Fix: Run ES as elasticsearch user with gosu

Dockerfile

@@ -2,19 +2,25 @@ FROM argilla/argilla-server:latest
 
 USER root
 
-# Install Java for Elasticsearch
-RUN apt-get update && apt-get install -y     openjdk-17-jre-headless curl procps     && rm -rf /var/lib/apt/lists/*
+# Install Java and tools
+RUN apt-get update && apt-get install -y     openjdk-17-jre-headless curl procps gosu     && rm -rf /var/lib/apt/lists/*
 
-# Download and setup Elasticsearch
-RUN curl -L -O https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-8.11.0-linux-x86_64.tar.gz     && tar -xzf elasticsearch-8.11.0-linux-x86_64.tar.gz -C /opt     && rm elasticsearch-8.11.0-linux-x86_64.tar.gz     && useradd -m elasticsearch || true     && chown -R elasticsearch:elasticsearch /opt/elasticsearch-8.11.0
+# Download Elasticsearch
+RUN curl -L -O https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-8.11.0-linux-x86_64.tar.gz     && tar -xzf elasticsearch-8.11.0-linux-x86_64.tar.gz -C /opt     && rm elasticsearch-8.11.0-linux-x86_64.tar.gz
 
-# Configure ES
-RUN echo "xpack.security.enabled: false" >> /opt/elasticsearch-8.11.0/config/elasticsearch.yml     && echo "discovery.type: single-node" >> /opt/elasticsearch-8.11.0/config/elasticsearch.yml     && echo "network.host: 127.0.0.1" >> /opt/elasticsearch-8.11.0/config/elasticsearch.yml
+# Create elasticsearch user and set permissions
+RUN useradd -m -s /bin/bash elasticsearch     && chown -R elasticsearch:elasticsearch /opt/elasticsearch-8.11.0     && mkdir -p /var/lib/argilla     && chown -R argilla:argilla /var/lib/argilla
 
-ENV ES_JAVA_OPTS="-Xms256m -Xmx256m"
+# Configure ES for minimal memory and no security
+RUN echo "xpack.security.enabled: false" >> /opt/elasticsearch-8.11.0/config/elasticsearch.yml     && echo "xpack.security.enrollment.enabled: false" >> /opt/elasticsearch-8.11.0/config/elasticsearch.yml     && echo "discovery.type: single-node" >> /opt/elasticsearch-8.11.0/config/elasticsearch.yml     && echo "network.host: 127.0.0.1" >> /opt/elasticsearch-8.11.0/config/elasticsearch.yml     && echo "bootstrap.memory_lock: false" >> /opt/elasticsearch-8.11.0/config/elasticsearch.yml
+
+# Set ES memory to 512MB
+RUN echo "-Xms512m" >> /opt/elasticsearch-8.11.0/config/jvm.options     && echo "-Xmx512m" >> /opt/elasticsearch-8.11.0/config/jvm.options
+
+ENV ES_JAVA_OPTS="-Xms512m -Xmx512m"
 ENV ARGILLA_ELASTICSEARCH=http://127.0.0.1:9200
 
 EXPOSE 7860
 
-# Start ES then Argilla
-CMD /opt/elasticsearch-8.11.0/bin/elasticsearch -d -p /tmp/es.pid &&     sleep 30 &&     python -m argilla_server database migrate &&     python -m argilla_server start --host 0.0.0.0 --port 7860
+# Start ES as elasticsearch user, then Argilla
+CMD gosu elasticsearch /opt/elasticsearch-8.11.0/bin/elasticsearch -d -p /tmp/es.pid &&     sleep 45 &&     python -m argilla_server database migrate &&     python -m argilla_server start --host 0.0.0.0 --port 7860