fix build

bump sdk for republish
fix password input for backups and add adjective noun randomizer
2026-03-26 10:21:52 +00:00 · 2026-03-23 10:12:15 -06:00 · 2026-03-23 09:45:16 -06:00 · 2026-03-23 08:58:37 -06:00 · 2026-03-23 01:15:54 -06:00 · 2026-03-23 01:14:49 -06:00
592 changed files with 20615 additions and 1456 deletions
--- a/12
+++ b/12
@@ -15,8 +15,7 @@ IMAGE_TYPE=$(shell if [ "$(PLATFORM)" = raspberrypi ]; then echo img; else echo
 WEB_UIS := web/dist/raw/ui/index.html web/dist/raw/setup-wizard/index.html
 COMPRESSED_WEB_UIS := web/dist/static/ui/index.html web/dist/static/setup-wizard/index.html
 FIRMWARE_ROMS := build/lib/firmware/$(PLATFORM) $(shell jq --raw-output '.[] | select(.platform[] | contains("$(PLATFORM)")) | "./build/lib/firmware/$(PLATFORM)/" + .id + ".rom.gz"' build/lib/firmware.json)
-TOR_S9PK := build/lib/tor_$(ARCH).s9pk
-BUILD_SRC := $(call ls-files, build/lib) build/lib/depends build/lib/conflicts $(FIRMWARE_ROMS) $(TOR_S9PK)
+BUILD_SRC := $(call ls-files, build/lib) build/lib/depends build/lib/conflicts $(FIRMWARE_ROMS)
 IMAGE_RECIPE_SRC := $(call ls-files, build/image-recipe/)
 STARTD_SRC := core/startd.service $(BUILD_SRC)
 CORE_SRC := $(call ls-files, core) $(shell git ls-files --recurse-submodules patch-db) $(GIT_HASH_FILE)
@@ -251,10 +250,10 @@ update-deb: results/$(BASENAME).deb # better than update, but only available fro

 update-squashfs: results/$(BASENAME).squashfs
 	@if [ -z "$(REMOTE)" ]; then >&2 echo "Must specify REMOTE" && false; fi
-	$(eval SQFS_SUM := $(shell b3sum results/$(BASENAME).squashfs))
+	$(eval SQFS_SUM := $(shell b3sum results/$(BASENAME).squashfs | head -c 32))
 	$(eval SQFS_SIZE := $(shell du -s --bytes results/$(BASENAME).squashfs | awk '{print $$1}'))
-	$(call ssh,'/usr/lib/startos/scripts/prune-images $(SQFS_SIZE)')
-	$(call ssh,'/usr/lib/startos/scripts/prune-boot')
+	$(call ssh,'sudo /usr/lib/startos/scripts/prune-images $(SQFS_SIZE)')
+	$(call ssh,'sudo /usr/lib/startos/scripts/prune-boot')
 	$(call cp,results/$(BASENAME).squashfs,/media/startos/images/next.rootfs)
 	$(call ssh,'sudo CHECKSUM=$(SQFS_SUM) /usr/lib/startos/scripts/upgrade /media/startos/images/next.rootfs')

@@ -316,9 +315,6 @@ build/lib/depends build/lib/conflicts: $(ENVIRONMENT_FILE) $(PLATFORM_FILE) $(sh
 $(FIRMWARE_ROMS): build/lib/firmware.json ./build/download-firmware.sh $(PLATFORM_FILE)
 	./build/download-firmware.sh $(PLATFORM)

-$(TOR_S9PK): ./build/download-tor-s9pk.sh
-	./build/download-tor-s9pk.sh $(ARCH)
-
 core/target/$(RUST_ARCH)-unknown-linux-musl/$(PROFILE)/startbox: $(CORE_SRC) $(COMPRESSED_WEB_UIS) web/patchdb-ui-seed.json $(ENVIRONMENT_FILE)
 	ARCH=$(ARCH) PROFILE=$(PROFILE) ./core/build/build-startbox.sh
 	touch core/target/$(RUST_ARCH)-unknown-linux-musl/$(PROFILE)/startbox
--- a/build/apt/publish-deb.sh
+++ b/build/apt/publish-deb.sh
@@ -23,6 +23,7 @@ fi

 BUCKET="${S3_BUCKET:-start9-debs}"
 ENDPOINT="${S3_ENDPOINT:-https://nyc3.digitaloceanspaces.com}"
+GPG_KEY_ID="${GPG_KEY_ID:-5259ADFC2D63C217}"
 SUITE="${SUITE:-stable}"
 COMPONENT="${COMPONENT:-main}"
 REPO_DIR="$(mktemp -d)"
@@ -98,7 +99,7 @@ for arch in amd64 arm64 riscv64; do
    mkdir -p "$BINARY_DIR"
    (
        cd "$REPO_DIR"
-        dpkg-scanpackages --arch "$arch" pool/ > "$BINARY_DIR/Packages"
+        dpkg-scanpackages --multiversion --arch "$arch" pool/ > "$BINARY_DIR/Packages"
        gzip -k -f "$BINARY_DIR/Packages"
    )
    echo "Generated Packages index for ${arch}"
--- a/build/download-tor-s9pk.sh
+++ b/build/download-tor-s9pk.sh
@@ -1,14 +0,0 @@
-#!/bin/bash
-
-cd "$(dirname "${BASH_SOURCE[0]}")"
-
-set -e
-
-ARCH=$1
-
-if [ -z "$ARCH" ]; then
-	>&2 echo "usage: $0 <ARCH>"
-	exit 1
-fi
-
-curl --fail -L -o "./lib/tor_${ARCH}.s9pk" "https://s9pks.nyc3.cdn.digitaloceanspaces.com/tor_${ARCH}.s9pk"
--- a/build/image-recipe/build.sh
+++ b/build/image-recipe/build.sh
@@ -357,6 +357,8 @@ mkdir -p /media/startos
 chmod 750 /media/startos
 chown root:startos /media/startos

+start-cli --registry=https://alpha-registry-x.start9.com registry package download tor -d /usr/lib/startos/tor_${QEMU_ARCH}.s9pk -a "${QEMU_ARCH}"
+
 EOF

 SOURCE_DATE_EPOCH="${SOURCE_DATE_EPOCH:-$(date '+%s')}"
--- a/build/lib/motd
+++ b/build/lib/motd
@@ -118,6 +118,6 @@ else
 fi
 printf "\n    \033[1;37m┌──────────────────────────────────────────────────── QUICK ACCESS ─┐\033[0m\n"
 printf "    \033[1;37m│\033[0m Web Interface: \033[0;36m%-50s\033[0m \033[1;37m│\033[0m\n" "$web_url"
-printf "    \033[1;37m│\033[0m Documentation: \033[0;36m%-50s\033[0m \033[1;37m│\033[0m\n" "https://staging.docs.start9.com"
+printf "    \033[1;37m│\033[0m Documentation: \033[0;36m%-50s\033[0m \033[1;37m│\033[0m\n" "https://docs.start9.com"
 printf "    \033[1;37m│\033[0m Support:       \033[0;36m%-50s\033[0m \033[1;37m│\033[0m\n" "https://start9.com/contact"
 printf "    \033[1;37m└───────────────────────────────────────────────────────────────────┘\033[0m\n\n"
--- a/build/lib/scripts/chroot-and-upgrade
+++ b/build/lib/scripts/chroot-and-upgrade
@@ -55,8 +55,8 @@ mkdir -p /media/startos/next/sys
 mkdir -p /media/startos/next/proc
 mkdir -p /media/startos/next/boot
 mkdir -p /media/startos/next/media/startos/root
-mount --bind /run /media/startos/next/run
-mount --bind /tmp /media/startos/next/tmp
+mount -t tmpfs tmpfs /media/startos/next/run
+mount -t tmpfs tmpfs /media/startos/next/tmp
 mount --bind /dev /media/startos/next/dev
 mount -t sysfs sysfs /media/startos/next/sys
 mount -t proc proc /media/startos/next/proc
@@ -79,13 +79,13 @@ if mountpoint /media/startos/next/sys/firmware/efi/efivars 2>&1 > /dev/null; the
  umount /media/startos/next/sys/firmware/efi/efivars 
 fi

-umount /media/startos/next/run
-umount /media/startos/next/tmp
-umount /media/startos/next/dev
-umount /media/startos/next/sys
-umount /media/startos/next/proc
-umount /media/startos/next/boot
-umount /media/startos/next/media/startos/root
+umount -l /media/startos/next/run
+umount -l /media/startos/next/tmp
+umount -l /media/startos/next/dev
+umount -l /media/startos/next/sys
+umount -l /media/startos/next/proc
+umount -l /media/startos/next/boot
+umount -l /media/startos/next/media/startos/root

 if [ "$CHROOT_RES" -eq 0 ]; then

--- a/container-runtime/container-runtime.service
+++ b/container-runtime/container-runtime.service
@@ -5,7 +5,7 @@ OnFailure=container-runtime-failure.service
 [Service]
 Type=simple
 Environment=RUST_LOG=startos=debug
-ExecStart=/usr/bin/node --experimental-detect-module --trace-warnings /usr/lib/startos/init/index.js
+ExecStart=/usr/bin/start-container pipe-wrap /usr/bin/node --experimental-detect-module --trace-warnings /usr/lib/startos/init/index.js
 Restart=no

 [Install]
--- a/container-runtime/package-lock.json
+++ b/container-runtime/package-lock.json
@@ -37,7 +37,7 @@
    },
    "../sdk/dist": {
      "name": "@start9labs/start-sdk",
-      "version": "0.4.0-beta.61",
+      "version": "0.4.0-beta.64",
      "license": "MIT",
      "dependencies": {
        "@iarna/toml": "^3.0.0",
@@ -45,6 +45,7 @@
        "@noble/hashes": "^1.7.2",
        "@types/ini": "^4.1.1",
        "deep-equality-data-structures": "^2.0.0",
+        "fast-xml-parser": "^5.5.6",
        "ini": "^5.0.0",
        "isomorphic-fetch": "^3.0.0",
        "mime": "^4.0.7",
--- a/container-runtime/src/Adapters/Systems/SystemForEmbassy/index.ts
+++ b/container-runtime/src/Adapters/Systems/SystemForEmbassy/index.ts
@@ -445,15 +445,14 @@ export class SystemForEmbassy implements System {
  }
  callCallback(_callback: number, _args: any[]): void {}
  async stop(): Promise<void> {
-    const { currentRunning } = this
-    this.currentRunning?.clean()
+    const clean = this.currentRunning?.clean({
+      timeout: fromDuration(
+        (this.manifest.main["sigterm-timeout"] as any) || "30s",
+      ),
+    })
    delete this.currentRunning
-    if (currentRunning) {
-      await currentRunning.clean({
-        timeout: fromDuration(
-          (this.manifest.main["sigterm-timeout"] as any) || "30s",
-        ),
-      })
+    if (clean) {
+      await clean
    }
  }

--- a/core/Cargo.lock
+++ b/core/Cargo.lock
--- a/core/Cargo.toml
+++ b/core/Cargo.toml
@@ -15,7 +15,7 @@ license = "MIT"
 name = "start-os"
 readme = "README.md"
 repository = "https://github.com/Start9Labs/start-os"
-version = "0.4.0-alpha.21" # VERSION_BUMP
+version = "0.4.0-alpha.22" # VERSION_BUMP

