Readonlyrest for elastic won't start (1.18.8_es6.8.1)

I have to check it …

@lucette great analysis, thanks for reporting back about this. It’s very weird indeed and worth investigating.

I saw that you released a new 1.22 ROR version but I don’t see hints of a fix for the startup problem, did you manage to fix it ?
Thanks

@lucette sorry not yet. But the task is in a current sprint backlog

we are waiting on this fix, please let us know when this will be avaialble!

Thanks

Hi, I have reproduced and checked this issue with build 25.262-b10 and couldn’t find any solution yet. However I’ve found that there is newer version of openjdk 25.265-b01, available for example here https://github.com/AdoptOpenJDK/openjdk8-binaries/releases/tag/jdk8u265-b01. The issue doesn’t show up on 25.265-b01 on my machine and ROR works without any problems. Can you check this version and possibly migrate to it? I don’t know what’s causing permission problem with 25.262-b10, but it doesn’t work even with this policy setting permission java.security.AllPermission;

Hi,
My OS is RedHat 7.8 and the last openjdk version proposed my yum is 262.b10.
265.b01 is not available.
I am not authorized to install a non yum officially available version.
And I won’t be able to keep forever on 262.b09 old java version.
This is thus blocking.
Do you know if openjdk 265.b01 will become officially availble through yum for redhat 7 ?
Thanks

@lucette here a prebuild for you:

https://readonlyrest-data.s3.amazonaws.com/build/1.23.0-pre6/readonlyrest-1.23.0-pre6_es6.8.1.zip?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIA5SJIWBO54AGBERLX/20200910/eu-west-1/s3/aws4_request&X-Amz-Date=20200910T133851Z&X-Amz-Expires=604800&X-Amz-SignedHeaders=host&X-Amz-Signature=05eec8d279408dce9805287d4b74caccfbb290a78e42366adc43841523ae5bb1

Let us know if it works for you

@Vinod what ES version do you use?

@coutoPL we are on elastic search 7.8.1

so this one is for you:

https://readonlyrest-data.s3.amazonaws.com/build/1.23.0-pre6/readonlyrest-1.23.0-pre6_es7.8.1.zip?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIA5SJIWBO54AGBERLX/20200910/eu-west-1/s3/aws4_request&X-Amz-Date=20200910T141758Z&X-Amz-Expires=604800&X-Amz-SignedHeaders=host&X-Amz-Signature=a0d6deddec453d92957fd8cff478e0008c06748c0226a07c9f2fd597dee94fac

thanks will try and let you know.

