openEuler 服务器安装 JumpServer (all-in-one 模式)

news2025/1/17 2:53:04

openEuler 服务器安装 JumpServer

  • JumpServer 简介
    • 什么是 JumpServer ?
    • JumpServer 的各种类型资产
    • JumpServer 产品特色或优势
    • JumpServer 符合 4A 规范
  • JumpServer 系统架构
    • 应用架构
    • 组件说明
  • JumpServer 安装部署
    • 环境要求
    • 网络端口
      • 网络端口列表
      • 防火墙常用命令
    • 在线脚本安装
    • 验证安装

JumpServer 简介

openEuler-JumpServer

什么是 JumpServer ?

JumpServer 是广受欢迎的 开源堡垒机,是符合 4A 规范 的专业运维安全审计系统。JumpServer 帮助企业以更安全的方式管控和登录所有类型的资产,实现 事前授权、事中监察、事后审计,满足等保合规 要求。

JumpServer资产

JumpServer 的各种类型资产

JumpServer类型资产

JumpServer 堡垒机支持的资产类型包括:

  • SSH (Linux / Unix / 网络设备 等);
  • Windows (Web 方式连接 / 原生 RDP 连接);
  • 数据库 (MySQL / MariaDB / Oracle / SQLServer / PostgreSQL / ClickHouse 等);
  • NoSQL (Redis / MongoDB 等);
  • GPT (ChatGPT 等);
  • 云服务 (Kubernetes / VMware vSphere 等);
  • Web 站点 (各类系统的 Web 管理后台);
  • 应用 (通过 Remote App 连接各类应用);

JumpServer 产品特色或优势

JumpServer优势

JumpServer 的产品特色包括:

  • 开源:零门槛,线上快速获取和安装;
  • 分布式:轻松支持大规模并发访问;
  • 无插件:仅需浏览器,极致的 Web Terminal 使用体验;
  • 多云支持:一套系统,同时管理不同云上面的资产;
  • 云端存储:审计录像云端存储,永不丢失;
  • 多租户:一套系统,多个子公司和部门同时使用;
  • 多应用支持:数据库,Windows 远程应用,Kubernetes

JumpServer 符合 4A 规范

4A规范

JumpServer 是符合 4A 规范 的堡垒机:

  • Authentication :身份认证,防止身份冒用和复用;
  • Authorization :授权控制 ,防止内部误操作和权限滥用;
  • Accounting :账号管理,人员和资产的管理;
  • Auditing :安全审计,追溯的保障和事故分析的依据;

JumpServer 堡垒机支持 事前授权、事中监察、事后审计,满足等保合规 要求。

JumpServer 系统架构

应用架构

  • JumpServer 采用 分层架构,分别是 负载层、接入层、核心层、数据层、存储层
  • JumpServer 应用架构图如下:

JumpServer 系统分层架构

组件说明

  • Core 组件是 JumpServer 的核心组件,其他组件依赖此组件启动。
  • Koko 是服务于类 Unix 资产平台的组件,通过 SSH、Telnet 协议提供字符型连接。
  • Lion 是服务于 Windows 资产平台的组件,用于 Web 端访问 Windows 资产。
  • Omnidb 是服务于数据库的组件,用于可视化界面纳管数据库。
  • Razor 是服务于 RDP 协议组件,该组件主要功能是通过 JumpServer Client 方式访问 Windows 资产。
  • Magnus 是服务于数据库的组件,用于通过客户端代理访问数据库。
  • Celery 是处理异步任务的组件,用于执行 JumpServer 相关的自动化任务。

更多信息请查看,https://docs.jumpserver.org/zh/v3/architecture/

JumpServer 安装部署

JumpServer 支持 在线安装(标准安装)离线安装 两种模式,安装过程可参考文档https://docs.jumpserver.org/zh/master/install/setup_by_fast/

环境要求

  • 操作系统环境:
OS/ArchArchitectureLinux KernelSoft RequirementMinimize Hardware
linux/amd64x86_64>= 4.0wget curl tar gettext iptables python2Core/8GB RAM/60G HDD
linux/arm64aarch64>= 4.0wget curl tar gettext iptables python2Core/8GB RAM/60G HDD
linux/loong64loongarch64== 4.19wget curl tar gettext iptables python2Core/8GB RAM/60G HDD
  • 数据库系统环境:

JumpServer 需要使用 MySQLMariaDB 存储数据,使用 Redis 缓存数据。

此处用户可以使用自建数据库或云数据库,请参考此处的要求:

NameVersionDefault CharsetDefault collationTLS/SSL
MySQL>= 5.7utf8mb4utf8mb4_general_ci
MariaDB>= 10.2utf8mb4utf8mb4_general_ci
NameVersionSentinelClusterTLS/SSL
Redis>= 5.0

此处我们采用单机在线安装模式,要求宿主机网络可以访问外网。

本案例我们采用如下配置规格进行 JumpServer 的安装部署:

  • OS 系统信息:
OS/ArchArchitectureLinux KernelSoft RequirementMinimize Hardware
openEuler-22.03-LTS-x86_64-dvd.isox86_645.10.0-60.18.0.50.oe2203.x86_64wget curl tar gettext iptables python4Core/8GB RAM/60G HDD

预安装软件,执行如下命令:

yum update && install -y wget curl tar gettext iptables
  • Redis 版本信息:
NameVersionSentinelClusterTLS/SSL
Redis6.2
  • DB 版本信息:
NameVersionDefault CharsetDefault collationTLS/SSL
MariaDB10.6utf8mb4utf8mb4_general_ci

网络端口

JumpServer 作为符合 4A 规范 的专业运维安全审计系统,其正常运行需要开放如下网络端口,管理员可根据实际环境中 JumpServer 组件部署的方案,在网络和主机侧开放相关端口。

网络端口列表

端口作用说明
22SSH安装、升级及管理使用
80Web HTTP 服务通过 HTTP 协议访问 JumpServer 前端页面
443Web HTTPS 服务通过 HTTPS 协议访问 JumpServer 前端页面
1521数据库服务Oracle 服务使用
1433数据库服务MS SQLServer 服务使用
3306数据库服务MySQL/MariaDB 服务使用
5432数据库服务PostgreSQL 服务使用
6379数据库服务Redis 服务使用
27017数据库服务MongoDB 服务使用
3389Razor 服务端口RDP Client 方式连接 Windows 资产
2222SSH ClientSSH Client 方式使用终端工具连接 JumpServer,比如 Xshell、PuTTY、MobaXterm、WindTerm 等终端工具
33061Magnus MySQL 服务端口DB Client 方式连接 MySQL 数据库资产
33062Magnus MariaDB 服务端口DB Client 方式连接 MariaDB 数据库资产
54320Magnus PostgreSQL 服务端口DB Client 方式连接 PostgreSQL 数据库资产
63790Magnus Redis 服务端口DB Client 方式连接 Redis 数据库资产
30000-30100Magnus Oracle 服务端口DB Client 方式连接 Oracle 数据库资产,该端口范围可自定义

防火墙常用命令

  • 确认 firewall 的状态为 running
firewall-cmd --state
running
  • 临时开放端口(规则立即生效,重启失效)
firewall-cmd --zone=public --add-port=80/tcp
firewall-cmd --zone=public --add-port=2222/tcp
firewall-cmd --add-rich-rule="rule family="ipv4" source address="172.17.0.1/16" port protocol="tcp" port="8080" accept"
  • 临时删除端口(规则立即生效,重启失效)
firewall-cmd --zone=public --remove-port=80/tcp
firewall-cmd --zone=public --remove-port=2222/tcp
firewall-cmd --remove-rich-rule="rule family="ipv4" source address="172.17.0.1/16" port protocol="tcp" port="8080" accept"
  • 临时删除端口(规则立即生效,重启失效)
firewall-cmd --zone=public --remove-port=80/tcp
firewall-cmd --zone=public --remove-port=2222/tcp
firewall-cmd --remove-rich-rule="rule family="ipv4" source address="172.17.0.1/16" port protocol="tcp" port="8080" accept"
  • 永久放行端口(需要 reload 才能生效)
firewall-cmd --zone=public --add-port=80/tcp --permanent
firewall-cmd --zone=public --add-port=2222/tcp --permanent
firewall-cmd --add-rich-rule="rule family="ipv4" source address="172.17.0.1/16" port protocol="tcp" port="8080" accept" --permanent
firewall-cmd --reload
  • 永久删除端口(需要 reload 才能生效)
firewall-cmd --zone=public --remove-port=80/tcp --permanent
firewall-cmd --zone=public --remove-port=2222/tcp --permanent
firewall-cmd --remove-rich-rule="rule family="ipv4" source address="172.17.0.1/16" port protocol="tcp" port="8080" accept" --permanent
firewall-cmd --reload
  • 查看端口生效规则
firewall-cmd --list-all
...
public (active)
  target: default
  icmp-block-inversion: no
  interfaces: ens32
  sources:
  services: dhcpv6-client ssh
  ports: 80/tcp 2222/tcp
  protocols:
  masquerade: no
  forward-ports:
  source-ports:
  icmp-blocks:
  rich rules:
    rule family="ipv4" source address="172.17.0.1/16" port port="8080" protocol="tcp" accept

