CentOS7部署Tomcat服务器

CentOS7部署Tomcat服务器

环境准备

• 主机

inet1	inet2	系统	配置
192.168.72.131	202.207.240.131	CentOS7.5.1804	MEM:1G CPU:1C/1P DISK:15G

• 创建相关目录

mkdir -p /server/tools
mkdir -p /server/scripts
mkdir -p /application

• 关闭安全组件

安装JDK

下载JDK

地址：https://www.oracle.com/java/technologies/downloads/

下载好后，将该jdk上传到/server/tools目录下

解压并安装

cd /server/tools
tar xzf jdk-8u333-linux-x64.tar.gz
mkdir -p /application
mv jdk1.8.0_333 /application
ln -s /application/jdk1.8.0_333 /application/jdk

配置环境变量

echo 'JAVA_HOME=/application/jdk' >>/etc/profile
echo 'CLASSPATH=$JAVA_HOME/lib' >>/etc/profile
echo 'PATH=$PATH:$JAVA_HOME/bin' >>/etc/profile
echo 'export PATH JAVA_HOME CLASSPATH' >>/etc/profile

配置好环境变量后，执行source使其生效并检查jdk是否配置成功

# 使环境变量生效
source /etc/profile

# 测试jdk是否成功
java -version

安装Tomcat

下载Tomcat

地址：https://archive.apache.org/dist/tomcat/tomcat-8/v8.5.55/bin/apache-tomcat-8.5.55.tar.gz

下载好后，将该软件包上传到/server/tools目录下

解压并安装

cd /server/tools
tar xzf apache-tomcat-8.5.55.tar.gz
mkdir -p /application
mv apache-tomcat-8.5.55 /application
ln -s /application/apache-tomcat-8.5.55 /application/tomcat

至此，java开发和运行环境配置完成，安装目录主要有以下内容

测试tomcat

/application/tomcat/bin/startup.sh			# 启动tomcat
/application/tomcat/bin/shutdown.sh			# 关闭tomcat

浏览器输入地址： 192.168.72.131:8080 出现以下页面也表示tomcat配置成功

加入systemd服务

注意：添加systemd配置文件之前，先将tomcat服务关闭

• 启动脚本

  #!/bin/bash
  #Author:Wjz
  #Blog:https://blog.csdn.net/weixin_51720652
  #Time:2022-07-11 11:51:08
  #Name:tomcat.sh
  #Description:start or stop the tomcat
  
  [ -f /etc/init.d/functions ] && source /etc/init.d/functions
  
  JAVA_HOME=/application/jdk
  CLASSPATH=$JAVA_HOME/lib
  PATH=$PATH:$JAVA_HOME/bin
  export PATH JAVA_HOME CLASSPATH
  
  case "$1" in
      start)
          /bin/sh /application/tomcat/bin/startup.sh
          if [ $? -ne 0 ];then
              action "tomcat starting" /bin/false
          else
              action "tomcat starting" /bin/true
          fi
          ;;
      stop)
          /bin/sh /application/tomcat/bin/shutdown.sh
          if [ $? -ne 0 ];then
              action "tomcat stoping" /bin/false
          else
              action "tomcat stoping" /bin/true
          fi
          ;;
      *)
          echo "Usage:$0 start|stop"
  esac
  

• service配置文件

  [Unit]
  Description=apache tomcat 8.5.55
  After=network.target
  
  [Service]
  Type=forking
  ExecStart=/bin/sh /server/scripts/tomcat.sh start
  ExecStop=/bin/sh /server/scripts/tomcat.sh stop
  
  [Install]
  WantedBy=multi-user.target
  

Tomcat详细介绍

目录结构

[root@web02 tools]# cd /application/tomcat/
[root@web02 tomcat]# ll
总用量 124
drwxr-x--- 2 root root  4096 7月  12 10:59 bin
-rw-r----- 1 root root 19318 5月   6 2020 BUILDING.txt
drwx------ 3 root root   254 7月  12 10:59 conf
-rw-r----- 1 root root  5408 5月   6 2020 CONTRIBUTING.md
drwxr-x--- 2 root root  4096 7月  12 10:59 lib
-rw-r----- 1 root root 57011 5月   6 2020 LICENSE
drwxr-x--- 2 root root   197 7月  12 10:59 logs
-rw-r----- 1 root root  1726 5月   6 2020 NOTICE
-rw-r----- 1 root root  3255 5月   6 2020 README.md
-rw-r----- 1 root root  7136 5月   6 2020 RELEASE-NOTES
-rw-r----- 1 root root 16262 5月   6 2020 RUNNING.txt
drwxr-x--- 2 root root    30 7月  12 10:59 temp
drwxr-x--- 7 root root    81 5月   6 2020 webapps
drwxr-x--- 3 root root    22 7月  12 10:59 work

