最小环 java_chroot构造JDK最小环境

1、新建一个java目录，这是待会chroot的根目录

2、为了方便，构造一个简单的bash环境

2.1 查看/bin/bash所需要的动态库

ubuntu@localhost:~/java$ ldd /bin/bash

linux-vdso.so.1 => (0x00007fffc68d4000)

libtinfo.so.5 => /lib/x86_64-linux-gnu/libtinfo.so.5 (0x00007f6cebbb6000)

libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007f6ceb9b2000)

libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f6ceb5e8000)/lib64/ld-linux-x86-64.so.2 (0x000055c8e7bd3000)

2.2 为了方便，将所有需要的动态库都放到java/lib或java/lib64目录下

ubuntu@localhost:~/java$ ls lib lib64 -l

lib:

total2004

-rwxr-xr-x 1 ubuntu ubuntu 1864888 Feb 8 14:17 libc.so.6

-rwxr-xr-x 1 ubuntu ubuntu 14608 Feb 8 14:17 libdl.so.2

-rwxr-xr-x 1 ubuntu ubuntu 167240 Feb 8 14:17 libtinfo.so.5lib64:

total160

-rwxr-xr-x 1 ubuntu ubuntu 162632 Feb 8 14:17 ld-linux-x86-64.so.2

2.3 将/bin/bash拷贝到java/bin目录下

ubuntu@localhost:~/java$ ls -l bin

total1016

-rwxr-xr-x 1 ubuntu ubuntu 1037528 Feb 8 14:19 bash

3、解压JDK

3.1 将jdk解压到java/jvm目录下

ubuntu@localhost:~/java$ lsjvm

java-8-openjdk-amd64

3.2 查看java需要的动态库

ubuntu@localhost:~/java$ ldd jvm/java-8-openjdk-amd64/bin/java

linux-vdso.so.1 => (0x00007fff08d7c000)

libjli.so=> /home/ubuntu/java/jvm/java-8-openjdk-amd64/bin/../lib/amd64/jli/libjli.so (0x00007f17fcfee000)

libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f17fcc1c000)

libz.so.1 => /lib/x86_64-linux-gnu/libz.so.1 (0x00007f17fca02000)

libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007f17fc7fe000)

libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007f17fc5e0000)/lib64/ld-linux-x86-64.so.2 (0x000055dc0a354000)

3.3 不拷贝libjli.so，该动态库在jdk解压路径下，拷贝其他库到java/lib下

ubuntu@localhost:~/java$ lslib

libc.so.6 libdl.so.2 libpthread.so.0 libtinfo.so.5 libz.so.1

4、切换根目录到java(sudo chroot .)，然后执行java

bash-4.3# jvm/java-8-openjdk-amd64/bin/java

jvm/java-8-openjdk-amd64/bin/java: error while loading shared libraries: libjli.so: cannot open shared object file: No such file or directory

4.1 找不到libjli.so，strace -f java跟踪一把，发现java需要从/proc目录下获取路径，然后更具该路径查找libjli.so(也可以在lib目录下建一个libjli.so的符号链接)

ubuntu@localhost:~/java$ mkdir proc;sudo mount proc ./proc -t proc

ubuntu@localhost:~/java$ mount | tail -n 1proc on/home/ubuntu/java/proc type proc (rw,relatime)

4.2 java还需要依赖一些其他库，最终如下

ubuntu@localhost:~/java$ lslib

libc.so.6 libdl.so.2 libgcc_s.so.1 libm.so.6 libpthread.so.0 libstdc++.so.6 libtinfo.so.5 libz.so.1

bash-4.3# jvm/java-8-openjdk-amd64/bin/java

OpenJDK64-Bit Server VM warning: No monotonic clock was available - timed services may be adversely affected if the time-of-day clock changes

Usage: java [-options] class [args...]

(to execute a class)

or java [-options] -jar jarfile [args...]

(to execute a jarfile)

where options include:-d32 use a 32-bit data model ifavailable-d64 use a 64-bit data model ifavailable

··· ···

5、另外一种方法，不需要拷贝这些库，可以使用mount --bind olddir newdir，之后newdir就和olddir完全一样。如果要防止修改，可以再mount -o remount,rw,bind olddir newdir.