The tomcat startup script needs some special privileges. Concrete it needs to check all running processes, to verify itself is running. You can give the Docker container following privilege in order to make the tomcat start script exiting with success:
sudo docker run --cap-add SYS_PTRACE -it ubuntu bash
The important option is --cap-add SYS_PTRACE, all other options may vary. There is (at least one) an issue discussing this problem on docker github:
https://github.com/docker/docker/issues/6800
参考链接（谷歌网址，得翻墙）