Aarkam - SAT (Storage Substrate) Fleet & Storage AM CLI • ARK-CLI-0303

Storage Fleet, Nodes & Volumes Reference

Authoritative command reference for am node (Zero-Trust Enrollment, Fencing, Draining), am volume (Physical Mounts), and am placement (HRW Simulation).

Last updated: Nov 03, 2026 Classification: Sovereign Tier-4 Enterprise

---
title: "Storage Fleet, Nodes & Volumes Reference"
description: "Authoritative command reference for am node (Zero-Trust Enrollment, Fencing, Draining), am volume (Physical Mounts), and am placement (HRW Simulation)."
category: "AM CLI"
order: 3
badge: "Fleet & Storage"
icon: "database"
documentId: "ARK-CLI-0303"
status: "Production Standard"
classification: "Sovereign Tier-4 Enterprise"
version: "V-1.0.0-GA (Production Stable)"
readingTime: "5 min read"
audience: "Storage SREs, Systems Administrators & Datacenter Technicians"
scope: "Aarkam Standalone (SAT) & Storage Centers (SCT)"
tier: "Aarkam - SAT (Storage Substrate)"
---

<div class="wiki-spec-card">
  <div class="wiki-spec-grid">
    <div class="wiki-spec-item">
      <span class="wiki-spec-label">Document Identifier</span>
      <span class="wiki-spec-value text-[#10B981]">ARK-CLI-0303</span>
    </div>
    <div class="wiki-spec-item">
      <span class="wiki-spec-label">Standard Status</span>
      <div><span class="status-pill status-normative">Production Standard</span></div>
    </div>
    <div class="wiki-spec-item">
      <span class="wiki-spec-label">Architecture Tier</span>
      <span class="wiki-spec-value text-amber-300">Aarkam - SAT (Storage Substrate)</span>
    </div>
    <div class="wiki-spec-item">
      <span class="wiki-spec-label">Release Version</span>
      <span class="wiki-spec-value text-cyan-300">V-1.0.0-GA (Production Stable)</span>
    </div>
  </div>
</div>

<div class="wiki-alert wiki-alert-note my-4 p-4 rounded-xl border border-emerald-500/20 bg-emerald-500/5 text-xs text-slate-300">
  <strong class="text-emerald-400 block mb-1">Architecture Tier Scope: Aarkam - SAT (Standalone Tier)</strong>
  These commands manage physical storage node hosts running the <strong>Abodi daemon</strong> and NVMe volumes formatted for <strong>Kdouja 66,048-byte sector alignment</strong>. They enforce zero-trust cryptographic enrollment (NCA ECC-2:2024), hot-swap disk draining, and Highest Random Weight (HRW) rendezvous placement.
</div>

<p>This reference details the full command set for managing storage node lifecycles, cryptographic node onboarding, drive failure isolation (fencing/quarantine), volume mount points, and placement ring simulations.</p>

<hr />

<h2 id="am-node">1. <code>am node</code> — Storage Fleet Lifecycle &amp; Maintenance</h2>

<h3 id="node-list">1.1 List Storage Fleet (<code>am node list</code>)</h3>
<p>Lists all registered storage nodes, IP addresses, states, hardware tiers, used capacity percentage, and free space:</p>
<div class="wiki-code-block relative group my-3 rounded-xl border border-slate-800 bg-[#060a14] overflow-hidden">
  <div class="code-header flex items-center justify-between px-3 py-1.5 bg-slate-900/90 border-b border-slate-800 text-[10px] font-mono text-slate-400">
    <span class="uppercase font-bold text-emerald-400">bash</span>
    <button type="button" onclick="copyCodeSnippet(this)" class="hover:text-white px-2 py-0.5 rounded bg-slate-800 border border-slate-700 transition cursor-pointer print:hidden">Copy</button>
  </div>
  <pre class="p-3.5 overflow-x-auto text-xs font-mono text-slate-200 leading-relaxed m-0"><code class="language-bash"># List all online storage nodes sorted by available space
am node list --state Online --sort-by space

