{"action":"created","issue":{"url":"https://api.github.com/repos/bitnami/bitnami-docker-elasticsearch/issues/50","repository_url":"https://api.github.com/repos/bitnami/bitnami-docker-elasticsearch","labels_url":"https://api.github.com/repos/bitnami/bitnami-docker-elasticsearch/issues/50/labels{/name}","comments_url":"https://api.github.com/repos/bitnami/bitnami-docker-elasticsearch/issues/50/comments","events_url":"https://api.github.com/repos/bitnami/bitnami-docker-elasticsearch/issues/50/events","html_url":"https://github.com/bitnami/bitnami-docker-elasticsearch/issues/50","id":380502580,"node_id":"MDU6SXNzdWUzODA1MDI1ODA=","number":50,"title":"No Error logged when encountering an error configuration ES","user":{"login":"JD1337","id":12946826,"node_id":"MDQ6VXNlcjEyOTQ2ODI2","avatar_url":"https://avatars3.githubusercontent.com/u/12946826?v=4","gravatar_id":"","url":"https://api.github.com/users/JD1337","html_url":"https://github.com/JD1337","followers_url":"https://api.github.com/users/JD1337/followers","following_url":"https://api.github.com/users/JD1337/following{/other_user}","gists_url":"https://api.github.com/users/JD1337/gists{/gist_id}","starred_url":"https://api.github.com/users/JD1337/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/JD1337/subscriptions","organizations_url":"https://api.github.com/users/JD1337/orgs","repos_url":"https://api.github.com/users/JD1337/repos","events_url":"https://api.github.com/users/JD1337/events{/privacy}","received_events_url":"https://api.github.com/users/JD1337/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-11-14T01:58:27Z","updated_at":"2018-11-17T00:30:26Z","closed_at":"2018-11-14T09:58:29Z","author_association":"NONE","body":"<!--\r\nIf you are reporting a new issue, make sure that we do not have any duplicates\r\nalready open. You can ensure this by searching the issue list for this\r\nrepository. If there is a duplicate, please close your issue and add a comment\r\nto the existing issue instead.\r\n\r\nIf you suspect your issue is a bug, please edit your issue description to\r\ninclude the BUG REPORT INFORMATION shown below. If you fail to provide this\r\ninformation within 7 days, we cannot debug your issue and we'll close it. We\r\nwill, however, reopen it if you later provide the information.\r\n-------------------------------\r\n    BUG REPORT INFORMATION\r\n-------------------------------\r\nUse the commands below to provide key information from your environment:\r\nYou do NOT have to include this information if this is a FEATURE REQUEST\r\n-->\r\n\r\n**Description**\r\n\r\n<!-- Briefly describe the problem you are having in a few paragraphs. -->\r\nWhen trying to install plugins, setup can fail and prematurely stop task without logging and error\r\n\r\n\r\n**Steps to reproduce the issue:**\r\n\r\ndocker run --name test  -e ELASTICSEARCH_PLUGINS=discovery-ec2  -d bitnami/elasticsearch:6.4.3-debian-9-r0\r\n\r\n**Describe the results you received:**\r\n\r\n> Welcome to the Bitnami elasticsearch container\r\n> Subscribe to project updates by watching https://github.com/bitnami/bitnami-docker-elasticsearch\r\n> Submit issues and feature requests at https://github.com/bitnami/bitnami-docker-elasticsearch/issues\r\n> Send us your feedback at containers@bitnami.com\r\n> \r\n> INFO  ==> ** Starting Elasticsearch setup **\r\n> INFO  ==> Configuring/Initializing Elasticsearch...\r\n> INFO  ==> Configuration Elasticsearch cluster settings...\r\n\r\nThen docker task stops without any further logs\r\n\r\nnext step on a successful run is normally\r\n> INFO  ==> ** Elasticsearch setup finished! **\r\n\r\n<!