[{"data":1,"prerenderedAt":238},["ShallowReactive",2],{"content:\u002Fposts\u002Fminio-install":3,"surround:\u002Fposts\u002Fminio-install":227},{"id":4,"title":5,"body":6,"categories":201,"date":203,"description":204,"draft":205,"extension":206,"image":207,"meta":208,"navigation":210,"path":211,"permalink":207,"pinned":205,"published":207,"readingTime":212,"recommend":207,"references":207,"seo":217,"sitemap":218,"stem":219,"tags":220,"type":225,"updated":203,"__hash__":226},"content\u002Fposts\u002Fposts\u002Fminio-install.md","MinIO 对象存储部署与安全策略指南",{"type":7,"value":8,"toc":185},"minimark",[9,19,22,33,42,47,58,67,71,79,84,92,96,103,107,116,120,126,130,139,142,149,157,160,167,173],[10,11,15],"alert",{"type":12,"icon":13,"title":14},"info","tabler:robot","AI 迁移提示",[16,17,18],"p",{},"本文由 AI 协助从旧站迁移，尚未完成逐篇人工审校；内容如有疏漏，将在复核后修订。",[16,20,21],{},"MinIO 是一个兼容 Amazon S3 接口的高性能开源对象存储服务，适合存储非结构化数据（图片、视频、备份文件等）。",[10,23,25],{"type":24},"warning",[16,26,27,28,32],{},"MinIO 从 ",[29,30,31],"code",{"code":31},"RELEASE.2025-04-22T22-12-26Z"," 版本起转为收费授权，本文部署的是该最后免费版本。",[16,34,35,36],{},"官网：",[37,38,39],"a",{"href":39,"rel":40},"https:\u002F\u002Fwww.minio.org.cn",[41],"nofollow",[43,44,46],"h2",{"id":45},"一docker-compose-部署推荐","一、Docker Compose 部署（推荐）",[48,49,56],"pre",{"className":50,"code":52,"filename":53,"language":54,"meta":55},[51],"language-yaml","services:\n  minio:\n    image: minio\u002Fminio:RELEASE.2025-04-22T22-12-26Z\n    container_name: minio\n    hostname: minio\n    ports:\n      - 9000:9000   # API\n      - 9001:9001   # Console\n    volumes:\n      - .\u002Fdata:\u002Fdata\n    environment:\n      - MINIO_ROOT_USER=admin\n      - MINIO_ROOT_PASSWORD=Aa123456\n    restart: always\n    command: server --address ':9000' --console-address ':9001' \u002Fdata\n    networks:\n      - app-net\n\nnetworks:\n  app-net:\n    external: true\n","docker-compose.yaml","yaml","",[29,57,52],{"__ignoreMap":55},[10,59,60],{"type":24},[16,61,62,63,66],{},"示例中的 ",[29,64,65],{"code":65},"MINIO_ROOT_PASSWORD"," 仅用于演示。生产环境必须改为长度至少 16 位的随机强密码。",[43,68,70],{"id":69},"二二进制文件部署","二、二进制文件部署",[16,72,73,74],{},"二进制文件归档下载地址：",[37,75,78],{"href":76,"rel":77},"https:\u002F\u002Fdl.min.io\u002Fserver\u002Fminio\u002Frelease\u002Flinux-amd64\u002Farchive\u002F",[41],"minio-archive",[80,81,83],"h3",{"id":82},"_1-下载并配置","1. 下载并配置",[48,85,90],{"className":86,"code":88,"language":89,"meta":55},[87],"language-bash","wget https:\u002F\u002Fdl.min.io\u002Fserver\u002Fminio\u002Frelease\u002Flinux-amd64\u002Farchive\u002Fminio.RELEASE.2025-04-22T22-12-26Z\nmkdir -p \u002Fopt\u002Fminio\nmv minio.RELEASE.2025-04-22T22-12-26Z \u002Fopt\u002Fminio\u002Fminio\nchmod +x \u002Fopt\u002Fminio\u002Fminio\n","bash",[29,91,88],{"__ignoreMap":55},[80,93,95],{"id":94},"_2-创建配置文件","2. 创建配置文件",[48,97,101],{"className":98,"code":99,"filename":100,"language":89,"meta":55},[87],"# 数据存放目录\nMINIO_VOLUMES=\"\u002Fopt\u002Fminio\u002Fdata\"\n# 端口配置：API:9000，Console:9001\nMINIO_OPTS=\"--address :9000 --console-address :9001\"\n# 管理员账号\nMINIO_ROOT_USER=\"admin\"\nMINIO_ROOT_PASSWORD=\"Aa123456\"\n","\u002Fopt\u002Fminio\u002Fminio.conf",[29,102,99],{"__ignoreMap":55},[80,104,106],{"id":105},"_3-配置-systemd-服务","3. 配置 Systemd 服务",[48,108,114],{"className":109,"code":111,"filename":112,"language":113,"meta":55},[110],"language-ini","[Unit]\nDescription=MinIO\nDocumentation=https:\u002F\u002Fdocs.min.io\nWants=network-online.target\nAfter=network-online.target\nAssertFileIsExecutable=\u002Fopt\u002Fminio\u002Fminio\n\n[Service]\nUser=root\nGroup=root\nEnvironmentFile=\u002Fopt\u002Fminio\u002Fminio.conf\nExecStart=\u002Fopt\u002Fminio\u002Fminio server $MINIO_OPTS $MINIO_VOLUMES\nRestart=always\nLimitNOFILE=65536\nTimeoutStopSec=infinity\nSendSIGKILL=no\n\n[Install]\nWantedBy=multi-user.target\n","\u002Fetc\u002Fsystemd\u002Fsystem\u002Fminio.service","ini",[29,115,111],{"__ignoreMap":55},[80,117,119],{"id":118},"_4-启动服务","4. 