Usage of /usr/bin/trillian-ctserver:
-add_dir_header
If true, adds the file directory to the header of the log messages
-align_getentries
Enable get-entries request alignment (default true)
-alsologtostderr
log to standard error as well as files (no effect when -logtostderr=true)
-alsologtostderrthreshold value
logs at or above this threshold go to stderr when -alsologtostderr=true (no effect when -logtostderr=true)
-cache_size int
Size parameter set to 0 makes cache of unlimited size (default -1)
-cache_ttl duration
Providing 0 TTL turns expiring off (default -1s)
-cache_type string
Supported cache type: noop, lru (Default: noop) (default "noop")
-etcd_http_service string
Service name to announce our HTTP endpoint under (default "trillian-ctfe-http")
-etcd_metrics_service string
Service name to announce our HTTP metrics endpoint under (default "trillian-ctfe-metrics-http")
-etcd_servers string
A comma-separated list of etcd servers
-get_sth_interval duration
Interval between internal get-sth operations (0 to disable) (default 3m0s)
-getentries_metrics
Export get-entries distribution metrics
-handler_prefix string
If set e.g. to '/logs' will prefix all handlers that don't define a custom prefix
-http_endpoint string
Endpoint for HTTP (host:port) (default "localhost:6962")
-http_idle_timeout duration
Timeout after which idle connections will be closed by server (default -1s)
-legacy_stderr_threshold_behavior
If true, stderrthreshold is ignored when logtostderr=true (legacy behavior). If false, stderrthreshold is honored even when logtostderr=true (default true)
-log_backtrace_at value
when logging hits line file:N, emit a stack trace
-log_config string
File holding log config in text proto format
-log_dir string
If non-empty, write log files in this directory (no effect when -logtostderr=true)
-log_file string
If non-empty, use this log file (no effect when -logtostderr=true)
-log_file_max_size uint
Defines the maximum size a log file can grow to (no effect when -logtostderr=true). Unit is megabytes. If the value is 0, the maximum file size is unlimited. (default 1800)
-log_rpc_server string
Backend specification; comma-separated list or etcd service name (if --etcd_servers specified). If unset backends are specified in config (as a LogMultiConfig proto)
-logtostderr
log to standard error instead of files (default true)
-mask_internal_errors
Don't return error strings with Internal Server Error HTTP responses
-max_cert_chain_size int
Maximum size of certificate chain in bytes for add-chain and add-pre-chain endpoints (default: 512000 bytes = 500KB) (default 512000)
-max_get_entries int
Max number of entries we allow in a get-entries request (0=>use default 1000)
-metrics_endpoint string
Endpoint for serving metrics; if left empty, metrics will be visible on --http_endpoint
-non_fresh_submission_age duration
Maximum age of a fresh submission (default 24h0m0s)
-non_fresh_submission_burst int
Maximum burst size when rate-limiting non-fresh submissions (default 1)
-non_fresh_submission_limit string
Maximum rate at which non-fresh submissions will be accepted (e.g., "30/1s"; or "" to disable)
-one_output
If true, only write logs to their native severity level (vs also writing to each lower severity level; no effect when -logtostderr=true)
-pkcs11_module_path string
Path to the PKCS#11 module to use for keys that use the PKCS#11 interface
-quota_intermediate
Enable requesting of quota for intermediate certificates in submitted chains (default true)
-quota_remote
Enable requesting of quota for IP address sending incoming requests (default true)
-rpc_deadline duration
Deadline for backend RPC requests (default 10s)
-skip_headers
If true, avoid header prefixes in the log messages
-skip_log_headers
If true, avoid headers when opening log files (no effect when -logtostderr=true)
-stderrthreshold value
logs at or above this threshold go to stderr when writing to files and stderr (no effect when -logtostderr=true or -alsologtostderr=true unless -legacy_stderr_threshold_behavior=false) (default 2)
-tls_certificate string
Path to server TLS certificate
-tls_key string
Path to server TLS private key
-tracing
If true opencensus Stackdriver tracing will be enabled. See https://opencensus.io/.
-tracing_percent int
Percent of requests to be traced. Zero is a special case to use the DefaultSampler
-tracing_project_id string
project ID to pass to stackdriver. Can be empty for GCP, consult docs for other platforms.
