how to setup lucee4.5/centos7/tomcat8/jdk8/nginx/samba

Michael Heel

unread,

Mar 24, 2016, 10:24:03 AM3/24/16

to lu...@googlegroups.com

I thought it might be a good idea to post a complete install-howto for lucee4.5/centos7/tomcat8/jdk8/nginx/samba.

I hope it helps some people to get started with lucee AND maybe get a better idea how each of the components work.

At the end of this howto you will have a 2,5GB small virtual machine ready for developing.

we dont go for securtiy here its a „quick“ howto to get a clean lucee installation. lets call it a dev-machine. for security rtfm :)

1. Installing minimal CentOS 7

- Download CentOS 7 Minimal-ISO (http://isoredirect.centos.org/centos/7/isos/x86_64/CentOS-7-x86_64-Minimal-1511.iso)

- create an VM or install on a physical machine with at least 4GB RAM 1-4 cores (i took 4 cores and this must be set later in nginx.conf (worker_processes 4;)

- CentOS 7 comes with an step-by-step-installer, some notes about the installer:

a) there is only one language in the IT-business - stick to english

b) set Date/timezone correctly, enable network time

c) set your Keyboard language

d) leave the software selection untouched

e) check the partition layout as most of your harddisk will be in /home else (webroot in home would be ok too for a dev-server)

f) configure ntwork, set eth0 ON, set hostname, configure IPv4 manual with an IP, netmask gateway, dns and search domain if wanted/needed

g) begin installation and while you wait set the root user password :)

3. Installing the Software Stack (Samba, nginx, tomcat8, JDK8, Lucee)

- ssh into your new server (f.e. with winscp in combination with putty, putty can be integrated in winscp, if you are a windows guy)

- yum install -y epel-release

- yum install -y unzip samba samba-client samba-common htop nginx nano

- yum update -y

- systemctl enable nginx

- systemctl enable smb.service

- systemctl enable nmb.service

- mkdir /home/wwwroot

- rm -rf /opt/tomcat/webapps/docs

- rm -rf /opt/tomcat/webapps/examples

- rm -rf /opt/tomcat/webapps/manager

- rm -rf /opt/tomcat/webapps/host-manager

- mv /etc/samba/smb.conf /etc/samba/smb.conf.bak

- nano /etc/samba/smb.conf

paste these lines into smb.conf and change the netbios name to your hostname

[global]

workgroup = WORKGROUP

server string = Samba Server %v

netbios name = yourhostname

security = user

map to guest = bad user

dns proxy = no

#============================ Share Definitions ==============================

[wwwroot]

path = /home/wwwroot

browsable =yes

writable = yes

guest ok = yes

read only = no

- nano /etc/selinux/config

a) change: SELINUX=enforcing -> SELINUX=disabled

- download and install JDK8 u77 (http://www.oracle.com/technetwork/java/javase/downloads/jdk8-downloads-2133151.html)

for 64bit download this: Linux x64 152.76 MB jdk-8u77-linux-x64.rpm

copy it to your server or download it directly on the server into /opt or wherever

a) yum localinstall -y /opt/jdk-8u77-linux-x64.rpm

c) rm -f /opt/jdk-8u77-linux-x64.rpm

- download and install tomcat 8.0.32 (http://tomcat.apache.org/download-80.cgi)

we want the core-version with .tar.gz: http://ftp-stud.hs-esslingen.de/pub/Mirrors/ftp.apache.org/dist/tomcat/tomcat-8/v8.0.32/bin/apache-tomcat-8.0.32.tar.gz

copy it to your server or download it directly on the server into /opt or wherever

a) mkdir /opt/tomcat

b) tar xvf /opt/apache-tomcat-8.0.32.tar.gz -C /opt/tomcat --strip-components=1

c) rm -f /opt/apache-tomcat-8.0.32.tar.gz

d) nano /etc/systemd/system/tomcat.service

paste this into tomcat.service:

# Systemd unit file for tomcat

[Unit]

Description=Apache Tomcat Web Application Container

After=syslog.target network.target

[Service]

Type=forking

Environment=JAVA_HOME=/usr/java/jdk1.8.0_77

Environment=CATALINA_PID=/opt/tomcat/temp/tomcat.pid

Environment=CATALINA_HOME=/opt/tomcat

Environment=CATALINA_BASE=/opt/tomcat

ExecStart=/opt/tomcat/bin/startup.sh

ExecStop=/bin/kill -15 $MAINPID

User=root

Group=root

[Install]

WantedBy=multi-user.target

e) systemctl daemon-reload

f) systemctl enable tomcat

g) nano /opt/tomcat/conf/context.xml

<!-- (remove this line)

--> (remove this line)

h) nano /opt/tomcat/bin/setenv.sh

paste this into setenv.sh (optimized for CONTENS CMS Version 4 and JDK8) or set your own JAVA-OPTS here:

#! /bin/sh

# ==================================================================

CATALINA_HOME=/opt/tomcat

export CATALINA_OPTS="$CATALINA_OPTS -server"

export CATALINA_OPTS="$CATALINA_OPTS -Xms2048m"

export CATALINA_OPTS="$CATALINA_OPTS -Xmx2048m"

export CATALINA_OPTS="$CATALINA_OPTS -Xss256k"

export CATALINA_OPTS="$CATALINA_OPTS -XX:+UseG1GC"

export CATALINA_OPTS="$CATALINA_OPTS -XX:+ParallelRefProcEnabled"

export CATALINA_OPTS="$CATALINA_OPTS -XX:MaxGCPauseMillis=200"

export CATALINA_OPTS="$CATALINA_OPTS -XX:InitiatingHeapOccupancyPercent=70"

export CATALINA_OPTS="$CATALINA_OPTS -XX:G1ReservePercent=15"

export CATALINA_OPTS="$CATALINA_OPTS -XX:ParallelGCThreads=20"

export CATALINA_OPTS="$CATALINA_OPTS -XX:ConcGCThreads=5"

export CATALINA_OPTS="$CATALINA_OPTS -XX:+AggressiveOpts"

export CATALINA_OPTS="$CATALINA_OPTS -Djava.security.egd=file:/dev/./urandom"

export CATALINA_OPTS="$CATALINA_OPTS -javaagent:/opt/tomcat/lucee/lucee-inst.jar"

# Check for application specific parameters at startup

if [ -r "$CATALINA_BASE/bin/appenv.sh" ]; then

. "$CATALINA_BASE/bin/appenv.sh"

fi

echo "Using CATALINA_OPTS:"

for arg in $CATALINA_OPTS

do

echo ">> " $arg

done

echo ""

echo "Using JAVA_OPTS:"

for arg in $JAVA_OPTS

do

echo ">> " $arg

done

echo "_______________________________________________"

echo ""

- download and install lucee 4.5 (http://lucee.org/downloads.html)

we will use just the jars-download: http://cdn.lucee.org/lucee-4.5.2.018-jars.zip

copy it to your server or download it directly on the server into /opt or wherever

a) mkdir /opt/tomcat/lucee

b) unzip /opt/lucee-4.5.2.018-jars.zip -d /opt/tomcat/lucee

c) rm -f /opt/lucee-4.5.2.018-jars.zip

- configure tomcat (server.xml, web.xml and catalina.properties)

a) nano /opt/tomcat/conf/server.xml (change the hostname to whatever tomcat should listen to and change the docbase to your webroot)

paste these 3 lines nearly at the end before </Engine>

</Host>

b) nano /opt/tomcat/conf/web.xml

paste the following lines at line 24 (its not so important where exactly)

