Elasticsearch fails to load searchguard plugin after(?) forced restart

Search Guard
1

Hi, I’m having a weird issue when sometimes elasticsearch fails to load searchguard plugin. I believe it fails after I do kill -9 of elasticsearch. And it’s fixed only when I complete remove config & data dir.

I’m running ES 6.5.4 & SG 24.0 inside docker openjdk:8-jre-alpine. I’m using a bit modified version of this image GitHub - khezen/docker-elasticsearch: Elasticsearch Docker image including search-guard. Community version without plugins. 1 node only.

So first start is fine, users work everything works. But if I try to kill process using kill -9 I get those messages after start [2019-01-04T15:15:17,822][INFO ][o.e.e.NodeEnvironment ] [elasticsearch-01] u - Pastebin.com. Erorr is “cannot create instance of org.bouncycastle.jcajce.provider.digest.GOST3411$Mappings : java.security.AccessControlException: access denied (“java.security.SecurityPermission” “putProviderProperty.BC”)” I’ll try to post a debug log a little bit later. But maybe you guys already know what can cause this issue? I’ve tried to google that, but no luck.

2

Update: nope, it’s not related to kill -9 command. Can’t really reliably reproduce this problem and grab logs.

···

On Friday, January 4, 2019 at 5:44:15 PM UTC+2, Nemo Winkins wrote:

Hi, I’m having a weird issue when sometimes elasticsearch fails to load searchguard plugin. I believe it fails after I do kill -9 of elasticsearch. And it’s fixed only when I complete remove config & data dir.

I’m running ES 6.5.4 & SG 24.0 inside docker openjdk:8-jre-alpine. I’m using a bit modified version of this image https://github.com/khezen/docker-elasticsearch. Community version without plugins. 1 node only.

So first start is fine, users work everything works. But if I try to kill process using kill -9 I get those messages after start https://pastebin.com/kqjuV8W9. Erorr is “cannot create instance of org.bouncycastle.jcajce.provider.digest.GOST3411$Mappings : java.security.AccessControlException: access denied (“java.security.SecurityPermission” “putProviderProperty.BC”)” I’ll try to post a debug log a little bit later. But maybe you guys already know what can cause this issue? I’ve tried to google that, but no luck.

3

alpine is not officially supported. Can you try centos:7 as the docker base image?
Seems to be the same thing like X-pack not work in alpine image · Issue #103 · elastic/elasticsearch-docker · GitHub

···

Am 04.01.2019 um 16:44 schrieb Nemo Winkins <god175@gmail.com>:

Hi, I'm having a weird issue when sometimes elasticsearch fails to load searchguard plugin. I believe it fails after I do kill -9 of elasticsearch. And it's fixed only when I complete remove config & data dir.

I'm running ES 6.5.4 & SG 24.0 inside docker openjdk:8-jre-alpine. I'm using a bit modified version of this image https://github.com/khezen/docker-elasticsearch\. Community version without plugins. 1 node only.

So first start is fine, users work everything works. But if I try to kill process using kill -9 I get those messages after start https://pastebin.com/kqjuV8W9\. Erorr is "cannot create instance of org.bouncycastle.jcajce.provider.digest.GOST3411$Mappings : java.security.AccessControlException: access denied ("java.security.SecurityPermission" "putProviderProperty.BC")" I'll try to post a debug log a little bit later. But maybe you guys already know what can cause this issue? I've tried to google that, but no luck.

--
You received this message because you are subscribed to the Google Groups "Search Guard Community Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.
To post to this group, send email to search-guard@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/ad989645-9ad1-42fb-9650-f525bd219843%40googlegroups.com\.
For more options, visit https://groups.google.com/d/optout\.