I'm trying to run es in a container, but not much luck 
I understand that ES wants a whole instance with all the memory and ulimits lifted, but this time it has to run in a container. What does it need?!
nomad fs 2590c71d alloc/logs/es-container.stdout.0
[2017-03-01T06:00:36,633][WARN ][o.e.b.JNANatives ] Unable to lock JVM Memory: error=12, reason=Out of memory
[2017-03-01T06:00:36,636][WARN ][o.e.b.JNANatives ] This can result in part of the JVM being swapped out.
[2017-03-01T06:00:36,636][WARN ][o.e.b.JNANatives ] Increase RLIMIT_MEMLOCK, soft limit: 65536, hard limit: 65536
[2017-03-01T06:00:36,636][WARN ][o.e.b.JNANatives ] These can be adjusted by modifying /etc/security/limits.conf, for example:
# allow user 'elasticsearch' mlockall
elasticsearch soft memlock unlimited
elasticsearch hard memlock unlimited
[2017-03-01T06:00:36,636][WARN ][o.e.b.JNANatives ] If you are logged in interactively, you will have to re-login for the new limits to take effect.
[2017-03-01T06:00:36,829][INFO ][o.e.n.Node ] [] initializing ...
[2017-03-01T06:00:36,938][INFO ][o.e.e.NodeEnvironment ] [6HtqKA0] using [1] data paths, mounts [[/ (rootfs)]], net usable_space [91.6gb], net total_space [98.2gb], spins? [unknown], types [rootfs]
[2017-03-01T06:00:36,939][INFO ][o.e.e.NodeEnvironment ] [6HtqKA0] heap size [1007.3mb], compressed ordinary object pointers [true]
[2017-03-01T06:00:36,942][INFO ][o.e.n.Node ] node name [6HtqKA0] derived from node ID [6HtqKA0yTsuYGTXL3Wx6nA]; set [node.name] to override
[2017-03-01T06:00:36,944][INFO ][o.e.n.Node ] version[5.2.2], pid[1], build[f9d9b74/2017-02-24T17:26:45.835Z], OS[Linux/3.13.0-108-generic/amd64], JVM[Oracle Corporation/OpenJDK 64-Bit Server VM/1.8.0_92-internal/25.92-b14]
[2017-03-01T06:00:39,569][INFO ][o.e.p.PluginsService ] [6HtqKA0] loaded module [aggs-matrix-stats]
[2017-03-01T06:00:39,569][INFO ][o.e.p.PluginsService ] [6HtqKA0] loaded module [ingest-common]
[2017-03-01T06:00:39,569][INFO ][o.e.p.PluginsService ] [6HtqKA0] loaded module [lang-expression]
[2017-03-01T06:00:39,569][INFO ][o.e.p.PluginsService ] [6HtqKA0] loaded module [lang-groovy]
[2017-03-01T06:00:39,569][INFO ][o.e.p.PluginsService ] [6HtqKA0] loaded module [lang-mustache]
[2017-03-01T06:00:39,569][INFO ][o.e.p.PluginsService ] [6HtqKA0] loaded module [lang-painless]
[2017-03-01T06:00:39,570][INFO ][o.e.p.PluginsService ] [6HtqKA0] loaded module [percolator]
[2017-03-01T06:00:39,570][INFO ][o.e.p.PluginsService ] [6HtqKA0] loaded module [reindex]
[2017-03-01T06:00:39,570][INFO ][o.e.p.PluginsService ] [6HtqKA0] loaded module [transport-netty3]
[2017-03-01T06:00:39,570][INFO ][o.e.p.PluginsService ] [6HtqKA0] loaded module [transport-netty4]
[2017-03-01T06:00:39,571][INFO ][o.e.p.PluginsService ] [6HtqKA0] loaded plugin [x-pack]
[2017-03-01T06:00:40,338][WARN ][o.e.d.s.g.GroovyScriptEngineService] [groovy] scripts are deprecated, use [painless] scripts instead
[2017-03-01T06:00:44,077][INFO ][o.e.n.Node ] initialized
[2017-03-01T06:00:44,077][INFO ][o.e.n.Node ] [6HtqKA0] starting ...
[2017-03-01T06:00:44,342][WARN ][i.n.u.i.MacAddressUtil ] Failed to find a usable hardware address from the network interfaces; using random bytes: 1f:91:0f:80:6b:45:06:4f
[2017-03-01T06:00:44,433][INFO ][o.e.t.TransportService ] [6HtqKA0] publish_address {10.5.3.158:9300}, bound_addresses {[::]:9300}
[2017-03-01T06:00:44,446][INFO ][o.e.b.BootstrapChecks ] [6HtqKA0] bound or publishing to a non-loopback or non-link-local address, enforcing bootstrap checks
ERROR: bootstrap checks failed
memory locking requested for elasticsearch process but memory is not locked
[2017-03-01T06:00:44,461][INFO ][o.e.n.Node ] [6HtqKA0] stopping ...
[2017-03-01T06:00:44,515][INFO ][o.e.n.Node ] [6HtqKA0] stopped
[2017-03-01T06:00:44,516][INFO ][o.e.n.Node ] [6HtqKA0] closing ...
[2017-03-01T06:00:44,538][INFO ][o.e.n.Node ] [6HtqKA0] closed