<servlet-name>GlobalCFMLServlet</servlet-name>

<description>CFML runtime Engine</description>

<servlet-class>lucee.loader.servlet.CFMLServlet</servlet-class>

<init-param>

<param-name>lucee-web-directory</param-name>

<param-value>/opt/tomcat/lucee-web/{web-context-label}</param-value>

<description>Lucee Web Directory</description>

</init-param>

<init-param>

<param-name>lucee-server-directory</param-name>

<param-value>/opt/tomcat/</param-value>

<description>Directory where Lucee server root is stored</description>

</init-param>

<load-on-startup>2</load-on-startup>

</servlet>

<servlet-mapping>

<servlet-name>GlobalCFMLServlet</servlet-name>

<url-pattern>*.cfm</url-pattern>

</servlet-mapping>

<servlet-mapping>

<servlet-name>GlobalCFMLServlet</servlet-name>

<url-pattern>*.cfml</url-pattern>

</servlet-mapping>

<servlet-mapping>

<servlet-name>GlobalCFMLServlet</servlet-name>

<url-pattern>*.cfc</url-pattern>

</servlet-mapping>

<description>Lucee Servlet for RESTful services</description>

<servlet-name>RESTServlet</servlet-name>

<servlet-class>lucee.loader.servlet.RestServlet</servlet-class>

<load-on-startup>4</load-on-startup>

</servlet>

<servlet-mapping>

<servlet-name>RESTServlet</servlet-name>

<url-pattern>/rest/*</url-pattern>

</servlet-mapping>

c) nano /opt/tomcat/conf/catalina.properties

add this to the common.loader= line ,"/opt/tomcat/lucee/","/opt/tomcat/lucee/*.jar"

the complete line should look like this now:

common.loader="${catalina.base}/lib","${catalina.base}/lib/*.jar","${catalina.home}/lib","${catalina.home}/lib/*.jar","/opt/tomcat/lucee/","/opt/tomcat/lucee/*.jar"

- configure nginx (nginx.conf and the yourserver.conf)

a) nano /etc/nginx/nginx.conf

just replace the content of nginx.conf with these lines

# For more information on configuration, see:

# * Official English Documentation: http://nginx.org/en/docs/

# * Official Russian Documentation: http://nginx.org/ru/docs/

user root;

worker_processes 4;

error_log /var/log/nginx/error.log;

pid /run/nginx.pid;

events {

worker_connections 1024;

multi_accept on;

use epoll;

}

http {

log_format main '$remote_addr - $remote_user [$time_local] "$request" '

'$status $body_bytes_sent "$http_referer" '

'"$http_user_agent" "$http_x_forwarded_for"';

access_log /var/log/nginx/access.log main;

sendfile on;

tcp_nopush on;

tcp_nodelay on;

keepalive_timeout 65;

types_hash_max_size 2048;

include /etc/nginx/mime.types;

default_type application/octet-stream;

# Load modular configuration files from the /etc/nginx/conf.d directory.

# See http://nginx.org/en/docs/ngx_core_module.html#include

# for more information.

include /etc/nginx/conf.d/*.conf;

}

b) nano /etc/nginx/conf.d/yourserver.conf

paste these lines into the new file and save it and please change the hostname hmkay ?

server {

listen 80;

server_name srv-lucee;

root /home/wwwroot;

autoindex on;

access_log /var/log/nginx/host.access.log main;

## Size Limits

client_body_buffer_size 128K;

client_header_buffer_size 128K;

client_max_body_size 1M;

large_client_header_buffers 1 1k;

## Timeouts

client_body_timeout 60;

client_header_timeout 60;

#expires 24h;

keepalive_timeout 60 60;

## Proxy Timeouts

proxy_connect_timeout 1200;

proxy_send_timeout 1200;

proxy_read_timeout 1200;

send_timeout 1200;

## General Options

ignore_invalid_headers on;

keepalive_requests 100;

recursive_error_pages on;

sendfile off;

server_name_in_redirect off;

server_tokens off;

## TCP options

tcp_nodelay on;

tcp_nopush on;

## Compression

gzip on;

gzip_buffers 16 8k;

gzip_comp_level 6;

gzip_http_version 1.0;

gzip_min_length 0;

gzip_types text/plain text/css image/x-icon application/x-perl application/x-httpd-cgi;

gzip_vary on;

location / {

root /home/wwwroot;

index index.cfm index.html index.htm;

autoindex on;

