search

wazuh / wazuh-kubernetes

Wazuh - Wazuh Kubernetes
https://wazuh.com/
GNU General Public License v2.0
270 stars 166 forks source link

chroot error on start es pod #112

Closed AdamWyzgol closed 4 years ago

AdamWyzgol commented 4 years ago

I just install wazuh on new kubernetes cluster, on ES I have in logs error: chroot: cannot change root directory to /: Operation not permitted This occures only on this pod, I tried also older versions of image, there was the same problem. Where could be the issue?

AdamWyzgol commented 4 years ago

after adding to container definition: securityContext: runAsUser: 1000 it starts working, the same problem I had after changed image to base elasticsearch image. I foud that resolution after read this https://github.com/elastic/helm-charts/issues/357#issuecomment-553371078 maybe it help someone.

xr09 commented 4 years ago

Hi @AdamWyzgol,

I'm trying to emulate this error. Could you share more details about your Kubernetes environment (minikube, EKS, GKE, etc) and the exact steps you followed for the deployment?

AdamWyzgol commented 4 years ago

I have some more details, the same error occure on manager pods. I think it could be related with CRI-o based cluster. It is custom installation from kubeadm, latest version of k8s and crio. All is based on CentOS 8, SeLinux is enabled but disabling it give the same result.

AdamWyzgol commented 4 years ago

I found this https://github.com/opendistro-for-elasticsearch/opendistro-build/issues/167 it is probalby the issue when apply this fix it works

xr09 commented 4 years ago

Thanks for the PR we'll give it a look soon.

xr09 commented 4 years ago

Fixed by #113