基于docker搭建jumpserver堡垒机

小程序：扫一扫查出行
【扫一扫了解最新限行尾号】
复制小程序

一、环境信息

1、jumpserver 192.168.137.129 CentOS6.4 kernel版本为 3.10.5-3.el6.x86_64

2、客户机 dev01-04

3、docker镜像 jiaxiangkong/jumpserver_docker:0.3.2

二、在129上准备基本环境

[root@localhost ~]# yum install -y epel-release

[root@localhost ~]# yum install -y curl

[root@localhost ~]# service iptables stop

[root@localhost ~]# 关闭selinux

升级内核到3.10.0以上（rpm包下载：http://pan.baidu.com/s/1cGrccQ）

[root@localhost ~]# uname -r
3.10.5-3.el6.x86_64

安装docker

[root@localhost ~]# yum install device-mapper-event-libs

[root@localhost ~]# yum install -y https://get.docker.com/rpm/1.7.1/centos-6/RPMS/x86_64/docker-engine-1.7.1-1.el6.x86_64.rpm

[root@localhost ~]# docker -v
Docker version 1.7.1, build 786b29d

三、安装mysql数据库

[root@localhost ~]# yum install -y mysql

[root@localhost ~]# service mysqld start

[root@localhost ~]# mysql -e "create database jumpdb charset='utf8';"

[root@localhost ~]# mysql -e "grant all on jumpdb.* to 'jumpdb'@'%' identified by 'jumppasswd';"

[root@localhost ~]# mysql -e "flush privileges;"

[root@localhost ~]# mysql -e "show databases;"

四、安装jumpserver

4.1拉取镜像

[root@localhost ~]# docker pull jiaxiangkong/jumpserver_docker:0.3.2

4.2、配置启动脚本并启动

docker stop jms && docker rm jms
docker run --name jms \
-p : \
-p : \
-v /root/jumpserver/jms_data:/data \
-v /etc/localtime:/etc/localtime:ro \
-e USE_MYSQL= \
-e MYSQL_ENGINE=mysql \
-e MYSQL_HOST=192.168.137.129\
-e MYSQL_PORT= \
-e MYSQL_USER=jumpdb \
-e MYSQL_PASS=jumppasswd \
-e MYSQL_NAME=jumpdb \
-e USE_MAIL=true \
-e MAIL_ENABLED= \
-e MAIL_HOST=smtp..com \
-e MAIL_PORT= \
-e MAIL_USER=@.com \
-e MAIL_PASS='88888=' \
-e MAIL_USE_TLS=False \
-e MAIL_USE_SSL=False \
--restart=always \
-d jumpserver:0.3.
docker exec -ti jms /bin/sh /data/script/input_ip.sh

start_jms.sh

docker容器有被删除重启的可能，这里将重要的数据挂载到宿主机是为了数据的保存，下次启动时，直接用这些数据

（jms_data下载：http://pan.baidu.com/s/1cGrccQ）

# set url ip
ipaddr=$(ip a | grep "inet.*eth0" | awk -F '/' '{print $1}' | awk '{print $2}')
sed -i "s/url =/url = ${ipaddr}/" /jumpserver/jumpserver.conf
# set group link
rm -f /etc/group
ln -s /data/group /etc/group

input_ip.sh

容器启动后，将容器ip配置到jumpserver.conf中，并给group建立软链接

[root@localhost ~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
020843b328ca jiaxiangkong/jumpserver_docker:0.3.2 "/bin/sh -c /run.sh" 22 hours ago Up 3 hours 0.0.0.0:2222->22/tcp, 0.0.0.0:8888->80/tcp jms

4.3、访问 192.168.137.129:8888，密码默认都是admin