Oracle ACFS is the preferred file manager for non-database files, which can be visualized as a layer on Oracle ASM and is configured with Oracle ASM storage. It is optimized for general purpose files.Oracle ACFS should not contain file types that can be directly stored in Oracle ASM. Doing that could violate oracle recommended best practices and even void support coverage.
Here are the basic commands list for ACFS.
root@oda1 /root #acfsutil -h
Usage: acfsutil [-h] command ... # (Version 12.1.0.2.0)
-h - help
Command Subcmd Arguments
--------------- --------- ------------------------------------------------------
help [command] - display this message
version - display ACFS version information
version -v - display in verbose format
info fs - Display all ACFS file systems
info fs [
info fs -o
info fs -o freespace, totalspace,
info fs -o mountpoints, volumes,
info fs -o available, ismountpoint,
info fs -o isavailable, iscorrupt,
info fs -o isadvm, diskgroup,
info fs -o redundancy, resizeincrement,
info fs -o stripewidth, stripecolumns,
info fs -o primaryvolume, replication,
info fs -o isreplprimary, isreplstandby,
info fs -o fetasize,
info fs -o autoresize, autoresizeincrement,
info fs -o autoresizemax
info fs [-s [-d] [
info fs [-s [
info fs Display ACFS file system statistics
info fs - [-s] Display ACFS file system statistics
info fs - [-d] Modify -s to display detailed
info fs statistical information
info fs [[-f [-v]] [
info fs - [-f] Display ACFS file
info fs system fragmentation
info fs - [-v] Modify -f to display
info fs more information
info file [-d] [-o
info file Display specific file info
info file - [-d] Display ADVM extent information
info file - [-o
info file an ACFS extent offset
info id
info id Display the pathname associated with the given
info id ACFS file identifier and mountpoint.
tag set [-r] [-v]
tag set on file
tag set - [-r] recursively traverse
tag set directories
tag set - [-v] verbose output
tag unset [-r] [-v] {all |
tag unset tag name on file. "all"
tag unset unsets all tag names on
tag unset the selected file
tag unset - [-r] recursively traverse
tag unset directories
tag unset - [-v] verbose output
tag info [-r] [[-c] -t
tag info tag names
tag info - [-r] recursively traverse
tag info directories
tag info - [-c] modifies -t permitting
tag info case-insensitive partial
tag info tag name matching
tag info - [-t] search for tag name in
tag info path names
tag info [[-c] -t
tag info all file systems when no
tag info paths given
rmfs
rmfs [-b] - No user interaction (batch mode)
size [[-|+]nnn[K|M|G|T|P]] [-a nnn[K|M|G|T|P]] [-x nnn[K|M|G|T|P]] [-d
size - Resize file system and configure auto-resize
size [-a] - Auto-resize increment
size [-x] - Auto-resize maximum
size [-d] - Resize only this device
registry - Display, add, modify or delete ACFS Registry entries.
registry With no options, displays all file systems configured for
registry automatic start in a human-readable format.
registry [-l |-l
registry - Display registry information
registry -l - Display all file systems configured for automatic start
registry in line format
registry -l
registry -l
registry -m
registry -r - Display all registered file systems
registry -a [-f] [-o
registry - Add a mount point to the registry
registry -c {
registry - Change a device or a mount point in the ACFS Registry
registry -d {
registry - Delete a device or a mount point from the ACFS Registry
log -f [filename] - Get memory log [default: oks.log]
log -s - Show log file size
log -r nnn[K|M|G|T|P] - Set log file size
log -p avd|ofs|oks - Product for setting or querying settings
log -l debuglevel - Set the in-memory debug level
log -n consolelevel - Set the persistent/console debug level
log -c debugcontext - Set the debug context
log -T file_type - Set the debug file type (ACFS only)
log -m
log -a - Reset debug logging to all file systems
log -q - Query debug settings for a product
