elasticsearch将不会启动:存在Seccomp,但是引导检查失败(Centos 7 / ES 6.4.2)

时间:2018-10-29 14:07:11

标签: elasticsearch seccomp

CentOS Linux版本7.5.1804(核心)

配置生产集群,ES拒绝启动:

1:33:56,454][INFO ][o.e.t.TransportService   ] [node-68795-C] publish_address {192.168.200.162:9300}, bound_addresses {192.168.200.162:9300}
[2018-10-28T21:33:56,467][INFO ][o.e.b.BootstrapChecks    ] [node-68795-C] bound or publishing to a non-loopback address, enforcing bootstrap checks
[2018-10-28T21:33:56,494][ERROR][o.e.b.Bootstrap          ] [node-68795-C] node validation exception
[1] bootstrap checks failed
[1]: system call filters failed to install; check the logs and fix your configuration or disable system call filters at your own risk

好的,所以我要检查seccomp的存在:

[$]# cat /boot/config-`uname -r` | grep CONFIG_SECCOMP=
CONFIG_SECCOMP=y
[$]# CONFIG_SECCOMP=y

因此,外观和气味都像seccomp。

接下来是什么?

1 个答案:

答案 0 :(得分:0)

根本原因:/ tmp被安装为noexec

事实证明,如果/ tmp为noexec,则两次或三个引导程序检查将失败。

解决/ tmp,所有其他问题都解决了!