我有以下 docker 文件:
FROM debian:jessie
RUN apt-get update && apt-get install -y wget
RUN wget --quiet http://www.us.apache.org/dist/tomcat/tomcat-8/v8.5.20/bin/apache-tomcat-8.5.20.tar.gz -O /tmp/tomcat.tar.gz
RUN cd /tmp && tar xf tomcat.tar.gz
RUN mv /tmp/apache-tomcat-8.5.20 /usr/share/
RUN adduser --system --shell /bin/bash --gecos 'Tomcat Java Servlet and JSP engine' --group --disabled-password --home /home/tomcat tomcat
RUN chown -R tomcat:tomcat /usr/share/apache-tomcat-8.5.20/*
RUN chmod +x /usr/share/apache-tomcat-8.5.20/bin/*.sh
RUN apt-get update && apt-get install -y openjdk-7-jre-headless
CMD ["/bin/bash"]
如果我在笔记本电脑上用 Ubuntu 17.04 和 docker 1.12.6 编译它,构建 78d1802,我可以执行
su tomcat -c /usr/share/apache-tomcat-8.5.20/bin/startup.sh
没有任何问题:
$ sudo docker run -it ff1323fadc66
root@728de06f43be:/# su tomcat -c /usr/share/apache-tomcat-8.5.20/bin/startup.sh
Using CATALINA_BASE: /usr/share/apache-tomcat-8.5.20
Using CATALINA_HOME: /usr/share/apache-tomcat-8.5.20
Using CATALINA_TMPDIR: /usr/share/apache-tomcat-8.5.20/temp
Using JRE_HOME: /usr
Using CLASSPATH: /usr/share/apache-tomcat-8.5.20/bin/bootstrap.jar:/usr/share/apache-tomcat-8.5.20/bin/tomcat-juli.jar
Tomcat started.
但是,如果我在 Ubuntu 16.04 LTS 和 docker 1.12.6 上尝试相同的构建 78d1802,它托管在 AWS 上,我会得到以下输出:
$ sudo docker run -it 96e0e82a9dda
root@f8f7d3fd6917:/# su tomcat -c /usr/share/apache-tomcat-8.5.20/bin/startup.sh
Using CATALINA_BASE: /usr/share/apache-tomcat-8.5.20
Using CATALINA_HOME: /usr/share/apache-tomcat-8.5.20
Using CATALINA_TMPDIR: /usr/share/apache-tomcat-8.5.20/temp
Using JRE_HOME: /usr
Using CLASSPATH: /usr/share/apache-tomcat-8.5.20/bin/bootstrap.jar:/usr/share/apache-tomcat-8.5.20/bin/tomcat-juli.jar
touch: cannot touch '/usr/share/apache-tomcat-8.5.20/logs/catalina.out': Permission denied
/usr/share/apache-tomcat-8.5.20/bin/catalina.sh: 434: /usr/share/apache-tomcat-8.5.20/bin/catalina.sh: cannot create /usr/share/apache-tomcat-8.5.20/logs/catalina.out: Permission denied
这怎么可能? docker 文件不应该产生相同的环境吗?我还在 MacOS 上尝试过它,它也像魅力一样在那里启动 tomcat。
我已经尝试使用 chmod 777/usr/share/apache-tomcat-8.5.20/logs/
来规避此问题,但它也没有用。
编辑:
根据 ls -alh/usr/share/apache-tomcat-8.5.20/logs/
的输出要求
root@ce87bb8feb9b:/# su tomcat -c /usr/share/apache-tomcat-8.5.20/bin/startup.sh
Using CATALINA_BASE: /usr/share/apache-tomcat-8.5.20
Using CATALINA_HOME: /usr/share/apache-tomcat-8.5.20
Using CATALINA_TMPDIR: /usr/share/apache-tomcat-8.5.20/temp
Using JRE_HOME: /usr
Using CLASSPATH: /usr/share/apache-tomcat-8.5.20/bin/bootstrap.jar:/usr/share/apache-tomcat-8.5.20/bin/tomcat-juli.jar
touch: cannot touch '/usr/share/apache-tomcat-8.5.20/logs/catalina.out': Permission denied
/usr/share/apache-tomcat-8.5.20/bin/catalina.sh: 434: /usr/share/apache-tomcat-8.5.20/bin/catalina.sh: cannot create /usr/share/apache-tomcat-8.5.20/logs/catalina.out: Permission denied
root@ce87bb8feb9b:/# ls -alh /usr/share/apache-tomcat-8.5.20/logs/
total 8.0K
drwxr-x--- 2 tomcat tomcat 4.0K Aug 2 21:35 .
drwxr-xr-x 17 root root 4.0K Sep 6 06:58 ..
root@ce87bb8feb9b:/#
此外:当然可以在不切换用户的情况下启动tomcat然后使用root,但我宁愿避免这种情况。
编辑2:
主机是 Ubuntu 16.04.3 LTS:
$ cat /etc/os-release
NAME="Ubuntu"
VERSION="16.04.3 LTS (Xenial Xerus)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 16.04.3 LTS"
VERSION_ID="16.04"
HOME_URL="http://www.ubuntu.com/"
SUPPORT_URL="http://help.ubuntu.com/"
BUG_REPORT_URL="http://bugs.launchpad.net/ubuntu/"
VERSION_CODENAME=xenial
UBUNTU_CODENAME=xenial
它还有一个开发日志:
$ ls -l /run/systemd/journal/dev-log
srw-rw-rw- 1 root root 0 Sep 5 13:13 /run/systemd/journal/dev-log
最佳答案
所以这个似乎是最奇怪的一个,我不确定这不起作用的根本原因,但下面的选项对你有用
将用户更改为tomcat,然后解压文件夹
FROM debian:jessie
RUN apt-get update && apt-get install -y wget openjdk-7-jre-headless
RUN adduser --system --shell /bin/bash --gecos 'Tomcat Java Servlet and JSP engine' --group --disabled-password --home /home/tomcat tomcat
USER tomcat
RUN wget --quiet http://www.us.apache.org/dist/tomcat/tomcat-8/v8.5.20/bin/apache-tomcat-8.5.20.tar.gz -O /tmp/tomcat.tar.gz && cd /tmp && tar xf tomcat.tar.gz && mv /tmp/apache-tomcat-8.5.20/ /tomcat
USER root
CMD ["/bin/bash"]
删除日志文件夹并重新创建
FROM debian:jessie
RUN apt-get update && apt-get install -y wget openjdk-7-jre-headless
RUN adduser --system --shell /bin/bash --gecos 'Tomcat Java Servlet and JSP engine' --group --disabled-password --home /home/tomcat tomcat
RUN wget --quiet http://www.us.apache.org/dist/tomcat/tomcat-8/v8.5.20/bin/apache-tomcat-8.5.20.tar.gz -O /tmp/tomcat.tar.gz && cd /tmp && tar xf tomcat.tar.gz && mv /tmp/apache-tomcat-8.5.20/ /tomcat
RUN rm -rf /tomcat/logs && chown -R tomcat:tomcat /tomcat && su tomcat -c "mkdir /tomcat/logs"
CMD ["/bin/bash"]
以上解决方案适用于您的情况。两个操作系统中行为不同的根本原因尚不清楚
为任何有兴趣调试的人粘贴垃圾箱
strace su tomcat -c/tomcat/logs/text.txt
实际使用的最终 dockerfile
关于tomcat - 无法在 docker : "Permission denied" 中启动 tomcat,我们在Stack Overflow上找到一个类似的问题: https://stackoverflow.com/questions/46059396/