{"id":1913,"date":"2025-06-12T22:44:07","date_gmt":"2025-06-12T14:44:07","guid":{"rendered":"http:\/\/113.45.254.23\/?p=1913"},"modified":"2025-11-03T11:00:09","modified_gmt":"2025-11-03T03:00:09","slug":"%e5%ae%89%e8%a3%85%e5%a0%a1%e5%9e%92%e6%9c%ba","status":"publish","type":"post","link":"http:\/\/113.45.254.23\/?p=1913","title":{"rendered":"\u5821\u5792\u673aJumpserver\u7684\u5b89\u88c5\u548c\u4f7f\u7528"},"content":{"rendered":"\n

\u4e00\u3001\u5b9e\u9a8c\u73af\u5883\uff1a\u7cfb\u7edf\u8fd8\u539f\u81f3docker<\/h2>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n

\u4e8c\u3001\u4fee\u6539\u8ba1\u7b97\u673a\u540d\u5e76\u505a\u65f6\u95f4\u540c\u6b65<\/h2>\n\n\n\n
[root@Server12 ~]# hostnamectl set-hostname jumpserver  \u4fee\u6539\u8ba1\u7b97\u673a\u540d\u4e3a\uff1ajumpserver\n\n[root@Server12 ~]# exit\nlogout\n\nConnection closed.\n\nDisconnected from remote host(192.168.7.12) at 15:53:43.\n\nType `help' to learn how to use Xshell prompt.\n[C:\\~]$ \n\nConnecting to 192.168.7.12:22...\nConnection established.\nTo escape to local shell, press 'Ctrl+Alt+]'.\n\nWARNING! The remote SSH server rejected X11 forwarding request.\nActivate the web console with: systemctl enable --now cockpit.socket\n\nLast login: Tue Jun 10 15:53:00 2025 from 192.168.7.1\n[root@jumpserver ~]# vim \/etc\/chrony.conf\t\t\u505a\u65f6\u95f4\u540c\u6b65\npool.ntp.aliyun.com\n# Use NTP servers from DHCP.\nsourcedir \/run\/chrony-dhcp\n\n[root@jumpserver ~]# systemctl enable --now chronyd \t\t\n[root@jumpserver ~]# chronyc sources -v\n\n  .-- Source mode  '^' = server, '=' = peer, '#' = local clock.\n \/ .- Source state '*' = current best, '+' = combined, '-' = not combined,\n| \/             'x' = may be in error, '~' = too variable, '?' = unusable.\n||                                                 .- xxxx [ yyyy ] +\/- zzzz\n||      Reachability register (octal) -.           |  xxxx = adjusted offset,\n||      Log2(Polling interval) --.      |          |  yyyy = measured offset,\n||                                \\     |          |  zzzz = estimated error.\n||                                 |    |           \\\nMS Name\/IP address         Stratum Poll Reach LastRx Last sample               \n===============================================================================\n^+ 119.28.183.184                2   6    37    42  +5915us[+5915us] +\/-   60ms\n^* time.neu.edu.cn               2   6    37    42    +73us[  -21ms] +\/- 8858us\n^- time.cloudflare.com           3   6    37    43  +1953us[  -19ms] +\/-  107ms\n^- ntp1.flashdance.cx            2   6    37    43    +22ms[  +26ms] +\/-  114ms\n[root@jumpserver ~]# \n[root@jumpserver ~]# date\nTue Jun 10 03:54:57 PM CST 2025\n[root@jumpserver ~]# clock -w<\/code><\/pre>\n\n\n\n
\u4e09\u3001sdb\u78c1\u76d8\u5206\u533a\uff1a<\/h2>\n\n\n\n
[root@jumpserver ~]# ls\nanaconda-ks.cfg\n[root@jumpserver ~]# fdisk -l\nDisk \/dev\/sdb: 100 GiB, 107374182400 bytes, 209715200 sectors\t\t\/dev\/sdb\u67e5\u770b\u8fd9\u4e2a\u65b0\u52a0\u7684\u786c\u76d8\nDisk model: VMware Virtual S\nUnits: sectors of 1 * 512 = 512 bytes\nSector size (logical\/physical): 512 bytes \/ 512 bytes\nI\/O size (minimum\/optimal): 512 bytes \/ 512 bytes\n\n\nDisk \/dev\/sda: 100 GiB, 107374182400 bytes, 209715200 sectors\nDisk model: VMware Virtual S\nUnits: sectors of 1 * 512 = 512 bytes\nSector size (logical\/physical): 512 bytes \/ 512 bytes\nI\/O size (minimum\/optimal): 512 bytes \/ 512 bytes\nDisklabel type: dos\nDisk identifier: 0x7fc8b93c\n\nDevice     Boot   Start       End   Sectors  Size Id Type\n\/dev\/sda1          2048      6143      4096    2M 83 Linux\n\/dev\/sda2  *       6144   1030143   1024000  500M 83 Linux\n\/dev\/sda3       1030144 209715199 208685056 99.5G 8e Linux LVM\n\n\nDisk \/dev\/mapper\/rl_server12-root: 