Tomcat服务器部署项目教程

sudo apt update
sudo apt install -y openjdk-17-jdk-headless    # headless 版无图形库，服务器推荐

java -version
# openjdk version "17.0.x" 2026-xx-xx
javac -version

# 配置 JAVA_HOME（systemd 服务里会用到）
echo 'export JAVA_HOME=/usr/lib/jvm/java-17-openjdk-amd64' | sudo tee /etc/profile.d/java.sh
source /etc/profile.d/java.sh
echo $JAVA_HOME

# 创建专用运行用户（绝不用 root 跑 Tomcat）
sudo useradd -r -m -d /opt/tomcat -s /bin/false tomcat

# 下载 Tomcat 11（版本号截至 2026 年请以官网为准）
cd /tmp
wget https://dlcdn.apache.org/tomcat/tomcat-11/v11.0.x/bin/apache-tomcat-11.0.x.tar.gz
sudo mkdir -p /opt/tomcat
sudo tar -xzf apache-tomcat-11.0.x.tar.gz -C /opt/tomcat --strip-components=1

sudo chown -R tomcat:tomcat /opt/tomcat
sudo chmod +x /opt/tomcat/bin/*.sh

sudo -u tomcat /opt/tomcat/bin/startup.sh
curl -I http://127.0.0.1:8080/     # 返回 200 说明启动成功
tail -f /opt/tomcat/logs/catalina.out

sudo -u tomcat tee /opt/tomcat/bin/setenv.sh <<'EOF'
#!/bin/bash
export CATALINA_HOME=/opt/tomcat
export CATALINA_BASE=/opt/tomcat
export CATALINA_PID=/opt/tomcat/tomcat.pid

# 内存：初始与最大设为相同，避免运行时扩容抖动
JAVA_OPTS="-server -Xms2g -Xmx2g -XX:MetaspaceSize=256m -XX:MaxMetaspaceSize=512m"

# GC：JDK 17 推荐 G1
JAVA_OPTS="$JAVA_OPTS -XX:+UseG1GC -XX:MaxGCPauseMillis=200"

# 故障排查：OOM 时自动 dump，JVM 崩溃时生成 hs_err 日志
JAVA_OPTS="$JAVA_OPTS -XX:+HeapDumpOnOutOfMemoryError -XX:HeapDumpPath=/opt/tomcat/logs/"
JAVA_OPTS="$JAVA_OPTS -XX:+ExitOnOutOfMemoryError"

# 时间与随机数（Tomcat 启动慢的经典原因）
JAVA_OPTS="$JAVA_OPTS -Djava.security.egd=file:/dev/./urandom"
JAVA_OPTS="$JAVA_OPTS -Duser.timezone=Asia/Shanghai -Dfile.encoding=UTF-8"

# 可选：开启 JMX 远程监控（注意加认证，不要裸奔）
# JAVA_OPTS="$JAVA_OPTS -Dcom.sun.management.jmxremote.port=9010 -Dcom.sun.management.jmxremote.authenticate=false"
EOF
sudo chmod +x /opt/tomcat/bin/setenv.sh

# 1. 停止应用或整机（小站点可直接停 Tomcat）
sudo systemctl stop tomcat

# 2. 备份旧版本（回滚的保障）
sudo -u tomcat cp -a /opt/tomcat/webapps/myapp /opt/tomcat/webapps/myapp.bak.$(date +%F)

# 3. 部署新包
sudo -u tomcat rm -rf /opt/tomcat/webapps/myapp
sudo -u tomcat unzip -q /tmp/myapp.war -d /opt/tomcat/webapps/myapp

# 4. 清理 work 缓存的 JSP 编译产物（改了 JSP 必须清）
sudo -u tomcat rm -rf /opt/tomcat/work/Catalina/localhost/myapp

# 5. 启动并观察
sudo systemctl start tomcat
tail -f /opt/tomcat/logs/catalina.out

# /etc/systemd/system/tomcat.service
[Unit]
Description=Apache Tomcat 11
After=network.target

[Service]
Type=forking
User=tomcat
Group=tomcat
Environment="JAVA_HOME=/usr/lib/jvm/java-17-openjdk-amd64"
Environment="CATALINA_PID=/opt/tomcat/tomcat.pid"
Environment="CATALINA_HOME=/opt/tomcat"
Environment="CATALINA_BASE=/opt/tomcat"
ExecStart=/opt/tomcat/bin/startup.sh
ExecStop=/opt/tomcat/bin/shutdown.sh
Restart=on-failure
RestartSec=10
# 提高文件描述符限制，支持更多并发连接
LimitNOFILE=65536

[Install]
WantedBy=multi-user.target

sudo systemctl daemon-reload
sudo systemctl enable --now tomcat
systemctl status tomcat

upstream tomcat_backend {
    server 127.0.0.1:8080 max_fails=3 fail_timeout=30s;
    keepalive 64;
}

server {
    listen 80;
    server_name example.com;
    return 301 https://$host$request_uri;
}

server {
    listen 443 ssl http2;
    server_name example.com;

    ssl_certificate     /etc/letsencrypt/live/example.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;

    client_max_body_size 50m;

    # 静态资源交给 Nginx，不打扰 Tomcat
    location ~* \.(jpg|jpeg|png|gif|css|js|woff2|ico)$ {
        root /opt/tomcat/webapps/myapp;
        expires 30d;
        access_log off;
    }

    location / {
        proxy_pass http://tomcat_backend;
        proxy_http_version 1.1;
        proxy_set_header Connection "";               # 配合 keepalive
        proxy_set_header Host              $host;
        proxy_set_header X-Real-IP         $remote_addr;
        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;   # 让 Java 端识别 https
        proxy_connect_timeout 5s;
        proxy_read_timeout   120s;
    }
}