cat /etc/os-release | head -3
python3 --version
uname -m

PRETTY_NAME="Ubuntu 22.04.5 LTS"
NAME="Ubuntu"
VERSION_ID="22.04"
Python 3.10.12
x86_64

export DEBIAN_FRONTEND=noninteractive
apt-get update -qq
apt-get install -y software-properties-common curl ca-certificates

useradd -m -s /bin/bash jupyter
mkdir -p /opt/jupyter /srv/jupyter /var/log/jupyter
chown -R jupyter:jupyter /srv/jupyter /var/log/jupyter

id jupyter
ls -ld /srv/jupyter /var/log/jupyter

uid=1000(jupyter) gid=1000(jupyter) groups=1000(jupyter)
drwxr-xr-x 2 jupyter jupyter 4096 Oct 27 17:32 /srv/jupyter
drwxr-xr-x 2 jupyter jupyter 4096 Oct 27 17:32 /var/log/jupyter

ss -ltnp | grep -E ':8888|:80 ' || echo "8888/80 均空闲"

8888/80 均空闲

add-apt-repository -y ppa:deadsnakes/ppa
apt-get update -qq
apt-get install -y python3.12 python3.12-venv python3.12-dev
python3.12 --version

Adding deb entry to /etc/apt/sources.list.d/deadsnakes-ubuntu-ppa-jammy.list
Adding key to /etc/apt/trusted.gpg.d/deadsnakes-ubuntu-ppa.gpg with fingerprint F23C5A6CF475977595C89F51BA6932366A755776
Setting up python3.12 (3.12.16-1+jammy1) ...
Setting up python3.12-venv (3.12.16-1+jammy1) ...
Setting up python3.12-dev (3.12.16-1+jammy1) ...
Python 3.12.16

python3.12 -m venv /opt/jupyter/venv
/opt/jupyter/venv/bin/python -V
/opt/jupyter/venv/bin/pip -V

Python 3.12.16
pip 25.0.1 from /opt/jupyter/venv/lib/python3.12/site-packages/pip (python 3.12)

/opt/jupyter/venv/bin/pip install --upgrade pip
time /opt/jupyter/venv/bin/pip install "jupyterlab==4.6.4"

Collecting jupyterlab==4.6.4
  Downloading jupyterlab-4.6.4-py3-none-any.whl (17.2 MB)
...
Installing collected packages: ... jupyter-server, notebook-shim, jupyterlab-server, jupyter-lsp, jupyterlab
Successfully installed ... jupyter-server-2.21.1 ... jupyterlab-4.6.4 ...

real	1m11.044s

/opt/jupyter/venv/bin/jupyter --version

Selected Jupyter core packages...
IPython          : 9.17.1
ipykernel        : 7.4.0
jupyter_client   : 8.10.0
jupyter_core     : 5.9.1
jupyter_server   : 2.21.1
jupyterlab       : 4.6.4
nbclient         : 0.11.0
nbconvert        : 7.17.2
nbformat         : 5.11.1
traitlets        : 5.16.1

mkdir -p /etc/jupyter
chown jupyter:jupyter /etc/jupyter
su - jupyter -c "JUPYTER_CONFIG_DIR=/etc/jupyter /opt/jupyter/venv/bin/jupyter server --generate-config"

Writing default config to: '/etc/jupyter/jupyter_server_config.py'

/opt/jupyter/venv/bin/python -c "from jupyter_server.auth.security import passwd; print(passwd('q1w2e3r4'))"

argon2:$argon2id$v=19$m=10240,t=10,p=8$OtWoK5KRF4UNWbUgyn43nQ$yvbw/TjCn79WWMn83z/2mJFotHdXNq1zLpLBZde0llg

cat > /etc/systemd/system/jupyter-lab.service <<'EOF'
[Unit]
Description=JupyterLab Server (jupyterlab 4.6.4)
Documentation=https://jupyterlab.readthedocs.io/
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=jupyter
Group=jupyter
WorkingDirectory=/srv/jupyter
Environment=JUPYTER_CONFIG_DIR=/etc/jupyter
Environment=PATH=/opt/jupyter/venv/bin:/usr/local/bin:/usr/bin:/bin
ExecStart=/opt/jupyter/venv/bin/jupyter lab --no-browser
Restart=on-failure
RestartSec=5
LimitNOFILE=65536