# Output raw JSON payload for automated health alerting
am node list --format json | jq '.[] | select(.usedPercentage > 85)'</code></pre>
</div>

<h3 id="node-inspect">1.2 Deep Node Inspection (<code>am node inspect</code>)</h3>
<p>Displays hardware specifications, mounted volume paths, and real-time Abodi telemetry (temperature, latency, flash wear):</p>
<div class="wiki-code-block relative group my-3 rounded-xl border border-slate-800 bg-[#060a14] overflow-hidden">
  <div class="code-header flex items-center justify-between px-3 py-1.5 bg-slate-900/90 border-b border-slate-800 text-[10px] font-mono text-slate-400">
    <span class="uppercase font-bold text-emerald-400">bash</span>
    <button type="button" onclick="copyCodeSnippet(this)" class="hover:text-white px-2 py-0.5 rounded bg-slate-800 border border-slate-700 transition cursor-pointer print:hidden">Copy</button>
  </div>
  <pre class="p-3.5 overflow-x-auto text-xs font-mono text-slate-200 leading-relaxed m-0"><code class="language-bash">am node inspect storage-01 --abodi</code></pre>
</div>

<h3 id="node-quarantine-drain">1.3 Isolation &amp; Hot-Swap Draining</h3>
<p>Safely fence erratic nodes from write operations or gracefully evacuate chunks prior to drive maintenance:</p>
<div class="wiki-code-block relative group my-3 rounded-xl border border-slate-800 bg-[#060a14] overflow-hidden">
  <div class="code-header flex items-center justify-between px-3 py-1.5 bg-slate-900/90 border-b border-slate-800 text-[10px] font-mono text-slate-400">
    <span class="uppercase font-bold text-emerald-400">bash</span>
    <button type="button" onclick="copyCodeSnippet(this)" class="hover:text-white px-2 py-0.5 rounded bg-slate-800 border border-slate-700 transition cursor-pointer print:hidden">Copy</button>
  </div>
  <pre class="p-3.5 overflow-x-auto text-xs font-mono text-slate-200 leading-relaxed m-0"><code class="language-bash"># Fence erratic node (read-only for existing chunks, blocked from new writes)
am node quarantine storage-02 --reason "Drive read latency elevated above 200ms"

# Gracefully drain all chunks to healthy peers (throttled at 60 MB/s)
am node drain storage-02 --rate 60

# Clear quarantine and rejoin rehabilitated node to active hash ring
am node rejoin storage-02</code></pre>
</div>

<hr />

<h2 id="zero-trust-enrollment">2. Zero-Trust Cryptographic Node Enrollment</h2>
<p>Compliant with <strong>Saudi NCA ECC-2:2024 §2-2</strong> zero-trust onboarding, nodes cannot join the cluster without cryptographically bound enrollment tokens:</p>

<h3 id="token-create">2.1 Generate Node Enrollment Token (<code>am node token create</code>)</h3>
<div class="wiki-code-block relative group my-3 rounded-xl border border-slate-800 bg-[#060a14] overflow-hidden">
  <div class="code-header flex items-center justify-between px-3 py-1.5 bg-slate-900/90 border-b border-slate-800 text-[10px] font-mono text-slate-400">
    <span class="uppercase font-bold text-emerald-400">bash</span>
    <button type="button" onclick="copyCodeSnippet(this)" class="hover:text-white px-2 py-0.5 rounded bg-slate-800 border border-slate-700 transition cursor-pointer print:hidden">Copy</button>
  </div>
  <pre class="p-3.5 overflow-x-auto text-xs font-mono text-slate-200 leading-relaxed m-0"><code class="language-bash"># Mint single-use token valid for 15 minutes bound to node-prod-042
am node token create \
  --node-id "node-prod-042" \
  --role "storage-node" \
  --ttl 15 \
  --coordinator "https://rokka-coordinator.rokka.internal:57774"</code></pre>
</div>