log -C - Get log on all cluster nodes
tune AcfsMaxOpenFiles - Maximum number of open files
tune (Windows only)
snap create [-w|-r] [-p parent_snap_name]
snap create [-w] - create a writeable snapshot
snap create [-r] - create a read-only snapshot
snap create This is the default behavior
snap create [-p parent_snap_name] - create a snapshot from a snapshot
snap delete
snap convert -w|-r
snap convert -w - convert to a writeable snapshot
snap convert -r - convert to a read-only snapshot
snap info [-t] [
snap info - get information about snapshots
snap info [-t] - display family tree starting at next name given
snap info [
snap info
repl init primary | standby - which site
repl init -p primary_connect_string - standby only, primary connect
repl init string
repl init -s standby_connect_string - primary only, standby connect
repl init string
repl init [tagname . . . ] - primary only, tags to be
repl init replicated
repl init [-m mountpoint] - primary only, optional standby
repl init mount point
repl init [-c service name] - optional service name for the
repl init local site
repl init [-d {0..6} ] - set trace level for debugging
repl init [-z {on|off}] - primary only, rlog compression
repl init mountpoint - mount point for replication
repl terminate primary | standby - which site
repl terminate [immediate] - standby only, terminate
repl terminate immediately
repl terminate mountpoint - mount point for replication
repl pause mountpoint - mount point to pause
repl pause replication on
repl resume mountpoint - mount point to
repl resume resume replication on
repl info
repl info info -c [-v] mountpoint - configuration information or
repl info info -s [-v][-l] [-n
repl info [-r
repl info {-f
repl info info [-e|a|t] [-v][-l] [-r
repl info {-f
repl info -v - verbose output
repl info -l - display only last event
repl info -e - display only error events
repl info -a - display only apply events
repl info -t - display only transport events
repl info -n
repl info -r start_time#stop_time - yyyy-nn-ddThh:mm:ss
repl info yyyy - Year.
repl info nn - Month. (01..12)
repl info dd - Day. (01..31)
repl info hh - Hour. (00..23)
repl info mm - Minute. (00..59)
repl info ss - Second. (00..59)
repl info -f
repl info event log or
repl info replication mount point
repl sync [apply] - return when all is applied
repl sync mountpoint - mount point on primary
repl update -p primary_connect_string | -s standby_connect_string
repl update [-z {on|off}] - primary only, rlog compression
repl update mountpoint - mount point on primary
repl bg start | stop | info
repl bg mountpoint - replication mount point
repl trace
repl trace mountpoint - replication mount point
repl compare [-a [-s] [-v]] | [-t {ALL |
repl compare - Compares all directories and
repl compare files in the primary mount
repl compare point against those in the
repl compare standby mount point. Verifies
repl compare no extra files exist on the
repl compare standby.
repl compare -a - Enables tag name and extended
repl compare attribute name checking on the
repl compare default comparison method.
repl compare -t {ALL |
repl compare any of the specified tag names
repl compare in the primary mount point and
repl compare compare only these files
repl compare to the standby mount point.
repl compare Only tag names specified during
repl compare the acfsutil repl init
repl compare operation or "ALL" are
repl compare allowed. Also compares
repl compare these file''s tag and extended
repl compare attribute names.
repl compare All directories are compared
repl compare regardless of tags.
repl compare -s - Skips extended attribute and/or
repl compare tag name comparisons on
repl compare symlinks.
repl compare -v - Verbose output.
repl compare
repl compare replication.
repl compare
repl compare replication. The standby
repl compare mount point must be mounted
repl compare locally using a networked file
repl compare system on the primary node.
