How To Install Apache Tomcat 8 on Ubuntu 16.04

How To Install Apache Tomcat 8 on Ubuntu 16.04
Not using Ubuntu 16.04?Choose a different version or distribution.
Ubuntu 16.04


Apache Tomcat is a web server and servlet container that is used to serve Java applications. Tomcat is an open source implementation of the Java Servlet and JavaServer Pages technologies, released by the Apache Software Foundation. This tutorial covers the basic installation and some configuration of the latest release of Tomcat 8 on your Ubuntu 16.04 server.


Before you begin with this guide, you should have a non-root user with sudo privileges set up on your server. You can learn how to do this by completing our Ubuntu 16.04 initial server setup guide.

Step 1: Install Java

Tomcat requires Java to be installed on the server so that any Java web application code can be executed. We can satisfy that requirement by installing OpenJDK with apt-get.

First, update your apt-get package index:

  1. sudo apt-get update

Then install the Java Development Kit package with apt-get:

  1. sudo apt-get install default-jdk

Now that Java is installed, we can create a tomcat user, which will be used to run the Tomcat service.

Step 2: Create Tomcat User

For security purposes, Tomcat should be run as an unprivileged user (i.e. not root). We will create a new user and group that will run the Tomcat service.

First, create a new tomcat group:

  1. sudo groupadd tomcat

Next, create a new tomcat user. We’ll make this user a member of the tomcat group, with a home directory of /opt/tomcat (where we will install Tomcat), and with a shell of /bin/false (so nobody can log into the account):

  1. sudo useradd -s /bin/false -g tomcat -d /opt/tomcat tomcat

Now that our tomcat user is set up, let’s download and install Tomcat.

Step 3: Install Tomcat

The best way to install Tomcat 8 is to download the latest binary release then configure it manually.

Find the latest version of Tomcat 8 at the Tomcat 8 Downloads page. At the time of writing, the latest version is 8.5.5, but you should use a later stable version if it is available. Under the Binary Distributions section, then under the Core list, copy the link to the “tar.gz”.

Next, change to the /tmp directory on your server. This is a good directory to download ephemeral items, like the Tomcat tarball, which we won’t need after extracting the Tomcat contents:

  1. cd /tmp

Use curl to download the link that you copied from the Tomcat website:

  1. curl -O http://apache.mirrors.ionfish.org/tomcat/tomcat-8/v8.5.5/bin/apache-tomcat-8.5.5.tar.gz

We will install Tomcat to the /opt/tomcat directory. Create the directory, then extract the archive to it with these commands:

  1. sudo mkdir /opt/tomcat
  2. sudo tar xzvf apache-tomcat-8*tar.gz -C /opt/tomcat --strip-components=1

Next, we can set up the proper user permissions for our installation.

Step 4: Update Permissions

The tomcat user that we set up needs to have access to the Tomcat installation. We’ll set that up now.

Change to the directory where we unpacked the Tomcat installation:

  1. cd /opt/tomcat

Give the tomcat group ownership over the entire installation directory:

  1. sudo chgrp -R tomcat /opt/tomcat

Next, give the tomcat group read access to the conf directory and all of its contents, and execute access to the directory itself:

  1. sudo chmod -R g+r conf
  2. sudo chmod g+x conf

Make the tomcat user the owner of the webapps, work, temp, and logs directories:

  1. sudo chown -R tomcat webapps/ work/ temp/ logs/

Now that the proper permissions are set up, we can create a systemd service file to manage the Tomcat process.

Step 5: Create a systemd Service File

We want to be able to run Tomcat as a service, so we will set up systemd service file.

Tomcat needs to know where Java is installed. This path is commonly referred to as “JAVA_HOME”. The easiest way to look up that location is by running this command:

  1. sudo update-java-alternatives -l
java-1.8.0-openjdk-amd64 1081 /usr/lib/jvm/java-1.8.0-openjdk-amd64

The correct JAVA_HOME variable can be constructed by taking the output from the last column (highlighted in red) and appending /jre to the end. Given the example above, the correct JAVA_HOME for this server would be:


Your JAVA_HOME may be different.

With this piece of information, we can create the systemd service file. Open a file called tomcat.service in the /etc/systemd/system directory by typing:

  1. sudo nano /etc/systemd/system/tomcat.service

Paste the following contents into your service file. Modify the value of JAVA_HOME if necessary to match the value you found on your system. You may also want to modify the memory allocation settings that are specified in CATALINA_OPTS:

Description=Apache Tomcat Web Application Container


Environment='CATALINA_OPTS=-Xms512M -Xmx1024M -server -XX:+UseParallelGC'
Environment='JAVA_OPTS=-Djava.awt.headless=true -Djava.security.egd=file:/dev/./urandom'




When you are finished, save and close the file.

Next, reload the systemd daemon so that it knows about our service file:

  1. sudo systemctl daemon-reload

Start the Tomcat service by typing:

  1. sudo systemctl start tomcat

Double check that it started without errors by typing:

  1. sudo systemctl status tomcat

Step 6: Adjust the Firewall and Test the Tomcat Server

Now that the Tomcat service is started, we can test to make sure the default page is available.

