Quick Guide to Secure Alibaba Cloud Server Setup with JDK, Tomcat & Docker

1. Enable Security Group

1.1 Enable Security Group

1.2 Get public IP and change password (first time requires reboot)

2. Build Environment Using Panel

2.1 Build Environment

1. BT panel: https://www.bt.cn/download/linux.html

2.2 Open ports in security group

2.3 Execute command

yum install -y wget && wget -O install.sh http://download.bt.cn/install/install_6.0.sh && sh install.sh

Answer "y" to all prompts.

3. Build Environment via Command Line

3.1 Command line operations

1. Prepare work, open ports in the Alibaba Cloud console.

2. Download software.

Xshell and Xftp installation and usage https://blog.csdn.net/qq_44895397/article/details/107677573

Download and use: https://www.yuque.com/docs/share/42e4002d-1a9c-43d0-91fa-107d07ec61ee?#

4. Install JDK, Tomcat, Docker

1. Upload previously downloaded JDK and Tomcat archives

2. Install JDK via rpm

Upload resources.

Check environment:

java -version

If a default JDK is already installed, uninstall it:

First find installed OpenJDK packages: rpm -qa | grep java Then remove packages that start with java:

yum -y remove java-1.7.0-openjdk-1.7.0.141-2.6.10.5.el7.x86_64
yum -y remove java-1.8.0-openjdk-1.8.0.131-11.b12.el7.x86_64
... (omitted) ...

3. Install uploaded JDK

# essentially unzip the JDK archive
rpm -ivh jdk-11.0.8_linux-x64_bin.rpm

After installation run java -version to verify.

4. Install Tomcat

Extract archive: tar -zxvf apache-tomcat-9.0.37.tar.gz Enter directory and start test:

cd apache-tomcat-9.0.37

5. Start Tomcat

6. Firewall information (check if ports are open)

# Check firewall status
systemctl status firewalld

# Start, restart, stop firewalld
service firewalld start
service firewalld restart
service firewalld stop

# List firewall rules
firewall-cmd --list-all    # full info
firewall-cmd --list-ports   # only ports

# Open port 80/tcp permanently
firewall-cmd --zone=public --add-port=80/tcp --permanent
systemctl restart firewalld.service

Command meanings:

--zone      # scope
--add-port=80/tcp  # add port with protocol
--permanent        # make permanent, otherwise lost after reboot

7. Install Docker via yum

Official documentation: https://docs.docker.com/engine/install/centos/

Check system version

Prepare installation environment

yum -y install gcc

yum -y install gcc-c++

Remove previous Docker versions

yum remove docker \
    docker-client \
    docker-client-latest \
    docker-common \
    docker-latest \
    docker-latest-logrotate \
    docker-logrotate \
    docker-engine

Install basic utilities

sudo yum install -y yum-utils

Configure mirror repository

# Use domestic mirror
yum-config-manager --add-repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo

Update yum cache

yum makecache fast

Install Docker CE

yum -y install docker-ce docker-ce-cli containerd.io

Start Docker

systemctl start docker
ps -ef|grep docker