How to fix seccomp unavailable exception of syscall filter

Hi,

I am trying out ELK GA 6.2.4. My OS is centos-release-6-6.el6.centos.12.2.x86_64. I have configured basic configurations in elasticsearch.yml. When I try to start elasticsearch, I am getting the below exception;

[2018-06-11T19:26:56,037][WARN ][o.e.b.JNANatives         ] unable to install syscall filter: 
java.lang.UnsupportedOperationException: seccomp unavailable: requires kernel 3.5+ with CONFIG_SECCOMP and CONFIG_SECCOMP_FILTER compiled in
	at org.elasticsearch.bootstrap.SystemCallFilter.linuxImpl(SystemCallFilter.java:328) ~[elasticsearch-6.2.4.jar:6.2.4]
	at org.elasticsearch.bootstrap.SystemCallFilter.init(SystemCallFilter.java:616) ~[elasticsearch-6.2.4.jar:6.2.4]
	at org.elasticsearch.bootstrap.JNANatives.tryInstallSystemCallFilter(JNANatives.java:258) [elasticsearch-6.2.4.jar:6.2.4]
	at org.elasticsearch.bootstrap.Natives.tryInstallSystemCallFilter(Natives.java:113) [elasticsearch-6.2.4.jar:6.2.4]
	at org.elasticsearch.bootstrap.Bootstrap.initializeNatives(Bootstrap.java:110) [elasticsearch-6.2.4.jar:6.2.4]
	at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:172) [elasticsearch-6.2.4.jar:6.2.4]
	at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:323) [elasticsearch-6.2.4.jar:6.2.4]
	at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:121) [elasticsearch-6.2.4.jar:6.2.4]
	at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:112) [elasticsearch-6.2.4.jar:6.2.4]
	at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86) [elasticsearch-6.2.4.jar:6.2.4]
	at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124) [elasticsearch-cli-6.2.4.jar:6.2.4]
	at org.elasticsearch.cli.Command.main(Command.java:90) [elasticsearch-cli-6.2.4.jar:6.2.4]
	at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:92) [elasticsearch-6.2.4.jar:6.2.4]
	at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:85) [elasticsearch-6.2.4.jar:6.2.4]
[2018-06-11T19:26:56,350][INFO ][o.e.n.Node               ] [elk_ga62_n1] initializing ...
[2018-06-11T19:26:56,539][INFO ][o.e.e.NodeEnvironment    ] [elk_ga62_n1] using [1] data paths, mounts [[/data (/dev/mapper/vg2_data-lv2_data)]], net usable_space [72.2gb], net total_space [265.6gb], types [ext4]
[2018-06-11T19:26:56,540][INFO ][o.e.e.NodeEnvironment    ] [elk_ga62_n1] heap size [990.7mb], compressed ordinary object pointers [true]
[2018-06-11T19:26:56,549][INFO ][o.e.n.Node               ] [elk_ga62_n1] node name [elk_ga62_n1], node ID [o9UcmzuiQlqTAQTUBi5M_A]
[2018-06-11T19:26:56,550][INFO ][o.e.n.Node               ] [elk_ga62_n1] version[6.2.4], pid[32488], build[ccec39f/2018-04-12T20:37:28.497551Z], OS[Linux/2.6.32-504.el6.x86_64/amd64], JVM[Oracle Corporation/Java HotSpot(TM) 64-Bit Server VM/1.8.0_102/25.102-b14]
[2018-06-11T19:26:56,550][INFO ][o.e.n.Node               ] [elk_ga62_n1] JVM arguments [-Xms512M, -Xmx512M, -Xms1g, -Xmx1g, -XX:+UseConcMarkSweepGC, -XX:CMSInitiatingOccupancyFraction=75, -XX:+UseCMSInitiatingOccupancyOnly, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Djava.io.tmpdir=/tmp/elasticsearch.PSTthkko, -XX:+HeapDumpOnOutOfMemoryError, -XX:+PrintGCDetails, -XX:+PrintGCDateStamps, -XX:+PrintTenuringDistribution, -XX:+PrintGCApplicationStoppedTime, -Xloggc:logs/gc.log, -XX:+UseGCLogFileRotation, -XX:NumberOfGCLogFiles=32, -XX:GCLogFileSize=64m, -Des.path.home=/data/setup/GA6.2/elasticsearch-6.2.4, -Des.path.conf=/data/setup/GA6.2/elasticsearch-6.2.4/config]
