63.   hosts:
    64.     - "test.jumpserver.org"                 # 对外域名
    65.   tls: []
    66.   #  - secretName: chart-example-tls
    67.   #    hosts:
    68.   #      - chart-example.local
    70. core:
    71.   enabled: true
    73.   labels:
    74.     app.jumpserver.org/name: jms-core
    76.   config:
    77.     # Generate a new random secret key by execute `cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 50`
    78.     # secretKey: "B3f2w8P2PfxIAS7s4URrD9YmSbtqX4vXdPUL217kL9XPUOWrmy"
    79.     secretKey: ""                            #  (*必填) 加密敏感信息的 secret_key, 长度推荐大于 50 位
    80.     # Generate a new random bootstrap token by execute `cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 16`
    81.     # bootstrapToken: "7Q11Vz6R2J6BLAdO"
    82.     bootstrapToken: ""                       #  (*必填) 组件认证使用的 token, 长度推荐大于 24 位
    83.     # Enabled it for debug
    84.     debug: false
    85.     log:
    86.       level: ERROR
    88.   replicaCount: 1
    90.   image:
    91.     registry: docker.io
    92.     repository: jumpserver/core
    93.     tag: v2.27.0
    94.     pullPolicy: IfNotPresent
    96.   command: []
    98.   env:
    99.     # See: https://docs.jumpserver.org/zh/master/admin-guide/env/#core
    100.     SESSION_EXPIRE_AT_BROWSER_CLOSE: true
    101.     # SESSION_COOKIE_AGE: 86400
    102.     # SECURITY_VIEW_AUTH_NEED_MFA: true
    104.   livenessProbe:
    105.     failureThreshold: 30
    106.     httpGet:
    107.       path: /api/health/
    108.       port: web
    110.   readinessProbe:
    111.     failureThreshold: 30
    112.     httpGet:
    113.       path: /api/health/
    114.       port: web
    116.   podSecurityContext: {}
    117.     # fsGroup: 2000
    119.   securityContext: {}
    120.     # capabilities:
    121.     #   drop:
    122.     #   - ALL
    123.     # readOnlyRootFilesystem: true
    124.     # runAsNonRoot: true
    125.     # runAsUser: 1000
    127.   service:
    128.     type: ClusterIP
    129.     web:
    130.       port: 8080
    131.     ws:
    132.       port: 8070
    134.   resources: {}
    135.     # We usually recommend not to specify default resources and to leave this as a conscious
    136.     # choice for the user. This also increases chances charts run on environments with little
    137.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
    138.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
    139.     # limits:
    140.     #   cpu: 1000m
    141.     #   memory: 2048Mi
    142.     # requests:
    143.     #   cpu: 500m
    144.     #   memory: 1024Mi
    146.   persistence:
    147.     storageClassName: jumpserver-data
    148.     accessModes:
    149.       - ReadWriteMany
    150.     size: 100Gi
    151.     # annotations: {}
    152.     finalizers:
    153.       - kubernetes.io/pvc-protection
    154.     # subPath: ""
    155.     # existingClaim:
    157.   volumeMounts: []
    159.   volumes: []
    161.   nodeSelector: {}
    163.   tolerations: []
    165.   affinity: {}
    167. koko:
    168.   enabled: true
    170.   labels:
    171.     app.jumpserver.org/name: jms-koko
    173.   config:
    174.     log:
    175.       level: ERROR
    177.   replicaCount: 1
    179.   image:
    180.     registry: docker.io
    181.     repository: jumpserver/koko
    182.     tag: v2.27.0
    183.     pullPolicy: IfNotPresent
    185.   command: []
    187.   env: []
    188.     # See: https://docs.jumpserver.org/zh/master/admin-guide/env/#koko
    189.     # LANGUAGE_CODE: zh
    190.     # REUSE_CONNECTION: true
    191.     # ENABLE_LOCAL_PORT_FORWARD: true
    192.     # ENABLE_VSCODE_SUPPORT: true
