This looks great. One minor tweak is you could do:

```
CMD service tomcat7 start
RUN mvn tomcat7:deploy
CMD tail -F /var/log/tomcat7/catalina.out
```

This might allow you to keep /var/lib/tomcat7 with `775` permissions.