JDK-8272124 : Cgroup v1 initialization causes NullPointerException when cgroup path contains colon
  • Type: Bug
  • Component: hotspot
  • Sub-Component: runtime
  • Affected Version: openjdk8u312,11.0.12,16
  • Priority: P3
  • Status: Closed
  • Resolution: Fixed
  • OS: linux
  • CPU: x86_64
  • Submitted: 2021-08-04
  • Updated: 2022-05-05
  • Resolved: 2021-08-18
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 11 JDK 17 JDK 18 Other
11.0.13Fixed 17.0.1Fixed 18 b11Fixed openjdk8u312Fixed
Related Reports
Relates :  
Description
ADDITIONAL SYSTEM INFORMATION :
Flatcar linux, Kubernetes, Java 16

A DESCRIPTION OF THE PROBLEM :
Cgroup initialization goes through two steps, first in finding the mount points from /proc/self/mountinfo, and then reading cgroup subsystem paths from /proc/self/cgroup. The latter file is a line based text file with 3 fields, split by colon.

This is currently parsed in the jdk with a bare split (https://github.com/openjdk/jdk/blob/739769c8fc4b496f08a92225a12d07414537b6c0/src/java.base/linux/classes/jdk/internal/platform/CgroupSubsystemFactory.java#L197). However, that split needs to have a limit of 2 set, so that the cgroupPath (the third element) may contain colon.

When the cgroupPath contains a colon, the extra portions of the path is silently thrown away. When the subsystem's path element is initialized (https://github.com/openjdk/jdk/blob/739769c8fc4b496f08a92225a12d07414537b6c0/src/java.base/linux/classes/jdk/internal/platform/cgroupv1/CgroupV1SubsystemController.java#L45) it falls through, failing the prefix checks, and leaving path as null (perhaps an assertion should exist to ensure path is not null there). Finally, when any configuration file for the subsystem is attempted to be read, eg memory.is_hierarchy, Paths.get(path) is called and an NPE is thrown.

Additional investigation details can be found in https://github.com/kubernetes/kubernetes/issues/103944 and https://github.com/elastic/elasticsearch/issues/75767.

REGRESSION : Last worked in version 12


FREQUENCY : always



Comments
No verification from the submitter.
23-09-2021

Request the submitter verify the fix by downloading the latest version of JDK 18 from https://jdk.java.net/18/
31-08-2021

Fix Request (OpenJDK 8u): The issue is present in OpenJDK 8u too, but manifests differently. No NPE is being thrown when used on those systems, but instead the metrics won't get reported correctly. See the JDK 11u backport bug how it manifests. The JDK 11u fix applies cleanly to 8u after path unshuffeling. Testing: passes the manual reproducer post patch. Container tests continue to pass.
27-08-2021

Fix Request (OpenJDK 11u): The issue is present in OpenJDK 11u too, but manifests differently. No NPE is being thrown when used on those systems, but instead the metrics won't get reported correctly. See the explicit backport bug how it manifests. The 11u fix is different to the JDK 18/17 version since it doesn't have the cgroups v2 code and the test infrastructure is missing. The backport patch is also more defensive in that it only applies the filter if the tokens are >= 3 as it's not clear if there are any systems out there in the wild with less than 3 tokens in /proc/self/cgroup. As such, the backport should be low risk (same code as before, but the returned tokens array has length at most 3). Testing: container tests and manual reproducer. Both pass. 11u patch has been reviewed by Aleksey Shipilev. RFR: https://git.openjdk.java.net/jdk11u-dev/pull/292
26-08-2021

