274

I have an issue with a systemd config for ElasticSearch.

[Unit]
Description=platform-elasticsearch
After=syslog.target network.target remote-fs.target nss-lookup.target

[Service]
User={{ app_user }}
Group={{ app_group }}
Environment=ES_PATH_CONF=/platform/opt/elasticsearch-{{ elasticsearch.version }}/config
Environment=JAVA_HOME=/platform/opt/jdk{{ jdk.major_version }}_{{ jdk.minor_version }}
LimitAS=infinity
LimitRSS=infinity
LimitCORE=infinity
LimitNOFILE=100000
LimitMEMLOCK=100000
StandardOutput=syslog
StandardError=syslog
WorkingDirectory=/platform/var/app/elasticsearch
ExecStart=/platform/opt/elasticsearch-{{ elasticsearch.version }}/bin/elasticsearch
ExecReload=/bin/kill -s HUP $MAINPID
ExecStop=/bin/kill -s -TERM $MAINPID
TimeoutStopSec=60
# When a JVM receives a SIGTERM signal it exits with code 143
SuccessExitStatus=143 0
Type=simple
Restart=on-failure
RestartSec=10
PIDFile=/platform/var/run/elasticsearch.pid

[Install]
WantedBy=multi-user.target

This does not seem to let me configure the vm.max_map_count setting.

Jul 20 14:53:46 scratchpad elasticsearch: [2018-07-20T14:53:46,359][INFO ][o.e.b.BootstrapChecks    ] [1oQJNUK] bound or publishing to a non-loopback     address, enforcing bootstrap checks
Jul 20 14:53:46 scratchpad elasticsearch: ERROR: [1] bootstrap checks failed
Jul 20 14:53:46 scratchpad elasticsearch: [1]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]
Jul 20 14:53:46 scratchpad elasticsearch: [2018-07-20T14:53:46,376][INFO ][o.e.n.Node               ] [1oQJNUK] stopping ...
Jul 20 14:53:46 scratchpad elasticsearch: [2018-07-20T14:53:46,414][INFO ][o.e.n.Node               ] [1oQJNUK] stopped
Jul 20 14:53:46 scratchpad elasticsearch: [2018-07-20T14:53:46,414][INFO ][o.e.n.Node               ] [1oQJNUK] closing ...
Jul 20 14:53:46 scratchpad elasticsearch: [2018-07-20T14:53:46,445][INFO ][o.e.n.Node               ] [1oQJNUK] closed
Jul 20 14:53:46 scratchpad systemd: platform-elasticsearch.service: main process exited, code=exited, status=78/n/a

The specific issue is the following:

Jul 20 14:53:46 scratchpad elasticsearch: [1]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]

I have been able to start elastic search on the commandline with the following:

sudo su -c 'echo 262144 > "/proc/sys/vm/max_map_count"' && \ 
export JAVA_HOME=/platform/opt/jdk1.8.0_181 && \
export ES_PATH_CONF=/platform/opt/elasticsearch-6.3.1/config && \
/platform/opt/elasticsearch-6.3.1/bin/elasticsearch 

can anyone tell me why LimitMEMLOCK=100000 does not work, and how I can effectively set max_map_count from within systemd.

I have also tried to set the following:

cat /etc/security/limits.d/30_elastic_limits.conf

vagrant       hard    nofile     500000
vagrant       hard    memlock     262144

but this seems to be totally ignored by systemd.

22 Answers 22

369

Vivek's answer

sysctl -w vm.max_map_count=262144

is correct, however, the setting will only last for the duration of the session. If the host reboots, the setting will be reset to the original value.

If you want to set this permanently, you need to edit /etc/sysctl.conf and set vm.max_map_count to 262144.

When the host reboots, you can verify that the setting is still correct by running sysctl vm.max_map_count

7
  • 49
    Do not forget to reboot or: sysctl --system
    – hybaken
    Sep 25, 2018 at 8:52
  • 2
    note that if you restart the machine that configuration will be gone, so this method is not permanent. May 5, 2021 at 7:06
  • 1
    This answer, and variations on it, seems to be the most popular answer, but what I don't see is WHERE this command should be executed. I'm trying this in Windows with WSL, and I get the error "sysctl: cannot stat /proc/sys/vm/max_map_count: No such file or directory", as if this argument is being treated like a file or command path, not a parameter being set to a value. I've also tried editing /etc/sysctl.conf in the WSL environment, and using a .wslconfig file in my Windows home directory with kernelCommandLine = "sysctl.vm.max_map_count=262144".
    – kshetline
    Nov 1, 2022 at 19:41
  • 1
    @kshetline this is a Linux-only configuration
    – Val
    Nov 2, 2022 at 5:05
  • 1
    @kshetline does this help: stackoverflow.com/a/63882309/4604579 ?
    – Val
    Nov 2, 2022 at 14:50
208