Before we do that, we need to adjust the firewall to allow our requests to get to the service. If you followed the prerequisites, you will have a ufw firewall enabled currently.

Tomcat uses port 8080 to accept conventional requests. Allow traffic to that port by typing:

  1. sudo ufw allow 8080

With the firewall modified, you can access the default splash page by going to your domain or IP address followed by :8080 in a web browser:

Open in web browser

You will see the default Tomcat splash page, in addition to other information. However, if you click the links for the Manager App, for instance, you will be denied access. We can configure that access next.

If you were able to successfully accessed Tomcat, now is a good time to enable the service file so that Tomcat automatically starts at boot:

  1. sudo systemctl enable tomcat

Step 7: Configure Tomcat Web Management Interface

In order to use the manager web app that comes with Tomcat, we must add a login to our Tomcat server. We will do this by editing the tomcat-users.xml file:

  1. sudo nano /opt/tomcat/conf/tomcat-users.xml

You will want to add a user who can access the manager-gui and admin-gui (web apps that come with Tomcat). You can do so by defining a user, similar to the example below, between the tomcat-users tags. Be sure to change the username and password to something secure:

tomcat-users.xml — Admin User
<tomcat-users . . .>
    <user username="admin" password="password" roles="manager-gui,admin-gui"/>

Save and close the file when you are finished.

By default, newer versions of Tomcat restrict access to the Manager and Host Manager apps to connections coming from the server itself. Since we are installing on a remote machine, you will probably want to remove or alter this restriction. To change the IP address restrictions on these, open the appropriate context.xml files.

For the Manager app, type:

  1. sudo nano /opt/tomcat/webapps/manager/META-INF/context.xml

For the Host Manager app, type:

  1. sudo nano /opt/tomcat/webapps/host-manager/META-INF/context.xml

Inside, comment out the IP address restriction to allow connections from anywhere. Alternatively, if you would like to allow access only to connections coming from your own IP address, you can add your public IP address to the list:

context.xml files for Tomcat webapps
<Context antiResourceLocking="false" privileged="true" >
  <!--<Valve className="org.apache.catalina.valves.RemoteAddrValve"
         allow="127\.\d+\.\d+\.\d+|::1|0:0:0:0:0:0:0:1" />-->

Save and close the files when you are finished.

To put our changes into effect, restart the Tomcat service:

  1. sudo systemctl restart tomcat

Step 8: Access the Web Interface

Now that we have create a user, we can access the web management interface again in a web browser. Once again, you can get to the correct interface by entering your server’s domain name or IP address followed on port 8080 in your browser:

Open in web browser

The page you see should be the same one you were given when you tested earlier:

Tomcat root

Let’s take a look at the Manager App, accessible via the link or http://server_domain_or_IP:8080/manager/html. You will need to enter the account credentials that you added to the tomcat-users.xml file. Afterwards, you should see a page that looks like this:

Tomcat Web Application Manager

The Web Application Manager is used to manage your Java applications. You can Start, Stop, Reload, Deploy, and Undeploy here. You can also run some diagnostics on your apps (i.e. find memory leaks). Lastly, information about your server is available at the very bottom of this page.

Now let’s take a look at the Host Manager, accessible via the link or http://server_domain_or_IP:8080/host-manager/html/:

Tomcat Virtual Host Manager

From the Virtual Host Manager page, you can add virtual hosts to serve your applications from.


Your installation of Tomcat is complete! Your are now free to deploy your own Java web applications!

Currently, your Tomcat installation is functional, but entirely unencrypted. This means that all data, including sensitive items like passwords, are sent in plain text that can be intercepted and read by other parties on the internet. In order to prevent this from happening, it is strongly recommended that you encrypt your connections with SSL. You can find out how to encrypt your connections to Tomcat by following this guide.

Thanks for learning with the DigitalOcean Community. Check out our offerings for compute, storage, networking, and managed databases.

Learn more about us

About the authors

Still looking for an answer?

Ask a questionSearch for more help

Was this helpful?

This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

If you are having problems getting tomcat 8 to start and getting this error

● tomcat.service - Apache Tomcat Web Application Container Loaded: loaded (/etc/systemd/system/tomcat.service; enabled; vendor preset: enabled) Active: activating (auto-restart) (Result: exit-code) since Sat 2016-07-30 12:15:27 EDT; 1s ago Process: 13807 ExecStart=/opt/tomcat/bin/startup.sh (code=exited, status=203/EXEC) Jul 30 12:15:27 xxxxxxx systemd[1]: Failed to start Apache Tomcat Web Application Container. Jul 30 12:15:27 xxxxxxx systemd[1]: tomcat.service: Unit entered failed state. Jul 30 12:15:27 xxxxxxxxx systemd[1]: tomcat.service: Failed with result ‘exit-code’.

then you might want to give tomcat user ownership of the whole tomcat directory:

cd /opt && sudo chown -R tomcat tomcat/

Worked for me.

