linux下tomcat作为daemon运行
在linux下如果想让tomcat在开机时自启动,可以将启动代码写到/etc/rc.local里面。但是,这样的话,tomcat将以root权限运行,这是不安全的。因此,要想办法让tomcat以非特权身份作为daemon运行。要将tomcat作为linux的daemon运行,需要commons-daemon工程的jsvc工具,tomcat的bin目录里已经自带了这个工具的源码。解压
在linux下如果想让tomcat在开机时自启动,可以将启动代码写到/etc/rc.local里面。但是,这样的话,tomcat将以root权限运行,这是不安全的。因此,要想办法让tomcat以非特权身份作为daemon运行。
要将tomcat作为linux的daemon运行,需要commons-daemon工程的jsvc工具,tomcat的bin目录里已经自带了这个工具的源码。
解压commons-daemon-native.tar.gz,进入unix子目录,然后configure。configure的时候需要指定jdk路径或者当前环境中有JAVA_HOME变量。
接下来在make的时候可能会出现如下错误:
- ar: libservice.a: Malformed archive
- make[1]: *** [libservice.a] Error 1
这是一个已知的bug:
- The file bin/commons-daemon-native.tar.gz contains dirty (already compiled)
- code. On some systems this causes "make" to return the following error:
- ar: libservice.a: Malformed archive
- The solution is to run "make clean" before running "make".
- I believe that "make clean" should be run before creating the tgz file, so that
- there are no compiled/generated files laying around.
make以后得到jsvc文件,复制到tomcat的bin目录中。另外在native目录下有一个Tomcat5.sh,是用于tomcat自启动的一个模板,我们可以修改它快速得到一个符合要求的启动文件。在这里,我将它修改为如下内容:
- #!/bin/sh
- ##############################################################################
- #
- # Licensed to the Apache Software Foundation (ASF) under one or more
- # contributor license agreements. See the NOTICE file distributed with
- # this work for additional information regarding copyright ownership.
- # The ASF licenses this file to You under the Apache License, Version 2.0
- # (the "License"); you may not use this file except in compliance with
- # the License. You may obtain a copy of the License at
- #
- # http://www.apache.org/licenses/LICENSE-2.0
- #
- # Unless required by applicable law or agreed to in writing, software
- # distributed under the License is distributed on an "AS IS" BASIS,
- # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- # See the License for the specific language governing permissions and
- # limitations under the License.
- ##############################################################################
- #
- # Small shell script to show how to start/stop Tomcat using jsvc
- # If you want to have Tomcat running on port 80 please modify the server.xml
- # file:
- #
- # <!-- Define a non-SSL HTTP/1.1 Connector on port 80 -->
- # <Connector className="org.apache.catalina.connector.http.HttpConnector"
- # port="80" minProcessors="5" maxProcessors="75"
- # enableLookups="true" redirectPort="8443"
- # acceptCount="10" debug="0" connectionTimeout="60000"/>
- #
- # That is for Tomcat-5.0.x (Apache Tomcat/5.0)
- #
- # Adapt the following lines to your configuration
- JAVA_HOME=/usr/local/sun-java6-jdk
- CATALINA_HOME=/usr/local/apache-tomcat-6
- DAEMON_HOME=$CATALINA_HOME
- TOMCAT_USER=tomcat6
- # for multi instances adapt those lines.
- TMP_DIR=/var/tmp
- PID_FILE=/var/run/jsvc.pid
- CATALINA_BASE=$CATALINA_HOME
- #CATALINA_OPTS="-Djava.library.path=/home/jfclere/jakarta-tomcat-connectors/jni/native/.libs"
- CLASSPATH=/
- $JAVA_HOME/lib/tools.jar:/
- $CATALINA_HOME/bin/commons-daemon.jar:/
- $CATALINA_HOME/bin/bootstrap.jar
- case "$1" in
- start)
- #
- # Start Tomcat
- #
- echo "Starting tomcat6..."
- $DAEMON_HOME/bin/jsvc /
- -user $TOMCAT_USER /
- -home $JAVA_HOME /
- -Dcatalina.home=$CATALINA_HOME /
- -Dcatalina.base=$CATALINA_BASE /
- -Djava.io.tmpdir=$TMP_DIR /
- -wait 10 /
- -pidfile $PID_FILE /
- -outfile $CATALINA_HOME/logs/catalina.out /
- -errfile $CATALINA_HOME/logs/catalina.err /
- $CATALINA_OPTS /
- -cp $CLASSPATH /
- org.apache.catalina.startup.Bootstrap
- #
- # To get a verbose JVM
- #-verbose /
- # To get a debug of jsvc.
- #-debug /
- if test $? -eq 0
- then
- exit 0
- else
- echo "Failed to start tomcat6"
- exit 1
- fi
- ;;
- stop)
- #
- # Stop Tomcat
- #
- $DAEMON_HOME/bin/jsvc /
- -stop /
- -pidfile $PID_FILE /
- org.apache.catalina.startup.Bootstrap
- if test $? -eq 0
- then
- echo "tomcat6 stopped"
- exit 0
- else
- echo "Failed to stop tomcat6"
- exit 1
- fi
- ;;
- restart)
- #
- # Restart Tomcat
- #
- if $0 stop
- then
- $0 start
- else
- echo "Failed to stop running server, so refusing to try to start."
- fi
- exit 0
- ;;
- *)
- echo "Usage: tomcat6 start|stop|restart"
- exit 1;;
- esac
在以的脚本里面指定了TOMCAT_USER,jsvc将先以特权身份启动tomcat,随后切换到指定的用户,这样可以使tomcat以非特权身份监听需要特权的端口。
将脚本复制到/etc/init.d,改名为tomcat6,然后执行
- update-rc.d tomcat6 defaults
配置完成以后,tomcat就可以以非特权用户作为daemon运行了。
更多推荐
所有评论(0)