安装文档

安装方式

根据实机环境选择安装方式，支持 在线安装 和 离线安装，安装过程可以参考 安装演示视频

环境要求

OS/ArchArchitectureLinux KernelSoft Requirement
linux/amd64x86_64>= 4.0wget curl tar gettext iptables python
linux/arm64aarch64>= 4.0wget curl tar gettext iptables python
linux/loong64loongarch64== 4.19wget curl tar gettext iptables python

外置环境要求

  • 推荐使用外置 数据库 和 Redis，方便日后扩展升级
NameVersionDefault CharsetDefault collationTLS/SSL
MySQL>= 5.7utf8utf8_general_ci安装部署 - 图1
MariaDB>= 10.2utf8mb3utf8mb3_general_ci安装部署 - 图2
NameVersionSentinelClusterTLS/SSL
Redis>= 5.0安装部署 - 图3安装部署 - 图4安装部署 - 图5

在线安装

可以使用由 华为云 提供的容器镜像服务 ❤

区域镜像仓库地址配置文件 /opt/jumpserver/config/config.txtKubernetes values.yamlOS/ARCH
华北-北京一swr.cn-north-1.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.cn-north-1.myhuaweicloud.comrepository: swr.cn-north-1.myhuaweicloud.comlinux/amd64
华南-广州swr.cn-south-1.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.cn-south-1.myhuaweicloud.comrepository: swr.cn-south-1.myhuaweicloud.comlinux/amd64
华北-北京四swr.cn-north-4.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.cn-north-4.myhuaweicloud.comrepository: swr.cn-north-4.myhuaweicloud.comlinux/arm64
华东-上海一swr.cn-east-3.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.cn-east-3.myhuaweicloud.comrepository: swr.cn-east-3.myhuaweicloud.comlinux/arm64
西南-贵阳一swr.cn-southwest-2.myhuaweicloud.comDOCKER_IMAGE_PREFIX=swr.ap-southeast-1.myhuaweicloud.comrepository: swr.ap-southeast-1.myhuaweicloud.comlinux/loong64

