Overview:

Create an agent that a customer would install on a VM to collect data from the VM and send it to ACS to populate ACS with data about this VM.

Requirements:

• Agent will be shipped as a container image
• Customer will need install podman/docker to run this on non-RHEL or RHEL < 9.6
• Consider using Podman Quadlet to run the agent as a daemon.
• Agent will push data to ACS using its new standard interface

Technical Scope:

• Currently only collect data necessary to match CVEs by ACS Scanner, but the agent should be designed to make this data set expandable, e.g. process listing
• Non-RHEL hosts are included in the scope, but if time runs out and they can't be supported, this can slip from the 4.9 release.

Outstanding Questions (Optional):

• What exactly needs to be collected to have ACS Scanner match vulnerabilities? Definitely RPM listing, possibly dnf repo info, anything else?