pkidestroy(8)

📦
version 11.2.0 · 4 versions
, in centos-stream 9, ubuntu jammy

💅 pkidestroy(8) — PKI Instance Removal Utility ✨

okay so bestie, this is pkidestroy from the PKI Instance Removal Utility manual, and honestly? it's giving "cleanup era" and I'm obsessed. 🧹💖

🌸 NAME 🌸

pkidestroy — bestie, this is the tool that literally yeets a subsystem out of an instance of PKI server. no cap, that's its whole job. 🫶

🎀 SYNOPSIS 🎀

pkidestroy -s subsystem -i instance [-u security_domain_username] [-W
security_domain_password_file] [-h] [-v]

✨ DESCRIPTION ✨

okay so picture this: you've got an instance of PKI server, and it's got subsystems in it. pkidestroy removes one of those subsystems. literally any of the PKI subsystems — CA, KRA, OCSP, TKS, and TPS. all of them, it can handle it. 💅

now here's the tea ☕ — an instance can hold multiple subsystems at once, but it can have at most one of each type. so for example, an instance could contain CA and KRA subsystems, but not two CA subsystems. that's just how it is, iykyk.

and listen — if pkidestroy is invoked on the last subsystem in the instance, then that whole instance gets removed too. gone. deleted. poof. 💀

also, super important: typically, since subsystems need to contact the CA to update the security domain, the CA instance should be the last instance to be removed. like, don't come for the CA first, bestie, it's main character energy for a reason. the whole system needs it to be there until the end. periodt. 👑

🦋 OPTIONS 🦋

  • -s subsystem — tells it which subsystem to yeet. subsystem is CA, KRA, OCSP, TKS, or TPS. if you don't give it this, pkidestroy will literally prompt you for it. no shade, it's just polite. 🌈
  • -i instance — says which instance you're removing the subsystem from, by name. the instance lives at /var/log/pki/instance. if you don't pass this, it'll prompt you for that too. it's very forthcoming. 🎀
  • -u security_domain_username — the username of the security domain of the subsystem. this one's optional, so like, no pressure. ✨
  • -W security_domain_password_file — points to the file holding the password of the security domain of the subsystem. also optional. you're doing great. 🫶
  • -h, --help — prints additional help info. iconic, honestly. 🙈
  • -v — shows verbose info about the installation. and the bestie part? you can pass this flag multiple times to increase verbosity. stack 'em, slay. check pkidestroy -h for details. 🔥

👑 AUTHORS 👑

Ade Lee lt;alee@redhat.comgt;. — we stan. 🫡 (and yes, the lt; and gt; are literally in there, I don't make the rules, I just report them faithfully 💖)

🌈 SEE ALSO 🌈

pkispawn(8) — the sibling. the origin story. go read it.

Copyright (c) 2012 Red Hat, Inc. — This is licensed under the GNU General Public License, version 2 (GPLv2). A copy of this license is available at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt. 🧚

and that's the whole page, bestie! courtesy of the PKI manual, dated December 13, 2012 — vintage but still slaying, fr fr. ✨🎀💅

📦 where this page comes from