91.51 GiB, 98255765504 bytes, 191905792 sectors\nUnits: sectors of 1 * 512 = 512 bytes\nSector size (logical\/physical): 512 bytes \/ 512 bytes\nI\/O size (minimum\/optimal): 512 bytes \/ 512 bytes\n\n\nDisk \/dev\/mapper\/rl_server12-swap: 8 GiB, 8589934592 bytes, 16777216 sectors\nUnits: sectors of 1 * 512 = 512 bytes\nSector size (logical\/physical): 512 bytes \/ 512 bytes\nI\/O size (minimum\/optimal): 512 bytes \/ 512 bytes\n[root@jumpserver ~]# mkfs \/dev\/sdb -f\nmkfs.ext2: invalid option -- 'f'\nUsage: mkfs.ext2 [-c|-l filename] [-b block-size] [-C cluster-size]\n\t[-i bytes-per-inode] [-I inode-size] [-J journal-options]\n\t[-G flex-group-size] [-N number-of-inodes] [-d root-directory]\n\t[-m reserved-blocks-percentage] [-o creator-os]\n\t[-g blocks-per-group] [-L volume-label] [-M last-mounted-directory]\n\t[-O feature[,...]] [-r fs-revision] [-E extended-option[,...]]\n\t[-t fs-type] [-T usage-type ] [-U UUID] [-e errors_behavior][-z undo_file]\n\t[-jnqvDFSV] device [blocks-count]\n[root@jumpserver ~]# blkid\n\/dev\/mapper\/rl_server12-swap: UUID=\"ddfab3a2-01db-44c1-a3fd-30bf04a080ad\" TYPE=\"swap\"\n\/dev\/sr0: UUID=\"2024-11-16-01-52-31-00\" LABEL=\"Rocky-9-5-x86_64-dvd\" TYPE=\"iso9660\" PTUUID=\"5d896d99\" PTTYPE=\"dos\"\n\/dev\/mapper\/rl_server12-root: UUID=\"aea3a434-841b-47c9-9465-c1b09f5d28a7\" TYPE=\"xfs\"\n\/dev\/sda2: UUID=\"9519c6f7-b62f-47ec-997a-fdab6e89cc9c\" TYPE=\"xfs\" PARTUUID=\"7fc8b93c-02\"\n\/dev\/sda3: UUID=\"4cl7pW-Vb6g-IMUk-qN6v-Gt7b-HKHI-fReRLr\" TYPE=\"LVM2_member\" PARTUUID=\"7fc8b93c-03\"\n\/dev\/sda1: PARTUUID=\"7fc8b93c-01\"\n[root@jumpserver ~]# \n[root@jumpserver ~]# \n[root@jumpserver ~]# gdisk \/dev\/sdb \u5bf9sdb\u786c\u76d8\u8fdb\u884c\u5206\u533a\nGPT fdisk (gdisk) version 1.0.7\n\nPartition table scan:\n  MBR: not present\n  BSD: not present\n  APM: not present\n  GPT: not present\nCreating new GPT entries in memory.\n<\/code><\/pre>\n\n\n\n
\u56db\u3001\u65b0\u5efa\u5206\u533a\u3001\u683c\u5f0f\u5316sdb1\u78c1\u76d8\u3001\u91cd\u65b0\u521b\u5efasdb1\u78c1\u76d8<\/h2>\n\n\n\n
Command (? for help): n\t\t\t\t\u65b0\u5efa\u5206\u533a\nPartition number (1-128, default 1): 1  \t\u521b\u5efa\u7b2c\u4e00\u4e2a\u4e3b\u5bfc\u5206\u533a\nFirst sector (34-209715166, default = 2048) or {+-}size{KMGTP}:  \nLast sector (2048-209715166, default = 209715166) or {+-}size{KMGTP}: \nCurrent type is 8300 (Linux filesystem)\nHex code or GUID (L to show codes, Enter = 8300): \nChanged type of partition to 'Linux filesystem'\n\nCommand (? for help): w\t\t\t\u4fdd\u5b58\u5e76\u9000\u51fa\n\nFinal checks complete. About to write GPT data. THIS WILL OVERWRITE EXISTING\nPARTITIONS!!\n\nDo you want to proceed? (Y\/N): y\t\t\u5199\u5165\u8fdb\u7a0b\nOK; writing new GUID partition table (GPT) to \/dev\/sdb.\nThe operation has completed successfully.\n[root@jumpserver ~]# fdisk -l\t\t\u67e5\u770b\u78c1\u76d8\u7684\u8be6\u7ec6\u4fe1\u606f\nDisk \/dev\/sdb: 100 GiB, 107374182400 bytes, 209715200 sectors\nDisk model: VMware Virtual S\nUnits: sectors of 1 * 512 = 512 bytes\nSector size (logical\/physical): 512 bytes \/ 512 bytes\nI\/O size (minimum\/optimal): 512 bytes \/ 512 bytes\nDisklabel type: gpt\nDisk identifier: 9E782FF8-BBC7-4295-89B1-526CA62C4FC2\n\nDevice     Start       End   Sectors  Size Type\n\/dev\/sdb1   2048 209715166 209713119  100G Linux filesystem\t\t\n\n\nDisk \/dev\/sda: 100 GiB, 107374182400 bytes, 209715200 sectors\nDisk model: VMware Virtual S\nUnits: sectors of 1 * 512 = 512 bytes\nSector size (logical\/physical): 512 bytes \/ 512 bytes\nI\/O size (minimum\/optimal): 512 bytes \/ 512 bytes\nDisklabel type: dos\nDisk identifier: 0x7fc8b93c\n\nDevice     Boot   Start       End   Sectors  Size Id Type\n\/dev\/sda1          2048      6143      4096    2M 83 