$ keytool \
-import \
-trustcacerts \
-alias agentcert \
-file /path/to/cacert.pem \
-keystore $JAVA_HOME/jre/lib/security/cacerts

$ agentadmin --listAgents
The following agents are configured on this Application Server.
...
The following are the details for agent Agent_001 :-
...

$ agentadmin --uninstall

Enter the complete path to the directory which is used by Tomcat Server to
store its configuration Files. This directory uniquely identifies the
Tomcat Server instance that is secured by this Agent.
[ ? : Help, ! : Exit ]
Enter the Tomcat Server Config Directory Path
[/opt/apache-tomcat/conf]: /path/to/apache-tomcat/conf

-----------------------------------------------
SUMMARY OF YOUR RESPONSES
-----------------------------------------------
...
Verify your settings above and decide from the choices below.
1. Continue with Uninstallation
2. Back to the last interaction
3. Start Over
4. Exit
Please make your selection [1]: **1**
...

$ agentadmin --listAgents
The following agents are configured on this Application Server.
...
The following are the details for agent Agent_001 :-
...

$ agentadmin --uninstall

Enter the complete path to the home directory of the JBoss instance.
[ ? : Help, ! : Exit ]
Enter the path to the JBoss installation: /path/to/jboss

Enter the name of the deployment mode of the JBoss installation that you wish
to use with this agent. Supported values are: domain, standalone.
[ ? : Help, < : Back, ! : Exit ]
Enter the deployment mode of JBoss [standalone]: standalone

-----------------------------------------------
SUMMARY OF YOUR RESPONSES
-----------------------------------------------
...
Verify your settings above and decide from the choices below.
1. Continue with Uninstallation
2. Back to the last interaction
3. Start Over
4. Exit
Please make your selection [1]: **1**
...

$ agentadmin --listAgents
The following agents are configured on this Application Server.
...
The following are the details for agent Agent_001 :-
...

$ agentadmin --uninstall

Enter the complete path to the directory which is used by Jetty Server to store
its configuration Files. This directory uniquely identifies the Jetty
Server instance that is secured by this Agent.
[ ? : Help, ! : Exit ]
Enter the Jetty Server Config Directory Path [/opt/jetty/etc]: /path/to/jetty/etc

-----------------------------------------------
SUMMARY OF YOUR RESPONSES
-----------------------------------------------
...
Verify your settings above and decide from the choices below.
1. Continue with Uninstallation
2. Back to the last interaction
3. Start Over
4. Exit
Please make your selection [1]: 1
...

$ agentadmin --listAgents
The following agents are configured on this Application Server.
...
The following are the details for agent Agent_001 :-
...

$ agentadmin --uninstall

Enter the path to the location of the script used to start the WebLogic domain.
Please ensure that the agent is first installed on the admin server instance
before installing on any managed server instance.
[ ? : Help, ! : Exit ]
Enter the Startup script location
[/usr/local/bea/user_projects/domains/base_domain/startWebLogic.sh]: /Oracle_Home/user_projects/domains/base_domain/startWebLogic.sh

Enter the name of the WebLogic Server instance secured by the agent.
[ ? : Help, < : Back, ! : Exit ]
Enter the WebLogic Server instance name [AdminServer]: AdminServer

-----------------------------------------------
SUMMARY OF YOUR RESPONSES
-----------------------------------------------
...
Verify your settings above and decide from the choices below.
1. Continue with Uninstallation
2. Back to the last interaction
3. Start Over
4. Exit
Please make your selection [1]: 1
...

<!DOCTYPE web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN" "http://java.sun.com/dtd/web-app_2_3.dtd">
<web-app version="3.0" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd">
 <filter>
  <filter-name>Agent</filter-name>
  <display-name>AM Agent</display-name>
  <description>AM Agent Filter</description>
  <filter-class>com.sun.identity.agents.filter.AmAgentFilter</filter-class>
 </filter>
 <filter-mapping>
  <filter-name>Agent</filter-name>
  <url-pattern>/*</url-pattern>
  <dispatcher>REQUEST</dispatcher>
  <dispatcher>INCLUDE</dispatcher>
  <dispatcher>FORWARD</dispatcher>
  <dispatcher>ERROR</dispatcher>
 </filter-mapping>
 <servlet>
  <servlet-name>ServletInfo</servlet-name>
  <servlet-class>org.forgerock.ServletInfo</servlet-class>
 </servlet>
</web-app>

