finetuning, tweaking

docker/elk/docker-compose.yml

@@ -10,7 +10,8 @@ services:
     restart: always
     environment:
      - bootstrap.memory_lock=true
-     - "ES_JAVA_OPTS=-Xms1024m -Xmx1024m"
+     - ES_JAVA_OPTS=-Xms1024m -Xmx1024m
+     - ES_TMPDIR=/tmp
     cap_add:
      - IPC_LOCK
     ulimits:

docker/elk/elasticsearch/Dockerfile

@@ -4,12 +4,11 @@ FROM alpine
 ADD dist/ /root/dist/
 
 # Setup env and apt
-RUN apk -U upgrade && \
+RUN apk -U --no-cache add \
-    apk add bash \
+             bash \
-            curl \
+             curl \
-            openjdk8-jre \
+             openjdk8-jre \
-            procps \
+             wget && \
-            wget && \
 
 # Get and install packages
     cd /root/dist/ && \
@@ -24,7 +23,7 @@ RUN apk -U upgrade && \
 
 # Setup user, groups and configs
     addgroup -g 2000 elasticsearch && \
-    adduser -S -H -s /bin/bash -u 2000 -D -g 2000 elasticsearch && \
+    adduser -S -H -s /bin/ash -u 2000 -D -g 2000 elasticsearch && \
     chown -R elasticsearch:elasticsearch /usr/share/elasticsearch/ && \
 
 # Clean up
@@ -36,4 +35,4 @@ HEALTHCHECK --retries=10 CMD curl -s -XGET 'http://127.0.0.1:9200/_cat/health'
 
 # Start ELK
 USER elasticsearch:elasticsearch
-CMD export ES_TMPDIR=/tmp && exec /usr/share/elasticsearch/bin/elasticsearch
+CMD ["/usr/share/elasticsearch/bin/elasticsearch"]

docker/elk/elasticsearch/docker-compose.yml

@@ -1,6 +1,4 @@
-# T-Pot (Standard)
+version: '2.3'
-# For docker-compose ...
-version: '2.2'
 
 services:
 
@@ -12,7 +10,8 @@ services:
     restart: always
     environment:
      - bootstrap.memory_lock=true
-     - "ES_JAVA_OPTS=-Xms1024m -Xmx1024m"
+     - ES_JAVA_OPTS=-Xms1024m -Xmx1024m
+     - ES_TMPDIR=/tmp
     cap_add:
      - IPC_LOCK
     ulimits:

docker/elk/head/Dockerfile

@@ -1,24 +1,22 @@
 FROM alpine
 
 # Setup env and apt
-RUN apk -U upgrade && \
+RUN apk -U --no-cache add \
-    apk add bash \
+              curl \
-            curl \
+              git \
-            git \
+              nodejs \
-            nodejs \
+              nodejs-npm && \
-            nodejs-npm \
-            procps && \
 
 # Get and install packages
     mkdir -p /usr/src/app/ && \
     cd /usr/src/app/ && \
-    git clone https://github.com/mobz/elasticsearch-head . && \
+    git clone --depth=1 https://github.com/mobz/elasticsearch-head . && \
     npm install http-server && \
     sed -i 's/\"http\:\/\/localhost\:9200\"/\"https\:\/\/\<FQDN\>\:64297\/es\/\"/' /usr/src/app/_site/app.js && \
 
 # Setup user, groups and configs
     addgroup -g 2000 head && \
-    adduser -S -H -s /bin/bash -u 2000 -D -g 2000 head && \
+    adduser -S -H -s /bin/ash -u 2000 -D -g 2000 head && \
     chown -R head:head /usr/src/app/ && \
 
 # Clean up

docker/elk/head/docker-compose.yml

@@ -1,6 +1,4 @@
-# T-Pot (Standard)
+version: '2.3'
-# For docker-compose ...
-version: '2.2'
 
 services:
 

docker/elk/kibana/Dockerfile

@@ -4,11 +4,9 @@ FROM alpine
 ADD dist/ /root/dist/
 
 # Setup env and apt
-RUN apk -U upgrade && \
+RUN apk -U --no-cache add \
-    apk add bash \
             curl \
             nodejs \
-            procps \
             wget && \
 
 # Get and install packages
@@ -56,7 +54,7 @@ RUN apk -U upgrade && \
     echo "@globalColorMagenta: #E20074;" >> /usr/share/kibana/src/ui/public/styles/variables/colors.less && \
     /usr/share/kibana/bin/kibana 2>&1 | grep -m 1 "Optimization of bundles" && \
     addgroup -g 2000 kibana && \
-    adduser -S -H -s /bin/bash -u 2000 -D -g 2000 kibana && \
+    adduser -S -H -s /bin/ash -u 2000 -D -g 2000 kibana && \
     chown -R kibana:kibana /usr/share/kibana/ && \
 
 # Clean up

docker/elk/kibana/docker-compose.yml

@@ -1,6 +1,4 @@
-# T-Pot (Standard)
+version: '2.3'
-# For docker-compose ...
-version: '2.2'
 
 services:
 

docker/elk/logstash/Dockerfile

@@ -4,15 +4,14 @@ FROM alpine
 ADD dist/ /root/dist/
 
 # Setup env and apt
-RUN apk -U upgrade && \
+RUN apk -U --no-cache add \
-    apk --no-cache add \
+               bash \
-                    bash \
+               curl \
-                    curl \
+               git \
-                    git \
+               libc6-compat \
-                    libc6-compat \
+               libzmq \
-                    libzmq \
+               openjdk8-jre \
-                    openjdk8-jre \
+               wget && \
-                    wget && \
 
 # Get and install packages
     git clone --depth=1 https://github.com/dtag-dev-sec/listbot /etc/listbot && \