#75 mitigate CVE-2021-44228 in elasticsearch container

[metas-jb]

Deploying env-variable in Dockerfile of search container

ENV LOG4J_FORMAT_MSG_NO_LOOKUPS=true

as suggested here:

• https://www.bsi.bund.de/SharedDocs/Cybersicherheitswarnungen/DE/2021/2021-549032-10F2.pdf?__blob=publicationFile&v=3
• https://www.docker.com/blog/apache-log4j-2-cve-2021-44228/

---

Tested by deploying to an instance and checking if the env-variable is set:

docker exec -it metasfresh-docker_search_1 /bin/bash

echo "$LOG4J_FORMAT_MSG_NO_LOOKUPS"
true #output