jumpserver迁移方案

admin · 发表于 2023-6-30 12:55:29

迁移文档⚓︎
注意

升级及迁移请保持 SECRET_KEY 与旧版本一致，否则会导致数据库加密数据无法解密。
1 迁移说明⚓︎
v2.6 版本升级说明

统一企业版本与开源版本安装方式，社区版可以无缝切换到企业版。
今后只会维护此安装方式，其他安装方式不再提供技术支持。
安装完成后配置文件在 /opt/jumpserver/config/config.txt
2 迁移步骤⚓︎
2.1 数据库备份⚓︎
在 jumpserver/config.yml 文件中获取数据库信息如下：

DB_HOST: 127.0.0.1 # 数据库服务器 IP
DB_PORT: 3306       # 数据库服务器端口
DB_USER: jumpserver  # 连接数据库的用户
DB_PASSWORD: ******  # 连接数据库用户的密码
DB_NAME: jumpserver  # JumpServer 使用的数据库
# mysqldump -h<DB_HOST> -P<DB_PORT> -u<DB_USER> -p<DB_PASSWORD> <DB_NAME> > /opt/<DB_NAME>.sql
选择与自己环境部署方式对应的数据库备份方式：

installer 部署
源码部署
组件容器化部署
setuptools 脚本部署
docker 部署
docker-compose 部署

docker cp jms_all:/opt/jumpserver /opt/jumpserver_bak

# 记录 SECRET_KEY 和 BOOTSTRAP_TOKEN
docker exec -it jms_all env | egrep "SECRET_KEY|BOOTSTRAP_TOKEN"

docker exec -it jms_all /bin/bash
mysqldump -h$DB_HOST -P$DB_PORT -u$DB_USER -p$DB_PASSWORD $DB_NAME > /opt/jumpserver.sql
exit

docker cp jms_all:/opt/jumpserver.sql /opt
docker stop jms_all

2.2 修改数据库字符集⚓︎
如果你不需要或不想处理数据库字符集可以跳过此步骤, 保证迁移前后的数据库字符集一样即可。

if grep -q 'COLLATE=utf8_bin' /opt/jumpserver.sql; then
cp /opt/jumpserver.sql /opt/jumpserver_bak.sql
sed -i 's@ COLLATE=utf8_bin@@g' /opt/jumpserver.sql
sed -i 's@ COLLATE utf8_bin@@g' /opt/jumpserver.sql
else
echo "备份数据库字符集正确";
fi
2.3 下载 jumpserver-install⚓︎

cd /opt
yum -y install wget
wget https://github.com/jumpserver/in ... aller-v3.4.0.tar.gz
tar -xf jumpserver-installer-v3.4.0.tar.gz
cd jumpserver-installer-v3.4.0
2.4 编辑临时配置文件⚓︎

vi config-example.txt

# 修改下面选项, 其他保持默认
### 数据持久化目录, 安装完成后请勿随意更改, 可以使用其他目录如: /data/jumpserver
VOLUME_DIR=/opt/jumpserver

### 注意: SECRET_KEY 与旧版本不一致, 加密的数据将无法解密

# Core 配置
### 启动后不能再修改，否则密码等等信息无法解密
SECRET_KEY=                         # 从旧版本的配置文件获取后填入 (*)
BOOTSTRAP_TOKEN=                   # 从旧版本的配置文件获取后填入 (*)
LOG_LEVEL=ERROR
# SESSION_COOKIE_AGE=86400
SESSION_EXPIRE_AT_BROWSER_CLOSE=True  # 关闭浏览器后 session 过期
2.5 开始部署 JumpServer⚓︎
选择与自己数据库环境对应的部署方式。

