devbox
你好赵伟
这个屌丝很懒，什么也没留下！
关注作者
热门标签
热门文章
当前位置:   article > 正文

基于docker-compose部署jumpserver_docker的jumpserver/koko容器中config.yml中sshd_port参数需要打

作者：你好赵伟 | 2024-02-10 00:32:26

赞

踩

docker的jumpserver/koko容器中config.yml中sshd_port参数需要打开么

基于docker-compose部署jumpserver

组件说明

Jumpserver 为管理后台, 管理员可以通过 Web 页面进行资产管理、用户管理、资产授权等操作, 用户可以通过 Web 页面进行资产登录, 文件管理等操作
koko 为 SSH Server 和 Web Terminal Server 。用户可以使用自己的账户通过 SSH 或者 Web Terminal 访问 SSH 协议和 Telnet 协议资产
Luna 为 Web Terminal Server 前端页面, 用户使用 Web Terminal 方式登录所需要的组件
Guacamole 为 RDP 协议和 VNC 协议资产组件, 用户可以通过 Web Terminal 来连接 RDP 协议和 VNC 协议资产 (暂时只能通过 Web Terminal 来访问)

端口说明

Jumpserver 默认 Web 端口为 8080/tcp, 默认 WS 端口为 8070/tcp, 配置文件 jumpserver/config.yml
koko 默认 SSH 端口为 2222/tcp, 默认 Web Terminal 端口为 5000/tcp 配置文件在 koko/config.yml
Guacamole 默认端口为 8081/tcp, 配置文件 /config/tomcat9/conf/server.xml
Nginx 默认端口为 80/tcp
Redis 默认端口为 6379/tcp
Mysql 默认端口为 3306/tcp

ProtocolServer namePort
TCPJumpserver80
TCPGuacamole 
TCPDb3306
TCPRedis6379
TCPkoko2222

环境

系统: Centos 7

NFS-server: 192.168.150.192

数据库 IP: 192.168.150.45

Redis ip: 192.168.150.45

Jumpserver IP: 192.168.150.45 192.168.150.26

koko IP: 192.168.150.45 192.168.150.26

Guacamole IP: 192.168.150.45 192.168.150.26

Tengine 代理IP: 192.168.150.45 192.168.150.26

安全设置

ssh、telnet协议 资产的防火墙设置允许 koko 与 jumpserver 访问

rdp协议 资产的防火墙设置允许 guacamole 与jumpserver 访问

防火墙设置

根据需求开放对应的端口,或者直接关闭防火墙

  1. systemctl stop firewalld.service
  2. systemctl disable firewalld.service

NFS部署

  1. 安装epel库

    yum -y install epel-release wget

  2. 安装nfs-server

    1. yum -y install nfs-utils rpcbind
    2. systemctl enable rpcbind nfs-server nfs-lock nfs-idmap
    3. systemctl start rpcbind nfs-server nfs-lock nfs-idmap

  3. 创建NFS共享目录

    mkdir /data

  4. 设置NFS访问权限

    1. vim /etc/exports
    2. /data 192.168.150.*(rw,sync,no_root_squash)

    /data 是刚才创建的将被共享的目录, 192.168.150. 表示整个 192.168.150. 的资产都有括号里面的权限
    也可以写具体的授权对象 /data 192.168.150.45(rw,sync,no_root_squash) 192.168.150.26(rw,sync,no_root_squash)

  5. 使exports生效

    exportfs -a

  6. 安装nfs-client (150.45 and 150.26)

    1. showmount -e 192.168.150.192
    2. mkdir -p /opt/jumpserver/data
    3. restorecon -R /opt/jumpserver/data/
    4. mount -t nfs 192.168.150.192:/data /opt/jumpserver/data
    5. echo "192.168.150.192:/data /opt/jumpserver/data nfs defaults 0 0" >> /etc/fstab

docker-compose部署

  1. 安装docker

安装以下依赖包

yum install -y yum-utils device-mapper-persistent-data lvm2

添加docker的yum源

yum-config-manager --add-repo https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo

更新yum源缓存， 安装docker-ce

  1. $ sudo yum makecache fast
  2. $ sudo yum install docker-ce

配置镜像加速器

  1. sudo mkdir -p /etc/docker
  2. sudo tee /etc/docker/daemon.json <<-'EOF'
  3. {
  4.   "registry-mirrors": ["https://zggyaen3.mirror.aliyuncs.com"]
  5. }
  6. EOF
  7. sudo systemctl daemon-reload
  8. sudo systemctl restart docker

普通用户需要加入docker组

$ sudo usermod -a -G docker ${USER}

修改docker存储位置(可以不改)

  1. $ sudo systemctl stop docker
  2. $ sudo mv /var/lib/docker /home/lan/docker
  3. $ sudo ln -s /home/lan/docker /var/lib/docker
  4. $ sudo systemctl start docker
  5. $ sudo systemctl enable docker
  1. docker-compose安装
  1. $ sudo curl -L https://github.com/docker/compose/releases/download/1.23.2/docker-compose-`uname -s`-`uname -m` -o /usr/local/bin/docker-compose
  2. $ sudo chmod +x /usr/local/bin/docker-compose

如果下载很慢可手动下载，再上传至系统

下载路径: https://github.com/docker/compose/releases/ 可以选择对应的版本下载

部署jumpserver

  1. 下载jumpserver压缩包

    1. wget https://github.com/jumpserver/Dockerfile.git
    2. unzip Dockerfile-master.zip

  2. 使用shell脚本生成SECRET_KEY和BOOTSTRAP_TOKEN

    1. if [ ! "$SECRET_KEY" ]; then
    2.  SECRET_KEY=`cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 50`;
    3.  echo "SECRET_KEY=$SECRET_KEY" >> ~/.bashrc;
    4.  echo $SECRET_KEY;
    5. else
    6.  echo $SECRET_KEY;
    7. fi  
    8. if [ ! "$BOOTSTRAP_TOKEN" ]; then
    9.  BOOTSTRAP_TOKEN=`cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 16`;
    10.  echo "BOOTSTRAP_TOKEN=$BOOTSTRAP_TOKEN" >> ~/.bashrc;
    11.  echo $BOOTSTRAP_TOKEN;
    12. else
    13.  echo $BOOTSTRAP_TOKEN;
    14. fi

  3. 修改.env文件,设置mysql,redis密码

    vim .env

    1. # 版本号可以自己根据项目的版本修改
    2. Version=1.5.9
    3.  
    4. # MySQL
    5. DB_HOST=192.168.150.45
    6. DB_PORT=3306
    7. DB_USER=jumpserver
    8. DB_PASSWORD=password
    9. DB_NAME=jumpserver
    10.  
    11. # Redis
    12. REDIS_HOST=192.168.150.45
    13. REDIS_PORT=6379
    14. REDIS_PASSWORD=password
    15.  
    16. # Core
    17. SECRET_KEY=15hMccXFn40TCKJETDnjlUhkZEXIAcq3E3aQ6T6LDmfLUN0oAV
    18. BOOTSTRAP_TOKEN=HT8qH0wSuyQjcNyh
    19.  
    20. ##
    21. # SECRET_KEY 保护签名数据的密匙, 首次安装请一定要修改并牢记, 后续升级和迁移不可更改, 否则将导致加密的数据不可解密。
    22. # BOOTSTRAP_TOKEN 为组件认证使用的密钥, 仅组件注册时用。组件指 koko、guacamole

