赞！全球首款开源的堡垒机：JumpServer，附详细部署讲解！

https://docs.jumpserver.org/zh/master/

192.168.99.101 jumpserver 2c-4G
192.168.99.102 数据库/Redis 2C-2G
192.168.99.103 web 服务器 A 1C-1G
192.168.99.104 web 服务器 B 1C-1G

docker load -i mysql-5.6.44.tar.gz

mkdir -p /etc/mysql/mysql.conf.d
vim /etc/mysql/mysql.conf.d/mysqld.cnf

# Copyright (c) 2014, 2016, Oracle and/or its affiliates. All rights reserved.
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; version 2 of the License.
## This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
#
# The MySQL Server configuration file.
#
# For explanations see
# http://dev.mysql.com/doc/mysql/en/server-system-variables.html
[mysqld]
pid-file = /var/run/mysqld/mysqld.pid
socket = /var/run/mysqld/mysqld.sock
datadir = /var/lib/mysql
#log-error = /var/log/mysql/error.log
# Disabling symbolic-links is recommended to prevent assorted security risks
symbolic-links=0
character-set-server=utf8

mkdir -p /etc/mysql/conf.d/
vim /etc/mysql/conf.d/mysql.cnf

[mysql]
default-character-set=utf8  

mkdir /data/mysql -p

docker run -it -d -p 3306:3306 \
    -v /etc/mysql/mysql.conf.d/mysqld.cnf:/etc/mysql/mysql.conf.d/mysqld.cnf \
    -v /etc/mysql/conf.d/mysql.cnf:/etc/mysql/conf.d/mysql.cnf \
    -v /data/mysql:/var/lib/mysql \
    -e MYSQL_ROOT_PASSWORD="123" \
    mysql:5.6.44

apt install mysql-client
mysql -uroot -p123 -h192.168.99.22

mysql> show variables like "%character%";
mysql> show variables like "%collation%";

mysql> create database jumpserver default charset 'utf8';
mysql> grant all on jumpserver.* to 'jumpserver'@'%' identified by 'abc123';

mysql -ujumpserver -pabc123 -h192.168.99.22

docker pull redis:4.0.14
docker run -it -d -p 6379:6379 redis:4.0.14

apt install redis
redis-cli -h 192.168.99.22

docker pull jumpserver/jms_all:1.4.8
#或已经下载镜像后导入
docker load -i jumpserver-jms_all_1.4.8.tar.gz

# if [ "$SECRET_KEY" = "" ]; then \
    SECRET_KEY=`cat /dev/urandom | \
    tr -dc A-Za-z0-9 | \
    head -c 50`; \
    echo "SECRET_KEY=$SECRET_KEY" >> ~/.bashrc; \
    echo $SECRET_KEY; \
    else echo $SECRET_KEY; \
    fi
cZPi5K3utSGiwpK786wbrdZl7UqP0KzfszPBF3NqoATelylqzJ

# if [ "$BOOTSTRAP_TOKEN" = "" ]; then \
    BOOTSTRAP_TOKEN=`cat /dev/urandom | \
    tr -dc A-Za-z0-9 | \
    head -c 16`; \
    echo "BOOTSTRAP_TOKEN=$BOOTSTRAP_TOKEN" >> ~/.bashrc; \
    echo $BOOTSTRAP_TOKEN; \
    else echo $BOOTSTRAP_TOKEN; \
    fi
yaOz6fQzY0R8vIta

docker run --name jms_all \
    -v /opt/jumpserver:/opt/jumpserver/data/media \
    -p 80:80 \
    -p 2222:2222 \
    -e SECRET_KEY=cZPi5K3utSGiwpK786wbrdZl7UqP0KzfszPBF3NqoATelylqzJ \
    -e BOOTSTRAP_TOKEN=yaOz6fQzY0R8vIta \
    -e DB_HOST=192.168.99.22 \
    -e DB_PORT=3306 \
    -e DB_USER='jumpserver' \
    -e DB_PASSWORD="abc123" \
    -e DB_NAME=jumpserver \
    -e REDIS_HOST=192.168.99.22 \
    -e REDIS_PORT=6379 \
    -e REDIS_PASSWORD= \
    jumpserver/jms_all:1.4.8