Linux\n\/dev\/sda2  *       6144   1030143   1024000  500M 83 Linux\n\/dev\/sda3       1030144 209715199 208685056 99.5G 8e Linux LVM\n\n\nDisk \/dev\/mapper\/rl_server12-root: 91.51 GiB, 98255765504 bytes, 191905792 sectors\nUnits: sectors of 1 * 512 = 512 bytes\nSector size (logical\/physical): 512 bytes \/ 512 bytes\nI\/O size (minimum\/optimal): 512 bytes \/ 512 bytes\n\n\nDisk \/dev\/mapper\/rl_server12-swap: 8 GiB, 8589934592 bytes, 16777216 sectors\nUnits: sectors of 1 * 512 = 512 bytes\nSector size (logical\/physical): 512 bytes \/ 512 bytes\nI\/O size (minimum\/optimal): 512 bytes \/ 512 bytes\n[root@jumpserver ~]# mkfs.xfs \/dev\/sdb1 \t\t\t\u683c\u5f0f\u5316sdb1\u78c1\u76d8\nmeta-data=\/dev\/sdb1              isize=512    agcount=4, agsize=6553535 blks\n         =                       sectsz=512   attr=2, projid32bit=1\n         =                       crc=1        finobt=1, sparse=1, rmapbt=0\n         =                       reflink=1    bigtime=1 inobtcount=1 nrext64=0\ndata     =                       bsize=4096   blocks=26214139, imaxpct=25\n         =                       sunit=0      swidth=0 blks\nnaming   =version 2              bsize=4096   ascii-ci=0, ftype=1\nlog      =internal log           bsize=4096   blocks=16384, version=2\n         =                       sectsz=512   sunit=0 blks, lazy-count=1\nrealtime =none                   extsz=4096   blocks=0, rtextents=0\n[root@jumpserver ~]# blkid  \u67e5\u770b\u78c1\u76d8\u7684UUID\u53f7\n\/dev\/mapper\/rl_server12-swap: UUID=\"ddfab3a2-01db-44c1-a3fd-30bf04a080ad\" TYPE=\"swap\"\n\/dev\/sr0: UUID=\"2024-11-16-01-52-31-00\" LABEL=\"Rocky-9-5-x86_64-dvd\" TYPE=\"iso9660\" PTUUID=\"5d896d99\" PTTYPE=\"dos\"\n\/dev\/mapper\/rl_server12-root: UUID=\"aea3a434-841b-47c9-9465-c1b09f5d28a7\" TYPE=\"xfs\"\n\/dev\/sda2: UUID=\"9519c6f7-b62f-47ec-997a-fdab6e89cc9c\" TYPE=\"xfs\" PARTUUID=\"7fc8b93c-02\"\n\/dev\/sda3: UUID=\"4cl7pW-Vb6g-IMUk-qN6v-Gt7b-HKHI-fReRLr\" TYPE=\"LVM2_member\" PARTUUID=\"7fc8b93c-03\"\n\/dev\/sdb1: UUID=\"d7b4fb88-f98c-448b-87e1-a61f08027b7f\" TYPE=\"xfs\" PARTLABEL=\"Linux filesystem\" PARTUUID=\"04118c5c-8336-46d3-8125-a6172a09f234\"  \/dev\/sdb1\u590d\u5236sdb1\u7684UUID\u53f7\n\/dev\/sda1: PARTUUID=\"7fc8b93c-01\"\n[root@jumpserver ~]# vim \/etc\/fstab\nUUID=d7b4fb88-f98c-448b-87e1-a61f08027b7f \/data      xfs     defaults        0 0<\/code><\/pre>\n\n\n\n
[root@jumpserver ~]# mkdir \/data\t\t\u521b\u5efadata\u76ee\u5f55\n[root@jumpserver ~]# systemctl daemon-reload\t\t\u91cd\u65b0\u52a0\u8f7d\u7cfb\u7edf\u8fdb\u7a0b\n[root@jumpserver ~]# mount -a\t\t\t\t\t\u91cd\u65b0\u52a0\u8f7d\u6302\u8f7d\u9879\n[root@jumpserver ~]# df -hT\t\t\t\t\t\t\u67e5\u770b\u78c1\u76d8\u5bb9\u91cf\nFilesystem                   Type      Size  Used Avail Use% Mounted on\ndevtmpfs                     devtmpfs  4.0M     0  4.0M   0% \/dev\ntmpfs                        tmpfs     7.7G     0  7.7G   0% \/dev\/shm\ntmpfs                        tmpfs     3.1G  9.1M  3.1G   1% \/run\n\/dev\/mapper\/rl_server12-root xfs        92G  4.5G   88G   5% \/\n\/dev\/sda2                    xfs       436M  297M  140M  69% \/boot\ntmpfs                        tmpfs     1.6G  4.0K  1.6G   1% \/run\/user\/0\n\/dev\/sdb1                    xfs       100G  746M  100G   1% \/data  \/dev\/sdb1 \u786c\u76d8\u505a\u597d\u4e86\uff0c\u4e4b\u540e\u628a\u8df3\u677f\u673a\u6587\u4ef6\u5b89\u88c5\u5230\u8fd9\u5757\u78c1\u76d8\u4e0b\n[root@jumpserver ~]# <\/code><\/pre>\n\n\n\n
\u4e94\u3001\u5b89\u88c5\u5821\u5792\u673a<\/h2>\n\n\n\n
[root@jumpserver ~]# cd \/data\/\n[root@jumpserver data]# curl -sSL https:\/\/resource.fit2cloud.com\/jumpserver\/jumpserver\/releases\/latest\/download\/quick_start.sh | bash\t\u5b89\u88c5\u6700\u65b0\u7684\u5821\u5792\u673a\uff0c\u5e76\u5b89\u88c5\u3002\u5148\u4e0b\u8f7d\u5bb9\u5668\uff0c\u540e\u8fd0\u884c\u5bb9\u5668\ndownload install script to \/opt\/jumpserver-installer-v4.10.1\t\u5821\u5792\u673a\u662f\u4ee5\u5bb9\u5668\u7684\u663e\u793a\u8fd0\u884c<\/code><\/pre>\n\n\n\n
