Every command¶
Generated from the command tree, so a command cannot exist without a row
here. The reference column points at the section that documents it; the
Short text is the command's own, as morzer --help prints it.
| Command | What it does | Reference |
|---|---|---|
morzer init |
Create a new installation | commands |
morzer apply |
Converge the system to the installed release | commands |
morzer status |
Show what is deployed and whether it is working | commands |
morzer update |
Install a new release over the current one | commands |
morzer rollback |
Return to the previous release | commands |
morzer config |
Read and change the release parameters | parameters |
morzer config list (also ls) |
Show every parameter the release declares | parameters |
morzer config get |
Print one parameter's effective value | parameters |
morzer config set |
Change one or more parameters, or an installation setting | parameters |
morzer config unset |
Return parameters or a setting to their defaults | parameters |
morzer config settings |
Show the installation settings and their values | parameters |
morzer secret |
Manage the encrypted secret state | secret-commands |
morzer secret list |
List secret names, fingerprints and metadata — never values | secret-commands |
morzer secret set |
Set a secret, reading the value from the terminal or stdin | secret-commands |
morzer secret generate |
Generate a secret using the release's declared generator | secret-commands |
morzer secret remove |
Delete a secret | secret-commands |
morzer secret rotate |
Replace a secret with a freshly generated value | secret-commands |
morzer secret edit |
Edit several secrets in one editor session | secret-commands |
morzer secret render |
Render secrets to the tmpfs directory the product reads | secret-commands |
morzer secret recipients |
Manage who can decrypt the secret state | secret-commands |
morzer secret recipients list |
List recipients | secret-commands |
morzer secret recipients add |
Add a recipient and re-encrypt the state for it | secret-commands |
morzer secret recipients remove |
Remove a recipient and re-encrypt without it | secret-commands |
morzer secret recipients generate-recovery-key |
Create an offline recovery identity; show its public key | secret-commands |
morzer notify |
Manage where operation outcomes are reported | commands |
morzer notify target |
Manage the webhooks this deployment reports to | commands |
morzer notify target add |
Report to a webhook | commands |
morzer notify target remove |
Stop reporting to a webhook | commands |
morzer notify target list |
List the webhooks this deployment reports to | commands |
morzer doctor |
Run read-only diagnostics | commands |
morzer logs |
Read the deployment's logs | commands |
morzer ps |
List the deployment's containers | commands |
morzer stats |
Show CPU, memory and I/O per container | commands |
morzer exec |
Run a command inside a running service | commands |
morzer task |
Run a command the release declares | commands |
morzer task list |
List the tasks the installed release declares | commands |
morzer task run |
Run a task the installed release declares | commands |
morzer support |
Produce evidence somebody else can read | support-bundle |
morzer support bundle |
Write one archive describing this installation, safe to send | support-bundle |
morzer support redact |
Say whether a file holds any of this installation's secrets | support-bundle |
morzer support inspect |
List what is in a support archive, and check its signature | support-bundle |
morzer attest |
Read back the signed record of what this machine did | attestations |
morzer attest log |
List what this machine has recorded, newest first | attestations |
morzer attest verify |
Check the signatures, the chain, and what is running now | attestations |
morzer attest push |
Copy statements that are only on this machine to the targets | attestations |
morzer backup |
Back up the database, volumes, configuration and secret state | commands |
morzer backup list |
List backups, newest first | commands |
morzer backup verify |
Re-read a backup and check its checksums | commands |
morzer backup target |
Manage where backups are kept besides this machine | commands |
morzer backup target add |
Add a backup target | commands |
morzer backup target remove |
Stop keeping backups at a target | commands |
morzer backup target list |
List backup targets and whether they can be reached | commands |
morzer backup push |
Copy an existing backup to every configured target | commands |
morzer backup fetch |
Copy a backup down from a target onto this machine | commands |
morzer restore |
Restore from a backup | commands |
morzer release |
Inspect and manage release bundles | release-commands |
morzer release list |
List installed releases, newest first | release-commands |
morzer release show |
Show a release manifest; the installed one when no version is given | release-commands |
morzer release new |
Scaffold a bundle skeleton that already verifies | release-commands |
morzer release verify |
Validate a bundle's manifest and check its integrity | release-commands |
morzer release pack |
Copy the images a manifest marks from: bundle into the bundle |
release-commands |
morzer release build |
Stamp a version, regenerate the checksum list, and check the result | release-commands |
morzer release archive |
Pack a bundle directory into a release archive | release-commands |
morzer release fetch |
Fetch a release bundle into the release store | release-commands |
morzer release ingest |
Load the images the installed release carries into the local store | release-commands |
morzer release prune |
Remove old releases beyond the retention policy | release-commands |
morzer release trust |
Manage the keys a release must be signed with | release-commands |
morzer release trust add |
Trust release signatures made with a key | release-commands |
morzer release trust remove |
Stop trusting release signatures made with a key | release-commands |
morzer release trust list |
List the trusted release signing keys | release-commands |
morzer ls |
List the installations on this machine | installation-commands |
morzer installation |
List, export, rebuild and remove installations on this machine | installation-commands |
morzer installation list |
List the installations on this machine | installation-commands |
morzer installation export |
Write the installation identity and secret state to a file | installation-commands |
morzer installation describe |
Write this installation as a file that documents it | installation-commands |
morzer installation import |
Rebuild this machine from an export and a recovery key | installation-commands |
morzer installation remove |
Take an installation off this machine | installation-commands |
morzer installation rotate-signing-key |
Replace the key this machine signs its own statements with | installation-commands |
morzer fleet |
See several machines without running a control plane | fleet |
morzer fleet publish |
Write this installation's row to the targets it already uses | fleet |
morzer fleet ls (also list) |
Read every installation's row off a target | fleet |
morzer version |
Print version, commit, and supported manifest API versions | commands |
morzer completion install |
Write the completion script where this shell will read it | commands |