Skip to content

Installation offline⚓︎

The offline package extraction requires the 'tar' command, Refer to Enviroment Requirement Installation manually

OS/Arch Architecture Linux Kernel Offline Name
Linux/amd64 x86_64 >= 4.0 jumpserver-offline-installer-v3.10.5-amd64.tar.gz
Linux/arm64 aarch64 >= 4.0 jumpserver-offline-installer-v3.10.5-arm64.tar.gz
Linux/loong64 loongarch64 == 4.19 jumpserver-offline-installer-v3.10.5-loong64.tar.gz

1. Installation and Deployment⚓︎

From FIT2CLOUd community Download latest linux/amd64 offline installation package, and uplaod to the server's '/opt' directory

cd /opt
tar -xf jumpserver-offline-installer-v3.10.5-amd64.tar.gz
cd jumpserver-offline-installer-v3.10.5-amd64
# Modify the configuration file template as needed. If unsure of the parameters in config file, you can skip the modification
cat config-example.txt
# JumpServer configuration file example.
#
# If unsure of the parameters in config file, you can skip the modification and it will be filled automatically by JumpServer.
# Complete parameter documentation https://docs.jumpserver.org/zh/master/admin-guide/env/.

################################## Image Configuration ###################################
#
# Enabling the Huawei Cloud Mirror Acceleration for faster downloads or to avoid timeouts when connecting to docker.io from within China, where connections can be slow or may timeout.
# Replace 'DOCKER_IMAGE_PREFIX' from the old version .
#
# DOCKER_IMAGE_MIRROR=1.

################################## Install and configure ###################################
#
# The JumpServer database persistence directory, where recordings and task logs are stored by default.
# Please modify according to your actual requirements. During upgrades, backup database files (.sql) and configuration files will also be saved in this directory.
#
VOLUME_DIR=/data/jumpserver

# Encryption key, ensure that SECRET_KEY remains consistent during migration from the previous environment. # Avoid using special characters.
# (*) Warning: Keep this value secret.
# (*) Do not disclose the SECRET_KEY to anyone.
#
SECRET_KEY=

# Token used by components to register with the core, ensure that BOOTSTRAP_TOKEN remains consistent during migration from the previous environment.
# Avoid using special characters.
# (*) Warning: Keep this value secret.
# (*) Do not disclose the BOOTSTRAP_TOKEN to anyone.
#
BOOTSTRAP_TOKEN=

# Log lever: INFO, WARN, ERROR
#
LOG_LEVEL=ERROR

# The network segment used by the JumpServer container; ensure it doesn't conflict with existing networks and modify it according to your actual situatio.
#
DOCKER_SUBNET=192.168.250.0/24

# ipv6 nat, There's no need to enable this under normal circumstance.
# Enabling this option on a host that doesn't support IPv6 may result in the host machine to obtain the actual client IP address.
#
USE_IPV6=0
DOCKER_SUBNET_IPV6=fc00:1010:1111:200::/64

################################# MySQL Configuration ##################################
# For an external MySQL setup, need to input the correct MySQL information. The internal MySQL system will handle this automatically.
#
DB_HOST=mysql
DB_PORT=3306
DB_USER=root
DB_PASSWORD=
DB_NAME=jumpserver

# If an external MySQL requires enabling TLS/SSL connection, please refer https://docs.jumpserver.org/zh/master/install/install_security/.
#
# DB_USE_SSL=True

################################# Redis Configuration ##################################
# For an external Redis setup, need to input the correct information. The internal Redis system will handle this automatically.
#
REDIS_HOST=redis
REDIS_PORT=6379
REDIS_PASSWORD=

# If using an external Redis Sentinel, please manually fill in the following information.
#
# REDIS_SENTINEL_HOSTS=mymaster/192.168.100.1:26379,192.168.100.1:26380,192.168.100.1:26381
# REDIS_SENTINEL_PASSWORD=your_sentinel_password
# REDIS_PASSWORD=your_redis_password
# REDIS_SENTINEL_SOCKET_TIMEOUT=5

# If an external Redis requires enabling TLS/SSL connection, Please refer https://docs.jumpserver.org/zh/master/install/install_security/.
#redis-ssl
#
# REDIS_USE_SSL=True

