Incus Container to run hermes-agent

Incus

install packages

Just follow the official document to install incus

1
apt install incus incus-base

config nftables rules

• one inet table with 2 chain

  • postrouting for nat
  • input to allow port 53 for dns to incus containers/VMs, port 67 for DHCPv4 to assign containers/VMs ip address

  1
  #!/usr/sbin/nft -f
  2
  
  3
  flush ruleset
  4
  
  5
  
  6
  table inet filter {
  7
  
  8
          chain postrouting {
  9
            type nat hook postrouting priority 100;
  10
            oifname "eth0" masquerade
  11
          }
  12
  
  13
          chain input {
  14
                  udp dport 53 accept
  15
                  udp dport 67 accept
  16
          }
  17
  
  18
  }

Configure sysctl

1
sysctl net.ipv4.conf.all.forwarding=1

and add to /etc/sysctl.d/10-incus-inotify.conf for persistence

1
net.ipv4.conf.all.forwarding=1

Initial containers

• create container

  1
  incus launch images:debian/13 hermes-agent
  2
  incus list

• add share folder between host and container

  1
  incus config device add code-agent data-reports disk source=/home/user/reports path=/data/reports shift=true

  • code-agent, the name of the container.
  • data-reports, the name of the shared folder. This is only visible from the host, and it’s just any name. We need a name so that we can specify the device when we want to perform further management. disk, this is a disk device. Currently, Incus supports 12 types of devices.
  • source=/home/user/reports, the absolute path to the source folder. We type source= and then source folder, no spaces in between. The source folder (which is on the host) must already exist.
  • path=/data/reports, the absolute path to the folder in the container.
  • shift=true, the setting that automagically performs the necessary UID/GID translation.

• other config for the container

1
incus exec hermes-agent -- /bin/bash
2

3
## enter into the container
4
root@hermes-agent:~# apt install openssh-server vim git curl xz-utils
5

6
## other packages or configurations ....

add user

1
useradd -m -d /data/hermes -s /bin/bash hermes
2
passwd hermes
3
# add user to /etc/sudoers
4
hermes
5
### install hermes-agent  inside container
6

7
- Install hermes agent
8
```sh
9
curl -fsSL https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh | bash

• config model
• config wexin

  1
  cd .hermes/hermes-agent
  2
  source venv/bin/activate
  3
  uv pip install pip
  4
  pip install aiohttp cryptography qrcode
  5
  hermes gateway setup
  6
  ## choose wexin or whatsapp or discord or telegram to config