    在150.45上修改docker-compose

    vim docker-compose.yml

    1. version: '3' # 由于测试环境资源有限,我的mysql跟redis也是部署在了150.45, 所以在150.26那台上面指定mysql跟redis的地址就可以,不需要在启动mysql和redis的容器
    2. services:
    3.  mysql:
    4.    image: jumpserver/jms_mysql:${Version}
    5.    container_name: jms_mysql
    6.    restart: always
    7.    tty: true
    8.    environment:
    9.      DB_PORT: $DB_PORT
    10.      DB_USER: $DB_USER
    11.      DB_PASSWORD: $DB_PASSWORD
    12.      DB_NAME: $DB_NAME
    13.    ports:
    14.      - 3306:3306
    15.    volumes:
    16.      - /opt/jumpserver/data/mysql-master:/var/lib/mysql
    17.      - /opt/jumpserver/data/mysql-master.cnf:/etc/my.cnf
    18.    networks:
    19.      - jumpserver
    20.  
    21.  redis:
    22.    image: jumpserver/jms_redis:${Version}
    23.    container_name: jms_redis
    24.    restart: always
    25.    tty: true
    26.    environment:
    27.      REDIS_PORT: $REDIS_PORT
    28.      REDIS_PASSWORD: $REDIS_PASSWORD
    29.    ports:
    30.      - 6379:6379
    31.    volumes:
    32.      - /opt/jumpserver/data/redis-data:/var/lib/redis/
    33.    networks:
    34.      - jumpserver
    35.  
    36.  core:
    37.    image: jumpserver/jms_core:${Version}
    38.    container_name: jms_core
    39.    restart: always
    40.    tty: true
    41.    environment:
    42.      SECRET_KEY: $SECRET_KEY
    43.      BOOTSTRAP_TOKEN: $BOOTSTRAP_TOKEN
    44.      DB_HOST: $DB_HOST
    45.      DB_PORT: $DB_PORT
    46.      DB_USER: $DB_USER
    47.      DB_PASSWORD: $DB_PASSWORD
    48.      DB_NAME: $DB_NAME
    49.      REDIS_HOST: $REDIS_HOST
    50.      REDIS_PORT: $REDIS_PORT
    51.      REDIS_PASSWORD: $REDIS_PASSWORD
    52.    depends_on:
    53.      - mysql
    54.      - redis
    55.    volumes:
    56.      - core-data:/opt/jumpserver/data
    57.    networks:
    58.      - jumpserver
    59.  
    60.  koko:
    61.    image: jumpserver/jms_koko:${Version}
    62.    container_name: jms_koko
    63.    restart: always
    64.    tty: true
    65.    environment:
    66.      CORE_HOST: http://core:8080
    67.      BOOTSTRAP_TOKEN: $BOOTSTRAP_TOKEN
    68.    depends_on:
    69.      - core
    70.      - mysql
    71.      - redis
    72.    volumes:
    73.      - koko-keys:/opt/koko/data/keys
    74.    ports:
    75.      - 2222:2222
    76.    networks:
    77.      - jumpserver
    78.  
    79.  guacamole:
    80.    image: jumpserver/jms_guacamole:${Version}
    81.    container_name: jms_guacamole
    82.    restart: always
    83.    tty: true
    84.    environment:
    85.      JUMPSERVER_SERVER: http://core:8080
    86.      BOOTSTRAP_TOKEN: $BOOTSTRAP_TOKEN
    87.      JUMPSERVER_KEY_DIR: /config/guacamole/keys
    88.      GUACAMOLE_HOME: /config/guacamole
    89.      GUACAMOLE_LOG_LEVEL: ERROR
    90.      JUMPSERVER_ENABLE_DRIVE: 'true'
    91.    depends_on:
    92.      - core
    93.      - mysql
    94.      - redis
    95.    volumes:
    96.      - guacamole-keys:/config/guacamole/keys
    97.    networks:
    98.      - jumpserver
    99.  
    100.  nginx:
    101.    image: jumpserver/jms_nginx:${Version}
    102.    container_name: jms_nginx
    103.    restart: always
    104.    tty: true
    105.    depends_on:
    106.      - core
    107.      - koko
    108.      - mysql
    109.      - redis
    110.    volumes:
    111.      - core-data:/opt/jumpserver/data
    112.    ports:
    113.      - 80:80
    114.    networks:
    115.      - jumpserver
    116.  
    117. volumes:
    118.  mysql-data:
    119.  redis-data:
    120.  core-data:
    121.  koko-keys:
    122.  guacamole-keys:
    123.  
    124. networks:
    125.  jumpserver:

