Adoptable Cookbooks List

Looking for a cookbook to adopt? You can now see a list of cookbooks available for adoption!
List of Adoptable Cookbooks

Supermarket Belongs to the Community

Supermarket belongs to the community. While Chef has the responsibility to keep it running and be stewards of its functionality, what it does and how it works is driven by the community. The chef/supermarket repository will continue to be where development of the Supermarket application takes place. Come be part of shaping the direction of Supermarket by opening issues and pull requests or by joining us on the Chef Mailing List.

Select Badges

Select Supported Platforms

Select Status


cerner_tomcat (15) Versions 3.5.0

Installs/Configures tomcat

cookbook 'cerner_tomcat', '= 3.5.0', :supermarket
cookbook 'cerner_tomcat', '= 3.5.0'
knife supermarket install cerner_tomcat
knife supermarket download cerner_tomcat
Quality 67%

Cerner Tomcat Cookbook

Build Status
Cookbook Version

A Chef cookbook to install Apache Tomcat.

View the [Change Log]( to see what has changed.



  • Ubuntu
  • CentOS


  • Chef 12+


  • java
  • ulimit
  • logrotate
  • poise
  • poise-archive


The cookbook provides a resource for you to use to install and configure tomcat.

The cerner_tomcat resource has support for remote_file, cookbook_file, and template as sub-resources of the cerner_tomcat resource. When using these sub-resources, the parent cerner_tomcat resource's path, user, group and sensitive properties are provided for free. These sub-resources can also be called from outside the cerner_tomcat block, if desired, by prepending cerner_tomcat_ to the resource call and provided a parent property.

cerner_tomcat 'my_tomcat' do
# resource config

cerner_tomcat_remote_file do
parent 'my_tomcat'
source '...'

cerner_tomcat delays restart, when necessary, for the end of the main converge. This is in order to avoid restarting the service multiple times during a chef-client run. If any service dependencies are updated and require a service restart, this can be done by notifying the resource with a restart action.

cerner_tomcat 'my_tomcat' do
# resource config

dependent_resource 'dep' do
# resource config
notifies :restart, 'cerner_tomcat[my_tomcat]'


A resource for installing and configuring tomcat.

Actions: :enable, :disable, :start, :stop, :restart, :reload (default :enable)

* instance_name: The name of the tomcat instance. (default = name of resource)
* user: The user that will own and run the tomcat process (default = tomcat)
* group: The group the tomcat user will be part of (default = tomcat)
* base_dir: The path to the directory where the tomcat instance will be contained (default = /opt/tomcat)
* log_dir: The path to the directory where the tomcat logs will be (default = /var/log/tomcat)
* log_rotate_options: A hash or ruby block of options to configure log rotate. These will be merged with and override the defaults provided (view libraries/cerner_tomcat.rb for defaults)
* version: The version of tomcat to install. This effectively builds the tomcat_url from a known URL ( with the given version (default=8.0.21)
* tomcat_url: The URL to the tomcat binary used to install tomcat. This will override the url provided by version. NOTE: version needs to still be up to date in order to install tomcat properly
* shutdown_timeout: The timeout used when trying to shutdown the tomcat service (default = 60). If the timeout is reached, diagnostics are captured about the instance
and the a force shutdown is applied.
* java_settings: A Hash of java settings to be applied to the tomcat process (default = {})
* env_vars: A Hash of environment variables to be available when starting tomcat (default = {})
* init_info: A Hash or ruby block of options to configure the init script. These will be merged with and override the defaults provided (view libraries/cerner_tomcat.rb for defaults)
* install_java: A boolean that indicates if we should try to install java (default=true)
* limits: A Hash or ruby block of limits applied to the owner user of the tomcat process (default={ 'open_files' => 32_768, 'max_processes' => 1024 })
* create_user: A boolean that indicates if the service user should be created (default=true)
* sensitive: A boolean used to ensure sensitive resource data is not logged by the chef-client. Remote_file, cookbook_file, and template sub-resources can be overriden (default=true)
* service_manager: The service management framework to use. Supported frameworks include :sysvinit and :upstart. If using :upstart then init_info, shutdown_timeout, and any provided health_checks will be ignored (default=:sysvinit)
* download_dir: The path to the directory where the tomcat package will be download. user/group should have permission to read (default = /var/cerner_tomcat)