################################## Visit Configuration ###################################
# Port for external service provision; please modify it if it conflicts with existing services.
#
HTTP_PORT=80
SSH_PORT=2222
MAGNUS_MYSQL_PORT=33061
MAGNUS_MARIADB_PORT=33062
MAGNUS_REDIS_PORT=63790

################################# HTTPS Configuration #################################
# refer to: https://docs.jumpserver.org/zh/master/admin-guide/proxy/ 
#
# HTTPS_PORT=443
# SERVER_NAME=your_domain_name
# SSL_CERTIFICATE=your_cert
# SSL_CERTIFICATE_KEY=your_cert_key
#

# The file size limit for uplaoding and dowlaoding with nginx.
#
CLIENT_MAX_BODY_SIZE=4096m

################################## Component configuration ###################################
# Component registration and usage: By default, components register with the core container. In a cluster configuration, it is necessary to modify this to register with the cluster's VIP (Virtual IP) address.        #
CORE_HOST=http://core:8080
PERIOD_TASK_ENABLED=True

# Core Session defined.
# The SESSION_COOKIE_AGE setting indicates the number of seconds of inactivity after which a session expires.
# The SESSION_EXPIRE_AT_BROWSER_CLOSE=true setting denotes that a session expires as soon as the browser is closed.
#
# SESSION_COOKIE_AGE=86400
SESSION_EXPIRE_AT_BROWSER_CLOSE=True

# Trusted DOMAINS 
# Define trusted access IPs, please modify based on actual circumstances. If it's a public IP, replace it with the corresponding public IP
# DOMAINS="demo.jumpserver.org"
# DOMAINS="172.17.200.191"
# DOMAINS="demo.jumpserver.org,172.17.200.191"
DOMAINS=

# Enable font smoothing to enhance the user experience
#
JUMPSERVER_ENABLE_FONT_SMOOTHING=True

################################# XPack Configuration #################################
# Package of XPack, The settings in the open-source edition are ineffective.
#
RDP_PORT=3389
MAGNUS_POSTGRESQL_PORT=54320
MAGNUS_ORACLE_PORTS=30000-30030

################################## Other Confguration ##################################
# The terminal uses the HOSTNAME of the host machine as an identifier, which is automatically generated during the initial installation.
#
SERVER_HOSTNAME=${HOSTNAME}

# If the web page displays an incorrect client IP address when using the built-in SLB, please set USE_LB to 0
# If USE_LB sets to 1,setting proxy_set_header X-Forwarded-For with $remote_addr
# If USE_LB sets to 0,Setting proxy_set_header X-Forwarded-For with $proxy_add_x_forwarded_for
USE_LB=1

# The version number of currently deployed JumpServer, it automatically generated after installation and upgrade.
#
CURRENT_VERSION=
# Install
./jmsctl.sh install

# Start
./jmsctl.sh start

After installation the path of of JumpServer config file is:/opt/jumpserver/config/config.txt

cd jumpserver-offline-release-v3.10.5-amd64

# Start
./jmsctl.sh start

# Stop
./jmsctl.sh down

# Uninstall
./jmsctl.sh uninstall

# Help
./jmsctl.sh -h

Downlaod installation package from FIT2CLOUD community Dowlaoding the latest linux/arm64 offline installation package, and uplaod to '/opt' on the server to be configured.

cd /opt
tar -xf jumpserver-offline-installer-v3.10.5-arm64.tar.gz
cd jumpserver-offline-installer-v3.10.5-arm64
# Modify the configuration file template as needed. If you're unsure of its purpose, you can skip making changes.
cat config-example.txt
# JumpServer configuration file example.
#
# If you are unsure of its purpose, JumpServer will fill it automatically.
# Complete parameter documentation refer to https://docs.jumpserver.org/zh/master/admin-guide/env/.