For MS Windows users, using wsl subsystem

Open powershell, run

wsl -d docker-desktop

then

sysctl -w vm.max_map_count=262144
8
  • 14
    This worked for me on Windows 10 machine. Last step would be to enter exit in order to kick out of wsl. Oct 6, 2021 at 18:51
  • 1
    worked just fine, thank you very much! pitty I had to copy the command to power shell
    – thevoyager
    Dec 2, 2021 at 18:21
  • 4
    This doesn't seem to be a "sticky" change in Docker Desktop -- you have to run the command every time you restart Docker, which is really obnoxious.
    – Mr. T
    Dec 3, 2021 at 15:39
  • 9
    To persist the change, you can add vm.max_map_count = 262144 to /etc/sysctl.conf Apr 20, 2022 at 9:31
  • 3
    Persisting the change in /etc/sysctl.conf doesn't seem to work long-term, but stackoverflow.com/a/71743053/9913 does.
    – Jedidja
    Aug 19, 2022 at 12:07
117

Insert the new entry into the /etc/sysctl.conf file with the required parameter:

vm.max_map_count = 262144

it make changes permanent.

Also run:

sysctl -w vm.max_map_count=262144

change current state of kernel.

If you use docker to take effect you should restart it:

systemctl restart docker
4
  • if you are not root user you should make sure you have sudo right and use sudo before execute above. Jan 8, 2021 at 6:52
  • 3
    if you use docker-compose to run containers on host, you can also run this command sysctl -w vm.max_map_count=262144 with root privilege to solve this problem. Feb 23, 2021 at 2:29
  • 2
    Use sysctl vm.max_map_count=262144 (iwithout -w) and this way the change is available only till shutdown of OS. It is a dev machine. So, i did not want to change permanently.
    – nashter
    Jun 22, 2021 at 15:59
  • this also works for Kubernetes if anyone is wondering, just run int on all of your nodes, maybe cordon and drain each first though.
    – MikeSchem
    Jul 21, 2022 at 20:19
55

See the Elasticsearch documentation about virtual memory. On Centos you can do with following command:

sysctl -w vm.max_map_count=262144
32

You can also resolve the memory constraint issue by using single-node discovery type. Set this in the environment: discovery.type=single-node

docker-compose.yml

services:
  es:
    image: elasticsearch
    environment:
      - discovery.type=single-node

See also:

28

This is not an answer per se but a clarification/shortcut for anyone having the op's problem from a docker container perspective. I had this problem from an application running in a docker container. And as explained here by nishant

You don’t need to increase the virtual memory for Elasticsearch at the container level, you can do it for the host machine by running this command:

sudo sysctl -w vm.max_map_count=262144

and then restart your docker-containers.

As explained by val above setting this max_map_count this way won't persist upon the restart of the machine on which is running the docker container. and so you will need to save it in a more persistent manner as explained by him above.

23

I ran into the same issue for the single node elastic search cluster. As perelastic-search documentation, for running single node, you have use "discovery.type=single-node" in the docker run command.

docker run -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" docker.elastic.co/elasticsearch/elasticsearch:7.13.3

In docker-compose.yml, you can specif below:

version: '3.1'
services:
 elastic_search:
  image: docker.elastic.co/elasticsearch/elasticsearch:7.13.3
  container_name: es01
  environment:
   - discovery.type=single-node
   - node.name=es01
   - bootstrap.memory_lock=true
   - "ES_JAVA_OPTS=-Xms512m -Xmx512m"
  ports:
   - 9200:9200
  networks:
   - elastic
networks:
 elastic:
21

For WSL, you can create config file (.wslconfig) at:

C:\Users\[your user]\.wslconfig

and put in it:

[wsl2]
kernelCommandLine = "sysctl.vm.max_map_count=262144"

So that you do not have to set max_map_count every time you restart PC

1
  • maybe I'm missing something since this doesn't work in my win 11
    – frank
    Jan 2 at 2:00
10

Please run the following command: sysctl -w vm.max_map_count=262144 to increase the default virtual memory used by the Elasticsearch.

Note: When you run the above-mentioned command your problem will get resolved but, this will be a temporary solution as node/system/container gets restart your changes will go. So if you want to set this permanently, you need to edit /etc/sysctl.conf and set vm.max_map_count to 262144.

For more detail click here.

