# 修改字符集

localedef -c -f UTF-8 -i zh_CN zh_CN.UTF-8
export LC_ALL=zh_CN.UTF-8
echo 'LANG="zh_CN.UTF-8"' > /etc/locale.conf

#安装依赖包

yum -y install readline* net-tools icu perl-DBI perl-Net-Daemon perl-PlRPC libcap-devel lynx perl-DBD-MySQL readline-devel net-tools* dos2unix gcc* xmlto screen vim* psmisc wget lrzsz pcre-devel iptraf sysstat libevent libevent-devel perl-ExtUtils-CBuilder perl-ExtUtils-MakeMaker tar rrdtool ntp* dos2unix setup* net-snmp-utils net-snmp-devel ruby ruby-devel php-snmp cmake net-snmp-perl net-snmp net-snmp-libs wget elinks make autoconf213 m4 gcc gcc-c++ automake autoconf fontconfig fontconfig-devel libjpeg libjpeg* libjpeg-devel libpng libpng-devel freetype freetype* freetype-devel libxml2 libxml2-devel libdhash libdhash-devel libxslt* zlib zlib-devel glibc glibc-devel glib2 glib2-devel bzip2 bzip2* libicu libicu-devel ncurses ncurses-devel xmlrpc-c xmlrpc-c-devel curl curl-devel e2fsprogs e2fsprogs-devel krb5-devel libidn libidn-devel openssl openssl-devel openldap openldap-devel openldap-clients openldap-servers gd gd-devel pam* gettext gettext-devel keyutils mpfr cpp libgomp libstdc++-devel keyutils-libs-devel libcom_err-devel libsepol-devel libXpm* php-gd ncurses* libtool* patch unzip bison-devel bison libcom_err-devel libsepol-devel gtk* libselinux-devel libtiff* php-common policycoreutils telnet t1lib t1lib* nasm nasm* wget sqlite-devel xz gcc automake zlib-devel openssl-devel epel-release git libtiff-devel libjpeg-devel libzip-devel freetype-devel lcms2-devel libwebp-devel tcl-devel tk-devel sshpass openldap-devel mysql-devel libffi-devel openssh-clients

#编译安装python

tar xvf package.tar.gz
tar xvf Python-3.6.1.tar.xz
cd Python-3.6.1
./configure --enable-optimizations
make && make install

#建立 Python 虚拟环境

cd /opt
python3 -m venv python3
source /opt/python3/bin/activate

#自动载入 Python 虚拟环境配置

tar zxvf autoenv.tar.gz
mv autoenv /opt/
echo 'source /opt/autoenv/activate.sh' >> ~/.bashrc
source ~/.bashrc

#安装 Jumpserver

tar zxvf jumpserver.tar.gz
mv jumpserver /opt/
echo 'source /opt/python3/bin/activate' > /opt/jumpserver/.env
cd /opt/jumpserver

# 首次进入 jumpserver 文件夹会有提示，按 y 即可
# Are you sure you want to allow this? (y/N) y

#安装 Python 库依赖

pip install -r /opt/jumpserver/requirements/requirements.txt -i https://pypi.python.org/simple

#安装 Redis

yum -y install redis
sed -i "481 a requirepass 123456" /etc/redis.conf
systemctl enable redis
systemctl start redis

#安装 MySQL

yum -y install mariadb mariadb-devel mariadb-server
systemctl enable mariadb
systemctl start mariadb

#设置mariadb密码

/usr/bin/mysqladmin -u root password 123456
cat > /tmp/mysql_sec_script<<EOF
drop database test;
create database jumpserver default charset 'utf8';
grant all on jumpserver.* to 'jumpserver'@'127.0.0.1' identified by '123456';
grant all on jumpserver.* to 'jumpserver'@'localhost' identified by '123456';
grant all on jumpserver.* to 'jumpserver'@'%' identified by '123456';
flush privileges;
EOF

/usr/bin/mysql -u root -p123456 -h 127.0.0.1 < /tmp/mysql_sec_script
rm -f /tmp/mysql_sec_script

