set -euo pipefail

: "${WAZUH_MANAGER:?set WAZUH_MANAGER to the manager IP}"

WAZUH_AGENT_GROUP="${WAZUH_AGENT_GROUP:-linux}"

WAZUH_VERSION="${WAZUH_VERSION:-4.9.0-1}"

if ! command -v apt-get >/dev/null 2>&1; then

    echo "this helper targets debian/ubuntu; install the rpm package manually elsewhere" >&2

    exit 1

fi

curl -s https://packages.wazuh.com/key/GPG-KEY-WAZUH | gpg --no-default-keyring \

    --keyring gnupg-ring:/usr/share/keyrings/wazuh.gpg --import

chmod 644 /usr/share/keyrings/wazuh.gpg

echo "deb [signed-by=/usr/share/keyrings/wazuh.gpg] https://packages.wazuh.com/4.x/apt/ stable main" \

    > /etc/apt/sources.list.d/wazuh.list

apt-get update

WAZUH_MANAGER="${WAZUH_MANAGER}" WAZUH_AGENT_GROUP="${WAZUH_AGENT_GROUP}" \

    apt-get install -y "wazuh-agent=${WAZUH_VERSION}"

systemctl daemon-reload

systemctl enable --now wazuh-agent

echo "agent enrolled against ${WAZUH_MANAGER} in group ${WAZUH_AGENT_GROUP}"