Has anyone had any experience setting up wazuh agents on nixos systems?
Would there be interest in adding a wazuh-agent package to nixpkgs?
If not wazuh, what EDR/XDR do people use on nixos?
Did you find any solution?
Nope.
I started trying to package wazuh-agent for nix, but eventually gave up. It doesn’t seem to be worth it. Wazuh seems to be a bunch of patches held together very loosely by bash scripts.
If there is another XDR/EDR which is worth looking at, I’d be glad to know.
Heyyo just to let you guys know, we’ve been working on a Wazuh package and it’s ready to be merged into nixpkgs. The issue currently is just configuration for NixOS and we’re waiting for upstream Wazuh to implement journald support. Very close though.
Here’s the PR: wazuh-agent: init at 4.7.3 by V3ntus · Pull Request #309573 · NixOS/nixpkgs · GitHub