Wazuh agent

Unofficial musl package for Alpine 3.24 x86_64.
Wazuh stopped Alpine packages after 4.8.2.
This build is 4.14.8.
The agent must not be newer than the manager.
The signing key file must keep the name zkwolf-com.rsa.pub.

Install

wget -O /etc/apk/keys/zkwolf-com.rsa.pub https://zkwolf.com/apk/v3.24/main/zkwolf-com.rsa.pub
echo https://zkwolf.com/apk/v3.24/main >> /etc/apk/repositories
apk update
apk add wazuh-agent
sed -i s/MANAGER_IP/10.0.0.10/ /var/ossec/etc/ossec.conf
rc-update add wazuh-agent default
rc-service wazuh-agent start

Replace 10.0.0.10 with the manager address.

Check the installed version:

apk info -v wazuh-agent

It should show wazuh-agent-4.14.8-r0.

Upgrade

When a newer package is published, run:

apk update
apk add -u wazuh-agent
rc-service wazuh-agent restart

Upgrade from 4.8.2

Use this if the host still has the old Wazuh 4.8.2 package from packages.wazuh.com.
It removes that old repo, adds this one, and upgrades the agent.
The existing manager address stays in place.

wget -O /etc/apk/keys/zkwolf-com.rsa.pub https://zkwolf.com/apk/v3.24/main/zkwolf-com.rsa.pub
sed -i /packages.wazuh.com/d /etc/apk/repositories
echo https://zkwolf.com/apk/v3.24/main >> /etc/apk/repositories
apk update
apk add -u wazuh-agent
rc-service wazuh-agent restart