    194.   livenessProbe:
    195.     failureThreshold: 30
    196.     httpGet:
    197.       path: /koko/health/
    198.       port: web
    200.   readinessProbe:
    201.     failureThreshold: 30
    202.     httpGet:
    203.       path: /koko/health/
    204.       port: web
    206.   podSecurityContext: {}
    207.     # fsGroup: 2000
    209.   securityContext:
    210.     privileged: true
    211.     # capabilities:
    212.     #   drop:
    213.     #   - ALL
    214.     # readOnlyRootFilesystem: true
    215.     # runAsNonRoot: true
    216.     # runAsUser: 1000
    218.   service:
    219.     type: ClusterIP
    220.     web:
    221.       port: 5000
    222.     ssh:
    224.   resources: {}
    225.     # We usually recommend not to specify default resources and to leave this as a conscious
    227.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
    228.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
    229.     # limits:
    230.     #   cpu: 100m
    231.     #   memory: 128Mi
    232.     # requests:
    233.     #   cpu: 100m
    234.     #   memory: 128Mi
    236.   persistence:
    237.     storageClassName: jumpserver-data
    238.     accessModes:
    239.       - ReadWriteMany
    240.     size: 10Gi
    241.     # annotations: {}
    242.     finalizers:
    243.       - kubernetes.io/pvc-protection
    245.   volumeMounts: []
    247.   volumes: []
    249.   nodeSelector: {}
    251.   tolerations: []
    253.   affinity: {}
    255. lion:
    256.   enabled: true
    258.   labels:
    259.     app.jumpserver.org/name: jms-lion
    261.   config:
    262.     log:
    263.       level: ERROR
    265.   replicaCount: 1
    267.   image:
    268.     registry: docker.io
    269.     repository: jumpserver/lion
    270.     tag: v2.27.0
    271.     pullPolicy: IfNotPresent
    273.   command: []
    275.   env:
    276.     # See: https://docs.jumpserver.org/zh/master/admin-guide/env/#lion
    277.     JUMPSERVER_ENABLE_FONT_SMOOTHING: true
    278.     # JUMPSERVER_COLOR_DEPTH: 32
    279.     # JUMPSERVER_ENABLE_WALLPAPER: true
    280.     # JUMPSERVER_ENABLE_THEMING: true
    281.     # JUMPSERVER_ENABLE_FULL_WINDOW_DRAG: true
    282.     # JUMPSERVER_ENABLE_DESKTOP_COMPOSITION: true
    283.     # JUMPSERVER_ENABLE_MENU_ANIMATIONS: true
    285.   livenessProbe:
    286.     failureThreshold: 30
    287.     httpGet:
    288.       path: /lion/health/
    289.       port: web
    291.   readinessProbe:
    292.     failureThreshold: 30
    293.     httpGet:
    294.       path: /lion/health/
    295.       port: web
    297.   podSecurityContext: {}
    298.     # fsGroup: 2000
    300.   securityContext: {}
    301.     # capabilities:
    302.     #   drop:
    303.     #   - ALL
    304.     # readOnlyRootFilesystem: true
    305.     # runAsNonRoot: true
    306.     # runAsUser: 1000
    308.   service:
    309.     type: ClusterIP
    310.     web:
    311.       port: 8081
    313.   resources: {}
    314.     # We usually recommend not to specify default resources and to leave this as a conscious
    315.     # choice for the user. This also increases chances charts run on environments with little
    316.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
    317.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
    318.     # limits:
    319.     #   cpu: 100m
    320.     #   memory: 512Mi
    321.     # requests:
    322.     #   cpu: 100m
    323.     #   memory: 512Mi
    325.   persistence:
    326.     storageClassName: jumpserver-data
    327.     accessModes:
    328.       - ReadWriteMany
    329.     size: 50Gi
    330.     # annotations: {}
    331.     finalizers:
