.\"Copyright 2023 Northern.tech AS .\" .\"This file is part of CFEngine 3 - written and maintained by Northern.tech AS. .\" .\"This program is free software; you can redistribute it and/or modify it .\"under the terms of the GNU General Public License as published by the .\"Free Software Foundation; version 3. .\" .\"This program is distributed in the hope that it will be useful, .\"but WITHOUT ANY WARRANTY; without even the implied warranty of .\"MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the .\"GNU General Public License for more details. .\" .\"You should have received a copy of the GNU General Public License .\"along with this program; if not, write to the Free Software .\"Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA .\" .\"To the extent this program is licensed as part of the Enterprise .\"versions of CFEngine, the applicable Commercial Open Source License .\"(COSL) may apply to this file if you as a licensee so wish it. See .\"included file COSL.txt. .TH CF-AGENT 8 "CFEngine" "System Administration" .SH NAME cf-agent \- evaluate CFEngine policy code and actuate change to the system. .SH SYNOPSIS .B cf-agent .RI [ OPTION ]... .RI [ FILE ] .SH DESCRIPTION cf-agent evaluates policy code and makes changes to the system. Policy bundles are evaluated in the order of the provided bundlesequence (this is normally specified in the common control body). For each bundle, cf-agent groups promise statements according to their type. Promise types are then evaluated in a preset order to ensure fast system convergence to policy. .SH OPTIONS .IP "--bootstrap, -B value" Bootstrap CFEngine to the given policy server IP, hostname or :avahi (automatic detection) .IP "--bundlesequence, -b value" Set or override bundlesequence from command line .IP "--workdir, -w value" Override the default /var/cfengine work directory for testing (same as setting CFENGINE_TEST_OVERRIDE_WORKDIR) .IP "--debug, -d" Enable debugging output .IP "--define, -D value" Define a list of comma separated classes to be defined at the start of execution .IP "--self-diagnostics, -x value" Run checks to diagnose a CFEngine agent installation .IP "--dry-run, -n" All talk and no action mode - make no changes, only inform of promises not kept .IP "--file, -f value" Specify an alternative input file than the default. This option is overridden by FILE if supplied as argument. .IP "--help, -h" Print the help message .IP "--inform, -I" Print basic information about changes made to the system, i.e. promises repaired .IP "--log-level, -g value" Specify how detailed logs should be. Possible values: 'error', 'warning', 'notice', 'info', 'verbose', 'debug' .IP "--negate, -N value" Define a list of comma separated classes to be undefined at the start of execution .IP "--no-lock, -K" Ignore locking constraints during execution (ifelapsed/expireafter) if "too soon" to run .IP "--verbose, -v" Output verbose information about the behaviour of the agent .IP "--version, -V" Output the version of the software .IP "--timing-output, -t" Output timing information on console when in verbose mode .IP "--trust-server, -T value" Possible values: 'yes' (default, trust the server when bootstrapping), 'no' (server key must already be trusted) .IP "--color, -C value" Enable colorized output. Possible values: 'always', 'auto', 'never'. If option is used, the default value is 'auto' .IP "--no-extensions, -E" Disable extension loading (used while upgrading) .IP "--timestamp, -l" Log timestamps on each line of log output .IP "--ignore-preferred-augments, -" Ignore def_preferred.json file in favor of def.json .IP "--log-modules, - value" Enable even more detailed debug logging for specific areas of the implementation. Use together with '-d'. Use --log-modules=help for a list of available modules .IP "--show-evaluated-classes, - value" Show *final* evaluated classes, including those defined in common bundles in policy. Optionally can take a regular expression. .IP "--show-evaluated-vars, - value" Show *final* evaluated variables, including those defined without dependency to user-defined classes in policy. Optionally can take a regular expression. .IP "--skip-bootstrap-policy-run, -" Do not run policy as the last step of the bootstrap process .IP "--skip-db-check, - value" Do not run database integrity checks and repairs at startup .IP "--simulate, - value" Run in simulate mode, either 'manifest', 'manifest-full' or 'diff' .SH CFENGINE CFEngine provides automated configuration management of large-scale computer systems. A system administrator describes the desired state of a system using CFEngine policy code. The program \fBcf-agent\fR reads policy code and attempts to bring the current system state to the desired state described. Policy code is downloaded by \fBcf-agent\fR from a \fBcf-serverd\fR daemon. The daemon \fBcf-execd\fR is responsible for running \fBcf-agent\fR periodically. .br Documentation for CFEngine is available at https://docs.cfengine.com/. .SH PROMISE THEORY CFEngine is built on principles from promise theory, proposed by Mark Burgess in 2004. Promise theory is a model of voluntary cooperation between individual, autonomous actors or agents who publish their intentions to one another in the form of promises. A promise is a declaration of intent whose purpose is to increase the recipient's certainty about a claim of past, present or future behaviour. For a promise to increase certainty, the recipient needs to trust the promiser, but trust can also be built on the verification that previous promises have been kept, thus trust plays a symbiotic relationship with promises. .br For an introduction to promise theory, please see http://arxiv.org/abs/0810.3294/ .SH AVAILABILITY cf-agent is part of CFEngine. .br Binary packages may be downloaded from https://cfengine.com/download/. .br The source code is available at https://github.com/cfengine/ .SH BUGS Please see the public bug-tracker at https://northerntech.atlassian.net/projects/CFE/. .br GitHub pull-requests may be submitted to https://github.com/cfengine/core/. .SH "SEE ALSO" .BR cf-promises (8), .BR cf-agent (8), .BR cf-serverd (8), .BR cf-execd (8), .BR cf-monitord (8), .BR cf-runagent (8), .BR cf-key (8) .SH AUTHOR Mark Burgess and Northern.tech AS