I've managed to reproduce this issue with (for sake of backporting): $ sudo podman --cgroup-manager=cgroupfs run --cgroup-parent="/opt/foo/bar:baz" -v /disk/openjdk/builds/jdk-17-ea+33:/opt/jdk:z --rm -ti fedora:34 [root@a69b46cd05ef /]# grep cgroup /proc/self/mountinfo | grep memory 1902 1893 0:34 /opt/foo/bar:baz/libpod-a69b46cd05ef3fd6ae2d8023066be581ca1a84cabab0436a892319fd250fa4c9 /sys/fs/cgroup/memory ro,nosuid,nodev,noexec,relatime - cgroup cgroup rw,seclabel,memory [root@a69b46cd05ef /]# grep memory /proc/self/cgroup 4:memory:/opt/foo/bar:baz/libpod-a69b46cd05ef3fd6ae2d8023066be581ca1a84cabab0436a892319fd250fa4c9 [root@a69b46cd05ef /]# /opt/jdk/bin/java -XshowSettings:system -version Exception in thread "main" java.lang.NullPointerException at java.base/java.util.Objects.requireNonNull(Objects.java:208) at java.base/sun.nio.fs.UnixFileSystem.getPath(UnixFileSystem.java:263) at java.base/java.nio.file.Path.of(Path.java:147) at java.base/java.nio.file.Paths.get(Paths.java:69) at java.base/jdk.internal.platform.CgroupUtil.lambda$readStringValue$1(CgroupUtil.java:67) at java.base/java.security.AccessController.doPrivileged(AccessController.java:569) at java.base/jdk.internal.platform.CgroupUtil.readStringValue(CgroupUtil.java:69) at java.base/jdk.internal.platform.CgroupSubsystemController.getStringValue(CgroupSubsystemController.java:65) at java.base/jdk.internal.platform.CgroupSubsystemController.getLongValue(CgroupSubsystemController.java:124) at java.base/jdk.internal.platform.cgroupv1.CgroupV1Subsystem.getLongValue(CgroupV1Subsystem.java:175) at java.base/jdk.internal.platform.cgroupv1.CgroupV1Subsystem.getHierarchical(CgroupV1Subsystem.java:149) at java.base/jdk.internal.platform.cgroupv1.CgroupV1Subsystem.initSubSystem(CgroupV1Subsystem.java:84) at java.base/jdk.internal.platform.cgroupv1.CgroupV1Subsystem.getInstance(CgroupV1Subsystem.java:60) at java.base/jdk.internal.platform.CgroupSubsystemFactory.create(CgroupSubsystemFactory.java:116) at java.base/jdk.internal.platform.CgroupMetrics.getInstance(CgroupMetrics.java:167) at java.base/jdk.internal.platform.SystemMetrics.instance(SystemMetrics.java:29) at java.base/jdk.internal.platform.Metrics.systemMetrics(Metrics.java:58) at java.base/jdk.internal.platform.Container.metrics(Container.java:43) at java.base/sun.launcher.LauncherHelper.printSystemMetrics(LauncherHelper.java:318) at java.base/sun.launcher.LauncherHelper.showSettings(LauncherHelper.java:173)
24-08-2021

I don't think this is a regression. It appears to be present since the code was added with JDK-8203357. I see the same problematic split in latest OpenJDK 11u: https://github.com/openjdk/jdk11u-dev/blob/8f402b26c164241b0ac705a5c42c80c646872fe7/src/java.base/linux/classes/jdk/internal/platform/cgroupv1/Metrics.java#L119 So I'm not sure why it would work for JDK 12. Edit: It probably works in old not-updated JDK 12 since the OperatingSystemMXBean hasn't been made container aware there (a JDK 14 feature and backported to 11u and 8u). See JDK-8226575
23-08-2021

Changeset: 4d6593ce Author: Harold Seigel <hseigel@openjdk.org> Date: 2021-08-18 14:24:58 +0000 URL: https://git.openjdk.java.net/jdk/commit/4d6593ce0243457e7431a5990957a8f880e0a3fb
18-08-2021

The equivalent HotSpot code doesn't seem affected as strsep(&p, '\n') is being used for the last field: https://github.com/openjdk/jdk/blob/739769c8fc4b496f08a92225a12d07414537b6c0/src/hotspot/os/linux/cgroupSubsystem_linux.cpp#L215
17-08-2021