一键部署手动部署Helm源码部署Allinone

  1. # 默认会安装到 /opt/jumpserver-installer-v2.26.0 目录
  2. curl -sSL https://github.com/jumpserver/jumpserver/releases/download/v2.26.0/quick_start.sh | bash
  3. cd /opt/jumpserver-installer-v2.26.0
  1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
  1. cd /opt/jumpserver-installer-v2.26.0
  3. # 启动
  4. ./jmsctl.sh start
  6. # 停止
  7. ./jmsctl.sh down
  9. # 卸载
  10. ./jmsctl.sh uninstall
  12. # 帮助
  13. ./jmsctl.sh -h
  1. cd /opt
  2. wget https://github.com/jumpserver/installer/releases/download/v2.26.0/jumpserver-installer-v2.26.0.tar.gz
  3. tar -xf jumpserver-installer-v2.26.0.tar.gz
  4. cd jumpserver-installer-v2.26.0
  1. # 根据需要修改配置文件模板, 如果不清楚用途可以跳过修改
  2. cat config-example.txt
  1. # 以下设置如果为空系统会自动生成随机字符串填入
  2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
  3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
  5. ## Docker 镜像配置
  6. # DOCKER_IMAGE_MIRROR=1
  8. ## 安装配置
  9. VOLUME_DIR=/opt/jumpserver
  10. DOCKER_DIR=/var/lib/docker
  11. SECRET_KEY=
  12. BOOTSTRAP_TOKEN=
  13. LOG_LEVEL=ERROR
  15. ##  MySQL 配置, USE_EXTERNAL_MYSQL=1 表示使用外置数据库, 请输入正确的 MySQL 信息
  16. USE_EXTERNAL_MYSQL=0
  17. DB_HOST=mysql
  18. DB_PORT=3306
  19. DB_USER=root
  20. DB_PASSWORD=
  21. DB_NAME=jumpserver
  23. ##  Redis 配置, USE_EXTERNAL_REDIS=1 表示使用外置数据库, 请输入正确的 Redis 信息
  24. USE_EXTERNAL_REDIS=0
  25. REDIS_HOST=redis
  26. REDIS_PORT=6379
  27. REDIS_PASSWORD=
  29. ## Compose 项目设置, 如果 192.168.250.0/24 网段与你现有网段冲突, 请修改然后重启 JumpServer
  30. COMPOSE_PROJECT_NAME=jms
  31. COMPOSE_HTTP_TIMEOUT=3600
  32. DOCKER_CLIENT_TIMEOUT=3600
  33. DOCKER_SUBNET=192.168.250.0/24
  35. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
  36. USE_IPV6=0
  37. DOCKER_SUBNET_IPV6=fc00:1010:1111:200::/64
  39. ## 访问配置
  40. HTTP_PORT=80
  41. SSH_PORT=2222
  42. MAGNUS_MYSQL_PORT=33060
  43. MAGNUS_MARIADB_PORT=33061
  45. ## HTTPS 配置, 参考 https://docs.jumpserver.org/zh/master/admin-guide/proxy/ 配置
  46. # USE_LB=1
  47. # HTTPS_PORT=443
  48. # SERVER_NAME=your_domain_name
  49. # SSL_CERTIFICATE=your_cert
  50. # SSL_CERTIFICATE_KEY=your_cert_key
  52. ## Nginx 文件上传大小
  53. CLIENT_MAX_BODY_SIZE=4096m
  55. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
  56. USE_TASK=1
  58. ## XPack, USE_XPACK=1 表示开启, 开源版本设置无效
  59. USE_XPACK=0
  60. RDP_PORT=3389
  61. MAGNUS_POSTGRE_PORT=54320
  62. TCP_SEND_BUFFER_BYTES=4194304
  63. TCP_RECV_BUFFER_BYTES=6291456
  65. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=True 表示关闭浏览器即 session 过期
  66. # SESSION_COOKIE_AGE=86400
  67. SESSION_EXPIRE_AT_BROWSER_CLOSE=True
  69. # Koko Lion XRDP 组件配置
  70. CORE_HOST=http://core:8080
  71. JUMPSERVER_ENABLE_FONT_SMOOTHING=True
  73. ## 终端使用宿主 HOSTNAME 标识
  74. SERVER_HOSTNAME=${HOSTNAME}
  76. # 额外的配置
  77. CURRENT_VERSION=
  1. # 安装
  2. ./jmsctl.sh install
  4. # 启动
  5. ./jmsctl.sh start
  1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
  1. cd /opt/jumpserver-installer-v2.26.0
  3. # 启动
  4. ./jmsctl.sh start
  6. # 停止
  7. ./jmsctl.sh down
  9. # 卸载
  10. ./jmsctl.sh uninstall
  12. # 帮助
  13. ./jmsctl.sh -h
  1. helm repo add jumpserver https://jumpserver.github.io/helm-charts
  2. helm repo list
  3. vi values.yaml
  1. # 模板 https://github.com/jumpserver/helm-charts/blob/main/charts/jumpserver/values.yaml
  2. # Default values for jumpserver.
  3. # This is a YAML-formatted file.
  4. # Declare variables to be passed into your templates.
  6. nameOverride: ""
  7. fullnameOverride: ""
  9. ## @param global.imageRegistry Global Docker image registry
  10. ## @param global.imagePullSecrets Global Docker registry secret names as an array
  11. ## @param global.storageClass Global StorageClass for Persistent Volume(s)
  12. ## @param global.redis.password Global Redis™ password (overrides `auth.password`)
  13. ##
  14. global:
  15.   imageRegistry: "docker.io"    # 国内可以使用华为云加速
  16.   imageTag: v2.26.0             # 版本号
  17.   ## E.g.
  18.   #  imagePullSecrets:
  19.   #    - name: harborsecret
  20.   #
  21.   #  storageClass: "jumpserver-data"
  22.   ##
  23.   imagePullSecrets: []
  24.     # - name: yourSecretKey
  25.   storageClass: ""              # (*必填) NFS SC
  27. ## Please configure your MySQL server first
  28. ## Jumpserver will not start the external MySQL server.
  29. ##
  30. externalDatabase:               #  (*必填) 数据库相关设置
  31.   engine: mysql
  32.   host: localhost
  33.   port: 3306
  34.   user: root
  35.   password: ""
  36.   database: jumpserver
  38. ## Please configure your Redis server first
  39. ## Jumpserver will not start the external Redis server.
  40. ##
  41. externalRedis:                  #  (*必填) Redis 设置
  42.   host: localhost
  43.   port: 6379
  44.   password: ""
  46. serviceAccount:
  47.   # Specifies whether a service account should be created
  48.   create: false
  49.   # The name of the service account to use.
  50.   # If not set and create is true, a name is generated using the fullname template
  51.   name:
  53. ingress:
  54.   enabled: true                             # 不使用 ingress 可以关闭
