CentOS 环境 Tomcat 配置步骤
一 准备环境
java -version 检查;如未安装,可用 sudo yum install java-1.8.0-openjdk-devel -y 安装 OpenJDK 8。完成后再次验证版本。sudo groupadd tomcats && sudo useradd -s /bin/false -g tomcat -d /opt/tomcat tomcat,后续将 Tomcat 目录属主设为该用户。二 安装与目录规划
wget https://downloads.apache.org/tomcat/tomcat-9/v9.0.56/bin/apache-tomcat-9.0.56.tar.gz,解压到 /opt/tomcat:tar xvf apache-tomcat-9.0.56.tar.gz -C /opt。sudo chown -R tomcat:tomcat /opt/tomcat。export CATALINA_HOME=/opt/tomcat/apache-tomcat-9.0.56export PATH=$PATH:$CATALINA_HOME/binsource /etc/profile 使配置生效。三 启动与连通性验证
./startup.sh 启动,tail -f $CATALINA_HOME/logs/catalina.out 查看日志;停止用 ./shutdown.sh。sudo firewall-cmd --permanent --add-service=http --add-service=https && sudo firewall-cmd --reload。sudo iptables -I INPUT -p tcp --dport 8080 -j ACCEPT 并保存规则。四 常用配置
<Connector port="8080" ... /> 改为需要的端口(如 80),保存后重启 Tomcat。<tomcat-users> 内添加<role rolename="manager-gui"/><role rolename="admin-gui"/><user username="admin" password="StrongPass!23" roles="manager-gui,admin-gui"/>RemoteAddrValve 的 allow 属性添加你的管理机网段或 IP(如 192\.168\.\d+\.\d+|::1|0:0:0:0:0:0:0:1),以放开访问限制。securerandom.source=file:/dev/random 替换为securerandom.source=file:/dev/./urandom,可显著缩短初始化时间。五 部署应用与开机自启
<Host> 内添加 <Context path="" docBase="/opt/myapp" />,将应用放在外部目录,便于独立维护。sudo vim /etc/systemd/system/tomcat.service,内容示例:[Unit]
Description=Apache Tomcat Web Application Container
After=network.target
[Service]
Type=forking
Environment="JAVA_HOME=/usr/lib/jvm/java-1.8.0-openjdk"
Environment="CATALINA_HOME=/opt/tomcat/apache-tomcat-9.0.56"
ExecStart=/opt/tomcat/apache-tomcat-9.0.56/bin/startup.sh
ExecStop=/opt/tomcat/apache-tomcat-9.0.56/bin/shutdown.sh
User=tomcat
Group=tomcats
Restart=on-failure
[Install]
WantedBy=multi-user.target
sudo systemctl daemon-reload && sudo systemctl enable --now tomcat && sudo systemctl status tomcat。chkconfig 加入开机自启)。