\u516d\u3001\u67e5\u770b\u6b63\u5728\u8fd0\u884c\u7684\u5bb9\u5668<\/h2>\n\n\n\n
[root@jumpserver data]# docker ps\t\u67e5\u770b\u6b63\u5728\u8fd0\u884c\u7684\u5bb9\u5668\nCONTAINER ID   IMAGE                        COMMAND                  CREATED          STATUS                             PORTS                                         NAMES\nabe6000fa788   jumpserver\/core:v4.10.1-ce   \".\/entrypoint.sh sta\u2026\"   25 seconds ago   Up 14 seconds (health: starting)   8080\/tcp                                      jms_core   \na4561e9bdb38   jumpserver\/web:v4.10.1-ce    \"\/docker-entrypoint.\u2026\"   25 seconds ago   Up 14 seconds (health: starting)   0.0.0.0:80->80\/tcp, [::]:80->80\/tcp           jms_web\nbc1ff9e51eda   jumpserver\/chen:v4.10.1-ce   \".\/entrypoint.sh wisp\"   25 seconds ago   Up 14 seconds (health: starting)   8082\/tcp                                      jms_chen\n16503e277245   jumpserver\/lion:v4.10.1-ce   \".\/entrypoint.sh sup\u2026\"   25 seconds ago   Up 14 seconds (health: starting)   8081\/tcp                                      jms_lion\na099162ab06e   jumpserver\/koko:v4.10.1-ce   \".\/entrypoint.sh .\/k\u2026\"   25 seconds ago   Up 14 seconds (health: starting)   0.0.0.0:2222->2222\/tcp, [::]:2222->2222\/tcp   jms_koko\nb6d59f69ea62   jumpserver\/core:v4.10.1-ce   \".\/entrypoint.sh sta\u2026\"   25 seconds ago   Up 14 seconds (health: starting)   8080\/tcp                                      jms_celery\n18c0f16081be   redis:7.0-bullseye           \"docker-entrypoint.s\u2026\"   50 seconds ago   Up 49 seconds (healthy)            6379\/tcp                                      jms_redis\nc59d469cef2c   postgres:16.3-bullseye       \"docker-entrypoint.s\u2026\"   50 seconds ago   Up 49 seconds (healthy)            5432\/tcp                                      jms_postgresql\n[root@jumpserver data]# <\/code><\/pre>\n\n\n\n
\u4e03\u3001jumpsever\u642d\u5efa\u597d\u4e86\uff0c\u5728web\u4e0a\u767b\u5f55\u8fd0\u884c\u5821\u5792\u673a:<\/h2>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u516b\u3001\u542f\u52a8jumpserver<\/h2>\n\n\n\n
[root@jumpserver jumpserver]# cd \/opt\/jumpserver-installer-v4.10.1\/\n[root@jumpserver jumpserver-installer-v4.10.1]# .\/jmsctl.sh start\n[+] Running 8\/8\n ? Container jms_redis       Running                                                                    \n ? Container jms_koko        Running                                                                    \n ? Container jms_postgresql  Running                                                                    \n ? Container jms_core        Running                                                                    \n ? Container jms_chen        Running                                                                    \n ? Container jms_web         Running                                                                    \n ? Container jms_celery      Running                                                                    \n ? Container jms_lion        Running                                                                    \n[root@jumpserver jumpserver-installer-v4.10.1]# exit\nlogout\n\nConnection closed.\n\nDisconnected from remote host(192.168.7.12) at 13:50:38.\n\nType `help' to learn how to use Xshell prompt.<\/code><\/pre>\n\n\n\n
\u4e5d\u3001\u5f00\u542f\u53e6\u5916\u4e00\u53f0server15\uff08\u4e00\u53f0\u6a21\u677f\u673a\uff1abill\uff09\uff0c\u8fd8\u539f\u81f3\u65b0\u7cfb\u7edf\uff0c\u5f00\u673a\u3002<\/h2>\n\n\n\n