 [lib]
 name = "startos"
@@ -63,7 +63,7 @@ async-compression = { version = "0.4.32", features = [
 ] }
 async-stream = "0.3.5"
 async-trait = "0.1.74"
-axum = { version = "0.8.4", features = ["ws", "http2"] }
+axum = { version = "0.8.4", features = ["http2", "ws"] }
 backtrace-on-stack-overflow = { version = "0.3.0", optional = true }
 base32 = "0.5.0"
 base64 = "0.22.1"
@@ -100,6 +100,7 @@ fd-lock-rs = "0.1.4"
 form_urlencoded = "1.2.1"
 futures = "0.3.28"
 gpt = "4.1.0"
+hashing-serializer = "0.1.1"
 hex = "0.4.3"
 hickory-server = { version = "0.25.2", features = ["resolver"] }
 hmac = "0.12.1"
@@ -182,16 +183,16 @@ r3bl_tui = "0.7.6"
 rand = "0.9.2"
 regex = "1.10.2"
 reqwest = { version = "0.12.25", features = [
+  "http2",
  "json",
  "socks",
  "stream",
-  "http2",
 ] }
 reqwest_cookie_store = "0.9.0"
 rpassword = "7.2.0"
+rpc-toolkit = { git = "https://github.com/Start9Labs/rpc-toolkit.git" }
 rust-argon2 = "3.0.0"
 rust-i18n = "3.1.5"
-rpc-toolkit = { git = "https://github.com/Start9Labs/rpc-toolkit.git" }
 semver = { version = "1.0.20", features = ["serde"] }
 serde = { version = "1.0", features = ["derive", "rc"] }
 serde_cbor = { package = "ciborium", version = "0.2.1" }
@@ -232,7 +233,9 @@ uuid = { version = "1.4.1", features = ["v4"] }
 visit-rs = "0.1.1"
 x25519-dalek = { version = "2.0.1", features = ["static_secrets"] }
 zbus = "5.1.1"
-hashing-serializer = "0.1.1"
+
+[dev-dependencies]
+clap_mangen = "0.2.33"

 [target.'cfg(target_os = "linux")'.dependencies]
 procfs = "0.18.0"
--- a/core/build/build-manpage.sh
+++ b/core/build/build-manpage.sh
@@ -0,0 +1,44 @@
+#!/bin/bash
+
+cd "$(dirname "${BASH_SOURCE[0]}")"
+
+source ./builder-alias.sh
+
+set -ea
+shopt -s expand_aliases
+
+PROFILE=${PROFILE:-debug}
+if [ "${PROFILE}" = "release" ]; then
+	BUILD_FLAGS="--release"
+else
+  if [ "$PROFILE" != "debug" ]; then
+    >&2 echo "Unknown profile $PROFILE: falling back to debug..."
+    PROFILE=debug
+  fi
+fi
+
+if [ -z "$ARCH" ]; then
+	ARCH=$(uname -m)
+fi
+
+if [ "$ARCH" = "arm64" ]; then
+	ARCH="aarch64"
+fi
+
+RUST_ARCH="$ARCH"
+if [ "$ARCH" = "riscv64" ]; then
+	RUST_ARCH="riscv64gc"
+fi
+
+cd ../..
+FEATURES="$(echo $ENVIRONMENT | sed 's/-/,/g')"
+RUSTFLAGS=""
+if [[ "${ENVIRONMENT}" =~ (^|-)console($|-) ]]; then
+	RUSTFLAGS="--cfg tokio_unstable"
+fi
+echo "FEATURES=\"$FEATURES\""
+echo "RUSTFLAGS=\"$RUSTFLAGS\""
+rust-zig-builder cargo test --manifest-path=./core/Cargo.toml --lib $BUILD_FLAGS --features test,$FEATURES --locked 'export_manpage_'
+if [ "$(ls -nd "core/man" | awk '{ print $3 }')" != "$UID" ]; then
+  rust-zig-builder sh -c "chown -R $UID:$UID core/target && chown -R $UID:$UID core/man && chown -R $UID:$UID  /usr/local/cargo"
+fi
--- a/core/locales/i18n.yaml
+++ b/core/locales/i18n.yaml
@@ -872,6 +872,13 @@ disk.main.disk-not-found:
  fr_FR: "Disque StartOS non trouvé."
  pl_PL: "Nie znaleziono dysku StartOS."

+disk.main.converting-to-btrfs:
+  en_US: "Performing file system conversion to btrfs. This can take many hours, please be patient and DO NOT unplug the server."
+  de_DE: "Dateisystemkonvertierung zu btrfs wird durchgeführt. Dies kann viele Stunden dauern, bitte haben Sie Geduld und trennen Sie den Server NICHT vom Strom."
+  es_ES: "Realizando conversión del sistema de archivos a btrfs. Esto puede tardar muchas horas, tenga paciencia y NO desconecte el servidor."
+  fr_FR: "Conversion du système de fichiers vers btrfs en cours. Cela peut prendre de nombreuses heures, soyez patient et NE débranchez PAS le serveur."
+  pl_PL: "Wykonywanie konwersji systemu plików na btrfs. To może potrwać wiele godzin, prosimy o cierpliwość i NIE odłączaj serwera od zasilania."
+
 disk.main.incorrect-disk:
  en_US: "A StartOS disk was found, but it is not the correct disk for this device."
  de_DE: "Eine StartOS-Festplatte wurde gefunden, aber es ist nicht die richtige Festplatte für dieses Gerät."
@@ -2656,6 +2663,13 @@ help.arg.allow-partial-backup:
  fr_FR: "Laisser le média monté même si backupfs échoue à monter"
  pl_PL: "Pozostaw nośnik zamontowany nawet jeśli backupfs nie może się zamontować"

+help.arg.architecture:
+  en_US: "Target CPU architecture (e.g. x86_64, aarch64)"
+  de_DE: "Ziel-CPU-Architektur (z.B. x86_64, aarch64)"
+  es_ES: "Arquitectura de CPU objetivo (ej. x86_64, aarch64)"
+  fr_FR: "Architecture CPU cible (ex. x86_64, aarch64)"
+  pl_PL: "Docelowa architektura CPU (np. x86_64, aarch64)"
+
 help.arg.architecture-mask:
  en_US: "Filter by CPU architecture"
  de_DE: "Nach CPU-Architektur filtern"
@@ -5275,6 +5289,13 @@ about.restart-service:
  fr_FR: "Redémarrer un service"
  pl_PL: "Uruchom ponownie usługę"