[Install]
WantedBy=multi-user.target
EOF

systemctl daemon-reload
systemctl enable --now jupyter-lab
systemctl is-active jupyter-lab

Created symlink /etc/systemd/system/multi-user.target.wants/jupyter-lab.service -> /etc/systemd/system/jupyter-lab.service.
active

systemctl status jupyter-lab --no-pager -l

* jupyter-lab.service - JupyterLab Server (jupyterlab 4.6.4)
     Loaded: loaded (/etc/systemd/system/jupyter-lab.service; enabled; vendor preset: enabled)
     Active: active (running) since Tue 2026-10-27 17:35:13 UTC; 8s ago
   Main PID: 5931 (jupyter-lab)
      Tasks: 1 (limit: 2932)
     Memory: 63.2M
        CPU: 871ms
     CGroup: /system.slice/jupyter-lab.service
             `-5931 /opt/jupyter/venv/bin/python3.12 /opt/jupyter/venv/bin/jupyter-lab --no-browser

ss -ltnp | grep 8888

LISTEN 0      128        127.0.0.1:8888       0.0.0.0:*    users:(("jupyter-lab",pid=5394,fd=6))

apt-get install -y nginx
nginx -v
systemctl enable --now nginx
systemctl is-active nginx

nginx version: nginx/1.18.0 (Ubuntu)
active

cat > /etc/nginx/conf.d/upgrade.conf <<'EOF'
map $http_upgrade $connection_upgrade {
    default upgrade;
    ''      close;
}
EOF

cat > /etc/nginx/sites-available/jupyter.conf <<'EOF'
server {
    listen 80 default_server;
    listen [::]:80 default_server;
    server_name _;

    client_max_body_size 1024m;

    location /jupyter/ {
        proxy_pass http://127.0.0.1:8888;
        proxy_http_version 1.1;

        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection $connection_upgrade;

        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;

        proxy_read_timeout 86400;
        proxy_send_timeout 86400;
        proxy_buffering off;
    }
}
EOF
ln -sf /etc/nginx/sites-available/jupyter.conf /etc/nginx/sites-enabled/jupyter.conf
rm -f /etc/nginx/sites-enabled/default
nginx -t
systemctl reload nginx

nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful

curl -s -o /dev/null -w "root=%{http_code}\n" http://127.0.0.1/
curl -s -o /dev/null -w "lab=%{http_code} -> %{redirect_url}\n" http://127.0.0.1/jupyter/lab
curl -sI http://127.0.0.1/jupyter/lab | grep -Ei "^(server|location)"

root=200
lab=302 -> http://127.0.0.1/jupyter/login?next=%2Fjupyter%2Flab
Server: nginx/1.18.0 (Ubuntu)

curl -s -o /dev/null -w "%{http_code}\n" http://127.0.0.1:8888/jupyter/lab
curl -s http://127.0.0.1:8888/jupyter/api/status

302
{"message": "Forbidden", "reason": null}

rm -f /tmp/ck.txt
curl -s -c /tmp/ck.txt -o /dev/null http://127.0.0.1/jupyter/login
XSRF=$(awk "/_xsrf/ {print \$7}" /tmp/ck.txt)
curl -s -b /tmp/ck.txt -c /tmp/ck.txt -o /dev/null -w "login=%{http_code}\n" \
  -X POST --data-urlencode "_xsrf=$XSRF" --data-urlencode "password=q1w2e3r4" \
  http://127.0.0.1/jupyter/login
curl -s -b /tmp/ck.txt http://127.0.0.1/jupyter/api/status

login=302
{"connections": 0, "kernels": 0, "last_activity": "2026-10-27T17:42:38.019156Z", "started": "2026-10-27T17:42:38.019156Z"}