在线脚本安装

参考,https://github.com/jumpserver/jumpserver/releases/tag/v3.8.0

  • 国内用户
curl -sSL https://resource.fit2cloud.com/jumpserver/jumpserver/releases/latest/download/quick_start.sh | bash
  • 海外用户
curl -sSL https://github.com/jumpserver/jumpserver/releases/latest/download/quick_start.sh | bash

此处我们安装 JumpServer 版本是 v3.8 ,下载的 quick_start.sh 文件内容如下:

#!/usr/bin/env bash

VERSION=v3.8.0
DOWNLOAD_URL=https://github.com

function install_soft() {
    if command -v dnf > /dev/null; then
      dnf -q -y install "$1"
    elif command -v yum > /dev/null; then
      yum -q -y install "$1"
    elif command -v apt > /dev/null; then
      apt-get -qqy install "$1"
    elif command -v zypper > /dev/null; then
      zypper -q -n install "$1"
    elif command -v apk > /dev/null; then
      apk add -q "$1"
      command -v gettext >/dev/null || {
      apk add -q gettext-dev python3
    }
    else
      echo -e "[\033[31m ERROR \033[0m] $1 command not found, Please install it first"
      exit 1
    fi
}

function prepare_install() {
  for i in curl wget tar iptables; do
    command -v $i &>/dev/null || install_soft $i
  done
}

function get_installer() {
  echo "download install script to /opt/jumpserver-installer-${VERSION}"
  cd /opt || exit 1
  if [ ! -d "/opt/jumpserver-installer-${VERSION}" ]; then
    timeout 60 wget -qO jumpserver-installer-${VERSION}.tar.gz ${DOWNLOAD_URL}/jumpserver/installer/releases/download/${VERSION}/jumpserver-installer-${VERSION}.tar.gz || {
      rm -f /opt/jumpserver-installer-${VERSION}.tar.gz
      echo -e "[\033[31m ERROR \033[0m] Failed to download jumpserver-installer-${VERSION}"
      exit 1
    }
    tar -xf /opt/jumpserver-installer-${VERSION}.tar.gz -C /opt || {
      rm -rf /opt/jumpserver-installer-${VERSION}
      echo -e "[\033[31m ERROR \033[0m] Failed to unzip jumpserver-installer-${VERSION}"
      exit 1
    }
    rm -f /opt/jumpserver-installer-${VERSION}.tar.gz
  fi
}

function config_installer() {
  cd /opt/jumpserver-installer-${VERSION} || exit 1
  sed -i "s/VERSION=.*/VERSION=${VERSION}/g" /opt/jumpserver-installer-${VERSION}/static.env
  ./jmsctl.sh install
  ./jmsctl.sh start
}

function main(){
  if [[ "${OS}" == 'Darwin' ]]; then
    echo
    echo "Unsupported Operating System Error"
    exit 1
  fi
  prepare_install
  get_installer
  config_installer
}

main

或者下载 quick_start.sh 文件后,直接执行如下命令:

bash quick_start.sh 

输出如下类似信息:

bash-quick_start.sh

完整信息如下:

Importing GPG key 0xB25E7F66:
 Userid     : "private OBS (key without passphrase) <defaultkey@localobs>"
 Fingerprint: 12EA 74AC 9DF4 8D46 C69C A0BE D557 065E B25E 7F66
 From       : http://repo.openeuler.org/openEuler-22.03-LTS/OS/x86_64/RPM-GPG-KEY-openEuler

Installed:
  tar-2:1.34-4.oe2203.x86_64                                                                                               

download install script to /opt/jumpserver-installer-v3.8.0


       ██╗██╗   ██╗███╗   ███╗██████╗ ███████╗███████╗██████╗ ██╗   ██╗███████╗██████╗
       ██║██║   ██║████╗ ████║██╔══██╗██╔════╝██╔════╝██╔══██╗██║   ██║██╔════╝██╔══██╗
       ██║██║   ██║██╔████╔██║██████╔╝███████╗█████╗  ██████╔╝██║   ██║█████╗  ██████╔╝
  ██   ██║██║   ██║██║╚██╔╝██║██╔═══╝ ╚════██║██╔══╝  ██╔══██╗╚██╗ ██╔╝██╔══╝  ██╔══██╗
  ╚█████╔╝╚██████╔╝██║ ╚═╝ ██║██║     ███████║███████╗██║  ██║ ╚████╔╝ ███████╗██║  ██║
   ╚════╝  ╚═════╝ ╚═╝     ╚═╝╚═╝     ╚══════╝╚══════╝╚═╝  ╚═╝  ╚═══╝  ╚══════╝╚═╝  ╚═╝

                                                                   Version:  v3.8.0  

1. 检查配置文件
配置文件位置: /opt/jumpserver/config
/opt/jumpserver/config/config.txt        []
/opt/jumpserver/config/nginx/cert/server.crt     []
/opt/jumpserver/config/nginx/cert/server.key     []
完成

>>> 安装配置 Docker
1. 安装 Docker
开始下载 Docker 程序 ...
开始下载 Docker Compose 程序 ...
完成

2. 配置 Docker
是否需要支持 IPv6? (y/n)  (默认为 n): 完成

3. 启动 Docker
Created symlink /etc/systemd/system/multi-user.target.wants/docker.service → /etc/systemd/system/docker.service.
完成

