v4.1.0Home

Operator runbooks

Operator runbooks by category: daily ops, system change ops, break/fix, Flatpak remediation, and Kit trust remediation.

Daily operations

bash
fur doctor --json
fur list   --json
fur upgrade --json
fur logs --web

Run doctor first, then list to inventory, then upgrade if the doctor is green. logs --web is the on-call dashboard.

System change operations

bash
fur system doctor --json
fur install --system <pkg> --json
sudo fur system rebuild switch --json

Always re-run system doctor before a host-wide change. The rebuild itself is transactional — if it fails, the previous module is restored automatically.

Break / fix

bash
fur system doctor   --json
sudo fur system repair   --json
sudo fur system rollback --json

doctor tells you which subsystem is unhealthy. repair rewrites the canonical managed-marker layout when markers are damaged. rollback is the always-safe escape hatch.

Flatpak remediation

bash
fur flatpak remote list
fur flatpak remote set-default flathub
fur flatpak install <ref> --remote flathub --json

Kit trust remediation

bash
export FOXORA_KIT_TRUST_POLICY=signature-required
export FOXORA_KIT_PIN_POLICY=require-pinned
fur install @foxora/<kit> --json

Sudo policy

Mutating system commands need privileged access. If sudo is locked down, system doctor reports the policy gap with a remediation hint.