sec realm create
sec realm create -e {on -a {AES} -k {128|192|256} | off}
sec realm create [-o {enable|disable}]
sec realm create [-d "
sec realm create - Create a realm
sec realm create -
sec realm create - [-m
sec realm create - [-e
sec realm create - [-a {AES}] encryption algorithm
sec realm create - [-k {128|192|256}] encryption key length
sec realm create - [-o {enable|disable}] realm status,
sec realm create default realm status is enable
sec realm create - [-d "
sec realm clone
sec realm clone {[
sec realm clone [-u][-G][-l][-e][-f]
sec realm clone - Clone a realm
sec realm clone -
sec realm clone cloned
sec realm clone - [-s
sec realm clone point
sec realm clone -
sec realm clone - [-d
sec realm clone mount point
sec realm clone - [-u] copy users
sec realm clone - [-G] copy groups
sec realm clone - [-l] copy filters
sec realm clone - [-e] copy realm encryption parameters
sec realm clone - [-f] copy objects
sec realm destroy
sec realm destroy - Destroy a realm
sec realm destroy -
sec realm destroy - [-m
sec realm add
sec realm add {[-u
sec realm add [-l
sec realm add [-e -a {AES} -k {128|192|256}]
sec realm add [-f [-r]
sec realm add - Add objects to realm
sec realm add -
sec realm add - [-m
sec realm add - [-u
sec realm add - [-G
sec realm add - [-l
sec realm add add filter(s)
sec realm add -
sec realm add -
sec realm add - [-e] turn on encryption
sec realm add - [-a {AES}] encryption algorithm
sec realm add - [-k {128|192|256}] encryption key length
sec realm add - [-f] add file object(s)
sec realm add - [-r] recursively add file object(s)
sec realm add -
sec realm add file object name(s)
sec realm delete
sec realm delete {[-u
sec realm delete [-l
sec realm delete [-e][-f [-r]
sec realm delete - Delete objects from realm
sec realm delete -
sec realm delete - [-m
sec realm delete - [-u
sec realm delete - [-G
sec realm delete - [-l
sec realm delete delete filter(s)
sec realm delete -
sec realm delete -
sec realm delete - [-e] turn off encryption
sec realm delete - [-f] delete file object(s)
sec realm delete - [-r] recursively delete file object(s)
sec realm delete -
sec realm delete file object name(s)
sec realm audit enable
sec realm audit enable [-l commandrule[,...,commandrule]]
sec realm audit enable [-a] [-v[-u]]
sec realm audit info -m
sec realm audit disable
sec realm audit disable [-l commandrule[,...,commandrule]]
sec realm audit disable [-a] [-v[-u]]
sec ruleset create
sec ruleset create [-o {ALL_TRUE|ANY_TRUE}]
sec ruleset create - Create a rule set
sec ruleset create -
sec ruleset create - [-m
sec ruleset create - [-o {ALL_TRUE|ANY_TRUE}] rule set option
sec ruleset create ALL_TRUE = all rules evaluate
sec ruleset create to TRUE
sec ruleset create ANY_TRUE = any one rule evaluates
sec ruleset create to TRUE
sec ruleset create default rule set option is ALL_TRUE
sec ruleset clone
sec ruleset clone {[
sec ruleset clone - Clone a rule set
sec ruleset clone -
sec ruleset clone to be cloned
sec ruleset clone - [-s
sec ruleset clone point
sec ruleset clone - [
sec ruleset clone - [-d
sec ruleset clone mount point
sec ruleset destroy
sec ruleset destroy - Destroy a rule set
sec ruleset destroy -
sec ruleset destroy - [-m
sec ruleset edit
sec ruleset edit {[-a
sec ruleset edit [-o {ALL_TRUE|ANY_TRUE}]}
sec ruleset edit - Update a rule set
sec ruleset edit -
sec ruleset edit - [-m
sec ruleset edit - [-a
sec ruleset edit - [-d
sec ruleset edit - [-o {ALL_TRUE|ANY_TRUE}] rule set option
sec ruleset edit ALL_TRUE = all rules evaluate
sec ruleset edit to TRUE
sec ruleset edit ANY_TRUE = any one rule evaluates
sec ruleset edit to TRUE
sec rule create
sec rule create -t
sec rule create [-o {ALLOW|DENY}]
sec rule create - Create a rule
sec rule create -
sec rule create - [-m
sec rule create - [-t
sec rule create username, time, hostname, or application
sec rule create -
sec rule create - [-o {ALLOW|DENY}] rule option
sec rule create ALLOW = allow operation if rule
sec rule create evaluates to TRUE
sec rule create DENY = deny operation if rule
sec rule create evaluates to TRUE
sec rule create default rule option is DENY
sec rule clone
sec rule clone {[
sec rule clone - Clone a rule
sec rule clone -
sec rule clone cloned
sec rule clone - [-s
sec rule clone point
sec rule clone -
sec rule clone - [-d
sec rule clone mount point
sec rule edit
sec rule edit {[-t
sec rule edit [-o {ALLOW|DENY}]}
sec rule edit - Edit a rule
sec rule edit -
sec rule edit - [-m
sec rule edit - [-t
sec rule edit username, time, hostname, or application
sec rule edit -
sec rule edit - [-o {ALLOW|DENY}] rule option
