jumpserver_auto_install_v2.sh

  1 #!/bin/bash
  2 #by zhangjia
  3 #date:2019年2月13日09:46:36
  4 #shell_name:jumpserver_auto_install.sh
  5 ###############################################
  6 set -e
  7 #一，环境准备
  8 env() {
  9     set -e
 10     yum update -y
 11     #安装依赖包
 12     yum -y install wget gcc epel-release git vim
 13     systemctl start firewalld
 14     firewall-cmd --zone=public --add-port=80/tcp --permanent
 15     firewall-cmd --zone=public --add-port=2222/tcp --permanent
 16     firewall-cmd --zone=public --add-port=2220/tcp --permanent
 17     firewall-cmd --zone=public --add-port=8080/tcp --permanent
 18     firewall-cmd --zone=public --add-port=5000/tcp --permanent
 19     firewall-cmd --reload
 20     setenforce 0 || true
 21     sed -i "s/SELINUX=enforcing/SELINUX=disabled/g" /etc/selinux/config 
 22     Server_IP=`ip addr | grep inet | egrep -v ‘(127.0.0.1|inet6|docker)‘ | awk ‘{print $2}‘ | tr -d "addr:" | head -n 1 | cut -d / -f1`
 23 
 24     #修改字符集
 25     #localedef -c -f UTF-8 -i zh_CN zh_CN.UTF-8
 26     #export LC_ALL=zh_CN.UTF-8
 27     #echo "LANG=zh_CN.UTF-8" > /etc/locale.conf
 28 }
 29 #二,安装jumpserver
 30 jumpserver_install() {
 31     #安装 Redis, Jumpserver 使用 Redis 做 cache 和 celery broke
 32     yum install -y redis
 33     systemctl start redis
 34     systemctl enable redis
 35     #安装 MySQL
 36     yum install -y mariadb mariadb-devel mariadb-server MariaDB-shared
 37     systemctl enable mariadb
 38     systemctl start mariadb
 39     # 创建数据库 Jumpserver 并授权
 40     DB_PASSWORD=`cat /dev/urandom | tr -dc a-zA-Z0-9|head -c 24`
 41     echo -e "\033[31m 你的数据库密码是 ${DB_PASSWORD} \033[0m"
 42     echo "DB_PASSWORD:${DB_PASSWORD}" > /root/jumpserver.txt
 43     #mysql -uroot -e "create database jumpserver default charset ‘utf8‘"
 44     mysql -uroot -e "create database jumpserver default charset ‘utf8‘" || true
 45     mysql -uroot -e "grant all on jumpserver.* to ‘jumpserver‘@‘127.0.0.1‘ identified by ‘$DB_PASSWORD‘; flush privileges;"
 46 
 47     #安装 Nginx
 48     echo "[nginx]
 49     name=nginx repo
 50     baseurl=http://nginx.org/packages/centos/7/\$basearch/
 51     gpgcheck=0
 52     enabled=1" > /etc/yum.repos.d/nginx.repo
 53     sed -i ‘s/^[ \t]//g‘ /etc/yum.repos.d/nginx.repo #去除每行前面的空格
 54     yum install -y nginx
 55     rm -rf /etc/nginx/conf.d/default.conf
 56     systemctl enable nginx
 57 
 58 
 59     #安装 Python3.6
 60     yum -y install python36 python36-devel
 61     #建立 Python 虚拟环境
 62     cd /opt
 63     python3.6 -m venv py3
 64     source /opt/py3/bin/activate
 65     #自动载入 Python 虚拟环境配置
 66     #cd /opt
 67     #[[ -e autoenv ]] || git clone https://github.com/kennethreitz/autoenv.git
 68     #echo ‘source /opt/autoenv/activate.sh‘ >> ~/.bashrc
 69     #source ~/.bashrc
 70 
 71     #安装及配置 Jumpserver
 72     cd /opt/
 73     [[ -e jumpserver  ]]  || git clone --depth=1 https://github.com/jumpserver/jumpserver.git
 74     echo "source /opt/py3/bin/activate" > /opt/jumpserver/.env # 进入 jumpserver 目录时将自动载入 python 虚拟环境
 75     #首次进入 jumpserver 文件夹会有提示,按 y 即可 
 76     # Are you sure you want to allow this? (y/N) y
 77     # 安装依赖 RPM 包
 78     yum -y install $(cat /opt/jumpserver/requirements/rpm_requirements.txt)
 79     #安装 Python 库依赖
 80     pip install --upgrade pip setuptools
 81     pip install -r /opt/jumpserver/requirements/requirements.txt