From "man cgroups": =========================================== /proc/[pid]/cgroup (since Linux 2.6.24) This file describes control groups to which the process with the corresponding PID belongs. The displayed information differs for cgroups version 1 and version 2 hierarchies. For each cgroup hierarchy of which the process is a member, there is one entry containing three colon-separated fields: hierarchy-ID:controller-list:cgroup-path For example: 5:cpuacct,cpu,cpuset:/daemons The colon-separated fields are, from left to right: 1. For cgroups version 1 hierarchies, this field contains a unique hierarchy ID number that can be matched to a hierarchy ID in /proc/cgroups. For the cgroups version 2 hierarchy, this field contains the value 0. 2. For cgroups version 1 hierarchies, this field contains a comma-separated list of the controllers bound to the hierarchy. For the cgroups version 2 hierarchy, this field is empty. 3. This field contains the pathname of the control group in the hierarchy to which the process belongs. This pathname is relative to the mount point of the hierarchy. ================================= Note "[...] there is one entry containing three colon-separated fields" bit.
17-08-2021

This is *not* a duplicate of JDK-8239559. Removing the link. Why? JDK-8239559 is about to cgroup controllers mounted on a cgroup v1 system. This bug is about ":" in the third field in /proc/self/cgroup, i.e. the cgroup path.
17-08-2021

The issue is being caused by a parsing error of /proc/self/cgroup. This, in turn, causes the path setting logic in CgroupV1SubsystemController to fail. The 'path' instance variable is never set to anything, because "/".equals(root) is false and root.equals(cgroupPath) is false as well. Then the branch cgroupPath.startsWith(root) is taken for values root == "/system.slice/containerd.service/kubepods-burstable-podf65e797d_d5f9_4604_9773_94f4bb9946a0.slice:cri-containerd:86ac6260f9f8a9c1276748250f330ae9c2fcefe5ae809364ad1e45f3edf7e08a" and cgroupPath == "/system.slice/containerd.service/kubepods-burstable-podf65e797d_d5f9_4604_9773_94f4bb9946a0.slice". Thus, expression cgroupPath.startsWith(root) evaluates to false and 'path' is never set. CgroupV1SubsystemController.setPath() looks like this: public void setPath(String cgroupPath) { if (root != null && cgroupPath != null) { if (root.equals("/")) { if (!cgroupPath.equals("/")) { path = mountPoint + cgroupPath; } else { path = mountPoint; } } else { if (root.equals(cgroupPath)) { path = mountPoint; } else { if (cgroupPath.startsWith(root)) { if (cgroupPath.length() > root.length()) { String cgroupSubstr = cgroupPath.substring(root.length()); path = mountPoint + cgroupSubstr; } } } } } } The expected branch should have been 'if (root.equals(cgroupPath))', which is true after the patch, thus 'path' gets set to value 'mountPoint'.
17-08-2021

Strack trace on an affected system: Caused by: java.lang.NullPointerException at java.base/java.util.Objects.requireNonNull(Objects.java:208) at java.base/sun.nio.fs.UnixFileSystem.getPath(UnixFileSystem.java:260) at java.base/java.nio.file.Path.of(Path.java:147) at java.base/java.nio.file.Paths.get(Paths.java:69) at java.base/jdk.internal.platform.CgroupUtil.lambda$readStringValue$1(CgroupUtil.java:66) at java.base/java.security.AccessController.doPrivileged(AccessController.java:554) at java.base/jdk.internal.platform.CgroupUtil.readStringValue(CgroupUtil.java:68) at java.base/jdk.internal.platform.CgroupSubsystemController.getStringValue(CgroupSubsystemController.java:65) at java.base/jdk.internal.platform.CgroupSubsystemController.getLongValue(CgroupSubsystemController.java:124) at java.base/jdk.internal.platform.cgroupv1.CgroupV1Subsystem.getLongValue(CgroupV1Subsystem.java:272) at java.base/jdk.internal.platform.cgroupv1.CgroupV1Subsystem.getHierarchical(CgroupV1Subsystem.java:218) at java.base/jdk.internal.platform.cgroupv1.CgroupV1Subsystem.setPath(CgroupV1Subsystem.java:201) at java.base/jdk.internal.platform.cgroupv1.CgroupV1Subsystem.setSubSystemControllerPath(CgroupV1Subsystem.java:173) at java.base/jdk.internal.platform.cgroupv1.CgroupV1Subsystem.lambda$initSubSystem$5(CgroupV1Subsystem.java:113) at java.base/java.util.stream.ForEachOps$ForEachOp$OfRef.accept(ForEachOps.java:183) at java.base/java.util.stream.ReferencePipeline$2$1.accept(ReferencePipeline.java:179) at java.base/java.util.stream.ReferencePipeline$3$1.accept(ReferencePipeline.java:197) at java.base/java.util.Iterator.forEachRemaining(Iterator.java:133) at java.base/java.util.Spliterators$IteratorSpliterator.forEachRemaining(Spliterators.java:1801) at java.base/java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:484) at java.base/java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:474) at java.base/java.util.stream.ForEachOps$ForEachOp.evaluateSequential(ForEachOps.java:150) at java.base/java.util.stream.ForEachOps$ForEachOp$OfRef.evaluateSequential(ForEachOps.java:173) at java.base/java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234) at java.base/java.util.stream.ReferencePipeline.forEach(ReferencePipeline.java:596) at java.base/jdk.internal.platform.cgroupv1.CgroupV1Subsystem.initSubSystem(CgroupV1Subsystem.java:113) at java.base/jdk.internal.platform.cgroupv1.CgroupV1Subsystem.<clinit>(CgroupV1Subsystem.java:47)
17-08-2021

