Flags & environment
The full reference for global flags and environment variables that change fur's behaviour.
Global flags
--json— structured output where supported. Suppresses human-oriented step/warn/ok output.--dry-run— preview path only; should not mutate state intentionally.--quiet— suppress branded UI output.--system— operate in system scope (where applicable).--from <backend>— pin the install backend.--purge— on remove, also drop config.
Path overrides
FOXORA_SYSTEM_MODULE_PATH— managed module path.FOXORA_SYSTEM_FLAKE— system flake reference.
Kit trust + pin
FOXORA_KIT_TRUST_PATHFOXORA_KIT_TRUST_POLICY—permissive | signature-requiredFOXORA_KIT_STRICT_VERIFY—true | falseFOXORA_KIT_PIN_POLICY—permissive | require-pinnedFOXORA_KIT_ALLOW_ATTESTATION_UPDATE—1only for controlled migrationsFOXORA_KIT_AUTO_ACCEPT—true | false(CI only)
Flatpak
FOXORA_FLATPAK_REMOTE— default remote selection.
MCP
FOXORA_MCP_COMMAND— explicit backend binary.- Fallback resolution order:
foxora-mcp, thenmcp.
Exit codes
Non-zero always indicates command failure or unsupported conditions. Specific codes are stable per action family — see the JSON envelope for typed error categories.
Managed marker block
Fur's system package block is bracketed by # >>> fur managed system packages >>> and # <<< fur managed system packages <<<. Don't edit between the markers by hand — use fur install --system or fur system repair.