NAME

       bcfg2 - Bcfg2 client tool

SYNOPSIS

       bcfg2 [options]

DESCRIPTION

       bcfg2  runs  the Bcfg2 configuration process on the current host. This process consists of
       the following steps.

       • Fetch and execute probes

       • Upload probe results

       • Fetch the client configuration

       • Check the current client state

       • Attempt to install the desired configuration

       • Upload statistics about the Bcfg2 execution and client state

OPTIONS

       -B     Configure everything except the given bundle(s).

       -C configfile
              Specify alternate bcfg2.conf location.

       -D drivers
              Specify a comma-delimited set of Bcfg2 tool drivers. NOTE: only drivers listed will
              be loaded. (e.g., if you do not include POSIX, you will be unable to verify/install
              Path entries).

       -E encoding
              Specify the encoding of config files.

       -I     Run bcfg2 in interactive mode. The user will be prompted before each change.

       -O     Omit lock check.

       -P     Run bcfg2 in paranoid mode. Diffs will be logged for configuration files marked  as
              paranoid by the Bcfg2 server.

       -Q     Run  bcfg2  in  "bundle quick" mode, where only entries in a bundle are verified or
              installed. This runs much faster than -q, but doesn't  provide  statistics  to  the
              server  at  all.  In  order  for  this  option  to work, the -b option must also be
              provided. This option is incompatible with -r.

       -R retrycount
              Specify the number  of  times  that  the  client  will  attempt  to  retry  network
              communication.

       -S server
              Manually specify the server location (as opposed to using the value in bcfg2.conf).
              This should be in the format "https://server:port"

       -Z     Do not configure independent entries.

       -b bundles
              Run only the specified colon-delimited set of bundles.

       -c cachefile
              Cache a copy of the configuration in cachefile.

       --ca-cert=cacert
              Specifiy the path to the SSL CA certificate.

       -d     Enable debugging output.

       -e     When in verbose mode, display extra entry information.

       -f path
              Configure from a file rather than querying the server.

       -h     Print usage information.

       -k     Run in bulletproof mode.  This  currently  only  affects  behavior  in  the  debian
              toolset; it calls apt-get update and clean and dpkg --configure --pending.

       -l decisionmode
              Run the client in the specified decision list mode ("whitelist" or "blacklist"), or
              "none", which can be used in order to override the decision list mode specified  in
              bcfg2.conf).  This  approach  is  needed  when  particular changes are deemed "high
              risk". It gives the ability tocentrally specify these  changes,  but  only  install
              them  on clients when administrator supervision is available. Because collaborative
              configuration is one of the remaining  hard  issues  in  configuration  management,
              these issues typically crop up in environments with several administrators and much
              configuration variety. (This setting will be ignored  if  the  -f  option  is  also
              specified).

       -n     Run bcfg2 in dry-run mode. No changes will be made to the system.

       -o logfile
              Writes a log to the specified path.

       -p profile
              Assert a profile for the current client.

       -q     Run  bcfg2  in  quick  mode. Package checksum verification won't be performed. This
              mode relaxes the constraints of correctness, and thus should only be used  in  safe
              conditions.

       -r mode
              Cause  bcfg2  to  remove  extra  configuration  elements it detects. Mode is one of
              "all", "Services",  "Packages",  or  "Users".  "all"  removes  all  extra  entries.
              "Services", "Packages", and "Users" remove only the extra configuration elements of
              the respective type.  ("Services" actually just disables extra services, since they
              can't be removed, and "Users" removes extra POSIXUser and POSIXUser entries.)

       -s servicemode
              Set  bcfg2  interaction  level  for  services.  Default  behavior  is to modify all
              services affected by reconfiguration. "build" mode attempts to  stop  all  services
              started. "disabled" suppresses all attempts to modify services.

       --ssl-cert=cert
              Specify the path to the SSL certificate.

       --ssl-cns=CNs
              Colon-delimited list of acceptable SSL server Common Names.

       --ssl-key=key
              Specify the path to the SSL key.

       -u user
              Attempt to authenticate as 'user'.

       -t timeout
              Set the timeout (in seconds) for client communication. Default is 90 seconds.

       -v     Run bcfg2 in verbose mode.

       -x password
              Use 'password' for client communication.

       -z     Only configure independent entries, ignore bundles.

SEE ALSO

       bcfg2-server(8), bcfg2-info(8)