archery-在rockylinux8上用docker部署sql审计平台

[root@archery ~]# rpm -qa | grep podman

[root@archery ~]# rpm -q podman

package podman is not installed

[root@archery ~]# dnf install -y yum-utils device-mapper-persistent-data lvm2

[root@archery ~]# yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo

Adding repo from: https://download.docker.com/linux/centos/docker-ce.repo

[root@archery ~]# yum -y install docker-ce docker-ce-cli containerd.io

Installed:

container-selinux-2:2.229.0-2.module+el8.10.0+1896+b18fa106.noarch containerd.io-1.6.32-3.1.el8.x86_64

docker-buildx-plugin-0.14.0-1.el8.x86_64 docker-ce-3:26.1.3-1.el8.x86_64

docker-ce-cli-1:26.1.3-1.el8.x86_64 docker-ce-rootless-extras-26.1.3-1.el8.x86_64

docker-compose-plugin-2.27.0-1.el8.x86_64 fuse-overlayfs-1.13-1.module+el8.10.0+1896+b18fa106.x86_64

fuse3-3.3.0-19.el8.x86_64 fuse3-libs-3.3.0-19.el8.x86_64

libcgroup-0.41-19.el8.x86_64 libslirp-4.4.0-2.module+el8.10.0+1896+b18fa106.x86_64

slirp4netns-1.2.3-1.module+el8.10.0+1896+b18fa106.x86_64

Complete!

[root@archery ~]# systemctl enable docker

Created symlink /etc/systemd/system/multi-user.target.wants/docker.service → /usr/lib/systemd/system/docker.service.

[root@archery ~]# systemctl start docker

[root@archery ~]# docker -v

Docker version 26.1.3, build b72abbb

[root@archery ~]# vim /etc/docker/daemon.json

{

"builder": {

"gc": {

"defaultKeepStorage": "20GB",

"enabled": true

}

},

"experimental": false,

"features": {

"buildkit": true

},

"live-restore": true,

"registry-mirrors": [

"https://docker.211678.top",

"https://docker.1panel.live",

"https://hub.rat.dev",

"https://docker.m.daocloud.io",

"https://do.nark.eu.org",

"https://dockerpull.com",

"https://dockerproxy.cn",

"https://docker.awsl9527.cn/"

]

}

[root@archery ~]# systemctl daemon-reload && systemctl restart docker

[root@archery ~]# curl -L "https://github.com/docker/compose/releases/latest/download/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose

[root@archery ~]# chmod +x /usr/local/bin/docker-compose

[root@archery ~]# ln -s /usr/local/bin/docker-compose /usr/bin/docker-compose

[root@archery ~]# docker-compose --version

Docker Compose version v2.33.1

[root@archery ~]# curl https://codeload.github.com/hhyo/Archery/tar.gz/refs/tags/v1.11.3 -o Archery-1.11.3.tar.gz

[root@archery ~]# ll

-rw-r--r-- 1 root root 11403081 Feb 27 18:05 Archery-1.11.3.tar.gz

[root@archery ~]# tar -zxvf Archery-1.11.3.tar.gz

[root@archery ~]# cd Archery-1.11.3/src/docker-compose/

[root@archery ~/Archery-1.11.3/src/docker-compose]# vim docker-compose.yml

version: '3'

services:

redis:

image: redis:5

container_name: redis

restart: always

command: redis-server --requirepass P@88w0rd

expose:

- "6379"

healthcheck:

test: [ "CMD", "redis-cli", "ping" ]

interval: 5s

timeout: 5s

retries: 5

mysql:

image: mysql:5.7

container_name: mysql

restart: always

ports:

- "3306:3306"

volumes:

- "./mysql/my.cnf:/etc/mysql/my.cnf"

- "./mysql/datadir:/var/lib/mysql"

environment:

MYSQL_DATABASE: archery

MYSQL_ROOT_PASSWORD: P@88w0rd

healthcheck:

test: ["CMD", "mysqladmin", "ping"]

[root@archery ~/Archery-1.11.3/src/docker-compose]# docker-compose up -d

WARN[0000] /root/Archery-1.11.3/src/docker-compose/docker-compose.yml: the attribute `version` is obsolete, it will be ignored, please remove it to avoid potential confusion

[+] Running 5/5

✔ Network docker-compose_default Created 0.3s

✔ Container mysql Healthy 7.2s

✔ Container goinception Started 2.4s

✔ Container redis Healthy 7.7s

✔ Container archery Started 8.3s

[+] Running 6/6

✔ Network docker-compose_default Created 0.5s

✔ Container inception Started 35.6s

✔ Container goinception Started 35.1s

✔ Container archery Started 35.8s

✔ Container redis Started 34.1s

✔ Container mysql Started 35.3s

[root@archery ~/Archery-1.11.3/src/docker-compose]# docker exec -ti archery /bin/bash

root@0f266b96e188:/opt# cd /opt/archery

root@0f266b96e188:/opt/archery# source /opt/venv4archery/bin/activate

(venv4archery) root@0f266b96e188:/opt/archery# python3 manage.py makemigrations sql

2025-02-28 08:26:33,920 - environ.environ - INFO - /opt/archery/.env not found - if you're not configuring your environment separately, check this.

