Incus Container to run hermes-agent

Incus

install packages

Just follow the official document to install incus

1
apt install incus incus-base

config nftables rules

• one inet table with 2 chain

  • postrouting for nat
  • input to allow port 53 for dns to incus containers/VMs, port 67 for DHCPv4 to assign containers/VMs ip address

  1
  #!/usr/sbin/nft -f
  2
  
  3
  flush ruleset
  4
  
  5
  
  6
  table inet filter {
  7
  
  8
          chain postrouting {
  9
            type nat hook postrouting priority 100;
  10
            oifname "eth0" masquerade
  11
          }
  12
  
  13
          chain input {
  14
                  udp dport 53 accept
  15
                  udp dport 67 accept
  16
          }
  17
  
  18
  }

Configure sysctl

1
sysctl net.ipv4.conf.all.forwarding=1

and add to /etc/sysctl.d/10-incus-inotify.conf for persistence

1
net.ipv4.conf.all.forwarding=1

Initial containers

• create container

  1
  incus launch images:debian/13 hermes-agent
  2
  incus list

• other config for the container

1
incus exec hermes-agent -- /bin/bash
2

3
## enter into the container
4
root@hermes-agent:~# apt install openssh-server vim git curl xz-utils
5

6
## other packages or configurations ....

add user

1
useradd -m -d /data/hermes -s /bin/bash hermes
2
passwd hermes
3
# add user to /etc/sudoers
4
hermes
5
### install hermes-agent  inside container
6

7
- Install hermes agent
8
```sh
9
curl -fsSL https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh | bash

• config model
• config wexin

  1
  cd .hermes/hermes-agent
  2
  source venv/bin/activate
  3
  uv pip install pip
  4
  pip install aiohttp cryptography qrcode
  5
  hermes gateway setup
  6
  ## choose wexin or whatsapp or discord or telegram to config