-- What actually happens -->\r\n\r\n**Describe the results you expected:**\r\n<!-- What you expect to happen -->\r\n- Log an error on installing plugin\r\n- Continue to load Elasticsearch\r\nthe ES .yml can have a requirement set \"plugin.mandatory:\" which should be used to prevent the ES node from running if a plugin is missing, rather than the script stopping.\r\n**Additional information you deem important (e.g. issue happens only occasionally):**\r\n\r\n<!-- Any additional information, configuration or data that might be necessary to reproduce the issue. -->\r\n\r\n**Version**\r\n\r\n- Output of `docker version`:\r\n\r\n```\r\nClient:\r\n Version:      17.06.2-ce\r\n API version:  1.30\r\n Go version:   go1.8.3\r\n Git commit:   3dfb8343b139d6342acfd9975d7f1068b5b1c3d3\r\n Built:        Tue Nov 14 22:03:51 2017\r\n OS/Arch:      linux/amd64\r\n\r\nalso happens on 18.06.1-ce no difference (AWS ECS)\r\n```\r\n\r\n**Additional environment details (AWS, VirtualBox, Docker for MAC, physical, etc.):**\r\n\r\nOccuring in both AWS Amazon Linux 2 ECS Optomised Instance (ami-0231cd5b17565f0b1) and Amazon Linux 2 local VM"},"comment":{"url":"https://api.github.com/repos/bitnami/bitnami-docker-elasticsearch/issues/comments/439568966","html_url":"https://github.com/bitnami/bitnami-docker-elasticsearch/issues/50#issuecomment-439568966","issue_url":"https://api.github.com/repos/bitnami/bitnami-docker-elasticsearch/issues/50","id":439568966,"node_id":"MDEyOklzc3VlQ29tbWVudDQzOTU2ODk2Ng==","user":{"login":"keyboardscience","id":9435271,"node_id":"MDQ6VXNlcjk0MzUyNzE=","avatar_url":"https://avatars0.githubusercontent.com/u/9435271?v=4","gravatar_id":"","url":"https://api.github.com/users/keyboardscience","html_url":"https://github.com/keyboardscience","followers_url":"https://api.github.com/users/keyboardscience/followers","following_url":"https://api.github.com/users/keyboardscience/following{/other_user}","gists_url":"https://api.github.com/users/keyboardscience/gists{/gist_id}","starred_url":"https://api.github.com/users/keyboardscience/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/keyboardscience/subscriptions","organizations_url":"https://api.github.com/users/keyboardscience/orgs","repos_url":"https://api.github.com/users/keyboardscience/repos","events_url":"https://api.github.com/users/keyboardscience/events{/privacy}","received_events_url":"https://api.github.com/users/keyboardscience/received_events","type":"User","site_admin":false},"created_at":"2018-11-17T00:30:26Z","updated_at":"2018-11-17T00:30:26Z","author_association":"NONE","body":"@juan131 sorry for issue necromancy, but I think this is an issue of the uid 1001 user writing to `/opt/bitnami/elasticsearch/config/<plugin-name>/?.*$` from the `elasticsearch-plugin install <plugin-name>` and dying after the `FileSystemException` is thrown. \r\n\r\ne.g.\r\n```\r\nI have no name!@62343d68923d:/$ elasticsearch-plugin install repository-s3\r\n-> Downloading repository-s3 from elastic\r\n[=================================================] 100%??\r\n@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@\r\n@     WARNING: plugin requires additional permissions     @\r\n@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@\r\n* java.lang.RuntimePermission accessDeclaredMembers\r\n* java.lang.RuntimePermission getClassLoader\r\n* java.lang.reflect.ReflectPermission suppressAccessChecks\r\n* java.net.SocketPermission * connect,resolve\r\n* java.util.PropertyPermission es.allow_insecure_settings read,write\r\nSee http://docs.oracle.com/javase/8/docs/technotes/guides/security/permissions.html\r\nfor descriptions of what these permissions allow and the associated risks.