    332.       - kubernetes.io/pvc-protection
    334.   volumeMounts: []
    336.   volumes: []
    338.   nodeSelector: {}
    340.   tolerations: []
    342.   affinity: {}
    344. # v2.27.0 版本 magnus 做了大改，需要开放很多端口，等待后续优化
    345. magnus:
    346.   enabled: false
    348.   labels:
    349.     app.jumpserver.org/name: jms-magnus
    351.   config:
    352.     log:
    353.       level: ERROR
    355.   replicaCount: 1
    357.   image:
    358.     registry: docker.io
    359.     repository: jumpserver/magnus
    360.     tag: v2.21.0
    361.     pullPolicy: IfNotPresent
    363.   command: []
    365.   env: []
    367.   livenessProbe:
    368.     failureThreshold: 30
    369.     tcpSocket:
    370.       port: 30000
    372.   readinessProbe:
    373.     failureThreshold: 30
    374.     tcpSocket:
    375.       port: 30000
    377.   podSecurityContext: {}
    378.     # fsGroup: 2000
    380.   securityContext: {}
    381.     # capabilities:
    382.     #   drop:
    383.     #   - ALL
    384.     # readOnlyRootFilesystem: true
    385.     # runAsNonRoot: true
    386.     # runAsUser: 1000
    388.   service:
    389.     type: ClusterIP
    390.       ports: 30000-30100
    392.   resources: {}
    393.     # We usually recommend not to specify default resources and to leave this as a conscious
    394.     # choice for the user. This also increases chances charts run on environments with little
    395.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
    396.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
    397.     # limits:
    398.     #   cpu: 100m
    399.     #   memory: 512Mi
    400.     # requests:
    401.     #   cpu: 100m
    402.     #   memory: 512Mi
    404.   persistence:
    405.     storageClassName: jumpserver-data
    406.     accessModes:
    407.       - ReadWriteMany
    408.     size: 10Gi
    409.     # annotations: {}
    410.     finalizers:
    411.       - kubernetes.io/pvc-protection
    413.   volumeMounts: []
    415.   volumes: []
    417.   nodeSelector: {}
    419.   tolerations: []
    421.   affinity: {}
    423. xpack:
    424.   enabled: false      # 企业版本打开此选项
    426. omnidb:
    427.   labels:
    428.     app.jumpserver.org/name: jms-omnidb
    430.   config:
    431.     log:
    432.       level: ERROR
    434.   replicaCount: 1
    436.   image:
    437.     registry: registry.fit2cloud.com
    438.     repository: jumpserver/omnidb
    439.     tag: v2.27.0
    440.     pullPolicy: IfNotPresent
    442.   command: []
    444.   env: []
    446.   livenessProbe:
    447.     failureThreshold: 30
    448.     tcpSocket:
    449.       port: web
    451.   readinessProbe:
    452.     failureThreshold: 30
    453.     tcpSocket:
    454.       port: web
    456.   podSecurityContext: {}
    457.     # fsGroup: 2000
    459.   securityContext: {}
    460.     # capabilities:
    461.     #   drop:
    462.     #   - ALL
    463.     # readOnlyRootFilesystem: true
    464.     # runAsNonRoot: true
    465.     # runAsUser: 1000
    467.   service:
    468.     type: ClusterIP
    469.     web:
    470.       port: 8082
    472.   resources: {}
    473.     # We usually recommend not to specify default resources and to leave this as a conscious
    474.     # choice for the user. This also increases chances charts run on environments with little
    475.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
    476.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
    477.     # limits:
    478.     #   cpu: 100m
    479.     #   memory: 128Mi
    480.     # requests:
    481.     #   cpu: 100m
    482.     #   memory: 128Mi
    484.   persistence:
