jumpserver1.5.3版本的堡垒机搭建-cent7.x.docx

jumpserver1.5.3版本的堡垒机搭建-cent7.x（7.4）

1.安装jumpserver1.0.0——28jumpserver机器：

28上：安装jumpserver堡垒机

[root@localhost~]#hostnamectlset-hostnamejumpserver

[root@jumpserver~]#cat/etc/redhat-release

CentOSLinuxrelease7.4.1708(Core)

1)关闭防火墙与selinux设置说明,如果已经关闭了防火墙和Selinux的用户请跳过设置

[root@jumpserver~]#systemctlstopfirewalld#也可开启防火墙，放行8080和80，2222端口

[root@jumpserver~]#systemctldisablefirewalld

[root@jumpserver~]#setenforce0

[root@jumpserver~]#cat/etc/selinux/config

SELINUX=disabled

2)安装依赖包：

[root@jumpserver~]#yum-yinstallwgetgccepel-releasegit

3)安装redisJumpserver使用redis做cache和celerybroke

[root@jumpserver~]#yum-yinstallredis

[root@jumpserver~]#systemctlenableredis

[root@jumpserver~]#systemctlstartredis

4)安装mysql:

[root@jumpserver~]#yum-yinstallmariadbmariadb-develmariadb-serverMariaDB-shared

[root@jumpserver~]#systemctlenablemariadb

[root@jumpserver~]#systemctlstartmariadb

[root@jumpserver~]#mysql#安装启动mariadb后，不需密码即可登录

MariaDB[(none)]showdatabases;

+--------------------+

|Database|

+--------------------+

|information_schema|

|mysql|

|performance_schema|

|test|

+--------------------+

MariaDB[(none)]quit

[root@jumpserver~]#mysql_secure_installation#简单安全安装配置,回车

NOTE:RUNNINGALLPARTSOFTHISSCRIPTISRECOMMENDEDFORALLMariaDB

SERVERSINPRODUCTIONUSE!PLEASEREADEACHSTEPCAREFULLY!

InordertologintoMariaDBtosecureit,wellneedthecurrent

passwordfortherootuser.IfyouvejustinstalledMariaDB,and

youhaventsettherootpasswordyet,thepasswordwillbeblank,

soyoushouldjustpressenterhere.

Entercurrentpasswordforroot(enterfornone):回车，输入当前密码,无，直接回车即可

OK,successfullyusedpassword,movingon...

SettingtherootpasswordensuresthatnobodycanlogintotheMariaDB

rootuserwithouttheproperauthorisation.

Setrootpassword?[Y/n]y

Newpassword:输入要设置的root密码：123

Re-enternewpa