  55.   annotations:
  56.     # kubernetes.io/tls-acme: "true"
  57.     compute-full-forwarded-for: "true"
  58.     use-forwarded-headers: "true"
  59.     kubernetes.io/ingress.class: nginx
  60.     nginx.ingress.kubernetes.io/configuration-snippet: |
  61.        proxy_set_header Upgrade "websocket";
  62.        proxy_set_header Connection "Upgrade";
  63.   hosts:
  64.     - "test.jumpserver.org"                 # 对外域名
  65.   tls: []
  66.   #  - secretName: chart-example-tls
  67.   #    hosts:
  68.   #      - chart-example.local
  70. core:
  71.   enabled: true
  73.   labels:
  74.     app.jumpserver.org/name: jms-core
  76.   config:
  77.     # Generate a new random secret key by execute `cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 50`
  78.     # secretKey: "B3f2w8P2PfxIAS7s4URrD9YmSbtqX4vXdPUL217kL9XPUOWrmy"
  79.     secretKey: ""                            #  (*必填) 加密敏感信息的 secret_key, 长度推荐大于 50 位
  80.     # Generate a new random bootstrap token by execute `cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 16`
  81.     # bootstrapToken: "7Q11Vz6R2J6BLAdO"
  82.     bootstrapToken: ""                       #  (*必填) 组件认证使用的 token, 长度推荐大于 24 位
  83.     # Enabled it for debug
  84.     debug: false
  85.     log:
  86.       level: ERROR
  88.   replicaCount: 1
  90.   image:
  91.     registry: docker.io
  92.     repository: jumpserver/core
  93.     tag: v2.26.0
  94.     pullPolicy: IfNotPresent
  96.   command: []
  98.   env:
  99.     # See: https://docs.jumpserver.org/zh/master/admin-guide/env/#core
  100.     SESSION_EXPIRE_AT_BROWSER_CLOSE: true
  101.     # SESSION_COOKIE_AGE: 86400
  102.     # SECURITY_VIEW_AUTH_NEED_MFA: true
  104.   livenessProbe:
  105.     failureThreshold: 30
  106.     httpGet:
  107.       path: /api/health/
  108.       port: web
  110.   readinessProbe:
  111.     failureThreshold: 30
  112.     httpGet:
  113.       path: /api/health/
  114.       port: web
  116.   podSecurityContext: {}
  117.     # fsGroup: 2000
  119.   securityContext: {}
  120.     # capabilities:
  121.     #   drop:
  122.     #   - ALL
  123.     # readOnlyRootFilesystem: true
  124.     # runAsNonRoot: true
  125.     # runAsUser: 1000
  127.   service:
  128.     type: ClusterIP
  129.     web:
  130.       port: 8080
  131.     ws:
  132.       port: 8070
  134.   resources: {}
  135.     # We usually recommend not to specify default resources and to leave this as a conscious
  136.     # choice for the user. This also increases chances charts run on environments with little
  137.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
  138.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  139.     # limits:
  140.     #   cpu: 1000m
  141.     #   memory: 2048Mi
  142.     # requests:
  143.     #   cpu: 500m
  144.     #   memory: 1024Mi
  146.   persistence:
  147.     storageClassName: jumpserver-data
  148.     accessModes:
  149.       - ReadWriteMany
  150.     size: 100Gi
  151.     # annotations: {}
  152.     finalizers:
  153.       - kubernetes.io/pvc-protection
  154.     # subPath: ""
  155.     # existingClaim:
  157.   volumeMounts: []
  159.   volumes: []
  161.   nodeSelector: {}
  163.   tolerations: []
  165.   affinity: {}
  167. koko:
  168.   enabled: true
  170.   labels:
  171.     app.jumpserver.org/name: jms-koko
  173.   config:
  174.     log:
  175.       level: ERROR
  177.   replicaCount: 1
  179.   image:
  180.     registry: docker.io
  181.     repository: jumpserver/koko
  182.     tag: v2.26.0
  183.     pullPolicy: IfNotPresent
  185.   command: []
  187.   env: []
  188.     # See: https://docs.jumpserver.org/zh/master/admin-guide/env/#koko
  189.     # LANGUAGE_CODE: zh
  190.     # REUSE_CONNECTION: true
  191.     # ENABLE_LOCAL_PORT_FORWARD: true
  192.     # ENABLE_VSCODE_SUPPORT: true
  194.   livenessProbe:
  195.     failureThreshold: 30
  196.     httpGet:
  197.       path: /koko/health/
  198.       port: web
  200.   readinessProbe:
  201.     failureThreshold: 30
  202.     httpGet:
  203.       path: /koko/health/
  204.       port: web
  206.   podSecurityContext: {}
  207.     # fsGroup: 2000
  209.   securityContext:
  210.     privileged: true
  211.     # capabilities:
  212.     #   drop:
  213.     #   - ALL
  214.     # readOnlyRootFilesystem: true
  215.     # runAsNonRoot: true
  216.     # runAsUser: 1000
  218.   service:
  219.     type: ClusterIP
  220.     web:
  221.       port: 5000
  222.     ssh:
  223.       port: 2222
  225.   resources: {}
  226.     # We usually recommend not to specify default resources and to leave this as a conscious
  227.     # choice for the user. This also increases chances charts run on environments with little
  228.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
  229.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  230.     # limits:
  231.     #   cpu: 100m
  232.     #   memory: 128Mi
  233.     # requests:
  234.     #   cpu: 100m
  235.     #   memory: 128Mi
