The list offers the stock images plus anything in your workspace registry, but any image reference is accepted — type one if it is not listed.
It must be based on jenkins/inbound-agent, and must not
override ENTRYPOINT or CMD. The plugin injects
JENKINS_URL, JENKINS_SECRET and
JENKINS_AGENT_NAME and relies on that entrypoint to launch
agent.jar. An image without it starts, sits idle, never
connects, and fails at the launch timeout — which looks like a network
problem but is not.
Match the image's JDK to the controller's Java major version.