• bin tomcat的管理命令 startup.sh shutdown.sh catalina.sh

  • catalina.sh是startup.sh和shutdown.sh都会调用的命令
  • 以后对于tomcat优化（jvm优化 设置最大内存 最小内存） 和配置

• conf 配置文件

  • server.xml tomcat的主配置文件
  • web.xml tomcat的补充配置文件（增加插件的时候使用）
  • tomcat-users.xml tomcat的管理端配置文件

• lib 库文件

• logs 日志

  • catalina.out tomcat的核心日志 详细（缺点是持续增加，持续变大,没有日志切割）
  • catalina.2020-27-12.log catalina.out的切割日志
  • localhost_access_log.2022-07-12.txt tomcat的访问日志

• webapps tomcat的站点目录

配置tomcat的管理功能

• 首先，修改conf目录下的tomcat-user.xml，添加角色和用户

<role rolename="admin-gui"/>
<role rolename="host-gui"/>
<role rolename="manager-gui"/>
<user username="admin" password="admin" roles="admin-gui, host-gui, manager-gui"/>

• 修改webapp/host-manager/META-INF/context.xml 和 webapp/manager/META-INF/context.xml文件

注释掉以上限制只能本机访问的部分

<Context antiResourceLocking="false" privileged="true" >
  
  <Manager sessionAttributeValueClassNameFilter="java\.lang\.(?:Boolean|Integer|Long|Number|String)|org\.apache\.catalina\.filters\.CsrfPreventionFilter\$LruCache(?:\$1)?|java\.util\.(?:Linked)?HashMap"/>
Context>

jpress部署

数据库准备

安装好数据库，进行相关用户、库的配置

MariaDB [(none)]> create database jpress charset=utf8;
Query OK, 1 row affected (0.00 sec)

MariaDB [(none)]> grant all privileges on jpress.* to 'jpress'@'%' identified by '123456';
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> select user,host from mysql.user;
+--------+-----------+
| user   | host      |
+--------+-----------+
| jpress | %         |
| root   | 127.0.0.1 |
| root   | ::1       |
|        | localhost |
| root   | localhost |
|        | web02     |
| root   | web02     |
+--------+-----------+
7 rows in set (0.00 sec)

MariaDB [(none)]> grant all privileges on jpress.* to 'jpress'@'192.168.72.%' identified by '123456';
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> drop user ''@'localhost';
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> drop user ''@'web02';
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> select user,host from mysql.user;
+--------+--------------+
| user   | host         |
+--------+--------------+
| jpress | %            |
| root   | 127.0.0.1    |
| jpress | 192.168.72.% |
| root   | ::1          |
| root   | localhost    |
| root   | web02        |
+--------+--------------+
6 rows in set (0.00 sec)

MariaDB [(none)]> flush privileges;
Query OK, 0 rows affected (0.00 sec)

# 验证jpress用户登录数据库
[root@web02 tools]# mysql -ujpress -p123456
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 4
Server version: 5.5.68-MariaDB MariaDB Server

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]>

项目部署

• 将 jpress.war放入 /application/tomcat/webapp/ 目录下，重启tomcat服务

• 浏览器输入 http://192.168.72.132:8080/jpress 访问

• 重启服务，登录测试发文章

说明：

​ 文章的内容放在数据库中

MariaDB [jpress]> select * from jpress_content;
+----+-------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------+---------+-------+---------+-----------+-----------+--------------+--------+---------+-----------+-------+----------------+---------------+------------+---------------------+---------------------+-------------+------+------+------+---------------+------------------+---------+
| id | title       | text                                                                                                                                                                                                                                                                                                                                                                                                                                            | thumbnail | module  | style | user_id | parent_id | object_id | order_number | status | vote_up | vote_down | price | comment_status | comment_count | view_count | created             | modified            | slug        | flag | lng  | lat  | meta_keywords | meta_description | remarks |
+----+-------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------+---------+-------+---------+-----------+-----------+--------------+--------+---------+-----------+-------+----------------+---------------+------------+---------------------+---------------------+-------------+------+------+------+---------------+------------------+---------+
|  1 | HTML 教程   | 
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8">
<title>php中文网</title>
</head>
<body>

<h1>我的第一个标题</h1>
<p>我的第一个段落。</p>

</body>
</html>

                   | NULL      | article | NULL  |       1 |      NULL |      NULL |            0 | normal |       0 |         0 |  0.00 | NULL           |             0 |          0 | 2022-07-12 13:59:13 | 2022-07-12 13:59:13 | HTML_教程   | NULL | NULL | NULL | NULL          | NULL             | NULL    |
+----+-------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------+---------+-------+---------+-----------+-----------+--------------+--------+---------+-----------+-------+----------------+---------------+------------+---------------------+---------------------+-------------+------+------+------+---------------+------------------+---------+
1 row in set (0.00 sec)