>>> 加载 Docker 镜像
[jumpserver/kael:v3.8.0] pulling
[jumpserver/web:v3.8.0] pulling
[jumpserver/koko:v3.8.0] pulling
[jumpserver/core:v3.8.0] pulling
[jumpserver/mariadb:10.6] pulling
[jumpserver/redis:6.2] pulling
[jumpserver/magnus:v3.8.0] pulling
[jumpserver/chen:v3.8.0] pulling
[jumpserver/lion:v3.8.0] pulling
10.6: Pulling from jumpserver/mariadb
eaead16dc43b: Pulling fs layer 
4f6f4832182b: Pulling fs layer 
6eed3156c415: Pulling fs layer 
d1adc5c9f5ec: Waiting 
4f5e88c034ff: Waiting 
e09b3c602366: Waiting 
9896f95913b8: Waiting 
522ebe12904a: Waiting 
v3.8.0: Pulling from jumpserver/lion
99bf4787315b: Waiting 
eaacdd61c025: Waiting 
26d1da19b429: Waiting 
aa4a93627716: Waiting 
e42c672e047b: Waiting 
bcbcd1fe9fe0: Waiting 
3a7da7bf8a7c: Waiting 
b3634a6d92f0: Waiting 
bba4daab2e00: Waiting 
ed3d33e2d240: Waiting 
d534346c5f7b: Waiting 
e61d813b6ad0: Waiting 
v3.8.0: Pulling from jumpserver/kael
eaead16dc43b: Downloading [==========>                                        ]   5.88MB/28.58MB
eaead16dc43b: Downloading [============================>                      ]  16.14MB/28.58MB
eaead16dc43b: Downloading [==========================================>        ]   24.4MB/28.58MB
c40342aa95c2: Waiting 
5b1e577d1705: Waiting 
d1adc5c9f5ec: Download complete 
9b8a874e1e2d: Waiting 
4f4fb700ef54: Waiting 
v3.8.0: Pulling from jumpserver/chen
v3.8.0: Pulling from jumpserver/koko
3240fe174df9: Waiting 
ea2f9ac2eb39: Waiting 
eaead16dc43b: Extracting [>                                                  ]  294.9kB/28.58MB
d9e18c4120e1: Waiting 
6aedef56f24f: Waiting 
1f1a5cf5a065: Waiting 
7f41607db671: Waiting 
7689328b48f7: Waiting 
9896f95913b8: Download complete 
04f575d6fad5: Waiting 
e67fdae35593: Waiting 
eaead16dc43b: Extracting [==================================================>]  28.58MB/28.58MB
dfefa43f7ef9: Waiting 
eaead16dc43b: Pull complete 
4f6f4832182b: Extracting [==================================================>]  1.747kB/1.747kB
98153782a42c: Waiting 
4f6f4832182b: Pull complete 
6eed3156c415: Pull complete 
8127cd7d3437: Waiting 
v3.8.0: Pulling from jumpserver/magnus
v3.8.0: Pulling from jumpserver/core
6.2: Pulling from jumpserver/redis
v3.8.0: Pulling from jumpserver/web
e67fdae35593: Waiting 
321c8788e932: Waiting 
d1adc5c9f5ec: Extracting [==================================================>]     149B/149B
b573062c6e54: Waiting 
99bf4787315b: Extracting [=============================>                     ]  16.22MB/27.14MB
eaacdd61c025: Download complete 
e67fdae35593: e67fdae35593: e67fdae35593: e67fdae35593: Downloading [====================>                              ]  Downloading [====================>                              ]  12.72MB/31.42MB12.4MB/31.42MB
Downloading [====>                                              ]  2.949MB/31.42MB
e855c2f1475c: Waiting 
0668e0cb7eeb: Waiting 
99bf4787315b: Extracting [==================================================>]  27.14MB/27.14MB
4f5e88c034ff: Pull complete 
Downloading [=======================================>           ]  24.83MB/31.42MB4.83MB/31.42MB
e67fdae35593: Downloading [===========================>                       ]  16.98MB/31.42MB
Pull complete e67fdae35593: e67fdae35593: Pull complete 
Downloading [==========================================>        ]  26.47MB/31.42MB
981eb4eb4e29: Waiting 
0c8e33d32ad2: Waiting 
b23242c39ad3: Waiting 
e09b3c602366: Downloading [==================================>                ]  61.26MB/88.87MB
4f4fb700ef54: Waiting 
Extracting [==================================================>]  31.42MB/31.42MB=========>]  31.42MB/31.42MB
Extracting [=============>                                     ]  8.192MB/31.42MB          ]  8.192MB/31.42MB
e67fdae35593: Extracting [========================>                          ]   15.4MB/31.42MB
5dc251960c03: Waiting 
37ad762d263f: Waiting 
2056f85116ef: Waiting 
99bf4787315b: Pull complete 
eaacdd61c025: Pull complete 
26d1da19b429: Downloading [===============================================>   ]  27.65MB/29.4MB
Pull complete e67fdae35593: Pull complete 

Extracting [>                                                  ]  327.7kB/31.42MB27.7kB/31.42MB
26d1da19b429: Pull complete 
aa4a93627716: Pull complete 
e42c672e047b: Pull complete 
bcbcd1fe9fe0: Pull complete 
3a7da7bf8a7c: Pull complete 
ea2f9ac2eb39: Download complete 
e67fdae35593: Extracting [==================================================>]  31.42MB/31.42MB
d9e18c4120e1: Download complete 
3240fe174df9: Pull complete 
ea2f9ac2eb39: Pull complete 
72e611ef6cbd: Pull complete 
d9e18c4120e1: Pull complete 
b35f34aa20f0: Download complete 
1f1a5cf5a065: Pull complete 
076f765c5c0b: Pull complete 
dfefa43f7ef9: Pull complete 
321c8788e932: Pull complete 
1b50c537067e: Downloading [============================>                      ]  4.996MB/8.729MB
d409c959e473: Pull complete 
5dc251960c03: Pull complete 
37ad762d263f: Pull complete 
2056f85116ef: Pull complete 
65ee1d2786fa: Extracting [==================================================>]  1.405kB/1.405kB
272d660811bd: Download complete 
65ee1d2786fa: Pull complete 
cfd4a22d5220: Downloading [======>                                            ]  150.2MB/1.23GB
cfd4a22d5220: Downloading [======>                                            ]  156.1MB/1.23GB
272d660811bd: Pull complete 
4f4fb700ef54: Pull complete 
cfd4a22d5220: Pull complete 
4df962483fe2: Pull complete 
105d66cef279: Pull complete 
a0fc03463301: Pull complete 
222e61094282: Pull complete 
2fcb7dbc00dd: Pull complete 
92e2dfaefa5f: Pull complete 
b8b8d4e4ee39: Pull complete 
153510901956: Pull complete 
Digest: sha256:75204461f39f8d691e40768625c965d77969ea5cfeb48bf31bf0033bcb38636b
Status: Downloaded newer image for jumpserver/web:v3.8.0
docker.io/jumpserver/web:v3.8.0

完成

>>> 安装配置 JumpServer
1. 配置加密密钥
SECRETE_KEY:     ZmQ5NzQ1NzMtYTlmNS00YzA4LWIxNDQtN2EzMjZlMTc4Yzdk
BOOTSTRAP_TOKEN: ZmQ5NzQ1NzMtYTlmNS00YzA4
完成

