CF-AGENT(8)
π CF-AGENT(8) π
okay bestie, welcome to the System Manager's Manual page for cf-agent β she's the queen bee of the CFEngine crew and she's about to run your whole policy life. β¨
πΈ NAME πΈ
cf-agent β evaluate CFEngine policy code and actuate change to the system.
no cap, that's the whole job description. π«Ά
π¦ SYNOPSIS π¦
cf-agent [OPTION]... [FILE]
π DESCRIPTION π
So cf-agent evaluates policy code and makes changes to the system. That's her whole thing. π
Policy bundles get evaluated in the order of the provided bundlesequence β and that bundlesequence is normally specified in the common control body, iykyk. Then, for each bundle, cf-agent groups promise statements according to their type. And then promise types are evaluated in a preset order, because the goal is fast system convergence to policy. iconic behavior honestly.
β¨ OPTIONS β¨
--bootstrap,-B_value_ β bootstrap CFEngine to the given policy server IP, hostname, or:avahi(that's automatic detection, slay) π--bundlesequence,-b_value_ β set or override the bundlesequence straight from the command line--workdir,-w_value_ β override the default/var/cfenginework directory, for testing purposes (same as settingCFENGINE_TEST_OVERRIDE_WORKDIR)--debug,-dβ enable debugging output π₯--define,-D_value_ β define a list of comma separated classes to be defined at the start of execution--self-diagnostics,-x_value_ β run checks to diagnose a CFEngine agent installation π©Ί--dry-run,-nβ all talk and no action mode, bestie: make no changes, only inform of promises not kept π--file,-f_value_ β specify an alternative input file than the default. Heads up: this option is overridden byFILEif supplied as an argument.--help,-hβ print the help message--inform,-Iβ print basic information about changes made to the system, i.e. promises repaired--log-level,-g_value_ β specify how detailed logs should be. Possible values:'error','warning','notice','info','verbose','debug'--negate,-N_value_ β define a list of comma separated classes to be undefined at the start of execution--no-lock,-Kβ ignore locking constraints during execution (ifelapsed/expireafter) if "too soon" to run--verbose,-vβ output verbose information about the behaviour of the agent--version,-Vβ output the version of the software--timing-output,-tβ output timing information on console when in verbose mode--trust-server,-T_value_ β possible values:'yes'(default, trust the server when bootstrapping),'no'(server key must already be trusted)--color,-C_value_ β enable colorized output. Possible values:'always','auto','never'. If the option is used, the default value is'auto'π--no-extensions,-Eβ disable extension loading (used while upgrading)--timestamp,-lβ log timestamps on each line of log output--ignore-preferred-augments,-β ignoredef_preferred.jsonfile in favor ofdef.json--log-modules,-_value_ β enable even more detailed debug logging for specific areas of the implementation. Use together with'-d'. Use--log-modules=helpfor a list of available modules π--no-augments,-β do not load augments (def.json)--no-host-specific-data,-β do not load host-specific data (host_specific.json)--show-evaluated-classes,-_value_ β show final evaluated classes, including those defined incommonbundles in policy. Optionally can take a regular expression.--show-evaluated-vars,-_value_ β show final evaluated variables, including those defined without dependency to user-defined classes in policy. Optionally can take a regular expression.--skip-bootstrap-policy-run,-β do not run policy as the last step of the bootstrap process--skip-bootstrap-service-start,-β do not start CFEngine services as part of the bootstrap process--skip-db-check,-_value_ β do not run database integrity checks and repairs at startup--simulate,-_value_ β run in simulate mode, either'manifest','manifest-full'or'diff'
π§ CFENGINE π§
CFEngine provides automated configuration management of large-scale computer systems. A system administrator describes the desired state of a system using CFEngine policy code. The program cf-agent reads policy code and attempts to bring the current system state to the desired state described. Policy code is downloaded by cf-agent from a cf-serverd daemon. The daemon cf-execd is responsible for running cf-agent periodically.
Documentation for CFEngine is available at https://docs.cfengine.com/. π
π PROMISE THEORY π
CFEngine is built on principles from promise theory, proposed by Mark Burgess in 2004. Promise theory is a model of voluntary cooperation between individual, autonomous actors or agents who publish their intentions to one another in the form of promises. A promise is a declaration of intent whose purpose is to increase the recipient's certainty about a claim of past, present or future behaviour. For a promise to increase certainty, the recipient needs to trust the promiser, but trust can also be built on the verification that previous promises have been kept, thus trust plays a symbiotic relationship with promises. π«Ά
For an introduction to promise theory, please see http://arxiv.org/abs/0810.3294/
β AVAILABILITY β
cf-agent is part of CFEngine.
Binary packages may be downloaded from https://cfengine.com/download/.
The source code is available at https://github.com/cfengine/
π BUGS π
Please see the public bug-tracker at https://northerntech.atlassian.net/projects/CFE/.
GitHub pull-requests may be submitted to https://github.com/cfengine/core/.
π₯ SEE ALSO π₯
cf-promises(8), cf-agent(8), cf-serverd(8), cf-execd(8), cf-monitord(8), cf-runagent(8), cf-key(8)
π AUTHOR π
Mark Burgess and Northern.tech AS
okay so that's literally the whole page, bestie. go forth and converge. π
and that's the vibe check on this one β she's from the System Administration section of the CFEngine manual, CF-AGENT(8), and yes the manual itself is just called CFEngine. mwah. π
β¨
π¦ where this page comes from
- debian trixie: cfengine3 3.24.1-2 Β· GPL-3.0-only
- Copyright 2024 Northern.tech AS
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms