updated with baseline for Tomee Container

ea5a1a27 · Kevin · 1145283e · ea5a1a27 · ea5a1a27 · ea5a1a27
Commit ea5a1a27 authored Jul 28, 2021 by Kevin
19 changed files
--- a/.dockerignore
+++ b/.dockerignore
+/etc
+/usr
+# /certs
--- a/.gitignore
+++ b/.gitignore
+/etc
+/usr
\ No newline at end of file
--- a/Dockerfile
+++ b/Dockerfile
+FROM registry.redhat.io/rhel7/rhel:7.6-362
+ENV JAVA_HOME /usr/lib/jvm/jdk-11/
+ENV PATH $JAVA_HOME/bin:$PATH
+ENV CATALINA_HOME /opt/tomcat
+ENV PATH $CATALINA_HOME/bin:$PATH
+RUN mkdir /usr/lib/jvm
+# RUN subscription-manager unregister
+RUN subscription-manager register --username ksummersill --password "zxasqw12ZXASQW!@" --auto-attach
+RUN yum update -y
+RUN yum repolist all
+RUN yum -y update; yum clean all
+RUN yum -y install nano;
+RUN yum -y install wget;
+RUN curl -O https://download.java.net/openjdk/jdk11/ri/openjdk-11+28_linux-x64_bin.tar.gz
+RUN tar xvf openjdk-11+28_linux-x64_bin.tar.gz -C /usr/lib/jvm
+RUN java --version
+RUN useradd tomcat
+RUN mkdir /opt/tomcat
+RUN wget http://apache.spinellicreations.com/tomcat/tomcat-9/v9.0.34/bin/apache-tomcat-9.0.34.tar.gz
+RUN tar -zxvf apache-tomcat-9.0.34.tar.gz -C /opt/tomcat --strip-components=1
+RUN cd /opt && chown -R tomcat tomcat/
+RUN chmod 777 /etc/systemd/system
+RUN echo $"[Unit] Description=Apache Tomcat Web Application\Container After=syslog.target network.target\[Service]\Type=forking\Environment=JAVA_HOME=/usr/lib/jvm/jre\Environment=CATALINA_PID=/opt/tomcat/temp/tomcat.pid\Environment=CATALINA_HOME=/opt/tomcat\Environment=CATALINA_BASE=/opt/tomcat\Environment='CATALINA_OPTS=-Xms512M -Xmx1024M -server -XX:+UseParallelGC'\Environment='JAVA_OPTS=-Djava.awt.headless=true -Djava.security.egd=file:/dev/./urandom'\ExecStart=/opt/tomcat/bin/startup.sh\ExecStop=/bin/kill -15 $MAINPID\User=tomcat\Group=tomcat\[Install]\WantedBy=multi-user.target" > /etc/systemd/system/tomcat.service
+RUN chmod 777 -R /opt/tomcat/webapps/manager/META-INF
+RUN cd /opt/tomcat/webapps/manager/META-INF/
+RUN echo $"<?xml version=\"1.0\" encoding=\"UTF-8\"?><Context antiResourceLocking=\"false\" privileged=\"true\"><Manager sessionAttributeValueClassNameFilter=\"java\.lang\.(?:Boolean|Integer|Long|Number|String)|org\.apache\.catalina\.filters\.CsrfPreventionFilter\$LruCache(?:\$1)?|java\.util\.(?:Linked)?HashMap\"/></Context>" > /opt/tomcat/webapps/manager/META-INF/context.xml
+RUN cd /opt/tomcat/conf
+RUN echo $"<?xml version=\"1.0\" encoding=\"UTF-8\"?><tomcat-users xmlns=\"http://tomcat.apache.org/xml\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:schemaLocation=\"http://tomcat.apache.org/xml tomcat-users.xsd\" version=\"1.0\"><role rolename=\"manager-script\"/><role rolename=\"admin-gui\"/><role rolename=\"manager-gui\"/><user username=\"tomcat\" password=\"World2k!\" roles=\"admin-gui,manager-gui,manager-script\"/></tomcat-users>" > /opt/tomcat/conf/tomcat-users.xml
+COPY setenv.sh /opt/tomcat/bin
+RUN chmod +x /opt/tomcat/bin/setenv.sh
+RUN mkdir /opt/certs
+COPY /certs /opt/certs
+# COPY gdig2_bundle.crt /opt/certs/gdig2_bundle.crt
+# COPY b8e15ee5a0fa8e89.crt /opt/certs/b8e15ee5a0fa8e89.crt
+# Self Signing Certificate for Server
+RUN keytool -genkey -keyalg RSA -dname "CN=jsvede.bea.com,OU=DRE,O=BEA,L=Denver,S=Colorado,C=US" -keypass zx#asqw_TST456$  -storepass zx#asqw_TST456$ -keystore /opt/certs/tomcat.keystore
+# DoD Certificates