    485.     storageClassName: jumpserver-data
    486.     accessModes:
    487.       - ReadWriteMany
    488.     size: 10Gi
    489.     # annotations: {}
    490.     finalizers:
    491.       - kubernetes.io/pvc-protection
    493.   volumeMounts: []
    495.   volumes: []
    497.   nodeSelector: {}
    499.   tolerations: []
    501.   affinity: {}
    503. razor:
    504.   labels:
    505.     app.jumpserver.org/name: jms-razor
    507.   config:
    508.     log:
    509.       level: ERROR
    511.   replicaCount: 1
    513.   image:
    514.     registry: registry.fit2cloud.com
    515.     repository: jumpserver/razor
    516.     tag: v2.27.0
    517.     pullPolicy: IfNotPresent
    519.   command: []
    521.   env: []
    523.   livenessProbe:
    524.     failureThreshold: 30
    525.     tcpSocket:
    526.       port: rdp
    528.   readinessProbe:
    529.     failureThreshold: 30
    530.     tcpSocket:
    531.       port: rdp
    533.   podSecurityContext: {}
    534.     # fsGroup: 2000
    536.   securityContext: {}
    537.     # capabilities:
    538.     #   drop:
    539.     #   - ALL
    540.     # readOnlyRootFilesystem: true
    541.     # runAsNonRoot: true
    542.     # runAsUser: 1000
    544.   service:
    545.     type: ClusterIP
    546.     rdp:
    547.       port: 3389
    549.   resources: {}
    550.     # We usually recommend not to specify default resources and to leave this as a conscious
    551.     # choice for the user. This also increases chances charts run on environments with little
    552.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
    553.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
    554.     # limits:
    555.     #   cpu: 100m
    556.     #   memory: 128Mi
    557.     # requests:
    558.     #   cpu: 100m
    559.     #   memory: 128Mi
    561.   persistence:
    562.     storageClassName: jumpserver-data
    563.     accessModes:
    564.       - ReadWriteMany
    565.     size: 50Gi
    566.     # annotations: {}
    567.     finalizers:
    568.       - kubernetes.io/pvc-protection
    570.   volumeMounts: []
    575.   tolerations: []
    577.   affinity: {}
    579. web:
    580.   enabled: true
    582.   labels:
    583.     app.jumpserver.org/name: jms-web
    585.   replicaCount: 1
    587.   image:
    588.     registry: docker.io
    589.     repository: jumpserver/web
    590.     tag: v2.27.0
    591.     pullPolicy: IfNotPresent
    593.   command: []
    595.   env: []
    596.     # nginx client_max_body_size, default 4G
    597.     # CLIENT_MAX_BODY_SIZE: 4096m
    599.   livenessProbe:
    600.     failureThreshold: 30
    601.     httpGet:
    602.       path: /api/health/
    603.       port: web
    605.   readinessProbe:
    606.     failureThreshold: 30
    607.     httpGet:
    608.       path: /api/health/
    609.       port: web
    611.   podSecurityContext: {}
    612.     # fsGroup: 2000
    614.   securityContext: {}
    615.     # capabilities:
    616.     #   drop:
    617.     #   - ALL
    618.     # readOnlyRootFilesystem: true
    619.     # runAsNonRoot: true
    620.     # runAsUser: 1000
    622.   service:
    623.     type: ClusterIP
    624.     web:
    625.       port: 80
    627.   resources: {}
    628.     # We usually recommend not to specify default resources and to leave this as a conscious
    629.     # choice for the user. This also increases chances charts run on environments with little
    630.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
    631.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
    632.     # limits:
    633.     #   cpu: 100m
    634.     #   memory: 128Mi
