# Fix for "Permission Denied" Error When Starting etcd in Embedded Cluster

**URL:** <https://community.replicated.com/t/fix-for-permission-denied-error-when-starting-etcd-in-embedded-cluster/1516>\
**Category:** Uncategorized\
**Tags:** embedded-cluster, umask, permissions\
**Created:** [May 12, 2025, 5:12pm UTC](https://community.replicated.com/t/fix-for-permission-denied-error-when-starting-etcd-in-embedded-cluster/1516 "2025-05-12T17:12:46Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Evans\_Mungai](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.replicated.com/evans_mungai/32/546_2.png) [@Evans\_Mungai](https://community.replicated.com/u/Evans_Mungai)\
**Post date:** [May 12, 2025, 5:12pm UTC](https://community.replicated.com/t/fix-for-permission-denied-error-when-starting-etcd-in-embedded-cluster/1516/1 "2025-05-12T17:12:46Z")

</div>

If you’re encountering the following error during your Embedded Cluster installation:

```auto
Failed to start: fork/exec <data-dir>/k0s/bin/etcd: permission denied
component=etcd

```

You’re not alone—this is a known issue that typically arises in environments with a restrictive `umask`, resulting in improper directory permissions and preventing the `etcd` binary from executing.

### 🔍 Root Cause

The etcd component cannot start because one or more directories in the `<data-dir>` path are missing global **execute** (`x`) permissions. This usually happens when the system `umask` is set to a restrictive value (i.e., not the default `0022`).

> **Note:** `<data-dir>` defaults to `/var/lib/embedded-cluster/` unless overridden using the `--data-dir` flag during installation.

### ✅ How to Fix

1. **Reset the Installation**

2. **Correct Directory Permissions**  
Manually ensure that **each directory** in the `<data-dir>` path has the global execute permission:

3. **Reinstall with Correct umask**

4. **Still Seeing Errors?**  
If the issue persists and the cause isn’t clear, please generate a new support bundle and share it with the support team.

* * *

### 🎉 Fixed in EC v2.1.3

This issue is **resolved in Embedded Cluster v2.1.3** , which includes:

- A fix to ensure directory permissions do not block etcd startup.
- A **preflight check** that validates directory permissions in the `<data-dir>` path before installation begins.

We recommend upgrading to v2.1.3 if you’re running an earlier version.

* * *

Let us know if you have any questions or need help troubleshooting!