Instalar Debian 9 Strech con Java 11 (OpenJDK11), Tomcat 9 Native y MariaDB 10.3

Tutorial actualizado a Java 11 (OpenJDK11)

Se ha añadido la activación de opciones de seguridad y otras dependencias básicas para el buen funcionamiento la plataforma.

1.- Instalar una copia nueva de Debian 9 NetInstall.

2.- Entrar en el terminal y hacer las siguientes configuraciones básicas.

apt-get install vim
apt-get install ssh openssh-server

vim /etc/ssh/sshd_config    # Añadir
PermitRootLogin yes

/etc/init.d/ssh restart

vim /etc/network/interfaces    # Borrar
dns-search XXX

vim /etc/resolv.conf    # Borrar
search XXX

vim /usr/share/vim/vim80/defaults.vim     # Comentar
"if has('mouse')
"  set mouse=a
"endif

vim /etc/apt/sources.list     # Borrar todo y poner
deb http://ftp.us.debian.org/debian/ stretch main contrib non-free
deb-src http://ftp.us.debian.org/debian/ stretch main contrib non-free

deb http://security.debian.org/debian-security stretch/updates main contrib non-free
deb-src http://security.debian.org/debian-security stretch/updates main contrib non-free

apt-get update
apt-get upgrade

dpkg-reconfigure dash     # Responder NO

apt-get install ntp

3.- Instalar Munin y securizar el Apache2

apt-get install apache2
apt-get install munin munin-plugins-extra
mkdir /var/www/stats
chown -R munin.munin /var/www/stats

vim /etc/munin/munin.conf     # Anadir
dbdir   /var/lib/munin
htmldir /var/www/stats
logdir /var/log/munin
rundir  /var/run/munin
tmpldir /etc/munin/templates

vim /etc/apache2/conf-enabled/munin.conf    # Borrar
Alias /munin /var/cache/munin/www

# Habilitar plugins deseados
ln -s /usr/share/munin/plugins/mysql_threads /etc/munin/plugins/
ln -s /usr/share/munin/plugins/mysql_slowqueries /etc/munin/plugins/
ln -s /usr/share/munin/plugins/mysql_queries /etc/munin/plugins/
ln -s /usr/share/munin/plugins/mysql_bytes /etc/munin/plugins/
ln -s /usr/share/munin/plugins/cpuspeed /etc/munin/plugins/
ln -s /usr/share/munin/plugins/acpi /etc/munin/plugins/

# Deshabilitar plugins no deseados
cd /etc/munin/plugins/
rm tomcat_*
rm nfs*
rm ntp_*
rm hddtemp_smartctl
rm i*
rm uptime
rm users
rm netstat
rm fw_packets
rm mysql_bytes
rm munin_stats

# Securizar el apache2
vim /etc/apache2/apache2.conf      # Modificar
<Directory /var/www/>
        Options -Indexes
        Options +FollowSymLinks
        AllowOverride All
        Require all granted
</Directory>

vim /etc/apache2/conf-enabled/security.conf     # Modificar
ServerTokens Prod
ServerSignature Off

vim /etc/apache2/conf-enabled/etag.conf    # Añadir
FileETag none

rm /etc/apache2/conf-enabled/apache2-doc.conf
rm -rf /var/www/html

vim /etc/apache2/sites-enabled/000-default.conf    # Modificar
DocumentRoot /var/www

# Arrancar
/etc/init.d/apache2 restart
/etc/init.d/munin restart
/etc/init.d/munin-node restart
su munin munin-cron

4.- Instalar Java 8 de Oracle

cd /tmp
apt-get install curl

curl -O https://download.java.net/java/GA/jdk11/9/GPL/openjdk-11.0.2_linux-x64_bin.tar.gz
tar zxvf openjdk-11.0.2_linux-x64_bin.tar.gz

mkdir /opt/jre_server
mv jdk-11.0.2 /opt/jre_server/
rm openjdk-11.0.2_linux-x64_bin.tar.gz

update-alternatives --install /usr/bin/java java /opt/jre_server/jdk-11.0.2/bin/java 900
update-alternatives --install /usr/bin/javac javac /opt/jre_server/jdk-11.0.2/bin/javac 900

java -version

# opcional, si se desea cambiar manualmente la versión de java.
update-alternatives --config java

5.- Instalar Tomcat 9 Native.

cd /tmp/
wget http://apache.uvigo.es/tomcat/tomcat-9/v9.0.14/bin/apache-tomcat-9.0.14.tar.gz
tar -xvf apache-tomcat-9.0.14.tar.gz
mv apache-tomcat-9.0.14 /usr/share/tomcat9

# Habilitar el APR de forma nativa
export JAVA_HOME=/opt/jre_server/jdk-11.0.2
apt-get install git libapr1 libaprutil1 libapr1-dev libssl-dev make build-essential

wget http://apache.rediris.es/tomcat/tomcat-connectors/native/1.2.21/source/tomcat-native-1.2.21-src.tar.gz
tar -xvf tomcat-native-1.2.21-src.tar.gz
cd tomcat-native-1.2.21-src/native/

./configure --with-apr=/usr/bin/apr-1-config
make
make install
cp -R /usr/local/apr/lib/* /usr/lib/
cd /usr/share/tomcat9/

# Configurar el catalina.sh y el server.xml apropiadamente según los requisitos de la plataforma.

6.- Instalar MariaDB 10.3

apt-get install software-properties-common dirmngr
apt-key adv --recv-keys --keyserver keyserver.ubuntu.com 0xF1656F24C74CD1D8
add-apt-repository 'deb [arch=amd64,i386,ppc64el] http://tedeco.fi.upm.es/mirror/mariadb/repo/10.3/debian stretch main'

apt-get update
apt-get install mariadb-server

mysql -p     # Introducir

CREATE USER 'root'@'%' IDENTIFIED BY 'XXX';
GRANT ALL PRIVILEGES ON * . * TO 'root'@'%'WITH GRANT OPTION;
FLUSH PRIVILEGES;
EXIT;

vim /etc/mysql/my.cnf    # Comentar
bind-address            = 127.0.0.1

/etc/init.d/mysql restart

mysql_secure_installation