    635.     # requests:
    636.     #   cpu: 100m
    637.     #   memory: 128Mi
    639.   persistence:
    640.     storageClassName: jumpserver-data
    641.     accessModes:
    642.       - ReadWriteMany
    643.     size: 1Gi
    644.     # annotations: {}
    645.     finalizers:
    646.       - kubernetes.io/pvc-protection
    648.   volumeMounts: []
    650.   volumes: []
    652.   nodeSelector: {}
    654.   tolerations: []
    656.   affinity: {}
    1. # 安装
    2. helm install jms-k8s jumpserver/jumpserver -n default -f values.yaml
    4. # 卸载
    5. helm uninstall jms-k8s -n default

    离线包解压需要 tar 命令, 参考 手动安装

    linux/amd64linux/arm64linux/loong64

    1. cd /opt
    2. tar -xf jumpserver-offline-installer-v2.27.0-amd64-113.tar.gz
    3. cd jumpserver-offline-installer-v2.27.0-amd64-113
    1. # 根据需要修改配置文件模板, 如果不清楚用途可以跳过修改
    2. cat config-example.txt
    1. # 以下设置如果为空系统会自动生成随机字符串填入
    2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
    3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
    5. ## Docker 镜像配置
    6. # DOCKER_IMAGE_MIRROR=1
    8. ## 安装配置
    9. VOLUME_DIR=/opt/jumpserver
    10. SECRET_KEY=
    11. BOOTSTRAP_TOKEN=
    12. LOG_LEVEL=ERROR
    14. ##  MySQL 配置, 如果使用外置数据库, 请输入正确的 MySQL 信息
    15. DB_HOST=mysql
    16. DB_PORT=3306
    17. DB_USER=root
    18. DB_PASSWORD=
    19. DB_NAME=jumpserver
    21. ##  Redis 配置, 如果使用外置数据库, 请输入正确的 Redis 信息
    22. REDIS_HOST=redis
    23. REDIS_PORT=6379
    24. REDIS_PASSWORD=
    26. # JumpServer 容器使用的网段, 请勿与现有的网络冲突, 根据实际情况自行修改
    27. DOCKER_SUBNET=192.168.250.0/24
    29. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
    30. USE_IPV6=0
    31. DOCKER_SUBNET_IPV6=fc00:1010:1111:200::/64
    33. ## 访问配置
    34. HTTP_PORT=80
    35. SSH_PORT=2222
    36. RDP_PORT=3389
    37. MAGNUS_PORTS=30000-30100
    39. ## HTTPS 配置, 参考 https://docs.jumpserver.org/zh/master/admin-guide/proxy/ 配置
    40. # USE_LB=1
    41. # HTTPS_PORT=443
    42. # SERVER_NAME=your_domain_name
    43. # SSL_CERTIFICATE=your_cert
    44. # SSL_CERTIFICATE_KEY=your_cert_key
    46. ## Nginx 文件上传大小
    47. CLIENT_MAX_BODY_SIZE=4096m
    49. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
    50. USE_TASK=1
    52. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=True 表示关闭浏览器即 session 过期
    53. # SESSION_COOKIE_AGE=86400
    54. SESSION_EXPIRE_AT_BROWSER_CLOSE=True
    56. # Koko Lion XRDP 组件配置
    57. CORE_HOST=http://core:8080
    58. JUMPSERVER_ENABLE_FONT_SMOOTHING=True
    60. ## 终端使用宿主 HOSTNAME 标识
    61. SERVER_HOSTNAME=${HOSTNAME}
    63. # 额外的配置
    64. CURRENT_VERSION=
    1. # 安装
    2. ./jmsctl.sh install
    4. # 启动
    5. ./jmsctl.sh start
    1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
    1. cd jumpserver-offline-release-v2.27.0-amd64-113
    3. # 启动
    4. ./jmsctl.sh start
    6. # 停止
    7. ./jmsctl.sh down
    9. # 卸载
    10. ./jmsctl.sh uninstall
    12. # 帮助
    13. ./jmsctl.sh -h

    从飞致云社区 下载最新的 linux/arm64 离线包, 并上传到部署服务器的 /opt 目录

    1. # 根据需要修改配置文件模板, 如果不清楚用途可以跳过修改
    2. cat config-example.txt
    1. # 以下设置如果为空系统会自动生成随机字符串填入
    2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
    3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
    5. ## Docker 镜像配置
    6. # DOCKER_IMAGE_MIRROR=1
    8. ## 安装配置
    9. VOLUME_DIR=/opt/jumpserver
    10. SECRET_KEY=
    11. BOOTSTRAP_TOKEN=
    12. LOG_LEVEL=ERROR
    14. ##  MySQL 配置, 如果使用外置数据库, 请输入正确的 MySQL 信息
    15. DB_HOST=mysql
    16. DB_PORT=3306
    17. DB_USER=root
    18. DB_PASSWORD=
    19. DB_NAME=jumpserver
    21. ##  Redis 配置, 如果使用外置数据库, 请输入正确的 Redis 信息
    22. REDIS_HOST=redis
    23. REDIS_PORT=6379
    24. REDIS_PASSWORD=
    26. # JumpServer 容器使用的网段, 请勿与现有的网络冲突, 根据实际情况自行修改