################################## Image Configuration ###################################
#
# When connecting to docker.io from within China, there may be timeouts or slow download speeds. Enable this option to use Huawei Cloud's image acceleration.
# Replaced DOCKER_IMAGE_PREFIX of older version.
#
# DOCKER_IMAGE_MIRROR=1

################################## Installation Configuration ###################################
#
# The persistent directory for JumpServer's database, by default, contains recordings and task logs.
# Modify this according to the actual situation. During upgrades, database backup files (.sql) and configuration files will also be saved to this directory.
#
VOLUME_DIR=/data/jumpserver

# For encryption keys, ensure that the SECRET_KEY remains consistent during migration with the privous environment. Avoid using special characters.
# (*) Warning: Keep this value secret.
# (*) Do not disclose the SECRET_KEY to anyone.
#
SECRET_KEY=

# The token used for component registration with the core, please keep consistent with privous  BOOTSTRAP_TOKEN.
# Please refrain from using special characters.
# (*) Warning: Keep this value secret.
# (*) Do not disclose the BOOTSTRAP_TOKEN to anyone.
#
BOOTSTRAP_TOKEN=

# Log Level INFO, WARN, ERROR
#
LOG_LEVEL=ERROR

# The network used by the JumpServer container should not conflict with existing networks. Please modify it according to your actual situation.
#
DOCKER_SUBNET=192.168.250.0/24

# ipv6 nat, Under normal circumstances, there's no need to enable.
# Enabling this option on a host that doesn't support IPv6 will result in the inability to obtain the real client IP address.
#
USE_IPV6=0
DOCKER_SUBNET_IPV6=fc00:1010:1111:200::/64

################################# MySQL Configuration ##################################
# For an external MySQL setup, ensure the correct MySQL information is provided. The internal MySQL system will handle this automatically.
#
DB_HOST=mysql
DB_PORT=3306
DB_USER=root
DB_PASSWORD=
DB_NAME=jumpserver

# If using an external MySQL setup requires enabling TLS/SSL connections,please refer to: https://docs.jumpserver.org/zh/master/install/install_security/.
#ssl
#
# DB_USE_SSL=True

################################# Redis Configuration ##################################
# For an external Redis setup, ensure the correct Redis information is provided, The internal Redis system will handle this automatically.
#
REDIS_HOST=redis
REDIS_PORT=6379
REDIS_PASSWORD=

# If using an external Redis Sentinel, please manually fill in the following information.
#
# REDIS_SENTINEL_HOSTS=mymaster/192.168.100.1:26379,192.168.100.1:26380,192.168.100.1:26381
# REDIS_SENTINEL_PASSWORD=your_sentinel_password
# REDIS_PASSWORD=your_redis_password
# REDIS_SENTINEL_SOCKET_TIMEOUT=5

# If using an external Redis setup requires enabling TLS/SSL connections, please refer to: https://docs.jumpserver.org/zh/master/install/install_security/.
#redis-ssl
#
# REDIS_USE_SSL=True

################################## Access Configuration ###################################
# The port for external service provision. If it conflicts with existing services, please modify it accordingly.
#
HTTP_PORT=80
SSH_PORT=2222
MAGNUS_MYSQL_PORT=33061
MAGNUS_MARIADB_PORT=33062
MAGNUS_REDIS_PORT=63790

################################# HTTPS Configuration #################################
# Please refer to: https://docs.jumpserver.org/zh/master/admin-guide/proxy/.
#
# HTTPS_PORT=443
# SERVER_NAME=your_domain_name
# SSL_CERTIFICATE=your_cert
# SSL_CERTIFICATE_KEY=your_cert_key
#

# The size limits for file uploads and downloads in Nginx.
#
CLIENT_MAX_BODY_SIZE=4096m

################################## Component Congiuration ###################################
# Component registration and usage: By default, components register with the core container. In a clustered environment, it is necessary to modify this to register with the cluster's VIP (Virtual IP) address.
#
CORE_HOST=http://core:8080
PERIOD_TASK_ENABLED=True

# Core Session define.
# The SESSION_COOKIE_AGE setting indicates the number of seconds of inactivity after which a session expires.
# 'SESSION_EXPIRE_AT_BROWSER_CLOSE=true' indicates that the session expires as soon as the browser is closed.
#
# SESSION_COOKIE_AGE=86400
SESSION_EXPIRE_AT_BROWSER_CLOSE=True

# Trusted DOMAINS 
# Define trusted access IPs, please modify based on actual circumstances. If it's a public IP, replace it with the corresponding public IP.
# DOMAINS="demo.jumpserver.org"
# DOMAINS="172.17.200.191"
# DOMAINS="demo.jumpserver.org,172.17.200.191"
DOMAINS=