  237.   persistence:
  238.     storageClassName: jumpserver-data
  239.     accessModes:
  240.       - ReadWriteMany
  241.     size: 10Gi
  242.     # annotations: {}
  243.     finalizers:
  244.       - kubernetes.io/pvc-protection
  246.   volumeMounts: []
  248.   volumes: []
  250.   nodeSelector: {}
  252.   tolerations: []
  254.   affinity: {}
  256. lion:
  257.   enabled: true
  259.   labels:
  260.     app.jumpserver.org/name: jms-lion
  262.   config:
  263.     log:
  264.       level: ERROR
  266.   replicaCount: 1
  268.   image:
  269.     registry: docker.io
  270.     repository: jumpserver/lion
  271.     tag: v2.26.0
  272.     pullPolicy: IfNotPresent
  274.   command: []
  276.   env:
  277.     # See: https://docs.jumpserver.org/zh/master/admin-guide/env/#lion
  278.     JUMPSERVER_ENABLE_FONT_SMOOTHING: true
  279.     # JUMPSERVER_COLOR_DEPTH: 32
  280.     # JUMPSERVER_ENABLE_WALLPAPER: true
  281.     # JUMPSERVER_ENABLE_THEMING: true
  282.     # JUMPSERVER_ENABLE_FULL_WINDOW_DRAG: true
  283.     # JUMPSERVER_ENABLE_DESKTOP_COMPOSITION: true
  284.     # JUMPSERVER_ENABLE_MENU_ANIMATIONS: true
  286.   livenessProbe:
  287.     failureThreshold: 30
  288.     httpGet:
  289.       path: /lion/health/
  290.       port: web
  292.   readinessProbe:
  293.     failureThreshold: 30
  294.     httpGet:
  295.       path: /lion/health/
  296.       port: web
  298.   podSecurityContext: {}
  299.     # fsGroup: 2000
  301.   securityContext: {}
  302.     # capabilities:
  303.     #   drop:
  304.     #   - ALL
  305.     # readOnlyRootFilesystem: true
  306.     # runAsNonRoot: true
  307.     # runAsUser: 1000
  309.   service:
  310.     type: ClusterIP
  311.     web:
  312.       port: 8081
  314.   resources: {}
  315.     # We usually recommend not to specify default resources and to leave this as a conscious
  316.     # choice for the user. This also increases chances charts run on environments with little
  317.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
  318.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  319.     # limits:
  320.     #   cpu: 100m
  321.     #   memory: 512Mi
  322.     # requests:
  323.     #   cpu: 100m
  324.     #   memory: 512Mi
  326.   persistence:
  327.     storageClassName: jumpserver-data
  328.     accessModes:
  329.       - ReadWriteMany
  330.     size: 50Gi
  331.     # annotations: {}
  332.     finalizers:
  333.       - kubernetes.io/pvc-protection
  335.   volumeMounts: []
  337.   volumes: []
  339.   nodeSelector: {}
  341.   tolerations: []
  343.   affinity: {}
  345. magnus:
  346.   enabled: true
  348.   labels:
  349.     app.jumpserver.org/name: jms-magnus
  351.   config:
  352.     log:
  353.       level: ERROR
  355.   replicaCount: 1
  357.   image:
  358.     registry: docker.io
  359.     repository: jumpserver/magnus
  360.     tag: v2.21.0
  361.     pullPolicy: IfNotPresent
  363.   command: []
  365.   env: []
  367.   livenessProbe:
  368.     failureThreshold: 30
  369.     tcpSocket:
  370.       port: mysql
  372.   readinessProbe:
  373.     failureThreshold: 30
  374.     tcpSocket:
  375.       port: mysql
  377.   podSecurityContext: {}
  378.     # fsGroup: 2000
  380.   securityContext: {}
  381.     # capabilities:
  382.     #   drop:
  383.     #   - ALL
  384.     # readOnlyRootFilesystem: true
  385.     # runAsNonRoot: true
  386.     # runAsUser: 1000
  388.   service:
  389.     type: ClusterIP
  390.     mysql:
  391.       port: 33060
  392.     mariadb:
  393.       port: 33061
  394.     postgre:
  395.       port: 54320
  397.   resources: {}
  398.     # We usually recommend not to specify default resources and to leave this as a conscious
  399.     # choice for the user. This also increases chances charts run on environments with little
  400.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
  401.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  402.     # limits:
  403.     #   cpu: 100m
  404.     #   memory: 512Mi
  405.     # requests:
  406.     #   cpu: 100m
  407.     #   memory: 512Mi
  409.   persistence:
  410.     storageClassName: jumpserver-data
  411.     accessModes:
  412.       - ReadWriteMany
  413.     size: 10Gi
  414.     # annotations: {}
  415.     finalizers:
  416.       - kubernetes.io/pvc-protection
  418.   volumeMounts: []
  420.   volumes: []
  422.   nodeSelector: {}
  424.   tolerations: []
  426.   affinity: {}
  428. xpack:
  429.   enabled: false      # 企业版本打开此选项
  431. omnidb:
  432.   labels:
  433.     app.jumpserver.org/name: jms-omnidb
  435.   config:
  436.     log:
  437.       level: ERROR
  439.   replicaCount: 1
  441.   image:
  442.     registry: registry.fit2cloud.com
  443.     repository: jumpserver/omnidb
  444.     tag: v2.26.0
  445.     pullPolicy: IfNotPresent
  447.   command: []
  449.   env: []
  451.   livenessProbe:
  452.     failureThreshold: 30
  453.     tcpSocket:
  454.       port: web
  456.   readinessProbe:
  457.     failureThreshold: 30