启动服务",[48,121,124],{"className":122,"code":123,"language":89,"meta":55},[87],"systemctl daemon-reload\nsystemctl enable minio\nsystemctl start minio\nsystemctl status minio\njournalctl -u minio.service -f\n",[29,125,123],{"__ignoreMap":55},[43,127,129],{"id":128},"三存储桶安全策略","三、存储桶安全策略",[10,131,132],{"type":24},[16,133,134,135,138],{},"将存储桶配置为 ",[29,136,137],{"code":137},"public"," 后，任何人均可通过 HTTP 请求上传、删除或列出目录。应通过自定义策略严格限制操作权限。",[80,140,141],{"id":141},"仅允许公共读",[16,143,144,145,148],{},"以下策略允许任何人读取文件（",[29,146,147],{"code":147},"GetObject","），但禁止写入、删除和列目录：",[48,150,155],{"className":151,"code":153,"language":154,"meta":55},[152],"language-json","{\n  \"Version\": \"2012-10-17\",\n  \"Statement\": [\n    {\n      \"Effect\": \"Allow\",\n      \"Principal\": \"*\",\n      \"Action\": [\"s3:GetObject\"],\n      \"Resource\": [\"arn:aws:s3:::your-bucket-name\u002F*\"]\n    },\n    {\n      \"Effect\": \"Deny\",\n      \"Principal\": \"*\",\n      \"Action\": [\n        \"s3:PutObject\",\n        \"s3:DeleteObject\",\n        \"s3:PutBucketPolicy\",\n        \"s3:DeleteBucketPolicy\"\n      ],\n      \"Resource\": [\n        \"arn:aws:s3:::your-bucket-name\",\n        \"arn:aws:s3:::your-bucket-name\u002F*\"\n      ]\n    }\n  ]\n}\n","json",[29,156,153],{"__ignoreMap":55},[80,158,159],{"id":159},"仅禁止列目录",[16,161,162,163,166],{},"如果只需防止目录遍历，可单独添加以下 ",[29,164,165],{"code":165},"Deny"," 规则：",[48,168,171],{"className":169,"code":170,"language":154,"meta":55},[152],"{\n  \"Version\": \"2012-10-17\",\n  \"Statement\": [\n    {\n      \"Effect\": \"Deny\",\n      \"Principal\": \"*\",\n      \"Action\": \"s3:ListBucket\",\n      \"Resource\": \"arn:aws:s3:::your-bucket-name\"\n    }\n  ]\n}\n",[29,172,170],{"__ignoreMap":55},[16,174,175,176,179,180,184],{},"将 ",[29,177,178],{"code":178},"your-bucket-name"," 替换为实际存储桶名称，然后在 MinIO Console 的 ",[181,182,183],"strong",{},"Bucket → Access Policy"," 中粘贴并保存即可。",{"title":55,"searchDepth":186,"depth":186,"links":187},4,[188,190,197],{"id":45,"depth":189,"text":46},2,{"id":69,"depth":189,"text":70,"children":191},[192,194,195,196],{"id":82,"depth":193,"text":83},3,{"id":94,"depth":193,"text":95},{"id":105,"depth":193,"text":106},{"id":118,"depth":193,"text":119},{"id":128,"depth":189,"text":129,"children":198},[199,200],{"id":141,"depth":193,"text":141},{"id":159,"depth":193,"text":159},[202],"服务","2026-01-20","介绍使用 Docker Compose 和二进制文件部署 MinIO 最后免费版本，并配置存储桶最小权限策略以防止目录泄露。",false,"md",null,{"slots":209},{},true,"\u002Fposts\u002Fminio-install",{"text":213,"minutes":214,"time":215,"words":216},"3 min read",2.375,142500,475,{"title":5,"description":204},{"loc":211},"posts\u002Fposts\u002Fminio-install",[221,222,223,224],"MinIO","对象存储","Docker","安全","tech","iZ0Ev6JNwuAhKAKNJzdxrBu0Xt_ctJYn-w7X14upNLI",[228,233],{"title":229,"path":230,"stem":231,"date":232,"type":225,"children":-1},"Linux 下 OpenVPN 快速部署与配置全攻略","\u002Fposts\u002Flinux-openvpn-installation-guide","posts\u002Fposts\u002Flinux-openvpn-installation-guide","2026-01-18",{"title":234,"path":235,"stem":236,"date":237,"type":225,"children":-1},"MinIO 存储桶安全策略配置","\u002Fposts\u002Fminio-bucket-policy","posts\u002Fposts\u002Fminio-bucket-policy","2026-01-21 00:00:00",1788712225245]