2. 配置持久化目录
是否需要自定义持久化存储, 默认将使用目录 /data/jumpserver? (y/n)  (默认为 n): 完成

3. 配置 MySQL
是否使用外部 MySQL? (y/n)  (默认为 n): 完成

4. 配置 Redis
是否使用外部 Redis? (y/n)  (默认为 n): 完成

5. 配置外部访问
是否需要配置 JumpServer 对外访问端口? (y/n)  (默认为 n): n
完成

6. 初始化数据库
[+] Running 4/4
 ✔ Network jms_net      Created                                                                                      10.1s 
 ✔ Container jms_mysql  Started                                                                                       2.6s 
 ✔ Container jms_redis  Started                                                                                       2.4s 
 ✔ Container jms_core   Started                                                                                       3.0s 
2023-10-20 11:48:29 Collect static files
ALLOWED_HOSTS: 
  - localhost
  - core80
  - 127.0.0.1
  - 127.0.0.1:8080
  - 127.0.0.1:80
  - localhost:8080
  - localhost:80
  - core:8080
  - core:80
ALLOWED_HOSTS: 
  - localhost
  - core80
  - 127.0.0.1
  - 127.0.0.1:8080
  - 127.0.0.1:80
  - localhost:8080
  - localhost:80
  - core:8080
  - core:80
2023-10-20 11:48:31 Collect static files done
2023-10-20 11:48:31 Check database structure change ...
2023-10-20 11:48:31 Migrate model change to database ...
Operations to perform:
  Apply all migrations: accounts, acls, admin, applications, assets, audits, auth, authentication, captcha, common, contenttypes, django_cas_ng, django_celery_beat, notifications, ops, orgs, perms, rbac, sessions, settings, terminal, tickets, users
Running migrations:
  Applying contenttypes.0001_initial... OK
  Applying contenttypes.0002_remove_content_type_name... OK
  Applying auth.0001_initial... OK
  Applying auth.0002_alter_permission_name_max_length... OK
  Applying auth.0003_alter_user_email_max_length... OK
  Applying auth.0004_alter_user_username_opts... OK
  Applying auth.0005_alter_user_last_login_null... OK
  Applying auth.0006_require_contenttypes_0002... OK
  Applying auth.0007_alter_validators_add_error_messages... OK
  Applying auth.0008_alter_user_username_max_length... OK
  Applying users.0001_initial... OK
  Applying tickets.0001_initial... OK
  Applying tickets.0002_auto_20200728_1146... OK
  Applying tickets.0003_auto_20200804_1551... OK
  Applying tickets.0004_ticket_comment... OK
  Applying tickets.0005_ticket_meta_confirmed_system_users... OK
  Applying tickets.0006_auto_20201023_1628... OK
  Applying tickets.0007_auto_20201224_1821... OK
  Applying tickets.0008_auto_20210311_1113... OK
  Applying tickets.0009_auto_20210426_1720... OK
  Applying tickets.0010_auto_20210812_1618... OK
  Applying tickets.0011_remove_approvalrule_assignees_display... OK
  Applying terminal.0001_initial... OK
  Applying terminal.0002_auto_20171228_0025... OK
  Applying terminal.0003_auto_20171230_0308... OK
  Applying terminal.0004_session_remote_addr... OK
  Applying terminal.0005_auto_20180122_1154... OK
  Applying terminal.0006_auto_20180123_1037... OK
  Applying terminal.0007_session_date_last_active... OK
  Applying terminal.0008_auto_20180307_1603... OK
  Applying terminal.0009_auto_20180326_0957... OK
  Applying terminal.0010_auto_20180423_1140... OK
  Applying terminal.0011_auto_20180807_1116... OK
  Applying terminal.0012_auto_20180816_1652... OK
  Applying terminal.0013_auto_20181123_1113... OK
  Applying terminal.0014_auto_20181226_1441... OK
  Applying terminal.0015_auto_20190923_1529... OK
  Applying terminal.0016_commandstorage_replaystorage... OK
  Applying common.0001_initial... OK
  Applying common.0002_auto_20180111_1407... OK
  Applying common.0003_setting_category... OK
  Applying common.0004_setting_encrypted... OK
  Applying common.0005_auto_20190221_1902... OK
  Applying common.0006_auto_20190304_1515... OK
  Applying settings.0001_initial... OK
  Applying terminal.0017_auto_20191125_0931... OK
  Applying terminal.0018_auto_20191202_1010... OK
  Applying terminal.0019_auto_20191206_1000... OK
  Applying terminal.0020_auto_20191218_1721... OK
  Applying terminal.0021_auto_20200213_1316... OK
  Applying terminal.0022_session_is_success... OK
  Applying terminal.0023_command_risk_level... OK
  Applying terminal.0024_auto_20200715_1713... OK
  Applying terminal.0025_auto_20200810_1735... OK
  Applying terminal.0026_auto_20201027_1905... OK
  Applying terminal.0027_auto_20201102_1651... OK
  Applying terminal.0028_auto_20201110_1918... OK
  Applying terminal.0029_auto_20201116_1757... OK
  Applying terminal.0030_terminal_type... OK
  Applying terminal.0031_auto_20210113_1356... OK
  Applying terminal.0032_auto_20210302_1853... OK
  Applying terminal.0033_auto_20210324_1008... OK
  Applying terminal.0034_auto_20210406_1434... OK
  Applying terminal.0035_auto_20210517_1448... OK
  Applying terminal.0036_auto_20210604_1124... OK
  Applying terminal.0037_auto_20210623_1748... OK
  Applying terminal.0038_task_kwargs... OK
  Applying terminal.0039_auto_20210805_1552... OK
  Applying terminal.0040_sessionjoinrecord_sessionsharing... OK
  Applying terminal.0041_auto_20211105_1605... OK
  Applying terminal.0042_auto_20211229_1619... OK
  Applying tickets.0012_ticketsession... OK
  Applying tickets.0013_ticket_serial_num...
        Fill ticket serial number ... 
 OK
  Applying tickets.0014_auto_20220217_2135... OK
  Applying tickets.0015_superticket... OK
  Applying terminal.0043_auto_20220217_2135... OK
  Applying terminal.0044_auto_20220223_1539... OK
  Applying terminal.0045_auto_20220228_1144... OK
  Applying terminal.0046_auto_20220228_1744... OK
  Applying terminal.0047_auto_20220302_1951... OK
  Applying terminal.0048_endpoint_endpointrule... OK
  Applying terminal.0049_endpoint_redis_port... OK
  Applying users.0002_auto_20171225_1157_squashed_0019_auto_20190304_1459... OK
  Applying users.0020_auto_20190612_1825... OK
  Applying users.0021_auto_20190625_1104... OK
  Applying users.0022_auto_20190625_1105... OK
  Applying users.0023_auto_20190724_1525... OK
  Applying users.0024_auto_20191118_1612... OK
  Applying users.0025_auto_20200206_1216... OK
  Applying users.0026_auto_20200508_2105... OK
  Applying users.0027_auto_20200616_1503... OK
  Applying users.0028_auto_20200728_1805... OK
  Applying users.0029_auto_20200814_1650... OK
  Applying users.0030_auto_20200819_2041... OK
  Applying users.0031_auto_20201118_1801... OK
  Applying assets.0001_initial... OK
  Applying perms.0001_initial... OK
  Applying assets.0002_auto_20180105_1807_squashed_0009_auto_20180307_1212... OK
  Applying assets.0010_auto_20180307_1749_squashed_0019_auto_20180816_1320... OK
  Applying perms.0002_auto_20171228_0025_squashed_0009_auto_20180903_1132... OK
  Applying perms.0003_action... OK
  Applying perms.0004_assetpermission_actions... OK
  Applying assets.0020_auto_20180816_1652... OK
  Applying assets.0021_auto_20180903_1132... OK
  Applying assets.0022_auto_20181012_1717... OK
  Applying assets.0023_auto_20181016_1650... OK
  Applying assets.0024_auto_20181219_1614... OK
  Applying assets.0025_auto_20190221_1902... OK
  Applying assets.0026_auto_20190325_2035... OK
  Applying applications.0001_initial... OK
  Applying perms.0005_auto_20190521_1619... OK
  Applying perms.0006_auto_20190628_1921... OK
  Applying perms.0007_remove_assetpermission_actions... OK
  Applying perms.0008_auto_20190911_1907... OK
  Applying assets.0027_auto_20190521_1703... OK
  Applying assets.0028_protocol... OK
  Applying assets.0029_auto_20190522_1114... OK
  Applying assets.0030_auto_20190619_1135... OK
  Applying assets.0031_auto_20190621_1332... OK
  Applying assets.0032_auto_20190624_2108... OK
  Applying assets.0033_auto_20190624_2108... OK
  Applying assets.0034_auto_20190705_1348... OK
  Applying assets.0035_auto_20190711_2018... OK
  Applying assets.0036_auto_20190716_1535... OK
  Applying assets.0037_auto_20190724_2002... OK
  Applying assets.0038_auto_20190911_1634... OK
  Applying perms.0009_remoteapppermission_system_users... OK
  Applying assets.0039_authbook_is_active... OK
  Applying assets.0040_auto_20190917_2056... OK
  Applying assets.0041_gathereduser... OK
  Applying assets.0042_favoriteasset...
 OK
  Applying assets.0043_auto_20191114_1111... OK
  Applying assets.0044_platform... OK
  Applying assets.0045_auto_20191206_1607... OK
  Applying assets.0046_auto_20191218_1705... OK
  Applying applications.0002_remove_remoteapp_system_user... OK
  Applying applications.0003_auto_20191210_1659... OK
  Applying applications.0004_auto_20191218_1705... OK
  Applying perms.0010_auto_20191218_1705... OK
  Applying perms.0011_auto_20200721_1739... OK
  Applying assets.0047_assetuser... OK
  Applying assets.0048_auto_20191230_1512... OK
  Applying assets.0049_systemuser_sftp_root... OK
  Applying assets.0050_auto_20200711_1740... OK
  Applying assets.0051_auto_20200713_1143... OK
  Applying assets.0052_auto_20200715_1535... OK
  Applying assets.0053_auto_20200723_1232... OK
  Applying assets.0054_auto_20200807_1032... OK
  Applying applications.0005_k8sapp... OK
  Applying perms.0012_k8sapppermission... OK
  Applying assets.0055_auto_20200811_1845... OK
  Applying assets.0056_auto_20200904_1751... OK
  Applying assets.0057_fill_node_value_assets_amount_and_parent_key...