  458.     tcpSocket:
  459.       port: web
  461.   podSecurityContext: {}
  462.     # fsGroup: 2000
  464.   securityContext: {}
  465.     # capabilities:
  466.     #   drop:
  467.     #   - ALL
  468.     # readOnlyRootFilesystem: true
  469.     # runAsNonRoot: true
  470.     # runAsUser: 1000
  472.   service:
  473.     type: ClusterIP
  474.     web:
  475.       port: 8082
  477.   resources: {}
  478.     # We usually recommend not to specify default resources and to leave this as a conscious
  479.     # choice for the user. This also increases chances charts run on environments with little
  480.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
  481.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  482.     # limits:
  483.     #   cpu: 100m
  484.     #   memory: 128Mi
  485.     # requests:
  486.     #   cpu: 100m
  487.     #   memory: 128Mi
  489.   persistence:
  490.     storageClassName: jumpserver-data
  491.     accessModes:
  492.       - ReadWriteMany
  493.     size: 10Gi
  494.     # annotations: {}
  495.     finalizers:
  496.       - kubernetes.io/pvc-protection
  498.   volumeMounts: []
  500.   volumes: []
  502.   nodeSelector: {}
  504.   tolerations: []
  506.   affinity: {}
  508. razor:
  509.   labels:
  510.     app.jumpserver.org/name: jms-razor
  512.   config:
  513.     log:
  514.       level: ERROR
  516.   replicaCount: 1
  518.   image:
  519.     registry: registry.fit2cloud.com
  520.     repository: jumpserver/razor
  521.     tag: v2.26.0
  522.     pullPolicy: IfNotPresent
  524.   command: []
  526.   env: []
  528.   livenessProbe:
  529.     failureThreshold: 30
  530.     tcpSocket:
  531.       port: rdp
  533.   readinessProbe:
  534.     failureThreshold: 30
  535.     tcpSocket:
  536.       port: rdp
  538.   podSecurityContext: {}
  539.     # fsGroup: 2000
  541.   securityContext: {}
  542.     # capabilities:
  543.     #   drop:
  544.     #   - ALL
  545.     # readOnlyRootFilesystem: true
  546.     # runAsNonRoot: true
  547.     # runAsUser: 1000
  549.   service:
  550.     type: ClusterIP
  551.     rdp:
  552.       port: 3389
  554.   resources: {}
  555.     # We usually recommend not to specify default resources and to leave this as a conscious
  556.     # choice for the user. This also increases chances charts run on environments with little
  557.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
  558.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  559.     # limits:
  560.     #   cpu: 100m
  561.     #   memory: 128Mi
  562.     # requests:
  563.     #   cpu: 100m
  564.     #   memory: 128Mi
  566.   persistence:
  567.     storageClassName: jumpserver-data
  568.     accessModes:
  569.       - ReadWriteMany
  570.     size: 50Gi
  571.     # annotations: {}
  572.     finalizers:
  573.       - kubernetes.io/pvc-protection
  575.   volumeMounts: []
  577.   volumes: []
  579.   nodeSelector: {}
  581.   tolerations: []
  583.   affinity: {}
  585. web:
  586.   enabled: true
  588.   labels:
  589.     app.jumpserver.org/name: jms-web
  591.   replicaCount: 1
  593.   image:
  594.     registry: docker.io
  595.     repository: jumpserver/web
  596.     tag: v2.26.0
  597.     pullPolicy: IfNotPresent
  599.   command: []
  601.   env: []
  602.     # nginx client_max_body_size, default 4G
  603.     # CLIENT_MAX_BODY_SIZE: 4096m
  605.   livenessProbe:
  606.     failureThreshold: 30
  607.     httpGet:
  608.       path: /api/health/
  609.       port: web
  611.   readinessProbe:
  612.     failureThreshold: 30
  613.     httpGet:
  614.       path: /api/health/
  615.       port: web
  617.   podSecurityContext: {}
  618.     # fsGroup: 2000
  620.   securityContext: {}
  621.     # capabilities:
  622.     #   drop:
  623.     #   - ALL
  624.     # readOnlyRootFilesystem: true
  625.     # runAsNonRoot: true
  626.     # runAsUser: 1000
  628.   service:
  629.     type: ClusterIP
  630.     web:
  631.       port: 80
  633.   resources: {}
  634.     # We usually recommend not to specify default resources and to leave this as a conscious
  635.     # choice for the user. This also increases chances charts run on environments with little
  636.     # resources, such as Minikube. If you do want to specify resources, uncomment the following
  637.     # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  638.     # limits:
  639.     #   cpu: 100m
  640.     #   memory: 128Mi
  641.     # requests:
  642.     #   cpu: 100m
  643.     #   memory: 128Mi
  645.   persistence:
  646.     storageClassName: jumpserver-data
  647.     accessModes:
  648.       - ReadWriteMany
  649.     size: 1Gi
  650.     # annotations: {}
  651.     finalizers:
  652.       - kubernetes.io/pvc-protection
  654.   volumeMounts: []
  656.   volumes: []
  658.   nodeSelector: {}
  660.   tolerations: []
  662.   affinity: {}
  1. # 安装
  2. helm install jms-k8s jumpserver/jumpserver -n default -f values.yaml
  4. # 卸载
  5. helm uninstall jms-k8s -n default