使用新的内置数据库
使用新的外置数据库
使用旧的外置数据库

./jmsctl.sh install

   ██╗██╗ ██╗███╗ ███╗██████╗ ███████╗███████╗██████╗ ██╗ ██╗███████╗██████╗
   ██║██║ ██║████╗ ████║██╔══██╗██╔════╝██╔════╝██╔══██╗██║ ██║██╔════╝██╔══██╗
   ██║██║ ██║██╔████╔██║██████╔╝███████╗█████╗  ██████╔╝██║ ██║█████╗  ██████╔╝
  ██ ██║██║ ██║██║╚██╔╝██║██╔═══╝ ╚════██║██╔══╝  ██╔══██╗╚██╗ ██╔╝██╔══╝  ██╔══██╗
  ╚█████╔╝╚██████╔╝██║ ╚═╝ ██║██║    ███████║███████╗██║  ██║ ╚████╔╝ ███████╗██║  ██║
╚════╝  ╚═════╝ ╚═╝    ╚═╝╚═╝    ╚══════╝╚══════╝╚═╝  ╚═╝  ╚═══╝  ╚══════╝╚═╝  ╚═╝

                                                                  Version:  v3.4.0

1. 检查配置文件
配置文件位置: /opt/jumpserver/config
/opt/jumpserver/config/config.txt  [ √ ]
/opt/jumpserver/config/nginx/lb_rdp_server.conf  [ √ ]
/opt/jumpserver/config/nginx/lb_ssh_server.conf  [ √ ]
/opt/jumpserver/config/nginx/cert/server.crt  [ √ ]
/opt/jumpserver/config/nginx/cert/server.key  [ √ ]
完成

2. 备份配置文件
备份至 /opt/jumpserver/config/backup/config.txt.2021-07-15_22-26-13
完成

>>> 安装配置 Docker
1. 安装 Docker
开始下载 Docker 程序 ...
开始下载 Docker Compose 程序 ...
完成

2. 配置 Docker
是否需要自定义 docker 存储目录, 默认将使用目录 /var/lib/docker? (y/n)  (默认为 n): n
完成

3. 启动 Docker
Created symlink from /etc/systemd/system/multi-user.target.wants/docker.service to /etc/systemd/system/docker.service.
完成

>>> 加载 Docker 镜像
Docker: Pulling from jumpserver/core:v3.4.0       [ OK ]
Docker: Pulling from jumpserver/koko:v3.4.0       [ OK ]
Docker: Pulling from jumpserver/web:v3.4.0       [ OK ]
Docker: Pulling from jumpserver/redis:6-alpine    [ OK ]
Docker: Pulling from jumpserver/mysql:5          [ OK ]
Docker: Pulling from jumpserver/lion:v3.4.0       [ OK ]

>>> 安装配置 JumpServer
1. 配置网络
是否需要支持 IPv6? (y/n)  (默认为 n): n
完成

2. 配置加密密钥
SECRETE_KEY:    YTE2YTVkMTMtMGE3MS00YzI5LWFlOWEtMTc2OWJlMmIyMDE2
BOOTSTRAP_TOKEN: YTE2YTVkMTMtMGE3
完成

3. 配置持久化目录
是否需要自定义持久化存储, 默认将使用目录 /opt/jumpserver? (y/n)  (默认为 n): n
完成

4. 配置 MySQL
是否使用外部 MySQL? (y/n)  (默认为 n): n
完成

5. 配置 Redis
是否使用外部 Redis? (y/n)  (默认为 n): n
完成

6. 配置对外端口
是否需要配置 JumpServer 对外访问端口? (y/n)  (默认为 n): n
完成

7. 初始化数据库
Creating network "jms_net" with driver "bridge"
Creating jms_mysql ... done
Creating jms_redis ... done
2021-07-15 22:39:52 Collect static files
2021-07-15 22:39:52 Collect static files done
2021-07-15 22:39:52 Check database structure change ...
2021-07-15 22:39:52 Migrate model change to database ...