cat > /srv/jupyter/demo-quzuo.ipynb <<'EOF'
{
 "cells": [
  {"cell_type": "markdown", "metadata": {}, "source": ["# JupyterLab 4.6.4 部署验证"]},
  {"cell_type": "code", "execution_count": null, "metadata": {}, "outputs": [],
   "source": ["import sys, platform\n", "print(\"Python\", sys.version.split()[0])\n", "print(\"Host:\", platform.node())"]},
  {"cell_type": "code", "execution_count": null, "metadata": {}, "outputs": [],
   "source": ["s = sum(i * i for i in range(1, 101))\n", "print(\"sum of squares 1..100 =\", s)"]}
 ],
 "metadata": {"kernelspec": {"display_name": "Python 3 (ipykernel)", "language": "python", "name": "python3"}},
 "nbformat": 4, "nbformat_minor": 5
}
EOF
chown jupyter:jupyter /srv/jupyter/demo-quzuo.ipynb
su - jupyter -c "cd /srv/jupyter && JUPYTER_CONFIG_DIR=/etc/jupyter /opt/jupyter/venv/bin/jupyter nbconvert --to notebook --execute demo-quzuo.ipynb --output demo-executed.ipynb"

[NbConvertApp] Converting notebook demo-quzuo.ipynb to notebook
[IPKernelApp] WARNING | Kernel is running over TCP without encryption. All communication (including code and outputs) is sent in plain text and is susceptible to eavesdropping.
[NbConvertApp] Writing 1891 bytes to demo-executed.ipynb

stdout Python 3.12.16
Host: lab-quzuo
---
stdout sum of squares 1..100 = 338350

/opt/jupyter/venv/bin/pip install jupyterlab-execute-time
/opt/jupyter/venv/bin/jupyter labextension list

JupyterLab v4.6.4
/opt/jupyter/venv/share/jupyter/labextensions
        jupyterlab-execute-time v3.3.0 enabled OK (python, jupyterlab_execute_time)
        jupyterlab_pygments v0.3.0 enabled OK (python, jupyterlab_pygments)

mkdir -p /opt/wheels
/opt/jupyter/venv/bin/pip download "jupyterlab==4.6.4" -d /opt/wheels --no-cache-dir

Successfully downloaded jupyterlab httpx httpcore jupyter-server jupyterlab-server anyio argon2-cffi async-lru babel h11 idna ipykernel ... websocket-client argon2-cffi-bindings cffi beautifulsoup4 soupsieve defusedxml fqdn isoduration arrow jupyterlab-pygments pure-eval pycparser rfc3339-validator tzdata uri-template

ls /opt/wheels | wc -l
du -sh /opt/wheels
sha256sum /opt/wheels/jupyterlab-4.6.4-py3-none-any.whl

90
46M	/opt/wheels
15b13f991d3985129c797eb84d9949eeb8b6615e14b444868e642411f2c418b2  /opt/wheels/jupyterlab-4.6.4-py3-none-any.whl

python3.12 -m venv /opt/jupyter-offline
/opt/jupyter-offline/bin/pip install --no-index --find-links /opt/wheels "jupyterlab==4.6.4"
/opt/jupyter-offline/bin/jupyter lab --version

Processing /opt/wheels/arrow-1.4.0-py3-none-any.whl (from isoduration->jsonschema[format-nongpl]>=4.18.0->jupyter-events>=0.11.0->jupyter-server<3,>=2.19.0->jupyterlab==4.6.4)
Successfully installed ... jupyter-server-2.21.1 ... jupyterlab-4.6.4 ...
4.6.4

# --- 网络监听 ---
c.ServerApp.ip = "127.0.0.1"
c.ServerApp.port = 8888
c.ServerApp.base_url = "/jupyter/"
c.ServerApp.open_browser = False
c.ServerApp.allow_remote_access = False

# --- 工作目录 ---
c.ServerApp.root_dir = "/srv/jupyter"

# --- 身份认证：关闭一次性 token，改用固定密码 ---
c.IdentityProvider.token = ""
c.PasswordIdentityProvider.hashed_password = "argon2:$argon2id$v=19$m=10240,t=10,p=8$OtWoK5KRF4UNWbUgyn43nQ$yvbw/TjCn79WWMn83z/2mJFotHdXNq1zLpLBZde0llg"
c.PasswordIdentityProvider.password_required = True
c.PasswordIdentityProvider.allow_password_change = False