  ................................................................. OK
  Applying perms.0013_rebuildusertreetask_usergrantedmappingnode... OK
  Applying perms.0014_build_users_perm_tree... OK
  Applying perms.0015_auto_20200929_1728... OK
  Applying assets.0058_auto_20201023_1115... OK
  Applying assets.0059_auto_20201027_1905... OK
  Applying applications.0006_application... OK
  Applying perms.0016_applicationpermission... OK
  Applying perms.0017_auto_20210104_0435... OK
  Applying assets.0060_node_full_value...
        - Start migrate node value if has /

        - Start migrate node full value
 OK
  Applying assets.0061_auto_20201116_1757... OK
  Applying assets.0062_auto_20201117_1938... OK
  Applying assets.0063_migrate_default_node_key...
Check old default node `key=0 value=Default` not exists
 OK
  Applying assets.0064_auto_20201203_1100... OK
  Applying assets.0065_auto_20210121_1549... OK
  Applying perms.0018_auto_20210208_1515... OK
  Applying orgs.0001_initial... OK
  Applying orgs.0002_auto_20180903_1132... OK
  Applying orgs.0003_auto_20190916_1057... OK
  Applying orgs.0004_organizationmember... OK
  Applying orgs.0005_auto_20200721_1937... OK
  Applying orgs.0006_auto_20200721_1937... OK
  Applying orgs.0007_auto_20200728_1805... OK
  Applying orgs.0008_auto_20200819_2041... OK
  Applying orgs.0009_auto_20201023_1628... OK
  Applying ops.0001_initial... OK
  Applying ops.0002_celerytask... OK
  Applying ops.0003_auto_20181207_1744... OK
  Applying ops.0004_adhoc_run_as... OK
  Applying ops.0005_auto_20181219_1807... OK
  Applying ops.0006_auto_20190318_1023... OK
  Applying ops.0007_auto_20190724_2002... OK
  Applying ops.0008_auto_20190919_2100... OK
  Applying ops.0009_auto_20191217_1713... OK
  Applying ops.0010_auto_20191217_1758... OK
  Applying ops.0011_auto_20200106_1534... OK
  Applying ops.0012_auto_20200108_1659... OK
  Applying ops.0013_auto_20200108_1706... OK
  Applying ops.0014_auto_20200108_1749... OK
  Applying ops.0015_auto_20200108_1809... OK
  Applying ops.0016_commandexecution_org_id... OK
  Applying ops.0017_auto_20200306_1747... OK
  Applying ops.0018_auto_20200509_1434... OK
  Applying ops.0019_adhocexecution_celery_task_id... OK
  Applying audits.0001_initial... OK
  Applying audits.0002_ftplog_org_id... OK
  Applying audits.0003_auto_20180816_1652... OK
  Applying audits.0004_operatelog_passwordchangelog_userloginlog... OK
  Applying audits.0005_auto_20190228_1715... OK
  Applying audits.0006_auto_20190726_1753... OK
  Applying audits.0007_auto_20191202_1010... OK
  Applying audits.0008_auto_20200508_2105... OK
  Applying audits.0009_auto_20200624_1654... OK
  Applying audits.0010_auto_20200811_1122... OK
  Applying audits.0011_userloginlog_backend... OK
  Applying assets.0066_auto_20210208_1802... OK
  Applying applications.0007_auto_20201119_1110... OK
  Applying applications.0008_auto_20210104_0435... OK
  Applying orgs.0010_auto_20210219_1241...
        Migrate model org id: Application       done, use 0.98 ms
        Migrate model org id: AdminUser done, use 0.75 ms
        Migrate model org id: Asset     done, use 0.64 ms
        Migrate model org id: AuthBook  done, use 0.72 ms
        Migrate model org id: CommandFilter     done, use 0.5 ms
        Migrate model org id: CommandFilterRule done, use 0.56 ms
        Migrate model org id: Domain    done, use 1.02 ms
        Migrate model org id: Gateway   done, use 0.74 ms
        Migrate model org id: GatheredUser      done, use 0.69 ms
        Migrate model org id: Label     done, use 0.48 ms
        Migrate model org id: Node      done, use 0.47 ms
        Migrate model org id: SystemUser        done, use 0.55 ms
        Migrate model org id: FTPLog    done, use 0.74 ms
        Migrate model org id: OperateLog        done, use 0.54 ms
        Migrate model org id: AdHoc     done, use 0.4 ms
        Migrate model org id: AdHocExecution    done, use 0.52 ms
        Migrate model org id: CommandExecution  done, use 0.46 ms
        Migrate model org id: Task      done, use 37.51 ms
        Migrate model org id: ApplicationPermission     done, use 0.88 ms
        Migrate model org id: AssetPermission   done, use 0.55 ms
        Migrate model org id: UserAssetGrantedTreeNodeRelation  done, use 0.53 ms
        Migrate model org id: Session   done, use 0.5 ms
        Migrate model org id: Command   done, use 0.51 ms
        Migrate model org id: Ticket    done, use 0.43 ms
        Migrate model org id: UserGroup done, use 0.51 ms
        Will add users to default org: 1
          Add users to default org: 1-1
        done, use 2.39 ms
 OK
  Applying assets.0067_auto_20210311_1113... OK
  Applying assets.0068_auto_20210312_1455... OK
  Applying assets.0069_change_node_key0_to_key1...
--> Not exist key=0 nodes, do nothing.
 OK
  Applying assets.0070_auto_20210426_1515... OK
  Applying assets.0071_systemuser_type...
 OK
  Applying assets.0072_historicalauthbook...
 OK
  Applying assets.0073_auto_20210606_1142...

 OK
  Applying assets.0074_remove_systemuser_assets... OK
  Applying assets.0075_auto_20210705_1759... OK
  Applying assets.0076_delete_assetuser... OK
  Applying assets.0077_auto_20211012_1642... OK
  Applying assets.0078_auto_20211014_2209... OK
  Applying assets.0079_auto_20211102_1922... OK
  Applying assets.0080_auto_20211104_1347... OK
  Applying assets.0081_auto_20211105_1605... OK
  Applying applications.0009_applicationuser... OK
  Applying applications.0010_appaccount_historicalappaccount... OK
  Applying applications.0011_auto_20210826_1759... OK
  Applying applications.0012_auto_20211014_2209... OK
  Applying applications.0013_auto_20211026_1711... OK
  Applying applications.0014_auto_20211105_1605... OK
  Applying assets.0082_auto_20211209_1440... OK
  Applying assets.0083_auto_20211215_1436... OK
  Applying assets.0084_auto_20220112_1959... OK
  Applying assets.0085_commandfilterrule_ignore_case... OK
  Applying assets.0086_auto_20220217_2135... OK
  Applying assets.0087_auto_20220223_1539... OK
  Applying assets.0088_auto_20220303_1612... OK
  Applying assets.0089_auto_20220310_0616... OK
  Applying assets.0090_auto_20220412_1145... OK
  Applying applications.0015_auto_20220112_2035... OK
  Applying applications.0016_auto_20220118_1455... OK
  Applying applications.0017_auto_20220217_2135... OK
  Applying applications.0018_auto_20220223_1539... OK
  Applying applications.0019_auto_20220310_1853... OK
  Applying applications.0020_auto_20220316_2028... OK
  Applying tickets.0016_auto_20220609_1758... OK
  Applying tickets.0017_auto_20220623_1027... OK
  Applying tickets.0018_applyapplicationticket_apply_actions... OK
  Applying tickets.0019_delete_applyapplicationticket... OK
  Applying tickets.0020_auto_20220817_1346...
  Start migrate system user to account
          - migrate 'ApplyAssetTicket'
          - migrate 'ApplyCommandTicket'
          - migrate 'ApplyLoginAssetTicket'
 OK
  Applying tickets.0021_auto_20220921_1814... OK
  Applying tickets.0022_alter_applyassetticket_apply_actions... OK
  Applying tickets.0023_alter_applyassetticket_apply_actions... OK
  Applying tickets.0024_auto_20221121_1800... OK
  Applying authentication.0001_initial... OK
  Applying authentication.0002_auto_20190729_1423... OK
  Applying authentication.0003_loginconfirmsetting... OK
  Applying authentication.0004_ssotoken... OK
  Applying acls.0001_initial... OK
  Applying acls.0002_auto_20210926_1047... OK
  Applying acls.0003_auto_20211130_1037... OK
  Applying acls.0004_auto_20220831_1658... OK
  Applying acls.0005_auto_20221201_1846... OK
  Applying acls.0006_commandfilteracl_commandgroup... OK
  Applying acls.0007_auto_20221202_1048... OK
  Applying acls.0008_commandgroup_comment... OK
  Applying tickets.0025_auto_20221206_1820... OK
  Applying assets.0091_auto_20220629_1826... OK
  Applying assets.0092_commandfilter_nodes... OK
  Applying assets.0093_auto_20220403_1627... OK
  Applying assets.0094_auto_20220402_1736... OK
  Applying assets.0095_auto_20220407_1726... OK
  Applying assets.0096_auto_20220426_1550... OK
  Applying assets.0097_auto_20220426_1558...    - Update platform: Windows2016
        - Update platform: Other
 OK
  Applying assets.0098_auto_20220430_2126...