475 static files copied to '/opt/jumpserver/data/static'.
Operations to perform:
  Apply all migrations: acls, admin, applications, assets, audits, auth, authentication, captcha, common, contenttypes, django_cas_ng, django_celery_beat, jms_oidc_rp, notifications, ops, orgs, perms, sessions, settings, terminal, tickets, users
Running migrations:
  Applying contenttypes.0001_initial... OK
  Applying contenttypes.0002_remove_content_type_name... OK
  Applying auth.0001_initial... OK
  Applying auth.0002_alter_permission_name_max_length... OK
  Applying auth.0003_alter_user_email_max_length... OK
  Applying auth.0004_alter_user_username_opts... OK
  Applying auth.0005_alter_user_last_login_null... OK
  Applying auth.0006_require_contenttypes_0002... OK
  Applying auth.0007_alter_validators_add_error_messages... OK
  Applying auth.0008_alter_user_username_max_length... OK
  ...
  Applying sessions.0001_initial... OK
  Applying terminal.0032_auto_20210302_1853... OK
  Applying terminal.0033_auto_20210324_1008... OK
  Applying terminal.0034_auto_20210406_1434... OK
  Applying terminal.0035_auto_20210517_1448... OK
  Applying terminal.0036_auto_20210604_1124... OK
  Applying terminal.0037_auto_20210623_1748... OK
  Applying tickets.0008_auto_20210311_1113... OK
  Applying tickets.0009_auto_20210426_1720... OK

>>> 安装完成了
1. 可以使用如下命令启动, 然后访问
cd /root/jumpserver-installer-v3.4.0
./jmsctl.sh start

>>> The Installation is Complete
1. You can use the following command to start, and then visit
cd /opt/jumpserver-offline-release-v3.4.1-amd64
./jmsctl.sh start

2. Other management commands
./jmsctl.sh stop
./jmsctl.sh restart
./jmsctl.sh backup
./jmsctl.sh upgrade
For more commands, you can enter ./jmsctl.sh --help to understand

3. Web access
http://172.24.110.119:80
Default username: admin  Default password: admin

4. SSH/SFTP access
ssh -p2222 admin@172.24.110.119
sftp -P2222 admin@172.24.110.119

5. More information
Official Website: https://www.jumpserver.org/
Documentation: https://docs.jumpserver.org/

[root@cusc_fortress jumpserver-offline-release-v3.4.1-amd64]# ls
cn-quick_start.sh  compose  config-example.txt  config_init  jmsctl.sh  LICENSE  locale  quick_start.sh  README.md  scripts  static.env  utils
[root@cusc_fortress jumpserver-offline-release-v3.4.1-amd64]# ./jmsctl.sh start
[+] Running 10/10
✔ Container jms_redis Healthy                                                                                                                0.9s
✔ Container jms_mysql Healthy                                                                                                                0.9s
✔ Container jms_core Healthy                                                                                                                38.8s
✔ Container jms_omnidb  Started                                                                                                                40.3s
✔ Container jms_web    Started                                                                                                                40.5s
✔ Container jms_razor Started                                                                                                                44.6s
✔ Container jms_koko Started                                                                                                                40.1s
✔ Container jms_lion Started                                                                                                                42.5s
✔ Container jms_magnus  Started                                                                                                                40.6s
✔ Container jms_celery  Started                                                                                                                40.2s
[root@cusc_fortress jumpserver-offline-release-v3.4.1-amd64]# ./jmsctl.sh status
NAME             IMAGE                                           COMMAND                SERVICE          CREATED          STATUS                      PORTS
jms_celery       registry.fit2cloud.com/jumpserver/core:v3.4.1    "./entrypoint.sh sta…" celery             2 minutes ago    Up About a minute (healthy) 8080/tcp
jms_core          registry.fit2cloud.com/jumpserver/core:v3.4.1    "./entrypoint.sh sta…" core             2 minutes ago    Up 2 minutes (healthy)       8080/tcp
jms_koko          registry.fit2cloud.com/jumpserver/koko:v3.4.1    "./entrypoint.sh"       koko             2 minutes ago    Up About a minute (healthy) 0.0.0.0:2222->2222/tcp, :::2222->2222/tcp, 5000/tcp
jms_lion          registry.fit2cloud.com/jumpserver/lion:v3.4.1    "./entrypoint.sh"       lion             2 minutes ago    Up About a minute (healthy) 4822/tcp, 8081/tcp
jms_magnus       registry.fit2cloud.com/jumpserver/magnus:v3.4.1 "./entrypoint.sh"       magnus             2 minutes ago    Up About a minute (healthy) 0.0.0.0:30000-30030->30000-30030/tcp, :::30000-30030->30000-30030/tcp, 0.0.0.0:33061-33062->33061-33062/tcp, :::33061-33062->33061-33062/tcp, 0.0.0.0:54320->54320/tcp, :::54320->54320/tcp, 0.0.0.0:63790->63790/tcp, :::63790->63790/tcp
jms_mysql          jumpserver/mariadb:10.6                         "docker-entrypoint.s…" mysql             8 minutes ago    Up 7 minutes (healthy)       3306/tcp
jms_omnidb       registry.fit2cloud.com/jumpserver/omnidb:v3.4.1 "./entrypoint.sh"       omnidb             2 minutes ago    Up About a minute (healthy) 8082/tcp
jms_razor          registry.fit2cloud.com/jumpserver/razor:v3.4.1 "./entrypoint.sh"       razor             2 minutes ago    Up About a minute (healthy) 0.0.0.0:3389->3389/tcp, :::3389->3389/tcp
jms_redis          jumpserver/redis:6.2                            "docker-entrypoint.s…" redis             8 minutes ago    Up 7 minutes (healthy)       6379/tcp
jms_web          registry.fit2cloud.com/jumpserver/web:v3.4.1    "/docker-entrypoint.…" web                2 minutes ago    Up About a minute (healthy) 0.0.0.0:80->80/tcp, :::80->80/tcp