Relevant files on the affected system: /proc/self/cgroup: 11:cpuset:/kubepods-burstable-podf65e797d_d5f9_4604_9773_94f4bb9946a0.slice:cri-containerd:86ac6260f9f8a9c1276748250f330ae9c2fcefe5ae809364ad1e45f3edf7e08a 10:hugetlb:/kubepods-burstable-podf65e797d_d5f9_4604_9773_94f4bb9946a0.slice:cri-containerd:86ac6260f9f8a9c1276748250f330ae9c2fcefe5ae809364ad1e45f3edf7e08a 9:cpu,cpuacct:/system.slice/containerd.service/kubepods-burstable-podf65e797d_d5f9_4604_9773_94f4bb9946a0.slice:cri-containerd:86ac6260f9f8a9c1276748250f330ae9c2fcefe5ae809364ad1e45f3edf7e08a 8:devices:/system.slice/containerd.service/kubepods-burstable-podf65e797d_d5f9_4604_9773_94f4bb9946a0.slice:cri-containerd:86ac6260f9f8a9c1276748250f330ae9c2fcefe5ae809364ad1e45f3edf7e08a 7:memory:/system.slice/containerd.service/kubepods-burstable-podf65e797d_d5f9_4604_9773_94f4bb9946a0.slice:cri-containerd:86ac6260f9f8a9c1276748250f330ae9c2fcefe5ae809364ad1e45f3edf7e08a 6:perf_event:/kubepods-burstable-podf65e797d_d5f9_4604_9773_94f4bb9946a0.slice:cri-containerd:86ac6260f9f8a9c1276748250f330ae9c2fcefe5ae809364ad1e45f3edf7e08a 5:blkio:/system.slice/containerd.service/kubepods-burstable-podf65e797d_d5f9_4604_9773_94f4bb9946a0.slice:cri-containerd:86ac6260f9f8a9c1276748250f330ae9c2fcefe5ae809364ad1e45f3edf7e08a 4:pids:/system.slice/containerd.service/kubepods-burstable-podf65e797d_d5f9_4604_9773_94f4bb9946a0.slice:cri-containerd:86ac6260f9f8a9c1276748250f330ae9c2fcefe5ae809364ad1e45f3edf7e08a 3:net_cls,net_prio:/kubepods-burstable-podf65e797d_d5f9_4604_9773_94f4bb9946a0.slice:cri-containerd:86ac6260f9f8a9c1276748250f330ae9c2fcefe5ae809364ad1e45f3edf7e08a 2:freezer:/kubepods-burstable-podf65e797d_d5f9_4604_9773_94f4bb9946a0.slice:cri-containerd:86ac6260f9f8a9c1276748250f330ae9c2fcefe5ae809364ad1e45f3edf7e08a 1:name=systemd:/system.slice/containerd.service/kubepods-burstable-podf65e797d_d5f9_4604_9773_94f4bb9946a0.slice:cri-containerd:86ac6260f9f8a9c1276748250f330ae9c2fcefe5ae809364ad1e45f3edf7e08a 0::/ /proc/self/mountinfo 4577 3100 0:450 / / rw,relatime master:1128 - overlay overlay rw,lowerdir=/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/20675/fs:/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/20674/fs:/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/20673/fs:/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/20672/fs:/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/20671/fs:/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/20670/fs:/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/2029/fs,upperdir=/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/20687/fs,workdir=/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/20687/work 