\u5341\u3001\u505a\u65f6\u95f4\u540c\u6b65\uff1a\u540c\u6b65aliyun\u65f6\u95f4\uff1a<\/h2>\n\n\n\n
[root@Server15 ~]# vim \/etc\/chrony.conf\n#pool 2.rocky.pool.ntp.org iburst\npool ntp.aliyun.com\n\n[root@Server15 ~]# systemctl enable --now chronyd\n[root@Server15 ~]# chronyc sources -v\n\n  .-- Source mode  '^' = server, '=' = peer, '#' = local clock.\n \/ .- Source state '*' = current best, '+' = combined, '-' = not combined,\n| \/             'x' = may be in error, '~' = too variable, '?' = unusable.\n||                                                 .- xxxx [ yyyy ] +\/- zzzz\n||      Reachability register (octal) -.           |  xxxx = adjusted offset,\n||      Log2(Polling interval) --.      |          |  yyyy = measured offset,\n||                                \\     |          |  zzzz = estimated error.\n||                                 |    |           \\\nMS Name\/IP address         Stratum Poll Reach LastRx Last sample               \n===============================================================================\n^- time.cloudflare.com           3   6    37    21   -204ms[ -204ms] +\/-  325ms\n^* 211.68.71.26                  2   6    37    22   +123us[ +261ms] +\/-   93ms\n^- makaki.miuku.net              3   6    37    22    +36ms[  +36ms] +\/-  231ms\n^+ ntp7.flashdance.cx            2   6    37    22   +144ms[ +144ms] +\/-  234ms\n[root@Server15 ~]# date\nWed Jun 11 01:54:56 PM CST 2025\n[root@Server15 ~]# clock -w<\/code><\/pre>\n\n\n\n
\u5341\u4e00\u3001\u521b\u5efabill\u7528\u6237\u5e76\u751f\u6210rsa\u7684\u52a0\u5bc6\u5bc6\u94a5<\/h2>\n\n\n\n
[bill@Server15 ~]$ ssh-keygen -t rsa\t\u4f7f\u7528rsa\u7684\u52a0\u5bc6\u7b97\u6cd5\u751f\u6210rsa\u7684\u52a0\u5bc6\u5bc6\u94a5\nGenerating public\/private rsa key pair.\nEnter file in which to save the key (\/home\/bill\/.ssh\/id_rsa): \nCreated directory '\/home\/bill\/.ssh'.\nEnter passphrase (empty for no passphrase): \nEnter same passphrase again: \nYour identification has been saved in \/home\/bill\/.ssh\/id_rsa\nYour public key has been saved in \/home\/bill\/.ssh\/id_rsa.pub\nThe key fingerprint is:\nSHA256:PcxhUbvxUkJw\/UDFLC+tLlrLd3bKhFruRI0gIKKble4 bill@Server15\nThe key's randomart image is:\nThe key's randomart image is:\n+---[RSA 3072]----+\n|  . . .   oo+o.+.|\n| . o . .   + .+ o|\n|. o     . + + .* |\n| =       * o O. +|\n|o .     S = = oo |\n| .         o o.  |\n|  E         =..  |\n|           B.+o +|\n|          oo=oo+.|\n+----[SHA256]-----+<\/code><\/pre>\n\n\n\n
\u5341\u4e8c\u3001\u5c06\u516c\u94a5\u5185\u5bb9\u5199\u5165\u5230\u6388\u6743\u6587\u4ef6\u4e2d<\/h2>\n\n\n\n
[bill@Server15 ~]$ cd .ssh\/\n[bill@Server15 .ssh]$ ls\nid_rsa  id_rsa.pub\n[bill@Server15 .ssh]$ cat id_rsa.pub > authorized_keys\t\t\u5c06\u516c\u94a5\u5185\u5bb9\u5199\u5165\u5230\u6388\u6743\u6587\u4ef6\u4e2d\n[bill@Server15 .ssh]$ pwd\t\t\u67e5\u770b\u5f53\u524d\u76ee\u5f55\n\/home\/bill\/.ssh\n[bill@Server15 .ssh]$ exit\nlogout\n[root@Server15 ~]# cd \/home\/bill\/.ssh\/\t\t\t\u8fdb\u5165\u5230bill\u7528\u6237\u7684ssh\u7684\u76ee\u5f55\u4e0b\n[root@Server15 .ssh]# ls\nauthorized_keys\u6388\u6743\u6587\u4ef6  id_rsa \u79c1\u94a5 id_rsa.pub\u516c\u94a5<\/code><\/pre>\n\n\n\n
\u5341\u4e09\u3001\u5c06\u79c1\u94a5\u590d\u5236\u5230root\u76ee\u5f55\u4e0b<\/h2>\n\n\n\n
[root@Server15 .ssh]# cp id_rsa \/root\t\t\t\t\u5c06\u79c1\u94a5\u590d\u5236\u5230root\u76ee\u5f55\u4e0b\n[root@Server15 .ssh]# cd\n[root@Server15 ~]#<\/code><\/pre>\n\n\n\n
\u5341\u56db\u3001\u7f16\u8f91ssh\u7684\u914d\u7f6e\u6587\u4ef6<\/h2>\n\n\n\n
44 RSAAuthentication yes\t\t\uff08\u6dfb\u52a0\uff09rsa\u7684\u6388\u6743\n 45 PubkeyAuthentication yes\t\uff08\u6dfb\u52a0\uff09\u5f00\u542f\u516c\u94a5\u8ba4\u8bc1\n 46 \n 47 # The default is to check both .ssh\/authorized_keys and .ssh\/authorized_keys2\n 48 # but this is overridden so installations will only check .ssh\/authorized_keys\n 49 AuthorizedKeysFile      .ssh\/authorized_keys\t\t\u6388\u6743\u7684\u5bc6\u94a5\u6587\u4ef6\u4f4d\u7f6e\n 50 <\/code><\/pre>\n\n\n\n
