diff --git a/v0.5.0-基于-CentOS7.md b/v0.5.0-基于-CentOS7.md index db97795..0f9bca2 100644 --- a/v0.5.0-基于-CentOS7.md +++ b/v0.5.0-基于-CentOS7.md @@ -4,6 +4,18 @@ - 系统: CentOS 7 - IP: 192.168.244.144 +- 关闭 selinux和防火墙 + +``` +# CentOS 7 +$ setenforce 0 # 可以设置配置文件永久关闭 +$ systemctl stop iptables.service +$ systemctl stop firewalld.service + +# CentOS6 +$ setenforce 0 +$ service iptables stop +``` ### 一. 准备Python3和Python虚拟环境 **1.1 安装依赖包** @@ -135,7 +147,7 @@ $ cd /opt/jumpserver $ python run_server.py all ``` -运行不报错,请浏览器访问 http://192.168.244.144:8080/ +运行不报错,请浏览器访问 http://192.168.244.144:8080/ (这里只是jumpserver, 没有web terminal,所以访问web terminal会报错) 账号: admin 密码: admin @@ -179,7 +191,8 @@ Quit the server with CONTROL-C. ``` $ ssh -p2222 admin@192.168.244.144 密码: admin -如果是用Xshell登录语法如下 + +如果是用在windows下,Xshell terminal登录语法如下 $ssh admin@192.168.244.144 2222 密码: admin 如果能登陆代表部署成功 @@ -193,7 +206,16 @@ Luna已改为纯前端,需要nginx来运行访问 访问 https://github.com/jumpserver/luna/releases,下载对应release包 -按照https://github.com/jumpserver/luna/blob/master/nginx.conf 对nginx进行配置 +4.1 解压luna + +``` +$ pwd +/opt/ + +$ tar xvf luna.tar.gz +$ ls /opt/luna +... +``` ### 五. 配置 nginx 整合各组件 @@ -206,6 +228,10 @@ Luna已改为纯前端,需要nginx来运行访问 server { listen 80; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header Host $host; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + location /luna/ { try_files $uri / /index.html; alias /opt/luna/; @@ -222,10 +248,6 @@ server { location /socket.io/ { proxy_pass http://localhost:5000/socket.io/; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header Host $host; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; @@ -239,7 +261,7 @@ server { 5.3 运行 nginx -5.4 访问 http://localhost +5.4 访问 http://192.168.244.144 ## 升级