4578 4577 0:489 / /proc rw,nosuid,nodev,noexec,relatime - proc proc rw 4579 4577 0:490 / /dev rw,nosuid - tmpfs tmpfs rw,seclabel,size=65536k,mode=755 4580 4579 0:525 / /dev/pts rw,nosuid,noexec,relatime - devpts devpts rw,seclabel,gid=5,mode=620,ptmxmode=666 4581 4579 0:431 / /dev/mqueue rw,nosuid,nodev,noexec,relatime - mqueue mqueue rw,seclabel 4582 4577 0:446 / /sys ro,nosuid,nodev,noexec,relatime - sysfs sysfs ro,seclabel 4583 4582 0:526 / /sys/fs/cgroup rw,nosuid,nodev,noexec,relatime - tmpfs tmpfs rw,seclabel,mode=755 4584 4583 0:23 /system.slice/containerd.service/kubepods-burstable-podf65e797d_d5f9_4604_9773_94f4bb9946a0.slice:cri-containerd:86ac6260f9f8a9c1276748250f330ae9c2fcefe5ae809364ad1e45f3edf7e08a /sys/fs/cgroup/systemd ro,nosuid,nodev,noexec,relatime master:6 - cgroup cgroup rw,xattr,release_agent=/usr/lib/systemd/systemd-cgroups-agent,name=systemd 4617 4583 0:26 /kubepods-burstable-podf65e797d_d5f9_4604_9773_94f4bb9946a0.slice:cri-containerd:86ac6260f9f8a9c1276748250f330ae9c2fcefe5ae809364ad1e45f3edf7e08a /sys/fs/cgroup/freezer ro,nosuid,nodev,noexec,relatime master:7 - cgroup cgroup rw,freezer 4620 4583 0:27 /kubepods-burstable-podf65e797d_d5f9_4604_9773_94f4bb9946a0.slice:cri-containerd:86ac6260f9f8a9c1276748250f330ae9c2fcefe5ae809364ad1e45f3edf7e08a /sys/fs/cgroup/net_cls,net_prio ro,nosuid,nodev,noexec,relatime master:8 - cgroup cgroup rw,net_cls,net_prio 4621 4583 0:28 /system.slice/containerd.service/kubepods-burstable-podf65e797d_d5f9_4604_9773_94f4bb9946a0.slice:cri-containerd:86ac6260f9f8a9c1276748250f330ae9c2fcefe5ae809364ad1e45f3edf7e08a /sys/fs/cgroup/pids ro,nosuid,nodev,noexec,relatime master:9 - cgroup cgroup rw,pids 4622 4583 0:29 /system.slice/containerd.service/kubepods-burstable-podf65e797d_d5f9_4604_9773_94f4bb9946a0.slice:cri-containerd:86ac6260f9f8a9c1276748250f330ae9c2fcefe5ae809364ad1e45f3edf7e08a /sys/fs/cgroup/blkio ro,nosuid,nodev,noexec,relatime master:10 - cgroup cgroup rw,blkio 4623 4583 0:30 /kubepods-burstable-podf65e797d_d5f9_4604_9773_94f4bb9946a0.slice:cri-containerd:86ac6260f9f8a9c1276748250f330ae9c2fcefe5ae809364ad1e45f3edf7e08a /sys/fs/cgroup/perf_event ro,nosuid,nodev,noexec,relatime master:11 - cgroup cgroup rw,perf_event 4624 4583 0:31 /system.slice/containerd.service/kubepods-burstable-podf65e797d_d5f9_4604_9773_94f4bb9946a0.slice:cri-containerd:86ac6260f9f8a9c1276748250f330ae9c2fcefe5ae809364ad1e45f3edf7e08a /sys/fs/cgroup/memory ro,nosuid,nodev,noexec,relatime master:12 - cgroup cgroup rw,memory 4625 4583 0:32 /system.slice/containerd.service/kubepods-burstable-podf65e797d_d5f9_4604_9773_94f4bb9946a0.slice:cri-containerd:86ac6260f9f8a9c1276748250f330ae9c2fcefe5ae809364ad1e45f3edf7e08a /sys/fs/cgroup/devices ro,nosuid,nodev,noexec,relatime master:13 - cgroup cgroup rw,devices 4626 4583 0:33 /system.slice/containerd.service/kubepods-burstable-podf65e797d_d5f9_4604_9773_94f4bb9946a0.slice:cri-containerd:86ac6260f9f8a9c1276748250f330ae9c2fcefe5ae809364ad1e45f3edf7e08a /sys/fs/cgroup/cpu,cpuacct ro,nosuid,nodev,noexec,relatime master:14 - cgroup cgroup rw,cpu,cpuacct 4627 4583 0:34 /kubepods-burstable-podf65e797d_d5f9_4604_9773_94f4bb9946a0.slice:cri-containerd:86ac6260f9f8a9c1276748250f330ae9c2fcefe5ae809364ad1e45f3edf7e08a /sys/fs/cgroup/hugetlb ro,nosuid,nodev,noexec,relatime master:15 - cgroup cgroup rw,hugetlb 4628 4583 0:35 /kubepods-burstable-podf65e797d_d5f9_4604_9773_94f4bb9946a0.slice:cri-containerd:86ac6260f9f8a9c1276748250f330ae9c2fcefe5ae809364ad1e45f3edf7e08a /sys/fs/cgroup/cpuset ro,nosuid,nodev,noexec,relatime master:16 - cgroup cgroup rw,cpuset 4629 4577 202:9 /var/lib/containerd/io.containerd.grpc.v1.cri/sandboxes/7e6f6132b4f3586e826f29e79681570c458df56e89e1062a8858ab8715ecf31e/resolv.conf /etc/resolv.conf rw,relatime - ext4 /dev/xvda9 rw,seclabel 4630 4577 202:9 /var/lib/containerd/io.containerd.grpc.v1.cri/sandboxes/7e6f6132b4f3586e826f29e79681570c458df56e89e1062a8858ab8715ecf31e/hostname /etc/hostname rw,relatime - ext4 /dev/xvda9 rw,seclabel 4631 4579 202:9 /var/lib/kubelet/pods/f65e797d-d5f9-4604-9773-94f4bb9946a0/containers/elasticsearch/6c8c0933 /dev/termination-log rw,relatime - ext4 /dev/xvda9 rw,seclabel 4632 4577 202:9 /var/lib/kubelet/pods/f65e797d-d5f9-4604-9773-94f4bb9946a0/etc-hosts /etc/hosts rw,relatime - ext4 /dev/xvda9 rw,seclabel 4633 4579 0:426 / /dev/shm rw,nosuid,nodev,noexec,relatime - tmpfs shm rw,seclabel,size=65536k 4634 4577 202:9 /var/lib/kubelet/pods/f65e797d-d5f9-4604-9773-94f4bb9946a0/volumes/kubernetes.io~configmap/elastic-internal-unicast-hosts /mnt/elastic-internal/unicast-hosts ro,relatime - ext4 /dev/xvda9 rw,seclabel 4635 4577 0:405 / /mnt/elastic-internal/elasticsearch-config ro,relatime - tmpfs tmpfs rw,seclabel 4636 4577 0:416 / /mnt/elastic-internal/probe-user ro,relatime - tmpfs tmpfs rw,seclabel 4637 4577 0:407 / /mnt/elastic-internal/xpack-file-realm ro,relatime - tmpfs tmpfs rw,seclabel 4638 4577 202:9 /var/lib/kubelet/pods/f65e797d-d5f9-4604-9773-94f4bb9946a0/volumes/kubernetes.io~configmap/elastic-internal-scripts /mnt/elastic-internal/scripts