Migrations for 'sql':

sql/migrations/0001_initial.py

- Create model SlowQuery

- Create model SlowQueryHistory

- Create model ArchiveConfig

- Create model AuditEntry

- Create model CloudAccessKey

- Create model Config

- Create model DataMaskingRules

- Create model Instance

- Create model InstanceTag

- Create model Permission

- Create model QueryLog

- Create model ResourceGroup

- Create model SqlWorkflow

- Create model Tunnel

- Create model WorkflowAuditDetail

- Create model WorkflowLog

- Create model WorkflowAuditSetting

- Create model WorkflowAudit

- Create model SqlWorkflowContent

- Create model QueryPrivilegesApply

- Create model ParamTemplate

- Create model ParamHistory

- Add field instance_tag to instance

- Add field resource_group to instance

- Add field tunnel to instance

- Create model DataMaskingColumns

- Create model ArchiveLog

- Add field dest_instance to archiveconfig

- Add field resource_group to archiveconfig

- Add field src_instance to archiveconfig

- Create model AliyunRdsConfig

- Create model Users

- Create model TwoFactorAuthConfig

- Create model QueryPrivileges

- Create model InstanceDatabase

- Create model InstanceAccount

(venv4archery) root@0f266b96e188:/opt/archery# python3 manage.py migrate

2025-02-28 08:26:48,483 - environ.environ - INFO - /opt/archery/.env not found - if you're not configuring your environment separately, check this.

Operations to perform:

Apply all migrations: admin, auth, contenttypes, django_q, sessions, sql

Running migrations:

Applying contenttypes.0001_initial... OK

Applying contenttypes.0002_remove_content_type_name... OK

Applying auth.0001_initial... OK

Applying auth.0002_alter_permission_name_max_length... OK

Applying auth.0003_alter_user_email_max_length... OK

Applying auth.0004_alter_user_username_opts... OK

Applying auth.0005_alter_user_last_login_null... OK

Applying auth.0006_require_contenttypes_0002... OK

Applying auth.0007_alter_validators_add_error_messages... OK

Applying auth.0008_alter_user_username_max_length... OK

Applying auth.0009_alter_user_last_name_max_length... OK

Applying auth.0010_alter_group_name_max_length... OK

Applying auth.0011_update_proxy_permissions... OK

Applying auth.0012_alter_user_first_name_max_length... OK

Applying sql.0001_initial... OK

Applying admin.0001_initial... OK

Applying admin.0002_logentry_remove_auto_add... OK

Applying admin.0003_logentry_add_action_flag_choices... OK

Applying django_q.0001_initial... OK

Applying django_q.0002_auto_20150630_1624... OK

Applying django_q.0003_auto_20150708_1326... OK

Applying django_q.0004_auto_20150710_1043... OK

Applying django_q.0005_auto_20150718_1506... OK

Applying django_q.0006_auto_20150805_1817... OK

Applying django_q.0007_ormq... OK

Applying django_q.0008_auto_20160224_1026... OK

Applying django_q.0009_auto_20171009_0915... OK

Applying django_q.0010_auto_20200610_0856... OK

Applying django_q.0011_auto_20200628_1055... OK

Applying django_q.0012_auto_20200702_1608... OK

Applying django_q.0013_task_attempt_count... OK

Applying django_q.0014_schedule_cluster... OK

Applying sessions.0001_initial... OK

(venv4archery) root@0f266b96e188:/opt/archery# python3 manage.py dbshell

2025-02-28 08:30:11,356 - environ.environ - INFO - /opt/archery/.env not found - if you're not configuring your environment separately, check this.

(venv4archery) root@0f266b96e188:/opt/archery# python3 manage.py dbshell

2025-02-28 08:30:25,619 - environ.environ - INFO - /opt/archery/.env not found - if you're not configuring your environment separately, check this.

(venv4archery) root@0f266b96e188:/opt/archery# python3 manage.py createsuperuser

2025-02-28 08:37:18,652 - environ.environ - INFO - /opt/archery/.env not found - if you're not configuring your environment separately, check this.

用户名: admin

电子邮件地址: admin@126.com

Password:

Password (again):

密码跟 电子邮件地址 太相似了。

Bypass password validation and create user anyway? [y/N]: y

Superuser created successfully.

(venv4archery) root@0f266b96e188:/opt/archery# exit

exit

[root@archery ~/Archery-1.11.3/src/docker-compose]# docker restart archery

archery

[root@archery ~/Archery-1.11.3/src/docker-compose]# docker ps

CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES

0f266b96e188 hhyo/archery:v1.11.3 "bash /opt/archery/s…" 22 minutes ago Up 23 seconds 0.0.0.0:9123->9123/tcp, :::9123->9123/tcp archery

57fc84185a87 redis:5 "docker-entrypoint.s…" 22 minutes ago Up 22 minutes (healthy) 6379/tcp redis

da7fde2aa3ba hanchuanchuan/goinception "/usr/local/bin/dumb…" 22 minutes ago Up 22 minutes 0.0.0.0:4000->4000/tcp, :::4000->4000/tcp goinception

3fe992b10f6d mysql:5.7 "docker-entrypoint.s…" 22 minutes ago Up 22 minutes (healthy) 0.0.0.0:3306->3306/tcp, :::3306->3306/tcp, 33060/tcp mysql