Tomcat rollback after a failed upgrade: symlink switch or in-place reinstall — what are the limits?
We maintain several Tomcat 9 instances and are planning a move to Tomcat 10.1. Using the documented CATALINA_HOME/CATALINA_BASE split, our binaries live in versioned directories while conf/, logs/, and webapps/ sit in a separate CATALINA_BASE, so in theory a failed upgrade should be recoverable without touching instance configuration. The unresolved decision