+RUN keytool -importcert -file /opt/certs/DoD_Root_CA_2__0x05__DoD_Root_CA_2.cer -alias DODRoot2 -keystore /opt/certs/truststore.jks -storepass changeit -noprompt
+RUN keytool -importcert -file /opt/certs/DoD_Root_CA_3__0x01__DoD_Root_CA_3.cer -alias DODRoot3 -keystore /opt/certs/truststore.jks -storepass changeit -noprompt
+RUN keytool -importcert -file /opt/certs/DoD_Root_CA_4__0x01__DoD_Root_CA_4.cer -alias DODRoot4 -keystore /opt/certs/truststore.jks -storepass changeit -noprompt
+RUN keytool -importcert -file /opt/certs/DoD_Root_CA_5__0x0F__DoD_Root_CA_5.cer -alias DODRoot5 -keystore /opt/certs/truststore.jks -storepass changeit -noprompt
+RUN keytool -importcert -file /opt/certs/DoD_Root_CA_3__0x012B__DOD_SW_CA-53.cer -alias DODRoot53 -keystore /opt/certs/truststore.jks -storepass changeit -noprompt
+RUN keytool -importcert -file /opt/certs/DoD_JITC_Root_CA_3__0x009B__DOD_JITC_SW_CA-53.cer -alias DODRootJITC53 -keystore /opt/certs/truststore.jks -storepass changeit -noprompt
+RUN keytool -list -keystore /opt/certs/truststore.jks
+RUN yum -y install mod_ssl
+#COPY context.xml /opt/tomcat/conf/context.xml
+#COPY manager.xml /opt/tomcat/webapps/host-manager/manager.xml
+COPY server.xml /opt/tomcat/conf/server.xml
+COPY web.xml /opt/tomcat/conf/web.xml 
+VOLUME /opt/tomcat
+WORKDIR /opt/tomcat
+EXPOSE 8443
+CMD ["catalina.sh", "run"]
--- a/README.md
+++ b/README.md
-# tomee70-plume
+## RHEL - OpenJDK - Tomcat 9 Dockerfile Repository
--- a/ca.conf
+++ b/ca.conf
+# Mainly copied from:
+# http://swearingscience.com/2009/01/18/openssl-self-signed-ca/
+[ ca ]
+default_ca = myca
+[ crl_ext ]
+# issuerAltName=issuer:copy  #this would copy the issuer name to altname
+authorityKeyIdentifier=keyid:always
+ [ myca ]
+ dir = ./
+ new_certs_dir = $dir
+ unique_subject = no
+ certificate = $dir/ca.crt
+ database = $dir/certindex
+ private_key = $dir/ca.key
+ serial = $dir/certserial
+ default_days = 730
+ default_md = sha1
+ policy = myca_policy
+ x509_extensions = myca_extensions
+ crlnumber = $dir/crlnumber
+ default_crl_days = 730
+ [ myca_policy ]
+ commonName = supplied
+ stateOrProvinceName = supplied
+ countryName = optional
+ emailAddress = optional
+ organizationName = supplied
+ organizationalUnitName = optional
+ [ myca_extensions ]
+ basicConstraints = CA:false
+ subjectKeyIdentifier = hash
+ authorityKeyIdentifier = keyid:always
+ keyUsage = digitalSignature,keyEncipherment
+ extendedKeyUsage = serverAuth
+ crlDistributionPoints = URI:http://example.com/root.crl
+ subjectAltName  = @alt_names
+ [alt_names]
+ DNS.1 = example.com
+ DNS.2 = *.example.com
\ No newline at end of file
--- a/certs/DoD_JITC_Root_CA_3__0x009B__DOD_JITC_SW_CA-53.cer
+++ b/certs/DoD_JITC_Root_CA_3__0x009B__DOD_JITC_SW_CA-53.cer
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/certs/DoD_Root_CA_2__0x05__DoD_Root_CA_2.cer
+++ b/certs/DoD_Root_CA_2__0x05__DoD_Root_CA_2.cer
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/certs/DoD_Root_CA_3__0x012B__DOD_SW_CA-53.cer
+++ b/certs/DoD_Root_CA_3__0x012B__DOD_SW_CA-53.cer
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/certs/DoD_Root_CA_3__0x01__DoD_Root_CA_3.cer
+++ b/certs/DoD_Root_CA_3__0x01__DoD_Root_CA_3.cer
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/certs/DoD_Root_CA_4__0x01__DoD_Root_CA_4.cer
+++ b/certs/DoD_Root_CA_4__0x01__DoD_Root_CA_4.cer
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/certs/DoD_Root_CA_5__0x0F__DoD_Root_CA_5.cer