}

# Main Lucee proxy handler

location ~ \.(cfm|cfc)(.*)$ {

proxy_pass http://127.0.0.1:8080;

proxy_redirect off;

proxy_set_header Host $host;

proxy_set_header X-Forwarded-Host $host;

proxy_set_header X-Forwarded-Server $host;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

proxy_set_header X-Real-IP $remote_addr;

}

error_page 500 502 503 504 /50x.html;

location = /50x.html {

root html;

}

4. are you still with me ?

congrats you made it so far and you didnt scream for an installer. now you know what components are needed to run lucee and you've set it up yourself. thats a good base.

please reboot your server now.

type "reboot"

if everything was done correctly (i hope you added the hostname to your hostfile) you should now be able to login to lucee server for the first time

http://yourhostname/lucee/admin/server.cfm

http://yourhostname/lucee/admin/web.cfm

dont forget to give the lucee server and the lucee web a password.

you can also access your webroot now: \\yourhostname\wwwroot

if you run into problems please let me know.

some command you might need in the future:

service tomcat start/stop/status

service nginx start/stop/status

log-file locations:

/opt/tomcat/logs

/var/log/nginx

/opt/tomcat/lucee-server/….

/opt/tomcat/lucee-web/….

cheers

michael heel

CONTENS Software GmbH

he...@contens.de

www.contens.de

Michael Heel

unread,

Mar 24, 2016, 10:45:09 AM3/24/16

to lu...@googlegroups.com

Sorry i forgot one thing:

Please esexute those 2 command to make the samba share ( \\yourhostname\wwwroot ) writeable:

chmod -R 0755 /home/wwwroot

chown -R nobody:nobody /home/wwwroot

cheers

michael

Tim Clarke

unread,

Mar 25, 2016, 5:50:39 AM3/25/16

to Lucee

Thanks very much Michael, that's a valuable contribution :)

...

Andrew Dixon

unread,

Mar 25, 2016, 6:47:02 AM3/25/16

to lu...@googlegroups.com

Hi Michael,

Would you might adding this to the documentation:

https://github.com/lucee/lucee-docs/

Submit a pull request and I will merge it.

Kind regards,

Andrew

about.me - mso - Lucee Association Member

--
Love Lucee? Become a supporter and be part of the Lucee project today! - http://lucee.org/supporters/become-a-supporter.html
---
You received this message because you are subscribed to the Google Groups "Lucee" group.
To unsubscribe from this group and stop receiving emails from it, send an email to lucee+un...@googlegroups.com.
To post to this group, send email to lu...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/lucee/6897AF3DD48BE048BA4F8AB2B4E137EDA718B1B5%40SRV-DC1.contens.local.
For more options, visit https://groups.google.com/d/optout.

Michael H.

unread,

Mar 25, 2016, 3:44:01 PM3/25/16

to Lucee

Tim you re welcome. If you have questions or ideas on how to make it better pls let me know.

cheers michael

Michael H.

unread,

Mar 25, 2016, 3:47:06 PM3/25/16

to Lucee

Hi Andrew,

sure can do. I will format it a bit better and will upload it.

is there a demand for the VM as well ? Like a downloadable DEV-Server image ?

cheers
Micharl

Andrew Dixon

unread,

Mar 25, 2016, 5:22:34 PM3/25/16

to lu...@googlegroups.com

No idea, but never bad to share :-)

Kind regards,

Andrew

about.me - mso - Lucee Association Member

--
Love Lucee? Become a supporter and be part of the Lucee project today! - http://lucee.org/supporters/become-a-supporter.html
---
You received this message because you are subscribed to the Google Groups "Lucee" group.
To unsubscribe from this group and stop receiving emails from it, send an email to lucee+un...@googlegroups.com.
To post to this group, send email to lu...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/lucee/8105f6c2-579b-4a45-8ce9-678c6f1729dd%40googlegroups.com.

Reply all

Reply to author

Forward