+about.restart-tunnel:
+  en_US: "Reboot the tunnel server"
+  de_DE: "Den Tunnel-Server neu starten"
+  es_ES: "Reiniciar el servidor del túnel"
+  fr_FR: "Redémarrer le serveur tunnel"
+  pl_PL: "Uruchom ponownie serwer tunelu"
+
 about.restore-packages-from-backup:
  en_US: "Restore packages from backup"
  de_DE: "Pakete aus Backup wiederherstellen"
--- a/core/man/start-cli/start-cli-auth-get-pubkey.1
+++ b/core/man/start-cli/start-cli-auth-get-pubkey.1
@@ -0,0 +1,13 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-auth-get-pubkey 1  "get-pubkey " 
+.SH NAME
+start\-cli\-auth\-get\-pubkey \- Get the public key from the server
+.SH SYNOPSIS
+\fBstart\-cli auth get\-pubkey\fR [\fB\-h\fR|\fB\-\-help\fR] 
+.SH DESCRIPTION
+Get the public key from the server
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
--- a/core/man/start-cli/start-cli-auth-login.1
+++ b/core/man/start-cli/start-cli-auth-login.1
@@ -0,0 +1,13 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-auth-login 1  "login " 
+.SH NAME
+start\-cli\-auth\-login \- Login to a new auth session
+.SH SYNOPSIS
+\fBstart\-cli auth login\fR [\fB\-h\fR|\fB\-\-help\fR] 
+.SH DESCRIPTION
+Login to a new auth session
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
--- a/core/man/start-cli/start-cli-auth-logout.1
+++ b/core/man/start-cli/start-cli-auth-logout.1
@@ -0,0 +1,16 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-auth-logout 1  "logout " 
+.SH NAME
+start\-cli\-auth\-logout \- Logout from current auth session
+.SH SYNOPSIS
+\fBstart\-cli auth logout\fR [\fB\-h\fR|\fB\-\-help\fR] <\fISESSION\fR> 
+.SH DESCRIPTION
+Logout from current auth session
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+<\fISESSION\fR>
+
--- a/core/man/start-cli/start-cli-auth-reset-password.1
+++ b/core/man/start-cli/start-cli-auth-reset-password.1
@@ -0,0 +1,13 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-auth-reset-password 1  "reset-password " 
+.SH NAME
+start\-cli\-auth\-reset\-password \- Reset the password
+.SH SYNOPSIS
+\fBstart\-cli auth reset\-password\fR [\fB\-h\fR|\fB\-\-help\fR] 
+.SH DESCRIPTION
+Reset the password
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
--- a/core/man/start-cli/start-cli-auth-session-kill.1
+++ b/core/man/start-cli/start-cli-auth-session-kill.1
@@ -0,0 +1,16 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-auth-session-kill 1  "kill " 
+.SH NAME
+start\-cli\-auth\-session\-kill \- Terminate auth sessions
+.SH SYNOPSIS
+\fBstart\-cli auth session kill\fR [\fB\-h\fR|\fB\-\-help\fR] [\fIIDS\fR] 
+.SH DESCRIPTION
+Terminate auth sessions
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+[\fIIDS\fR]
+Session identifiers
--- a/core/man/start-cli/start-cli-auth-session-list.1
+++ b/core/man/start-cli/start-cli-auth-session-list.1
@@ -0,0 +1,16 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-auth-session-list 1  "list " 
+.SH NAME
+start\-cli\-auth\-session\-list \- Display all auth sessions
+.SH SYNOPSIS
+\fBstart\-cli auth session list\fR [\fB\-\-format\fR] [\fB\-h\fR|\fB\-\-help\fR] 
+.SH DESCRIPTION
+Display all auth sessions
+.SH OPTIONS
+.TP
+\fB\-\-format\fR
+
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
--- a/core/man/start-cli/start-cli-auth-session.1
+++ b/core/man/start-cli/start-cli-auth-session.1
@@ -0,0 +1,20 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-auth-session 1  "session " 
+.SH NAME
+start\-cli\-auth\-session \- List or kill auth sessions
+.SH SYNOPSIS
+\fBstart\-cli auth session\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
+.SH DESCRIPTION
+List or kill auth sessions
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.SH SUBCOMMANDS
+.TP
+start\-cli\-auth\-session\-kill(1)
+Terminate auth sessions
+.TP
+start\-cli\-auth\-session\-list(1)
+Display all auth sessions
--- a/core/man/start-cli/start-cli-auth.1
+++ b/core/man/start-cli/start-cli-auth.1
@@ -0,0 +1,29 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-auth 1  "auth " 
+.SH NAME
+start\-cli\-auth \- Commands related to Authentication i.e. login, logout
+.SH SYNOPSIS
+\fBstart\-cli auth\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
+.SH DESCRIPTION
+Commands related to Authentication i.e. login, logout
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.SH SUBCOMMANDS
+.TP
+start\-cli\-auth\-get\-pubkey(1)
+Get the public key from the server
+.TP
+start\-cli\-auth\-login(1)
+Login to a new auth session
+.TP
+start\-cli\-auth\-logout(1)
+Logout from current auth session
+.TP
+start\-cli\-auth\-reset\-password(1)
+Reset the password
+.TP
+start\-cli\-auth\-session(1)
+List or kill auth sessions
--- a/core/man/start-cli/start-cli-backup-create.1
+++ b/core/man/start-cli/start-cli-backup-create.1
@@ -0,0 +1,25 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-backup-create 1  "create " 
+.SH NAME
+start\-cli\-backup\-create \- Create a backup for all packages
+.SH SYNOPSIS
+\fBstart\-cli backup create\fR [\fB\-\-old\-password\fR] [\fB\-\-package\-ids\fR] [\fB\-h\fR|\fB\-\-help\fR] <\fITARGET_ID\fR> <\fIPASSWORD\fR> 
+.SH DESCRIPTION
+Create a backup for all packages
+.SH OPTIONS
+.TP
+\fB\-\-old\-password\fR \fI<OLD_PASSWORD>\fR
+Previous backup password
+.TP
+\fB\-\-package\-ids\fR \fI<PACKAGE_IDS>\fR
+Package IDs to include in backup
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+<\fITARGET_ID\fR>
+Backup target identifier
+.TP
+<\fIPASSWORD\fR>
+Password for backup encryption
--- a/core/man/start-cli/start-cli-backup-target-cifs-add.1
+++ b/core/man/start-cli/start-cli-backup-target-cifs-add.1
@@ -0,0 +1,25 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-backup-target-cifs-add 1  "add " 
+.SH NAME
+start\-cli\-backup\-target\-cifs\-add \- Add a new backup target
+.SH SYNOPSIS
+\fBstart\-cli backup target cifs add\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIHOSTNAME\fR> <\fIPATH\fR> <\fIUSERNAME\fR> [\fIPASSWORD\fR] 
+.SH DESCRIPTION
+Add a new backup target
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+<\fIHOSTNAME\fR>
+CIFS server hostname
+.TP
+<\fIPATH\fR>
+Path on the CIFS share
+.TP
+<\fIUSERNAME\fR>
+CIFS authentication username
+.TP
+[\fIPASSWORD\fR]
+CIFS authentication password
--- a/core/man/start-cli/start-cli-backup-target-cifs-remove.1
+++ b/core/man/start-cli/start-cli-backup-target-cifs-remove.1
@@ -0,0 +1,16 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-backup-target-cifs-remove 1  "remove " 
+.SH NAME
+start\-cli\-backup\-target\-cifs\-remove \- Remove existing backup target
+.SH SYNOPSIS
+\fBstart\-cli backup target cifs remove\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIID\fR> 
+.SH DESCRIPTION
+Remove existing backup target
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+<\fIID\fR>
+Backup target identifier
--- a/core/man/start-cli/start-cli-backup-target-cifs-update.1
+++ b/core/man/start-cli/start-cli-backup-target-cifs-update.1
@@ -0,0 +1,28 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-backup-target-cifs-update 1  "update " 
+.SH NAME
+start\-cli\-backup\-target\-cifs\-update \- Update an existing backup target
+.SH SYNOPSIS
+\fBstart\-cli backup target cifs update\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIID\fR> <\fIHOSTNAME\fR> <\fIPATH\fR> <\fIUSERNAME\fR> [\fIPASSWORD\fR] 
+.SH DESCRIPTION
+Update an existing backup target
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+<\fIID\fR>
+Backup target identifier
+.TP
+<\fIHOSTNAME\fR>
+CIFS server hostname
+.TP
+<\fIPATH\fR>
+Path on the CIFS share
+.TP
+<\fIUSERNAME\fR>
+CIFS authentication username
+.TP
+[\fIPASSWORD\fR]
+CIFS authentication password
--- a/core/man/start-cli/start-cli-backup-target-cifs.1
+++ b/core/man/start-cli/start-cli-backup-target-cifs.1
@@ -0,0 +1,23 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-backup-target-cifs 1  "cifs " 
+.SH NAME
+start\-cli\-backup\-target\-cifs \- Add, remove, or update a backup target
+.SH SYNOPSIS
+\fBstart\-cli backup target cifs\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
+.SH DESCRIPTION
+Add, remove, or update a backup target
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.SH SUBCOMMANDS
+.TP
+start\-cli\-backup\-target\-cifs\-add(1)
+Add a new backup target
+.TP
+start\-cli\-backup\-target\-cifs\-remove(1)
+Remove existing backup target
+.TP
+start\-cli\-backup\-target\-cifs\-update(1)
+Update an existing backup target
--- a/core/man/start-cli/start-cli-backup-target-info.1
+++ b/core/man/start-cli/start-cli-backup-target-info.1
@@ -0,0 +1,25 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-backup-target-info 1  "info " 
+.SH NAME
+start\-cli\-backup\-target\-info \- Display backup information for a package
+.SH SYNOPSIS
+\fBstart\-cli backup target info\fR [\fB\-\-format\fR] [\fB\-h\fR|\fB\-\-help\fR] <\fITARGET_ID\fR> <\fISERVER_ID\fR> <\fIPASSWORD\fR> 
+.SH DESCRIPTION
+Display backup information for a package
+.SH OPTIONS
+.TP
+\fB\-\-format\fR
+
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+<\fITARGET_ID\fR>
+Backup target identifier
+.TP
+<\fISERVER_ID\fR>
+Unique server identifier
+.TP
+<\fIPASSWORD\fR>
+Password for backup encryption
--- a/core/man/start-cli/start-cli-backup-target-list.1
+++ b/core/man/start-cli/start-cli-backup-target-list.1
@@ -0,0 +1,16 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-backup-target-list 1  "list " 
+.SH NAME
+start\-cli\-backup\-target\-list \- List existing backup targets
+.SH SYNOPSIS
+\fBstart\-cli backup target list\fR [\fB\-\-format\fR] [\fB\-h\fR|\fB\-\-help\fR] 
+.SH DESCRIPTION
+List existing backup targets
+.SH OPTIONS
+.TP
+\fB\-\-format\fR
+
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
--- a/core/man/start-cli/start-cli-backup-target-mount.1
+++ b/core/man/start-cli/start-cli-backup-target-mount.1
@@ -0,0 +1,25 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-backup-target-mount 1  "mount " 
+.SH NAME
+start\-cli\-backup\-target\-mount \- Mount a backup target
+.SH SYNOPSIS
+\fBstart\-cli backup target mount\fR [\fB\-\-server\-id\fR] [\fB\-\-allow\-partial\fR] [\fB\-h\fR|\fB\-\-help\fR] <\fITARGET_ID\fR> <\fIPASSWORD\fR> 
+.SH DESCRIPTION
+Mount a backup target
+.SH OPTIONS
+.TP
+\fB\-\-server\-id\fR \fI<SERVER_ID>\fR
+Unique server identifier
+.TP
+\fB\-\-allow\-partial\fR
+Leave media mounted even if backupfs fails to mount
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+<\fITARGET_ID\fR>
+Backup target identifier
+.TP
+<\fIPASSWORD\fR>
+Password for backup encryption
--- a/core/man/start-cli/start-cli-backup-target-umount.1
+++ b/core/man/start-cli/start-cli-backup-target-umount.1
@@ -0,0 +1,16 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-backup-target-umount 1  "umount " 
+.SH NAME
+start\-cli\-backup\-target\-umount \- Unmount a backup target
+.SH SYNOPSIS
+\fBstart\-cli backup target umount\fR [\fB\-h\fR|\fB\-\-help\fR] [\fITARGET_ID\fR] 
+.SH DESCRIPTION
+Unmount a backup target
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+[\fITARGET_ID\fR]
+Backup target identifier
--- a/core/man/start-cli/start-cli-backup-target.1
+++ b/core/man/start-cli/start-cli-backup-target.1
@@ -0,0 +1,29 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-backup-target 1  "target " 
+.SH NAME
+start\-cli\-backup\-target \- Commands related to a backup target
+.SH SYNOPSIS
+\fBstart\-cli backup target\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
+.SH DESCRIPTION
+Commands related to a backup target
