DragonFly On-Line Manual Pages

BCFG2(1)                             Bcfg2                            BCFG2(1)

NAME
       bcfg2 - Bcfg2 client tool

SYNOPSIS
       bcfg2 [options]

DESCRIPTION
       bcfg2 runs the Bcfg2 configuration process on the current host. This
       process consists of the following steps.

       o Fetch and execute probes

       o Upload probe results

       o Fetch the client configuration

       o Check the current client state

       o Attempt to install the desired configuration

       o Upload statistics about the Bcfg2 execution and client state

OPTIONS

       -B     Configure everything except the given bundle(s).

       -C configfile
              Specify alternate bcfg2.conf location.

       -D drivers
              Specify a comma-delimited set of Bcfg2 tool drivers. NOTE: only
              drivers listed will be loaded. (e.g., if you do not include
              POSIX, you will be unable to verify/install Path entries).

       -E encoding
              Specify the encoding of config files.

       -I     Run bcfg2 in interactive mode. The user will be prompted before
              each change.

       -O     Omit lock check.

       -P     Run bcfg2 in paranoid mode. Diffs will be logged for
              configuration files marked as paranoid by the Bcfg2 server.

       -Q     Run bcfg2 in "bundle quick" mode, where only entries in a bundle
              are verified or installed. This runs much faster than -q, but
              doesn't provide statistics to the server at all. In order for
              this option to work, the -b option must also be provided. This
              option is incompatible with -r.

       -R retrycount
              Specify the number of times that the client will attempt to
              retry network communication.

       -S server
              Manually specify the server location (as opposed to using the
              value in bcfg2.conf). This should be in the format
              "https://server:port"

       -Z     Do not configure independent entries.

       -b bundles
              Run only the specified colon-delimited set of bundles.

       -c cachefile
              Cache a copy of the configuration in cachefile.

       --ca-cert=cacert
              Specifiy the path to the SSL CA certificate.

       -d     Enable debugging output.

       -e     When in verbose mode, display extra entry information.

       -f path
              Configure from a file rather than querying the server.

       -h     Print usage information.

       -k     Run in bulletproof mode. This currently only affects behavior in
              the debian toolset; it calls apt-get update and clean and dpkg
              --configure --pending.

       -l decisionmode
              Run the client in the specified decision list mode ("whitelist"
              or "blacklist"), or "none", which can be used in order to
              override the decision list mode specified in bcfg2.conf). This
              approach is needed when particular changes are deemed "high
              risk". It gives the ability tocentrally specify these changes,
              but only install them on clients when administrator supervision
              is available. Because collaborative configuration is one of the
              remaining hard issues in configuration management, these issues
              typically crop up in environments with several administrators
              and much configuration variety. (This setting will be ignored if
              the -f option is also specified).

       -n     Run bcfg2 in dry-run mode. No changes will be made to the
              system.

       -o logfile
              Writes a log to the specified path.

       -p profile
              Assert a profile for the current client.

       -q     Run bcfg2 in quick mode. Package checksum verification won't be
              performed. This mode relaxes the constraints of correctness, and
              thus should only be used in safe conditions.

       -r mode
              Cause bcfg2 to remove extra configuration elements it detects.
              Mode is one of "all", "Services", "Packages", or "Users". "all"
              removes all extra entries.  "Services", "Packages", and "Users"
              remove only the extra configuration elements of the respective
              type.  ("Services" actually just disables extra services, since
              they can't be removed, and "Users" removes extra POSIXUser and
              POSIXUser entries.)

       -s servicemode
              Set bcfg2 interaction level for services. Default behavior is to
              modify all services affected by reconfiguration. "build" mode
              attempts to stop all services started. "disabled" suppresses all
              attempts to modify services.

       --ssl-cert=cert
              Specify the path to the SSL certificate.

       --ssl-cns=CNs
              Colon-delimited list of acceptable SSL server Common Names.

       --ssl-key=key
              Specify the path to the SSL key.

       -u user
              Attempt to authenticate as 'user'.

       -t timeout
              Set the timeout (in seconds) for client communication. Default
              is 90 seconds.

       -v     Run bcfg2 in verbose mode.

       -x password
              Use 'password' for client communication.

       -z     Only configure independent entries, ignore bundles.

SEE ALSO
       bcfg2-server(8), bcfg2-info(8)

1.3                             March 18, 2013                        BCFG2(1)