How to Install Apache Tomcat 8.5 on CentOS 7.3

Apache Tomcat is an open source Java Servlet implementation developed by the Apache Software Foundation. Beside Java Servlets, Tomcat implements several other Java server technologies including  JavaServer Pages (JSP), Java Expression Language, and Java WebSocket. Tomcat provides an HTTP Web Server for Java applications with support for HTTP/2, OpenSSL for JSSE and TLS virtual hosting.

In this tutorial, I will show you how to install and configure Apache Tomcat 8.5 on a CentOS 7 server and how to install and configure Java on a CentOS server which is one of the prerequisites for Tomcat.


  • Server with CentOS 7 - 64bit
  • 2 GB or more RAM (Recommended)
  • Root Privileges on the server

Step 1 - Install Java (JRE and JDK)

In this step, we will install the Java JRE and JDK from the CentOS repository. We will install Java 1.8.11 on the server with the yum command.

Run this command to install Java JRE and JDK from CentOS repository with yum:

yum -y install java-1.8.0-openjdk.x86_64 java-1.8.0-openjdk-devel.x86_64

It will take some time, wait until the installation finished.

Then you should check the Java version with the command below:

java -version

You should see results similar to the ones below:

openjdk version "1.8.0_111"
OpenJDK Runtime Environment (build 1.8.0_111-b15)
OpenJDK 64-Bit Server VM (build 25.111-b15, mixed mode)

Check the Java version

Step 2 - Configure the Java Home Environment

In the first step, we've installed Java. Now we need to configure the JAVA_HOME environment variable on the CentOS server so that Java applications can find the right Java version and Tomcat requires the JAVA_HOME environment to be setup properly, so we need to configure it.

Before we configure the JAVA_HOME environment, we need to know where the Java directory is. Check the Java directory with the command below:

sudo update-alternatives --config java

Java directory = "/usr/lib/jvm/java-1.8.0-openjdk-"

Then edit the environment file with vim:

vim /etc/environment

Add the JAVA_HOME environment variable by adding the configuration below:


Save the /etc/environment file and exit vim.

Next, edit the .bash_profile file and add the JAVA_HOME variable as well:

vim ~/.bash_profile

At the end of the file, paste the configuration below:

export JAVA_HOME=/usr/lib/jvm/java-1.8.0-openjdk-
export PATH=$JAVA_HOME/bin:$PATH

Save the file, then reload the bash_profile file.

source ~/.bash_profile

Make sure there is no error, Finally check the JAVA_HOME environment variable:


You will see Java path directory.

Setup the Java home environment variable

Step 3 - Install Apache Tomcat 8.5

In this step, we will install Apache Tomcat under the user tomcat (which we have to create first).

Create a user and group named tomcat:

groupadd tomcat
useradd -s /bin/false -g tomcat -d /opt/tomcat tomcat

-s /bin/false = disable shell access
-g tomcat = assign new user to the group tomcat
-d /opt/tomcat = define the home directory for the user

Next, go to the /opt directory and download tomcat with the wget command:

cd /opt/

Extract Tomcat and move all the files and directories that are in the 'apache-tomcat-8.5.6' directory to the 'tomcat' directory.

tar -xzvf apache-tomcat-8.5.6.tar.gz
mv apache-tomcat-8.5.6/* tomcat/

Now change the owner of the tomcat directory to the tomcat user and group.

chown -hR tomcat:tomcat tomcat

Step 4 - Test Apache Tomcat

In step 3, we installed and configure tomcat. In this step, we just want to run a short test to make sure there are no errors.

Go to the tomcat/bin directory and run the command '' to test Apache Tomcat:

cd /opt/tomcat/bin/

Make sure the result is 'Tomcat started'.

Tomcat is using port 8080 now, check the open port on the server with the netstat command.

netstat -plntu

Check that Tomcat has been started with netstat

Or visit the server IP address with port 8080 - in my case - with a web browser. You will see the Apache Tomcat default page.

Test Apache Tomcat with a Browser

Next, stop Apache Tomcat and because we will run it Tomcat with a systemd service file in the final configuration. Make sure the tomcat directory is owned by the tomcat user and group.

cd /opt/tomcat/bin/
chown -hR tomcat:tomcat /opt/tomcat/

Shutdown Apache Tomcat server test.

Step 5 - Setup Apache Tomcat Service

In this tutorial, we will run Apache Tomcat as tomcat user with a systemd service file for easy starting and stopping of the service. So the next step is to create a 'tomcat.service' file.

Go to the systemd system directory and create a new file 'tomcat.service'.

cd /etc/systemd/system/
vim tomcat.service

Paste the configuration below:

Description=Apache Tomcat 8 Servlet Container



Save the file and exit vim.

Reload the systemd daemon, then start and add the Apache Tomcat service at boot time.

systemctl daemon-reload
systemctl start tomcat
systemctl enable tomcat

Now check that tomcat is running by checking the open port 8080.

netstat -plntu

And check the tomcat status, make sure the service is active.

systemctl status tomcat

Check Tomcat service started with Systemd

Step 6 - Configure Apache Tomcat Users

In this step, we will configure the users for Apache Tomcat. Tomcat is installed, and it's running by default on port 8080, we can access it with a web browser, but we can not access the site-manager dashboard yet. To enable and configure Tomcat users, edit the file 'tomcat-users.xml'.

