# Cannot start elasticsearch under user

**URL:** <https://discuss.elastic.co/t/cannot-start-elasticsearch-under-user/226587>\
**Category:** Elasticsearch\
**Created:** [April 5, 2020, 6:37pm UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-under-user/226587 "2020-04-05T18:37:14Z")\
**Posts on this page:** 18\
**Page:** 1

<div class="post-metadata">

**Author:** ![gefela](https://avatars.discourse-cdn.com/v4/letter/g/90ced4/32.png) [@gefela](https://discuss.elastic.co/u/gefela)\
**Post date:** [April 5, 2020, 6:37pm UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-under-user/226587/1 "2020-04-05T18:37:14Z")

</div>

When I try to start elasticsearch , I get the following

[gefela@gefela bin] ./elasticsearch ./elasticsearch-env: line 75: /etc/sysconfig/elasticsearch: Permission denied [gefela@gefela bin] ^C

What do I need to do to fix this ?

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [April 5, 2020, 6:49pm UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-under-user/226587/2 "2020-04-05T18:49:04Z")

</div>

I'd follow the installation guide.

---

<div class="post-metadata">

**Author:** ![gefela](https://avatars.discourse-cdn.com/v4/letter/g/90ced4/32.png) [@gefela](https://discuss.elastic.co/u/gefela)\
**Post date:** [April 13, 2020, 11:17am UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-under-user/226587/3 "2020-04-13T11:17:26Z")

</div>

I have read it the installation guide but it does not give me the reason why it is failing ..

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [April 13, 2020, 3:26pm UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-under-user/226587/4 "2020-04-13T15:26:12Z")

</div>

How did you install elasticsearch? What are the exact commands you are running?

---

<div class="post-metadata">

**Author:** ![gefela](https://avatars.discourse-cdn.com/v4/letter/g/90ced4/32.png) [@gefela](https://discuss.elastic.co/u/gefela)\
**Post date:** [April 13, 2020, 6:00pm UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-under-user/226587/5 "2020-04-13T18:00:53Z")

</div>

This is the commands thatI used to configure elasticsearch

wget [https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.6.2-x86\_64.rpm](https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.6.2-x86_64.rpm)  
wget [https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.6.2-x86\_64.rpm.sha512](https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.6.2-x86_64.rpm.sha512)  
shasum -a 512 -c elasticsearch-7.6.2-x86\_64.rpm.sha512  
sudo rpm --install elasticsearch-7.6.2-x86\_64.rpm  
yum remove elasticsearch-oss  
sudo rpm --install elasticsearch-7.6.2-x86\_64.rpm  
wget [https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.6.2-x86\_64.rpm](https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.6.2-x86_64.rpm)  
wget [https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.6.2-x86\_64.rpm.sha512](https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.6.2-x86_64.rpm.sha512)  
shasum -a 512 -c elasticsearch-7.6.2-x86\_64.rpm.sha512  
sudo rpm --install elasticsearch-7.6.2-x86\_64.rpm  
wget [https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.6.2-x86\_64.rpm](https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.6.2-x86_64.rpm)  
wget [https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.6.2-x86\_64.rpm.sha512](https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.6.2-x86_64.rpm.sha512)  
shasum -a 512 -c elasticsearch-7.6.2-x86\_64.rpm.sha512  
sudo rpm --install elasticsearch-7.6.2-x86\_64.rpm  
sudo systemctl enable elasticsearch.service  
cd /usr/share/elasticsearch/  
./elasticsearch-users useradd gefela -p password  
nano /etc/elasticsearch/elasticsearch.yml  
systemctl restart elasticsearch  
cd /etc/elasticsearch/  
cd /usr/share/elasticsearch/bin/  
./elasticsearch  
su elasticsearch  
chown -R elasticsearch:elasticsearch /etc/elasticsearch/  
chown -R elasticsearch:elasticsearch /usr/share/elasticsearch/  
./elasticsearch

---

<div class="post-metadata">

**Author:** ![gefela](https://avatars.discourse-cdn.com/v4/letter/g/90ced4/32.png) [@gefela](https://discuss.elastic.co/u/gefela)\
**Post date:** [April 13, 2020, 6:03pm UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-under-user/226587/6 "2020-04-13T18:03:01Z")

