FENCE_AGENT(8)

💖 FENCE_AGENT(8) 💖

okay bestie, buckle up, we're doing the fence_agent manual page (that's the 8th section of the manual, system manager's stuff, iykyk) and honestly? it ate. ✨

---

✨ NAME ✨

fence_ilo — Fence agent for HP iLO 💅

fence_ilo2 — Fence agent for HP iLO2 (symlink) 🎀

---

🌸 DESCRIPTION 🌸

okay so fence_ilo is a Power Fencing agent used for HP servers with the Integrated Light Out (iLO) PCI card. no cap. 🫶

the agent opens an SSL connection to the iLO card, and once that SSL connection is established, the agent is able to communicate with the iLO card through an XML stream. it's giving secure little handshake. iconic honestly. 🌈

the fence agent accepts options on the command line as well as from stdin. Fenced sends parameters through stdin when it execs the agent. and you can run the agent by itself with command line options — super useful for testing and for turning outlets on or off from scripts. main character energy fr fr. 💖

Vendor URL: http://www.hp.com

---

👑 PARAMETERS 👑

one bullet per option, bestie, and yes we're doing ALL of them. not a single one skipped. periodt.

• -o, --action=[action] — the fencing action (Default Value: reboot)
• -a, --ip=[ip] — IP address or hostname of fencing device
• -u, --ipport=[port] — TCP/UDP port to use for connection with device (Default Value: 443)
• -t, --notls — Disable TLS negotiation and force SSL3.0. This should only be used for devices that do not support TLS1.0 and up.
• -p, --password=[password] — Login password or passphrase
• -S, --password-script=[script] — Script to run to retrieve password
• -n, --plug=[ip] — IP address or hostname of fencing device (together with --port-as-ip)
• -r, --ribcl-version=[version] — Force ribcl version to use
• -z, --ssl — Use SSL connection with verifying certificate (Default Value: 1)
• --ssl-insecure — Use SSL connection without verifying certificate
• --ssl-secure — Use SSL connection with verifying certificate
• --tls1.0 — Disable TLS negotiation and force TLS1.0. This should only be used for devices that do not support TLS1.1 and up.
• -l, --username=[name] — Login name. This parameter is always required. ⚠️ (yes always, like the way you always need your phone at 3am)
• -q, --quiet — Disable logging to stderr. Does not affect --verbose or --debug-file or logging to syslog.
• -v, --verbose — Verbose mode. Multiple -v flags can be stacked on the command line (e.g., -vvv) to increase verbosity.
• --verbose-level — Level of debugging detail in output. Defaults to the number of --verbose flags specified on the command line, or to 1 if verbose=1 in a stonith device configuration (i.e., on stdin).
• -D, --debug-file=[debugfile] — Write debug information to given file
• -V, --version — Display version information and exit
• -h, --help — Display help and exit
• --plug-separator=[char] — Separator for plug parameter when specifying more than 1 plug (Default Value: ,)
• --delay=[seconds] — Wait X seconds before fencing is started (Default Value: 0)
• --disable-timeout=[true/false] — Disable timeout (true/false) (default: true when run from Pacemaker 2.0+)
• --login-timeout=[seconds] — Wait X seconds for cmd prompt after login (Default Value: 10)
• --port-as-ip — Make "port/plug" to be an alias to IP address
• --power-timeout=[seconds] — Test X seconds for status change after ON/OFF (Default Value: 20)
• --power-wait=[seconds] — Wait X seconds after issuing ON/OFF (Default Value: 0)
• --shell-timeout=[seconds] — Wait X seconds for cmd prompt after issuing command (Default Value: 3)
• --stonith-status-sleep=[seconds] — Sleep X seconds between status calls during a STONITH action (Default Value: 1)
• --retry-on=[attempts] — Count of attempts to retry power on (Default Value: 3)
• --gnutlscli-path=[path] — Path to gnutls-cli binary (Default Value: /usr/bin/gnutls-cli)

---

🔥 ACTIONS 🔥

• on — Power on machine. ⚡
• off — Power off machine. 💀
• reboot — Reboot machine. 🔄
• status — This returns the status of the plug/virtual machine.
• monitor — Check the health of fence device
• metadata — Display the XML metadata describing this resource.
• manpage — The operational behavior of this is not known. 🙈 (bestie we literally do not know, and we're being honest about it)
• validate-all — Validate if all required parameters are entered.

---

🦋 STDIN PARAMETERS 🦋

these are the ones Fenced pipes in through stdin, and they're basically the glow-up versions of the flags above (snake_case edition 💅).

• action — Fencing action (Default Value: reboot)
• ip — IP address or hostname of fencing device Obsoletes: ipaddr
• ipport — TCP/UDP port to use for connection with device (Default Value: 443)
• notls — Disable TLS negotiation and force SSL3.0. This should only be used for devices that do not support TLS1.0 and up.
• password — Login password or passphrase Obsoletes: passwd
• password_script — Script to run to retrieve password Obsoletes: passwd_script
• plug — IP address or hostname of fencing device (together with --port-as-ip) Obsoletes: port
• ribcl_version — Force ribcl version to use Obsoletes: ribcl
• ssl — Use SSL connection with verifying certificate (Default Value: 1)
• ssl_insecure — Use SSL connection without verifying certificate
• ssl_secure — Use SSL connection with verifying certificate
• tls1.0 — Disable TLS negotiation and force TLS1.0. This should only be used for devices that do not support TLS1.1 and up.
• username — Login name This parameter is always required. Obsoletes: login
• quiet — Disable logging to stderr. Does not affect --verbose or --debug-file or logging to syslog.
• verbose — Verbose mode. Multiple -v flags can be stacked on the command line (e.g., -vvv) to increase verbosity.
• verbose_level — Level of debugging detail in output. Defaults to the number of --verbose flags specified on the command line, or to 1 if verbose=1 in a stonith device configuration (i.e., on stdin).
• debug_file — Write debug information to given file Obsoletes: debug
• version — Display version information and exit
• help — Display help and exit
• plug_separator — Separator for plug parameter when specifying more than 1 plug (Default Value: ,)
• delay — Wait X seconds before fencing is started (Default Value: 0)
• disable_timeout — Disable timeout (true/false) (default: true when run from Pacemaker 2.0+)
• login_timeout — Wait X seconds for cmd prompt after login (Default Value: 10)
• port_as_ip — Make "port/plug" to be an alias to IP address
• power_timeout — Test X seconds for status change after ON/OFF (Default Value: 20)
• power_wait — Wait X seconds after issuing ON/OFF (Default Value: 0)
• shell_timeout — Wait X seconds for cmd prompt after issuing command (Default Value: 3)
• stonith_status_sleep — Sleep X seconds between status calls during a STONITH action (Default Value: 1)
• retry_on — Count of attempts to retry power on (Default Value: 3)
• gnutlscli_path — Path to gnutls-cli binary (Default Value: /usr/bin/gnutls-cli)

---

⚠️ heads up bestie: --notls forces SSL3.0 and --tls1.0 forces TLS1.0, and the page says both should only be used for devices that do not support the newer stuff. don't just turn those on for fun, fr fr. 🚨

---

and that's the whole thing! this page is fence_ilo (Fence Agent), dated 2009-10-20, and it lives in the FENCE_AGENT(8) corner of the manual. slay, go fence some servers responsibly 💖✨🎀🦋👑