题目:

堡垒机部署[0.5 分] 使用提供的 OpenStack 平台申请一台 CentOS7.9 的云主机,使用提供的软件包安装 JumpServer 堡垒机服务,并配置使用该堡垒机对接自己安装的 controller 和 compute 节点。

部署详解:

1. 基础准备
# 修改主机名
# 远程连接堡垒机节点,修改节点的主机名为 jumpserver
[root@jumpserver ~] # hostnamectl set-hostname jumpserver
# 关闭防火墙与 SELinux
[root@jumpserver ~] # setenforce 0
[root@jumpserver ~] # sed -i s#SELINUX=enforcing#SELINUX=disabled# /etc/selinux/config
[root@jumpserver ~] # iptables -F
[root@jumpserver ~] # iptables -X
[root@jumpserver ~] # iptables -Z
[root@jumpserver ~] # /usr/sbin/iptables-save
# 下载软件包
[root@jumpserver ~] # curl -O http://10.18.4.46/jumpserver.tar.gz
# 解压软件包 jumpserver.tar.gz /root 目录下
[root@jumpserver ~] # tar -zxvf jumpserver.tar.gz -C /opt/
[root@jumpserver ~] # ls /opt/
compose config docker docker.service images jumpserver-repo static.env
# 配置本地 yum
[root@jumpserver ~] # rm -rf /etc/yum.repos.d/*
[root@jumpserver ~] # cat >> /etc/yum.repos.d/jumpserver.repo << EOF
[jumpserver]
name = jumpserver
baseurl = file:///opt/jumpserver-repo
gpgcheck = 0
enabled = 1
EOF
2. 安装依赖环境
# 安装 python 数据库
[root@jumpserver ~] # yum install python2 -y
# 安装配置 docker 环境
[root@jumpserver ~] # cp -rf /opt/docker/* /usr/bin/
[root@jumpserver ~] # chmod 775 /usr/bin/docker*
[root@jumpserver ~] # cp -rf /opt/docker.service /etc/systemd/system/
[root@jumpserver ~] # chmod 755 /etc/systemd/system/docker.service
[root@jumpserver ~] # systemctl daemon-reload
[root@jumpserver ~] # systemctl enable docker --now
# 验证 docker 服务状态
[root@jumpserver ~] # docker --version
Docker version 18 .06.3-ce, build d7080c1
[root@jumpserver ~] # docker-compose --version
docker-compose version 1 .27.4, build 40524192
3. 安装 jumpserver 服务
# 加载 jumpserver 服务组件镜像
[root@jumpserver ~] # cd /opt/images/
[root@jumpserver images] # sh load.sh
# 创建 jumpserver 服务组件目录
[root@jumpserver images] # mkdir -p /opt/jumpserver/{core,koko,lion,mysql,nginx,redis}
[root@jumpserver images] # cp -rf /opt/config /opt/jumpserver/
# 生效环境变量 static.env ,使用所提供的脚本 up.sh 启动 jumpserver 服务
[root@jumpserver images] # cd /opt/compose/
[root@jumpserver compose] # source /opt/static.env
[root@jumpserver compose] # sh up.sh
Creating network "jms_net" with driver "bridge"
Creating jms_mysql ... done
Creating jms_redis ... done
Creating jms_core ... done
Creating jms_celery ... done
Creating jms_luna ... done
Creating jms_lion ... done
Creating jms_lina ... done
Creating jms_nginx ... done
Creating jms_koko ... done
测试登录,浏览器访问 http://10.18.4.250 jumpserver web 登录( admin/admin
Logo

基于 Vue 的企业级 UI 组件库和中后台系统解决方案,为数万开发者服务。

更多推荐