MariaDB [jpress]> 

​ 图片放在项目所在目录下 /application/tomcat/webapp/jpress/

​ 数据库配置文件 /application/tomcat/webapp/jpress/WEB-INF/classes目录下

[root@web02 ~]# cd  /application/tomcat/webapp/jpress/WEB-INF/classes
-bash: cd: /application/tomcat/webapp/jpress/WEB-INF/classes: 没有那个文件或目录
[root@web02 ~]# cd /application/tomcat/webapps/jpress/WEB-INF/classes/
[root@web02 classes]# ls
db.properties         ehcache.xml  jpress.properties          language.properties        log4j.properties
db-simple.properties  io           language_en_US.properties  language_zh_CN.properties
[root@web02 classes]# cat db.properties 
#Auto create by JPress
#Tue Jul 12 13:53:41 CST 2022
db_name=jpress
db_host_port=3306
db_tablePrefix=jpress_
db_host=localhost
db_password=123456
db_user=jpress

Tomcat主配置文件

<Server port="8005" shutdown="SHUTDOWN">



 
<GlobalNamingResources>
    
    <Resource name="UserDatabase" auth="Container"
              type="org.apache.catalina.UserDatabase"
              description="User database that can be updated and saved"
              factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
              pathname="conf/tomcat-users.xml" />
  GlobalNamingResources>

 

<Executor name="tomcatThreadPool" namePrefix="catalina-exec-"
        maxThreads="150" minSpareThreads="4"/>



<Connector port="8080" protocol="HTTP/1.1"
               connectionTimeout="20000"
               redirectPort="8443" />

<Connector protocol="AJP/1.3"
               address="::1"
               port="8009"
               redirectPort="8443" />


<Host name="localhost"  appBase="webapps"
            unpackWARs="true" autoDeploy="true">

        
        

        
        
        <Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs"
               prefix="localhost_access_log" suffix=".txt"
               pattern="%h %l %u %t "%r" %s %b" />
Host>

Tomcat多主机配置

多准备两份 tomcat目录

[root@web02 tools]# tar xzf apache-tomcat-8.5.55.tar.gz 
[root@web02 tools]# cp -a apache-tomcat-8.5.55 tomcat_8081
[root@web02 tools]# cp -a apache-tomcat-8.5.55 tomcat_8082
[root@web02 tools]# ls
apache-tomcat-8.5.55  apache-tomcat-8.5.55.tar.gz  jdk-8u333-linux-x64.tar.gz  tomcat_8081  tomcat_8082
[root@web02 tools]# cd tomcat_8081
[root@web02 tomcat_8081]# ls
bin  BUILDING.txt  conf  CONTRIBUTING.md  lib  LICENSE  logs  NOTICE  README.md  RELEASE-NOTES  RUNNING.txt  temp  webapps  work

修改对应目录的tomcat的端口

[root@web02 tools]# sed -i 's|8080|8081|g' tomcat_8081/conf/server.xml 
[root@web02 tools]# sed -i 's|8005|8006|g' tomcat_8081/conf/server.xml 
[root@web02 tools]# sed -i 's|8009|8010|g' tomcat_8081/conf/server.xml 


[root@web02 tools]# sed -i 's|8080|8082|g' tomcat_8082/conf/server.xml 
[root@web02 tools]# sed -i 's|8005|8007|g' tomcat_8082/conf/server.xml 
[root@web02 tools]# sed -i 's|8009|8011|g' tomcat_8082/conf/server.xml 

mv tomcat_808* /application/

分别启动对应tomcat服务

[root@web02 tools]# cd 
[root@web02 ~]# ls /application/
apache-tomcat-8.5.55  jdk  jdk1.8.0_333  tomcat  tomcat_8081  tomcat_8082
[root@web02 ~]# /application/tomcat_8081/bin/startup.sh 
Using CATALINA_BASE:   /application/tomcat_8081
Using CATALINA_HOME:   /application/tomcat_8081
Using CATALINA_TMPDIR: /application/tomcat_8081/temp
Using JRE_HOME:        /application/jdk
Using CLASSPATH:       /application/tomcat_8081/bin/bootstrap.jar:/application/tomcat_8081/bin/tomcat-juli.jar
Tomcat started.
[root@web02 ~]# /application/tomcat_8082/bin/startup.sh 
Using CATALINA_BASE:   /application/tomcat_8082
Using CATALINA_HOME:   /application/tomcat_8082
Using CATALINA_TMPDIR: /application/tomcat_8082/temp
Using JRE_HOME:        /application/jdk
Using CLASSPATH:       /application/tomcat_8082/bin/bootstrap.jar:/application/tomcat_8082/bin/tomcat-juli.jar
Tomcat started.
[root@web02 ~]# 