 82     # 修改 Jumpserver 配置文件
 83     cd /opt/jumpserver
 84     cp config_example.yml config.yml
 85     jumpserver_dir="/opt/jumpserver/config.yml"
 86     SECRET_KEY=`cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 50`
 87     BOOTSTRAP_TOKEN=`cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 16`
 88     echo "SECRET_KEY:${SECRET_KEY}" >> /root/jumpserver.txt
 89     echo "BOOTSTRAP_TOKEN:${BOOTSTRAP_TOKEN}" >> /root/jumpserver.txt
 90     sed -i "s/SECRET_KEY:/SECRET_KEY: $SECRET_KEY/g" ${jumpserver_dir}
 91     sed -i "s/BOOTSTRAP_TOKEN:/BOOTSTRAP_TOKEN: $BOOTSTRAP_TOKEN/g" ${jumpserver_dir}
 92     sed -i "s/# DEBUG: true/DEBUG: false/g" ${jumpserver_dir}
 93     sed -i "s/# LOG_LEVEL: DEBUG/LOG_LEVEL: ERROR/g" ${jumpserver_dir}
 94     sed -i "s/# SESSION_EXPIRE_AT_BROWSER_CLOSE: False/SESSION_EXPIRE_AT_BROWSER_CLOSE: True/g" ${jumpserver_dir}
 95     sed -i "s/DB_PASSWORD: /DB_PASSWORD: $DB_PASSWORD/g" ${jumpserver_dir}
 96     echo -e "\033[31m ======================================== \033[0m"
 97     #运行 Jumpserver
 98     cd /opt/jumpserver
 99     ./jms start all -d  # 后台运行使用 -d 参数./jms start all -d
100 }
101 ######################################################################################
102 #三 安装 docker 部署 coco 与 guacamole
103 coco_guacamole_install_docker() {
104     yum install -y yum-utils device-mapper-persistent-data lvm2
105     yum-config-manager --add-repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
106     yum makecache fast
107     rpm --import https://mirrors.aliyun.com/docker-ce/linux/centos/gpg
108     yum -y install docker-ce
109     curl -sSL https://get.daocloud.io/daotools/set_mirror.sh | sh -s http://f1361db2.m.daocloud.io
110     systemctl enable docker
111     systemctl restart docker
112     docker pull jumpserver/jms_coco:1.4.10
113     docker pull jumpserver/jms_guacamole:1.4.10
114     docker pull jumpserver/jms_coco:1.5.1
115     docker pull jumpserver/jms_guacamole:1.5.1
116     #docker run --name jms_coco -d -p 2222:2222  -p 5000:5000 -e CORE_HOST=http://${Server_IP}:8080 -e BOOTSTRAP_TOKEN=${BOOTSTRAP_TOKEN} jumpserver/jms_coco:1.4.10
117     # docker run --name jms_guacamole -d -p 8081:8081 -e JUMPSERVER_SERVER=http://$Server_IP:8080 -e BOOTSTRAP_TOKEN=${BOOTSTRAP_TOKEN} jumpserver/jms_guacamole:1.4.10
118     docker run --name jms_coco -d -p 2222:2222 -p 5000:5000 -e CORE_HOST=http://${Server_IP}:8080 -e BOOTSTRAP_TOKEN=${BOOTSTRAP_TOKEN} jumpserver/jms_coco:1.5.1
119     docker run --name jms_guacamole -d -p 8081:8081 -e JUMPSERVER_SERVER=http://${Server_IP}:8080 -e BOOTSTRAP_TOKEN=${BOOTSTRAP_TOKEN} jumpserver/jms_guacamole:1.5.1
120 }
121 #四. 安装 Web Terminal 前端: Luna
122 luna_install() {
123     cd /opt
124     wget -c  https://github.com/jumpserver/luna/releases/download/1.5.1/luna.tar.gz
125     tar xf luna.tar.gz
126     chown -R root:root luna
127 }
128 #五. 配置 Nginx 整合各组件
129     nginx_config() {
130     rm -rf /etc/nginx/conf.d/default.conf
131     echo "
132     server {
133         listen 80;  # 代理端口,以后将通过此端口进行访问,不再通过8080端口
134         # server_name demo.jumpserver.org;  # 修改成你的域名或者注释掉
135 
136         client_max_body_size 100m;  # 录像及文件上传大小限制
137 
138         location /luna/ {
139             try_files $uri / /index.html;
140             alias /opt/luna/;  # luna 路径,如果修改安装目录,此处需要修改
141         }
