---
title: Agent container image
summary: null
url: >-
  https://www.fastly.com/documentation/guides/next-gen-waf/setup-and-configuration/kubernetes/kubernetes-agent
---


The official name of the container image for the Next-Gen WAF agent (formerly known as the Signal Sciences agent) is `signalsciences/sigsci-agent`. The `sigsci-agent` container image is available on [Docker Hub](https://hub.docker.com/r/signalsciences/sigsci-agent). You can pull this image with `signalsciences/sigsci-agent:latest` (or replace `latest` with a [version tag](https://hub.docker.com/r/signalsciences/sigsci-agent/tags)). If you need to modify this image or want to build it locally, then follow the instructions below.

## Custom sigsci-agent Dockerfile

You can build on top of the existing `sigsci-agent` container image using `FROM`. However, some care needs to be taken as the Dockerfile is set up to run commands as the `sigsci` user instead of `root`. If you use the recommended Dockerfile, then you may need to change to the `root` user, then back to the `sigsci` user after any system modifications are done.

### Example: Installing an additional package

```text
# Start from the official sigsci-agent container
FROM signalsciences/sigsci-agent:latest

# Change to root to install a package, using `sl` as an example
USER root
RUN apk --no-cache add sl

# Change back to the sigsci user at the end for runtime
USER sigsci
```

## Build the agent Docker container image

Both [https://dl.security.fastly.com](https://dl.security.fastly.com/?prefix=sigsci-agent/) and [https://dl.signalsciences.net](https://dl.signalsciences.net/?prefix=sigsci-agent/) host the recommended `sigsci-agent` Dockerfile in the `sigsci-agent` distribution `.tar.gz` archive. To download and unpack the archive and then build the Docker container image, run the following commands in a terminal application:

<!-- TabbedPanels component: 
<Panel id="dl.security.fastly.com">

```term copy nolinenums
$ curl -O https://dl.security.fastly.com/sigsci-agent/sigsci-agent_latest.tar.gz
$ mkdir sigsci-agent && tar zxvf sigsci-agent_latest.tar.gz -C sigsci-agent
$ cd sigsci-agent
$ make docker
```

</Panel>
<Panel id="dl.signalsciences.net">

```term copy nolinenums
$ curl -O https://dl.signalsciences.net/sigsci-agent/sigsci-agent_latest.tar.gz
$ mkdir sigsci-agent && tar zxvf sigsci-agent_latest.tar.gz -C sigsci-agent
$ cd sigsci-agent
$ make docker
```

</Panel>
 -->

You can use a custom name for the tags by setting `IMAGE_NAME` (e.g., `make IMAGE_NAME=custom-prefix/sigsci-agent docker`).

To build manually, run the following command, replacing `YOUR-TAG` and `YOUR-VERSION`:

```term copy
$ docker build . -t your-tag:your-version
```


## Related content

* [Kubernetes installation overview](/guides/next-gen-waf/setup-and-configuration/kubernetes/kubernetes-intro)