Please considering providing a docker image that would be ready for production use. Guides https://tomcat.apache.org/tomcat-7.0-doc/security-howto.html https://www.owasp.org/index.php/Securing_tomcat Also related to using the native library https://github.com/docker-library/tomcat/issues/7