Linuxhotel Wiki

Wie ging das nochmal?

Benutzer-Werkzeuge

Webseiten-Werkzeuge

Zuletzt angesehen: • apache-virtual-hosts • lpi1 • apache-ssl • kernel • raid • shell_filter • tomcat_administration • hashtabelle • cryptsetup-luks • lpi2
tomcat_administration:start

Unterschiede

Hier werden die Unterschiede zwischen zwei Versionen der Seite angezeigt.

Link zu der Vergleichsansicht

Beide Seiten, vorherige ÜberarbeitungVorherige Überarbeitung
Nächste Überarbeitung		Vorherige Überarbeitung
tomcat_administration:start [2016/11/21 08:16] – marco.staubtomcat_administration:start [2024/04/11 06:55] (aktuell) – Externe Bearbeitung 127.0.0.1
Zeile 3: Zeile 3:
 ===== Tag 1 ===== ===== Tag 1 =====
  
-==== 1.2 - rc.sh ====+==== 1.2 - tomcat.sh ====
 <code> <code>
-#!/usr/bin/sh +#!/bin/sh
-# rc.sh+
  
 ### Start Config ### ### Start Config ###
-TOMCAT_VERSION=8.5.8+ 
 +TOMCAT_VERSION=10.1.20
 INSTANCE_NAME=workshop INSTANCE_NAME=workshop
-INSTANCE_VERSION=1.0 
  
 ### End Config #### ### End Config ####
  
 CATALINA_HOME=/opt/tomcat/products/${TOMCAT_VERSION} CATALINA_HOME=/opt/tomcat/products/${TOMCAT_VERSION}
-CATALINA_BASE=/opt/tomcat/instances/${INSTANCE_NAME}/${INSTANCE_VERSION}+CATALINA_BASE=/opt/tomcat/instances/${INSTANCE_NAME}
  
 export CATALINA_HOME export CATALINA_HOME
Zeile 22: Zeile 21:
  
 case "$1" in case "$1" in
-   start) +start) 
-   $CATALINA_HOME/bin/startup.sh +        $CATALINA_HOME/bin/startup.sh 
-;; +        ;; 
-   stop) +stop) 
-   $CATALINA_HOME/bin/shutdown.sh +        $CATALINA_HOME/bin/shutdown.sh 
-;; +        ;; 
-   *) +*) 
-   echo "Usage: $0 {start|stop}" +        echo "Usage: $0 {start|stop}" 
-   exit 1 +        exit 1 
-;;+        ;;
 esac esac
 </code> </code>
Zeile 42: Zeile 41:
 CATALINA_OUT="${CATALINA_VAR}/logs/catalina.out" CATALINA_OUT="${CATALINA_VAR}/logs/catalina.out"
 CATALINA_OPTS="-Dcatalina.var=${CATALINA_VAR}" CATALINA_OPTS="-Dcatalina.var=${CATALINA_VAR}"
-export CATALINA_TMPDIR; export CATALINA_OPTS +</code> 
-export CATALINA_PID; export CATALINA_OUT+ 
 +==== 1.4 - OOM ==== 
 +<code> 
 +JAVA_OOM="-XX:+HeapDumpOnOutOfMemoryError -XX:HeapDumpPath=/var/tomcat/workshop -XX:OnOutOfMemoryError=${CATALINA_HOME}/bin/oom.sh" 
 +CATALINA_OPTS="$CATALINA_OPTS $JAVA_OOM"
 </code> </code>
  
Zeile 84: Zeile 87:
  
 <code> <code>
-   <Connector protocol="org.apache.coyote.http11.Http11NioProtocol" +<Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol" 
-              port="8443" maxThreads="200" +   maxThreads="150" SSLEnabled="true" scheme="https" secure="true" > 
-              scheme="https" secure="true" SSLEnabled="true"> +   <SSLHostConfig protocols="all,-TLSv1,-TLSv1.1" 
-      <SSLHostConfig protocols="TLSv1+TLSv1.1+TLSv1.2"> +                  ciphers="HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!kRSA" 
-         <Certificate certificateKeystoreFile="${catalina.base}/keystore.jks" +                  honorCipherOrder="true" > 
-                      certificateKeystorePassword="changeit /> +      <Certificate  
-      </SSLHostConfig> +           certificateKeystoreFile="${catalina.base}/conf/keystore.jks" 
-   </Connector>+           certificateKeystorePassword="changeit" /> 
 +    </SSLHostConfig> 
 +</Connector>
 </code> </code>
  