离线安装

OS/ArchArchitectureLinux KernelOffline Name
linux/amd64x86_64>= 4.0jumpserver-offline-installer-v2.26.0-amd64-87.tar.gz
linux/arm64aarch64>= 4.0jumpserver-offline-installer-v2.26.0-arm64-87.tar.gz
linux/loong64loongarch64== 4.19jumpserver-offline-installer-v2.26.0-loong64-87.tar.gz

linux/amd64linux/arm64linux/loong64

从飞致云社区 下载最新的 linux/amd64 离线包, 并上传到部署服务器的 /opt 目录

  1. cd /opt
  2. tar -xf jumpserver-offline-installer-v2.26.0-amd64-87.tar.gz
  3. cd jumpserver-offline-installer-v2.26.0-amd64-87
  1. # 根据需要修改配置文件模板, 如果不清楚用途可以跳过修改
  2. cat config-example.txt
  1. # 以下设置如果为空系统会自动生成随机字符串填入
  2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
  3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
  5. ## Docker 镜像配置
  6. # DOCKER_IMAGE_MIRROR=1
  8. ## 安装配置
  9. VOLUME_DIR=/opt/jumpserver
  10. DOCKER_DIR=/var/lib/docker
  11. SECRET_KEY=
  12. BOOTSTRAP_TOKEN=
  13. LOG_LEVEL=ERROR
  15. ##  MySQL 配置, USE_EXTERNAL_MYSQL=1 表示使用外置数据库, 请输入正确的 MySQL 信息
  16. USE_EXTERNAL_MYSQL=0
  17. DB_HOST=mysql
  18. DB_PORT=3306
  19. DB_USER=root
  20. DB_PASSWORD=
  21. DB_NAME=jumpserver
  23. ##  Redis 配置, USE_EXTERNAL_REDIS=1 表示使用外置数据库, 请输入正确的 Redis 信息
  24. USE_EXTERNAL_REDIS=0
  25. REDIS_HOST=redis
  26. REDIS_PORT=6379
  27. REDIS_PASSWORD=
  29. ## Compose 项目设置, 如果 192.168.250.0/24 网段与你现有网段冲突, 请修改然后重启 JumpServer
  30. COMPOSE_PROJECT_NAME=jms
  31. COMPOSE_HTTP_TIMEOUT=3600
  32. DOCKER_CLIENT_TIMEOUT=3600
  33. DOCKER_SUBNET=192.168.250.0/24
  35. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
  36. USE_IPV6=0
  37. DOCKER_SUBNET_IPV6=fc00:1010:1111:200::/64
  39. ## 访问配置
  40. HTTP_PORT=80
  41. SSH_PORT=2222
  42. MAGNUS_MYSQL_PORT=33060
  43. MAGNUS_MARIADB_PORT=33061
  45. ## HTTPS 配置, 参考 https://docs.jumpserver.org/zh/master/admin-guide/proxy/ 配置
  46. # USE_LB=1
  47. # HTTPS_PORT=443
  48. # SERVER_NAME=your_domain_name
  49. # SSL_CERTIFICATE=your_cert
  50. # SSL_CERTIFICATE_KEY=your_cert_key
  52. ## Nginx 文件上传大小
  53. CLIENT_MAX_BODY_SIZE=4096m
  55. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
  56. USE_TASK=1
  58. ## XPack, USE_XPACK=1 表示开启, 开源版本设置无效
  59. USE_XPACK=0
  60. RDP_PORT=3389
  61. MAGNUS_POSTGRE_PORT=54320
  62. TCP_SEND_BUFFER_BYTES=4194304
  63. TCP_RECV_BUFFER_BYTES=6291456
  65. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=True 表示关闭浏览器即 session 过期
  66. # SESSION_COOKIE_AGE=86400
  67. SESSION_EXPIRE_AT_BROWSER_CLOSE=True
  69. # Koko Lion XRDP 组件配置
  70. CORE_HOST=http://core:8080
  71. JUMPSERVER_ENABLE_FONT_SMOOTHING=True
  73. ## 终端使用宿主 HOSTNAME 标识
  74. SERVER_HOSTNAME=${HOSTNAME}
  76. # 额外的配置
  77. CURRENT_VERSION=
  1. # 安装
  2. ./jmsctl.sh install
  4. # 启动
  5. ./jmsctl.sh start
  1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
  1. cd jumpserver-offline-release-v2.26.0-amd64-87
  3. # 启动
  4. ./jmsctl.sh start
  6. # 停止
  7. ./jmsctl.sh down
  9. # 卸载
  10. ./jmsctl.sh uninstall
  12. # 帮助
  13. ./jmsctl.sh -h