/path/to/docker$ cat > agent_secret
password
CTRL+D 

# Application Docker image
ARG BASE_DOCKER_IMAGE
FROM ${BASE_DOCKER_IMAGE}

# Install and unzip the application, required for unpacking the agent build.
# Not required if the base image is already unzipped.
# For non-Debian Linux distributions, use the appropriate package manager.
RUN apt-get update && \
	apt-get install unzip --no-install-recommends -y && \
	apt-get clean

# Define the build arguments.
# Arguments without default values must be specified in the build command.
ARG AGENT_VERSION
ARG AGENT_ZIP_FILE=tomcat_agent_2024.6.zip
ARG APP_NAME
ARG AGENT_HOME=/opt
ARG AM_URL
ARG SERVER_HOME=/usr/local/tomcat
ARG AGENT_URL=http://agent.dummy.url:8080/app
ARG AGENT_REALM=/
ARG AGENT_PROFILE

# Copy the agent .zip file to the Docker directory where the agent is installed.
COPY ${AGENT_ZIP_FILE} ${AGENT_HOME}/${AGENT_ZIP_FILE}

# Unzip the agent and delete the .zip file
RUN cd ${AGENT_HOME} && \
	unzip ./${AGENT_ZIP_FILE} && \
	rm -rf ./${AGENT_ZIP_FILE}

# Create an agent installation file called install_file
RUN echo "CONFIG_DIR= ${SERVER_HOME}/conf" > ${AGENT_HOME}/install_file && \
	echo "AM_SERVER_URL= ${AM_URL}" >> ${AGENT_HOME}/install_file && \
	echo "CATALINA_HOME= ${SERVER_HOME}" >> ${AGENT_HOME}/install_file && \
	echo "INSTALL_GLOBAL_WEB_XML= false" >> ${AGENT_HOME}/install_file && \
	echo "AGENT_URL= ${AGENT_URL}" >> ${AGENT_HOME}/install_file && \
	echo "AGENT_PROFILE_NAME= ${AGENT_PROFILE}" >> ${AGENT_HOME}/install_file && \
	echo "AGENT_PROFILE_REALM= ${AGENT_REALM}" >> ${AGENT_HOME}/install_file && \
	echo "AGENT_PASSWORD_FILE= /run/secrets/agent_secret" >> ${AGENT_HOME}/install_file

# Install the agent and mount the file containing the agent password
# This command uses silent installation with a provided install_file
RUN --mount=type=secret,id=agent_secret,required=true \
	"${AGENT_HOME}"/java_agents/tomcat_agent/bin/agentadmin \
	--forceInstall \
	--useResponse ${AGENT_HOME}/install_file && \
	rm -rf ${AGENT_HOME}/install_file

# Copy the new web.xml file, which includes agent filter
COPY web.xml ${AGENT_HOME}/

# Replace the original web.xml with the new web.xml file, which includes agent filter
RUN mkdir /tmp/app && \
	cd /tmp/app/ && \
	mv ${SERVER_HOME}/webapps/${APP_NAME} ./ && \
	jar -xf ./${APP_NAME} && \
	rm -rf ./${APP_NAME} && \
	mv ${AGENT_HOME}/web.xml ./WEB-INF/web.xml && \
	jar -cf ${SERVER_HOME}/webapps/${APP_NAME} * && rm -rf /tmp/app

/path/to/docker$ docker build --secret id=agent_secret \
  --build-arg BASE_DOCKER_IMAGE=fr-sample-app:1.0 \
  --build-arg AGENT_VERSION=2024.6 \
  --build-arg AGENT_ZIP_FILE=tomcat_agent_2024.6.zip \
  --build-arg APP_NAME=app.war \
  --build-arg AGENT_HOME=/opt \
  --build-arg AM_URL=https://am.example.com:8443/am \
  --build-arg AGENT_URL=https://agent.example.com:443/app \
  --build-arg SERVER_HOME=/usr/local/tomcat \
  --build-arg AGENT_REALM=/ \
  --build-arg AGENT_PROFILE=java-agent \
  --tag agent-image:2024.6 .

...
 => => writing image sha256:803...ada  0.0s
 => => naming to docker.io/library/java-agent:2023.11

/path/to/docker$ docker run -it --name java-agent -p 8080:8080 agent-image:2023.11

...INFO [main] org.apache.coyote.AbstractProtocol.start Starting ProtocolHandler...
...INFO [main] org.apache.catalina.startup.Catalina.start Server startup ...