elasticsearch: add chroot.