\u5341\u4e94\u3001\u91cd\u542fssh \uff08\u52a0\u5bc6\u7684\u7f51\u7edc\u534f\u8bae\uff09<\/h2>\n\n\n\n
[root@Server15 ~]# systemctl restart sshd \u91cd\u542fsshd<\/p>\n\n\n\n
[root@Server15 ~]#<\/p>\n\n\n\n
\u5341\u516d\u3001\u767b\u5f55admin\u8d26\u6237\u4e0b\uff0c\u7ed1\u5b9aadmin\u4e3b\u673aIP\u4e3a\uff1a7.12<\/h2>\n\n\n\n
admin\u8d26\u6237\u4e0b\u521b\u5efa\u4e24\u4e2a\u8d26\u53f7\uff0c1\u3001admin 2\u3001test<\/p>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u521b\u5efatest\u7528\u6237\uff1a<\/h3>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u5341\u4e03\u3001server 15\u7ed1\u5b9a\u6a21\u677f\u673abill<\/h2>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u5341\u4e5d\u3001test\u4f5c\u4e3a\u4e00\u53f0\u76d1\u63a7\u5668\u5e73\u53f0\uff0c\u5728\u4e0a\u9762\u6dfb\u52a0\u7528\u6237<\/h2>\n\n\n\n
\u7528\u62371\uff1a\u6a21\u677fbill server 15<\/h3>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u4e8c\u5341\u3001\u5728test\u4e0b\u64cd\u4f5cbill\u7528\u6237server15\uff0c\u7559\u4e0b\u64cd\u4f5c\u8bb0\u5f55<\/h2>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u8fde\u63a5server15<\/h3>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u4e8c\u5341\u4e00\u3001\u91cd\u65b0\u767b\u5f55\u56deadmin server12\u8d26\u53f7\uff1a\u5728admin \u8d26\u53f7\u4e0b\u67e5\u770btest\u5e73\u53f0\u4e0b\u7684biil\u7684\u884c\u4e3a\u76d1\u63a7\u8bb0\u5f55\uff1a<\/h2>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u4e8c\u5341\u4e8c\u3001\u521b\u5efabill\u6a21\u677f<\/h2>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u4e8c\u5341\u4e09\u3001\u521b\u5efaserver14\uff0c\u4f7f\u7528server15 bill\u6a21\u677f\u7ed9server14\u6dfb\u52a0\u5230jump server\u91cc\uff1a<\/h2>\n\n\n\n
[root@sever14 ~]# vim \/etc\/chrony.conf\n[root@sever14 ~]# systemctl enable --now chronyd\n[root@sever14 ~]# chronyc sources -v\n\n  .-- Source mode  '^' = server, '=' = peer, '#' = local clock.\n \/ .- Source state '*' = current best, '+' = combined, '-' = not combined,\n| \/             'x' = may be in error, '~' = too variable, '?' = unusable.\n||                                                 .- xxxx [ yyyy ] +\/- zzzz\n||      Reachability register (octal) -.           |  xxxx = adjusted offset,\n||      Log2(Polling interval) --.      |          |  yyyy = measured offset,\n||                                \\     |          |  zzzz = estimated error.\n||                                 |    |           \\\nMS Name\/IP address         Stratum Poll Reach LastRx Last sample               \n===============================================================================\n^- time.cloudflare.com           3   6    37     9  +3860us[+3860us] +\/-  116ms\n^* time.neu.edu.cn               2   6    37     9    -11us[-3860us] +\/- 9269us\n^- a.chl.la                      2   6    37     5    +23ms[  +23ms] +\/-  153ms\n^? tick.ntp.infomaniak.ch        0   7     0     -     +0ns[   +0ns] +\/-    0ns\n[root@sever14 ~]# date\nWed Jun 11 03:05:11 PM CST 2025\n[root@sever14 ~]# clocke -w\n-bash: clocke: command not found\n[root@sever14 ~]# clock -w\n[root@sever14 ~]# useradd bill\n[root@sever14 ~]# passwd bill\nChanging password for user bill.\nNew password: \nRetype new password: \npasswd: all authentication tokens updated successfully.\n[root@sever14 ~]# \n[root@sever14 ~]# mkdir \/home\/bill\/.ssh\n[root@sever14 ~]# vim \/etc\/ssh\/sshd_config\n44 RSAAuthentication yes\n 45 PubkeyAuthentication yes\n 46 PubkeyAuthentication yes\n 47 \n 48 # The default is to check both .ssh\/authorized_keys and .ssh\/authorized_keys2\n 49 # but this is overridden so installations will only check .ssh\/authorized_keys\n 50 AuthorizedKeysFile      \/home\/bill\/.ssh\/authorized_keys\n 51 \n 52 #AuthorizedPrincipalsFile none\n 53 \n 54 #AuthorizedKeysCommand none\n 55 #AuthorizedKeysCommandUser nobody<\/code><\/pre>\n\n\n\n
