Commands

Commands

XAIOS provides a bounded FreeBSD-style command surface for authenticated local and SSH PTY sessions. This page lists session syntax and service or kernel operations. Every dedicated executable, including file, text, archive, and observability utilities, is listed in Applications.

Current ownership

Current owner	Commands or responsibility	Fault boundary
Kernel session layer	cd, pwd, help, exit, quit, logout, aliases, redirection, and pipelines	Maintains per-session state and command composition.
Independent utility ELFs	File, text, archive, and observability tools documented in [[Applications	Applications]]
/bin/sshd plus transient /bin/ssh	Inbound SSH/SFTP transport plus dedicated outbound ssh and scp protocol execution	The client uses asynchronous child-channel IPC; a client fault is contained without terminating the inbound service.
Kernel operations layer	status, power, service, process, network, clock, recovery, update, configuration, and support commands	Capability checks and privileged mechanisms remain authoritative in the kernel.

Session navigation and composition

Command	Supported core behavior
pwd	Print the session working directory.
cd [DIR]	Change directory; no argument selects /; relative, absolute, . and .. paths are normalized.
l, la, ll	Session aliases that dispatch the standalone /bin/ls application.
echo [TEXT...]	Print text. > and >> redirect output to a file.
`COMMAND	COMMAND`
status	Render the bounded administrative status view; detailed operations use the xaiosctl application family.

Outbound network clients

Command	Supported core behavior
ssh [-A] [-i KEY] [-p PORT] user@host [command]	Dedicated SSH application with password, Ed25519 identity-file or forwarded-agent authentication; encrypted OpenSSH keys, IPv4/IPv6 and DNS A/AAAA are supported.
scp [-r] [-A] [-i KEY] [-P PORT] SOURCE DESTINATION	Dedicated SFTP-backed copy application for files or bounded directory trees between XAIOS and compatible XAIOS, FreeBSD, or OpenSSH servers. Exactly one endpoint may be remote.

The clients run outside the persistent SSH service through bounded asynchronous child-channel IPC, so a client fault does not terminate the inbound server. The inbound server implements hybrid mlkem768x25519-sha256, direct-tcpip jump-host forwarding and agent forwarding. A native outbound -J or ProxyCommand option parser and the complete OpenSSH algorithm matrix are not implemented.

Operations and diagnostics

Command	Supported core behavior
shutdown / reboot	Persist lifecycle intent, flush logs and block devices, then power off or reset through the architecture backend.
power status	Show running/quiescing and boot-ready state.
`service list	status
kill PID	Terminate and reclaim a non-running transient process; PID 1/2 and the current process are protected.
ifconfig	Show the active VirtIO interface, IPv4 address, netmask, MTU, and MAC.
route, arp, ndp, netstat	Show bounded routing, neighbor, packet, flow, drop, and resolver state.
ping IP, ping status	Start a validated asynchronous ICMP echo and inspect its result/RTT.
nslookup NAME	Start or read an asynchronous DNS A-record lookup.
date, date -s EPOCH	Show epoch/source or set a validated UTC epoch in seconds.
ntp sync [IP], ntp status	Start a bounded SNTP exchange or inspect source, attempts, stratum, RTT, timeout, and error state.
limits	Show normal/warning/critical pressure plus memory, heap, process, filesystem, and CPU capacity.
`recovery status	enter
`update status	rollback`
`config export	import PATH`
support	Emit a redacted build/lifecycle/clock/resource/network/log bundle suitable for host-side capture.

Power, lifecycle, and recovery details are in Operations and Recovery.

Session control and errors

help prints the available surface. exit, quit, and logout end the session. Unknown commands return command not found; invalid options, missing paths, unsupported archive features, authentication failures, and application exit failures return a nonzero status with command-specific text. Per-session working directories are isolated across concurrent SSH connections.

All executable utilities, diagnostics, and interactive terminal applications are intentionally documented on Applications, not duplicated here. Interoperability coverage is in Testing XAIOS.