一、安装 openssh
sudo apt-get install openssh-server
二、安装 mysql
sudo apt-get install mysql-server mysql-client
三、安装 java
sudo apt-get install python-software-properties
sudo add-apt-repository ppa:webupd8team/java
sudo apt-get update
sudo apt-get install oracle-java8-installer
四、安装 Tomcat
1、创建 tomcat 用户
sudo groupadd tomcat
sudo useradd -s /bin/false -g tomcat -d /opt/tomcat tomcat
2、下载 tomcat 并解压
cd /opt
sudo wget http://www.apache.org/dist/tomcat/tomcat-8/v8.0.26/bin/apache-tomcat-8.0.26.tar.gz
sudo tar -xvf apache-tomcat-8.0.26.tar.gz
3、修改 tomcat 目录权限
sudo chown -R tomcat:tomcat /opt/apache-tomcat-8.0.26
4、设置环境变量
编辑 /etc/environment，在末尾添加
JAVA_HOME="/usr/lib/jvm/java-8-oracle"
CATALINA_HOME="/opt/apache-tomcat-8.0.26"
5、测试安装结果
sudo /opt/apache-tomcat-8.0.26/bin/startup.sh
控制台输出以下内容：
Using CATALINA_BASE: /opt/apache-tomcat-8.0.26
Using CATALINA_HOME: /opt/apache-tomcat-8.0.26
Using CATALINA_TMPDIR: /opt/apache-tomcat-8.0.26/temp
Using JRE_HOME: /usr
Using CLASSPATH: /opt/apache-tomcat-8.0.26/bin/bootstrap.jar:/opt/apache-tomcat-8.0.26/bin/tomcat-juli.jar
Tomcat started.
打开浏览器访问 http://localhost:8080
五、开机启动 tomcat
sudo vi /etc/init/tomcat.conf
内容如下：
description "Tomcat Server"
start on runlevel [2345]
stop on runlevel [!2345]
respawn
respawn limit 10 5
setuid tomcat
setgid tomcat
env JAVA_HOME=/usr/lib/jvm/java-8-oracle
env CATALINA_HOME=/opt/apache-tomcat-8.0.26
# Modify these options as needed
env JAVA_OPTS="-Djava.awt.headless=true -Djava.security.egd=file:/dev/./urandom"
env CATALINA_OPTS="-Xms512M -Xmx1024M -server -XX:+UseParallelGC"
exec $CATALINA_HOME/bin/catalina.sh run
# cleanup temp directory after stop
post-stop script
rm -rf $CATALINA_HOME/temp/*
end script
重载配置并启动
sudo initctl reload-configuration
sudo initctl start tomcat
六、启动多个 Tomcat 实例
1、建立新的 tomcat 实例目录 tomcat1，并复制必要的文件:
sudo mkdir /opt/tomcat-instance/tomcat1
cd /opt/tomcat-instance/tomcat1
sudo cp -r /opt/apache-tomcat-8.0.26/conf conf
sudo cp -r /opt/apache-tomcat-8.0.26/webapps webapps
sudo mkdir logs
sudo mkdir temp
2、修改 tomcat1 目录权限
sudo chown -R tomcat:tomcat /opt/tomcat-instance/tomcat1
3、修改端口设置
打开 server.xml 配置文件：
sudo vi /opt/tomcat-instance/tomcat1/conf/server.xml
找到以下几行，修改对应的端口后，使之与其他的 server 端口不冲突：
<Server port="8005" shutdown="SHUTDOWN">
...
<Connector port="8080" protocol="HTTP/1.1"
connectionTimeout="20000"
redirectPort="8443" />
...
<Connector port="8009" protocol="AJP/1.3" redirectPort="8443" />
4、编辑启动/停止脚本
sudo vi startup.sh
内容如下：
#! /bin/sh
export CATALINA_BASE="/opt/tomcat-instance/tomcat1"
exec "/opt/apache-tomcat-8.0.26/bin/startup.sh"
sudo vi shutdown.sh
内容如下：
#! /bin/sh
export CATALINA_BASE="/opt/tomcat-instance/tomcat1"
exec "/opt/apache-tomcat-8.0.26/bin/shutdown.sh"
设置权限
sudo chown tomcat/tomcat *.sh
sudo chmod +x *.sh
开机启动这个副本：
description "Tomcat Server 1"
start on runlevel [2345]
stop on runlevel [!2345]
respawn
respawn limit 10 5
setuid tomcat
setgid tomcat
env JAVA_HOME=/usr/lib/jvm/java-8-oracle
env CATALINA_HOME=/opt/tomcat
# Modify these options as needed
env JAVA_OPTS="-Djava.awt.headless=true -Djava.security.egd=file:/dev/./urandom"
env CATALINA_OPTS="-Xms512M -Xmx1024M -XX:MaxPermSize=256m -server -XX:+UseParallelGC"
env CATALINA_BASE=/opt/tomcat-instance/tomcat1
exec $CATALINA_HOME/bin/catalina.sh run
# cleanup temp directory after stop
post-stop script
rm -rf $CATALINA_BASE/temp/*
end script
5、更多实例
需要建立更多实例，只需要复制 tomcat1 并修改对应的 server.xml 和启动脚本 CATALINA_BASE 设置。
七、安装 nginx
1、使用 apt-get 安装 nginx
sudo apt-get install nginx
2、配置 nginx 反向代理负载均衡 tomcat
upstream tomcat-server {
server 127.0.0.1:8080 weight=10;
server 127.0.0.1:8081 weight=10;
}
server {
listen 80 default_server;
listen [::]:80 default_server ipv6only=on;
root /usr/share/nginx/html;
index index.html index.htm;
# Make site accessible from http://localhost/
server_name localhost;
location / {
proxy_pass http://tomcat-server;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_pass_request_headers on;
proxy_pass_request_body on;
}
}
八、配置iptables开放指定的端口
#允许本地回环接口(即运行本机访问本机)
iptables -A INPUT -i lo -j ACCEPT
# 允许已建立的或相关连的通行
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
#允许所有本机向外的访问
iptables -A OUTPUT -j ACCEPT
# 允许访问22端口
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
#允许访问80端口
iptables -A INPUT -p tcp --dport 80 -j ACCEPT
#允许FTP服务的21和20端口
iptables -A INPUT -p tcp --dport 21 -j ACCEPT
iptables -A INPUT -p tcp --dport 20 -j ACCEPT
#如果有其他端口的话，规则也类似，稍微修改上述语句就行
#允许ping
iptables -A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
#禁止其他未允许的规则访问
iptables -A INPUT -j REJECT #（注意：如果22端口未加入允许规则，SSH链接会直接断开。）
iptables -A FORWARD -j REJECT
