centos 7 启用系统预装tomcat

centos安装时预装了tomcat，但是默认不启用。

用systemctl is-enabled tomcat 进行检查，返回disabled。

首先启用并启动tomcat

执行：

systemctl enable tomcat

systemctl start tomcat

用ps -ef | grep tomcat检查

[username@hostname ~]$ ps -ef | grep tomcat tomcat 1235 1 1 19:07 ? 00:00:08 java -classpath /usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:/usr/shar e/java/commons-daemon.jar -Dcatalina.base=/usr/share/tomcat -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs= -Djava.io.tmpdir=/var/cache/tom cat/temp -Djava.util.logging.config.file=/usr/share/tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManage r org.apache.catalina.startup.Bootstrap start 可见tomcat运行在tomcat用户下，pid是1235

用 sudo netstat -tupln检查端口（注意，这里要使用sudo，否则看不到pid）

[fuxiaodong@fxd ~]$ sudo netstat -tupln | grep 1235 tcp6 0 0 :::8080 :::* LISTEN 1235/java tcp6 0 0 127.0.0.1:8005 :::* LISTEN 1235/java tcp6 0 0 :::8009 :::* LISTEN 1235/java 可见8080端口已经listen

但是由于防火墙，这时候用浏览器还是无法访问。

在centos 7上，防火墙是firewalld。可以用 systemctl status firewalld查看防火墙状态。

[root@fxd ~]# systemctl status firewalld ?firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled) Active: active (running) since ?2017-03-09 19:58:50 CST; 1min 40s ago Docs: man:firewalld(1) Main PID: 864 (firewalld) CGroup: /system.slice/firewalld.service 忖864 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid 3?09 19:58:50 fxd.test.zte systemd[1]: Starting firewalld - dynamic firew.... 3?09 19:58:50 fxd.test.zte systemd[1]: Started firewalld - dynamic firewa.... Hint: Some lines were ellipsized, use -l to show in full. 用systemctl stop firewalld可以规避这个问题，但是不好。

执行  firewall-cmd --list-all-zones，可以看到默认网卡设置为public区域，仅允许 dhcpv6-client ssh

public (active) target: default icmp-block-inversion: no interfaces: enp0s25 sources: services: dhcpv6-client ssh ports: protocols: masquerade: no forward-ports: sourceports: icmp-blocks: rich rules: 当前在办公室，修改固网为internal。执行  firewall-cmd --zone=internal --change-interface=enp0s25

启用internal区域的http和https服务

firewall-cmd --permanent --zone=internal --add-service=http firewall-cmd --permanent --zone=internal --add-service=https

启用tomcat使用的端口

firewall-cmd --permanent --zone=internal --add-port=8080/tcp firewall-cmd --permanent --zone=internal --add-port=8005/tcp firewall-cmd --permanent --zone=internal --add-port=8009/tcp

重新加载防火墙： firewall-cmd --reload

在查看防火墙状态  firewall-cmd --list-all-zones

internal (active) target: default icmp-block-inversion: no interfaces: enp0s25 sources: services: dhcpv6-client http https mdns samba-client ssh ports: 8009/tcp 8005/tcp 8080/tcp protocols: masquerade: no forward-ports: sourceports: icmp-blocks: rich rules: 用浏览器访问，网页可以打开。

参考资料：

linux下如何使用systemctl管理systemd服务与单元          http://blog.csdn.net/drdairen/article/details/51441040

CentOS7下Firewall防火墙配置用法详解                           http://www.centoscn.com/CentOS/Intermediate/2015/0313/4879.html