2. 其它一些管理命令
./jmsctl.sh stop
./jmsctl.sh restart
./jmsctl.sh backup
./jmsctl.sh upgrade
更多还有一些命令, 你可以 ./jmsctl.sh --help 来了解

3. Web 访问
http://192.168.100.212:80
默认用户: admin  默认密码: admin

4. SSH/SFTP 访问
ssh -p2222 admin@192.168.100.212
sftp -P2222 admin@192.168.100.212

5. 更多信息
我们的官网: https://www.jumpserver.org/
我们的文档: https://docs.jumpserver.org/

docker exec -it jms_mysql /bin/bash
# 如果变量 $MARIADB_ROOT_PASSWORD 不存在，请使用 $MYSQL_ROOT_PASSWORD
mysql -uroot -p$MARIADB_ROOT_PASSWORD

drop database jumpserver;
create database jumpserver default charset 'utf8';
exit
exit

root@4d4610d0f4b8:/# mysql -uroot -pNTg3ZWVhNWEtZjVhMy00ZjU1LT
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 145
Server version: 10.6.5-MariaDB-1:10.6.5+maria~focal mariadb.org binary distribution

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]> drop database jumpserver ;
Query OK, 146 rows affected (4.847 sec)

MariaDB [(none)]> create database jumpserver default charset 'utf8';
Query OK, 1 row affected (0.001 sec)

MariaDB [(none)]> exit
Bye
root@4d4610d0f4b8:/# exit
exit

# /opt/jumpserver.sql 为旧版本数据库
./jmsctl.sh restore_db /opt/jumpserver.sql

[root@cusc_fortress jumpserver-offline-release-v3.4.1-amd64]# ./jmsctl.sh restore_db /tmp/jumpserverdate.sql
[ WARNING ] Make sure you have a backup of data, this operation is not reversible!

Start restoring database: /tmp/jumpserverdate.sql

开始还原数据库: /opt/jumpserver.sql
mysql: [Warning] Using a password on the command line interface can be insecure.
数据库恢复成功！

./jmsctl.sh start

		自动登录	找回密码
密码			注册

jumpserver迁移方案

浏览过的版块