</div>

./elasticsearch  
OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release.  
[2020-04-13T19:02:11,853][ERROR][o.e.b.ElasticsearchUncaughtExceptionHandler] [gefela] uncaught exception in thread [main]  
org.elasticsearch.bootstrap.StartupException: java.lang.RuntimeException: can not run elasticsearch as root  
at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:174) ~[elasticsearch-7.6.2.jar:7.6.2]  
at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:161) ~[elasticsearch-7.6.2.jar:7.6.2]  
at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86) ~[elasticsearch-7.6.2.jar:7.6.2]  
at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:125) ~[elasticsearch-cli-7.6.2.jar:7.6.2]  
at org.elasticsearch.cli.Command.main(Command.java:90) ~[elasticsearch-cli-7.6.2.jar:7.6.2]  
at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:126) ~[elasticsearch-7.6.2.jar:7.6.2]  
at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:92) ~[elasticsearch-7.6.2.jar:7.6.2]  
Caused by: java.lang.RuntimeException: can not run elasticsearch as root  
at org.elasticsearch.bootstrap.Bootstrap.initializeNatives(Bootstrap.java:105) ~[elasticsearch-7.6.2.jar:7.6.2]  
at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:172) ~[elasticsearch-7.6.2.jar:7.6.2]  
at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:349) ~[elasticsearch-7.6.2.jar:7.6.2]  
at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) ~[elasticsearch-7.6.2.jar:7.6.2]  
... 6 more  
uncaught exception in thread [main]  
java.lang.RuntimeException: can not run elasticsearch as root  
at org.elasticsearch.bootstrap.Bootstrap.initializeNatives(Bootstrap.java:105)  
at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:172)  
at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:349)  
at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170)  
at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:161)  
at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86)  
at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:125)  
at org.elasticsearch.cli.Command.main(Command.java:90)  
at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:126)  
at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:92)  
For complete error details, refer to the log at /var/log/elasticsearch/gefela.l

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [April 13, 2020, 9:30pm UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-under-user/226587/7 "2020-04-13T21:30:53Z")

</div>

Could you run the process as `elasticsearch` user?

---

<div class="post-metadata">

**Author:** ![gefela](https://avatars.discourse-cdn.com/v4/letter/g/90ced4/32.png) [@gefela](https://discuss.elastic.co/u/gefela)\
**Post date:** [April 14, 2020, 6:48am UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-under-user/226587/8 "2020-04-14T06:48:21Z")

</div>

It is still giving me the error message ..

[gefela@gefela ~] cd /usr/share/elasticsearch/bin [gefela@gefela bin] sudo ./elasticsearch  
[sudo] password for gefela:  
OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release.  
[2020-04-14T07:43:51,602][ERROR][o.e.b.ElasticsearchUncaughtExceptionHandler] [gefela] uncaught exception in thread [main]  
org.elasticsearch.bootstrap.StartupException: java.lang.RuntimeException: can not run elasticsearch as root  
at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:174) ~[elasticsearch-7.6.2.jar:7.6.2]  
at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:161) ~[elasticsearch-7.6.2.jar:7.6.2]  
at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86) ~[elasticsearch-7.6.2.jar:7.6.2]  
at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:125) ~[elasticsearch-cli-7.6.2.jar:7.6.2]  
at org.elasticsearch.cli.Command.main(Command.java:90) ~[elasticsearch-cli-7.6.2.jar:7.6.2]  
at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:126) ~[elasticsearch-7.6.2.jar:7.6.2]  
at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:92) ~[elasticsearch-7.6.2.jar:7.6.2]  
Caused by: java.lang.RuntimeException: can not run elasticsearch as root  
at org.elasticsearch.bootstrap.Bootstrap.initializeNatives(Bootstrap.java:105) ~[elasticsearch-7.6.2.jar:7.6.2]  
at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:172) ~[elasticsearch-7.6.2.jar:7.6.2]  
at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:349) ~[elasticsearch-7.6.2.jar:7.6.2]  
at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) ~[elasticsearch-7.6.2.jar:7.6.2]  
... 6 more  
uncaught exception in thread [main]  
java.lang.RuntimeException: can not run elasticsearch as root  
at org.elasticsearch.bootstrap.Bootstrap.initializeNatives(Bootstrap.java:105)  
at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:172)  
at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:349)  
at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170)  
at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:161)  
at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86)  
at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:125)  
at org.elasticsearch.cli.Command.main(Command.java:90)  
at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:126)  
at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:92)  
For complete error details, refer to the log at /var/log/elasticsearch/gefela.log  
[gefela@gefela bin] sudo whoami root [gefela@gefela bin]  
[gefela@gefela bin]$ ./elasticsearch  
./elasticsearch-env: line 75: /etc/sysconfig/elasticsearch: Permission denied

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [April 14, 2020, 7:24am UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-under-user/226587/9 "2020-04-14T07:24:23Z")

</div>

```auto
[gefela@gefela ~] cd /usr/share/elasticsearch/bin [gefela@gefela bin] sudo ./elasticsearch

```

Means that you are running as `root`.

---

<div class="post-metadata">

**Author:** ![gefela](https://avatars.discourse-cdn.com/v4/letter/g/90ced4/32.png) [@gefela](https://discuss.elastic.co/u/gefela)\
**Post date:** [April 14, 2020, 7:30am UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-under-user/226587/10 "2020-04-14T07:30:31Z")

</div>

I have run it as a user ...