+++ b/certs/DoD_Root_CA_5__0x0F__DoD_Root_CA_5.cer
+-----BEGIN CERTIFICATE-----
+MIICJDCCAaqgAwIBAgIBDzAKBggqhkjOPQQDAzBbMQswCQYDVQQGEwJVUzEYMBYG
+A1UEChMPVS5TLiBHb3Zlcm5tZW50MQwwCgYDVQQLEwNEb0QxDDAKBgNVBAsTA1BL
+STEWMBQGA1UEAxMNRG9EIFJvb3QgQ0EgNTAeFw0xNjA2MTQxNzE3MjdaFw00MTA2
+MTQxNzE3MjdaMFsxCzAJBgNVBAYTAlVTMRgwFgYDVQQKEw9VLlMuIEdvdmVybm1l
+bnQxDDAKBgNVBAsTA0RvRDEMMAoGA1UECxMDUEtJMRYwFAYDVQQDEw1Eb0QgUm9v
+dCBDQSA1MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAENmLeC07Ax9cpRTp/HJnmKiF2
+sQDdjEf/wLG0+s46TlL7p+02LRweHJCNl6orpuLTc3N8XBzQZ/QKKdOQhOtR5fFe
+HMDShoTFbdEkSQ7sF4nkaMjeGlwaBtA4GTMpARqBo0IwQDAdBgNVHQ4EFgQUhsAV
+Qvtxdtw+LRFbIRBENcrB3BQwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMB
+Af8wCgYIKoZIzj0EAwMDaAAwZQIwQQbk3t5iNJ3fuKoW2W2iOB85IlfJcIQfkw9X
+fgUvpUszzRXqV9XSKx+bjXzOarbMAjEAt4HS4TuTzxFk3AsvF9Jt1dgF5FByYmXc
+pDzKYaUGmsn77cQwyXuJ4KW+Y1XmnBHj
+-----END CERTIFICATE-----
--- a/certs/af.command2.9530009239.p12
+++ b/certs/af.command2.9530009239.p12
--- a/certs/b8e15ee5a0fa8e89.crt
+++ b/certs/b8e15ee5a0fa8e89.crt
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/certs/gdig2_bundle.crt
+++ b/certs/gdig2_bundle.crt
+-----BEGIN CERTIFICATE-----
+MIIE0DCCA7igAwIBAgIBBzANBgkqhkiG9w0BAQsFADCBgzELMAkGA1UEBhMCVVMx
+EDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoT
+EUdvRGFkZHkuY29tLCBJbmMuMTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRp
+ZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTExMDUwMzA3MDAwMFoXDTMxMDUwMzA3
+MDAwMFowgbQxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQH
+EwpTY290dHNkYWxlMRowGAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UE
+CxMkaHR0cDovL2NlcnRzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQD
+EypHbyBEYWRkeSBTZWN1cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwggEi
+MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC54MsQ1K92vdSTYuswZLiBCGzD
+BNliF44v/z5lz4/OYuY8UhzaFkVLVat4a2ODYpDOD2lsmcgaFItMzEUz6ojcnqOv
+K/6AYZ15V8TPLvQ/MDxdR/yaFrzDN5ZBUY4RS1T4KL7QjL7wMDge87Am+GZHY23e
+cSZHjzhHU9FGHbTj3ADqRay9vHHZqm8A29vNMDp5T19MR/gd71vCxJ1gO7GyQ5HY
+pDNO6rPWJ0+tJYqlxvTV0KaudAVkV4i1RFXULSo6Pvi4vekyCgKUZMQWOlDxSq7n
+eTOvDCAHf+jfBDnCaQJsY1L6d8EbyHSHyLmTGFBUNUtpTrw700kuH9zB0lL7AgMB
+AAGjggEaMIIBFjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNV
+HQ4EFgQUQMK9J47MNIMwojPX+2yz8LQsgM4wHwYDVR0jBBgwFoAUOpqFBxBnKLbv
+9r0FQW4gwZTaD94wNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8v
+b2NzcC5nb2RhZGR5LmNvbS8wNQYDVR0fBC4wLDAqoCigJoYkaHR0cDovL2NybC5n
+b2RhZGR5LmNvbS9nZHJvb3QtZzIuY3JsMEYGA1UdIAQ/MD0wOwYEVR0gADAzMDEG
+CCsGAQUFBwIBFiVodHRwczovL2NlcnRzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkv
+MA0GCSqGSIb3DQEBCwUAA4IBAQAIfmyTEMg4uJapkEv/oV9PBO9sPpyIBslQj6Zz
+91cxG7685C/b+LrTW+C05+Z5Yg4MotdqY3MxtfWoSKQ7CC2iXZDXtHwlTxFWMMS2
+RJ17LJ3lXubvDGGqv+QqG+6EnriDfcFDzkSnE3ANkR/0yBOtg2DZ2HKocyQetawi
+DsoXiWJYRBuriSUBAA/NxBti21G00w9RKpv0vHP8ds42pM3Z2Czqrpv1KrKQ0U11
+GIo/ikGQI31bS/6kA1ibRrLDYGCD+H1QQc7CoZDDu+8CL9IVVO5EFdkKrqeKM+2x
+LXY2JtwE65/3YR8V3Idv7kaWKK2hJn0KCacuBKONvPi8BDAB
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/context.xml
+++ b/context.xml
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  Licensed to the Apache Software Foundation (ASF) under one or more
+  contributor license agreements.  See the NOTICE file distributed with
+  this work for additional information regarding copyright ownership.