[root@sever14 ~]# systemctl restart sshd\n[root@sever14 ~]# ip addr\n1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000\n    link\/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00\n    inet 127.0.0.1\/8 scope host lo\n       valid_lft forever preferred_lft forever\n    inet6 ::1\/128 scope host \n       valid_lft forever preferred_lft forever\n2: ens160: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000\n    link\/ether 00:0c:29:40:f2:95 brd ff:ff:ff:ff:ff:ff\n    altname enp3s0\n    inet 192.168.7.14\/24 brd 192.168.7.255 scope global noprefixroute ens160\n       valid_lft forever preferred_lft forever\n    inet6 fe80::20c:29ff:fe40:f295\/64 scope link noprefixroute \n       valid_lft forever preferred_lft forever\n[root@sever14 ~]# \n<\/code><\/pre>\n\n\n\n
[root@Server15 ~]# scp \/home\/bill\/.ssh\/authorized_keys 192.168.7.14:\/home\/bill\/.ssh\/\nThe authenticity of host '192.168.7.14 (192.168.7.14)' can't be established.\nED25519 key fingerprint is SHA256:htKq7ZirIWLaYWODrNwza359NeFtKCnUUflfFROBZg8.\nThis key is not known by any other names\nAre you sure you want to continue connecting (yes\/no\/[fingerprint])? yes\nWarning: Permanently added '192.168.7.14' (ED25519) to the list of known hosts.\nroot@192.168.7.14's password: \nauthorized_keys                                                100%  567     1.8MB\/s   00:00    \n[root@Server15 ~]# <\/code><\/pre>\n\n\n\n
\u4e8c\u5341\u56db\u3001\u521b\u5efa\u597dserver14\u5bb9\u5668\u540e\uff0c\u5728admin server12\u91cc\u6dfb\u52a0server14\u7684\u8d44\u4ea7\uff0c\u5e76\u8fdb\u884c\u8d44\u4ea7\u6388\u6743<\/h2>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u4e8c\u5341\u4e94\uff1a\u5728test\u4e0b\u64cd\u4f5c\u7528\u6237server14\uff0c\u7559\u4e0b\u64cd\u4f5c\u8bb0\u5f55<\/h2>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u4e8c\u5341\u516d\u3001\u91cd\u65b0\u767b\u5f55\u56deadmin server12\u8d26\u53f7\uff1a\u5728admin \u8d26\u53f7\u4e0b\u67e5\u770btest\u5e73\u53f0\u4e0b\u7684server14\u7684\u884c\u4e3a\u76d1\u63a7\u8bb0\u5f55\uff1a<\/h2>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u4e8c\u5341\u4e03\u3001jumpserver\u76d1\u63a7wins2025<\/h2>\n\n\n\n
\u5b9e\u9a8c\u73af\u5883\uff1a<\/h3>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u4fee\u6539IP\u5730\u5740\uff1a7.21\u53ca\u5173\u95ed\u9632\u706b\u5899<\/h3>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u521b\u5efabill\u7528\u6237<\/h3>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u5f00\u542f\u8fdc\u7a0b\u684c\u9762<\/h3>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u6dfb\u52a0\u8fdc\u7a0b\u684c\u9762\u7528\u6237\uff1abill<\/h3>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u4fee\u6539\u8ba1\u7b97\u673a\u540d\uff1a<\/h3>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u4e8c\u5341\u516b\uff1a\u5728admin server12\u4e0b\u521b\u5efa\u8d44\u4ea7\uff1aweb (win2025)<\/h2>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u4e8c\u5341\u4e5d\u3001\u5728test\u4e0b\u64cd\u4f5c\u7528\u6237web\uff0c\u7559\u4e0b\u64cd\u4f5c\u8bb0\u5f55<\/h2>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u4e09\u5341\u3001\u91cd\u65b0\u767b\u5f55\u56deadmin server12\u8d26\u53f7\uff1a\u5728admin \u8d26\u53f7\u4e0b\u67e5\u770btest\u5e73\u53f0\u4e0b\u7684web\u7684\u884c\u4e3a\u76d1\u63a7\u8bb0\u5f55\uff1a<\/p>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
=====================================================<\/p>\n\n\n\n
\u77e5\u8bc6\u70b9\uff1a<\/h2>\n\n\n\n
JumpServer \u5821\u5792\u673a\u7b26\u5408\u8fd0\u7ef4\u5b89\u5168\u5ba1\u8ba1 4A \u89c4\u8303<\/p>\n\n\n\n