See http://unix.stackexchange.com/questions/235891/tomcat-8-will-not-start-after-initial-install

I’ve lost 1 hour with following error : ExecStop=/opt/tomcat/bin/shutdown.sh (code=exited, status=1/FAILURE)

SOLUTION : We have to edit CATALINA_OPTS memory parameters in the tomcat.service file according to our droplet ram size. I use basic droplet. When I changed the values to -Xms128M -Xmx512M everything works fine.

To ensure the Tomcat service re-starting at boot, you have to enable it:

$ sudo systemctl enable tomcat

This was a great guide! Thank you so much!! I found a problem when starting Tomcat, similar to

tomcat.service - Apache Tomcat Web Application Container Loaded: loaded (/etc/systemd/system/tomcat.service; enabled; vendor preset: enabled) Active: activating (auto-restart) (Result: exit-code) since Sat 2016-07-30 12:15:27 EDT; 1s ago Process: 13807 ExecStart=/opt/tomcat/bin/startup.sh (code=exited, status=203/EXEC) Jul 30 12:15:27 xxxxxxx systemd[1]: Failed to start Apache Tomcat Web Application Container. Jul 30 12:15:27 xxxxxxx systemd[1]: tomcat.service: Unit entered failed state. Jul 30 12:15:27 xxxxxxxxx systemd[1]: tomcat.service: Failed with result 'exit-code'.

and what it solved it for me was to remove “/jre” from the home JAVA_HOME path instead of


I did


Thanks again for this guide!

I have followed these instructions to a T, and have also read through all comments and a couple stackexchange ‘fixes.’ my systemd file works fine, tomcat starts and is accessible at my droplets ip:8080. BUT, when I check sudo systemctl status tomcat, i get the following:

● tomcat.service - Apache Tomcat Web Application Container
   Loaded: loaded (/etc/systemd/system/tomcat.service; enabled; vendor preset: enabled)
   Active: activating (auto-restart) (Result: exit-code) since Wed 2016-10-05 15:34:36 UTC; 3s ago
  **Process: 23323 ExecStop=/opt/tomcat/bin/shutdown.sh (code=exited, status=1/FAILURE)**
  Process: 23308 ExecStart=/opt/tomcat/bin/startup.sh (code=exited, status=0/SUCCESS)
 Main PID: 23320 (code=exited, status=1/FAILURE)

Oct 05 15:34:36 sys-name systemd[1]: tomcat.service: Control process exited, code=exited status=1
Oct 05 15:34:36 sys-name systemd[1]: tomcat.service: Unit entered failed state.
**Oct 05 15:34:36 sys-name systemd[1]: tomcat.service: Failed with result 'exit-code'.**

This causes tomcat to stop. After rebooting the server everything works again. I’ve fixed permissions on shutdown.sh and all files in bin using:

chgrp -R tomcat bin
chmod g+rwx bin
chmod g+r bin/*

Any ideas whats wrong here?

I get error in the step when we start the tomcat service sudo systemctl start tomcat On checking the status by this command - sudo systemctl status tomcat. I see following error - Jun 27 16:09:52 maddy-VirtualBox systemd[6182]: tomcat.service: Failed at step EXEC spawning /opt/tomcat/bin/startup.sh: Permission denied

Although I am logged in as user (which has sudo privileges) still I am getting Permission denied error. I have also changed the ownership of /opt/tomcat/bin directory to the user from which I am firing those commands, still the error is coming.

Can anybody help me in this problem?


For me (in ubuntu 14 (i know this is for ubuntu 16)), in the step 4 : sudo chmod g+r conf/* ==> does not work “No file or directory”.

Is it normal ?

Thanks for the step by step tomcat installation procedure.

That’s like a 100% working documentation. Not even a single failure. Khudos !!

Finaly, with your tutorial, the apache tomcat 8.5.55 show me the interface, great. But, I’ve instaled on my computer, Apache2 and Apache Tomcat, and when I want to see my other site in apache2, always appears the tomcat interface. I already tried: http://mysite.com, http://localhost:80, etc. Maybe the step 7 for the tutorial I wrong, I put my IP public, thanks!

I have followed the steps for Ubuntu 20.04LTS. It works like a charm. :) Awesome article.

Try DigitalOcean for free

Click below to sign up and get $200 of credit to try our products over 60 days!

Sign up

Join the Tech Talk
Success! Thank you! Please check your email for further details.

Please complete your information!

Featured on Community

Get our biweekly newsletter

Sign up for Infrastructure as a Newsletter.

Hollie's Hub for Good

Working on improving health and education, reducing inequality, and spurring economic growth? We'd like to help.

Become a contributor

Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.

Welcome to the developer cloud

DigitalOcean makes it simple to launch in the cloud and scale up as you grow — whether you're running one virtual machine or ten thousand.

Learn more
DigitalOcean Cloud Control Panel