Container image the controller will SSH into. It must contain a JRE, because the controller copies agent.jar across and runs it there.