This only applies for external facing agents. MicroVMs or VPS is the way to go for internal facing agents, much easier to simply run out of the box harness in a full linux machine.