Sign inSign up

keannan/wazuh-agent

By keannan

•Updated about 2 years ago

Wazuh agent as Docker image

Image
Security
Monitoring & observability
0

166

keannan/wazuh-agent repository overview

Docker Wazuh Agent

Wazuh is a free, open source and enterprise-ready security monitoring solution for threat detection, integrity monitoring, incident response and compliance.

Description

Wazuh Agent Docker Image with Auto-Registration on Wazuh Server

The Wazuh Agent, encapsulated within a Docker image, comes equipped with an automatic registration feature for seamless integration with the Wazuh server. This versatile implementation is designed to function not only as a standalone Docker container but also as a Kubernetes DaemonSet.

Key Features:

Containerization: The Wazuh Agent is encapsulated within a Docker image, promoting portability and ease of deployment across various environments.

Auto-Registration: The agent is configured to automatically register with the Wazuh server, streamlining the onboarding process and eliminating manual intervention.

Standalone Deployment: The Docker container can be deployed as a standalone entity, offering flexibility for environments that do not utilize orchestration tools.

Kubernetes Compatibility: Integrated as a Kubernetes DaemonSet, the Wazuh Agent seamlessly scales across nodes within a Kubernetes cluster, ensuring comprehensive security coverage.

This implementation offers a seamless and adaptable solution for incorporating Wazuh security monitoring into both standalone and orchestrated environments.

Wazuh agent version

Wazuh Agent version	Docker image tag
v4.9.1	                latest
v4.9.1	                4.9.1

DockerHub images

https://hub.docker.com/r/keannan/wazuh-agent	    Wazuh agent based on Ubuntu 24.04    	docker pull keannan/wazuh-agent:4.9.1

Environments

Name		Type	Description								Default	Required
MANAGER_IP	string	IP address or Domain name of Wazuh server using for restapi calls		Yes

Run as docker image

The Simplest way of running the container

docker run -e MANAGER_IP=<IP_ADDRESS_WAZUH_SERVER> --rm keannan/wazuh-agent:4.9.1

Run as Kubernetes DaemonSet

Setup environments in wazuh-daemon-sets.yaml like in below example.

Example:

apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: wazuh-agent
  namespace: wazuh
spec:
 selector:
  matchLabels:
    app: wazuh-agent
 template:
  metadata:
    labels:
      app: wazuh-agent
  spec:
    containers:
      - name: wazuh-agent
        image: keannan/wazuh-agent:4.9.1
        env:
          - name: MANAGER_IP
            value: "10.0.0.2"
        ports:
          - containerPort: 1514

And apply template kubectl -f wazuh-daemon-sets.yaml DaemonSet will deploy to wazuh namespace. Build local docker image

Tag summary

Content type

Image

Digest

sha256:325f9f03e…

Size

71.2 MB

Last updated

about 2 years ago

docker pull keannan/wazuh-agent:4.9.1