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.SH SUBCOMMANDS
+.TP
+start\-cli\-backup\-target\-cifs(1)
+Add, remove, or update a backup target
+.TP
+start\-cli\-backup\-target\-info(1)
+Display backup information for a package
+.TP
+start\-cli\-backup\-target\-list(1)
+List existing backup targets
+.TP
+start\-cli\-backup\-target\-mount(1)
+Mount a backup target
+.TP
+start\-cli\-backup\-target\-umount(1)
+Unmount a backup target
--- a/core/man/start-cli/start-cli-backup.1
+++ b/core/man/start-cli/start-cli-backup.1
@@ -0,0 +1,20 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-backup 1  "backup " 
+.SH NAME
+start\-cli\-backup \- Commands related to backup creation and backup targets
+.SH SYNOPSIS
+\fBstart\-cli backup\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
+.SH DESCRIPTION
+Commands related to backup creation and backup targets
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.SH SUBCOMMANDS
+.TP
+start\-cli\-backup\-create(1)
+Create a backup for all packages
+.TP
+start\-cli\-backup\-target(1)
+Commands related to a backup target
--- a/core/man/start-cli/start-cli-db-apply.1
+++ b/core/man/start-cli/start-cli-db-apply.1
@@ -0,0 +1,22 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-db-apply 1  "apply " 
+.SH NAME
+start\-cli\-db\-apply \- Update a database record
+.SH SYNOPSIS
+\fBstart\-cli db apply\fR [\fB\-\-allow\-model\-mismatch\fR] [\fB\-h\fR|\fB\-\-help\fR] <\fIEXPR\fR> [\fIPATH\fR] 
+.SH DESCRIPTION
+Update a database record
+.SH OPTIONS
+.TP
+\fB\-\-allow\-model\-mismatch\fR
+Allow database model mismatch
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+<\fIEXPR\fR>
+Database patch expression to apply
+.TP
+[\fIPATH\fR]
+Path to the database
--- a/core/man/start-cli/start-cli-db-dump.1
+++ b/core/man/start-cli/start-cli-db-dump.1
@@ -0,0 +1,22 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-db-dump 1  "dump " 
+.SH NAME
+start\-cli\-db\-dump \- Filter and query the database
+.SH SYNOPSIS
+\fBstart\-cli db dump\fR [\fB\-p\fR|\fB\-\-include\-private\fR] [\fB\-\-format\fR] [\fB\-h\fR|\fB\-\-help\fR] [\fIPATH\fR] 
+.SH DESCRIPTION
+Filter and query the database
+.SH OPTIONS
+.TP
+\fB\-p\fR, \fB\-\-include\-private\fR
+Include private data in output
+.TP
+\fB\-\-format\fR
+
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+[\fIPATH\fR]
+Path to the database
--- a/core/man/start-cli/start-cli-db-put-ui.1
+++ b/core/man/start-cli/start-cli-db-put-ui.1
@@ -0,0 +1,22 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-db-put-ui 1  "ui " 
+.SH NAME
+start\-cli\-db\-put\-ui \- Add path and value to db
+.SH SYNOPSIS
+\fBstart\-cli db put ui\fR [\fB\-\-format\fR] [\fB\-h\fR|\fB\-\-help\fR] <\fIPOINTER\fR> <\fIVALUE\fR> 
+.SH DESCRIPTION
+Add path and value to db
+.SH OPTIONS
+.TP
+\fB\-\-format\fR
+
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+<\fIPOINTER\fR>
+JSON pointer to specific value
+.TP
+<\fIVALUE\fR>
+JSON value to set
--- a/core/man/start-cli/start-cli-db-put.1
+++ b/core/man/start-cli/start-cli-db-put.1
@@ -0,0 +1,17 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-db-put 1  "put " 
+.SH NAME
+start\-cli\-db\-put \- Command for adding UI record to db
+.SH SYNOPSIS
+\fBstart\-cli db put\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
+.SH DESCRIPTION
+Command for adding UI record to db
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.SH SUBCOMMANDS
+.TP
+start\-cli\-db\-put\-ui(1)
+Add path and value to db
--- a/core/man/start-cli/start-cli-db.1
+++ b/core/man/start-cli/start-cli-db.1
@@ -0,0 +1,23 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-db 1  "db " 
+.SH NAME
+start\-cli\-db \- Commands to interact with the db i.e. dump, put, apply
+.SH SYNOPSIS
+\fBstart\-cli db\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
+.SH DESCRIPTION
+Commands to interact with the db i.e. dump, put, apply
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.SH SUBCOMMANDS
+.TP
+start\-cli\-db\-apply(1)
+Update a database record
+.TP
+start\-cli\-db\-dump(1)
+Filter and query the database
+.TP
+start\-cli\-db\-put(1)
+Command for adding UI record to db
--- a/core/man/start-cli/start-cli-diagnostic-disk-forget.1
+++ b/core/man/start-cli/start-cli-diagnostic-disk-forget.1
@@ -0,0 +1,13 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-diagnostic-disk-forget 1  "forget " 
+.SH NAME
+start\-cli\-diagnostic\-disk\-forget \- Remove disk filesystem
+.SH SYNOPSIS
+\fBstart\-cli diagnostic disk forget\fR [\fB\-h\fR|\fB\-\-help\fR] 
+.SH DESCRIPTION
+Remove disk filesystem
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
--- a/core/man/start-cli/start-cli-diagnostic-disk-repair.1
+++ b/core/man/start-cli/start-cli-diagnostic-disk-repair.1
@@ -0,0 +1,13 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-diagnostic-disk-repair 1  "repair " 
+.SH NAME
+start\-cli\-diagnostic\-disk\-repair \- Repair disk corruption
+.SH SYNOPSIS
+\fBstart\-cli diagnostic disk repair\fR [\fB\-h\fR|\fB\-\-help\fR] 
+.SH DESCRIPTION
+Repair disk corruption
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
--- a/core/man/start-cli/start-cli-diagnostic-disk.1
+++ b/core/man/start-cli/start-cli-diagnostic-disk.1
@@ -0,0 +1,20 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-diagnostic-disk 1  "disk " 
+.SH NAME
+start\-cli\-diagnostic\-disk \- Command to remove disk from filesystem
+.SH SYNOPSIS
+\fBstart\-cli diagnostic disk\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
+.SH DESCRIPTION
+Command to remove disk from filesystem
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.SH SUBCOMMANDS
+.TP
+start\-cli\-diagnostic\-disk\-forget(1)
+Remove disk filesystem
+.TP
+start\-cli\-diagnostic\-disk\-repair(1)
+Repair disk corruption
--- a/core/man/start-cli/start-cli-diagnostic-error.1
+++ b/core/man/start-cli/start-cli-diagnostic-error.1
@@ -0,0 +1,13 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-diagnostic-error 1  "error " 
+.SH NAME
+start\-cli\-diagnostic\-error \- Display diagnostic error
+.SH SYNOPSIS
+\fBstart\-cli diagnostic error\fR [\fB\-h\fR|\fB\-\-help\fR] 
+.SH DESCRIPTION
+Display diagnostic error
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
--- a/core/man/start-cli/start-cli-diagnostic-kernel-logs.1
+++ b/core/man/start-cli/start-cli-diagnostic-kernel-logs.1
@@ -0,0 +1,28 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-diagnostic-kernel-logs 1  "kernel-logs " 
+.SH NAME
+start\-cli\-diagnostic\-kernel\-logs \- Display kernel logs
+.SH SYNOPSIS
+\fBstart\-cli diagnostic kernel\-logs\fR [\fB\-l\fR|\fB\-\-limit\fR] [\fB\-c\fR|\fB\-\-cursor\fR] [\fB\-b\fR|\fB\-\-boot\fR] [\fB\-B\fR|\fB\-\-before\fR] [\fB\-f\fR|\fB\-\-follow\fR] [\fB\-h\fR|\fB\-\-help\fR] 
+.SH DESCRIPTION
+Display kernel logs
+.SH OPTIONS
+.TP
+\fB\-l\fR, \fB\-\-limit\fR \fI<LIMIT>\fR
+Maximum number of log entries
+.TP
+\fB\-c\fR, \fB\-\-cursor\fR \fI<CURSOR>\fR
+Start from this cursor position
+.TP
+\fB\-b\fR, \fB\-\-boot\fR \fI<BOOT>\fR
+Filter logs by boot ID
+.TP
+\fB\-B\fR, \fB\-\-before\fR
+Show logs before the cursor position
+.TP
+\fB\-f\fR, \fB\-\-follow\fR
+Follow log output in real\-time
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
--- a/core/man/start-cli/start-cli-diagnostic-logs.1
+++ b/core/man/start-cli/start-cli-diagnostic-logs.1
@@ -0,0 +1,28 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-diagnostic-logs 1  "logs " 
+.SH NAME
+start\-cli\-diagnostic\-logs \- Display OS logs
+.SH SYNOPSIS
+\fBstart\-cli diagnostic logs\fR [\fB\-l\fR|\fB\-\-limit\fR] [\fB\-c\fR|\fB\-\-cursor\fR] [\fB\-b\fR|\fB\-\-boot\fR] [\fB\-B\fR|\fB\-\-before\fR] [\fB\-f\fR|\fB\-\-follow\fR] [\fB\-h\fR|\fB\-\-help\fR] 
+.SH DESCRIPTION
+Display OS logs
+.SH OPTIONS
+.TP
+\fB\-l\fR, \fB\-\-limit\fR \fI<LIMIT>\fR
+Maximum number of log entries
+.TP
+\fB\-c\fR, \fB\-\-cursor\fR \fI<CURSOR>\fR
+Start from this cursor position
+.TP
+\fB\-b\fR, \fB\-\-boot\fR \fI<BOOT>\fR
+Filter logs by boot ID
+.TP
+\fB\-B\fR, \fB\-\-before\fR
+Show logs before the cursor position
+.TP
+\fB\-f\fR, \fB\-\-follow\fR
+Follow log output in real\-time
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
--- a/core/man/start-cli/start-cli-diagnostic-rebuild.1
+++ b/core/man/start-cli/start-cli-diagnostic-rebuild.1
@@ -0,0 +1,13 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-diagnostic-rebuild 1  "rebuild " 
+.SH NAME
+start\-cli\-diagnostic\-rebuild \- Teardown and rebuild containers
+.SH SYNOPSIS
+\fBstart\-cli diagnostic rebuild\fR [\fB\-h\fR|\fB\-\-help\fR] 
+.SH DESCRIPTION
+Teardown and rebuild containers
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
--- a/core/man/start-cli/start-cli-diagnostic-restart.1
+++ b/core/man/start-cli/start-cli-diagnostic-restart.1
@@ -0,0 +1,13 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-diagnostic-restart 1  "restart " 
+.SH NAME
+start\-cli\-diagnostic\-restart \- Restart the server
+.SH SYNOPSIS
+\fBstart\-cli diagnostic restart\fR [\fB\-h\fR|\fB\-\-help\fR] 
+.SH DESCRIPTION
+Restart the server
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
--- a/core/man/start-cli/start-cli-diagnostic.1
+++ b/core/man/start-cli/start-cli-diagnostic.1
@@ -0,0 +1,32 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-diagnostic 1  "diagnostic " 
+.SH NAME
+start\-cli\-diagnostic \- Commands to display logs, restart the server, etc
+.SH SYNOPSIS
+\fBstart\-cli diagnostic\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
+.SH DESCRIPTION
+Commands to display logs, restart the server, etc
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.SH SUBCOMMANDS
+.TP
+start\-cli\-diagnostic\-disk(1)
+Command to remove disk from filesystem
+.TP
+start\-cli\-diagnostic\-error(1)
+Display diagnostic error
+.TP
+start\-cli\-diagnostic\-kernel\-logs(1)
+Display kernel logs
+.TP
+start\-cli\-diagnostic\-logs(1)
+Display OS logs
+.TP
+start\-cli\-diagnostic\-rebuild(1)
+Teardown and rebuild containers
+.TP
+start\-cli\-diagnostic\-restart(1)
+Restart the server
--- a/core/man/start-cli/start-cli-disk-list.1
+++ b/core/man/start-cli/start-cli-disk-list.1
@@ -0,0 +1,16 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-disk-list 1  "list " 
+.SH NAME
+start\-cli\-disk\-list \- List disk information
+.SH SYNOPSIS
+\fBstart\-cli disk list\fR [\fB\-\-format\fR] [\fB\-h\fR|\fB\-\-help\fR] 
+.SH DESCRIPTION
+List disk information
+.SH OPTIONS
+.TP
+\fB\-\-format\fR
+
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
--- a/core/man/start-cli/start-cli-disk-repair.1
+++ b/core/man/start-cli/start-cli-disk-repair.1
@@ -0,0 +1,13 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-disk-repair 1  "repair " 
+.SH NAME
+start\-cli\-disk\-repair \- Repair disk corruption
+.SH SYNOPSIS
+\fBstart\-cli disk repair\fR [\fB\-h\fR|\fB\-\-help\fR] 
+.SH DESCRIPTION
+Repair disk corruption
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
--- a/core/man/start-cli/start-cli-disk.1
+++ b/core/man/start-cli/start-cli-disk.1
@@ -0,0 +1,20 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-disk 1  "disk " 
+.SH NAME
+start\-cli\-disk \- Commands for listing disk info and repairing
+.SH SYNOPSIS
+\fBstart\-cli disk\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
+.SH DESCRIPTION
+Commands for listing disk info and repairing
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.SH SUBCOMMANDS
+.TP
+start\-cli\-disk\-list(1)
+List disk information
+.TP
+start\-cli\-disk\-repair(1)
+Repair disk corruption
--- a/core/man/start-cli/start-cli-echo.1
