saphan mesh
Reads which admitted machines are on the network overlay (the mesh), as measured on each machine's own host, and finds overlay nodes that belong to no admitted machine.
Reads which admitted machines are on the network overlay (the mesh), as measured on each machine's own host, and finds overlay nodes that belong to no admitted machine. Being on the mesh is not admission: nothing here admits, trusts or dispatches to a machine, which only the owner's saphan machine admit does.
saphan mesh probe
Measures one admitted machine's mesh membership on that machine's own host and records the answer on its signed registry row. The answer is measured, no-binary (no overlay client installed), not-a-node (installed but not a member) or dial-refused (the host could not be reached, which says nothing about its membership). It never installs anything and accepts no typed mesh value; a machine with SSH transport is probed over its own recorded SSH connection, one with local transport in this process, and any other transport is refused. A machine that is not admitted is refused.
| flag | type | default | what it does |
|---|---|---|---|
--machine | string | The admitted machine to probe; the same as the positional argument. | |
--probed-by | string | m0 | Who fired this probe, recorded on the row as its provenance; anyone running the command can set it, and nothing checks it. ⚠ The built-in default is not a name from your installation, so always give this flag. |
--root-key | string | A private key to sign the updated machine row with. When omitted, the row is signed by the root-granted identity delegate if this machine holds one, otherwise by the root key at ~/.saphan/trust/root.key; a key named here always signs. |
saphan mesh reach-census
Reports whether the record holds enough mesh facts to derive a network reach policy, and lists every gap with the act that would close it. The verdict is blocked, partial or complete; it proposes no policy and writes nothing.
| flag | type | default | what it does |
|---|---|---|---|
--from | string | Take a live reading on the named machine's host so overlay nodes with no registry row can be counted; without it that count reads unmeasured. Records nothing. |
saphan mesh status
Lists admitted machines with a mesh fact, admitted machines without one and why, retired machines, and "strangers": overlay nodes that belong to no admitted machine. Finding strangers needs a live reading, so without --from that section reads unmeasured, never zero. Writes nothing.
| flag | type | default | what it does |
|---|---|---|---|
--from | string | Take a live reading on the named machine's host to find strangers; records nothing. |
Global options apply to every command — see Every command.