cerner_tomcat "my_tomcat" do
user "my_user"
group "my_group"
base_dir "/opt/my_dir"
log_dir "/var/log/my_dir"
log_rotate_options do
frequency: 'daily'
size: '10M'
maxsize: '100M'
version "7.0.49"
shutdown_timeout 120
java_settings("-Xms" => "512m",
"-Xmx" => "512m",
"-XX:PermSize=" => "384m",
"-XX:MaxPermSize=" => "384m"
"-XX:+UseParNewGC" => "")
env_vars("MY_VAR" => "MY_VALUE")
init_info('Default-Start' => '1 2 3 4 5')
install_java false
'open_files' => 32_768,
'max_processes' => 1024

Sub-Resource Parameters:


A health check to be run when starting the tomcat service which uses HTTP to hit a web app's
health resource to verify it started correctly and is working. The name of the resource
should be the URL to your web app's health resource.


  • http_method: The HTTP method to use when running the health check (default=GET)
  • backoff: An array that indicates how back off should be handled, including the number of times and how long to wait before trying again (default=[0, 5, 10, 30, 30, 60])
  • time_bound: The amount of time to wait before timing out a request (default=3)
  • args: Additional command line arguments to pass into cURL
  • redirects_healthy: Count a redirect response (300-399) as healthy

``` ruby
cerner_tomcat "my_tomcat" do
# Uses defaults
health_check "http://localhost:8080/myApp/health"

health_check "http://localhost:8080/myApp/health" do
http_method 'POST'
backoff [0, 1, 2, 3]
time_bound 5


A web application to be included in the tomcat installation. The name of the sub-resource should
be the context root to be used for the application. This sub-resource also accepts cookbook_file,
remote_file, and template sub-resources just like those listed above.

* source: The URL to the war file of the application (required)
* checksum: The SHA256 checksum of the war file of the application (optional)

``` ruby
cerner_tomcat "my_tomcat" do
web_app "myApp" do
source ""
checksum "feccf30cad8aa5aea7a4e661ca9c32bab44d3df8ef5d97bd9c7eacf5c841bb17"

cookbook_file "WEB-INF/classes/" do
  source ""

remote_file "WEB-INF/lib/mysql.jar" do
  source ""

template "WEB-INF/classes/" do
  source ""



The cookbook additionally configures a diagnostic command option as part of the sysvinit installation of the service. This command
captures various metrics of the JVM and bundles it in a tar.gz within a temp directory for later evaluation. Diagnostics which are
included in this bundle:

  • JVM performance counters: Series of stats on the JVM, which are a lot of simple facts of the run-time at a low cost of acquiring (filename: <service_name>_perfcount.log).
  • JVM thread dump: Helpful to identify non-daemon threads and JVM information about each thread with their native thread ID (filename: <service_name>_thread_dump.log).
  • Native thread logs: Helpful to correlate CPU utilization to native threads which are tied to in the JVM thread dump with the native thread ID (nid). These are samplings from top which include native thread utilization (filename: <service_name>_native_thread.log).
  • JVM GC class histogram: Helpful if JVM seems hung, and identified GC threads are utilizing high CPU, to then evaluate the amount of objects / types being created (filename: <service_name>_gc_class_histogram.log).

If using the sysvinit installation of the service, and the Tomcat service does not shutdown in a timely manner (within the defined
timeout period), it will include a thread dump as part of the service stdout (ex. catalina.out), and may additionally invoke this
diagnostic bundle to be created before forcing the service process to shutdown (through an OS signal). This can be helpful to further
evaluate if a service is consistently requiring a forceful shutdown (web application may have a non-daemon thread not being shutdown).


