Config Hub CLI

Config Hub ships the administrator-facing command line tool linxira-config. It manages SSH, mirrors, network, security posture, and read-only catalog queries. General software management is owned by Shelly, and curated app setup by Package Center / Component Manager on top of the linxira-components transaction backend.

Command overview

linxira-config <command> [action] [options]

  mirror <type>        Package mirror management (Arch/npm/pip/AUR/Go/Flatpak)
  source               Show package sources
  service <svc> <act>  Service management (ssh/vnc)
  security <action>    Security hardening & firewall
  ssh <action>         SSH server & key management
  rdp <action>         Remote desktop status
  virt <action>        Virtualization status
  power <action>       Power status
  catalog <kind>       Query software/component/bundle state
  runtime <action>     Runtime & package-manager status
  conda channels <act> Miniforge channel configuration
  gpu <action>         GPU driver management
  net <action>         Network diagnostics
  info / status        System information & quick status
  help                 Show help

SSH management

Config Hub provides full SSH server and key management. See the Remote Access guide for a step-by-step tutorial on turning your machine into a server.

linxira-config ssh status                       # service state & connection info
linxira-config ssh key generate [name]          # generate an Ed25519 key pair
linxira-config ssh key list                     # list public keys
linxira-config ssh key show [name]              # show a public key
linxira-config ssh key fingerprint [name]       # show a key fingerprint
linxira-config ssh key remove <name> --yes      # remove one key pair
linxira-config ssh authorized list              # list authorized keys
linxira-config ssh authorized add <pubkey>      # authorize one plain public key
linxira-config ssh authorized remove <fp> --yes # remove by SHA256 fingerprint

📌 ssh on / off / port are implemented but gated behind the pending transactional backend; use sudo systemctl enable --now sshd today. ssh key and ssh authorized commands work now. Keys are Ed25519, symlinked SSH paths are refused, and authorized add only accepts plain keys without options.

Mirror management

Manage sources for Arch, npm, PyPI, AUR, Go modules and Flatpak remotes:

linxira-config mirror arch list         # list Arch mirror candidates
linxira-config mirror npm set taobao    # select a user-scoped npm source
linxira-config mirror pip set tuna      # select a PyPI source
linxira-config mirror aur set https://... # set a validated custom AUR mirror
linxira-config mirror go set goproxy.cn # configure the Go module proxy
linxira-config mirror flatpak set flathub # explicit Flatpak remote (opt-in)
linxira-config mirror <type> reset      # restore the official source
linxira-config mirror <type> speed [id] # measure source latency

User-scoped sources are applied per-user (npm config, pip config, go env -w). Arch and Flatpak set/reset are disabled pending the transactional backend. Conda is limited to Miniforge with reviewed channels conda-forge and bioconda only.

Catalog queries (read-only)

Query the reviewed catalog state. Commands accept catalog IDs, never package names:

linxira-config catalog software --all
linxira-config catalog component --status partial
linxira-config catalog bundle show kde-plasma
linxira-config catalog software show firefox

By default only installed, partial, external, pending, drifted, and reboot-required states are shown; --all adds not-installed.

Network & security

linxira-config net diag              # full network diagnostics
linxira-config net dns               # show current DNS servers
linxira-config security status       # firewall & SSH posture
linxira-config runtime status        # runtime and package-manager status

Questions, bugs and feature requests go to the linxira-config-hub repository.