sec rule edit ALLOW = allow operation if rule
sec rule edit evaluates to TRUE
sec rule edit DENY = deny operation if rule
sec rule edit evaluates to TRUE
sec rule destroy
sec rule destroy - Destroy a rule
sec rule destroy -
sec rule destroy - [-m
sec info -m
sec info [{[-n [
sec info [-s [
sec info - Display ACFS Security information
sec info - [-m
sec info - [-S
sec info - [-n] list all realms
sec info - [-n
sec info a realm
sec info - [-l] list all rules
sec info - [-l
sec info a rule
sec info - [-s] list all rule sets
sec info - [-s
sec info a rule set
sec info - [-c] list all command rules
sec info file -m
sec info file [-r]
sec info file - List the realms that the specified file
sec info file or directory belongs to
sec info file - [-m
sec info file - [-r] recursively print information
sec info file -
sec info file object name
sec batch
sec batch - Execute 'acfsutil sec' commands in batch
sec batch -
sec init -u
sec init - Initialize security
sec init - [-u
sec init security administrator
sec init - [-g
sec init administrator group
sec admin add
sec admin add - Add new ACFS Security administrator
sec admin add -
sec admin add administrator name
sec admin remove
sec admin remove - Remove ACFS Security administrator
sec admin remove -
sec admin remove security administrator name
sec admin password - Change security administrator password
sec admin password of current user
sec admin info - List all ACFS Security administrators
sec enable -m
sec enable [-S
sec enable - Enable ACFS Security
sec enable - [-m
sec enable - [-S
sec enable -
sec enable security feature on. When no realm name
sec enable is specified, security will be enabled
sec enable on the mount point.
sec disable -m
sec disable [-S
sec disable - Disable ACFS Security
sec disable - [-m
sec disable - [-S
sec disable -
sec disable disable security feature. When no realm
sec disable name is specified, security will be
sec disable disabled on all realms in the
sec disable mount point.
sec prepare -m
sec prepare - Prepare filesystem for ACFS Security
sec prepare feature
sec prepare - [-m
sec prepare - [-u] undo ACFS Security prepare
sec save -m
sec save - Save ACFS Security meta data
sec save - [-m
sec save - [-p
sec save ACFS Security meta data
sec load -m
sec load - Load ACFS Security meta data
sec load - [-m
sec load - [-p
sec load Security meta data file to be loaded
encr init [-p]
encr init - Create storage for encryption keys
encr init - [-p] create password-protected wallet,
encr init if not specified creates a
encr init non-password-protected wallet
encr set -m
encr set - Set volume encryption parameters
encr set - [-m
encr set - [-a {AES}] encryption algorithm
encr set - [-k {128|192|256}] encryption key length
encr set default key length is 192
encr set - [-u] undo ACFS Encryption set
encr set - [-e] store keys in external keystore
encr rekey -m
encr rekey {-v | -f [-r]
encr rekey - Generate a new encryption key
encr rekey - [-m
encr rekey - [-a {AES}] encryption algorithm
encr rekey - [-k {128|192|256}] encryption key length
encr rekey default algorithm and key length are
encr rekey parameters set on volume
encr rekey - [-v] generate Volume Encryption Key
encr rekey - [-f] generate File Encryption Key
encr rekey - [-r] recursively rekey
encr rekey -
encr info -m
encr info [[-r]
encr info - Display encryption-related information
encr info - [-m
encr info - [-r] recursively print information
encr info -
encr on -m
encr on [-r]
encr on - Enable encryption
encr on - [-m
encr on - [-a {AES}] encryption algorithm
encr on - [-k {128|192|256}] encryption key length
encr on default algorithm and key length are
encr on parameters set on volume
encr on - [-r] recursively enable
encr on -
encr off -m
encr off [[-r]
encr off - Disable encryption
encr off - [-m
encr off - [-r] recursively disable
encr off -
keystore migrate [-p] - Migrate keystore from PKCS to SSO or vice versa
audit init -M
audit init
audit enable -m
audit enable
audit disable -m
audit disable
audit info -m
audit info
audit archive -m
audit archive - Archive the audit trail
audit archive - [-m
audit read -m
audit read - Mark audit trail archive as read
audit read - [-m
audit purge -m
audit purge - Delete the audit trail archive
audit purge - [-m
audit purge - [-f] forceful deletion of audit trail archive
plugin enable -m
plugin enable - Enable plug-in metrics collection
plugin enable -m
plugin enable [-t tagname,...] - Tags for which to collect metrics
plugin enable [-i
plugin disable
plugin info
root@oda1 /root #
No comments:
Post a Comment