# Greylog Docker 4.3.9 - Not starting

**URL:** <https://community.graylog.org/t/greylog-docker-4-3-9-not-starting/27064>\
**Category:** Graylog Central (peer support)\
**Created:** [December 27, 2022, 9:51pm UTC](https://community.graylog.org/t/greylog-docker-4-3-9-not-starting/27064 "2022-12-27T21:51:02Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![sport](https://avatars.discourse-cdn.com/v4/letter/s/4da419/32.png) [@sport](https://community.graylog.org/u/sport)\
**Post date:** [December 27, 2022, 9:51pm UTC](https://community.graylog.org/t/greylog-docker-4-3-9-not-starting/27064/1 "2022-12-27T21:51:02Z")

</div>

I had Graylog running awhile back and am now just getting time to get back to it. After creating the docker container again for Graylog, Mongo, and elasticsearch I ran into some issues.  
Following the docker setup, the docker crashes. indicating that it can not write to the journal path.

**2. Describe your environment:**  
Docker running under Unraid

Package Version: 4.3.9

Environment:  
Name: graylog

Overview: Official Graylog Docker image.

For more variables see the Graylog configuration file: …

The default root user is named ‘admin’

To create the SHA256 string run ‘echo -n YOUR16CHARACTERPASSWORD | sha256sum’

Additional Requirements:

Repository: graylog/graylog:4.3.9

Docker Hub URL: [Docker](https://hub.docker.com/r/graylog/graylog/)

Icon URL:

WebUI: http://[IP]:[PORT:9000]

Extra Parameters:

Post Arguments:

CPU Pinning:

Network Type: Host

Console shell command: Shell

Privileged: OFF

GRAYLOG\_PASSWORD\_SECRET: ••••••••••••••••

Container Variable: GRAYLOG\_PASSWORD\_SECRET

GRAYLOG\_ROOT\_PASSWORD\_SHA2:

••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••

Container Variable: GRAYLOG\_ROOT\_PASSWORD\_SHA2

GRAYLOG\_HTTP\_EXTERNAL\_URI: [http://10.71.74.23:9000/](http://10.71.74.23:9000/)

Container Variable: GRAYLOG\_HTTP\_EXTERNAL\_URI

Graylog web interface and REST API: 9000 (Container Port: 9000)

Syslog TCP: 1514 (Container Port: 1514)

Syslog UDP: 1514 (Container Port: 1514)

GELF TCP: 12201 (Container Port: 12201)

GELF UDP: 12201 (Container Port: 12201)

MongoDB connection string: mongodb://10.71.74.23:27017/graylog

Container Variable: GRAYLOG\_MONGODB\_URI

List of Elasticsearch hosts Graylog should connect to: 10.71.74.23:9200

Container Variable: GRAYLOG\_ELASTICSEARCH\_HOSTS

Need to be specified as a comma-separated list of valid URIs for the http ports of your elasticsearch nodes

Appdata: /mnt/user/appdata/greylog

Container Path: /usr/share/graylog/data/journal

Last line of Docker log:  
“2022-12-27 15:56:07,662 ERROR: org.graylog2.bootstrap.preflight.PreflightCheckService - Preflight  
check failed with error: Journal directory \</usr/share/graylog/data/journal\> is not writable!”

**3. What steps have you already taken to try and solve the problem?**  
Found that the host path that had been created under appdata, had folder permissions that were set to root only from the docker setup, I adjusted the permissions to “drwxrwxr-x 1 root users 0 Dec 26 19:39 greylog/” and made sure that the users group had this folder.

**4. How can the community help?**  
Has anyone run into this recently, I do not remember having this problem the last time I started to set things up. Since the users group has read/write to the folder I’m not sure where to look at the moment for the underlying cause.  
**strong text**

---

<div class="post-metadata">

**Author:** ![patrickmann](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/patrickmann/32/9091_2.png) [@patrickmann](https://community.graylog.org/u/patrickmann)\
**Post date:** [December 29, 2022, 9:22am UTC](https://community.graylog.org/t/greylog-docker-4-3-9-not-starting/27064/2 "2022-12-29T09:22:24Z")

</div>

GL uses a dedicated `graylog` group with ID 1100. You need to give that write permissions to your journal directory.

> <https://github.com/Graylog2/graylog2-server/issues/2155>
>
> \### Problem description
> 
> ERROR: Unable to access file /usr/share/graylog/data/jo…urnal/graylog2-committed-read-offset: Permission denied
> \### Steps to reproduce the problem
> 
> While doing a docker-compose up 
> Graylog server is stopping with the above error
> 
> Here is the docker-compose file
> 
> \`\`\`
> mongo:
> image: "mongo:3"
> volumes:
> - /graylog/data/mongo:/data/db
> elasticsearch:
> image: "elasticsearch:2"
> command: "elasticsearch -Des.cluster.name='graylog'"
> volumes:
> - /graylog/data/elasticsearch:/usr/share/elasticsearch/data
> graylog:
> image: graylog2/server:2.0.0-rc.1-1
> volumes:
> - /graylog/data/journal:/usr/share/graylog/data/journal
> - /graylog/config:/usr/share/graylog/data/config
> environment:
> GRAYLOG\_PASSWORD\_SECRET: somepasswordpepper
> GRAYLOG\_ROOT\_PASSWORD\_SHA2: 8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918
> GRAYLOG\_REST\_TRANSPORT\_URI: http://127.0.0.1:12900
> 
> links:
> - mongo:mongo
> - elasticsearch:elasticsearch
> ports:
> - "9000:9000"
> - "12900:12900"
> \`\`\`
> \### Environment
> \- Graylog Version: 2
> \- Elasticsearch Version:2
> \- MongoDB Version: 3
> \- Operating System: CentOS 7
> \- Browser version:

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [January 12, 2023, 9:22am UTC](https://community.graylog.org/t/greylog-docker-4-3-9-not-starting/27064/3 "2023-01-12T09:22:59Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
