OnePAM Agent — lightweight zero-trust agent for secure remote access and secret management
279
Lightweight zero-trust agent for target servers.
The OnePAM Agent runs on servers you want to manage. It provides secure SSH access, HTTP tunneling, secret management, and asset discovery — all controlled from the OnePAM console with full session recording and audit logging.
docker run -d --name onepam-agent \
--restart unless-stopped \
-e ONEPAM_SERVER=https://onepam.com \
-e ONEPAM_TENANT_ID=your-tenant-id \
onepam/agent:latest
| Feature | Description |
|---|---|
| Secure SSH | Built-in SSH server with session recording |
| HTTP Tunnel | Reverse tunnel for web application access |
| Secret Management | Local secret store synced to OnePAM vault |
| Asset Discovery | Automatic discovery of services and ports |
| Auto-Update | Self-updating binary with zero downtime |
| mTLS | Mutual TLS authentication to gateway |
| Audit Logging | All actions logged and shipped to control plane |
| Systemd Integration | Watchdog, ready notification, journal logging |
| Variable | Description | Default |
|---|---|---|
ONEPAM_SERVER | OnePAM control plane URL | (required) |
ONEPAM_TENANT_ID | Tenant identifier | (required) |
AGENT_DATA_DIR | Persistent data directory | /app/data |
┌─────────────┐ ┌──────────────────┐ ┌──────────────┐
│ OnePAM │◄─WSS─►│ OnePAM Gateway │◄─mTLS─►│ OnePAM │
│ Console │ │ │ │ Agent │
└─────────────┘ └──────────────────┘ │ (this image) │
│ │
│ ┌──────────┐ │
│ │ SSH │ │
│ │ Secrets │ │
│ │ Tunnel │ │
│ │ Discover │ │
│ └──────────┘ │
└──────────────┘
--healthcheck flagFor production workloads, install the agent natively (without Docker):
curl -fsSL https://updates.onepam.com/scripts/install.sh | bash
Supports Linux amd64, arm64, armv7, and i386.
Full documentation: https://onepam.com/docs
Proprietary — https://onepam.com/terms
Content type
Image
Digest
sha256:58f0bde8b…
Size
25.6 MB
Last updated
5 months ago
docker pull onepam/agent