elasticsearch6.1.3启动报错，seccomp unavailable

安装完es6.1.3之后，启动报错如下：

[2019-04-10T09:49:57,963][WARN ][o.e.b.JNANatives         ] unable to install syscall filter: 
java.lang.UnsupportedOperationException: seccomp unavailable: CONFIG_SECCOMP not compiled into kernel, CONFIG_SECCOMP and CONFIG_SECCOMP_FILTER are needed
    at org.elasticsearch.bootstrap.SystemCallFilter.linuxImpl(SystemCallFilter.java:341) ~[elasticsearch-6.1.3.jar:6.1.3]
    at org.elasticsearch.bootstrap.SystemCallFilter.init(SystemCallFilter.java:616) ~[elasticsearch-6.1.3.jar:6.1.3]
    at org.elasticsearch.bootstrap.JNANatives.tryInstallSystemCallFilter(JNANatives.java:258) [elasticsearch-6.1.3.jar:6.1.3]
    at org.elasticsearch.bootstrap.Natives.tryInstallSystemCallFilter(Natives.java:113) [elasticsearch-6.1.3.jar:6.1.3]
    at org.elasticsearch.bootstrap.Bootstrap.initializeNatives(Bootstrap.java:109) [elasticsearch-6.1.3.jar:6.1.3]
    at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:171) [elasticsearch-6.1.3.jar:6.1.3]
    at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:322) [elasticsearch-6.1.3.jar:6.1.3]
    at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:121) [elasticsearch-6.1.3.jar:6.1.3]
    at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:112) [elasticsearch-6.1.3.jar:6.1.3]
    at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86) [elasticsearch-6.1.3.jar:6.1.3]
    at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124) [elasticsearch-cli-6.1.3.jar:6.1.3]
    at org.elasticsearch.cli.Command.main(Command.java:90) [elasticsearch-cli-6.1.3.jar:6.1.3]
    at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:92) [elasticsearch-6.1.3.jar:6.1.3]
    at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:85) [elasticsearch-6.1.3.jar:6.1.3]
 

 原因：seccomp是linux kernel从2.6.23版本开始所支持的一种安全机制，详见：https://en.wikipedia.org/wiki/Seccomp
而我的主机操作系统是：CentOS release 6.7 (Final)，虽然CentOS 6.7 Final使用的内核版本为2.6.32-573，但是似乎没有支持seccomp。然而ES默认将利用内核的seccomp机制，所以报错，详见：https://github.com/elastic/elasticsearch/issues/22899

解决方法：在conf/elasticsearch.yml添加bootstrap.system_call_filter: false

附上完整参数：

cluster.name: govnetesv6
node.name: t2s1
node.attr.rack: r1
path.data: /data1/es6/data,/data2/es6/data,/data3/es6/data,/data4/es6/data
path.logs: /var/log/es6/logs
bootstrap.memory_lock: true
network.host: 192.168.1.12
http.port: 9200
transport.tcp.port: 9300
transport.tcp.compress: true
discovery.zen.ping.unicast.hosts: ["t2s1","t2s2","t2s3"]
discovery.zen.minimum_master_nodes: 1
gateway.recover_after_nodes: 1
node.max_local_storage_nodes: 1
action.destructive_requires_name: true
node.master: true
node.data: false
node.ingest: true
http.cors.enabled: true
http.cors.allow-origin: "*"
bootstrap.system_call_filter: false