ro,relatime - ext4 /dev/xvda9 rw,seclabel 4639 4577 0:418 / /mnt/elastic-internal/downward-api ro,relatime - tmpfs tmpfs rw,seclabel 4662 4577 202:9 /var/lib/kubelet/pods/f65e797d-d5f9-4604-9773-94f4bb9946a0/volumes/kubernetes.io~empty-dir/elastic-internal-elasticsearch-bin-local /usr/share/elasticsearch/bin rw,relatime - ext4 /dev/xvda9 rw,seclabel 4663 4577 202:14848 / /usr/share/elasticsearch/data rw,relatime - ext4 /dev/xvdbg rw,seclabel 4664 4577 202:9 /var/lib/kubelet/pods/f65e797d-d5f9-4604-9773-94f4bb9946a0/volumes/kubernetes.io~empty-dir/elasticsearch-logs /usr/share/elasticsearch/logs rw,relatime - ext4 /dev/xvda9 rw,seclabel 4675 4577 202:9 /var/lib/kubelet/pods/f65e797d-d5f9-4604-9773-94f4bb9946a0/volumes/kubernetes.io~empty-dir/elastic-internal-elasticsearch-plugins-local /usr/share/elasticsearch/plugins rw,relatime - ext4 /dev/xvda9 rw,seclabel 4677 4577 202:9 /var/lib/kubelet/pods/f65e797d-d5f9-4604-9773-94f4bb9946a0/volumes/kubernetes.io~empty-dir/elastic-internal-elasticsearch-config-local /usr/share/elasticsearch/config rw,relatime - ext4 /dev/xvda9 rw,seclabel 4678 4677 0:415 / /usr/share/elasticsearch/config/http-certs ro,relatime - tmpfs tmpfs rw,seclabel 4679 4677 0:417 / /usr/share/elasticsearch/config/transport-remote-certs ro,relatime - tmpfs tmpfs rw,seclabel 4680 4677 0:404 / /usr/share/elasticsearch/config/transport-certs ro,relatime - tmpfs tmpfs rw,seclabel 3101 4579 0:525 /0 /dev/console rw,nosuid,noexec,relatime - devpts devpts rw,seclabel,gid=5,mode=620,ptmxmode=666 3102 4578 0:489 /bus /proc/bus ro,relatime - proc proc rw 3103 4578 0:489 /fs /proc/fs ro,relatime - proc proc rw 3135 4578 0:489 /irq /proc/irq ro,relatime - proc proc rw 3136 4578 0:489 /sys /proc/sys ro,relatime - proc proc rw 3137 4578 0:489 /sysrq-trigger /proc/sysrq-trigger ro,relatime - proc proc rw 3138 4578 0:527 / /proc/acpi ro,relatime - tmpfs tmpfs ro,seclabel 3139 4578 0:490 /null /proc/kcore rw,nosuid - tmpfs tmpfs rw,seclabel,size=65536k,mode=755 3168 4578 0:490 /null /proc/keys rw,nosuid - tmpfs tmpfs rw,seclabel,size=65536k,mode=755 3169 4578 0:490 /null /proc/latency_stats rw,nosuid - tmpfs tmpfs rw,seclabel,size=65536k,mode=755 3170 4578 0:490 /null /proc/timer_list rw,nosuid - tmpfs tmpfs rw,seclabel,size=65536k,mode=755 3171 4578 0:490 /null /proc/sched_debug rw,nosuid - tmpfs tmpfs rw,seclabel,size=65536k,mode=755 3172 4578 0:528 / /proc/scsi ro,relatime - tmpfs tmpfs ro,seclabel 3173 4582 0:545 / /sys/firmware ro,relatime - tmpfs tmpfs ro,seclabel
17-08-2021

It looks like a duplicate of JDK-8239559
09-08-2021