> For the complete documentation index, see [llms.txt](https://docs.linuxguard.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.linuxguard.io/reference.md).

# Reference

- [Reference](https://docs.linuxguard.io/reference/reference.md): Cross-cutting reference lookups for LinuxGuard — agent commands, supported distributions, and the v4.0 glossary.
- [Agent Commands](https://docs.linuxguard.io/reference/reference/agent-commands.md): Reference for the linuxguard-agent command-line interface — start, stop, status, show-config, enroll, and unenroll commands.
- [CLI Reference](https://docs.linuxguard.io/reference/reference/cli.md): Per-command reference for the linuxguard-agent CLI — start, config, probe, and additional commands shipping in subsequent phases.
- [start](https://docs.linuxguard.io/reference/reference/cli/start.md): Reference for linuxguard-agent start — typical service mode and ephemeral mode flags, environment variables, signals, and exit codes.
- [config](https://docs.linuxguard.io/reference/reference/cli/config.md): Reference for linuxguard-agent config — set, get, unset, and list-keys subcommands for runtime configuration without restarting the agent.
- [probe](https://docs.linuxguard.io/reference/reference/cli/probe.md): Reference for linuxguard-agent probe — host capability check covering kernel, BPF, fanotify, netlink, audit, and Linux capabilities.
- [support-bundle](https://docs.linuxguard.io/reference/reference/cli/support-bundle.md): Reference for linuxguard-agent support-bundle — collect a redacted diagnostic archive locally or upload an existing bundle via a presigned S3 URL.
- [enroll](https://docs.linuxguard.io/reference/reference/cli/enroll.md): Reference for linuxguard-agent enroll — bind a host to a tenant using a long-lived API key, with environment / tag assignment and mTLS certificate provisioning.
- [unenroll](https://docs.linuxguard.io/reference/reference/cli/unenroll.md): Reference for linuxguard-agent unenroll — remove the host from its tenant binding so the agent can be enrolled into a different tenant.
- [show-config](https://docs.linuxguard.io/reference/reference/cli/show-config.md): Reference for linuxguard-agent show-config — print the entire current configuration as indented JSON for inspection or debugging.
- [status](https://docs.linuxguard.io/reference/reference/cli/status.md): Reference for linuxguard-agent status — check whether the agent process is running, by inspecting the PID file and verifying the process is alive.
- [version](https://docs.linuxguard.io/reference/reference/cli/version.md): Reference for linuxguard-agent --version and the build-time metadata (version string, git commit, build timestamp) the agent reports.
- [signals](https://docs.linuxguard.io/reference/reference/cli/signals.md): Signal-handling reference for the linuxguard-agent start process — SIGHUP (log-level reload + log rotation), SIGTERM (143), SIGINT (130), and the re-raise convention.
- [env-variables](https://docs.linuxguard.io/reference/reference/cli/env-variables.md): Environment-variable reference for linuxguard-agent — LINUXGUARD\_ENROLL\_TOKEN, LINUXGUARD\_NODE\_NAME, LINUXGUARD\_POD\_UID, and related variables used by the start command.
- [exit-codes](https://docs.linuxguard.io/reference/reference/cli/exit-codes.md): Exit-code reference for linuxguard-agent — universal codes (0/1/2), signal-induced 128+N codes (130 SIGINT, 143 SIGTERM), and per-command divergences.
- [Supported Distributions](https://docs.linuxguard.io/reference/reference/supported-distributions.md): Per-architecture capability matrix and per-distribution support matrix for the LinuxGuard agent — Debian, RedHat, SUSE, Alpine across amd64, arm64, armv7, and riscv64.
- [Glossary](https://docs.linuxguard.io/reference/reference/glossary.md): Glossary of LinuxGuard terminology — agent, console, eBPF, enrollment, modules, compliance frameworks, and related security concepts.