<h3 id="csr-approval">2.2 Review and Approve Pending CSRs</h3>
<div class="wiki-code-block relative group my-3 rounded-xl border border-slate-800 bg-[#060a14] overflow-hidden">
  <div class="code-header flex items-center justify-between px-3 py-1.5 bg-slate-900/90 border-b border-slate-800 text-[10px] font-mono text-slate-400">
    <span class="uppercase font-bold text-emerald-400">bash</span>
    <button type="button" onclick="copyCodeSnippet(this)" class="hover:text-white px-2 py-0.5 rounded bg-slate-800 border border-slate-700 transition cursor-pointer print:hidden">Copy</button>
  </div>
  <pre class="p-3.5 overflow-x-auto text-xs font-mono text-slate-200 leading-relaxed m-0"><code class="language-bash"># List pending Certificate Signing Requests (CSRs)
am node list-pending

# Sign and issue cluster mTLS identity certificate
am node approve enr_2b6521570e534f64a8b65a75994eeb9f

# Emergency node revocation (broadcasts revocation across Raft consensus)
am node revoke storage-compromised-03 --reason "Hardware tamper detection triggered"</code></pre>
</div>

<hr />

<h2 id="am-volume">3. <code>am volume</code> — Physical Disk Mounts &amp; Direct I/O</h2>
<p>Inspects mounted storage partitions and raw block devices hosting Kdouja PageStore segments:</p>

<div class="wiki-code-block relative group my-3 rounded-xl border border-slate-800 bg-[#060a14] overflow-hidden">
  <div class="code-header flex items-center justify-between px-3 py-1.5 bg-slate-900/90 border-b border-slate-800 text-[10px] font-mono text-slate-400">
    <span class="uppercase font-bold text-emerald-400">bash</span>
    <button type="button" onclick="copyCodeSnippet(this)" class="hover:text-white px-2 py-0.5 rounded bg-slate-800 border border-slate-700 transition cursor-pointer print:hidden">Copy</button>
  </div>
  <pre class="p-3.5 overflow-x-auto text-xs font-mono text-slate-200 leading-relaxed m-0"><code class="language-bash"># List mounted volumes across all storage hosts
am volume list

# Inspect volume 1 on storage-01 (mount path, Kdouja WAL segment directory)
am volume inspect storage-01 1</code></pre>
</div>

<hr />

<h2 id="am-placement">4. <code>am placement</code> — HRW Hash Ring &amp; Domain Simulation</h2>
<p>Evaluates Highest Random Weight (HRW) rendezvous distribution across racks and failure domains:</p>

<div class="wiki-code-block relative group my-3 rounded-xl border border-slate-800 bg-[#060a14] overflow-hidden">
  <div class="code-header flex items-center justify-between px-3 py-1.5 bg-slate-900/90 border-b border-slate-800 text-[10px] font-mono text-slate-400">
    <span class="uppercase font-bold text-emerald-400">bash</span>
    <button type="button" onclick="copyCodeSnippet(this)" class="hover:text-white px-2 py-0.5 rounded bg-slate-800 border border-slate-700 transition cursor-pointer print:hidden">Copy</button>
  </div>
  <pre class="p-3.5 overflow-x-auto text-xs font-mono text-slate-200 leading-relaxed m-0"><code class="language-bash"># Simulate HRW distribution for 1,000,000 keys across active topology
am placement simulate --keys 1000000

# Test placement target nodes for a specific object key
am placement test "backups/2026/db-dump.tar.gz"</code></pre>
</div>

Document Identifier ARK-CLI-0303

Standard Status

Production Standard

Architecture Tier Aarkam - SAT (Storage Substrate)

Release Version V-1.0.0-GA (Production Stable)

Architecture Tier Scope: Aarkam - SAT (Standalone Tier) These commands manage physical storage node hosts running the Abodi daemon and NVMe volumes formatted for Kdouja 66,048-byte sector alignment. They enforce zero-trust cryptographic enrollment (NCA ECC-2:2024), hot-swap disk draining, and Highest Random Weight (HRW) rendezvous placement.

