Jumpserver高可用集群部署：（七）RDP代理模块guacamole部署并实现系统服务管理

2020-11-06 07:02:14 阅读：273 来源： 互联网

标签：guacamole tar 部署 jumpserver export sas devel Jumpserver RDP

1、配置防火墙

firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="10.255.200.1/30" port protocol="tcp" port="8081" accept"
firewall-cmd --reload

2、下载guacamole

cd /sas/src/
wget -O docker-guacamole-v2.3.2.tar.gz https://github.com/jumpserver/docker-guacamole/archive/master.tar.gz

mkdir /sas/src/docker-guacamole 
tar -xf docker-guacamole-v2.3.2.tar.gz -C /sas/src/docker-guacamole --strip-components 1 
rm -rf /sas/src/docker-guacamole-v2.3.2.tar.gz
cd /sas/src/docker-guacamole
wget http://download.jumpserver.org/public/guacamole-server-1.2.0.tar.gz 
tar -xf guacamole-server-1.2.0.tar.gz 
wget http://download.jumpserver.org/public/ssh-forward.tar.gz
tar -xf ssh-forward.tar.gz -C /bin/ 
chmod +x /bin/ssh-forward
cd /sas/src/docker-guacamole/guacamole-server-1.2.0

3、安装guacamole相关依赖

yum install -y cairo-devel libjpeg-turbo-devel libjpeg-devel libpng-devel libtool uuid-devel
yum install -y freerdp-devel pango-devel libssh2-devel libtelnet-devel libvncserver-devel libwebsockets-devel pulseaudio-libs-devel openssl-devel libvorbis-devel libwebp-devel

rpm --import http://li.nux.ro/download/nux/RPM-GPG-KEY-nux.ro
rpm -Uvh http://li.nux.ro/download/nux/dextop/el7/x86_64/nux-dextop-release-0-5.el7.nux.noarch.rpm
yum install -y ffmpeg-devel

4、编译guacamole

./configure --with-init-dir=/etc/init.d
make
make install

5、安装JDK

yum install -y java-1.8.0-openjdk

6、创建guacamole相关目录

mkdir -p /sas/jumpserver/guacamole /sas/jumpserver/guacamole/extensions /sas/jumpserver/guacamole/record /sas/jumpserver/guacamole/drive 
chown daemon:daemon /sas/jumpserver/guacamole/record /sas/jumpserver/guacamole/drive 
cd /sas/jumpserver

7、下载并配置Tomcat9

wget http://mirrors.tuna.tsinghua.edu.cn/apache/tomcat/tomcat-9/v9.0.38/bin/apache-tomcat-9.0.38.tar.gz

tar -xf apache-tomcat-9.0.38.tar.gz
mv apache-tomcat-9.0.38 tomcat9
rm -rf /sas/jumpserver/tomcat9/webapps/*
sed -i 's/Connector port="8080"/Connector port="8081"/g' /sas/jumpserver/tomcat9/conf/server.xml
echo "java.util.logging.ConsoleHandler.encoding = UTF-8" >> /sas/jumpserver/tomcat9/conf/logging.properties

wget http://download.jumpserver.org/release/v2.3.2/guacamole-client-v2.3.2.tar.gz
tar -xf guacamole-client-v2.3.2.tar.gz
cp guacamole-client-v2.3.2/guacamole-*.war /sas/jumpserver/tomcat9/webapps/ROOT.war
cp guacamole-client-v2.3.2/guacamole-*.jar /sas/jumpserver/guacamole/extensions/
mv /sas/src/docker-guacamole/guacamole.properties /sas/jumpserver/guacamole/

8、设置 Guacamole 环境

export JUMPSERVER_SERVER=https://10.255.200.5
echo "export JUMPSERVER_SERVER= https://10.255.200.5" >> ~/.bashrc

export BOOTSTRAP_TOKEN=xxxxxxxxxxxxxxxxx
echo "export BOOTSTRAP_TOKEN=xxxxxxxxxxxxxxxxx" >> ~/.bashrc

export JUMPSERVER_KEY_DIR=/sas/jumpserver/guacamole/data/keys
echo "export JUMPSERVER_KEY_DIR=/sas/jumpserver/guacamole/data/keys" >> ~/.bashrc

export GUACAMOLE_HOME=/sas/jumpserver/guacamole
echo "export GUACAMOLE_HOME=/sas/jumpserver/guacamole" >> ~/.bashrc

export GUACAMOLE_LOG_LEVEL=ERROR
echo "export GUACAMOLE_LOG_LEVEL=ERROR" >> ~/.bashrc

export JUMPSERVER_ENABLE_DRIVE=true
echo "export JUMPSERVER_ENABLE_DRIVE=true" >> ~/.bashrc

9、测试启动Guacamole

/etc/init.d/guacd start
sh /sas/jumpserver/tomcat9/bin/startup.sh

10、编写systemd系统服务管理脚本

# 编写启动脚本
vi /sas/jumpserver/tools/guacamole.service.sh

#!/bin/bash

export JUMPSERVER_SERVER=https://10.255.200.5
export BOOTSTRAP_TOKEN=xxxxxxxxxxxxxx
export JUMPSERVER_KEY_DIR=/sas/jumpserver/guacamole/data/keys
export GUACAMOLE_HOME=/sas/jumpserver/guacamole
export GUACAMOLE_LOG_LEVEL=ERROR
export JUMPSERVER_ENABLE_DRIVE=true

case $1 in
start)
    /etc/init.d/guacd start
    sh /sas/jumpserver/tomcat9/bin/startup.sh
    ;;
stop)
    sh /sas/jumpserver/tomcat9/bin/shutdown.sh
    /etc/init.d/guacd stop
    ;;
restart)
    sh /sas/jumpserver/tomcat9/bin/shutdown.sh
    /etc/init.d/guacd restart
    sh /sas/jumpserver/tomcat9/bin/startup.sh
    ;;
*)
    ;;
esac

# 编写服务配置文件
vi /usr/lib/system/system/guacamole.service

[Unit]
Description=Jumpserver Guacamole Services
After=network.target remote-fs.target keepalived.service jumpserver.service

[Service]
Type=forking
ExecStart=/usr/bin/bash /sas/jumpserver/tools/guacamole.service.sh start
ExecReload=/usr/bin/bash /sas/jumpserver/tools/guacamole.service.sh restart
ExecStop=/usr/bin/bash /sas/jumpserver/tools/guacamole.service.sh stop
Restart=on-failure
RestartSec=5

[Install]
WantedBy=multi-user.target

标签：guacamole,tar,部署,jumpserver,export,sas,devel,Jumpserver,RDP
来源： https://blog.51cto.com/dusthunter/2547211

本站声明： 1. iCode9 技术分享网（下文简称本站）提供的所有内容，仅供技术学习、探讨和分享；
2. 关于本站的所有留言、评论、转载及引用，纯属内容发起人的个人观点，与本站观点和立场无关；
3. 关于本站的所有言论和文字，纯属内容发起人的个人观点，与本站观点和立场无关；
4. 本站文章均是网友提供，不完全保证技术分享内容的完整性、准确性、时效性、风险性和版权归属；如您发现该文章侵犯了您的权益，可联系我们第一时间进行删除；
5. 本站为非盈利性的个人网站，所有内容不会用来进行牟利，也不会利用任何形式的广告来间接获益，纯粹是为了广大技术爱好者提供技术内容和技术思想的分享性交流网站。

ICode9