dennisleetw/pandora-agent repository overview

⁠pandora-agent

⁠Short Description

Pandora Box Console IDS-IPS Agent - Lightweight security agent for endpoint monitoring and zero-trust verification

⁠Full Description

# Pandora Box Console IDS-IPS Agent

A lightweight, production-ready security agent designed for endpoint monitoring, zero-trust verification, and real-time threat detection in the Pandora Box Console IDS-IPS ecosystem.

## Features

- **Zero-Trust Verification**: Implements zero-knowledge proof-based device verification
- **Real-time Monitoring**: Continuous endpoint security monitoring and event collection
- **RabbitMQ Communication**: Secure agent-to-console communication via RabbitMQ
- **Health Monitoring**: Built-in health check endpoints for orchestration platforms
- **Non-Root Execution**: Runs as non-root user (pandora:1001) for enhanced security
- **Alpine-based**: Minimal image size (~50MB) for fast deployment

## Quick Start

```bash
docker run -d \
  --name pandora-agent \
  -p 8080:8080 \
  -e CONSOLE_URL=https://console.example.com \
  -e RABBITMQ_URL=amqp://user:pass@rabbitmq:5672/ \
  -v /app/config:/app/config \
  your-username/pandora-agent:latest

⁠Configuration

The agent requires the following environment variables:

• CONSOLE_URL: URL of the Pandora Box Console backend
• RABBITMQ_URL: RabbitMQ connection string for agent communication
• AGENT_LOG_LEVEL: Logging level (default: info)
• ENVIRONMENT: Deployment environment (development/production)

See configs/agent-config.yaml.template for full configuration options.

⁠Health Check

The container includes a health check that verifies agent connectivity:

• Endpoint: /health
• Port: 8080 (HTTP), 8443 (HTTPS)
• Interval: 30 seconds

⁠Architecture

Built on:

• Base Image: Alpine Linux (latest)
• Runtime: Go 1.25 (statically compiled, CGO disabled)
• Size: ~50MB compressed

⁠Security

• Non-root user execution (UID 1001)
• Minimal attack surface (Alpine Linux)
• Static binary compilation (no dynamic dependencies)
• Certificate-based authentication support

⁠Documentation

• Project Repository⁠
• Agent Documentation⁠
• Configuration Reference⁠

⁠License

Proprietary - All rights reserved

⁠Support

For issues and questions, please open an issue on GitHub.