5

This worked for me.

 sysctl -w vm.max_map_count=262144
3

According to this answer, you can run:

sudo sysctl -w vm.max_map_count=262144

Just run the following command to see the value changed:

sysctl vm.max_map_count
2

vm.max_map_count=262144

Add this line in to below path

vim /etc/sysctl.conf

or go to this link https://www.elastic.co/guide/en/elasticsearch/reference/current/vm-max-map-count.html

2
  • 1
    What is the additional insight which your post provides in addition to existing answer? Especially compared to the most upvoted answer and the one it refers to. Try to avoid the impression that you create answers by using info from other answers to the same question, especially when even the summary is already there...
    – Yunnosch
    Nov 12, 2021 at 6:28
  • As it’s currently written, your answer is unclear. Please edit to add additional details that will help others understand how this addresses the question asked. You can find more information on how to write good answers in the help center.
    – Community Bot
    Nov 12, 2021 at 6:28
2

I am using mac m1,

Just added SONAR_ES_BOOTSTRAP_CHECKS_DISABLE: true to the environment section of sonarqube image.

sonarqube:
  image: sonarqube:community
  hostname: sonarqube
  container_name: sonarqube
  depends_on:
    - db
  environment:
    SONAR_JDBC_URL: jdbc:postgresql://db:5432/sonar
    SONAR_ES_BOOTSTRAP_CHECKS_DISABLE: true
1

Max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144].
Please run the command below to fix this issue:

sysctl -w vm.max_map_count=262144
1

You might also set node.store.allow_mmap: false.

However, this setting has memory implications for production workloads as mentioned here. It helped me to deploy Elasticsearch 8.4.0 in a minikube kubernetes cluster using the elastic operator.

1

To do this with docker (docker-compose) you use something like:

ulimits:
  memlock:
    soft: -1
    hard: -1

to remove limits - it should be in docker not the host machine..

0

In case anyone is on elasticsearch 8.0 with kubernetes ECK operator.

Set runAsUser: 0

elastic/cloud-on-k8s#5410 (comment)

Starting with 8.0 Elasticsearch container is not running as root anymore, which is required to run sysctl. You can add runAsUser: 0 to force the init container to run as root

0

if you are using yml file

apiVersion: elasticsearch.k8s.elastic.co/v1
kind: Elasticsearch
metadata:
  name: prod
spec:
  version: 8.6.0
  nodeSets:
    - name: master-nodes
      count: 3
      config:
        node.roles: ["master"]
      podTemplate:
        spec:
          initContainers:
            - name: sysctl
              securityContext:
                privileged: true
                runAsUser: 0
              command: ["sh", "-c", "sysctl -w vm.max_map_count=262144"]
      volumeClaimTemplates:
        - metadata:
            name: elasticsearch-data
          spec:
            accessModes:
              - ReadWriteOnce
            resources:
              requests:
                storage: 10Gi
            storageClassName: standard
    - name: data-nodes
      count: 10
      config:
        node.roles: ["data"]
      podTemplate:
        spec:
          initContainers:
            - name: sysctl
              securityContext:
                privileged: true
                runAsUser: 0
              command: ["sh", "-c", "sysctl -w vm.max_map_count=262144"]
      volumeClaimTemplates:
        - metadata:
            name: elasticsearch-data
          spec:
            accessModes:
              - ReadWriteOnce
            resources:
              requests:
                storage: 100Gi
            storageClassName: standard
0

Val's answer is correct however I would like to say there's a chance that your system does not use /etc/sysctl.conf instead uses /etc/sysctl.d/ (source). You could make a file inside /etc/sysctl.d/ (maybe called container.conf) and pass in the configurations into it

vm.max_map_count = 262144

and then reboot.

0

For Rancher Desktop users (I'm using Windows), enter Rancher Desktop shell:

rdctl shell

Then:

sysctl -w vm.max_map_count=262144

Then restart Rancher Desktop for the changes to take effects:

rdctl shutdown

&

rdctl start
-1

this will make changing now, and always work even if you reboot the device

echo 'vm.max_map_count=262144' | sudo tee -a /etc/sysctl.conf;sudo sysctl -w vm.max_map_count=262144

1
  • A code-only answer is not high quality. While this code may be useful, you can improve it by saying why it works, how it works, when it should be used, and what its limitations are. Please edit your answer to include explanation and link to relevant documentation. Dec 10, 2022 at 10:30
-3

If you're using Rancher Desktop in macOS to work with images that for instance use ElasticSearch you can do the following:

Create override.yaml file at ~/Library/Application Support/rancher-desktop/lima/_config/override.yaml. Add the following to override.yaml:

provision:
- mode: system
  script: sysctl -w vm.max_map_count=262144 

Lastly, please stop and restart Rancher Desktop in order for the updated limits to take effect.

The original source for this solution is: https://docs.rancherdesktop.io/how-to-guides/increasing-open-file-limit/

1

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.