查看日志

docker logs -f 容器名称

https://www.cnblogs.com/faberbeta/p/jumpserver002.html

docker jumpserver管理

cd /opt
python3.6 -m venv py3
source /opt/py3/bin/activate
cd /opt/jumpserver
./jms stop
./jms start -d

[root@localhost ~]# cat 1.sh      
if [ ! "$SECRET_KEY" ]; then
  SECRET_KEY=`cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 50`;
  echo "SECRET_KEY=$SECRET_KEY" >> ~/.bashrc;
  echo $SECRET_KEY;
else
  echo $SECRET_KEY;
fi  
if [ ! "$BOOTSTRAP_TOKEN" ]; then
  BOOTSTRAP_TOKEN=`cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 16`;
  echo "BOOTSTRAP_TOKEN=$BOOTSTRAP_TOKEN" >> ~/.bashrc;
  echo $BOOTSTRAP_TOKEN;
else
  echo $BOOTSTRAP_TOKEN;
fi
[root@localhost ~]# cat docker.sh      
/usr/bin/docker run --name jms_all -d -v /opt/jumpserver:/opt/jumpserver/data/media -p 80:80 -p 2222:2222 -e SECRET_KEY=ApbTWlqc6GHD6i7LvTlDqdd1VGkPTi7fkFWoObESWAJCbgszh5 -e BOOTSTRAP_TOKEN=f05Nxhls8UI6B2Fa -e DB_HOST=192.168.2.119 -e DB_PORT=3306 -e DB_USER=root -e DB_PASSWORD=test -e DB_NAME=jumpserver -e REDIS_HOST=192.168.2.119 -e REDIS_PORT=6379 -e REDIS_PASSWORD=test --network=bridge jumpserver/jms_all:latest
[root@localhost ~]# 

清除防火墙

iptables-t nat -F #清除原有的nat表中的规则

iptables -F #清除原有的filter有中的规则

防火墙

使用命令：systemctl status firewalld.service

开启命令：systemctl enable firewalld.service

关闭命令：systemctl disable firewalld.service

查看
getenforce
1
或者
/usr/sbin/sestatus -v
1
临时禁用
setenforce
1
永久禁用
# vim /etc/selinux/config
# 将SELINUX=enforce改成SELINUX=disabled
# 保存，重启

网络转发

1.临时开启，（写入内存，在内存中开启）
echo "1" > /proc/sys/net/ipv4/ip_forward
2.永久开启，（写入内核）
在 vim /etc/sysctl.conf 下
加入此行   net.ipv4.ip_forward = 1
sysctl -p               ----加载一下
[root@localhost ~]# sysctl -a |grep "ip_forward"    ----查看一下
net.ipv4.ip_forward = 1
net.ipv4.ip_forward_use_pmtu = 0

用户管理新建用户后ssh 新建用户名@服务器 -p2222

centos7 jumpserver极速部署

https://jumpserver.readthedocs.io/zh/master/install/setup_by_fast/

mac ssh

root@testdeAir:/Users/test/Downloads# ssh -i yansiyu_openssh yansiyu@127.0.0.1 -p123456  私钥

root@openmediavault:/etc# scp apt.tar.gz root@192.168.2.243:/tmp/
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the ECDSA key sent by the remote host is
SHA256:P6LrLShkEyC/1C4gz0QwVQEIlqkCHp/+ZQad67pLP58.
Please contact your system administrator.
Add correct host key in /root/.ssh/known_hosts to get rid of this message.
Offending ECDSA key in /root/.ssh/known_hosts:6
  remove with:
  ssh-keygen -f "/root/.ssh/known_hosts" -R 192.168.2.243
ECDSA host key for 192.168.2.243 has changed and you have requested strict checking.
Host key verification failed.
lost connection
root@openmediavault:/etc# ssh-keygen -f "/root/.ssh/known_hosts" -R 192.168.2.243
# Host 192.168.2.243 found: line 6
/root/.ssh/known_hosts updated.
Original contents retained as /root/.ssh/known_hosts.old

官网文档 http://docs.jumpserver.org/zh/docs/

https://blog.csdn.net/my_bai/article/details/62226474

http://www.51niux.com/?id=174

http://www.saunix.cn/2229.html

$ cd /opt
$ source /opt/py3/bin/activate

资产授权｜授权规则

cd /opt/coco

先执行

./cocod start

然后打开http://192.168.2.234:8080/terminal/terminal/

点击接受

用户管理｜用户列表    进入后台网页的账号密码

资产管理｜管理用户    资产主机的root账号或者sudo nopassword账号，jumpserver服务器用这个账号来创建系统用户

资产管理｜系统用户    jumpserver服务器登录资产主机用的账号

管理群晖的话只能用admin或者root系统用户

对于mac要行ssh用户

如有问题，可以QQ搜索群1028468525加入群聊，欢迎一起研究技术

有疑问联系站长，请联系QQ：