+  The ASF licenses this file to You under the Apache License, Version 2.0
+  (the "License"); you may not use this file except in compliance with
+  the License.  You may obtain a copy of the License at
+      http://www.apache.org/licenses/LICENSE-2.0
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+-->
+<!-- The contents of this file will be loaded for each web application -->
+<Context>
+    <!-- Default set of monitored resources. If one of these changes, the    -->
+    <!-- web application will be reloaded.                                   -->
+    <WatchedResource>WEB-INF/web.xml</WatchedResource>
+    <WatchedResource>WEB-INF/tomcat-web.xml</WatchedResource>
+    <WatchedResource>${catalina.base}/conf/web.xml</WatchedResource>
+    <!-- Uncomment this to disable session persistence across Tomcat restarts -->
+    <!--
+    <Manager pathname="" />
+    -->
+</Context>
--- a/manager.xml
+++ b/manager.xml
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  Licensed to the Apache Software Foundation (ASF) under one or more
+  contributor license agreements.  See the NOTICE file distributed with
+  this work for additional information regarding copyright ownership.
+  The ASF licenses this file to You under the Apache License, Version 2.0
+  (the "License"); you may not use this file except in compliance with
+  the License.  You may obtain a copy of the License at
+      http://www.apache.org/licenses/LICENSE-2.0
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+-->
+<!--
+    Context configuration file for the Tomcat Manager Web App
+-->
+<Context docBase="${catalina.home}/api/webapps/manager"
+         privileged="true" antiResourceLocking="false" >
+</Context>
--- a/server.xml
+++ b/server.xml
+<?xml version="1.0" encoding="UTF-8"?>
+<Server port="8005" shutdown="SHUTDOWN">
+  <Listener className="org.apache.catalina.startup.VersionLoggerListener" />
+  <Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on" />
+  <Listener className="org.apache.catalina.core.JreMemoryLeakPreventionListener" />
+  <Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" />
+  <Listener className="org.apache.catalina.core.ThreadLocalLeakPreventionListener" />
+<GlobalNamingResources>
+     <Resource name="UserDatabase"
+          auth="Container"
+          type="org.apache.catalina.UserDatabase"
+          description="User database that can be updated and saved"
+          factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
+          pathname="conf/tomcat-users.xml"
+     />
+</GlobalNamingResources>
+<Service name="Catalina">
+<Connector
+     clientAuth="true"
+     keystorePass="zx#asqw_TST456$"
+     keystoreFile="/opt/certs/tomcat.keystore"
+     truststorePass="changeit"
+     truststoreFile="/opt/certs/truststore.jks" 
+     truststoreType="jks" 
+     connectionTimeout="50000"
+     port="8443"
+     protocol="org.apache.coyote.http11.Http11NioProtocol"
+     maxHttpHeaderSize="8129"
+     maxThreads="150"
+     SSLEnabled="true"
+     maxPostSize="524288000"
+     minSpareThreads="25"
+     maxSpareThreads="75"
+     enableLookup="false"
+     disableUploadTimeout="true"
+     acceptCount="100"
+     scheme="https"
+     secure="true"
+     sslProtocol="TLS"
+     URIEncoding="UTF-8"
+     >
+</Connector>
+    <Connector port="8009" protocol="AJP/1.3"  secretRequired="false"/>
+    <Engine name="Catalina" defaultHost="localhost">
+          <Realm className="org.apache.catalina.realm.LockOutRealm">
+          <Realm className="org.apache.catalina.realm.UserDatabaseRealm"
+               resourceName="UserDatabase"/>
+          </Realm>
+          <Host name="localhost"  appBase="webapps"
+            unpackWARs="true" autoDeploy="true">
+     <Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs"
+               prefix="localhost_access_log" suffix=".txt"
+               pattern="%h %l %u %t &quot;%r&quot; %s %b" />
+     </Host>
+    </Engine>
+  </Service>
+</Server>
--- a/setenv.sh
+++ b/setenv.sh
+JAVA_OPTS="$JAVA_OPTS -Dspring.profiles.active=ci"
--- a/web.xml
+++ b/web.xml