[gefela@gefela ~] cd /usr/share/elasticsearch/bin/ [gefela@gefela bin] ./elasticsearch  
./elasticsearch-env: line 75: /etc/sysconfig/elasticsearch: Permission denied  
[gefela@gefela bin]$

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [April 14, 2020, 7:47am UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-under-user/226587/11 "2020-04-14T07:47:34Z")

</div>

But why are you trying to launch the binary manually?

[Documentation](https://www.elastic.co/guide/en/elasticsearch/reference/current/rpm.html) says:

```
sudo -i service elasticsearch start
```

---

<div class="post-metadata">

**Author:** ![gefela](https://avatars.discourse-cdn.com/v4/letter/g/90ced4/32.png) [@gefela](https://discuss.elastic.co/u/gefela)\
**Post date:** [April 14, 2020, 7:50am UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-under-user/226587/12 "2020-04-14T07:50:50Z")

</div>

I have done it but still giving error message

[gefela@gefela bin]$ sudo -i service elasticsearch start  
Starting elasticsearch (via systemctl): Job for elasticsearch.service failed because the control process exited with error code.

gefela@gefela bin] sudo systemctl status elasticsearch.service ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vend\> Active: failed (Result: exit-code) since Tue 2020-04-14 08:47:59 BST; 43s ago Docs: http://www.elastic.co Process: 8267 ExecStart=/usr/share/elasticsearch/bin/elasticsearch -p {PID\_D\>  
Main PID: 8267 (code=exited, status=1/FAILURE)

Apr 14 08:47:59 gefela elasticsearch[8267]: at org.elasticsearch.bootst\>  
Apr 14 08:47:59 gefela elasticsearch[8267]: at org.elasticsearch.cli.En\>  
Apr 14 08:47:59 gefela elasticsearch[8267]: at [org.elasticsearch.cli.Co](http://org.elasticsearch.cli.Co)\>  
Apr 14 08:47:59 gefela elasticsearch[8267]: at [org.elasticsearch.cli.Co](http://org.elasticsearch.cli.Co)\>  
Apr 14 08:47:59 gefela elasticsearch[8267]: at org.elasticsearch.bootst\>  
Apr 14 08:47:59 gefela elasticsearch[8267]: at org.elasticsearch.bootst\>  
Apr 14 08:47:59 gefela elasticsearch[8267]: For complete error details, refer t\>  
Apr 14 08:47:59 gefela systemd[1]: elasticsearch.service: Main process exited, \>  
Apr 14 08:47:59 gefela systemd[1]: elasticsearch.service: Failed with result 'e\>  
Apr 14 08:47:59 gefela systemd[1]: Failed to start Elasticsearch.  
lines 1-17/17 (END)

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [April 14, 2020, 7:52am UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-under-user/226587/13 "2020-04-14T07:52:02Z")

</div>

What are elasticsearch logs in that case?

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [April 14, 2020, 7:52am UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-under-user/226587/14 "2020-04-14T07:52:17Z")

</div>

Please format your code, logs or configuration files using `</>` icon as explained in [this guide](https://discuss.elastic.co/t/about-the-elasticsearch-category/21) and not the citation button. It will make your post more readable.

Or use markdown style like:

````
```
CODE
```

````

This is the icon to use if you are not using markdown format:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/7/e/7e6e239431ec2d71cbf1beef741f2e93e7cc762c.jpg)

There's a live preview panel for exactly this reasons.

Lots of people read these forums, and many of them will simply skip over a post that is difficult to read, because it's just too large an investment of their time to try and follow a wall of badly formatted text.  
If your goal is to get an answer to your questions, it's in your interest to make it as easy to read and understand as possible.

---

<div class="post-metadata">

**Author:** ![gefela](https://avatars.discourse-cdn.com/v4/letter/g/90ced4/32.png) [@gefela](https://discuss.elastic.co/u/gefela)\
**Post date:** [April 14, 2020, 11:45am UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-under-user/226587/15 "2020-04-14T11:45:43Z")

</div>

I have managed to get a resolution for this by using this guide ..

> <https://stackoverflow.com/questions/40766301/run-elastic-search-as-root-user/53274035#53274035>

How do I make elasticsearch ,logstash and kibana start at boot time

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [April 14, 2020, 1:02pm UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-under-user/226587/16 "2020-04-14T13:02:57Z")

</div>

Once its installed as a service, it will start automatically.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [April 14, 2020, 4:51pm UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-under-user/226587/17 "2020-04-14T16:51:20Z")

</div>

Did you make it work?

Again, the installation guides are telling how to make the service automatically starting. See for example [https://www.elastic.co/guide/en/kibana/current/rpm.html](https://www.elastic.co/guide/en/kibana/current/rpm.html) for Kibana. If you have any question regarding Kibana, please open a question in #kibana

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 12, 2020, 4:57pm UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-under-user/226587/18 "2020-05-12T16:57:59Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
