FENCE_AGENT(8)

✨ FENCE_AGENT(8) — the girlies' guide to fencing HP servers ✨

System Manager's Manual energy, bestie. This is FENCE_AGENT(8) and we're gonna make it make sense. 💖

---

🎀 NAME

fence_ilo — the fence agent for HP iLO. And fence_ilo2 — the fence agent for HP iLO2, which is literally just a symlink. Same girl, different name. 💅

---

🌸 DESCRIPTION

So fence_ilo2 is a Power Fencing agent for HP servers that have the Integrated Light Out (iLO) PCI card. The way it works? The agent opens an SSL connection to the iLO card. Once that SSL connection is up and running, the agent can talk to the iLO card through an XML stream. No cap. 🦋

Also, this fence agent takes options on the command line and from stdin. When fenced execs the agent, it sends the parameters through stdin. But you can also just run the agent all by itself with command line options — which is lowkey so useful for testing and for turning outlets on or off from scripts. ✨

Vendor URL: http://www.hp.com 👑

---

💜 PARAMETERS

Every flag, every default, all of it. Don't skip a single one, bestie. 🙈

• -o, --action=[action] — what fencing action we're doing (Default Value: reboot)
• -a, --ip=[ip] — IP address or hostname of the fencing device
• -u, --ipport=[port] — the TCP/UDP port we use to connect to the device (Default Value: 443)
• -t, --notls — disables TLS negotiation and forces SSL3.0. Only use this for devices that don't support TLS1.0 and up, okay??
• -p, --password=[password] — login password or passphrase
• -S, --password-script=[script] — script to run to go get that password
• -n, --plug=[ip] — IP address or hostname of the fencing device (this goes together with --port-as-ip)
• -r, --ribcl-version=[version] — force which ribcl version to use
• -z, --ssl — use an SSL connection with certificate verifying (Default Value: 1)
• --ssl-insecure — use an SSL connection without verifying the certificate
• --ssl-secure — use an SSL connection with verifying the certificate
• --tls1.0 — disables TLS negotiation and forces TLS1.0. Only for devices that don't support TLS1.1 and up!
• -l, --username=[name] — login name. This parameter is always required. Periodt.
• -q, --quiet — turns off logging to stderr. Does not affect --verbose, --debug-file, or logging to syslog.
• -v, --verbose — verbose mode. You can stack multiple -v flags on the command line (like -vvv) to crank up the verbosity. 🎚️
• --verbose-level — how much debugging detail shows up in output. Defaults to the number of --verbose flags you gave on the command line, or to 1 if verbose=1 in a stonith device configuration (i.e., on stdin).
• -D, --debug-file=[debugfile] — write debug info to the given file
• -V, --version — show version info and exit
• -h, --help — show help and exit
• --plug-separator=[char] — the separator for the plug parameter when you're specifying more than 1 plug (Default Value: ,)
• --delay=[seconds] — wait X seconds before fencing even starts (Default Value: 0)
• --disable-timeout=[true/false] — disable timeout, true or false (default: true when run from Pacemaker 2.0+)
• --login-timeout=[seconds] — wait X seconds for the cmd prompt after login (Default Value: 10)
• --port-as-ip — makes "port/plug" an alias to the IP address
• --power-timeout=[seconds] — test X seconds for a status change after ON/OFF (Default Value: 20)
• --power-wait=[seconds] — wait X seconds after issuing ON/OFF (Default Value: 0)
• --shell-timeout=[seconds] — wait X seconds for the cmd prompt after issuing a command (Default Value: 3)
• --stonith-status-sleep=[seconds] — sleep X seconds between status calls during a STONITH action (Default Value: 1)
• --retry-on=[attempts] — how many attempts to retry power on (Default Value: 3)
• --gnutlscli-path=[path] — path to the gnutls-cli binary (Default Value: /usr/bin/gnutls-cli)

---

🔥 ACTIONS

• on — power on the machine 💡
• off — power off the machine
• reboot — reboot the machine 🔄
• status — returns the status of the plug/virtual machine
• monitor — check the health of the fence device 🩺
• metadata — display the XML metadata describing this resource
• manpage — ngl, the operational behavior of this one is not known 💀
• validate-all — validate that all required parameters are entered

---

🌈 STDIN PARAMETERS

Same vibes, underscore names, and some of them have Obsoletes — meaning the old name still hangs around like an ex. 😭

• action — fencing action (Default Value: reboot)
• ip — IP address or hostname of fencing device. Obsoletes: ipaddr
• ipport — TCP/UDP port to use for connection with device (Default Value: 443)
• notls — disable TLS negotiation and force SSL3.0. Only for devices that don't support TLS1.0 and up.
• password — login password or passphrase. Obsoletes: passwd
• password_script — script to run to retrieve password. Obsoletes: passwd_script
• plug — IP address or hostname of fencing device (together with --port-as-ip). Obsoletes: port
• ribcl_version — force ribcl version to use. Obsoletes: ribcl
• ssl — use SSL connection with verifying certificate (Default Value: 1)
• ssl_insecure — use SSL connection without verifying certificate
• ssl_secure — use SSL connection with verifying certificate
• tls1.0 — disable TLS negotiation and force TLS1.0. Only for devices that don't support TLS1.1 and up.
• username — login name. This parameter is always required. Obsoletes: login
• quiet — disable logging to stderr. Does not affect --verbose or --debug-file or logging to syslog.
• verbose — verbose mode. Multiple -v flags can be stacked on the command line (e.g., -vvv) to increase verbosity.
• verbose_level — level of debugging detail in output. Defaults to the number of --verbose flags specified on the command line, or to 1 if verbose=1 in a stonith device configuration (i.e., on stdin).
• debug_file — write debug information to given file. Obsoletes: debug
• version — display version information and exit
• help — display help and exit
• plug_separator — separator for plug parameter when specifying more than 1 plug (Default Value: ,)
• delay — wait X seconds before fencing is started (Default Value: 0)
• disable_timeout — disable timeout (true/false) (default: true when run from Pacemaker 2.0+)
• login_timeout — wait X seconds for cmd prompt after login (Default Value: 10)
• port_as_ip — make "port/plug" to be an alias to IP address
• power_timeout — test X seconds for status change after ON/OFF (Default Value: 20)
• power_wait — wait X seconds after issuing ON/OFF (Default Value: 0)
• shell_timeout — wait X seconds for cmd prompt after issuing command (Default Value: 3)
• stonith_status_sleep — sleep X seconds between status calls during a STONITH action (Default Value: 1)
• retry_on — count of attempts to retry power on (Default Value: 3)
• gnutlscli_path — path to gnutls-cli binary (Default Value: /usr/bin/gnutls-cli)

---

🫶 That's the whole page, bestie. Every flag, every default, every obsoleted name — nothing got left behind. Slay.

This one's a fence_ilo (Fence Agent) situation, dated 2009-10-20, and it's page FENCE_AGENT(8) of your system manager's manual. Byeee, go fence something responsibly 💖✨