Elasticsearch requires its temp directory to be mounted as executable (see executable-jna-tmpdir). However, the CIS guidelines (e.g., CIS_Red_Hat_Enterprise_Linux_7_Benchmark_v2.1.1, 1.1.5) recommend mounting /tmp with noexec. Therefore, users of this ansible role may have reason to set elasticsearch's temp dir to a non-default location. (The elasticsearch environment variable ES_TMPDIR gets set to /tmp by default. This PR preserves this default behavior.) |
||
|---|---|---|
| .. | ||
| security | ||
| elasticsearch.j2 | ||
| elasticsearch.repo | ||
| elasticsearch.yml.j2 | ||
| jvm.options.j2 | ||
| override.conf.j2 | ||