edgible agent

Manage the local Edgible agent (daemon installations only)

edgible agent status

Check local agent status

edgible agent status [flags]

Flag	Description
--watch	Watch status changes in real-time

edgible agent install

Install and configure the local agent as a daemon (systemd)

edgible agent install [flags]

Flag	Description
--type <type>	Installation type (systemd)
--device-type <deviceType>	Device type: serving (default).
--dev	Run in development mode (foreground, no daemon)
--local	Use local agent build from agent-v2/dist/ (development only)
--non-interactive	Non-interactive mode for CI/VMs: use config, —device-name to create a device, or —device-id/—device-password, skip prompts
--device-name <name>	Create a new device with this name (non-interactive); alternative to —device-id/—device-password
--device-id <id>	Device ID (non-interactive); can use EDGIBLE_DEVICE_ID
--device-password <password>	Device password (non-interactive); can use EDGIBLE_DEVICE_PASSWORD
--auto-install-deps	Install missing dependencies (WireGuard, Caddy, etc.) without prompting
--skip-dep-check	Skip the dependency check entirely (for pre-provisioned hosts/CI images that already have the tools)
--vm	Install the agent inside an isolated QEMU VM (serving, Linux host)
--vm-memory <mb>	VM memory in MB (with —vm; default 4096)
--vm-cpus <n>	VM vCPU count (with —vm; default 2)
--vm-base-image <path>	Override the guest base image qcow2 (with —vm)

edgible agent provision

Provision agent files + daemon unit without a device (identity-free; pair with agent enroll)

edgible agent provision [flags]

Flag	Description
--type <type>	Installation type (systemd)
--device-type <deviceType>	Device type: serving (default)
--local	Use local agent build from agent-v2/dist/ (development only)
--non-interactive	Non-interactive mode for CI/VMs: skip prompts
--auto-install-deps	Install missing dependencies (WireGuard, Caddy, etc.) without prompting

edgible agent enroll

Bind a device to an already-provisioned agent and start it (the identity-bound half of install)

edgible agent enroll [flags]

Flag	Description
--type <type>	Daemon type the agent was provisioned as (systemd)
--device-type <deviceType>	Device type: serving (default)
--local	Pair with a —local provision (development only)
--non-interactive	Non-interactive mode for CI/VMs: use config, —device-name to create a device, or —device-id/—device-password, skip prompts
--device-name <name>	Create a new device with this name (non-interactive); alternative to —device-id/—device-password
--device-id <id>	Device ID (non-interactive); can use EDGIBLE_DEVICE_ID
--device-password <password>	Device password (non-interactive); can use EDGIBLE_DEVICE_PASSWORD

edgible agent start

Start the local agent (uses the device configured during install)

edgible agent start [flags]

Flag	Description
--passthrough	Run agent with interactive output (required for sudo password prompt)
--debug	Enable debug logging
--root	Run agent with sudo/root privileges (required for WireGuard and iptables management)

edgible agent stop

Stop the local agent

edgible agent stop [flags]

edgible agent restart

Restart the local agent

edgible agent restart [flags]

edgible agent vm

Manage the VM-isolated agent install (edgible agent install —vm)

edgible agent vm [flags]

edgible agent vm ssh

Open an interactive SSH shell into the agent VM

edgible agent vm ssh [flags]

edgible agent vm console

Attach to the agent VM console (headless; use agent vm ssh)

edgible agent vm console [flags]

edgible agent vm build-image

Build the guest base image used by VM-isolated installs

edgible agent vm build-image [flags]

edgible agent logs

View agent logs

edgible agent logs [flags]

Flag	Description
-f, --follow	Follow log output in real-time
-n, --lines <number>	Number of lines to show
-l, --level <level>	Log level filter (error, warn, info, debug, all)
-m, --module <module>	Filter logs by module name (comma-separated for multiple modules, e.g., “agent,caddy”)
-c, --comprehensive	Show comprehensive diagnostics (raw output without filtering)
--single-line	Exclude data and error traces from output (single line per log entry)
--stdout	Read from stdout.log instead of agent.log
--stderr	Read from stderr.log instead of agent.log

edgible agent uninstall

Uninstall the agent daemon

edgible agent uninstall [flags]

Flag	Description
--remove-files	Also remove agent files and configuration
--force	Skip confirmation prompts

edgible agent set-log-level

Set the agent log level

edgible agent set-log-level [flags]

Flag	Description
-l, --level <level>	Log level: debug, info, warn, or error
--no-restart	Do not restart the agent after updating log level

edgible agent reconcile

Trigger an immediate full-state reconcile against the local running agent (debug / recovery)

edgible agent reconcile [flags]

Flag	Description
--json	Emit the raw reconcile report as JSON
--timeout <ms>	Maximum time to wait for the agent to respond

edgible agent setup

Setup agent dependencies and configure the agent

edgible agent setup [flags]

Flag	Description
--wireguard-mode <mode>	WireGuard mode: kernel or userspace
--wireguard-go-binary <path>	Path to wireguard-go binary (only used with userspace mode)
--auto-install	Automatically install missing dependencies without prompting