# Logstash docker java port \<1024 issue

**URL:** https://discuss.elastic.co/t/logstash-docker-java-port-1024-issue/94128
**Category:** Logstash
**Created:** [July 21, 2017, 3:10pm UTC](https://discuss.elastic.co/t/logstash-docker-java-port-1024-issue/94128 "2017-07-21T15:10:17Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![amarchal](https://avatars.discourse-cdn.com/v4/letter/a/54ee81/32.png) [@amarchal](https://discuss.elastic.co/u/amarchal)
#### Post date: [July 21, 2017, 3:10pm UTC](https://discuss.elastic.co/t/logstash-docker-java-port-1024-issue/94128/1 "2017-07-21T15:10:17Z")

</div>

Hello,

Contexte:  
CentOS7  
docker-CE  
Logstash official image: [docker.elastic.co/logstash/logstash:5.5.0](http://docker.elastic.co/logstash/logstash:5.5.0)  
SE Linux disabled

When Starting Logstash container with input TCP port \< 1024, I have the following error:

[2017-07-21T14:57:25,371][INFO][logstash.inputs.tcp] Starting tcp input listener {:address=\>"0.0.0.0:514"}

[2017-07-21T14:57:25,377][ERROR][logstash.pipeline] Error registering plugin {:plugin=\>"\<LogStash::Inputs::Tcp port=\>514, add\_field=\>{"techno"=\>"default"}, id=\>"c7244feabb69f19ed5f6051d5fe01ba599eb5490-1", enable\_metric=\>true, codec=\>\<LogStash::Codecs::Line id=\>"line\_4993336d-a5ed-40dd-81f3-0584fc95228a", enable\_metric=\>true, charset=\>"UTF-8", delimiter=\>"\n"\>, host=\>"0.0.0.0", data\_timeout=\>-1, mode=\>"server", proxy\_protocol=\>false, ssl\_enable=\>false, ssl\_verify=\>true, ssl\_key\_passphrase=\>\>", :error=\>"Permission denied - bind(2)"}

[2017-07-21T14:57:25,401][ERROR][logstash.agent] Pipeline aborted due to error {:exception=\>#\<Errno::EACCES: Permission denied - bind(2)\>, :backtrace=\>["org/jruby/ext/socket/RubyTCPServer.java:124:in `initialize'", "org/jruby/RubyIO.java:871:in`new'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-tcp-4.1.2/lib/logstash/inputs/tcp.rb:321:in `new_server_socket'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-tcp-4.1.2/lib/logstash/inputs/tcp.rb:131:in`register'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:281:in `register_plugin'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:292:in`register\_plugins'", "org/jruby/RubyArray.java:1613:in `each'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:292:in`register\_plugins'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:442:in `start_inputs'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:336:in`start\_workers'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:226:in `run'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:398:in`start\_pipeline'"]}

I have already fix this issue on other server (without docker) with setcap:  
setcap 'cap\_net\_bind\_service=+ep' /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.131-3.b12.el7\_3.x86\_64/jre/bin/java

But with logstash docker previous command doesn't solve this issue.

When I start an tcp input port \> 1024, logstash works.

docker run --rm -it -v ~/settings/logstash.yml:/usr/share/logstash/config/logstash.yml -v ~/pipeline/:/usr/share/logstash/pipeline -p 5514 [docker.elastic.co/logstash/logstash:5.5.0](http://docker.elastic.co/logstash/logstash:5.5.0)

[2017-07-21T15:08:43,885][INFO][logstash.pipeline] Starting pipeline {"id"=\>"main", "pipeline.workers"=\>2, "pipeline.batch.size"=\>125, "pipeline.batch.delay"=\>5, "pipeline.max\_inflight"=\>250}  
[2017-07-21T15:08:43,897][INFO][logstash.inputs.tcp] Starting tcp input listener {:address=\>"0.0.0.0:5514"}  
[2017-07-21T15:08:43,907][INFO][logstash.pipeline] Pipeline main started  
[2017-07-21T15:08:43,950][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=\>9600}

Could you help me please ?  
Everyone already solve this issue ?

Thanks in advance,

Adrien

---

<div class="post-metadata">

### Author: ![amarchal](https://avatars.discourse-cdn.com/v4/letter/a/54ee81/32.png) [@amarchal](https://discuss.elastic.co/u/amarchal)
#### Post date: [July 24, 2017, 7:33am UTC](https://discuss.elastic.co/t/logstash-docker-java-port-1024-issue/94128/2 "2017-07-24T07:33:15Z")

</div>

--\> any solution?

When I start container with root user (--user root) , it works, but i would like to find a proper solution...

Adrien

---

<div class="post-metadata">

### Author: ![pts0](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pts0/32/17811_2.png) [@pts0](https://discuss.elastic.co/u/pts0)
#### Post date: [July 24, 2017, 7:44am UTC](https://discuss.elastic.co/t/logstash-docker-java-port-1024-issue/94128/3 "2017-07-24T07:44:34Z")

</div>

Hi,  
Is nothing related to docker or logstash. Is just the way that linux work. All port \< 1024 can be allocated only by root.

pts0

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 21, 2017, 7:45am UTC](https://discuss.elastic.co/t/logstash-docker-java-port-1024-issue/94128/4 "2017-08-21T07:45:00Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.