Zeile 108: Zeile 113:
 5workshop1.org.apache.juli.AsyncFileHandler.directory = ${catalina.var}/logs 5workshop1.org.apache.juli.AsyncFileHandler.directory = ${catalina.var}/logs
 5workshop1.org.apache.juli.AsyncFileHandler.prefix = workshop_log1. 5workshop1.org.apache.juli.AsyncFileHandler.prefix = workshop_log1.
 +5workshop1.org.apache.juli.AsyncFileHandler.maxDays = 90
 +5workshop1.org.apache.juli.AsyncFileHandler.encoding = UTF-8
 +
 6workshop2.org.apache.juli.AsyncFileHandler.level = FINE 6workshop2.org.apache.juli.AsyncFileHandler.level = FINE
 6workshop2.org.apache.juli.AsyncFileHandler.directory = ${catalina.var}/logs 6workshop2.org.apache.juli.AsyncFileHandler.directory = ${catalina.var}/logs
 6workshop2.org.apache.juli.AsyncFileHandler.prefix = workshop_log2. 6workshop2.org.apache.juli.AsyncFileHandler.prefix = workshop_log2.
 +6workshop2.org.apache.juli.AsyncFileHandler.maxDays = 90
 +6workshop2.org.apache.juli.AsyncFileHandler.encoding = UTF-8
 </code> </code>
 <code> <code>
Zeile 122: Zeile 132:
      to the Configuration element for hot config reloading,       to the Configuration element for hot config reloading, 
      for example: <Configuration monitorInterval="60"> -->      for example: <Configuration monitorInterval="60"> -->
-<Configuration status="warn">+<Configuration status="warn" monitorInterval="60">
   <Appenders>   <Appenders>
     <RollingFile name="default"     <RollingFile name="default"
Zeile 128: Zeile 138:
                  filePattern="${sys:catalina.var}/logs/catalina.log.%d{yyyy-MM-dd-HHmmss}">                  filePattern="${sys:catalina.var}/logs/catalina.log.%d{yyyy-MM-dd-HHmmss}">
       <PatternLayout>       <PatternLayout>
-        <pattern>%d %r %p [%t] %c - %m%n</pattern>+        <pattern>%d %r %p [%t] %c (%F:%L) - %m%n</pattern>
       </PatternLayout>       </PatternLayout>
-      <!-- Hourly Rotation, schedule is cron style+      <!-- Daily Rotation, schedule is cron style
            with columns seconds, minutes, hours, day-of-month,            with columns seconds, minutes, hours, day-of-month,
            month, day-of-week, year(optional) -->            month, day-of-week, year(optional) -->
-      <CronTriggeringPolicy schedule="0 0 * * * ?" />+      <CronTriggeringPolicy schedule="0 0 0 * * ?" />
     </RollingFile>     </RollingFile>
   </Appenders>   </Appenders>
Zeile 156: Zeile 166:
   </Loggers>   </Loggers>
 </Configuration> </Configuration>
 +</code>
 +
 +==== 2.7 - JMX Remote ====
 +<code>
 +JMX_OPTS_NOSSL_NOAUTH="\
 +-Dcom.sun.management.jmxremote=true \
 +-Dcom.sun.management.jmxremote.port=1090 \
 +-Dcom.sun.management.jmxremote.ssl=false \
 +-Dcom.sun.management.jmxremote.authenticate=false \
 +"
 +
 +JMX_OPTS_SSL_NOAUTH="\
 +-Dcom.sun.management.jmxremote=true \
 +-Dcom.sun.management.jmxremote.port=1090 \
 +-Dcom.sun.management.jmxremote.ssl=true \
 +-Dcom.sun.management.jmxremote.authenticate=false \
 +-Djavax.net.ssl.keyStorePassword=workshop \
 +-Djavax.net.ssl.keyStore=${CATALINA_BASE}/conf/keystore.jks \
 +"
 +
 +JMX_OPTS_SSL_AUTH="\
 +-Dcom.sun.management.jmxremote=true \
 +-Dcom.sun.management.jmxremote.port=1090 \
 +-Dcom.sun.management.jmxremote.ssl=true \
 +-Dcom.sun.management.jmxremote.authenticate=true \
 +-Dcom.sun.management.jmxremote.access.file=${CATALINA_BASE}/conf/jmxremote.access \
 +-Dcom.sun.management.jmxremote.password.file=${CATALINA_BASE}/conf/jmxremote.password \
 +-Djavax.net.ssl.keyStorePassword=workshop \
 +-Djavax.net.ssl.keyStore=${CATALINA_BASE}/conf/keystore.jks \
 +"
 +
 +CATALINA_OPTS="$CATALINA_OPTS $JMX_OPTS_NOSSL_NOAUTH"
 </code> </code>
  