This project is licensed under the Apache License, Version 2.0.

When contributing to the project please add your name to the CONTRIBUTORS.txt file. Adding your name to the CONTRIBUTORS.txt file
signifies agreement to all rights and reservations provided by the License.

To contribute to the project execute a pull request through github. The pull request will be reviewed by the community and merged
by the project committers. Please attempt to conform to the test, code conventions, and code formatting standards if any
are specified by the project before submitting a pull request.


Releases should happen regularly after most changes. Feel free to request a release by logging an issue.


For information related to being a committer check [here](


Copyright 2013 Cerner Innovation, Inc.

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

Dependent cookbooks

java >= 1.42
ulimit >= 0.3
logrotate >= 0.0.0
poise ~> 2.4
poise-archive ~> 1.2
poise-service ~> 1.4
compat_resource >= 12.16

Contingent cookbooks

There are no cookbooks that are contingent upon this one.

Change Log

3.5.0 - 06-25-2019

  • [Enhancement] Issue-64 : updating limit version information

3.4.1 - 03-11-2019

  • [Bug] Issue-63 : Adding redirects_healthy return value

3.4.0 - 03-01-2019

  • [Enhancement] Issue-61 : Add option to count redirects as healthy
  • [Enhancement] Issue-60 : Use download_dir for diagnostics
  • [Enhancement] Issue-58 : Install requires opening permissions on /var/chef/cache

3.3.0 - 02-20-2019

  • [Enhancement] Issue-57 : update to support java 2.x

3.2.0 - 01-02-2018

  • [Feature] Issue-52 : Accept checksum for web_app source
  • [Enhancement] Issue-46 : Fixed foodcritic issues after Chef 13 release

3.1.0 - 03-06-2017

  • [Enhancement] Issue-41 : Added support for setting the nofile ulimit in the upstart configurat…
  • [Feature] Issue-5 : Kill process when it doesn't stop cleanly and gather information

3.0.0 - 01-16-2017

  • [Enhancement] Issue-22 : Upgrade off init to upstart/systemd/etc
  • [Bug] Issue-21 : find_pid within init.d script can qualify different Tomcat installations
  • [Enhancement] Issue-4 : Sub resources should provide all options (remote_file, cookbook_file, template)

2.5.0 - 01-02-2018

  • [Feature] Issue-53 : Accept checksum for web_app source (2.x patchback)

2.4.0 - 12-11-2017

  • [Enhancement] Issue-47 : Fix foodcritic 2x
  • [Enhancement] Issue-45 : Kill process when it doesn't stop cleanly and gather information (2.x)

2.3.0 - 10-26-2016

  • [Bug] Issue-26 : Install block has unnecessary not_if guard
  • [Enhancement] Issue-25 : Adding additional properties to sub resources
  • [Enhancement] Issue-23 : Support additional command line options for health checks
  • [Enhancement] Issue-15 : Add a flag to disable user/group creation

2.2.0 - 09-13-2016

  • [Enhancement] Issue-17 : ulimit settings are hard-coded in the provider
  • [Enhancement] Issue-16 : Reduce the number of service start-up events on a single chef-client execution

2.1.1 - 05-02-2016

  • [Bug] Issue-9 : Restart service on java setting changes
  • [Bug] Issue-8 : Uninstall action needs recursive property to delete tomcat instance

2.1.0 - 12-10-2015

  • [Enhancement] Issue-1 : Move to open source

Collaborator Number Metric

3.5.0 passed this metric

Contributing File Metric

3.5.0 failed this metric

Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of, and your repo must contain a file

Foodcritic Metric

3.5.0 passed this metric

No Binaries Metric

3.5.0 passed this metric

Testing File Metric

3.5.0 failed this metric

Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of, and your repo must contain a file

Version Tag Metric

3.5.0 passed this metric