threat-hunter-agent-builder (431293ee46277df40d1235928f7a70d408039ea9)

Published 2026-04-20 22:54:36 +00:00 by janhouse

Pull the image from the command line:

docker pull git.janhouse.lv/janhouse/threat-hunter-agent-builder:431293ee46277df40d1235928f7a70d408039ea9

Digest

sha256:ba0331dfbff6148019889ddd5d7747edc5808596933f6c07a602a13ba61744eb

For more information on the Container registry, see the documentation.

HTTP service that compiles threat-agent binaries on demand

Image Layers

ADD alpine-minirootfs-3.23.3-x86_64.tar.gz / # buildkit

CMD ["/bin/sh"]

RUN /bin/sh -c apk add --no-cache ca-certificates # buildkit

ENV GOLANG_VERSION=1.24.13

ENV GOTOOLCHAIN=local

ENV GOPATH=/go

ENV PATH=/go/bin:/usr/local/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

COPY /target/ / # buildkit

RUN /bin/sh -c mkdir -p "$GOPATH/src" "$GOPATH/bin" && chmod -R 1777 "$GOPATH" # buildkit

WORKDIR /go

RUN /bin/sh -c apk add --no-cache clang llvm libbpf-dev linux-headers git # buildkit

RUN /bin/sh -c addgroup -g 1000 builder && adduser -D -u 1000 -G builder -h /home/builder builder && mkdir -p /agent /agent-output /home/builder/.cache /home/builder/go && chown -R 1000:1000 /agent /agent-output /home/builder # buildkit

ENV HOME=/home/builder

ENV GOPATH=/home/builder/go

ENV GOCACHE=/home/builder/.cache/go-build

ENV AGENT_DIR=/agent

ENV OUTPUT_DIR=/agent-output

ENV PORT=3003

USER 1000:1000

WORKDIR /agent

COPY --chown=1000:1000 agent/go.mod agent/go.sum ./ # buildkit

RUN /bin/sh -c go mod download # buildkit

COPY --chown=1000:1000 agent/*.go ./ # buildkit

COPY --chown=1000:1000 agent/collectors/ collectors/ # buildkit

COPY --chown=1000:1000 agent/protocol/ protocol/ # buildkit

COPY --chown=1000:1000 agent/heartbeat/ heartbeat/ # buildkit

COPY --chown=1000:1000 agent/exec/ exec/ # buildkit

COPY --chown=1000:1000 agent/tracee/ tracee/ # buildkit

RUN /bin/sh -c CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o /dev/null . || true # buildkit

COPY /agent-builder /usr/local/bin/agent-builder # buildkit

ARG GIT_SHA=431293ee46277df40d1235928f7a70d408039ea9

LABEL org.opencontainers.image.title=Threat Hunter Agent Builder

LABEL org.opencontainers.image.description=HTTP service that compiles threat-agent binaries on demand

LABEL org.opencontainers.image.source=https://git.janhouse.lv/janhouse/threat-hunter

LABEL org.opencontainers.image.revision=431293ee46277df40d1235928f7a70d408039ea9

EXPOSE [3003/tcp]

HEALTHCHECK &{["CMD-SHELL" "wget --no-verbose --tries=1 --spider http://127.0.0.1:${PORT}/health || exit 1"] "10s" "3s" "5s" "0s" '\x03'}

ENTRYPOINT ["/usr/local/bin/agent-builder"]

Key	Value
com.docker.compose.project	threat-hunter
com.docker.compose.service	agent-builder
com.docker.compose.version	5.1.1
org.opencontainers.image.description	HTTP service that compiles threat-agent binaries on demand
org.opencontainers.image.revision	431293ee46277df40d1235928f7a70d408039ea9
org.opencontainers.image.source	https://git.janhouse.lv/janhouse/threat-hunter
org.opencontainers.image.title	Threat Hunter Agent Builder