diff --git a/simple-cdd/profiles/kali-purple.excludes b/simple-cdd/profiles/kali-purple.excludes
new file mode 100644
index 0000000..2870ae3
--- /dev/null
+++ b/simple-cdd/profiles/kali-purple.excludes
@@ -0,0 +1,3 @@
+# Exclude big packages that are Recommended by defensive tools metapackages.
+# Keep this list in sync with kali-meta/debian/control.
+exploitdb-papers
diff --git a/simple-cdd/profiles/kali-purple.postinst b/simple-cdd/profiles/kali-purple.postinst
new file mode 100755
index 0000000..64f09ca
--- /dev/null
+++ b/simple-cdd/profiles/kali-purple.postinst
@@ -0,0 +1,18 @@
+#!/bin/sh
+
+set -eu
+
+configure_elastic() {
+    # Install the elastic archive keyring
+    wget -q -O- https://artifacts.elastic.co/GPG-KEY-elasticsearch \
+    > /etc/apt/keyrings/elastic-keyring.asc
+
+    # Enable the repository
+    cat >/etc/apt/sources.list.d/elastic.list <<EOF
+deb [signed-by=/etc/apt/keyrings/elastic-keyring.asc] https://artifacts.elastic.co/packages/8.x/apt stable main
+EOF
+
+    apt-get update
+}
+
+configure_elastic
diff --git a/simple-cdd/profiles/kali-purple.preseed b/simple-cdd/profiles/kali-purple.preseed
new file mode 100644
index 0000000..6792381
--- /dev/null
+++ b/simple-cdd/profiles/kali-purple.preseed
@@ -0,0 +1,4 @@
+# Do use a network mirror, but do not upgrade, so that
+# only missing packages are fetched.
+d-i apt-setup/use_mirror boolean true
+d-i pkgsel/upgrade select none