    27. DOCKER_SUBNET=192.168.250.0/24
    29. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
    30. USE_IPV6=0
    31. DOCKER_SUBNET_IPV6=fc00:1010:1111:200::/64
    33. ## 访问配置
    34. HTTP_PORT=80
    35. SSH_PORT=2222
    36. RDP_PORT=3389
    37. MAGNUS_PORTS=30000-30100
    39. ## HTTPS 配置, 参考 https://docs.jumpserver.org/zh/master/admin-guide/proxy/ 配置
    40. # USE_LB=1
    41. # HTTPS_PORT=443
    42. # SERVER_NAME=your_domain_name
    43. # SSL_CERTIFICATE=your_cert
    44. # SSL_CERTIFICATE_KEY=your_cert_key
    46. ## Nginx 文件上传大小
    47. CLIENT_MAX_BODY_SIZE=4096m
    49. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
    50. USE_TASK=1
    52. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=True 表示关闭浏览器即 session 过期
    53. # SESSION_COOKIE_AGE=86400
    54. SESSION_EXPIRE_AT_BROWSER_CLOSE=True
    56. # Koko Lion XRDP 组件配置
    57. CORE_HOST=http://core:8080
    58. JUMPSERVER_ENABLE_FONT_SMOOTHING=True
    60. ## 终端使用宿主 HOSTNAME 标识
    61. SERVER_HOSTNAME=${HOSTNAME}
    63. # 额外的配置
    64. CURRENT_VERSION=
    1. # 安装
    2. ./jmsctl.sh install
    4. # 启动
    5. ./jmsctl.sh start
    1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
    1. cd jumpserver-offline-release-v2.27.0-arm64-113
    3. # 启动
    4. ./jmsctl.sh start
    6. # 停止
    7. ./jmsctl.sh down
    9. # 卸载
    10. ./jmsctl.sh uninstall
    12. # 帮助
    13. ./jmsctl.sh -h

    从飞致云社区 , 并上传到部署服务器的 /opt 目录

    1. cd /opt
    2. tar -xf jumpserver-offline-installer-v2.27.0-loong64-113.tar.gz
    3. cd jumpserver-offline-installer-v2.27.0-loong64-113
    1. # 根据需要修改配置文件模板, 如果不清楚用途可以跳过修改
    2. cat config-example.txt
    1. # 以下设置如果为空系统会自动生成随机字符串填入
    2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
    3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
    5. ## Docker 镜像配置
    6. # DOCKER_IMAGE_MIRROR=1
    8. ## 安装配置
    9. VOLUME_DIR=/opt/jumpserver
    10. SECRET_KEY=
    11. BOOTSTRAP_TOKEN=
    12. LOG_LEVEL=ERROR
    14. ##  MySQL 配置, 如果使用外置数据库, 请输入正确的 MySQL 信息
    15. DB_HOST=mysql
    16. DB_PORT=3306
    17. DB_USER=root
    18. DB_PASSWORD=
    19. DB_NAME=jumpserver
    21. ##  Redis 配置, 如果使用外置数据库, 请输入正确的 Redis 信息
    22. REDIS_HOST=redis
    23. REDIS_PORT=6379
    24. REDIS_PASSWORD=
    26. # JumpServer 容器使用的网段, 请勿与现有的网络冲突, 根据实际情况自行修改
    27. DOCKER_SUBNET=192.168.250.0/24
    29. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
    30. USE_IPV6=0
    31. DOCKER_SUBNET_IPV6=fc00:1010:1111:200::/64
    33. ## 访问配置
    34. HTTP_PORT=80
    35. SSH_PORT=2222
    36. RDP_PORT=3389
    37. MAGNUS_PORTS=30000-30100
    39. ## HTTPS 配置, 参考 https://docs.jumpserver.org/zh/master/admin-guide/proxy/ 配置
    40. # USE_LB=1
    41. # HTTPS_PORT=443
    42. # SERVER_NAME=your_domain_name
    43. # SSL_CERTIFICATE=your_cert
    44. # SSL_CERTIFICATE_KEY=your_cert_key
    46. ## Nginx 文件上传大小
    47. CLIENT_MAX_BODY_SIZE=4096m
    49. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
    50. USE_TASK=1
    52. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=True 表示关闭浏览器即 session 过期
    53. # SESSION_COOKIE_AGE=86400
    54. SESSION_EXPIRE_AT_BROWSER_CLOSE=True
    56. # Koko Lion XRDP 组件配置
    57. CORE_HOST=http://core:8080
    58. JUMPSERVER_ENABLE_FONT_SMOOTHING=True
    60. ## 终端使用宿主 HOSTNAME 标识
    61. SERVER_HOSTNAME=${HOSTNAME}
    63. # 额外的配置
    64. CURRENT_VERSION=
    1. # 安装
    2. ./jmsctl.sh install
    4. # 启动
    5. ./jmsctl.sh start
    1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
    1. cd jumpserver-offline-release-v2.27.0-loong64-113
    3. # 启动
    4. ./jmsctl.sh start
    6. # 停止
    7. ./jmsctl.sh down
    9. # 卸载
    10. ./jmsctl.sh uninstall
    12. ./jmsctl.sh -h

    更多内容参考 安全建议