threat-hunter-agent-builder (latest)

Published 2026-04-22 13:57:12 +00:00 by janhouse

Pull the image from the command line:

docker pull git.janhouse.lv/janhouse/threat-hunter-agent-builder:latest

Digest

sha256:8ef4a4544921514222bcc4bf6ba84a75c3f6f2ddd0efd83b52e8f6524344a2ce

For more information on the Container registry, see the documentation.

HTTP service that compiles threat-agent binaries on demand

Image Layers

ADD alpine-minirootfs-3.23.3-x86_64.tar.gz / # buildkit

CMD ["/bin/sh"]

RUN /bin/sh -c apk add --no-cache ca-certificates # buildkit

ENV GOLANG_VERSION=1.24.13

ENV GOTOOLCHAIN=local

ENV GOPATH=/go

ENV PATH=/go/bin:/usr/local/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

COPY /target/ / # buildkit

RUN /bin/sh -c mkdir -p "$GOPATH/src" "$GOPATH/bin" && chmod -R 1777 "$GOPATH" # buildkit

WORKDIR /go

RUN /bin/sh -c apk add --no-cache clang llvm libbpf-dev linux-headers git # buildkit

RUN /bin/sh -c addgroup -g 1000 builder && adduser -D -u 1000 -G builder -h /home/builder builder && mkdir -p /agent /agent-output /home/builder/.cache /home/builder/go && chown -R 1000:1000 /agent /agent-output /home/builder # buildkit

ENV HOME=/home/builder

ENV GOPATH=/home/builder/go

ENV GOCACHE=/home/builder/.cache/go-build

ENV AGENT_DIR=/agent

ENV OUTPUT_DIR=/agent-output

ENV PORT=3003

USER 1000:1000

WORKDIR /agent

COPY --chown=1000:1000 agent/go.mod agent/go.sum ./ # buildkit

RUN /bin/sh -c go mod download # buildkit

COPY --chown=1000:1000 agent/*.go ./ # buildkit

COPY --chown=1000:1000 agent/collectors/ collectors/ # buildkit

COPY --chown=1000:1000 agent/protocol/ protocol/ # buildkit

COPY --chown=1000:1000 agent/heartbeat/ heartbeat/ # buildkit

COPY --chown=1000:1000 agent/exec/ exec/ # buildkit

COPY --chown=1000:1000 agent/tracee/ tracee/ # buildkit

COPY --chown=1000:1000 agent/proctree/ proctree/ # buildkit

RUN /bin/sh -c CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o /dev/null . || true # buildkit

COPY /agent-builder /usr/local/bin/agent-builder # buildkit

ARG GIT_SHA=55bd39e94f27e90b785620db1fc4f5c218b25e22

LABEL org.opencontainers.image.title=Threat Hunter Agent Builder

LABEL org.opencontainers.image.description=HTTP service that compiles threat-agent binaries on demand

LABEL org.opencontainers.image.source=https://git.janhouse.lv/janhouse/threat-hunter

LABEL org.opencontainers.image.revision=55bd39e94f27e90b785620db1fc4f5c218b25e22

EXPOSE [3003/tcp]

HEALTHCHECK &{["CMD-SHELL" "wget --no-verbose --tries=1 --spider http://127.0.0.1:${PORT}/health || exit 1"] "10s" "3s" "5s" "0s" '\x03'}

ENTRYPOINT ["/usr/local/bin/agent-builder"]

Key	Value
com.docker.compose.project	threat-hunter
com.docker.compose.service	agent-builder
com.docker.compose.version	5.1.1
org.opencontainers.image.description	HTTP service that compiles threat-agent binaries on demand
org.opencontainers.image.revision	55bd39e94f27e90b785620db1fc4f5c218b25e22
org.opencontainers.image.source	https://git.janhouse.lv/janhouse/threat-hunter
org.opencontainers.image.title	Threat Hunter Agent Builder