142 
143         location /media/ {
144             add_header Content-Encoding gzip;
145             root /opt/jumpserver/data/;  # 录像位置,如果修改安装目录,此处需要修改
146         }
147 
148         location /static/ {
149             root /opt/jumpserver/data/;  # 静态资源,如果修改安装目录,此处需要修改
150         }
151 
152 
153         location /socket.io/ {
154             proxy_pass       http://localhost:5000/socket.io/;  # 如果coco安装在别的服务器,请填写它的ip
155             proxy_buffering off;
156             proxy_http_version 1.1;
157             proxy_set_header Upgrade \$http_upgrade;
158             proxy_set_header Connection "upgrade";
159             proxy_set_header X-Real-IP \$remote_addr;
160             proxy_set_header Host \$host;
161             proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
162             access_log off;
163         }
164 
165         location /coco/ {
166             proxy_pass       http://localhost:5000/coco/;  # 如果coco安装在别的服务器,请填写它的ip
167             proxy_set_header X-Real-IP \$remote_addr;
168             proxy_set_header Host \$host;
169             proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
170             access_log off;
171         }
172 
173         location /guacamole/ {
174             proxy_pass       http://localhost:8081/;  # 如果guacamole安装在别的服务器,请填写它的ip
175             proxy_buffering off;
176             proxy_http_version 1.1;
177             proxy_set_header Upgrade \$http_upgrade;
178             proxy_set_header Connection \$http_connection;
179             proxy_set_header X-Real-IP \$remote_addr;
180             proxy_set_header Host \$host;
181             proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
182             access_log off;
183         }
184 
185         location / {
186             proxy_pass http://localhost:8080;  # 如果jumpserver安装在别的服务器,请填写它的ip
187             proxy_set_header X-Real-IP \$remote_addr;
188             proxy_set_header Host \$host;
189             proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
190         }
191     }" > /etc/nginx/conf.d/jumpserver.conf
192     # sed -i ‘s/^[ \t]//g‘ /etc/nginx/conf.d/jumpserver.conf   #去掉每行前面的空格
193     sed -i ‘/^$/d‘ /etc/nginx/conf.d/jumpserver.conf #去掉空行
194     #sed ‘s/^[[:blank:]]\{1,\}//g‘ /etc/nginx/conf.d/jumpserver.conf|grep -v ‘^$‘
195     #sed ‘s/^[[:space:]]\{1,\}//g‘ /etc/nginx/conf.d/jumpserver.conf|grep -v ‘^$‘
196     nginx -t && systemctl restart nginx
197 }
198 PS3="please enter you select install menu:"
199 select services in env jumpserver_install coco_guacamole_install_docker luna_install  nginx_config all
200 do
201     case ${services}  in
202         env)
203             env;;
204         jumpserver_install)
205             jumpserver_install;;
206         coco_guacamole_install_docker)
207             coco_guacamole_install_docker;;
208         luna_install)
209             luna_install;;
210         nginx_config)
211             nginx_config;;
212         all)
213             env
214             jumpserver_install
215             coco_guacamole_install_docker
216             luna_install
217             nginx_config
218             break
219             ;;
220         *)
221             echo "env | jumpserver_install | coco_install | luna_install | guacamole_install | nginx_install"
222             exit;;
223     esac    
224 
225 done