Go to the tomcat configuration directory and edit the tomcat-users.xml file with vim.

cd /opt/tomcat/conf/
vim tomcat-users.xml

Create a new line under line 43 and paste configuration below:

<role rolename="manager-gui"/>
<user username="admin" password="password" roles="manager-gui,admin-gui"/>

Save the file and exit vim.

Next, go to the manager directory and edit the context.xml file.

cd /opt/tomcat/webapps/manager/META-INF/
vim context.xml

Comment out line 19 and 20.

<Context antiResourceLocking="false" privileged="true" >
<!--  <Valve className="org.apache.catalina.valves.RemoteAddrValve"
         allow="127\.\d+\.\d+\.\d+|::1|0:0:0:0:0:0:0:1" /> -->

Save the file and exit vim.

Go to the host-manager directory and edit the context.xml file again.

cd /opt/tomcat/webapps/host-manager/META-INF/
vim context.xml

Comment out again line 19 and 20.

<Context antiResourceLocking="false" privileged="true" >
<!--  <Valve className="org.apache.catalina.valves.RemoteAddrValve"
         allow="127\.\d+\.\d+\.\d+|::1|0:0:0:0:0:0:0:1" /> -->

Save the file and exit, then restart tomcat.

systemctl restart tomcat

Step 7 - Configure Firewalld

In CentOS 7, we have a default firewall tool named firewalld. It replaces the iptables interface and connects to the Netfilter kernel code.

In this step, we will start the firewalld service and open port 8080 so we can access the Apache Tomcat server from the outside of the network.

Start the firewalld service and add it to start at boot time with the systemctl command.

systemctl start firewalld
systemctl enable firewalld

Next, add the apache tomcat port 8080 to the firewall with the firewall-cmd command, and reload the firewalld service.

firewall-cmd --zone=public --permanent --add-port=8080/tcp
firewall-cmd --reload

Check that all the services are available in the firewall and check that the Apache Tomcat port 8080 is open.

firewall-cmd --list-ports
firewall-cmd --list-services

Apache Tomcat port 8080 is accessible from outside of the network, and the ssh port is open by default as well.

Start Apache Tomcat Service with Systemd

Step 8 - Testing

Open your web browser and type in your server IP with port 8080. You will see the Apache Tomcat default page.

Apache Tomcat Home page

Go to the manager dashboard with URL below:

Type in the admin username 'admin' with password 'mypassword', the configuration that we made on step 5.

Apache Tomcat Manager Dashboard

Now go to the host-manager dashboard with URL below:

Enter the admin user and password that you set in step 5, you will see the Tomcat Virtual host Manager.

Apache Tomcat Virtual Host Manager Dashboard

Apache Tomcat 8.5 has been installed on a CentOS 7 Server.

Share this page:

12 Comment(s)

Add comment

Please register in our forum first to comment.


By: Konedala Rambabu

Very good article.

One suggestion to add to the tomcat-users.xml

<user username="admin" password="Password" roles="admin,manager,admin-gui,admin-script,manager-gui,manager-script,manager-jmx,manager-status"/>

Thank you for the work!

By: engineero


When I issue a netstat -plntu command, I don't get a tcp6 process that is listening on port 8080. 

How can i fix this?

By: Vivek

May be netstat is not installed on your CentOS

Just run this command

[[email protected] ~]# yum install net-tools

Once installed you should get out with netstat -plntu command

By: Oswaldo Castro

Great article Arul... Straight to the point. Thank you very much!!

By: Rama krishnan

Thank you

By: Bruno

Your article helped me a lot. Thank you!

By: Gerry

most browsers expect to use port 80, not 8080

By: Mikey

Dam I was hoping this would work but I am not seeing the netstat showing tcp6 8080. Darn!

By: valney

Hello everyone, I've been with this problem for a while, I could not solve it, I did not have much knowledge in this area, I searched the internet and found your artugo, and I wondered if I followed this tutorial and I can solve my problem. Thank you for providing some of your knowledge.Complete build logPicked up _JAVA_OPTIONS: -Xmx384m -Xms384m -XX:MaxPermSize=384m OpenJDK 64-Bit Server VM warning: ignoring option MaxPermSize=384m; support was removed in 8.0 FAILURE: Build failed with an exception. * What went wrong: /usr/lib/jvm/java-1.8.0-openjdk- (Too many open files) > /usr/lib/jvm/java-1.8.0-openjdk- (Too many open files) * Try: Run with --stacktrace option to get the stack trace. Run with --info or --debug option to get more log output. * Get more help at BUILD FAILED in 1s

By: Jérôme

You save my life ! Thank you

By: Goran


Firewall seems to be on by default in CentOS

sudo firewall-cmd --permanent --add-port=8080/tcp

sudo firewall-cmd --reload

By: Goran

I used oracle Java

Using sudo update-alternatives --config java and setting the path as it says didn't work. It caused the error below, and so I had to delete the last part from /usr/java/jdk1.8.0_202-amd64/jre/bin/java to /usr/java/jdk1.8.0_202-amd64 in the .bash_profile and then Tomcat started up.


Using JRE_HOME:        /usr/java/jdk1.8.0_202-amd64/jre/bin/java

Using CLASSPATH:       /opt/tomcat/bin/bootstrap.jar:/opt/tomcat/bin/tomcat-juli.jar


/opt/tomcat/bin/ line 558: /usr/java/jdk1.8.0_202-amd64/jre/bin/java/bin/java: Not a directory