Seeing this error now
[2020-09-11T06:06:11,821][INFO ][t.b.r.b.EsInitListener ] [localhost.domain] ES fully initiated. ReadonlyREST can continue …
[2020-09-11T06:06:11,998][INFO ][t.b.r.c.RorSsl$ ] [localhost.domain] Cannot find SSL configuration in elasticsearch.yml, trying: /etc/elasticsearch/bbdevqa/readonlyrest.yml
[2020-09-11T06:06:12,034][INFO ][t.b.r.b.Ror ] [localhost.domain] [CLUSTERWIDE SETTINGS] Loading ReadonlyREST settings from index …
[2020-09-11T06:06:12,048][WARN ][stderr ] [localhost.domain] java.security.AccessControlException: access denied (“java.lang.RuntimePermission” “modifyThreadGroup”)
[2020-09-11T06:06:12,048][WARN ][stderr ] [localhost.domain] at java.security.AccessControlContext.checkPermission(AccessControlContext.java:472)
[2020-09-11T06:06:12,048][WARN ][stderr ] [localhost.domain] at java.security.AccessController.checkPermission(AccessController.java:886)
[2020-09-11T06:06:12,048][WARN ][stderr ] [localhost.domain] at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
[2020-09-11T06:06:12,048][WARN ][stderr ] [localhost.domain] at org.elasticsearch.secure_sm.SecureSM.checkThreadGroupAccess(SecureSM.java:192)
[2020-09-11T06:06:12,049][WARN ][stderr ] [localhost.domain] at org.elasticsearch.secure_sm.SecureSM.checkAccess(SecureSM.java:147)
[2020-09-11T06:06:12,049][WARN ][stderr ] [localhost.domain] at java.lang.ThreadGroup.checkAccess(ThreadGroup.java:315)
[2020-09-11T06:06:12,049][WARN ][stderr ] [localhost.domain] at java.lang.Thread.init(Thread.java:394)
[2020-09-11T06:06:12,049][WARN ][stderr ] [localhost.domain] at java.lang.Thread.init(Thread.java:349)
[2020-09-11T06:06:12,049][WARN ][stderr ] [localhost.domain] at java.lang.Thread.(Thread.java:464)
[2020-09-11T06:06:12,049][WARN ][stderr ] [localhost.domain] at monix.execution.schedulers.ThreadFactoryBuilder$$anon$1.newThread(ThreadFactoryBuilder.scala:34)
[2020-09-11T06:06:12,049][WARN ][stderr ] [localhost.domain] at java.util.concurrent.ThreadPoolExecutor$Worker.(ThreadPoolExecutor.java:619)
[2020-09-11T06:06:12,049][WARN ][stderr ] [localhost.domain] at java.util.concurrent.ThreadPoolExecutor.addWorker(ThreadPoolExecutor.java:932)
[2020-09-11T06:06:12,049][WARN ][stderr ] [localhost.domain] at java.util.concurrent.ThreadPoolExecutor.ensurePrestart(ThreadPoolExecutor.java:1603)
[2020-09-11T06:06:12,049][WARN ][stderr ] [localhost.domain] at java.util.concurrent.ScheduledThreadPoolExecutor.delayedExecute(ScheduledThreadPoolExecutor.java:334)
[2020-09-11T06:06:12,049][WARN ][stderr ] [localhost.domain] at java.util.concurrent.ScheduledThreadPoolExecutor.schedule(ScheduledThreadPoolExecutor.java:533)
[2020-09-11T06:06:12,050][WARN ][stderr ] [localhost.domain] at java.util.concurrent.ScheduledThreadPoolExecutor.execute(ScheduledThreadPoolExecutor.java:622)
[2020-09-11T06:06:12,050][WARN ][stderr ] [localhost.domain] at monix.execution.internal.ScheduledExecutors$.scheduleOnce(ScheduledExecutors.scala:34)
[2020-09-11T06:06:12,050][WARN ][stderr ] [localhost.domain] at monix.execution.schedulers.AsyncScheduler.scheduleOnce(AsyncScheduler.scala:44)
[2020-09-11T06:06:12,050][WARN ][stderr ] [localhost.domain] at monix.eval.internal.TaskSleep$Register.apply(TaskSleep.scala:49)
[2020-09-11T06:06:12,050][WARN ][stderr ] [localhost.domain] at monix.eval.internal.TaskSleep$Register.apply(TaskSleep.scala:39)
[2020-09-11T06:06:12,050][WARN ][stderr ] [localhost.domain] at monix.eval.internal.TaskRestartCallback.start(TaskRestartCallback.scala:58)
[2020-09-11T06:06:12,050][WARN ][stderr ] [localhost.domain] at monix.eval.internal.TaskRunLoop$.executeAsyncTask(TaskRunLoop.scala:592)
[2020-09-11T06:06:12,050][WARN ][stderr ] [localhost.domain] at monix.eval.internal.TaskRunLoop$.startFull(TaskRunLoop.scala:120)
[2020-09-11T06:06:12,050][WARN ][stderr ] [localhost.domain] at monix.eval.internal.TaskRestartCallback.syncOnSuccess(TaskRestartCallback.scala:101)
[2020-09-11T06:06:12,050][WARN ][stderr ] [localhost.domain] at monix.eval.internal.TaskRestartCallback.onSuccess(TaskRestartCallback.scala:74)
[2020-09-11T06:06:12,051][WARN ][stderr ] [localhost.domain] at monix.execution.Callback.apply(Callback.scala:116)
[2020-09-11T06:06:12,051][WARN ][stderr ] [localhost.domain] at monix.eval.internal.TaskFromFuture$.$anonfun$startSimple$1(TaskFromFuture.scala:112)
[2020-09-11T06:06:12,051][WARN ][stderr ] [localhost.domain] at monix.eval.internal.TaskFromFuture$.$anonfun$startSimple$1$adapted(TaskFromFuture.scala:111)
[2020-09-11T06:06:12,051][WARN ][stderr ] [localhost.domain] at scala.concurrent.impl.CallbackRunnable.run(Promise.scala:64)
[2020-09-11T06:06:12,051][WARN ][stderr ] [localhost.domain] at java.util.concurrent.ForkJoinTask$RunnableExecuteAction.exec(ForkJoinTask.java:1402)
[2020-09-11T06:06:12,051][WARN ][stderr ] [localhost.domain] at java.util.concurrent.ForkJoinTask.doExec(ForkJoinTask.java:289)
[2020-09-11T06:06:12,051][WARN ][stderr ] [localhost.domain] at java.util.concurrent.ForkJoinPool$WorkQueue.runTask(ForkJoinPool.java:1056)
[2020-09-11T06:06:12,051][WARN ][stderr ] [localhost.domain] at java.util.concurrent.ForkJoinPool.runWorker(ForkJoinPool.java:1692)
[2020-09-11T06:06:12,051][WARN ][stderr ] [localhost.domain] at java.util.concurrent.ForkJoinWorkerThread.run(ForkJoinWorkerThread.java:163)

Hi, I tried to add modifyThreadGroup permission to ROR plugin, but it haven’t fixed anything. I will dig it further, but I have found workaround if you are loading your config only from file. Please add this line readonlyrest.force_load_from_file: true to your elasticsearch.yml. Let me know if it worked.

@Vinod please check out this version:

https://readonlyrest-data.s3.amazonaws.com/build/1.23.0-pre9/readonlyrest-1.23.0-pre9_es7.8.1.zip?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIA5SJIWBO54AGBERLX/20200918/eu-west-1/s3/aws4_request&X-Amz-Date=20200918T150504Z&X-Amz-Expires=604800&X-Amz-SignedHeaders=host&X-Amz-Signature=db1f001e65927096f6f7ea2ba8248e4324493ee41e6cf99f7bd86be813bea3d1

Hi,
Official 1.23.0 works like a charm.
Thank you very much !

2 Likes