从飞致云社区 下载最新的 linux/arm64 离线包, 并上传到部署服务器的 /opt 目录

  1. cd /opt
  2. tar -xf jumpserver-offline-installer-v2.26.0-arm64-87.tar.gz
  3. cd jumpserver-offline-installer-v2.26.0-arm64-87
  1. # 根据需要修改配置文件模板, 如果不清楚用途可以跳过修改
  2. cat config-example.txt
  1. # 以下设置如果为空系统会自动生成随机字符串填入
  2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
  3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
  5. ## Docker 镜像配置
  6. # DOCKER_IMAGE_MIRROR=1
  8. ## 安装配置
  9. VOLUME_DIR=/opt/jumpserver
  10. DOCKER_DIR=/var/lib/docker
  11. SECRET_KEY=
  12. BOOTSTRAP_TOKEN=
  13. LOG_LEVEL=ERROR
  15. ##  MySQL 配置, USE_EXTERNAL_MYSQL=1 表示使用外置数据库, 请输入正确的 MySQL 信息
  16. USE_EXTERNAL_MYSQL=0
  17. DB_HOST=mysql
  18. DB_PORT=3306
  19. DB_USER=root
  20. DB_PASSWORD=
  21. DB_NAME=jumpserver
  23. ##  Redis 配置, USE_EXTERNAL_REDIS=1 表示使用外置数据库, 请输入正确的 Redis 信息
  24. USE_EXTERNAL_REDIS=0
  25. REDIS_HOST=redis
  26. REDIS_PORT=6379
  27. REDIS_PASSWORD=
  29. ## Compose 项目设置, 如果 192.168.250.0/24 网段与你现有网段冲突, 请修改然后重启 JumpServer
  30. COMPOSE_PROJECT_NAME=jms
  31. COMPOSE_HTTP_TIMEOUT=3600
  32. DOCKER_CLIENT_TIMEOUT=3600
  33. DOCKER_SUBNET=192.168.250.0/24
  35. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
  36. USE_IPV6=0
  37. DOCKER_SUBNET_IPV6=fc00:1010:1111:200::/64
  39. ## 访问配置
  40. HTTP_PORT=80
  41. SSH_PORT=2222
  42. MAGNUS_MYSQL_PORT=33060
  43. MAGNUS_MARIADB_PORT=33061
  45. ## HTTPS 配置, 参考 https://docs.jumpserver.org/zh/master/admin-guide/proxy/ 配置
  46. # USE_LB=1
  47. # HTTPS_PORT=443
  48. # SERVER_NAME=your_domain_name
  49. # SSL_CERTIFICATE=your_cert
  50. # SSL_CERTIFICATE_KEY=your_cert_key
  52. ## Nginx 文件上传大小
  53. CLIENT_MAX_BODY_SIZE=4096m
  55. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
  56. USE_TASK=1
  58. ## XPack, USE_XPACK=1 表示开启, 开源版本设置无效
  59. USE_XPACK=0
  60. RDP_PORT=3389
  61. MAGNUS_POSTGRE_PORT=54320
  62. TCP_SEND_BUFFER_BYTES=4194304
  63. TCP_RECV_BUFFER_BYTES=6291456
  65. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=True 表示关闭浏览器即 session 过期
  66. # SESSION_COOKIE_AGE=86400
  67. SESSION_EXPIRE_AT_BROWSER_CLOSE=True
  69. # Koko Lion XRDP 组件配置
  70. CORE_HOST=http://core:8080
  71. JUMPSERVER_ENABLE_FONT_SMOOTHING=True
  73. ## 终端使用宿主 HOSTNAME 标识
  74. SERVER_HOSTNAME=${HOSTNAME}
  76. # 额外的配置
  77. CURRENT_VERSION=
  1. # 安装
  2. ./jmsctl.sh install
  4. # 启动
  5. ./jmsctl.sh start
  1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
  1. cd jumpserver-offline-release-v2.26.0-arm64-87
  3. # 启动
  4. ./jmsctl.sh start
  6. # 停止
  7. ./jmsctl.sh down
  9. # 卸载
  10. ./jmsctl.sh uninstall
  12. # 帮助
  13. ./jmsctl.sh -h