# Enable font smoothing to enhance the user experience.
#
JUMPSERVER_ENABLE_FONT_SMOOTHING=True

################################# XPack Configuration #################################
# Package of XPack, The settings in the open-source edition are ineffective.
#
RDP_PORT=3389
MAGNUS_POSTGRESQL_PORT=54320
MAGNUS_ORACLE_PORTS=30000-30030

################################## Other Configuration ##################################
# The terminal uses the HOSTNAME of the host machine as an identifier, which is automatically generated during the initial installation.
#
SERVER_HOSTNAME=${HOSTNAME}

# If the web page displays an incorrect client IP address when using the built-in SLB, please set USE_LB to 0
# If USE_LB sets to 1,setting proxy_set_header X-Forwarded-For with $remote_addr
# If USE_LB sets to 0,Setting proxy_set_header X-Forwarded-For with $proxy_add_x_forwarded_for
USE_LB=1

# The version number of currently deployed JumpServer, it automatically generated after installation and upgrade.
#
CURRENT_VERSION=
# Installation
./jmsctl.sh install

# Start
./jmsctl.sh start

After installation the path of of JumpServer config file is:/opt/jumpserver/config/config.txt

cd jumpserver-offline-release-v3.10.5-arm64

# Start
./jmsctl.sh start

# Stop
./jmsctl.sh down

# Uninstall
./jmsctl.sh uninstall

# Help
./jmsctl.sh -h

Downlaod installation package from FIT2CLOUD community Dowlaoding the latest linux/arm64 offline installation package, and uplaod to '/opt' on the server to be configured

cd /opt
tar -xf jumpserver-offline-installer-v3.10.5-loong64.tar.gz
cd jumpserver-offline-installer-v3.10.5-loong64
# Modify the configuration file template as needed. If you're unsure of its purpose, you can skip making change.
cat config-example.txt
# JumpServer configuration file example.
#
# Modify the configuration file template as needed. If you're unsure of its purpose, you can skip making changes.
#  Complete parameter documentation refer to  https://docs.jumpserver.org/zh/master/admin-guide/env/.

################################## Image Configuration ###################################
#
# When connecting to docker.io from within China, there may be timeouts or slow download speeds, Enable this option to use Huawei Cloud's image acceleration.
# Replaced DOCKER_IMAGE_PREFIX of old version.
#
# DOCKER_IMAGE_MIRROR=1

################################## Installation Configuration ###################################
#
# The persistent directory for JumpServer's database, by default, contains recordings and task logs.
# Modify this according to the actual situation. During upgrades, database backup files (.sql) and configuration files will also be saved to this directory.
#
VOLUME_DIR=/data/jumpserver

# For encryption keys, ensure that the SECRET_KEY remains consistent during migration with the privous environment. Avoid using special characters.
# (*) Warning: Keep this value secret.
# (*) Do not disclose the SECRET_KEY to anyone.
#
SECRET_KEY=

# The token used for component registration with the core, please keep consistent with privous  BOOTSTRAP_TOKEN.
# Do not use special characters.
# (*) Warning: Keep this value secret.
# (*) Do not disclose the BOOTSTRAP_TOKEN to anyone.
#
BOOTSTRAP_TOKEN=

# Log Level INFO, WARN, ERROR
#
LOG_LEVEL=ERROR

# The network used by the JumpServer container should not conflict with existing networks. Please modify it according to your actual situation.

#
DOCKER_SUBNET=192.168.250.0/24

# ipv6 nat, Under normal circumstances, there's no need to enable.
# Enabling this option on a host that doesn't support IPv6 will result in the inability to obtain the real client IP address.
#
USE_IPV6=0
DOCKER_SUBNET_IPV6=fc00:1010:1111:200::/64

################################# MySQL Configuration ##################################
# For an external MySQL setup, ensure the correct MySQL information is provided. The internal MySQL system will handle this automatically.
#
DB_HOST=mysql
DB_PORT=3306
DB_USER=root
DB_PASSWORD=
DB_NAME=jumpserver

#  If using an external MySQL setup requires enabling TLS/SSL connections,please refer to: https://docs.jumpserver.org/zh/master/install/install_security/.
#ssl
#
# DB_USE_SSL=True

