mirror of
https://github.com/elastic/elasticsearch.git
synced 2025-06-30 10:23:41 -04:00
71c7534731
The systemd unit file is part of the Elasticsearch package and should not be edited. Instead, we recommend creating a service override file. This commit tweaks the docs for setting tmp dir with systemd to use the override file instead of editing the unit file. relates #93121
50 lines
2.4 KiB
Text
50 lines
2.4 KiB
Text
[[executable-jna-tmpdir]]
|
|
=== Ensure JNA temporary directory permits executables
|
|
|
|
[NOTE]
|
|
This is only relevant for Linux.
|
|
|
|
{es} uses the Java Native Access (JNA) library, and another library called
|
|
`libffi`, for executing some platform-dependent native code. On Linux, the
|
|
native code backing these libraries is extracted at runtime into a temporary
|
|
directory and then mapped into executable pages in {es}'s address space. This
|
|
requires the underlying files not to be on a filesystem mounted with the
|
|
`noexec` option.
|
|
|
|
By default, {es} will create its temporary directory within `/tmp`. However,
|
|
some hardened Linux installations mount `/tmp` with the `noexec` option by
|
|
default. This prevents JNA and `libffi` from working correctly. For instance,
|
|
at startup JNA may fail to load with an `java.lang.UnsatisfiedLinkerError`
|
|
exception or with a message that says something similar to
|
|
`failed to map segment from shared object`, or `libffi` may report a message
|
|
such as `failed to allocate closure`. Note that the exception messages can
|
|
differ between JVM versions. Additionally, the components of {es} that rely on
|
|
execution of native code via JNA may fail with messages indicating that it is
|
|
`because JNA is not available`.
|
|
|
|
To resolve these problems, either remove the `noexec` option from your `/tmp`
|
|
filesystem, or configure {es} to use a different location for its temporary
|
|
directory by setting the <<es-tmpdir,`$ES_TMPDIR`>> environment variable. For
|
|
instance:
|
|
|
|
* If you are running {es} directly from a shell, set `$ES_TMPDIR` as follows:
|
|
+
|
|
["source","sh",subs="attributes"]
|
|
--------------------------------------------
|
|
export ES_TMPDIR=/usr/share/elasticsearch/tmp
|
|
--------------------------------------------
|
|
|
|
* If you are using `systemd` to run {es} as a service, add the following
|
|
line to the `[Service]` section in a <<systemd,service override file>>:
|
|
+
|
|
[source,text]
|
|
--------------------------------------------
|
|
Environment=ES_TMPDIR=/usr/share/elasticsearch/tmp
|
|
--------------------------------------------
|
|
|
|
If you need finer control over the location of these temporary files, you can
|
|
also configure the path that JNA uses with the <<set-jvm-options,JVM flag>>
|
|
`-Djna.tmpdir=<path>` and you can configure the path that `libffi` uses for its
|
|
temporary files by setting the `LIBFFI_TMPDIR` environment variable. Future
|
|
versions of {es} may need additional configuration, so you should prefer to set
|
|
`ES_TMPDIR` wherever possible.
|