oz0 egress

Sandboxed processes reach the network only through the node's egress proxy, which allows the hosts the tenant, the plugin and the agent list.

For: Operators and developers looking up a command.

Sandboxed processes reach the network only through the node's egress proxy, which allows the hosts the tenant, the plugin and the agent list. oz0 tenant egress shows and sets the tenant's list; egress learn turns what a run was refused into a proposed change.

Usage

oz0 egress [command]

Subcommands

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

Copyright © 2026