ElasticBeanstalk -改变java.security？

Question

我想在我的Elastic Beanstalk实例上更改$JAVA_HOME/jre/lib/security/java.security中的securerandom.source值。

我如何通过.ebextensions做到这一点呢？或者是另一种方式呢？

Answer 1

在$JAVA_HOME/jre/lib/security/java.security文件的开头，有一段话说

# This is the "master security properties file".
#
# An alternate java.security properties file may be specified
# from the command line via the system property
#
#    -Djava.security.properties=<URL>
#
# This properties file appends to the master security properties file.
# If both properties files specify values for the same key, the value
# from the command-line properties file is selected, as it is the last
# one loaded.

因此，您可以在.ebextensions文件夹下创建包含以下内容的java-security.config文件：

# Create a file named java-security under /usr/share/tomcat8/conf to override the default value of securerandom.source
files: 
  "/usr/share/tomcat8/conf/java-security" :
    mode: "000755"
    owner: tomcat
    group: tomcat
    content: |
      securerandom.source=<the file you want for securerandom.source>

然后转到弹性豆茎环境

->配置

->软件

->环境属性

->键入java.security.properties作为名称，键入/usr/share/tomcat8/conf/java-security作为值。

然后重新启动tomcat。您的securerandom.source应该更改为您想要的值。

要记住的一件事是，用户tomcat必须具有读取/usr/share/tomcat8/conf/java-security文件的权限。