Puppet 命令参数介绍(三)

浅见池也

[root@puppet puppet]# puppet agent --help　　
#
　　
* --certname:    #指定客户端certname（唯一ID），通常以域名命名
　　
  Set the certname (unique ID) of the client. The master reads this
　　
  unique identifying string, which is usually set to the node's
　　
  fully-qualified domain name, to determine which configurations the
　　
  node will receive. Use this option to debug setup problems or
　　
  implement unusual node identification schemes.
　　
  (This is a Puppet setting, and can go in puppet.conf.)
　　
* --daemonize:    #启动进程发送到后台守护进程，默认选项
　　
  Send the process into the background. This is the default.
　　
  (This is a Puppet setting, and can go in puppet.conf. Note the special 'no-'
　　
  prefix for boolean settings on the command line.)
　　
* --no-daemonize:    #不发送到后台守护进程
　　
  Do not send the process into the background.
　　
  (This is a Puppet setting, and can go in puppet.conf. Note the special 'no-'
　　
  prefix for boolean settings on the command line.)
　　
* --debug:    #debug调试模式
　　
  Enable full debugging.
　　
* --detailed-exitcodes:    #提供详细的退出代码
　　
  Provide transaction information via exit codes. If this is enabled, an exit
　　
  code of '2' means there were changes, an exit code of '4' means there were
　　
  failures during the transaction, and an exit code of '6' means there were both
　　
  changes and failures.
　　
* --digest:    #指定证书指纹算法，默认为md5
　　
  Change the certificate fingerprinting digest algorithm. The default is
　　
  SHA256. Valid values depends on the version of OpenSSL installed, but
　　
  will likely contain MD5, MD2, SHA1 and SHA256.
　　
* --disable:    #禁用puppet agent 在此节点执行，agent的守护进程还是运行的，只是此节点不去master同步配置了.
　　
  Disable working on the local system. This puts a lock file in place,
　　
  causing 'puppet agent' not to work on the system until the lock file
　　
  is removed. This is useful if you are testing a configuration and do
　　
  not want the central configuration to override the local state until
　　
  everything is tested and committed.
　　
  Disable can also take an optional message that will be reported by the
　　
  'puppet agent' at the next disabled run.
　　
  'puppet agent' uses the same lock file while it is running, so no more
　　
  than one 'puppet agent' process is working at a time.
　　
  'puppet agent' exits after executing this.
　　
* --enable:    #启用，允许执行puppet agent -t 同步配置.
　　
  Enable working on the local system. This removes any lock file,
　　
  causing 'puppet agent' to start managing the local system again
　　
  (although it will continue to use its normal scheduling, so it might
　　
  not start for another half hour).
　　
  'puppet agent' exits after executing this.
　　
* --fingerprint:    #显示当前证书的指纹
　　
  Display the current certificate or certificate signing request
　　
  fingerprint and then exit. Use the '--digest' option to change the
　　
  digest algorithm used.
　　
* --help:
　　
  Print this help message
　　
* --logdest:    #日志发送方式，默认采用syslog配置
　　
  Where to send log messages. Choose between 'syslog' (the POSIX syslog
　　
  service), 'eventlog' (the Windows Event Log), 'console', or the path to a log
　　
  file. If debugging or verbosity is enabled, this defaults to 'console'.
　　
  Otherwise, it defaults to 'syslog' on POSIX systems and 'eventlog' on Windows.
　　
  A path ending with '.json' will receive structured output in JSON format. The
　　
  log file will not have an ending ']' automatically written to it due to the
　　
  appending nature of logging. It must be appended manually to make the content
　　
  valid JSON.
　　
* --masterport:    #指令puppet端口的
　　
  The port on which to contact the puppet master.
　　
  (This is a Puppet setting, and can go in puppet.conf.)
　　
* --no-client:    #不要创建客户端配置文件，当listen=true 时才有意义
　　
  Do not create a config client. This will cause the daemon to start
　　
  but not check configuration unless it is triggered with `puppet
　　
  kick`. This only makes sense when puppet agent is being run with
　　
  listen = true in puppet.conf or was started with the `--listen` option.
　　
* --noop:    #使用'noop'模式，仅运行测试，catalog不在agent端应用.
　　
  Use 'noop' mode where the daemon runs in a no-op or dry-run mode. This
　　
  is useful for seeing what changes Puppet will make without actually
　　
  executing the changes.
　　
  (This is a Puppet setting, and can go in puppet.conf. Note the special 'no-'
　　
  prefix for boolean settings on the command line.)
　　
* --onetime:    #运行一次，配合--no-daemonize使用
　　
  Run the configuration once. Runs a single (normally daemonized) Puppet
　　
  run. Useful for interactively running puppet agent when used in
　　
  conjunction with the --no-daemonize option.
　　
  (This is a Puppet setting, and can go in puppet.conf. Note the special 'no-'
　　
  prefix for boolean settings on the command line.)
　　
* --test:    #测试，但是会在本地应用catalog
　　
  Enable the most common options used for testing. These are 'onetime',
　　
  'verbose', 'ignorecache', 'no-daemonize', 'no-usecacheonfailure',
　　
  'detailed-exitcodes', 'no-splay', and 'show_diff'.
　　
* --verbose:    #显示puppet扩展信息
　　
  Turn on verbose reporting.
　　
* --version:    #显示puppet版本信息
　　
  Print the puppet version number and exit.
　　
* --waitforcert:    #agent向master证书认证等待时间，默认为agent2分钟向master请求一次，如果设为0，表示不等待.
　　
  This option only matters for daemons that do not yet have certificates
　　
  and it is enabled by default, with a value of 120 (seconds). This
　　
  causes 'puppet agent' to connect to the server every 2 minutes and ask
　　
  it to sign a certificate request. This is useful for the initial setup
　　
  of a puppet client. You can turn off waiting for certificates by
　　
  specifying a time of 0.
　　
  (This is a Puppet setting, and can go in puppet.conf. Note the special 'no-'
　　
  prefix for boolean settings on the command line.)