\r\n\r\nContinue with installation? [y/N]y\r\nException in thread \"main\" java.nio.file.FileSystemException: /opt/bitnami/elasticsearch/config/repository-s3: Operation not permitted\r\n        at sun.nio.fs.UnixException.translateToIOException(UnixException.java:91)\r\n...\r\n```\r\n\r\nTo be honest, I'm not familiar enough with ES configuration to know if plugin destination relative to the config directory is nominal. However, uid 1001 would need to have write permission to create anything (currently seems to be 775).\r\n\r\n```\r\nI have no name!@983c3de5d288:/$ stat /opt/bitnami/elasticsearch/config/\r\n  File: /opt/bitnami/elasticsearch/config/\r\n  Size: 104             Blocks: 0          IO Block: 4096   directory\r\nDevice: 9fh/159d        Inode: 6640        Links: 1\r\nAccess: (0775/drwxrwxr-x)  Uid: (    0/    root)   Gid: (    0/    root)\r\n```\r\n\r\nMy use is from a slightly modified version of your helm chart on a 1.11 cluster with FSGroup in the PodSecurityContext set to 1001. Perhaps this is a misunderstanding on my part, but I think FSGroup only applies to mounted volumes.\r\n\r\nDebug log:\r\n```\r\nINFO  ==> ** Starting Elasticsearch setup **\r\nDEBUG ==> Validating Kernel settings...\r\nDEBUG ==> Validating settings in ELASTICSEARCH_* env vars...\r\nINFO  ==> Configuring/Initializing Elasticsearch...\r\nDEBUG ==> Detected persisted data from previous deployments\r\nDEBUG ==> Ensuring expected directories/files exist...\r\nDEBUG ==> Setting default configuration\r\nINFO  ==> Configuration Elasticsearch cluster settings...\r\nDEBUG ==> Configure Elasticsearch Node type...\r\nDEBUG ==> Using specified values for Xmx and Xms heap options...\r\nDEBUG ==> Setting '-Xmx4G -Xms4G' heap options...\r\nDEBUG ==> Custom configuration detected. Injecting...\r\nDEBUG ==> Installing plugins: repository-s3\r\nDEBUG ==> Installing plugin: repository-s3\r\nChecking if url exists: https://artifacts.elastic.co/downloads/elasticsearch-plugins/repository-s3/repository-s3-linux-x86_64-6.4.3.zip\r\n-> Downloading repository-s3 from elastic\r\nRetrieving zip from https://artifacts.elastic.co/downloads/elasticsearch-plugins/repository-s3/repository-s3-6.4.3.zip\r\n[=================================================] 100%??\r\n- Plugin information:\r\nName: repository-s3\r\nDescription: The S3 repository plugin adds S3 repositories\r\nVersion: 6.4.3\r\nElasticsearch Version: 6.4.3\r\nJava Version: 1.8\r\nNative Controller: false\r\nExtended Plugins: []\r\n * Classname: org.elasticsearch.repositories.s3.S3RepositoryPlugin\r\n@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@\r\n@     WARNING: plugin requires additional permissions     @\r\n@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@\r\n* java.lang.RuntimePermission accessDeclaredMembers\r\n* java.lang.RuntimePermission getClassLoader\r\n* java.lang.reflect.ReflectPermission suppressAccessChecks\r\n* java.net.SocketPermission * connect,resolve\r\n* java.util.PropertyPermission es.allow_insecure_settings read,write\r\nSee http://docs.oracle.com/javase/8/docs/technotes/guides/security/permissions.html\r\nfor descriptions of what these permissions allow and the associated risks.\r\nException in thread \"main\" java.nio.file.FileSystemException: /opt/bitnami/elasticsearch/config/repository-s3: Operation not permitted\r\n```"}}
{"actor":{"display_login":"keyboardscience"}}