+++ b/core/man/start-cli/start-cli-echo.1
@@ -0,0 +1,16 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-echo 1  "echo " 
+.SH NAME
+start\-cli\-echo \- Echo a message back
+.SH SYNOPSIS
+\fBstart\-cli echo\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIMESSAGE\fR> 
+.SH DESCRIPTION
+Echo a message back
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+<\fIMESSAGE\fR>
+Message to echo back
--- a/core/man/start-cli/start-cli-flash-os.1
+++ b/core/man/start-cli/start-cli-flash-os.1
@@ -0,0 +1,32 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-flash-os 1  "flash-os " 
+.SH NAME
+start\-cli\-flash\-os \- Flash StartOS to a drive
+.SH SYNOPSIS
+\fBstart\-cli flash\-os\fR [\fB\-\-efi\fR] [\fB\-h\fR|\fB\-\-help\fR] <\fISQUASHFS\fR> <\fIDISK\fR> 
+.SH DESCRIPTION
+Flash StartOS to a drive
+.SH OPTIONS
+.TP
+\fB\-\-efi\fR \fI<EFI>\fR
+Use EFI boot mode
+.br
+
+.br
+\fIPossible values:\fR
+.RS 14
+.IP \(bu 2
+true
+.IP \(bu 2
+false
+.RE
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+<\fISQUASHFS\fR>
+Path to squashfs image file
+.TP
+<\fIDISK\fR>
+Target disk for installation
--- a/core/man/start-cli/start-cli-git-info.1
+++ b/core/man/start-cli/start-cli-git-info.1
@@ -0,0 +1,13 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-git-info 1  "git-info " 
+.SH NAME
+start\-cli\-git\-info \- Display the git hash of this build
+.SH SYNOPSIS
+\fBstart\-cli git\-info\fR [\fB\-h\fR|\fB\-\-help\fR] 
+.SH DESCRIPTION
+Display the git hash of this build
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
--- a/core/man/start-cli/start-cli-init-kernel-logs.1
+++ b/core/man/start-cli/start-cli-init-kernel-logs.1
@@ -0,0 +1,28 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-init-kernel-logs 1  "kernel-logs " 
+.SH NAME
+start\-cli\-init\-kernel\-logs \- Display kernel logs
+.SH SYNOPSIS
+\fBstart\-cli init kernel\-logs\fR [\fB\-l\fR|\fB\-\-limit\fR] [\fB\-c\fR|\fB\-\-cursor\fR] [\fB\-b\fR|\fB\-\-boot\fR] [\fB\-B\fR|\fB\-\-before\fR] [\fB\-f\fR|\fB\-\-follow\fR] [\fB\-h\fR|\fB\-\-help\fR] 
+.SH DESCRIPTION
+Display kernel logs
+.SH OPTIONS
+.TP
+\fB\-l\fR, \fB\-\-limit\fR \fI<LIMIT>\fR
+Maximum number of log entries
+.TP
+\fB\-c\fR, \fB\-\-cursor\fR \fI<CURSOR>\fR
+Start from this cursor position
+.TP
+\fB\-b\fR, \fB\-\-boot\fR \fI<BOOT>\fR
+Filter logs by boot ID
+.TP
+\fB\-B\fR, \fB\-\-before\fR
+Show logs before the cursor position
+.TP
+\fB\-f\fR, \fB\-\-follow\fR
+Follow log output in real\-time
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
--- a/core/man/start-cli/start-cli-init-key.1
+++ b/core/man/start-cli/start-cli-init-key.1
@@ -0,0 +1,13 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-init-key 1  "init-key " 
+.SH NAME
+start\-cli\-init\-key \- Create a new developer key
+.SH SYNOPSIS
+\fBstart\-cli init\-key\fR [\fB\-h\fR|\fB\-\-help\fR] 
+.SH DESCRIPTION
+Create a new developer key
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
--- a/core/man/start-cli/start-cli-init-logs.1
+++ b/core/man/start-cli/start-cli-init-logs.1
@@ -0,0 +1,28 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-init-logs 1  "logs " 
+.SH NAME
+start\-cli\-init\-logs \- Display OS logs
+.SH SYNOPSIS
+\fBstart\-cli init logs\fR [\fB\-l\fR|\fB\-\-limit\fR] [\fB\-c\fR|\fB\-\-cursor\fR] [\fB\-b\fR|\fB\-\-boot\fR] [\fB\-B\fR|\fB\-\-before\fR] [\fB\-f\fR|\fB\-\-follow\fR] [\fB\-h\fR|\fB\-\-help\fR] 
+.SH DESCRIPTION
+Display OS logs
+.SH OPTIONS
+.TP
+\fB\-l\fR, \fB\-\-limit\fR \fI<LIMIT>\fR
+Maximum number of log entries
+.TP
+\fB\-c\fR, \fB\-\-cursor\fR \fI<CURSOR>\fR
+Start from this cursor position
+.TP
+\fB\-b\fR, \fB\-\-boot\fR \fI<BOOT>\fR
+Filter logs by boot ID
+.TP
+\fB\-B\fR, \fB\-\-before\fR
+Show logs before the cursor position
+.TP
+\fB\-f\fR, \fB\-\-follow\fR
+Follow log output in real\-time
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
--- a/core/man/start-cli/start-cli-init-subscribe.1
+++ b/core/man/start-cli/start-cli-init-subscribe.1
@@ -0,0 +1,13 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-init-subscribe 1  "subscribe " 
+.SH NAME
+start\-cli\-init\-subscribe \- Get initialization progress
+.SH SYNOPSIS
+\fBstart\-cli init subscribe\fR [\fB\-h\fR|\fB\-\-help\fR] 
+.SH DESCRIPTION
+Get initialization progress
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
--- a/core/man/start-cli/start-cli-init.1
+++ b/core/man/start-cli/start-cli-init.1
@@ -0,0 +1,23 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-init 1  "init " 
+.SH NAME
+start\-cli\-init \- Commands for initialization
+.SH SYNOPSIS
+\fBstart\-cli init\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
+.SH DESCRIPTION
+Commands for initialization
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.SH SUBCOMMANDS
+.TP
+start\-cli\-init\-kernel\-logs(1)
+Display kernel logs
+.TP
+start\-cli\-init\-logs(1)
+Display OS logs
+.TP
+start\-cli\-init\-subscribe(1)
+Get initialization progress
--- a/core/man/start-cli/start-cli-kiosk-disable.1
+++ b/core/man/start-cli/start-cli-kiosk-disable.1
@@ -0,0 +1,13 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-kiosk-disable 1  "disable " 
+.SH NAME
+start\-cli\-kiosk\-disable \- Disable kiosk mode
+.SH SYNOPSIS
+\fBstart\-cli kiosk disable\fR [\fB\-h\fR|\fB\-\-help\fR] 
+.SH DESCRIPTION
+Disable kiosk mode
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
--- a/core/man/start-cli/start-cli-kiosk-enable.1
+++ b/core/man/start-cli/start-cli-kiosk-enable.1
@@ -0,0 +1,13 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-kiosk-enable 1  "enable " 
+.SH NAME
+start\-cli\-kiosk\-enable \- Enable kiosk mode
+.SH SYNOPSIS
+\fBstart\-cli kiosk enable\fR [\fB\-h\fR|\fB\-\-help\fR] 
+.SH DESCRIPTION
+Enable kiosk mode
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
--- a/core/man/start-cli/start-cli-kiosk.1
+++ b/core/man/start-cli/start-cli-kiosk.1
@@ -0,0 +1,20 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-kiosk 1  "kiosk " 
+.SH NAME
+start\-cli\-kiosk \- Commands for kiosk mode
+.SH SYNOPSIS
+\fBstart\-cli kiosk\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
+.SH DESCRIPTION
+Commands for kiosk mode
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.SH SUBCOMMANDS
+.TP
+start\-cli\-kiosk\-disable(1)
+Disable kiosk mode
+.TP
+start\-cli\-kiosk\-enable(1)
+Enable kiosk mode
--- a/core/man/start-cli/start-cli-net-acme-init.1
+++ b/core/man/start-cli/start-cli-net-acme-init.1
@@ -0,0 +1,19 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-net-acme-init 1  "init " 
+.SH NAME
+start\-cli\-net\-acme\-init \- Setup ACME certificate acquisition
+.SH SYNOPSIS
+\fBstart\-cli net acme init\fR <\fB\-\-provider\fR> [\fB\-\-contact\fR] [\fB\-h\fR|\fB\-\-help\fR] 
+.SH DESCRIPTION
+Setup ACME certificate acquisition
+.SH OPTIONS
+.TP
+\fB\-\-provider\fR \fI<PROVIDER>\fR
+ACME provider identifier or url
+.TP
+\fB\-\-contact\fR \fI<CONTACT>\fR
+Contact email for ACME certificate authority
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
--- a/core/man/start-cli/start-cli-net-acme-remove.1
+++ b/core/man/start-cli/start-cli-net-acme-remove.1
@@ -0,0 +1,16 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-net-acme-remove 1  "remove " 
+.SH NAME
+start\-cli\-net\-acme\-remove \- Remove ACME certificate acquisition configuration
+.SH SYNOPSIS
+\fBstart\-cli net acme remove\fR <\fB\-\-provider\fR> [\fB\-h\fR|\fB\-\-help\fR] 
+.SH DESCRIPTION
+Remove ACME certificate acquisition configuration
+.SH OPTIONS
+.TP
+\fB\-\-provider\fR \fI<PROVIDER>\fR
+ACME provider identifier or url
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
--- a/core/man/start-cli/start-cli-net-acme.1
+++ b/core/man/start-cli/start-cli-net-acme.1
@@ -0,0 +1,20 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-net-acme 1  "acme " 
+.SH NAME
+start\-cli\-net\-acme \- Setup ACME certificate
+.SH SYNOPSIS
+\fBstart\-cli net acme\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
+.SH DESCRIPTION
+Setup ACME certificate
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.SH SUBCOMMANDS
+.TP
+start\-cli\-net\-acme\-init(1)
+Setup ACME certificate acquisition
+.TP
+start\-cli\-net\-acme\-remove(1)
+Remove ACME certificate acquisition configuration
--- a/core/man/start-cli/start-cli-net-dns-dump-table.1
+++ b/core/man/start-cli/start-cli-net-dns-dump-table.1
@@ -0,0 +1,16 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-net-dns-dump-table 1  "dump-table " 
+.SH NAME
+start\-cli\-net\-dns\-dump\-table \- Dump address resolution table
+.SH SYNOPSIS
+\fBstart\-cli net dns dump\-table\fR [\fB\-\-format\fR] [\fB\-h\fR|\fB\-\-help\fR] 
+.SH DESCRIPTION
+Dump address resolution table
+.SH OPTIONS
+.TP
+\fB\-\-format\fR
+
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
--- a/core/man/start-cli/start-cli-net-dns-query.1
+++ b/core/man/start-cli/start-cli-net-dns-query.1
@@ -0,0 +1,19 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-net-dns-query 1  "query " 
+.SH NAME
+start\-cli\-net\-dns\-query \- Test DNS configuration for a domain
+.SH SYNOPSIS
+\fBstart\-cli net dns query\fR [\fB\-\-format\fR] [\fB\-h\fR|\fB\-\-help\fR] <\fIFQDN\fR> 
+.SH DESCRIPTION
+Test DNS configuration for a domain
+.SH OPTIONS
+.TP
+\fB\-\-format\fR
+
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+<\fIFQDN\fR>
+Fully qualified domain name
--- a/core/man/start-cli/start-cli-net-dns-set-static.1
+++ b/core/man/start-cli/start-cli-net-dns-set-static.1
@@ -0,0 +1,16 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-net-dns-set-static 1  "set-static " 
+.SH NAME
+start\-cli\-net\-dns\-set\-static \- Set static DNS servers
+.SH SYNOPSIS
+\fBstart\-cli net dns set\-static\fR [\fB\-h\fR|\fB\-\-help\fR] [\fISERVERS\fR] 
+.SH DESCRIPTION
+Set static DNS servers
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+[\fISERVERS\fR]
+DNS servers to use
--- a/core/man/start-cli/start-cli-net-dns.1
+++ b/core/man/start-cli/start-cli-net-dns.1
@@ -0,0 +1,23 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-net-dns 1  "dns " 
+.SH NAME
+start\-cli\-net\-dns \- Manage and query DNS
+.SH SYNOPSIS
+\fBstart\-cli net dns\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
+.SH DESCRIPTION
+Manage and query DNS
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.SH SUBCOMMANDS
+.TP
+start\-cli\-net\-dns\-dump\-table(1)
+Dump address resolution table
+.TP
+start\-cli\-net\-dns\-query(1)
+Test DNS configuration for a domain
+.TP
+start\-cli\-net\-dns\-set\-static(1)
+Set static DNS servers
--- a/core/man/start-cli/start-cli-net-forward-dump-table.1
+++ b/core/man/start-cli/start-cli-net-forward-dump-table.1
@@ -0,0 +1,15 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-net-forward-dump-table 1  "dump-table " 
+.SH NAME
+start\-cli\-net\-forward\-dump\-table
+.SH SYNOPSIS
+\fBstart\-cli net forward dump\-table\fR [\fB\-\-format\fR] [\fB\-h\fR|\fB\-\-help\fR] 
+.SH DESCRIPTION
+.SH OPTIONS
+.TP
+\fB\-\-format\fR
+
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
--- a/core/man/start-cli/start-cli-net-forward.1
+++ b/core/man/start-cli/start-cli-net-forward.1
@@ -0,0 +1,16 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-net-forward 1  "forward " 
+.SH NAME
+start\-cli\-net\-forward \- Manage port forwards
+.SH SYNOPSIS
+\fBstart\-cli net forward\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
+.SH DESCRIPTION
+Manage port forwards
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.SH SUBCOMMANDS
+.TP
