Skip to content

Configuration Operations

DRP endpoint configuration is managed through a combination of preferences, global profile parameters, and system-level settings. As an administrator, you will use these controls to tune endpoint behavior, networking, authentication secrets, and feature flags — typically right after install and again when onboarding new workloads.

Preferences

Preferences are key-value string pairs that control endpoint-level runtime behavior. They are applied immediately and persist across restarts. List and set them with:

Bash
# List all current preferences
drpcli prefs list

# Set one or more preferences
drpcli prefs set defaultBootEnv sledgehammer unknownBootEnv ignore

Common preferences include defaultBootEnv (the boot environment assigned to newly discovered machines), unknownBootEnv (the boot environment used for machines not yet in inventory), baseTokenSecret and systemGrantorSecret (rotate these to invalidate all outstanding tokens), and logLevel (controls log verbosity for subsystems including plugins, dhcp, and tftp).

Changing baseTokenSecret or systemGrantorSecret forces all plugins to restart and invalidates cached authentication tokens — use these rotations deliberately.

Global Profile Parameters

The global profile (global) holds parameters that apply to every machine on the endpoint unless overridden by a machine-specific or profile-specific parameter. Set global parameters to provide default values for things like DNS servers, NTP servers, and proxy settings:

Bash
# Set a global parameter
drpcli profiles set global param dns/nameservers to '["8.8.8.8", "8.8.4.4"]'

# Get a global parameter
drpcli profiles get global param dns/nameservers

# Remove a global parameter
drpcli profiles del global param dns/nameservers

The global profile is a regular DRP Profile object with the reserved name global. It participates in the standard parameter layering system — machine parameters take precedence over profile parameters, which take precedence over global parameters.

System Information and License

The /system/info API endpoint returns the endpoint's DRP version, endpoint ID, and license status. Use this to verify the installed license and available features:

Bash
drpcli info get

The /system/license endpoint returns detailed license counts and feature flags. See License Operations for license management procedures.

Certificates and TLS

DRP serves its API over HTTPS. The endpoint certificate can be replaced with a custom certificate signed by your internal CA. See the certificate configuration page for step-by-step instructions on replacing the default self-signed certificate.

Applying Configuration at Scale

For multi-endpoint deployments managed by a DRP Manager, configuration is typically distributed through Version Sets and content packs rather than by directly editing preferences on each endpoint. See Version Sets for details on the Version Set workflow.