From 653bb2ed1e162a2280628ab79f86a51468d01752 Mon Sep 17 00:00:00 2001
From: t3chn0m4g3 <t3chn0m4g3@gmail.com>
Date: Mon, 6 Jan 2025 13:20:54 +0100
Subject: [PATCH] Disable Scalable Vector Engine (XX:UseSVE=0) to fix issues on
 macOS and other ARM platforms
 https://github.com/elastic/elasticsearch/issues/118583

---
 docker/elk/elasticsearch/Dockerfile         | 1 +
 docker/elk/elasticsearch/docker-compose.yml | 2 +-
 docker/elk/logstash/Dockerfile              | 1 +
 docker/elk/logstash/docker-compose.yml      | 2 +-
 4 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/docker/elk/elasticsearch/Dockerfile b/docker/elk/elasticsearch/Dockerfile
index 8e845cbd..3e41ca4f 100644
--- a/docker/elk/elasticsearch/Dockerfile
+++ b/docker/elk/elasticsearch/Dockerfile
@@ -1,6 +1,7 @@
 FROM ubuntu:24.04
 ENV DEBIAN_FRONTEND noninteractive
 ENV ES_VER=8.16.1
+ENV _JAVA_OPTIONS="-XX:UseSVE=0"
 #
 # Include dist
 COPY dist/ /root/dist/
diff --git a/docker/elk/elasticsearch/docker-compose.yml b/docker/elk/elasticsearch/docker-compose.yml
index b4e92c28..1709de9b 100644
--- a/docker/elk/elasticsearch/docker-compose.yml
+++ b/docker/elk/elasticsearch/docker-compose.yml
@@ -22,6 +22,6 @@ services:
     mem_limit: 2g
     ports:
      - "127.0.0.1:64298:9200"
-    image: "dtagdevsec/elasticsearch:24.04"
+    image: "ghcr.io/telekom-security/elasticsearch:24.04.1"
     volumes:
      - $HOME/tpotce/data:/data
diff --git a/docker/elk/logstash/Dockerfile b/docker/elk/logstash/Dockerfile
index 39056c63..d5052d45 100644
--- a/docker/elk/logstash/Dockerfile
+++ b/docker/elk/logstash/Dockerfile
@@ -1,6 +1,7 @@
 FROM ubuntu:24.04
 ENV DEBIAN_FRONTEND=noninteractive
 ENV LS_VER=8.16.1
+ENV _JAVA_OPTIONS="-XX:UseSVE=0"
 #
 # Include dist
 COPY dist/ /root/dist/
diff --git a/docker/elk/logstash/docker-compose.yml b/docker/elk/logstash/docker-compose.yml
index 6f88e8da..175f7e22 100644
--- a/docker/elk/logstash/docker-compose.yml
+++ b/docker/elk/logstash/docker-compose.yml
@@ -12,7 +12,7 @@ services:
 #        condition: service_healthy
     ports:
      - "127.0.0.1:64305:64305"
-    image: "dtagdevsec/logstash:24.04"
+    image: "ghcr.io/telekom-security/logstash:24.04.1"
     volumes:
      - $HOME/tpotce/data:/data
 #     - /$HOME/tpotce/docker/elk/logstash/dist/logstash.conf:/etc/logstash/conf.d/logstash.conf