https://github.com/major/fez
Agent-native management CLI for Fedora/RHEL (drives cockpit-bridge)
https://github.com/major/fez
Last synced: about 16 hours ago
JSON representation
Agent-native management CLI for Fedora/RHEL (drives cockpit-bridge)
- Host: GitHub
- URL: https://github.com/major/fez
- Owner: major
- License: apache-2.0
- Created: 2026-06-10T00:20:29.000Z (3 days ago)
- Default Branch: main
- Last Pushed: 2026-06-10T02:27:25.000Z (3 days ago)
- Last Synced: 2026-06-10T03:08:47.768Z (3 days ago)
- Language: Rust
- Size: 135 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- License: LICENSE
- Agents: AGENTS.md
Awesome Lists containing this project
README
# fez
An agent-native management CLI for Fedora/RHEL. `fez` gives LLM-driven agents a
uniform, structured, discoverable way to operate a host (and, over SSH, a fleet)
by reusing Cockpit's existing system plumbing instead of scraping dozens of
human-oriented CLIs.
`fez` drives `cockpit-bridge` over its framed JSON protocol: it spawns the
bridge, opens channels (`dbus-json3`, `stream`, privileged `superuser`), and
delegates privilege escalation to the bridge. Remote hosts are reached by
shelling out to the system OpenSSH client.
## Install
```bash
sudo dnf install fez
```
Requires `cockpit-bridge` (the substrate) and `openssh-clients` (remote
transport); both are pulled in automatically.
## Usage
```bash
# Discover capabilities on demand (the git model: nothing preloaded).
fez capabilities
fez describe services.status --json
# Read-only (no elevation).
fez services list --state failed
fez services status sshd.service --json
fez services logs sshd.service --lines 100 --json
# Mutations (privileged, guarded by the safety layer).
fez services restart chronyd.service --dry-run
fez services restart chronyd.service
# Target a remote host (ssh_config aliases work).
fez --host web1 services status nginx.service --json
# Run as an MCP server (JSON-RPC 2.0 over stdio) for MCP-aware agents.
fez mcp
# Also expose strict per-capability MCP tools, such as services_status.
fez mcp --expanded-tools
```
Every command supports `--json` (the `fez/v1` envelope), `--host` (localhost by
default), and layered `--help`.
## License
Apache-2.0