\u8eab\u4efd\u9a8c\u8bc1 \/ Authentication<\/p>\n\n\n\n
\u9632\u6b62\u8eab\u4efd\u5192\u7528\u548c\u590d\u7528<\/p>\n\n\n\n
\u6388\u6743\u63a7\u5236 \/ Authorization<\/p>\n\n\n\n
\u9632\u6b62\u5185\u90e8\u8bef\u64cd\u4f5c\u548c\u6743\u9650\u6ee5\u7528<\/p>\n\n\n\n
\u8d26\u53f7\u7ba1\u7406 \/ Accounting<\/p>\n\n\n\n
\u4eba\u5458\u548c\u8d44\u4ea7\u7684\u7ba1\u7406<\/p>\n\n\n\n
\u5b89\u5168\u5ba1\u8ba1 \/ Auditing<\/p>\n\n\n\n
\u8ffd\u6eaf\u7684\u4fdd\u969c\u548c\u4e8b\u6545\u5206\u6790\u7684\u4f9d\u636e<\/p>\n\n\n\n
\nhttps:\/\/www.jumpserver.org\n<\/div><\/figure>\n\n\n\n
8GB\u5185\u5b58<\/p>\n\n\n\n
jumpserver    192.168.7.10<\/p>\n\n\n\n
\u4e00. \u7f51\u7ad9\u67b6\u6784\u4e3a\u4ec0\u4e48\u8981\u4f7f\u7528\u8df3\u677f\u673a<\/p>\n\n\n\n
\u603b\u800c\u8a00\u4e4b\u4e00\u53e5\u8bdd\uff1a \u4e0d\u60f3\u505a\u80cc\u9505\u4fa0<\/p>\n\n\n\n
\u4e8c. \u5821\u5792\u673a\u7684\u6838\u5fc3\u4ef7\u503c<\/p>\n\n\n\n
1. \u4e3a\u4ec0\u4e48\u8981\u7528\u5821\u5792\u673a\uff1f<\/p>\n\n\n\n
\u901a\u8fc7\u5821\u5792\u673a\u63a7\u5236IT\u7cfb\u7edf\u8fd0\u7ef4\u7684\u98ce\u9669<\/p>\n\n\n\n
2. \u5821\u5792\u673a\u6709\u54ea\u4e9b\u597d\u5904\uff1f<\/p>\n\n\n\n
\u7ba1\u7406\u8005\uff1a<\/p>\n\n\n\n
  \u7edf\u4e00\u5165\u53e3\uff1a\u767b\u5f55\u516c\u53f8\u7684\u4efb\u4f55\u8d44\u6e90\u90fd\u901a\u8fc7\u5821\u5792\u673a<\/p>\n\n\n\n
  \u6279\u91cf\u7ba1\u7406\uff1a\u6279\u91cf\u7684\u7ba1\u7406\u670d\u52a1\u5668\uff0c\u6bd4\u5982: \u6279\u91cf\u7684\u6267\u884c\u547d\u4ee4<\/p>\n\n\n\n
  \u81ea\u52a8\u8fd0\u7ef4\uff1a<\/p>\n\n\n\n
  \u5b89\u5168\u8fd0\u8425\uff1a<\/p>\n\n\n\n
  \u8eab\u4efd\u9274\u522b\uff1a<\/p>\n\n\n\n
  \u8d26\u53f7\u7ba1\u7406\uff1a<\/p>\n\n\n\n
  \u6743\u9650\u63a7\u5236\uff1a\u53ef\u4ee5\u9488\u5bf9\u4e0d\u540c\u7684\u7528\u6237\u6307\u5b9a\u8bbf\u95ee\u4e0d\u540c\u7684\u673a\u5668\uff0c\u8fd8\u6709\u7981\u7528\u4e00\u4e2a\u654f\u611f\u7684\u547d\u4ee4<\/p>\n\n\n\n
  \u5b89\u5168\u5ba1\u8ba1\uff1a\u6267\u884c\u7684\u6bcf\u4e00\u4e2a\u547d\u4ee4\u90fd\u6709\u5f55\u5c4f\u7684\u64cd\u4f5c<\/p>\n\n\n\n
\u6ce8\u610f\u4e8b\u9879\uff1a\u5fc5\u987b\u505a\u65f6\u95f4\u540c\u6b65<\/p>\n\n\n\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
\u4e00\u3001\u5b9e\u9a8c\u73af\u5883\uff1a\u7cfb\u7edf\u8fd8\u539f\u81f3docker \u4e8c\u3001\u4fee\u6539\u8ba1\u7b97\u673a\u540d\u5e76\u505a\u65f6\u95f4\u540c\u6b65 \u4e09\u3001sdb\u78c1\u76d8\u5206\u533a\uff1a \u56db\u3001\u65b0\u5efa\u5206\u533a\u3001\u683c\u5f0f\u5316 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[141],"tags":[147],"class_list":["post-1913","post","type-post","status-publish","format-standard","hentry","category-docker","tag-jumpserver"],"_links":{"self":[{"href":"http:\/\/113.45.254.23\/index.php?rest_route=\/wp\/v2\/posts\/1913","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/113.45.254.23\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/113.45.254.23\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/113.45.254.23\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/113.45.254.23\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1913"}],"version-history":[{"count":2,"href":"http:\/\/113.45.254.23\/index.php?rest_route=\/wp\/v2\/posts\/1913\/revisions"}],"predecessor-version":[{"id":2211,"href":"http:\/\/113.45.254.23\/index.php?rest_route=\/wp\/v2\/posts\/1913\/revisions\/2211"}],"wp:attachment":[{"href":"http:\/\/113.45.254.23\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1913"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/113.45.254.23\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1913"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/113.45.254.23\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1913"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}