Permissions for ES_KEYSTORE_PASSPHRASE_FILE

Elastic Stack Elasticsearch
1

Dear Community,

our Keystore is protected with a password. In order to provide the password to the cluster and start it, we created the file /etc/elasticsearch/my_pwd_file.tmp under root:elasticsearch containing the password. Its permissions were set to 600, conforming to the instructions we follow. The cluster is being executed with systemctl by root.

However, the cluster could not start. It was complaining with: /etc/elasticsearch/my_pwd_file.tmp: permission denied. By changing the permissions of the file to 640, the cluster started successfully. What could be the issue?

Greetings,
Milos Tepavcevic

2

I believe elasticsearch runs under elasticsearch:elasticsearch, while your file is root:elaticsearch. You might want to change the ownership of the file, e.g.

chown elasticsearch:elasticsearch /etc/elasticsearch/my_pwd_file.tmp
3

It's indeed that simple - thanks!

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.