    在150.26上修改docker-compose文件

    1. version: '3'
    2. services:
    3.  core:
    4.    image: jumpserver/jms_core:${Version}
    5.    container_name: jms_core
    6.    restart: always
    7.    tty: true
    8.    environment:
    9.      SECRET_KEY: $SECRET_KEY
    10.      BOOTSTRAP_TOKEN: $BOOTSTRAP_TOKEN
    11.      DB_HOST: $DB_HOST
    12.      DB_PORT: $DB_PORT
    13.      DB_USER: $DB_USER
    14.      DB_PASSWORD: $DB_PASSWORD
    15.      DB_NAME: $DB_NAME
    16.      REDIS_HOST: $REDIS_HOST
    17.      REDIS_PORT: $REDIS_PORT
    18.      REDIS_PASSWORD: $REDIS_PASSWORD
    19.    volumes:
    20.      - /opt/jumpserver/data/core-data:/opt/jumpserver/data
    21.    networks:
    22.      - jumpserver
    23.  
    24.  koko:
    25.    image: jumpserver/jms_koko:${Version}
    26.    container_name: jms_koko
    27.    restart: always
    28.    tty: true
    29.    environment:
    30.      CORE_HOST: http://core:8080
    31.      BOOTSTRAP_TOKEN: $BOOTSTRAP_TOKEN
    32.    depends_on:
    33.      - core
    34.    volumes:
    35.      - /opt/jumpserver/data/koko-keys:/opt/koko/data/keys
    36.    ports:
    37.      - 2222:2222
    38.    networks:
    39.      - jumpserver
    40.  
    41.  guacamole:
    42.    image: jumpserver/jms_guacamole:${Version}
    43.    container_name: jms_guacamole
    44.    restart: always
    45.    tty: true
    46.    environment:
    47.      JUMPSERVER_SERVER: http://core:8080
    48.      BOOTSTRAP_TOKEN: $BOOTSTRAP_TOKEN
    49.      JUMPSERVER_KEY_DIR: /config/guacamole/keys
    50.      GUACAMOLE_HOME: /config/guacamole
    51.      GUACAMOLE_LOG_LEVEL: ERROR
    52.      JUMPSERVER_ENABLE_DRIVE: 'true'
    53.    depends_on:
    54.      - core
    55.    volumes:
    56.      - /opt/jumpserver/data/guacamole-keys:/config/guacamole/keys
    57.    networks:
    58.      - jumpserver
    59.  
    60.  nginx:
    61.    image: jumpserver/jms_nginx:${Version}
    62.    container_name: jms_nginx
    63.    restart: always
    64.    tty: true
    65.    depends_on:
    66.      - core
    67.      - koko
    68.    volumes:
    69.      - /opt/jumpserver/data/core-data:/opt/jumpserver/data
    70.    ports:
    71.      - 80:80
    72.    networks:
    73.      - jumpserver
    74.  
    75. volumes:
    76.  core-data:
    77.  koko-keys:
    78.  guacamole-keys:
    79.  
    80. networks:
    81.  jumpserver:
  4. 启动容器
docker-compose up -d
  1. 打开浏览器访问150.45和150.26,默认账号密码是admin, 在浏览器上测试数据是否会同步
声明：本文内容由网友自发贡献，不代表【wpsshop博客】立场，版权归原作者所有，本站不承担相应法律责任。如您发现有侵权的内容，请联系我们。转载请注明出处：https://www.wpsshop.cn/w/你好赵伟/article/detail/73511
推荐阅读
相关标签

Copyright © 2003-2013 www.wpsshop.cn 版权所有，并保留所有权利。

  

闽ICP备14008679号