This reference details the full command set for managing storage node lifecycles, cryptographic node onboarding, drive failure isolation (fencing/quarantine), volume mount points, and placement ring simulations.

1. `am node` — Storage Fleet Lifecycle & Maintenance

1.1 List Storage Fleet (`am node list`)

Lists all registered storage nodes, IP addresses, states, hardware tiers, used capacity percentage, and free space:

bash

# List all online storage nodes sorted by available space
am node list --state Online --sort-by space

# Output raw JSON payload for automated health alerting
am node list --format json | jq '.[] | select(.usedPercentage > 85)'

1.2 Deep Node Inspection (`am node inspect`)

Displays hardware specifications, mounted volume paths, and real-time Abodi telemetry (temperature, latency, flash wear):

bash

am node inspect storage-01 --abodi

1.3 Isolation & Hot-Swap Draining

Safely fence erratic nodes from write operations or gracefully evacuate chunks prior to drive maintenance:

bash

# Fence erratic node (read-only for existing chunks, blocked from new writes)
am node quarantine storage-02 --reason "Drive read latency elevated above 200ms"

# Gracefully drain all chunks to healthy peers (throttled at 60 MB/s)
am node drain storage-02 --rate 60

# Clear quarantine and rejoin rehabilitated node to active hash ring
am node rejoin storage-02

2. Zero-Trust Cryptographic Node Enrollment

Compliant with Saudi NCA ECC-2:2024 §2-2 zero-trust onboarding, nodes cannot join the cluster without cryptographically bound enrollment tokens:

2.1 Generate Node Enrollment Token (`am node token create`)

bash

# Mint single-use token valid for 15 minutes bound to node-prod-042
am node token create \
  --node-id "node-prod-042" \
  --role "storage-node" \
  --ttl 15 \
  --coordinator "https://rokka-coordinator.rokka.internal:57774"

2.2 Review and Approve Pending CSRs

bash

# List pending Certificate Signing Requests (CSRs)
am node list-pending

# Sign and issue cluster mTLS identity certificate
am node approve enr_2b6521570e534f64a8b65a75994eeb9f

# Emergency node revocation (broadcasts revocation across Raft consensus)
am node revoke storage-compromised-03 --reason "Hardware tamper detection triggered"

3. `am volume` — Physical Disk Mounts & Direct I/O

Inspects mounted storage partitions and raw block devices hosting Kdouja PageStore segments:

bash

# List mounted volumes across all storage hosts
am volume list

# Inspect volume 1 on storage-01 (mount path, Kdouja WAL segment directory)
am volume inspect storage-01 1

4. `am placement` — HRW Hash Ring & Domain Simulation

Evaluates Highest Random Weight (HRW) rendezvous distribution across racks and failure domains:

bash

# Simulate HRW distribution for 1,000,000 keys across active topology
am placement simulate --keys 1000000

# Test placement target nodes for a specific object key
am placement test "backups/2026/db-dump.tar.gz"

← Previous Article

Cluster, Quorum & Fabric Network Commands

S3 Storage, Buckets & Cryptographic Tenancy Reference

Storage Fleet, Nodes & Volumes Reference

1. am node — Storage Fleet Lifecycle & Maintenance

1.1 List Storage Fleet (am node list)

1.2 Deep Node Inspection (am node inspect)

1.3 Isolation & Hot-Swap Draining

2. Zero-Trust Cryptographic Node Enrollment

2.1 Generate Node Enrollment Token (am node token create)

2.2 Review and Approve Pending CSRs

3. am volume — Physical Disk Mounts & Direct I/O

4. am placement — HRW Hash Ring & Domain Simulation

1. `am node` — Storage Fleet Lifecycle & Maintenance

1.1 List Storage Fleet (`am node list`)

1.2 Deep Node Inspection (`am node inspect`)

2.1 Generate Node Enrollment Token (`am node token create`)

3. `am volume` — Physical Disk Mounts & Direct I/O

4. `am placement` — HRW Hash Ring & Domain Simulation