linux下tomcat作为daemon运行

在linux下如果想让tomcat在开机时自启动，可以将启动代码写到/etc/rc.local里面。但是，这样的话，tomcat将以root权限运行，这是不安全的。因此，要想办法让tomcat以非特权身份作为daemon运行。

要将tomcat作为linux的daemon运行，需要commons-daemon工程的jsvc工具，tomcat的bin目录里已经自带了这个工具的源码。

解压commons-daemon-native.tar.gz，进入unix子目录，然后configure。configure的时候需要指定jdk路径或者当前环境中有JAVA_HOME变量。

接下来在make的时候可能会出现如下错误：

ar: libservice.a: Malformed archive  
make[1]: *** [libservice.a] Error 1  

 这是一个已知的bug：

The file bin/commons-daemon-native.tar.gz contains dirty (already compiled)  
code. On some systems this causes "make" to return the following error:  
ar: libservice.a: Malformed archive  
The solution is to run "make clean" before running "make".  
I believe that "make clean" should be run before creating the tgz file, so that  
there are no compiled/generated files laying around.  

 make以后得到jsvc文件，复制到tomcat的bin目录中。另外在native目录下有一个Tomcat5.sh，是用于tomcat自启动的一个模板，我们可以修改它快速得到一个符合要求的启动文件。在这里，我将它修改为如下内容：

#!/bin/sh  
##############################################################################  
#  
# Licensed to the Apache Software Foundation (ASF) under one or more  
# contributor license agreements.  See the NOTICE file distributed with  
# this work for additional information regarding copyright ownership.  
# The ASF licenses this file to You under the Apache License, Version 2.0  
# (the "License"); you may not use this file except in compliance with  
# the License.  You may obtain a copy of the License at  
#  
#     http://www.apache.org/licenses/LICENSE-2.0  
#  
# Unless required by applicable law or agreed to in writing, software  
# distributed under the License is distributed on an "AS IS" BASIS,  
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.  
# See the License for the specific language governing permissions and  
# limitations under the License.  
##############################################################################  
#  
# Small shell script to show how to start/stop Tomcat using jsvc  
# If you want to have Tomcat running on port 80 please modify the server.xml  
# file:  
#  
#    <!-- Define a non-SSL HTTP/1.1 Connector on port 80 -->  
#    <Connector className="org.apache.catalina.connector.http.HttpConnector"  
#               port="80" minProcessors="5" maxProcessors="75"  
#               enableLookups="true" redirectPort="8443"  
#               acceptCount="10" debug="0" connectionTimeout="60000"/>  
#  
# That is for Tomcat-5.0.x (Apache Tomcat/5.0)  
#  
# Adapt the following lines to your configuration  
JAVA_HOME=/usr/local/sun-java6-jdk  
CATALINA_HOME=/usr/local/apache-tomcat-6  
DAEMON_HOME=$CATALINA_HOME  
TOMCAT_USER=tomcat6  
  
# for multi instances adapt those lines.  
TMP_DIR=/var/tmp  
PID_FILE=/var/run/jsvc.pid  
CATALINA_BASE=$CATALINA_HOME  
  
#CATALINA_OPTS="-Djava.library.path=/home/jfclere/jakarta-tomcat-connectors/jni/native/.libs"  
CLASSPATH=/  
$JAVA_HOME/lib/tools.jar:/  
$CATALINA_HOME/bin/commons-daemon.jar:/  
$CATALINA_HOME/bin/bootstrap.jar  
  
case "$1" in  
  start)  
    #  
    # Start Tomcat  
    #  
    echo "Starting tomcat6..."  
    $DAEMON_HOME/bin/jsvc /  
    -user $TOMCAT_USER /  
    -home $JAVA_HOME /  
    -Dcatalina.home=$CATALINA_HOME /  
    -Dcatalina.base=$CATALINA_BASE /  
    -Djava.io.tmpdir=$TMP_DIR /  
    -wait 10 /  
    -pidfile $PID_FILE /  
    -outfile $CATALINA_HOME/logs/catalina.out /  
    -errfile $CATALINA_HOME/logs/catalina.err /  
    $CATALINA_OPTS /  
    -cp $CLASSPATH /  
    org.apache.catalina.startup.Bootstrap  
    #  
    # To get a verbose JVM  
    #-verbose /  
    # To get a debug of jsvc.  
    #-debug /  
    if test $? -eq 0  
    then  
        exit 0  
    else  
        echo "Failed to start tomcat6"  
        exit 1  
    fi  
    ;;  
  
  stop)  
    #  
    # Stop Tomcat  
    #  
    $DAEMON_HOME/bin/jsvc /  
    -stop /  
    -pidfile $PID_FILE /  
    org.apache.catalina.startup.Bootstrap  
    if test $? -eq 0  
    then  
        echo "tomcat6 stopped"  
        exit 0  
    else  
        echo "Failed to stop tomcat6"  
        exit 1  
    fi  
    ;;  
  
  restart)  
    #  
    # Restart Tomcat  
    #  
    if $0 stop  
    then  
        $0 start  
    else  
        echo "Failed to stop running server, so refusing to try to start."  
    fi  
    exit 0  
    ;;  
  
  
  *)  
    echo "Usage: tomcat6 start|stop|restart"  
    exit 1;;  
esac  

 

在以的脚本里面指定了TOMCAT_USER，jsvc将先以特权身份启动tomcat，随后切换到指定的用户，这样可以使tomcat以非特权身份监听需要特权的端口。

将脚本复制到/etc/init.d，改名为tomcat6，然后执行

update-rc.d tomcat6 defaults  

 配置完成以后，tomcat就可以以非特权用户作为daemon运行了。