Zeile 187: Zeile 229:
           />           />
 </code> </code>
 +
 +===== Tag 4 =====
 +
 +
 +===== Tag 5 =====
 +
 +==== 5.1 - docker ====
 +
 +<code>
 +FROM alpine:3.15
 +
 +#### OpenJDK 17
 +RUN apk update
 +RUN apk add openjdk17-jre-headless
 +ENV JAVA_HOME /usr/lib/jvm/java-17-openjdk
 +
 +#### tcnative
 +#ENV TCNATIVE 1.2.33
 +#RUN apk add openjdk17-jdk apr-dev openssl-dev gcc make musl-dev
 +#RUN wget -O /tmp/tomcat-native-${TCNATIVE}-src.tar.gz https://dlcdn.apache.org/tomcat/tomcat-connectors/native/${TCNATIVE}/source/tomcat-native-${TCNATIVE}-src.tar.gz; \
 +#  cd /tmp; \
 +#  tar -zxf tomcat-native-${TCNATIVE}-src.tar.gz; \
 +#  cd tomcat-native-${TCNATIVE}-src/native; \
 +#  ./configure --prefix=/opt/tcnative/${TCNATIVE}; \
 +#  make; \
 +#  make install; \
 +#  cd /tmp; \
 +#  rm -rf /tmp/tomcat-native*
 +
 +#### tomcat
 +ENV TOMCATVERSION 10.0.20
 +ENV INSTANCENAME workshop
 +ENV TOMCATDIR /opt/tomcat
 +ENV WARFILE workshop.war
 +ENV APPVERSION 3.1.0
 +ENV CATALINA_HOME ${TOMCATDIR}/products/apache-tomcat-${TOMCATVERSION}
 +ENV CATALINA_BASE ${TOMCATDIR}/instances/${INSTANCENAME}
 +ENV CATALINA_VAR /var/tomcat/${INSTANCENAME}
 +ENV PATH $CATALINA_HOME/bin:$PATH
 +ENV TCUSER tcrun
 +ENV TCGROUP tcgroup
 +
 +# create CATALINA_HOME
 +RUN mkdir -p "${TOMCATDIR}/products"; \
 +  cd ${TOMCATDIR}/products; \
 +  wget -O /tmp/tomcat-product.tar.gz "https://archive.apache.org/dist/tomcat/tomcat-10/v${TOMCATVERSION}/bin/apache-tomcat-${TOMCATVERSION}.tar.gz"; \
 +  tar -zxf /tmp/tomcat-product.tar.gz; \
 +  rm /tmp/tomcat-product.tar.gz
 +
 +# create CATALINA_BASE
 +COPY ${INSTANCENAME}.tar /tmp/${INSTANCENAME}.tar
 +RUN mkdir -p ${TOMCATDIR}/instances; \
 +  cd ${TOMCATDIR}/instances; \
 +  tar -xf /tmp/${INSTANCENAME}.tar; \
 +  rm /tmp/${INSTANCENAME}.tar
 +
 +# create CATALINA_VAR
 +RUN mkdir -p /var/tomcat/${INSTANCENAME}; \
 +  cd /var/tomcat/${INSTANCENAME}; \
 +  mkdir logs temp webapps work
 +
 +# create webappdir
 +RUN mkdir -p /opt/webapps/${INSTANCENAME}/${APPVERSION}-jee9
 +COPY $WARFILE /opt/webapps/${INSTANCENAME}/${APPVERSION}-jee9/
 +
 +# create runtime user and change rights
 +RUN addgroup $TCGROUP; \
 +  adduser -h /opt/tomcat -H -G $TCGROUP -s /bin/sh -D $TCUSER; \
 +  chown -R $TCUSER:$TCGROUP /opt/tomcat; \
 +  chown -R $TCUSER:$TCGROUP /var/tomcat; \
 +  chown -R $TCUSER:$TCGROUP /opt/webapps
 +
 +WORKDIR $CATALINA_BASE
 +EXPOSE 8080 8443
 +
 +USER $TCUSER
 +CMD ["catalina.sh","run"]
 +</code>
 +
 +==== 5.3 - einfacher Proxy ====
 +<code>
 +<VirtualHost *:80>
 +  ProxyPass /workshop http://localhost:8180/workshop
 +  ProxyPassReverse /workshop http://localhost:8080/workshop
 +  ProxyPassReverse /workshop http://localhost:8180/workshop
 +  ProxyPreserveHost On
 +</VirtualHost>
 +</code>
 +
 +==== 5.6 - Monitoring ====
 +
 +<code>
 +   ProxyPass /lbmanager !
 +   <Location /lbmanager>
 +      SetHandler balancer-manager
 +      AuthType basic
 +      AuthName "Proxy Balancer"
 +      AuthBasicProvider file
 +      AuthUserFile htpasswd.intern
 +      Require user proxyadmin
 +   </Location>
 +</code>
 +
 +<code>
 +  LogFormat "%h %l %u %t \"%r\" %>s %b %{BALANCER_ROUTE_CHANGED}e %{BALANCER_WORKER_ROUTE}e %{BALANCER_SESSION_ROUTE}e %D" proxyextended
 +  CustomLog "logs/proxy_access_log" proxyextended
 +</code>
 +
tomcat_administration/start.1479716216.txt.gz · Zuletzt geändert: 2016/11/21 08:16 von marco.staub