linux上安装elasticsearch

一、创建新用户并给用户添加密码

adduser elastic
passwd elastic

二、linux9下载解压elasticsearch安装包（需要用新建的账号来下载，避免没有权限的问题）

wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-9.0.1-linux-x86_64.tar.gz
tar -xzf elasticsearch-9.0.1-linux-x86_64.tar.gz

三、配置环境变量

# 设置用户级别环境变量
vim .bash_profile

# 设置ES_JAVA_HOME ES_HOME路径
export ES_JAVA_HOME=/home/xxx/elasticsearch-9.0.1/jdk
export ES_HOME=/home/xxx/elasticsearch-9.0.1

# 执行命令更新
source .bash_profile

四、修改elasticsearch配置文件

cd /home/xxx/elasticsearch-9.0.1/config/
network.host: 0.0.0.0
path.data: /home/xxx/elasticsearch-9.0.1/data
path.logs: /home/xxx/elasticsearch-9.0.1/logs
discovery.type: single-node
http.port: 9200
http.cors.enabled: true
http.cors.allow-origin: "*"
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.client_authentication: required
xpack.security.transport.ssl.keystore.path: elastic-certificates.p12
xpack.security.transport.ssl.truststore.path: elastic-certificates.p12

vim jvm.options
# 设置jvm堆内存大小
-Xms 4g
-Xmx 4g

五、启动

cd ../
bin/elasticsearch -d

 六、启动服务常见错误

1、max file descriptors xxx process to low，es需要大量创建索引文件，需要大量的打开系统的文件，所以需要解除linux当中打开最大数目的限制

使用root用户

vim /etc/security/limits.conf
# 添加配置
* soft nofile 65536
* hard nofile 65536
* soft nproc 4096
* hard nproc 4096

2、max number ofthreads xxx too low，无法创建本地线程问题，用户最大可能创建线程数太小

vim /etc/security/limits.d/20-bproc.conf
# 修改配置
* soft nproc 4096

3、max virtual memory areas xxx to low，最大虚拟内存太小，跳大系统的虚拟内存

vim /etc/sysctl.conf
# 增加配置
vm.max_map_count=262144
# 保存后执行命令
sysctl -p

4、the default discovery settings are unsuitable for production use xxx，缺少默认配置，至少需要配置discovery.seed_hosts/discovery.seed_providers、discovery.seed_providers、cluster.initial_master_nodes中的一个参数

discovery.seed_hosts：集群主机列表

discovery.seed_providers：基于配置文件配置集群主机列表

cluster.initial_master_nodes：启动时初始化的参与选主的node，生产环境必填

vim elasticsearch.yml
# 集群配置
discovery.seed_hosts: ["127.0.0.0"]
cluster.initial_master_nodes: ["node-1"]

# 单点配置
discovery.type: single-node

 七、生成证书

添加密钥库

bin/elasticsearch-keystore create

生成CA证书

bin/elasticsearch-certutil ca

生成transport证书

bin/elasticsearch-certutil cert --ca elastic-stack-ca.p12

复制证书到config文件夹下

cp elastic-certificates.p12 config/
cp elastic-stack-ca.p12 config/

修改密码

./bin/elasticsearch-setup-passwords interactive