kevendeng gcm688 不是由KS配置的,这是ES官方打包镜像时就做好的: 你可以查看官方的Dockerfile https://github.com/elastic/dockerfiles/blob/7.15/elasticsearch/Dockerfile RUN chmod g=u /etc/passwd && \ chmod 0555 /usr/local/bin/docker-entrypoint.sh && \ find / -xdev -perm -4000 -exec chmod ug-s {} + && \ ln -sf /etc/pki/ca-trust/extracted/java/cacerts /usr/share/elasticsearch/jdk/lib/security/cacerts && \ chmod 0775 /usr/share/elasticsearch && \ chown elasticsearch bin config config/jvm.options.d data logs plugins