Tomcat监控

• 简单命令

• 现成脚本

  show-busy-java-threads.sh

• Zabbix监控

  • 自定义监控（jmap -heap pid 自定义监控项）

  • 通过jmx

    • tomcat需要开启监控功能

      # 修改
      catalina.sh
      CATALINA_OPTS="$CATALINA_OPTS
      -Dcom.sun.management.jmxremote
      -Dcom.sun.management.jmxremote.port=12345
      -Dcom.sun.management.jmxremote.authenticate=false
      -Dcom.sun.management.jmxremote.ssl=false
      -Djava.rmi.server.hostname=10.0.0.17"
      
      #说明：
      CATALINA_OPTS="$CATALINA_OPTS  #修改tomcat启动参数
      -Dcom.sun.management.jmxremote #开启tomcat远程管理功能
      -Dcom.sun.management.jmxremote.port=12345 #远程管理功能 除了12345端口 还会生成2个随机端口 开放所有端口（单独设置 安全组规则)
      -Dcom.sun.management.jmxremote.authenticate=false
      -Dcom.sun.management.jmxremote.ssl=false
      -Djava.rmi.server.hostname=10.0.0.7 #指定本地的ip地址
      

  • 通过ipmi

  • 通过snmp

• jps java版本的ps命令（只显示java进程）

  jps
  jps -l
  jps -lv
  jps -lvm
  

• jmap 导出jvm的使用情况

  [root@web02 ~]# jmap -heap 8625
  Attaching to process ID 8625, please wait...
  Debugger attached successfully.
  Server compiler detected.
  JVM version is 25.333-b02
  
  using thread-local object allocation.
  Mark Sweep Compact GC
  
  Heap Configuration:
     MinHeapFreeRatio         = 40
     MaxHeapFreeRatio         = 70
     MaxHeapSize              = 255852544 (244.0MB)
     NewSize                  = 5570560 (5.3125MB)
     MaxNewSize               = 85262336 (81.3125MB)
     OldSize                  = 11206656 (10.6875MB)
     NewRatio                 = 2
     SurvivorRatio            = 8
     MetaspaceSize            = 21807104 (20.796875MB)
     CompressedClassSpaceSize = 1073741824 (1024.0MB)
     MaxMetaspaceSize         = 17592186044415 MB
     G1HeapRegionSize         = 0 (0.0MB)
  
  Heap Usage:
  New Generation (Eden + 1 Survivor Space):
     capacity = 14811136 (14.125MB)
     used     = 11099968 (10.58575439453125MB)
     free     = 3711168 (3.53924560546875MB)
     74.94339394358407% used
  Eden Space:
     capacity = 13172736 (12.5625MB)
     used     = 11052976 (10.540939331054688MB)
     free     = 2119760 (2.0215606689453125MB)
     83.90797477456468% used
  From Space:
     capacity = 1638400 (1.5625MB)
     used     = 46992 (0.0448150634765625MB)
     free     = 1591408 (1.5176849365234375MB)
     2.8681640625% used
  To Space:
     capacity = 1638400 (1.5625MB)
     used     = 0 (0.0MB)
     free     = 1638400 (1.5625MB)
     0.0% used
  tenured generation:
     capacity = 32727040 (31.2109375MB)
     used     = 20437544 (19.490760803222656MB)
     free     = 12289496 (11.720176696777344MB)
     62.44849518929912% used
  
  20655 interned Strings occupying 1887088 bytes.
  

• jstack 导出java进程信息

• 故障案例：系统负载过高，发现tomcat占用cpu较高

  • jps /top /htop 精确定位哪个java进程导致
  • jstack导出java进行信息
  • catalina.out日志
  • jmap导出 jvm信息 通过mat进行分析

Tomcat优化

• jvm优化

• tomcat安全优化

  • 修改8005 端口 SHUTDOWN指令也需要改掉（一定做）

  • 修改ajp端口 8009（一定做）

  • 关闭tomcat管理功能（一定要做）

  • 降权启动【监牢模式】（最好做）

    把服务以普通用户的身份运行

  • 文件访问列表控制（一定要做）

  • 版本信息隐藏（一定要做）

  • 访问限制（实际工作一定要做）

  • 启停脚本权限收回

  • 日志（http_reference 页面跳转来源）

• 优化体系

故障案例

相关知识补充

日志切割

logroate + 系统定时任务 实现对日志的定时切割

[root@web02 tomcat]# cat /etc/logrotate.d/syslog 
/var/log/cron
/var/log/maillog
/var/log/messages
/var/log/secure
/var/log/spooler
{
    missingok
    sharedscripts
    postrotate
        /bin/kill -HUP `cat /var/run/syslogd.pid 2> /dev/null` 2> /dev/null || true
    endscript
}