# --- 上传与请求体大小 ---
c.ServerApp.max_body_size = 1073741824
c.ServerApp.max_buffer_size = 1073741824

# --- 内核空闲回收 ---
c.MappingKernelManager.cull_idle_timeout = 1800
c.MappingKernelManager.cull_interval = 300
c.MappingKernelManager.cull_connected = True

# --- 内核规格 ---
c.KernelSpecManager.ensure_native_kernel = True

# --- 日志 ---
c.ServerApp.log_level = "INFO"

c = get_config()  # noqa

# --- app_settings 持久化目录 ---
c.LabApp.app_settings_dir = "/srv/jupyter/lab/settings"

# --- 工作区持久化目录 ---
c.LabApp.workspaces_dir = "/srv/jupyter/lab/workspaces"

# --- 扩展管理：pypi 允许在线安装，readonly 只读 ---
c.LabApp.extension_manager = "pypi"

# --- 关闭实时协作 ---
c.LabApp.collaborative = False

# --- 内网环境置空新闻链接 ---
c.LabApp.news_url = ""

# --- 扩展黑白名单（留空表示不启用） ---
c.LabApp.blocked_extensions_uris = ""
c.LabApp.allowed_extensions_uris = ""

systemctl restart jupyter-lab
systemctl is-active jupyter-lab

active

su - jupyter -c "JUPYTER_CONFIG_DIR=/etc/jupyter /opt/jupyter/venv/bin/jupyter lab --show-config"

Loaded config files:
  /etc/jupyter/jupyter_server_config.py
ServerApp
  .allow_remote_access = False
  .base_url = '/jupyter/'
  .ip = '127.0.0.1'
  .max_body_size = 1073741824
  .port = 8888
  .root_dir = '/srv/jupyter'

tar czf /root/jupyter-backup-$(date +%F).tar.gz /etc/jupyter /srv/jupyter
systemctl stop jupyter-lab
/opt/jupyter/venv/bin/pip install --upgrade "jupyterlab==4.7.0a2"
systemctl start jupyter-lab

/opt/jupyter/venv/bin/pip install --force-reinstall "jupyterlab==4.6.4"

ValueError: Please install Node.js and npm before continuing installation.

curl -fsSL https://deb.nodesource.com/setup_22.x -o /tmp/nodesource_setup.sh
bash /tmp/nodesource_setup.sh
apt-get install -y nodejs
node -v

v22.23.4

[LabBuildApp] > node .../jupyter_builder/yarn.js run build:prod:minimize
[LabBuildApp] permission denied: rspack
[LabBuildApp] ERROR | Build failed.

export PATH=/opt/jupyter/venv/share/jupyter/lab/staging/node_modules/.bin:$PATH
JUPYTER_CONFIG_DIR=/etc/jupyter /opt/jupyter/venv/bin/jupyter lab build
echo "BUILD_EXIT=$?"

[LabBuildApp] JupyterLab 4.6.4
[LabBuildApp] Building in /opt/jupyter/venv/share/jupyter/lab
[LabBuildApp] Building jupyterlab assets (production, minimized)
BUILD_EXIT=0

ls -l /etc/jupyter/jupyter_server_config.json
chown jupyter:jupyter /etc/jupyter/jupyter_server_config.json
chmod 600 /etc/jupyter/jupyter_server_config.json
systemctl restart jupyter-lab
systemctl is-active jupyter-lab

-rw------- 1 root root 162 Oct 27 17:41 /etc/jupyter/jupyter_server_config.json
active

systemctl disable --now jupyter-lab
rm -f /etc/systemd/system/jupyter-lab.service
systemctl daemon-reload
rm -rf /opt/jupyter /opt/jupyter-offline /opt/wheels
rm -f /etc/nginx/sites-enabled/jupyter.conf /etc/nginx/sites-available/jupyter.conf
nginx -t && systemctl reload nginx
userdel -r jupyter 2>/dev/null || true