[2018-06-11T19:26:57,317][INFO ][o.e.p.PluginsService     ] [elk_ga62_n1] loaded module [aggs-matrix-stats]
[2018-06-11T19:26:57,318][INFO ][o.e.p.PluginsService     ] [elk_ga62_n1] loaded module [analysis-common]
[2018-06-11T19:26:57,318][INFO ][o.e.p.PluginsService     ] [elk_ga62_n1] loaded module [ingest-common]
[2018-06-11T19:26:57,318][INFO ][o.e.p.PluginsService     ] [elk_ga62_n1] loaded module [lang-expression]
[2018-06-11T19:26:57,318][INFO ][o.e.p.PluginsService     ] [elk_ga62_n1] loaded module [lang-mustache]
[2018-06-11T19:26:57,318][INFO ][o.e.p.PluginsService     ] [elk_ga62_n1] loaded module [lang-painless]
[2018-06-11T19:26:57,318][INFO ][o.e.p.PluginsService     ] [elk_ga62_n1] loaded module [mapper-extras]
[2018-06-11T19:26:57,318][INFO ][o.e.p.PluginsService     ] [elk_ga62_n1] loaded module [parent-join]
[2018-06-11T19:26:57,319][INFO ][o.e.p.PluginsService     ] [elk_ga62_n1] loaded module [percolator]
[2018-06-11T19:26:57,319][INFO ][o.e.p.PluginsService     ] [elk_ga62_n1] loaded module [rank-eval]
[2018-06-11T19:26:57,319][INFO ][o.e.p.PluginsService     ] [elk_ga62_n1] loaded module [reindex]
[2018-06-11T19:26:57,319][INFO ][o.e.p.PluginsService     ] [elk_ga62_n1] loaded module [repository-url]
[2018-06-11T19:26:57,319][INFO ][o.e.p.PluginsService     ] [elk_ga62_n1] loaded module [transport-netty4]
[2018-06-11T19:26:57,319][INFO ][o.e.p.PluginsService     ] [elk_ga62_n1] loaded module [tribe]
[2018-06-11T19:26:57,320][INFO ][o.e.p.PluginsService     ] [elk_ga62_n1] no plugins loaded
[2018-06-11T19:27:00,692][INFO ][o.e.d.DiscoveryModule    ] [elk_ga62_n1] using discovery type [zen]
[2018-06-11T19:27:01,308][INFO ][o.e.n.Node               ] [elk_ga62_n1] initialized
[2018-06-11T19:27:01,308][INFO ][o.e.n.Node               ] [elk_ga62_n1] starting ...
[2018-06-11T19:27:01,477][INFO ][o.e.t.TransportService   ] [elk_ga62_n1] publish_address {192.168.0.1:9300}, bound_addresses {192.168.0.1:9300}
[2018-06-11T19:27:01,492][INFO ][o.e.b.BootstrapChecks    ] [elk_ga62_n1] bound or publishing to a non-loopback address, enforcing bootstrap checks
[2018-06-11T19:27:01,498][ERROR][o.e.b.Bootstrap          ] [elk_ga62_n1] node validation exception
[1] bootstrap checks failed
[1]: system call filters failed to install; check the logs and fix your configuration or disable system call filters at your own risk
[2018-06-11T19:27:01,501][INFO ][o.e.n.Node               ] [elk_ga62_n1] stopping ...
[2018-06-11T19:27:01,574][INFO ][o.e.n.Node               ] [elk_ga62_n1] stopped
[2018-06-11T19:27:01,574][INFO ][o.e.n.Node               ] [elk_ga62_n1] closing ...
[2018-06-11T19:27:01,589][INFO ][o.e.n.Node               ] [elk_ga62_n1] closed

I have posted a similar question earlier - while I was using GA 5.0.0 - here, but would like to know why this happens, and how to fix. I dont want to set bootstrap.seccomp=false.

Thank you.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.