+start\-cli\-net\-forward\-dump\-table(1)
--- a/core/man/start-cli/start-cli-net-gateway-check-dns.1
+++ b/core/man/start-cli/start-cli-net-gateway-check-dns.1
@@ -0,0 +1,19 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-net-gateway-check-dns 1  "check-dns " 
+.SH NAME
+start\-cli\-net\-gateway\-check\-dns \- Check DNS configuration for a gateway
+.SH SYNOPSIS
+\fBstart\-cli net gateway check\-dns\fR [\fB\-\-format\fR] [\fB\-h\fR|\fB\-\-help\fR] <\fIGATEWAY\fR> 
+.SH DESCRIPTION
+Check DNS configuration for a gateway
+.SH OPTIONS
+.TP
+\fB\-\-format\fR
+
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+<\fIGATEWAY\fR>
+Gateway identifier
--- a/core/man/start-cli/start-cli-net-gateway-check-port.1
+++ b/core/man/start-cli/start-cli-net-gateway-check-port.1
@@ -0,0 +1,22 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-net-gateway-check-port 1  "check-port " 
+.SH NAME
+start\-cli\-net\-gateway\-check\-port \- about.check\-port\-reachability
+.SH SYNOPSIS
+\fBstart\-cli net gateway check\-port\fR [\fB\-\-format\fR] [\fB\-h\fR|\fB\-\-help\fR] <\fIPORT\fR> <\fIGATEWAY\fR> 
+.SH DESCRIPTION
+about.check\-port\-reachability
+.SH OPTIONS
+.TP
+\fB\-\-format\fR
+
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+<\fIPORT\fR>
+help.arg.port
+.TP
+<\fIGATEWAY\fR>
+Gateway identifier
--- a/core/man/start-cli/start-cli-net-gateway-forget.1
+++ b/core/man/start-cli/start-cli-net-gateway-forget.1
@@ -0,0 +1,16 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-net-gateway-forget 1  "forget " 
+.SH NAME
+start\-cli\-net\-gateway\-forget \- Forget a disconnected gateway
+.SH SYNOPSIS
+\fBstart\-cli net gateway forget\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIGATEWAY\fR> 
+.SH DESCRIPTION
+Forget a disconnected gateway
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+<\fIGATEWAY\fR>
+Gateway identifier
--- a/core/man/start-cli/start-cli-net-gateway-list.1
+++ b/core/man/start-cli/start-cli-net-gateway-list.1
@@ -0,0 +1,16 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-net-gateway-list 1  "list " 
+.SH NAME
+start\-cli\-net\-gateway\-list \- Show gateways StartOS can listen on
+.SH SYNOPSIS
+\fBstart\-cli net gateway list\fR [\fB\-\-format\fR] [\fB\-h\fR|\fB\-\-help\fR] 
+.SH DESCRIPTION
+Show gateways StartOS can listen on
+.SH OPTIONS
+.TP
+\fB\-\-format\fR
+
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
--- a/core/man/start-cli/start-cli-net-gateway-set-default-outbound.1
+++ b/core/man/start-cli/start-cli-net-gateway-set-default-outbound.1
@@ -0,0 +1,16 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-net-gateway-set-default-outbound 1  "set-default-outbound " 
+.SH NAME
+start\-cli\-net\-gateway\-set\-default\-outbound \- about.set\-default\-outbound\-gateway
+.SH SYNOPSIS
+\fBstart\-cli net gateway set\-default\-outbound\fR [\fB\-h\fR|\fB\-\-help\fR] [\fIGATEWAY\fR] 
+.SH DESCRIPTION
+about.set\-default\-outbound\-gateway
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+[\fIGATEWAY\fR]
+Gateway identifier
--- a/core/man/start-cli/start-cli-net-gateway-set-name.1
+++ b/core/man/start-cli/start-cli-net-gateway-set-name.1
@@ -0,0 +1,19 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-net-gateway-set-name 1  "set-name " 
+.SH NAME
+start\-cli\-net\-gateway\-set\-name \- Rename a gateway
+.SH SYNOPSIS
+\fBstart\-cli net gateway set\-name\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIID\fR> <\fINAME\fR> 
+.SH DESCRIPTION
+Rename a gateway
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+<\fIID\fR>
+Gateway identifier
+.TP
+<\fINAME\fR>
+Name of the gateway
--- a/core/man/start-cli/start-cli-net-gateway.1
+++ b/core/man/start-cli/start-cli-net-gateway.1
@@ -0,0 +1,32 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-net-gateway 1  "gateway " 
+.SH NAME
+start\-cli\-net\-gateway \- View and edit gateway configurations
+.SH SYNOPSIS
+\fBstart\-cli net gateway\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
+.SH DESCRIPTION
+View and edit gateway configurations
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.SH SUBCOMMANDS
+.TP
+start\-cli\-net\-gateway\-check\-dns(1)
+Check DNS configuration for a gateway
+.TP
+start\-cli\-net\-gateway\-check\-port(1)
+about.check\-port\-reachability
+.TP
+start\-cli\-net\-gateway\-forget(1)
+Forget a disconnected gateway
+.TP
+start\-cli\-net\-gateway\-list(1)
+Show gateways StartOS can listen on
+.TP
+start\-cli\-net\-gateway\-set\-default\-outbound(1)
+about.set\-default\-outbound\-gateway
+.TP
+start\-cli\-net\-gateway\-set\-name(1)
+Rename a gateway
--- a/core/man/start-cli/start-cli-net-tunnel-add.1
+++ b/core/man/start-cli/start-cli-net-tunnel-add.1
@@ -0,0 +1,35 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-net-tunnel-add 1  "add " 
+.SH NAME
+start\-cli\-net\-tunnel\-add \- Add a new tunnel
+.SH SYNOPSIS
+\fBstart\-cli net tunnel add\fR [\fB\-\-set\-as\-default\-outbound\fR] [\fB\-h\fR|\fB\-\-help\fR] <\fINAME\fR> <\fICONFIG\fR> [\fIGATEWAY_TYPE\fR] 
+.SH DESCRIPTION
+Add a new tunnel
+.SH OPTIONS
+.TP
+\fB\-\-set\-as\-default\-outbound\fR
+help.arg.set\-as\-default\-outbound
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+<\fINAME\fR>
+Tunnel name
+.TP
+<\fICONFIG\fR>
+WireGuard configuration
+.TP
+[\fIGATEWAY_TYPE\fR]
+help.arg.gateway\-type
+.br
+
+.br
+\fIPossible values:\fR
+.RS 14
+.IP \(bu 2
+inbound\-outbound
+.IP \(bu 2
+outbound\-only
+.RE
--- a/core/man/start-cli/start-cli-net-tunnel-remove.1
+++ b/core/man/start-cli/start-cli-net-tunnel-remove.1
@@ -0,0 +1,16 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-net-tunnel-remove 1  "remove " 
+.SH NAME
+start\-cli\-net\-tunnel\-remove \- Remove a tunnel
+.SH SYNOPSIS
+\fBstart\-cli net tunnel remove\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIID\fR> 
+.SH DESCRIPTION
+Remove a tunnel
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+<\fIID\fR>
+Gateway identifier
--- a/core/man/start-cli/start-cli-net-tunnel.1
+++ b/core/man/start-cli/start-cli-net-tunnel.1
@@ -0,0 +1,20 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-net-tunnel 1  "tunnel " 
+.SH NAME
+start\-cli\-net\-tunnel \- Manage tunnels
+.SH SYNOPSIS
+\fBstart\-cli net tunnel\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
+.SH DESCRIPTION
+Manage tunnels
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.SH SUBCOMMANDS
+.TP
+start\-cli\-net\-tunnel\-add(1)
+Add a new tunnel
+.TP
+start\-cli\-net\-tunnel\-remove(1)
+Remove a tunnel
--- a/core/man/start-cli/start-cli-net-vhost-add-passthrough.1
+++ b/core/man/start-cli/start-cli-net-vhost-add-passthrough.1
@@ -0,0 +1,27 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-net-vhost-add-passthrough 1  "add-passthrough " 
+.SH NAME
+start\-cli\-net\-vhost\-add\-passthrough
+.SH SYNOPSIS
+\fBstart\-cli net vhost add\-passthrough\fR <\fB\-\-hostname\fR> <\fB\-\-listen\-port\fR> <\fB\-\-backend\fR> [\fB\-\-public\-gateway\fR] [\fB\-\-private\-ip\fR] [\fB\-h\fR|\fB\-\-help\fR] 
+.SH DESCRIPTION
+.SH OPTIONS
+.TP
+\fB\-\-hostname\fR \fI<HOSTNAME>\fR
+
+.TP
+\fB\-\-listen\-port\fR \fI<LISTEN_PORT>\fR
+
+.TP
+\fB\-\-backend\fR \fI<BACKEND>\fR
+
+.TP
+\fB\-\-public\-gateway\fR \fI<PUBLIC_GATEWAY>\fR
+
+.TP
+\fB\-\-private\-ip\fR \fI<PRIVATE_IP>\fR
+
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
--- a/core/man/start-cli/start-cli-net-vhost-dump-table.1
+++ b/core/man/start-cli/start-cli-net-vhost-dump-table.1
@@ -0,0 +1,15 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-net-vhost-dump-table 1  "dump-table " 
+.SH NAME
+start\-cli\-net\-vhost\-dump\-table
+.SH SYNOPSIS
+\fBstart\-cli net vhost dump\-table\fR [\fB\-\-format\fR] [\fB\-h\fR|\fB\-\-help\fR] 
+.SH DESCRIPTION
+.SH OPTIONS
+.TP
+\fB\-\-format\fR
+
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
--- a/core/man/start-cli/start-cli-net-vhost-list-passthrough.1
+++ b/core/man/start-cli/start-cli-net-vhost-list-passthrough.1
@@ -0,0 +1,15 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-net-vhost-list-passthrough 1  "list-passthrough " 
+.SH NAME
+start\-cli\-net\-vhost\-list\-passthrough
+.SH SYNOPSIS
+\fBstart\-cli net vhost list\-passthrough\fR [\fB\-\-format\fR] [\fB\-h\fR|\fB\-\-help\fR] 
+.SH DESCRIPTION
+.SH OPTIONS
+.TP
+\fB\-\-format\fR
+
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
--- a/core/man/start-cli/start-cli-net-vhost-remove-passthrough.1
+++ b/core/man/start-cli/start-cli-net-vhost-remove-passthrough.1
@@ -0,0 +1,18 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-net-vhost-remove-passthrough 1  "remove-passthrough " 
+.SH NAME
+start\-cli\-net\-vhost\-remove\-passthrough
+.SH SYNOPSIS
+\fBstart\-cli net vhost remove\-passthrough\fR <\fB\-\-hostname\fR> <\fB\-\-listen\-port\fR> [\fB\-h\fR|\fB\-\-help\fR] 
+.SH DESCRIPTION
+.SH OPTIONS
+.TP
+\fB\-\-hostname\fR \fI<HOSTNAME>\fR
+
+.TP
+\fB\-\-listen\-port\fR \fI<LISTEN_PORT>\fR
+
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
--- a/core/man/start-cli/start-cli-net-vhost.1
+++ b/core/man/start-cli/start-cli-net-vhost.1
@@ -0,0 +1,22 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-net-vhost 1  "vhost " 
+.SH NAME
+start\-cli\-net\-vhost \- Manage SSL vhost proxy
+.SH SYNOPSIS
+\fBstart\-cli net vhost\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
+.SH DESCRIPTION
+Manage SSL vhost proxy
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.SH SUBCOMMANDS
+.TP
+start\-cli\-net\-vhost\-add\-passthrough(1)
+.TP
+start\-cli\-net\-vhost\-dump\-table(1)
+.TP
+start\-cli\-net\-vhost\-list\-passthrough(1)
+.TP
+start\-cli\-net\-vhost\-remove\-passthrough(1)
--- a/core/man/start-cli/start-cli-net.1
+++ b/core/man/start-cli/start-cli-net.1
@@ -0,0 +1,32 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-net 1  "net " 
+.SH NAME
+start\-cli\-net \- Network commands
+.SH SYNOPSIS
+\fBstart\-cli net\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
+.SH DESCRIPTION
+Network commands
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.SH SUBCOMMANDS
+.TP
+start\-cli\-net\-acme(1)
+Setup ACME certificate
+.TP
+start\-cli\-net\-dns(1)
+Manage and query DNS
+.TP
+start\-cli\-net\-forward(1)
+Manage port forwards
+.TP
+start\-cli\-net\-gateway(1)
+View and edit gateway configurations
+.TP
+start\-cli\-net\-tunnel(1)
+Manage tunnels
+.TP
+start\-cli\-net\-vhost(1)
+Manage SSL vhost proxy
--- a/core/man/start-cli/start-cli-notification-create.1
+++ b/core/man/start-cli/start-cli-notification-create.1
@@ -0,0 +1,25 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-notification-create 1  "create " 
+.SH NAME
+start\-cli\-notification\-create \- Persist a new notification
+.SH SYNOPSIS
+\fBstart\-cli notification create\fR [\fB\-p\fR|\fB\-\-package\fR] [\fB\-h\fR|\fB\-\-help\fR] <\fILEVEL\fR> <\fITITLE\fR> <\fIMESSAGE\fR> 
+.SH DESCRIPTION
+Persist a new notification
+.SH OPTIONS
+.TP
+\fB\-p\fR, \fB\-\-package\fR \fI<PACKAGE>\fR
+Package identifier
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+<\fILEVEL\fR>
+Notification severity level
+.TP
+<\fITITLE\fR>
+Notification title
+.TP
+<\fIMESSAGE\fR>
+Notification message content
--- a/core/man/start-cli/start-cli-notification-list.1
+++ b/core/man/start-cli/start-cli-notification-list.1
@@ -0,0 +1,22 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-notification-list 1  "list " 
+.SH NAME
+start\-cli\-notification\-list \- List notifications
+.SH SYNOPSIS
+\fBstart\-cli notification list\fR [\fB\-\-format\fR] [\fB\-h\fR|\fB\-\-help\fR] [\fIBEFORE\fR] [\fILIMIT\fR] 