        - Migrate ori host to device:  0
 OK
  Applying assets.0099_auto_20220711_1409...
        Start migrate asset protocols
 OK
  Applying accounts.0001_initial... OK
  Applying assets.0100_auto_20220711_1413...
        Start migrate asset accounts

        Start migrate app accounts
 OK
  Applying assets.0101_auto_20220811_1511... OK
  Applying assets.0102_auto_20220816_1022...
        Start migrate command filters to assets
 OK
  Applying assets.0103_auto_20220902_1021...>>> migrate gateway to asset
>>> migrate gateway to account
 OK
  Applying assets.0104_auto_20220817_1544... OK
  Applying assets.0105_auto_20221220_1956... OK
  Applying assets.0106_auto_20221228_1838... OK
  Applying assets.0107_automation... OK
  Applying assets.0108_alter_platform_charset... OK
  Applying assets.0109_alter_asset_options... OK
  Applying assets.0110_auto_20230315_1741... OK
  Applying assets.0111_auto_20230321_1633... OK
  Applying assets.0112_auto_20230404_1631... OK
  Applying assets.0113_auto_20230411_1917...
Migrate platform su method: Cisco
Migrate platform su method: H3C
Migrate platform su method: Huawei
 OK
  Applying assets.0114_baseautomation_params... OK
  Applying assets.0115_auto_20230417_1425... OK
  Applying assets.0116_auto_20230418_1726... OK
  Applying assets.0117_alter_baseautomation_params... OK
  Applying assets.0118_auto_20230524_1647... OK
  Applying assets.0119_assets_add_default_node... OK
  Applying assets.0120_auto_20230630_1613... OK
  Applying assets.0121_auto_20230725_1458...
Platform add sftp protocol: 
 - Linux
 - Gateway

Asset add sftp protocol: 
Not found telnet regex setting, skip
 OK
  Applying assets.0122_auto_20230803_1553... OK
  Applying accounts.0002_auto_20220616_0021... OK
  Applying accounts.0003_automation... OK
  Applying accounts.0004_auto_20230106_1507... OK
  Applying accounts.0005_alter_changesecretrecord_options... OK
  Applying accounts.0006_gatheredaccount... OK
  Applying accounts.0007_alter_account_options... OK
  Applying accounts.0008_alter_gatheredaccount_options... OK
  Applying accounts.0009_account_usernames_to_ids... OK
  Applying accounts.0010_gatheraccountsautomation_is_sync_account... OK
  Applying accounts.0011_auto_20230506_1443... OK
  Applying accounts.0012_auto_20230621_1456... OK
  Applying accounts.0013_account_backup_recipients... OK
  Applying accounts.0014_virtualaccount... OK
  Applying accounts.0015_auto_20230825_1120... OK
  Applying accounts.0016_accounttemplate_password_rules... OK
  Applying acls.0009_auto_20221220_1956... OK
  Applying acls.0010_alter_commandfilteracl_command_groups... OK
  Applying acls.0011_auto_20230425_1704... OK
  Applying acls.0012_auto_20230426_1111... OK
  Applying acls.0013_auto_20230426_1759... OK
  Applying acls.0014_loginassetacl_rules... OK
  Applying acls.0015_connectmethodacl... OK
  Applying acls.0016_auto_20230606_1857... OK
  Applying acls.0017_alter_connectmethodacl_options... OK
  Applying acls.0018_alter_commandfilteracl_command_groups... OK
  Applying admin.0001_initial... OK
  Applying admin.0002_logentry_remove_auto_add... OK
  Applying admin.0003_logentry_add_action_flag_choices... OK
  Applying perms.0019_auto_20210906_1044... OK
  Applying perms.0020_auto_20210910_1103... OK
  Applying perms.0021_auto_20211105_1605... OK
  Applying perms.0022_applicationpermission_actions... OK
  Applying perms.0023_auto_20220112_2035... OK
  Applying perms.0024_auto_20220217_2135... OK
  Applying perms.0025_auto_20220223_1539... OK
  Applying perms.0026_auto_20220307_1500... OK
  Applying perms.0027_auto_20220310_1802... OK
  Applying perms.0028_auto_20220316_2028... OK
  Applying perms.0029_auto_20220728_1728... OK
  Applying perms.0030_auto_20220816_1132... OK
  Applying perms.0031_auto_20220816_1600... OK
  Applying ops.0020_adhoc_run_system_user... OK
  Applying ops.0021_auto_20211130_1037... OK
  Applying ops.0022_auto_20220817_1346... OK
  Applying applications.0021_auto_20220629_1826... OK
  Applying applications.0022_auto_20220714_1046... OK
  Applying applications.0023_auto_20220715_1556... OK
  Applying applications.0024_alter_application_type... OK
  Applying applications.0025_auto_20220817_1346... OK
  Applying applications.0026_auto_20220817_1716... OK
  Applying applications.0027_auto_20221220_1956... OK
  Applying assets.0123_device_automation_ansible_enabled... OK
  Applying assets.0124_auto_20231007_1437... OK
  Applying assets.0125_auto_20231011_1053... OK
  Applying ops.0023_auto_20220912_0021... OK
  Applying audits.0012_auto_20210414_1443... OK
  Applying audits.0013_auto_20211130_1037... OK
  Applying audits.0014_auto_20220505_1902... OK
  Applying audits.0015_auto_20221011_1745... OK
  Applying audits.0016_auto_20221111_1919... OK
  Applying audits.0017_auto_20221220_1757... OK
  Applying audits.0018_operatelog_resource_id... OK
  Applying audits.0019_alter_operatelog_options... OK
  Applying audits.0020_auto_20230117_1004... OK
  Applying audits.0021_auto_20230207_0857... OK
  Applying audits.0022_auto_20230605_1555... OK
  Applying audits.0023_auto_20230906_1322... OK
  Applying audits.0024_usersession... OK
  Applying audits.0025_remove_usersession_date_expired... OK
  Applying auth.0009_alter_user_last_name_max_length... OK
  Applying auth.0010_alter_group_name_max_length... OK
  Applying auth.0011_update_proxy_permissions... OK
  Applying auth.0012_alter_user_first_name_max_length... OK
  Applying tickets.0026_auto_20221220_1956... OK
  Applying tickets.0027_alter_applycommandticket_apply_run_account... OK
  Applying tickets.0028_remove_app_tickets... OK
  Applying authentication.0005_delete_loginconfirmsetting... OK
  Applying authentication.0006_auto_20211227_1059... OK
  Applying authentication.0007_connectiontoken... OK
  Applying authentication.0008_superconnectiontoken... OK
  Applying authentication.0009_auto_20220310_0616... OK
  Applying authentication.0010_temptoken... OK
  Applying authentication.0011_auto_20220705_1940... OK
  Applying authentication.0012_auto_20220816_1629... OK
  Applying authentication.0013_connectiontoken_protocol... OK
  Applying authentication.0014_auto_20221122_2152... OK
  Applying authentication.0015_auto_20221205_1136... OK
  Applying authentication.0016_auto_20221220_1956... OK
  Applying authentication.0017_auto_20230105_1743...
 OK
  Applying authentication.0018_alter_connectiontoken_input_secret... OK
  Applying authentication.0019_connectiontoken_is_reusable... OK
  Applying authentication.0020_connectiontoken_connect_options... OK
  Applying authentication.0021_auto_20230713_1459... OK
  Applying authentication.0022_passkey... OK
  Applying authentication.0023_auto_20231010_1101... OK
  Applying captcha.0001_initial... OK
  Applying captcha.0002_alter_captchastore_id... OK
  Applying django_cas_ng.0001_initial... OK
  Applying django_cas_ng.0002_auto_20201023_1400... OK
  Applying django_cas_ng.0003_auto_20210813_1226... OK
  Applying django_celery_beat.0001_initial... OK
  Applying django_celery_beat.0002_auto_20161118_0346... OK
  Applying django_celery_beat.0003_auto_20161209_0049... OK
  Applying django_celery_beat.0004_auto_20170221_0000... OK
  Applying django_celery_beat.0005_add_solarschedule_events_choices... OK
  Applying django_celery_beat.0006_auto_20180322_0932... OK
  Applying django_celery_beat.0007_auto_20180521_0826... OK
  Applying django_celery_beat.0008_auto_20180914_1922... OK
  Applying django_celery_beat.0006_auto_20180210_1226... OK
  Applying django_celery_beat.0006_periodictask_priority... OK
  Applying django_celery_beat.0009_periodictask_headers... OK
  Applying django_celery_beat.0010_auto_20190429_0326... OK
  Applying django_celery_beat.0011_auto_20190508_0153... OK
  Applying django_celery_beat.0012_periodictask_expire_seconds... OK
  Applying django_celery_beat.0013_auto_20200609_0727... OK
  Applying django_celery_beat.0014_remove_clockedschedule_enabled... OK
  Applying django_celery_beat.0015_edit_solarschedule_events_choices... OK
  Applying django_celery_beat.0016_alter_crontabschedule_timezone... OK
  Applying django_celery_beat.0017_alter_crontabschedule_month_of_year... OK
  Applying django_celery_beat.0018_improve_crontab_helptext... OK
  Applying users.0032_userpasswordhistory... OK
  Applying users.0033_user_need_update_password... OK
  Applying users.0034_auto_20210506_1448... OK
  Applying users.0035_auto_20210526_1100... OK
  Applying users.0036_user_feishu_id... OK
  Applying users.0037_user_secret_key... OK
  Applying users.0038_auto_20211209_1140... OK
  Applying users.0039_auto_20211229_1852... OK
  Applying users.0040_alter_user_source... OK
  Applying users.0041_auto_20221220_1956... OK
  Applying notifications.0001_initial... OK
  Applying notifications.0002_auto_20210909_1946...
        Init user message subscription: 1
 OK
  Applying notifications.0003_auto_20221220_1956... OK
  Applying notifications.0004_auto_20230201_1614... OK
  Applying ops.0024_alter_celerytask_date_last_publish... OK
  Applying ops.0025_auto_20230413_1531... OK
  Applying ops.0026_auto_20230810_1039... OK
  Applying ops.0027_alter_celerytaskexecution_options... OK
  Applying rbac.0001_initial... OK
  Applying rbac.0002_auto_20210929_1409... OK
  Applying rbac.0003_auto_20211130_1037...  - Update builtin roles
    - Update: SystemAdmin - True
    - Update: SystemAuditor - True
    - Update: SystemComponent - True
    - Update: User - True
    - Update: OrgAdmin - True
    - Update: OrgAuditor - True
    - Update: OrgUser - True
 OK
  Applying rbac.0004_auto_20211201_1901...
        Create role binding: 0-1 using: 0.58s
        Create role binding: 0-1 using: 0.00s
 OK
  Applying orgs.0011_auto_20211223_1913... OK
  Applying orgs.0012_auto_20220118_1054... OK
  Applying orgs.0013_alter_organization_options... OK
  Applying orgs.0014_organization_builtin... OK
  Applying orgs.0015_auto_20221220_1956... OK
  Applying perms.0032_auto_20221111_1919... OK
  Applying perms.0033_auto_20221220_1956... OK
  Applying perms.0034_auto_20230525_1734... OK
  Applying rbac.0005_auto_20220307_1524... OK
  Applying rbac.0006_auto_20220310_0616... OK
  Applying rbac.0007_auto_20220314_1525... OK
  Applying rbac.0008_auto_20220411_1709... OK
  Applying rbac.0009_auto_20220411_1724... OK
  Applying rbac.0010_auto_20221220_1956... OK
  Applying rbac.0011_remove_redundant_permission... OK
  Applying sessions.0001_initial... OK
  Applying settings.0002_auto_20210729_1546... OK
  Applying settings.0003_auto_20210901_1035... OK
  Applying settings.0004_auto_20220211_1401... OK
  Applying settings.0005_auto_20220310_0616... OK
  Applying settings.0006_remove_setting_enabled... OK
  Applying settings.0007_migrate_ldap_sync_org_ids... OK
  Applying settings.0008_alter_setting_options... OK
  Applying settings.0009_alter_cas_username_attribute... OK
  Applying settings.0010_alter_setting_options... OK
  Applying terminal.0050_auto_20220606_1745... OK
  Applying terminal.0051_sessionsharing_users... OK
  Applying terminal.0052_auto_20220713_1417... OK
  Applying terminal.0053_auto_20221009_1755... OK
  Applying terminal.0054_auto_20221027_1125... OK
  Applying terminal.0055_auto_20221228_1804... OK
  Applying terminal.0056_auto_20221228_1808... OK
  Applying terminal.0057_auto_20230109_1447... OK
  Applying terminal.0058_auto_20230110_1445... OK
  Applying terminal.0059_session_account_id... OK
  Applying terminal.0060_sessionsharing_action_permission... OK
  Applying terminal.0061_applet_can_concurrent... OK
  Applying terminal.0062_applet_edition... OK
  Applying terminal.0063_auto_20230621_1133... OK
  Applying terminal.0064_auto_20230728_1001... OK
  Applying terminal.0065_session_error_reason... OK
  Applying tickets.0029_auto_20230110_1445... OK
  Applying users.0042_auto_20230203_1201... OK
  Applying users.0043_remove_user_secret_key_preference... OK
  Applying users.0044_usersession... OK
  Applying users.0045_delete_usersession... OK
  Applying users.0046_auto_20230927_1456... OK
  Applying users.0047_user_date_api_key_last_used... OK
  Applying users.0048_wechat_phone_encrypt... OK

