方式一用root用户安装的环境改成普通用户(以root权限操作)

创建对应普通用户

本例以kaite为例:

  1. 创建用户
    useradd kaite
  2. 设置密码
    passwd kaite
  3. 设置sudo权限免密
    cat /etc/sudoers.d/kaite
    kaite ALL=(ALL) NOPASSWD: ALL
修改服务器用户信息
  • 修改对应数据库服务器的信息
    数据库: jecloud-meta
    表: je_framework_server
    字段: SERVER_PASSWORD,SERVER_USERNAME
添加环境变量
[kaite@iZ2zefg01jz41y78k2invmZ ~]$ cat /home/kaite/.bashrc
# .bashrc

# Source global definitions
if [ -f /etc/bashrc ]; then
    . /etc/bashrc
fi

# Uncomment the following line if you don't like systemctl's auto-paging feature:
# export SYSTEMD_PAGER=

# User specific aliases and functions
export JAVA_HOME=/opt/jdk1.8.0_191
export java=/opt/jdk1.8.0_191/bin/java
export PATH=$JAVA_HOME/bin:$JAVA_HOME/jre/bin:$PATH
export CLASSPATH=.$CLASSPATH:$JAVA_HOME/lib:$JAVA_HOME/jre/lib:$JAVA_HOME/lib/tools.jar
export MAVEN_HOME=/data/application/maven/
export PATH=$MAVEN_HOME/bin:$PATH
export LD_LIBRARY_PATH=/opt/oracle/instantclient_19_21
export PKG_CONFIG_PATH=/opt/oracle
联系商务获取jeinit和operator
  1. 替换对应的jeinit和operator
  2. 重启operator
    ./jeinit restart --name operator

方式二用root用户安装的环境改成普通用户(以普通用户权限操作)

创建对应普通用户

本例以kaite为例:

  1. 创建用户
    useradd kaite
  2. 设置密码
    passwd kaite
  3. 设置sudo权限免密
    cat /etc/sudoers.d/kaite
    kaite ALL=(ALL) NOPASSWD: ALL
修改服务器用户信息
  • 修改对应数据库服务器的信息
    数据库: jecloud-meta
    表: je_framework_server
    字段: SERVER_PASSWORD,SERVER_USERNAME
添加环境变量
[kaite@iZ2zefg01jz41y78k2invmZ ~]$ cat /home/kaite/.bashrc
# .bashrc

# Source global definitions
if [ -f /etc/bashrc ]; then
    . /etc/bashrc
fi

# Uncomment the following line if you don't like systemctl's auto-paging feature:
# export SYSTEMD_PAGER=

# User specific aliases and functions
export JAVA_HOME=/opt/jdk1.8.0_191
export java=/opt/jdk1.8.0_191/bin/java
export PATH=$JAVA_HOME/bin:$JAVA_HOME/jre/bin:$PATH
export CLASSPATH=.$CLASSPATH:$JAVA_HOME/lib:$JAVA_HOME/jre/lib:$JAVA_HOME/lib/tools.jar
export MAVEN_HOME=/data/application/maven/
export PATH=$MAVEN_HOME/bin:$PATH
export LD_LIBRARY_PATH=/opt/oracle/instantclient_19_21
export PKG_CONFIG_PATH=/opt/oracle
联系商务获取jeinit和operator
  1. 替换对应的jeinit和operator
  2. 重启operator
    ./jeinit restart --name operator
上传证书

说明:证书可以从原来的/root目录复制到/home/kaite目录

  1. 证书目录
    /home/kaite/license
  2. 插件目录
    /home/kaite/plugins
关闭服务

可以关闭所有或者关闭其他的服务
./jeinit stop --name all

文件夹授权
cd /data
#后台目录授权
chown -R kaite:kaite jecloud
#对apollo授权
chown -R kaite:kaite apollo
# 注册中心授权
[root@iZ2zefg01jz41y78k2invmZ data]# cd application/
[root@iZ2zefg01jz41y78k2invmZ application]# ls
maven  openresty  servicecomb
[root@iZ2zefg01jz41y78k2invmZ application]# ll
总用量 12
drwxr-xr-x 7 root  root  4096 328 2019 maven
drwxr-xr-x 8 nginx nginx 4096 819 11:31 openresty
drwxr-x--- 8 ttt   ttt   4096 818 16:20 servicecomb
[root@iZ2zefg01jz41y78k2invmZ application]# chown -R kaite:kaite servicecomb
#job日志授权
[kaite@iZ2zefg01jz41y78k2invmZ data]$ sudo chown -R kaite:kaite applogs
[kaite@iZ2zefg01jz41y78k2invmZ data]$ ll
total 24
drwxr-xr-x  8 kaite kaite 4096 Aug 14 11:22 apollo
drwxr-xr-x  5 root  root  4096 Aug 14 11:35 application
drwxr-xr-x  3 kaite kaite 4096 Aug 14 11:25 applogs
drwxr-xr-x 12 kaite kaite 4096 Aug 14 11:34 jecloud
drwxr-xr-x 12 mysql mysql 4096 Apr 10 15:58 mysql
drwxr-xr-x  6 redis redis 4096 Aug 14 11:21 redis
修改mysql启动对用户

修改/etc/init.d/mysqld文件
将原内容$bindir/mysqld_safe --datadir="$datadir" --pid-file="$mysqld_pid_file_path" $other_args >/dev/null &
修改为
su - mysql -c "nohup $bindir/mysqld_safe --datadir=\"$datadir\" --pid-file=\"$mysqld_pid_file_path\" $other_args >/dev/null 2>&1 &"
修改的内容为:


 #$bindir/mysqld_safe --datadir="$datadir" --pid-file="$mysqld_pid_file_path" $other_args >/dev/null &
      su - mysql -c "nohup $bindir/mysqld_safe --datadir=\"$datadir\" --pid-file=\"$mysqld_pid_file_path\" $other_args >/dev/null 2>&1 &"
修改config.yaml配置文件
#设置开启普通用户,所有java进程用kaite用户运行
ordinaryUser: true
single:
  host: 172.17.8.147
  username: kaite
  password: 123456
  port: 22
mysql:
  host: 172.17.8.147
  username: kaite
  password: 123456
  port: 22
重启服务

重启所有服务或者重启对应的服务
./jeinit start --name all

  1. 验证
    查看服务器进程是否是kaite
最后编辑: 翟厚翔  文档更新时间: 2025-08-29 13:59   作者:翟厚翔