+.SH DESCRIPTION
+List notifications
+.SH OPTIONS
+.TP
+\fB\-\-format\fR
+
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+[\fIBEFORE\fR]
+Get notifications before this ID
+.TP
+[\fILIMIT\fR]
+Maximum number of notifications to return
--- a/core/man/start-cli/start-cli-notification-mark-seen-before.1
+++ b/core/man/start-cli/start-cli-notification-mark-seen-before.1
@@ -0,0 +1,16 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-notification-mark-seen-before 1  "mark-seen-before " 
+.SH NAME
+start\-cli\-notification\-mark\-seen\-before \- Mark notifications as seen before a given ID
+.SH SYNOPSIS
+\fBstart\-cli notification mark\-seen\-before\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIBEFORE\fR> 
+.SH DESCRIPTION
+Mark notifications as seen before a given ID
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+<\fIBEFORE\fR>
+Get notifications before this ID
--- a/core/man/start-cli/start-cli-notification-mark-seen.1
+++ b/core/man/start-cli/start-cli-notification-mark-seen.1
@@ -0,0 +1,16 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-notification-mark-seen 1  "mark-seen " 
+.SH NAME
+start\-cli\-notification\-mark\-seen \- Mark notifications as seen
+.SH SYNOPSIS
+\fBstart\-cli notification mark\-seen\fR [\fB\-h\fR|\fB\-\-help\fR] [\fIIDS\fR] 
+.SH DESCRIPTION
+Mark notifications as seen
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+[\fIIDS\fR]
+Notification IDs
--- a/core/man/start-cli/start-cli-notification-mark-unseen.1
+++ b/core/man/start-cli/start-cli-notification-mark-unseen.1
@@ -0,0 +1,16 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-notification-mark-unseen 1  "mark-unseen " 
+.SH NAME
+start\-cli\-notification\-mark\-unseen \- Mark notifications as unseen
+.SH SYNOPSIS
+\fBstart\-cli notification mark\-unseen\fR [\fB\-h\fR|\fB\-\-help\fR] [\fIIDS\fR] 
+.SH DESCRIPTION
+Mark notifications as unseen
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+[\fIIDS\fR]
+Notification IDs
--- a/core/man/start-cli/start-cli-notification-remove-before.1
+++ b/core/man/start-cli/start-cli-notification-remove-before.1
@@ -0,0 +1,16 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-notification-remove-before 1  "remove-before " 
+.SH NAME
+start\-cli\-notification\-remove\-before \- Remove notifications before a given ID
+.SH SYNOPSIS
+\fBstart\-cli notification remove\-before\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIBEFORE\fR> 
+.SH DESCRIPTION
+Remove notifications before a given ID
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+<\fIBEFORE\fR>
+Get notifications before this ID
--- a/core/man/start-cli/start-cli-notification-remove.1
+++ b/core/man/start-cli/start-cli-notification-remove.1
@@ -0,0 +1,16 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-notification-remove 1  "remove " 
+.SH NAME
+start\-cli\-notification\-remove \- Remove notification for IDs
+.SH SYNOPSIS
+\fBstart\-cli notification remove\fR [\fB\-h\fR|\fB\-\-help\fR] [\fIIDS\fR] 
+.SH DESCRIPTION
+Remove notification for IDs
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+[\fIIDS\fR]
+Notification IDs
--- a/core/man/start-cli/start-cli-notification.1
+++ b/core/man/start-cli/start-cli-notification.1
@@ -0,0 +1,35 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-notification 1  "notification " 
+.SH NAME
+start\-cli\-notification \- Create, delete, or list notifications
+.SH SYNOPSIS
+\fBstart\-cli notification\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
+.SH DESCRIPTION
+Create, delete, or list notifications
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.SH SUBCOMMANDS
+.TP
+start\-cli\-notification\-create(1)
+Persist a new notification
+.TP
+start\-cli\-notification\-list(1)
+List notifications
+.TP
+start\-cli\-notification\-mark\-seen(1)
+Mark notifications as seen
+.TP
+start\-cli\-notification\-mark\-seen\-before(1)
+Mark notifications as seen before a given ID
+.TP
+start\-cli\-notification\-mark\-unseen(1)
+Mark notifications as unseen
+.TP
+start\-cli\-notification\-remove(1)
+Remove notification for IDs
+.TP
+start\-cli\-notification\-remove\-before(1)
+Remove notifications before a given ID
--- a/core/man/start-cli/start-cli-package-action-clear-task.1
+++ b/core/man/start-cli/start-cli-package-action-clear-task.1
@@ -0,0 +1,22 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-package-action-clear-task 1  "clear-task " 
+.SH NAME
+start\-cli\-package\-action\-clear\-task \- Clear a service task
+.SH SYNOPSIS
+\fBstart\-cli package action clear\-task\fR [\fB\-\-force\fR] [\fB\-h\fR|\fB\-\-help\fR] <\fIPACKAGE_ID\fR> <\fIREPLAY_ID\fR> 
+.SH DESCRIPTION
+Clear a service task
+.SH OPTIONS
+.TP
+\fB\-\-force\fR
+Force clear the task even if running
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+<\fIPACKAGE_ID\fR>
+Package identifier
+.TP
+<\fIREPLAY_ID\fR>
+Replay identifier for task
--- a/core/man/start-cli/start-cli-package-action-get-input.1
+++ b/core/man/start-cli/start-cli-package-action-get-input.1
@@ -0,0 +1,22 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-package-action-get-input 1  "get-input " 
+.SH NAME
+start\-cli\-package\-action\-get\-input \- Get action input specification
+.SH SYNOPSIS
+\fBstart\-cli package action get\-input\fR [\fB\-\-format\fR] [\fB\-h\fR|\fB\-\-help\fR] <\fIPACKAGE_ID\fR> <\fIACTION_ID\fR> 
+.SH DESCRIPTION
+Get action input specification
+.SH OPTIONS
+.TP
+\fB\-\-format\fR
+
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+<\fIPACKAGE_ID\fR>
+Package identifier
+.TP
+<\fIACTION_ID\fR>
+Action identifier
--- a/core/man/start-cli/start-cli-package-action-run.1
+++ b/core/man/start-cli/start-cli-package-action-run.1
@@ -0,0 +1,25 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-package-action-run 1  "run " 
+.SH NAME
+start\-cli\-package\-action\-run \- Run a service action
+.SH SYNOPSIS
+\fBstart\-cli package action run\fR [\fB\-\-event\-id\fR] [\fB\-\-format\fR] [\fB\-h\fR|\fB\-\-help\fR] <\fIPACKAGE_ID\fR> <\fIACTION_ID\fR> 
+.SH DESCRIPTION
+Run a service action
+.SH OPTIONS
+.TP
+\fB\-\-event\-id\fR \fI<EVENT_ID>\fR
+Unique event identifier
+.TP
+\fB\-\-format\fR
+
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+<\fIPACKAGE_ID\fR>
+Package identifier
+.TP
+<\fIACTION_ID\fR>
+Action identifier
--- a/core/man/start-cli/start-cli-package-action.1
+++ b/core/man/start-cli/start-cli-package-action.1
@@ -0,0 +1,23 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-package-action 1  "action " 
+.SH NAME
+start\-cli\-package\-action \- Commands to get action input or run an action
+.SH SYNOPSIS
+\fBstart\-cli package action\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
+.SH DESCRIPTION
+Commands to get action input or run an action
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.SH SUBCOMMANDS
+.TP
+start\-cli\-package\-action\-clear\-task(1)
+Clear a service task
+.TP
+start\-cli\-package\-action\-get\-input(1)
+Get action input specification
+.TP
+start\-cli\-package\-action\-run(1)
+Run a service action
--- a/core/man/start-cli/start-cli-package-attach.1
+++ b/core/man/start-cli/start-cli-package-attach.1
@@ -0,0 +1,33 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-package-attach 1  "attach " 
+.SH NAME
+start\-cli\-package\-attach
+.SH SYNOPSIS
+\fBstart\-cli package attach\fR [\fB\-\-force\-tty\fR] [\fB\-s\fR|\fB\-\-subcontainer\fR] [\fB\-n\fR|\fB\-\-name\fR] [\fB\-u\fR|\fB\-\-user\fR] [\fB\-i\fR|\fB\-\-image\-id\fR] [\fB\-h\fR|\fB\-\-help\fR] <\fIID\fR> [\fICOMMAND\fR] 
+.SH DESCRIPTION
+.SH OPTIONS
+.TP
+\fB\-\-force\-tty\fR
+Force TTY mode for I/O
+.TP
+\fB\-s\fR, \fB\-\-subcontainer\fR \fI<SUBCONTAINER>\fR
+Name of the subcontainer
+.TP
+\fB\-n\fR, \fB\-\-name\fR \fI<NAME>\fR
+Name of the container
+.TP
+\fB\-u\fR, \fB\-\-user\fR \fI<USER>\fR
+User name to run as
+.TP
+\fB\-i\fR, \fB\-\-image\-id\fR \fI<IMAGE_ID>\fR
+Docker image identifier
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+<\fIID\fR>
+Package identifier
+.TP
+[\fICOMMAND\fR]
+Command to execute in the container
--- a/core/man/start-cli/start-cli-package-backup-restore.1
+++ b/core/man/start-cli/start-cli-package-backup-restore.1
@@ -0,0 +1,22 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-package-backup-restore 1  "restore " 
+.SH NAME
+start\-cli\-package\-backup\-restore \- Restore packages from backup
+.SH SYNOPSIS
+\fBstart\-cli package backup restore\fR [\fB\-h\fR|\fB\-\-help\fR] <\fITARGET_ID\fR> <\fIPASSWORD\fR> [\fIIDS\fR] 
+.SH DESCRIPTION
+Restore packages from backup
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+<\fITARGET_ID\fR>
+Backup target identifier
+.TP
+<\fIPASSWORD\fR>
+Password for backup encryption
+.TP
+[\fIIDS\fR]
+Package identifiers
--- a/core/man/start-cli/start-cli-package-backup.1
+++ b/core/man/start-cli/start-cli-package-backup.1
@@ -0,0 +1,17 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH start-cli-package-backup 1  "backup " 
+.SH NAME
+start\-cli\-package\-backup \- Commands for restoring package(s) from backup
+.SH SYNOPSIS
+\fBstart\-cli package backup\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
+.SH DESCRIPTION
+Commands for restoring package(s) from backup
+.SH OPTIONS
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.SH SUBCOMMANDS
+.TP
+start\-cli\-package\-backup\-restore(1)
+Restore packages from backup
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Aiden McClelland	19fa1cb4e3	fix build	2026-03-23 10:12:15 -06:00
Matt Hill	521f61c647	bump sdk for republish	2026-03-23 09:45:16 -06:00
Matt Hill	3d45234aae	fix password input for backups and add adjective noun randomizer	2026-03-23 08:58:37 -06:00
Aiden McClelland	f60a1a9ed0	fix: set backup progress complete atomically with status revert Move BackupProgress { complete: true } into the same db.mutate() as the DesiredStatus revert in the backup transition. Previously these were separate mutations—the status would revert to Running before progress showed complete, causing a visible gap in the UI.	2026-03-23 01:15:54 -06:00
Aiden McClelland	2aa910a3e8	fix: replace stdio chown with prctl(PR_SET_DUMPABLE) and pipe-wrap After setuid, the kernel clears the dumpable flag, making /proc/self/ entries owned by root. This broke open("/dev/stderr") for non-root users inside subcontainers. The previous fix (chowning /proc/self/fd/*) was dangerous because it chowned whatever file the FD pointed to (could be the journal socket). The proper fix is prctl(PR_SET_DUMPABLE, 1) after setuid, which restores /proc/self/ ownership to the current uid. Additionally, adds a `pipe-wrap` subcommand that wraps a child process with piped stdout/stderr, relaying to the original FDs. This ensures all descendants inherit pipes (which support re-opening via /proc/self/fd/N) even when the outermost FDs are journal sockets. container-runtime.service now uses this wrapper. With pipe-wrap guaranteeing pipe-based FDs, the exec and launch non-TTY paths no longer need their own pipe+relay threads, eliminating the bug where exec would hang when a child daemonized (e.g. pg_ctl start).	2026-03-23 01:14:49 -06:00
Aiden McClelland	8d1e11e158	fix: pg_dump/pg_restore permission errors in backup subcontainer - Pre-create and chown dump file for postgres user before pg_dump - Chown volume mountpoint to postgres before initdb on restore - Add --no-privileges to pg_restore to skip GRANT/REVOKE for missing roles	2026-03-23 01:13:20 -06:00