After migration, update builtin role permissions
  - Update builtin roles
完成

>>> 安装完成了
1. 可以使用如下命令启动, 然后访问
cd /opt/jumpserver-installer-v3.8.0
./jmsctl.sh start

2. 其它一些管理命令
./jmsctl.sh stop
./jmsctl.sh restart
./jmsctl.sh backup
./jmsctl.sh upgrade
更多还有一些命令, 你可以 ./jmsctl.sh --help 来了解

3. Web 访问
http://172.25.41.89:80
默认用户: admin  默认密码: admin

4. SSH/SFTP 访问
ssh -p2222 admin@172.25.41.89
sftp -P2222 admin@172.25.41.89

5. 更多信息
我们的官网: https://www.jumpserver.org/
我们的文档: https://docs.jumpserver.org/

[+] Running 10/10
 ✔ Container jms_lion    Started                                                                                      5.2s 
 ✔ Container jms_koko    Started                                                                                      4.1s 
 ✔ Container jms_chen    Started                                                                                      5.2s 
 ✔ Container jms_kael    Started                                                                                      3.7s 
 ✔ Container jms_web     Started                                                                                      3.6s 
 ✔ Container jms_magnus  Started                                                                                      3.7s 
 ✔ Container jms_celery  Started                                                                                      2.6s 
 ✔ Container jms_redis   Running                                                                                      0.0s 
 ✔ Container jms_mysql   Running                                                                                      0.0s 
 ✔ Container jms_core    Started                                                                                      6.0s 

通过上面的安装信息,我们了解到此时 Linux 环境已经安装 Docker 容器,并使用该容器成功运行了 JumpServer 堡垒机。

查看 Docker 版本信息:

docker version

docker-version

此处我们查看 JumpServer 相关的 images 镜像列表:

[root@JumpServer ~]# docker image ls
REPOSITORY           TAG       IMAGE ID       CREATED         SIZE
jumpserver/redis     6.2       6408abc40b2a   14 hours ago    106MB
jumpserver/web       v3.8.0    7bc18906aaee   18 hours ago    1.49GB
jumpserver/chen      v3.8.0    2e56502c628f   18 hours ago    576MB
jumpserver/koko      v3.8.0    8f0ae6fc7123   18 hours ago    1.06GB
jumpserver/kael      v3.8.0    a09b75b98f60   18 hours ago    278MB
jumpserver/lion      v3.8.0    f56740becf33   18 hours ago    237MB
jumpserver/core      v3.8.0    78d73be6070f   18 hours ago    1.57GB
jumpserver/magnus    v3.8.0    dbc25d9904b8   18 hours ago    157MB
jumpserver/mariadb   10.6      aac2cf878de9   10 months ago   405MB

验证安装

访问部署的 JumpServer 堡垒机:

>>> 安装完成了
1. 可以使用如下命令启动, 然后访问
cd /opt/jumpserver-installer-v3.8.0
./jmsctl.sh start

2. 其它一些管理命令
./jmsctl.sh stop
./jmsctl.sh restart
./jmsctl.sh backup
./jmsctl.sh upgrade
更多还有一些命令, 你可以 ./jmsctl.sh --help 来了解

3. Web 访问
http://172.25.41.89:80
默认用户: admin  默认密码: admin

4. SSH/SFTP 访问
ssh -p2222 admin@172.25.41.89
sftp -P2222 admin@172.25.41.89

5. 更多信息
我们的官网: https://www.jumpserver.org/
我们的文档: https://docs.jumpserver.org/

浏览器输入地址 http://172.25.41.89:80,显示页面如下:

jumpserver-login

首次登录进入后,会要求修改初始密码,修改后继续登录,进入页面显示如下:

jumpserver-dashboard

本文来自互联网用户投稿,该文观点仅代表作者本人,不代表本站立场。本站仅提供信息存储空间服务,不拥有所有权,不承担相关法律责任。如若转载,请注明出处:http://www.coloradmin.cn/o/1114811.html

如若内容造成侵权/违法违规/事实不符,请联系多彩编程网进行投诉反馈,一经查实,立即删除!

