Agent downloading

Downloading agent binaries from the server

To distribute precompiled agents to targets, serve them from the /binaries/ endpoint via https://[SERVER]/binaries/.

Quick usage

Build an agent binary for the target platform.
Copy it into the configured binaries-path directory.
Configure Basic Auth if the endpoint is reachable by untrusted clients.
Download it from https://SERVER/binaries/.

Verify the response before executing a downloaded binary and publish a checksum through your deployment process.

Configuration

By default (binaries-basic-auth unset), /binaries/ is served with no authentication. To protect it, configure a username/password:

# HTTP Basic Auth credentials required to access the binaries endpoint.
binaries-basic-auth: user:password
# Filesystem path the server serves agent binaries from.
binaries-path: ./binaries

--binaries-basic-auth: Basic Auth credentials (user:password) required to reach /binaries/.
--binaries-path: filesystem path the binaries are served from. Unset means nothing is served.

Once set, requests without valid Basic Auth credentials for that user/password are rejected with a 401.

Note

binaries-path must be configured for /binaries/ to serve files. When binaries-path is unset, responses depend on authentication:

Scenario	Response
Basic Auth configured and credentials fail	`401` (Unauthorized)
Basic Auth configured and credentials pass	`404` (Not Found)
No Basic Auth configured	`404` (Not Found)