################################# Redis Configuration ##################################
# For an external Redis setup, ensure the correct Redis information is provided, The internal Redis system will handle this automatically.
#
REDIS_HOST=redis
REDIS_PORT=6379
REDIS_PASSWORD=

# If using an external Redis Sentinel, please manually fill in the following information.
#
# REDIS_SENTINEL_HOSTS=mymaster/192.168.100.1:26379,192.168.100.1:26380,192.168.100.1:26381
# REDIS_SENTINEL_PASSWORD=your_sentinel_password
# REDIS_PASSWORD=your_redis_password
# REDIS_SENTINEL_SOCKET_TIMEOUT=5

#  If using an external Redis setup requires enabling TLS/SSL connections, please refer to: https://docs.jumpserver.org/zh/master/install/install_security/.
#redis-ssl
#
# REDIS_USE_SSL=True

################################## Access Configuration ###################################
# The port for external service provision. If it conflicts with existing services, please modify it accordingly.
#
HTTP_PORT=80
SSH_PORT=2222
MAGNUS_MYSQL_PORT=33061
MAGNUS_MARIADB_PORT=33062
MAGNUS_REDIS_PORT=63790

################################# HTTPS Configuration #################################
# Please refer to: https://docs.jumpserver.org/zh/master/admin-guide/proxy/. 
#
# HTTPS_PORT=443
# SERVER_NAME=your_domain_name
# SSL_CERTIFICATE=your_cert
# SSL_CERTIFICATE_KEY=your_cert_key
#

# The size limits for file uploads and downloads in Nginx.
#
CLIENT_MAX_BODY_SIZE=4096m

################################## Component Configuration ###################################
# Component registration and usage: By default, components register with the core container. In a clustered environment, it is necessary to modify this to register with the cluster's VIP (Virtual IP) address.
#
CORE_HOST=http://core:8080
PERIOD_TASK_ENABLED=True

# Core Session define,
# The SESSION_COOKIE_AGE setting indicates the number of seconds of inactivity after which a session expires.
# 'SESSION_EXPIRE_AT_BROWSER_CLOSE=true' indicates that the session expires as soon as the browser is closed
#
# SESSION_COOKIE_AGE=86400
SESSION_EXPIRE_AT_BROWSER_CLOSE=True

# Trusted DOMAINS 
# Define trusted access IPs, please modify based on actual circumstances. If it's a public IP, replace it with the corresponding public IP
# DOMAINS="demo.jumpserver.org"
# DOMAINS="172.17.200.191"
# DOMAINS="demo.jumpserver.org,172.17.200.191"
DOMAINS=

# Enable font smoothing to enhance the user experience.
#
JUMPSERVER_ENABLE_FONT_SMOOTHING=True

################################# XPack Configuration #################################
# Package of XPack, The settings in the open-source edition are ineffective.
#
RDP_PORT=3389
MAGNUS_POSTGRESQL_PORT=54320
MAGNUS_ORACLE_PORTS=30000-30030

################################## Other Configuration ##################################
# The terminal uses the HOSTNAME of the host machine as an identifier, which is automatically generated during the initial installation.
#
SERVER_HOSTNAME=${HOSTNAME}

# If the web page displays an incorrect client IP address when using the built-in SLB, please set USE_LB to 0
# If USE_LB sets to 1,setting proxy_set_header X-Forwarded-For with $remote_addr
# If USE_LB sets to 0,Setting proxy_set_header X-Forwarded-For with $proxy_add_x_forwarded_for
USE_LB=1


# The version number of currently deployed JumpServer, it automatically generated after installation and upgrade.
#
CURRENT_VERSION=
# Installation
./jmsctl.sh install

# Start
./jmsctl.sh start

After installation the path of of JumpServer config file is:/opt/jumpserver/config/config.txt

cd jumpserver-offline-release-v3.10.5-loong64

# Start
./jmsctl.sh start

# Stop
./jmsctl.sh down

# Uninstall
./jmsctl.sh uninstall

# Help
./jmsctl.sh -h

2. Access URL⚓︎

After a successful installation,you can acceess JumpServer through a Web Browser.

Access URL: http://<JumpServer host IP address>:<Service Port>
UserName: admin
Password: admin

Login Homepage