本页对应当前 sysbox --help。具体版本以正在运行的 binary help 为准。
| Flag | Default | Meaning |
|---|---|---|
-f, --file PATH |
field.sysbox.hcl |
HCL topology file |
--state PATH_OR_URL |
.sysbox/runs/default/state.json |
State file or remote URL |
--backend URL |
empty | Backend URL; overrides --state |
--auto-approve |
false | Skip mutation confirmation |
--allow-unsafe-state |
false | Allow mutation without backend locking or CAS |
Initialize a new Sysbox workspace.
sysbox validate
Parse and validate HCL without contacting a provider.
sysbox plan [--refresh]
Show ordered changes. --refresh probes existing resources for drift.
sysbox apply [--refresh] [--target ADDRESS]
Provision planned resources. --target limits apply to one canonical resource address and its required dependencies; it is not a substitute for a converged full plan.
sysbox reset [--target sysbox_node.name]
Recreate all managed guests or exactly one node from immutable baselines.
sysbox destroy
Tear down resources represented in state in reverse dependency order.
sysbox import ADDRESS EXTERNAL_ID --substrate NAME
Import an existing node through the resource handler and provider import capability.
Pause or resume a node using its provider capability. These commands do not change desired topology.
Print one resource's state details as JSON.
Print evaluated topology output values.
sysbox state list
sysbox state show ADDRESS
sysbox state get ADDRESS[.ATTRIBUTE]
sysbox state mv SOURCE DESTINATION
sysbox state rm ADDRESS
listlists canonical addresses.showprints full public instance attributes.getprints a resource or one attribute.mvrenames logical state identity without touching the external object.rmforgets state and does not destroy the real object.
Quote addresses containing string keys:
sysbox state show 'module.lab.sysbox_node.web["blue"]'Start the HTTP API server using the selected Sysbox config.
Manage or run the host Agent. Use sysbox agent --help for the version-specific registration and execution subcommands.
version [--json]: build version, commit, time and Go version.completion: shell completion generation.help: command help.
- Mutation rejects backends without locking and CAS unless
--allow-unsafe-stateis explicit. state rmis not cleanup; it removes the ownership record needed for safe destroy.- A stale stored plan or changed state serial fails before provider mutation.
- Configuration diagnostics, state conflicts and provider failures all return non-zero status; automation should use structured API diagnostics where available rather than matching prose.