This is essentially the same issue as #49 in a different contex. Let me know if you'd prefer to resurrect that discussion instead.

• Docker image used: docker.elastic.co/elasticsearch/elasticsearch:5.5.2
• Operating System: CentOS 7.3 (running OpenShift 3.6/Kubernetes 1.6.1)
• Steps to reproduce:

• Create a new pod/deployment using the docker.elastic.co/elasticsearch/elasticsearch:5.5.2 image
• Pod will fail on creation with /bin/bash: bin/es-docker: Permission denied

Bug Description

The permissions on /usr/share/elasticsearch/bin/es-docker (and parent directories) only allow read and execute for the hard-coded elasticsearch user. This prevents the container from even starting (Permission denied for bin/es-docker file). Even fixing that specific issue, using something like the below, just results in different permissions problems down the line.

FROM docker.elastic.co/elasticsearch/elasticsearch:5.5.2
USER root
RUN chgrp -R 0 /usr/share/elasticsearch && chmod -R g+rx /usr/share/elasticsearch/
USER elasticsearch

Is there no way to run the elasticsearch container on platforms with runtime user IDs?