-trillian_tls_ca_cert_file string
CA certificate file to use for secure connections with Trillian server
-v value
number for the log level verbosity
-vmodule value
comma-separated list of pattern=N settings for file-filtered logging
Options (46)
| Option | Description | Source |
|---|---|---|
-add_dir_header | If true, adds the file directory to the header of the log messages | help |
-align_getentries | Enable get-entries request alignment (default true) | help |
-alsologtostderr | log to standard error as well as files (no effect when -logtostderr=true) | help |
-alsologtostderrthreshold value | logs at or above this threshold go to stderr when -alsologtostderr=true (no effect when -logtostderr=true) | help |
-cache_size int | Size parameter set to 0 makes cache of unlimited size (default -1) | help |
-cache_ttl duration | Providing 0 TTL turns expiring off (default -1s) | help |
-cache_type string | Supported cache type: noop, lru (Default: noop) (default "noop") | help |
-etcd_http_service string | Service name to announce our HTTP endpoint under (default "trillian-ctfe-http") | help |
-etcd_metrics_service string | Service name to announce our HTTP metrics endpoint under (default "trillian-ctfe-metrics-http") | help |
-etcd_servers string | A comma-separated list of etcd servers | help |
-get_sth_interval duration | Interval between internal get-sth operations (0 to disable) (default 3m0s) | help |
-getentries_metrics | Export get-entries distribution metrics | help |
-handler_prefix string | If set e.g. to '/logs' will prefix all handlers that don't define a custom prefix | help |
-http_endpoint string | Endpoint for HTTP (host:port) (default "localhost:6962") | help |
-http_idle_timeout duration | Timeout after which idle connections will be closed by server (default -1s) | help |
-legacy_stderr_threshold_behavior | If true, stderrthreshold is ignored when logtostderr=true (legacy behavior). | help |
-log_backtrace_at value | when logging hits line file:N, emit a stack trace | help |
-log_config string | File holding log config in text proto format | help |
-log_dir string | If non-empty, write log files in this directory (no effect when -logtostderr=true) | help |
-log_file string | If non-empty, use this log file (no effect when -logtostderr=true) | help |
-log_file_max_size uint | Defines the maximum size a log file can grow to (no effect when -logtostderr=true). | help |
-log_rpc_server string | Backend specification; | help |
-logtostderr | log to standard error instead of files (default true) | help |
-mask_internal_errors | Don't return error strings with Internal Server Error HTTP responses | help |
-max_cert_chain_size int | Maximum size of certificate chain in bytes for add-chain and add-pre-chain endpoints (default: 512000 bytes = 500KB) (default 512000) | help |
-max_get_entries int | Max number of entries we allow in a get-entries request (0=>use default 1000) | help |
-metrics_endpoint string | Endpoint for serving metrics; | help |
-non_fresh_submission_age duration | Maximum age of a fresh submission (default 24h0m0s) | help |
-non_fresh_submission_burst int | Maximum burst size when rate-limiting non-fresh submissions (default 1) | help |
-non_fresh_submission_limit string | Maximum rate at which non-fresh submissions will be accepted (e.g., "30/1s"; | help |
-one_output | If true, only write logs to their native severity level (vs also writing to each lower severity level; | help |
-pkcs11_module_path string | Path to the PKCS#11 module to use for keys that use the PKCS#11 interface | help |
-quota_intermediate | Enable requesting of quota for intermediate certificates in submitted chains (default true) | help |
-quota_remote | Enable requesting of quota for IP address sending incoming requests (default true) | help |
-rpc_deadline duration | Deadline for backend RPC requests (default 10s) | help |
-skip_headers | If true, avoid header prefixes in the log messages | help |
-skip_log_headers | If true, avoid headers when opening log files (no effect when -logtostderr=true) | help |
-stderrthreshold value | logs at or above this threshold go to stderr when writing to files and stderr (no effect when -logtostderr=true or -alsologtostderr=true unless -legacy_stderr_threshold_behavior=false) (default 2) | help |
-tls_certificate string | Path to server TLS certificate | help |
-tls_key string | Path to server TLS private key | help |
-tracing | If true opencensus Stackdriver tracing will be enabled. | help |
-tracing_percent int | Percent of requests to be traced. | help |
-tracing_project_id string | project ID to pass to stackdriver. | help |
-trillian_tls_ca_cert_file string | CA certificate file to use for secure connections with Trillian server | help |
-v value | number for the log level verbosity | help |
-vmodule value | comma-separated list of pattern=N settings for file-filtered logging | help |