从飞致云社区 下载最新的 linux/loong64 离线包, 并上传到部署服务器的 /opt 目录

  1. cd /opt
  2. tar -xf jumpserver-offline-installer-v2.26.0-loong64-87.tar.gz
  3. cd jumpserver-offline-installer-v2.26.0-loong64-87
  1. # 根据需要修改配置文件模板, 如果不清楚用途可以跳过修改
  2. cat config-example.txt
  1. # 以下设置如果为空系统会自动生成随机字符串填入
  2. ## 迁移请修改 SECRET_KEY 和 BOOTSTRAP_TOKEN 为原来的设置
  3. ## 完整参数文档 https://docs.jumpserver.org/zh/master/admin-guide/env/
  5. ## Docker 镜像配置
  6. # DOCKER_IMAGE_MIRROR=1
  8. ## 安装配置
  9. VOLUME_DIR=/opt/jumpserver
  10. DOCKER_DIR=/var/lib/docker
  11. SECRET_KEY=
  12. BOOTSTRAP_TOKEN=
  13. LOG_LEVEL=ERROR
  15. ##  MySQL 配置, USE_EXTERNAL_MYSQL=1 表示使用外置数据库, 请输入正确的 MySQL 信息
  16. USE_EXTERNAL_MYSQL=0
  17. DB_HOST=mysql
  18. DB_PORT=3306
  19. DB_USER=root
  20. DB_PASSWORD=
  21. DB_NAME=jumpserver
  23. ##  Redis 配置, USE_EXTERNAL_REDIS=1 表示使用外置数据库, 请输入正确的 Redis 信息
  24. USE_EXTERNAL_REDIS=0
  25. REDIS_HOST=redis
  26. REDIS_PORT=6379
  27. REDIS_PASSWORD=
  29. ## Compose 项目设置, 如果 192.168.250.0/24 网段与你现有网段冲突, 请修改然后重启 JumpServer
  30. COMPOSE_PROJECT_NAME=jms
  31. COMPOSE_HTTP_TIMEOUT=3600
  32. DOCKER_CLIENT_TIMEOUT=3600
  33. DOCKER_SUBNET=192.168.250.0/24
  35. ## IPV6 设置, 容器是否开启 ipv6 nat, USE_IPV6=1 表示开启, 为 0 的情况下 DOCKER_SUBNET_IPV6 定义不生效
  36. USE_IPV6=0
  37. DOCKER_SUBNET_IPV6=fc00:1010:1111:200::/64
  39. ## 访问配置
  40. HTTP_PORT=80
  41. SSH_PORT=2222
  42. MAGNUS_MYSQL_PORT=33060
  43. MAGNUS_MARIADB_PORT=33061
  45. ## HTTPS 配置, 参考 https://docs.jumpserver.org/zh/master/admin-guide/proxy/ 配置
  46. # USE_LB=1
  47. # HTTPS_PORT=443
  48. # SERVER_NAME=your_domain_name
  49. # SSL_CERTIFICATE=your_cert
  50. # SSL_CERTIFICATE_KEY=your_cert_key
  52. ## Nginx 文件上传大小
  53. CLIENT_MAX_BODY_SIZE=4096m
  55. ## Task 配置, 是否启动 jms_celery 容器, 单节点必须开启
  56. USE_TASK=1
  58. ## XPack, USE_XPACK=1 表示开启, 开源版本设置无效
  59. USE_XPACK=0
  60. RDP_PORT=3389
  61. MAGNUS_POSTGRE_PORT=54320
  62. TCP_SEND_BUFFER_BYTES=4194304
  63. TCP_RECV_BUFFER_BYTES=6291456
  65. # Core 配置, Session 定义, SESSION_COOKIE_AGE 表示闲置多少秒后 session 过期, SESSION_EXPIRE_AT_BROWSER_CLOSE=True 表示关闭浏览器即 session 过期
  66. # SESSION_COOKIE_AGE=86400
  67. SESSION_EXPIRE_AT_BROWSER_CLOSE=True
  69. # Koko Lion XRDP 组件配置
  70. CORE_HOST=http://core:8080
  71. JUMPSERVER_ENABLE_FONT_SMOOTHING=True
  73. ## 终端使用宿主 HOSTNAME 标识
  74. SERVER_HOSTNAME=${HOSTNAME}
  76. # 额外的配置
  77. CURRENT_VERSION=
  1. # 安装
  2. ./jmsctl.sh install
  4. # 启动
  5. ./jmsctl.sh start
  1. # 安装完成后配置文件 /opt/jumpserver/config/config.txt
  1. cd jumpserver-offline-release-v2.26.0-loong64-87
  3. # 启动
  4. ./jmsctl.sh start
  6. # 停止
  7. ./jmsctl.sh down
  9. # 卸载
  10. ./jmsctl.sh uninstall
  12. # 帮助
  13. ./jmsctl.sh -h

更多内容参考 安全建议 快速入门