相关文章

上万份订单里,读懂中国互联网企业ESG

【潮汐商业评论/原创】 “残障到底意味着什么&#xff1f;”知乎上有个高赞回答提到&#xff0c;对于大多数残障者而言&#xff0c;他们和家人鼓足了干劲、费劲了心思&#xff0c;只为过上“正常的生活”。 但我们可曾想过&#xff1a;这个世界有没有一开始就准备好接纳所有降…

记一次TheadLocal使用方式不正确导致内存泄漏问题的排查和修复过程

一、背景 一个部门其他同事的上线了很久的项目近期频繁的内存溢出——几乎每天内存溢出一次&#xff0c;而且频率越来越高。在添加了进程守护之后&#xff0c;虽然可以在内存溢出后自动重启&#xff0c;但并没有解决内存溢出的问题。不甘其扰之后&#xff0c;决定仔细排查导致内…

C++string的模拟实现

CSDN的uu们&#xff0c;大家好。这里是C入门的第十六讲。 座右铭&#xff1a;前路坎坷&#xff0c;披荆斩棘&#xff0c;扶摇直上。 博客主页&#xff1a; 姬如祎 收录专栏&#xff1a;C专题 目录 1. string类的成员变量 2. 构造函数 3. 析构函数 4. const char* c_str(…

ESP32网络开发实例-连接信号最强的热点

连接信号最强的热点 文章目录 连接信号最强的热点1、软件准备2、硬件准备3、代码实现在本文中,将向您展示如何使用 ESP32 WiFiMulti 库。 这使我们能够使用多个网络,ESP32 可以连接到列表中可用的最强 WiFi 网络。 每当它失去连接时,它都会重新连接到列表中下一个最强的网络…

数据结构-----图(Graph)论必知必会知识

目录 前言 图的基本概念 1.什么是图&#xff1f; 2 .图的相关术语 3 .有向图和无向图 4.简单图和多重图 5.连通图、强连通图、非连通图 6.权与网 7.子图和(强)连通分量 8.生成树和生成森林 前言 今天我们学习一种新的数据结构-----图&#xff0c;大家在日常生活中经常都…

KingBase用户与角色及对象访问权限(Kylin)

用户与角色 角色的概念 将一组具有相同权限的用户组织在一起&#xff0c;这一组具有相同权限的用户就称为角色&#xff08;Role&#xff09;角色在生产系统中一般被视为用户组&#xff0c;利用角色对用户进行批量授权 创建用户角色 CREATE USER name WITH [option]授予权限…

理解内存,让Android性能没有问题

内存优化一直是一个很重要但却缺乏关注的点&#xff0c;内存作为程序运行最重要的资源之一&#xff0c;需要运行过程中做到合理的资源分配与回收&#xff0c;不合理的内存占用轻则使得用户应用程序运行卡顿、ANR、黑屏&#xff0c;重则导致用户应用程序发生 OOM&#xff08;out…

Sarscape5.6版本中导入外部控制点、写入精密轨道文件与GACOS用于大气相位

SARscape中导入外部GCP点用于轨道精炼 https://www.cnblogs.com/enviidl/p/16524645.html在SAR处理时&#xff0c;有时会加入GCP点文件&#xff0c;SAR处理中用到的控制点分为两类&#xff1a;用于校正地理位置的几何控制点&#xff08;Geometry GCP&#xff09;和用于轨道精炼…

C++类和对象(三) (this指针)

this指针 1 this指针的引出 我们先来定义一个日期类 Date class Date { public:void Init(int year, int month, int day){_year year;_month month;_day day;}void Print(){cout << _year << "-" << _month << "-" << …

【电子通识】USB接口三大类型图册

基本概念 不同时期的USB接口有不同的类型&#xff0c;USB接口分为插头和插座&#xff1a; 插头&#xff0c;plug&#xff0c;对应的也叫公口&#xff0c;即插别人的。 插座&#xff0c;receptacle&#xff0c;对应也叫做母口&#xff0c;即被插的。 USB的接口类型&#xff0…

《动手学深度学习 Pytorch版》 9.6 编码器-解码器架构

为了处理这种长度可变的输入和输出&#xff0c; 可以设计一个包含两个主要组件的编码器-解码器&#xff08;encoder-decoder&#xff09;架构&#xff1a; 编码器&#xff08;encoder&#xff09;&#xff1a;它接受一个长度可变的序列作为输入&#xff0c;并将其转换为具有固定…

模拟器-雷电-使用adb push或adb pull操作文件

一、环境 windows 10 雷电模拟器4.0.83 二、问题 有时候我们会需要往模拟器拷贝文件或者复制文件到我的电脑 三、方法 1、获取root权限 adb root adb remount 有可能遇到【daemon not running; starting now at tcp:5037】的报错 查看端口占用进程&#xff1a;netstat -…

vue2升级到vue2.7

vue2升级到vue2.7 小小的改进,大大的提升 只需要简单修改,开发体验得到大大提升. 为什么要升级Vue2.7 不能拒绝的理由: 组合式 API(解决mixins问题:命名冲突,隐式依赖)单文件组件内的 <script setup>语法模板表达式中支持 ESNext 语法(可选链:?.、空值合并:??)单文…

域渗透05-协议(NTLM)

前言&#xff1a; 首先在域内环境中主要有如下6种身份认证协议&#xff0c;最常用的还是Kerberos&#xff0c;NTLM和LDAP三种&#xff1a; Kerberos&#xff1a;Kerberos是一种网络身份验证协议&#xff0c;用于验证用户和服务之间的身份。它通过使用票据和密钥来实现认证&…

Linux 指令学习

Linux 指令学习 以此为记录&#xff0c;也方便自己日后查看回顾&#xff01; Linux命令基础格式 无论是什么命令&#xff0c;用于什么用途&#xff0c;在Linux中&#xff0c;命令有其通用的格式&#xff1a; command&#xff1a; 命令本身 options&#xff1a;[可选&#xf…

AD9371 官方例程

文章目录 前言一、HDL方面1. ZYNQ 核根据ZCU106平台修改&#xff08;**参考UG1244 ZCU106 Evaluation Board**&#xff09;&#xff0c;尤其注意**DDR**的配置&#xff08;**参考美光 MTA4ATF51264HZ**&#xff09;2.dacfifo 深度 要修改 &#xff0c;地址位宽 小于等于16&…

Windows 11 2023 Moment 4 更新内容详解

Windows 11 2023 Moment 4 更新内容详解 编辑&#xff1a;简简单单 Online zuozuo 地址&#xff1a;https://blog.csdn.net/qq_15071263 前言 主要的更新内容清单 Copilot内置应用资源管理器照片应用截图工具画图与视频剪辑Windows 备份系统界面开始菜单快速设置系统托盘任务…

【python】进程和线程

进程和线程 今天我们使用的计算机早已进入多CPU或多核时代&#xff0c;而我们使用的操作系统都是支持“多任务”的操作系统&#xff0c;这使得我们可以同时运行多个程序&#xff0c;也可以将一个程序分解为若干个相对独立的子任务&#xff0c;让多个子任务并发的执行&#xff…

优测云测试平台 | 有效的单元测试

一、前言 本文作者提出了一种评价单元测试用例的质量的思路&#xff0c;即判断用例是否达到测试的“四大目标”。掌握识别好的用例的能力&#xff0c;可以帮助我们高效地写出高质量的测试用例。 评判冰箱的好坏&#xff0c;并不需要有制造一台冰箱的能力。在开始写测试用例之…

TikTok Shop印尼站关停,跨境卖家该如何自救

10.4日&#xff0c;TikTok Shop宣布关停印尼站&#xff0c;无疑是一个巨大的炸弹投在整个跨境圈&#xff0c;让许多跨境卖家以及当地本土的卖家、品牌措手不及。 这对TikTok的东南亚市场而言&#xff0c;无疑是一次沉重的打击。 TikTok在东南亚的商业布局&#xff0c;印尼是其…