Aiden McClelland	b7e4df44bf	wip: subcontainer exec log drain via SCM_RIGHTS (reference only) Implemented pipe FD handoff from exec to launch via Unix socket + SCM_RIGHTS for grandchild log capture. Superseded by the simpler PR_SET_DUMPABLE approach which eliminates the need for pipes entirely.	2026-03-22 23:58:14 -06:00
Aiden McClelland	25aa140174	fix: backup status reporting	2026-03-22 23:55:26 -06:00
Matt Hill	7ffb462355	better smtp and backups for postgres and mysql	2026-03-22 19:49:58 -06:00
Aiden McClelland	6ed0afc75f	chore: bump sdk to 0.4.0-beta.63	2026-03-22 14:13:28 -06:00
Aiden McClelland	cb7618cb34	fix: e2fsck exit codes 1-3 are non-fatal during btrfs conversion e2fsck returns 1 when errors are corrected and 2 when corrections require a reboot. These are expected during ext4→btrfs conversion. Only exit codes >= 4 indicate actual failure. Previously, .invoke() treated any non-zero exit as an error, causing the conversion to fail after successful filesystem repairs.	2026-03-21 18:20:55 -06:00
Aiden McClelland	456c5d6725	fix: graceful shutdown for subcontainer daemons Two issues fixed: 1. Process group cascade: exec-command processes inherited the container runtime's process group. When an entrypoint script did kill(0, SIGTERM) during shutdown, it signaled ALL processes in the group — including other subcontainers' launch wrappers, causing their PID namespaces to collapse. Fixed by calling setsid() in exec-command's pre_exec to isolate each service in its own process group. 2. Unordered daemon termination: removeChild("main") fired onLeaveContext callbacks for all Daemon.of() instances simultaneously, bypassing Daemons.term()'s reverse-dependency ordering. Fixed by having Daemons.build() mark individual daemons as managed (suppressing their onLeaveContext) and registering a single onLeaveContext that calls the ordered Daemons.term(). The term() method is deduplicated so system.stop() and onLeaveContext share the same shutdown.	2026-03-21 18:20:50 -06:00
Matt Hill	bdfa918a33	a bunch of UI cleanup around backups as well as other bug fixes and UII improvements	2026-03-21 16:32:46 -06:00
Aiden McClelland	8b65490d0e	feat: add progress step for btrfs conversion during setup/init	2026-03-20 19:32:41 -06:00
Aiden McClelland	c9a93f0a33	fix: rsync progress regex never matched, spamming logs during backup The regex used `$` (end-of-string anchor) instead of no anchor, so it never matched the percentage in rsync output. Every line, including empty ones, was logged instead of parsed.	2026-03-20 17:13:35 -06:00
Aiden McClelland	f5bfbe0465	Revert "fix: RunAction task re-evaluation compared against partial input, not full config" also apply alternative fix: only re-activate a task that explicitly conflicts with a run action's input This reverts commit `2999d22d2a`.	2026-03-20 16:35:09 -06:00
Aiden McClelland	8bccffcb5c	feat: add --arch flag to `start-cli registry package download` Use the new flag in the image build recipe to download the tor s9pk for the target architecture, replacing the standalone download script.	2026-03-20 15:28:45 -06:00
Aiden McClelland	9ff65497a8	fix: replace fire-and-forget restart loop in Daemon with tracked AbortController - Track the restart loop as an awaitable { abort, done } handle - Remove shouldBeRunning flag — signal.aborted serves the same purpose - Remove exiting field — term() awaits command termination inline - Guard start() on loop existence to prevent concurrent restart loops - Make backoff sleep abortable so term() returns immediately - Suppress error logging during intentional termination - Loop clears its own handle in finally block for natural exit (oneshot)	2026-03-20 14:31:46 -06:00
Aiden McClelland	7335e52ab3	fix: daemon lifecycle cleanup and error logging improvements - Refactor HealthDaemon to use a tracked session (AbortController + awaitable promise) instead of fire-and-forget health check loops, preventing health checks from running after a service is stopped - Stop health checks before terminating daemon to avoid false crash reports during intentional shutdown - Guard onExit callbacks with AbortSignal to prevent stale session callbacks - Add logErrorOnce utility to deduplicate repeated error logging - Fix SystemForEmbassy.stop() to capture clean promise before deleting ref - Treat SIGTERM (signal 15) as successful exit in subcontainer sync - Fix asError to return original Error instead of wrapping in new Error - Remove unused ExtendedVersion import from Backups.ts	2026-03-20 13:50:57 -06:00
Aiden McClelland	b54f10af55	fix: rsync backup bugs and optimize flags for encrypted CIFS targets - Fix restoreBackup using backupOptions instead of restoreOptions - Add missing await on preRestore/postRestore hooks - Remove -c (checksum) flag that forced full reads on every run - Add --partial to keep partially transferred files on interruption - Add --inplace to avoid temp-file+rename metadata churn - Add --timeout=300 to prevent hangs on stalled mounts	2026-03-20 11:56:53 -06:00
Matt Hill	0549c7c0ef	fix build	2026-03-20 08:50:54 -06:00
Matt Hill	2a8d8c7154	alpha.22	2026-03-20 08:37:36 -06:00
Matt Hill	03d7d5f123	Merge branch 'fix/wifi' of github.com:Start9Labs/start-os into fix/wifi	2026-03-20 08:23:14 -06:00
Matt Hill	2fd674eca8	bump tor	2026-03-20 08:23:12 -06:00
waterplea	0e9c90f2c0	chore: fix icons in marketplace	2026-03-20 11:16:45 +04:00
Matt Hill	bca2e4d630	feat: add restart button to start-tunnel settings page Adds a VPS restart button to the settings page, above logout. Shows a spinner while the RPC completes, then a dialog telling the user to wait 1-2 minutes and refresh. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-19 23:27:21 -06:00
Alex Inkin	f41fc75024	chore: make service icons not round and add wifi lock badge (#3139 ) * chore: make service icons not round and add wifi lock badge * chore: comments	2026-03-19 18:18:25 -06:00
Matt Hill	56cb3861bc	fix build	2026-03-19 18:00:22 -06:00
Matt Hill	2999d22d2a	fix: RunAction task re-evaluation compared against partial input, not full config Bug: After running an action (e.g. bitcoin's autoconfig), update_tasks was called with the submitted form input — which for task-triggered actions is filtered to only the task's fields (e.g. {zmqEnabled: true}). Other services' tasks targeting the same action were then compared against this partial via is_partial_of, so any task wanting a field NOT in the submission (e.g. {blocknotify: "curl..."}) would incorrectly become active, even though the full config still satisfied it. This caused a cycling bug: running LND's autoconfig (zmqEnabled) would activate Datum's task (blocknotify), and vice versa, despite the merge correctly preserving both values in the config. Fix: After running an action, fetch the full current config via get_action_input (same as create_task and recheck_tasks already do) and compare tasks against that. The one-liner fix would have been to add a get_action_input call in the RunAction handler. Instead, we extracted eval_action_tasks on ServiceActorSeed — a single method that both RunAction and recheck_tasks now call — because the duplication between these two sites is exactly how this bug happened: recheck_tasks fetched the full config, RunAction didn't, and they silently diverged. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-19 14:43:08 -06:00
Matt Hill	bb745c43cc	fix: createTask with undefined input values fails to create task Bug: Setting a task input property to undefined (e.g. { prune: undefined }) to express "this key should be deleted" resulted in no task being created. JSON.stringify strips undefined values, so { prune: undefined } serialized as {}, and is_partial_of({}, any_config) always returns true — meaning input-not-matches saw a "match" and never activated the task. Fix (two parts): - SDK: coerce undefined to null in task input values before serialization, so they survive JSON.stringify and reach the Rust backend - Rust: treat null in a partial as matching a missing key in the full config, so tasks correctly deactivate when the key is already absent Assumption: null and undefined/absent are semantically equivalent for StartOS config values. Input specs produce concrete values (strings, numbers, booleans, objects, arrays) — null never appears as a meaningful distinct-from-absent value in real-world configs. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-19 14:28:04 -06:00
Matt Hill	de9a7e4189	fix types	2026-03-19 13:38:40 -06:00
Matt Hill	8fbcf44dec	fix	2026-03-19 11:54:28 -06:00
Matt Hill	97b3b548c0	fix type	2026-03-19 11:42:43 -06:00
Matt Hill	6c72a22178	SDK beta.62: fix dynamicSelect crash on empty values, add smtpShape - Guard z.union() against empty arrays in dynamicSelect/dynamicMultiselect by falling back to z.string() (fixes zod v4 _zod TypeError) - Add smtpShape: typed zod schema for store file models, replacing smtpInputSpec.validator which caused cross-zod-instance errors - Bump version to 0.4.0-beta.62 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-19 11:30:37 -06:00
Aiden McClelland	d7c394ef33	chore: update generated TS bindings	2026-03-19 01:07:45 -06:00
Aiden McClelland	96dcd126db	feat: support restoring backups from a different server	2026-03-19 01:07:37 -06:00
Aiden McClelland	e4b0f56fa7	fix: use tmpfs and lazy unmounts in chroot-and-upgrade	2026-03-19 01:07:23 -06:00
Aiden McClelland	3ef99eca87	fix: allow private access to vhost targets on public gateways	2026-03-19 00:41:48 -06:00
Aiden McClelland	f64c543747	fix: add sudo to prune scripts and truncate b3sum in update-squashfs	2026-03-19 00:13:33 -06:00
Aiden McClelland	292a914307	fix: use shared futures for ACME cert acquisition with 2m timeout	2026-03-19 00:06:34 -06:00
Aiden McClelland	9a58568053	fix: send TLS alerts on handshake timeout and unrecognized SNI	2026-03-19 00:06:25 -06:00
Aiden McClelland	34e01d4223	fix: increase RPC connect timeout from 30s to 60s	2026-03-18 23:49:44 -06:00
Aiden McClelland	427c38f23b	feat: add tunnel restart command	2026-03-18 23:49:29 -06:00
Aiden McClelland	d669aa9afb	fix: retry BLKRRPART on busy device during OS install	2026-03-18 23:48:49 -06:00
Aiden McClelland	bcdeabfe85	fix: clap CLI definitions and manpage generation - add #[group(skip)] to all Parser-derived structs - fix conflicts_with and arg definitions for correct CLI behavior - refactor bin entry points to support manpage generation	2026-03-18 23:48:13 -06:00
Aiden McClelland	b1b7d2fa70	feat: add xml file helper to SDK	2026-03-18 23:47:17 -06:00
Aiden McClelland	476b10c413	chore: update dependencies and build scripts	2026-03-18 23:47:05 -06:00
Matt Hill	6e56682c11	better wifi ux	2026-03-18 16:52:47 -06:00
Aiden McClelland	9ed6c1263c	fix: derive wifi interface dynamically from gateway info instead of detecting at startup Remove static wifi_interface/ethernet_interface fields from RpcContextSeed. Instead, look up the wifi interface from the DB (populated by gateway sync) and check ethernet connectivity by querying gateway entries. This ensures the wifi manager always uses the correct interface even if network devices change after boot.	2026-03-18 16:01:41 -06:00
Matt Hill	5cf70dc8f5	fix staging docs ref	2026-03-18 15:57:08 -06:00
Matt Hill	1358937fa9	fix private domain dns ip and hide private domaains for wg gateways	2026-03-18 15:55:56 -06:00
Matt Hill	0e9d4f5d53	better wifi page	2026-03-18 14:16:18 -06:00
Matt Hill	59550d6f5e	dont hide header if table members	2026-03-18 13:52:20 -06:00