#修改 Jumpserver 配置文件

cp /opt/jumpserver/config_example.py /opt/jumpserver/config.py
sed -i "s/# DB_HOST/DB_HOST/g" /opt/jumpserver/config.py
sed -i "s/# DB_ENGINE/DB_ENGINE/g" /opt/jumpserver/config.py
sed -i "s/# DB_PORT/DB_PORT/g" /opt/jumpserver/config.py
sed -i "s/# DB_USER/DB_USER/g" /opt/jumpserver/config.py
sed -i "s/# DB_PASSWORD/DB_PASSWORD/g" /opt/jumpserver/config.py
sed -i "s/# DB_NAME/DB_NAME/g" /opt/jumpserver/config.py
sed -i "s/DB_ENGINE = 'sqlite3'/#DB_ENGINE = 'sqlite3'/g" /opt/jumpserver/config.py
sed -i "s/weakPassword/$mysqlrootpwd/g" /opt/jumpserver/config.py
sed -i "s/or ''/or '123456'/g" /opt/jumpserver/config.py
sed -i "s/DB_NAME = os.path.join(BASE_DIR, 'data', 'db.sqlite3')/#DB_NAME = os.path.join(BASE_DIR, 'data', 'db.sqlite3')/g" /opt/jumpserver/config.py
sed -i "168 a 'OPTIONS': {\n'init_command': \"SET sql_mode='STRICT_TRANS_TABLES'"\"\\n\}, /opt/jumpserver/apps/jumpserver/settings.py
sed -i "s/0.0.0.0/你的IP/g" /opt/jumpserver/config.py

#生成数据库表结构和初始化数据

cd /opt/jumpserver/utils/
./make_migrations.sh

#运行 Jumpserver

cd /opt/jumpserver/
./jms start all -d

请浏览器访问 http://IP:8080/ 默认账号: admin 密码: admin

#安装 SSH 和 WebSocket 接口

tar zxvf coco.tar.gz
mv coco /opt/coco
echo 'source /opt/python3/bin/activate' > /opt/coco/.env

# 首次进入 coco 文件夹会有提示，按 y 即可
# Are you sure you want to allow this? (y/N) y

#安装依赖

pip install -r /opt/coco/requirements/requirements.txt -i https://pypi.python.org/simple

#修改配置文件

sed -i "s/# NAME/NAME/g" /opt/coco/conf.py
sed -i "s/# CORE_HOST/CORE_HOST/g" /opt/coco/conf.py
sed -i "s/# LOG_LEVEL = 'INFO'/LOG_LEVEL = 'WARN'/g" /opt/coco/conf.py
sed -i "69 a LANGUAGE_CODE = 'zh'" /opt/coco/conf.py

#运行coco

cd /opt/coco
./cocod start -d

#安装 Web Terminal 前端

tar zxvf luna.tar.gz
chown -R root:root luna
mv luna /opt/luna

# 安装 Windows 支持组件

yum remove docker-latest-logrotate docker-logrotate docker-selinux dockdocker-engine
yum install -y yum-utils device-mapper-persistent-data lvm2
yum-config-manager --add-repo docker-ce.repo
rpm --import gpg
yum makecache fast
yum -y install docker-ce

#启动docker

systemctl start docker
systemctl status docker

#启动 Guacamole

cp guacamole.tar /opt/guacamole.tar
docker load < /opt/guacamole.tar

注意：这里需要修改下 http://<填写jumpserver的url地址> 例: http://192.168.3.189, 否则会出错

docker run --name jms_guacamole -d -p 8081:8080 -v /opt/guacamole/key:/config/guacamole/key -e JUMPSERVER_KEY_DIR=/config/guacamole/key -e JUMPSERVER_SERVER=http://$IP jumpserver/guacamole:latest

#安装nginx

yum install nginx
cp jumpserver.conf /etc/nginx/conf.d/
systemctl enable nginx
systemctl start nginx

#查看各个服务运行

cd /opt/jumpserver
./jms status

cd /opt/coco
./cocod status

docker ps