Hook tools

Units deployed with Juju have a suite of tooling available to them, called ‘hook tools’. These commands provide the charm developer with a consistent interface to take action on the units behalf, such as opening ports, obtaining configuration, even determining which unit is the leader in a cluster. The listed hook-tools are available in any hook running on the unit, and are only available within ‘hook context’.

Additionally, the payload-status-set, payload-register and payload-unregister commands, also listed below, can be used to manage your charm's payloads. Please see payloads in Charm metadata for further details on how to use payloads within your charms.

Many of the tools produce text based output, and those that do accept a --format flag which can be set to json or yaml as desired.

Note: You can view a detailed listing of what each command listed below does on your client with juju help-tool {command}. Or for more detailed help on individual commands run the command with the -h flag.


action-fail sets the action's fail state with a given error message. Using action-fail without a failure message will set a default message indicating a problem with the action. For more information about where you might use this command, read more about Juju Actions or how to write Juju Actions.


from charmhelpers.core.hookenv import action_fail

action_fail(Unable to contact remote service)


action-fail ‘unable to contact remote service’


action-get will print the value of the parameter at the given key, serialized as YAML. If multiple keys are passed, action-get will recurse into the param map as needed. Read more about Juju Actions or how to write Juju Actions.


from charmhelpers.core.hookenv import action_get

timeout = action_get(timeout)


TIMEOUT=$(action-get timeout)


action-set adds the given values to the results map of the Action. This map is returned to the user after the completion of the Action. Keys must start and end with lowercase alphanumeric, and contain only lowercase alphanumeric, hyphens and periods.


from charmhelpers.core.hookenv import action_set

action_set('com.juju.result', 'we are the champions')


action-set com.juju.result 'we are the champions'


Records a measurement which will be forwarded to the Juju controller. The same metric may not be collected twice in the same command.


add-metric metric1=value1 [metric2=value2 …]

In Juju 2.0, add-metric may only be executed from the collect-metrics hook. Future releases of Juju may allow it in other contexts.


Specify which version of the application is deployed.


from charmhelpers.core.hookenv import application_version_set

def update_application_version():


@hook 'update-status'
function update_status() {
    application-version-set 1.1.10


close-port ensures a port or range is not accessible from the public interface.


from charmhelpers.core.hookenv import close_port

# Close a single port
close_port(80, protocol="UDP")


# Close single port
close-port 80
# Close a range of ports
close-port 9000-9999/udp


Import-Module CharmHelpers
# Close a single port
Close-JujuPort "80/TCP"
# Close a range of ports
Close-JujuPort "1000-2000/UDP"


config-get returns information about the application configuration (as defined by config.yaml). If called without arguments, it returns a dictionary containing all config settings that are either explicitly set, or which have a non-nil default value. If the --all flag is passed, it returns a dictionary containing all defined config settings including nil values (for those without defaults). If called with a single argument, it returns the value of that config key. Missing config keys are reported as nulls, and do not return an error.


from charmhelpers.core.hookenv import config

# Get all the configuration from charmhelpers as a dictionary.
cfg =config()
# Get the value for the "interval" key.
interval = cfg.get(interval)


INTERVAL=$(config-get interval)

config-get --all


Import-Module CharmHelpers
$interval = Get-JujuCharmConfig "interval"


goal-state queries information about charm deployment. It will print only YAML or JSON output (default YAML).

The information is:

  • What other peer units have been deployed and their status
  • What remote (related) units exist on the other end of each endpoint, and their status

The output will be a subset of that produced by the juju status. There will be output for sibling (peer) units and relation state per unit.

The unit status values are the workload status of the (sibling) peer units. We also use a unit status value of dying when the unit's life becomes dying. Thus unit status is one of:


The relation status values are determined per unit and depend on whether the unit has entered or left scope. The possible values are:

joining : relation created but unit not yet entered scope
joined : unit has entered scope and relation is active
broken : unit has left, or is preparing to leave scope
suspended : parent cross model relation is suspended

By reporting error state, the charm has a chance to determine that goal state may not be reached due to some external cause. As with status, we will report the time since the status changed to allow the charm to empirically guess that a peer may have become stuck if it has not yet reached active state.


is-leader will write "True" or "False" to stdout, and return 0, if the unit is currently leader and can be guaranteed to remain so for 30 seconds. Output can be expressed as --format json or --format yaml if desired.


from charmhelpers.core.hookenv import is_leader

if is_leader():
    # Do something a leader would do


if [ "${LEADER}" == "True" ]; then
  # Do something a leader would do


Import-Module CharmHelpers
if (Is-Leader) {
    # Do something a leader would do


juju-log writes messages directly to the unit's log file. Valid levels are: INFO, WARN, ERROR, DEBUG


from charmhelpers.core.hookenv import log

log('Something has transpired', 'INFO')


juju-log -l 'WARN' Something has transpired


Import-Module CharmHelpers
# Basic logging
Write-JujuLog "Something has transpired"
# Logs the message and throws an error, stopping the script
Write-JujuError "Something has transpired. Throwing an error..."


juju-reboot causes the host machine to reboot, after stopping all containers hosted on the machine.

An invocation without arguments will allow the current hook to complete, and will only cause a reboot if the hook completes successfully.

If the --now flag is passed, the current hook will terminate immediately, and be restarted from scratch after reboot. This allows charm authors to write hooks that need to reboot more than once in the course of installing software.

The --now flag cannot terminate a debug-hooks session; hooks using --now should be sure to terminate on unexpected errors, so as to guarantee expected behavior in all situations.

juju-reboot is not supported when running actions.


from subprocess import check_call

check_call(["juju-reboot", "--now"])


# immediately reboot
juju-reboot --now

# Reboot after current hook exits


Import-Module CharmHelpers
# immediately reboot
ExitFrom-JujuHook -WithReboot


leader-get prints the value of a leadership setting specified by key. leader-get acts much like relation-set) but only reads from the leader settings. If no key is given, or if the key is "-", all keys and values will be printed.


from charmhelpers.core.hookenv import leader_get

address = leader_get('cluster-leader-address')


ADDRESSS=$(leader-get cluster-leader-address)


Import-Module CharmHelpers
$clusterLeaderAddress = Get-LeaderData "cluster-leader-address"


leader-set immediately writes the key/value pairs to the Juju controller, which will then inform non-leader units of the change. It will fail if called without arguments, or if called by a unit that is not currently application leader.

leader-set lets you write string key=value pairs, but with the following differences:

  • there's only one leader-settings bucket per application (not one per unit)
  • only the leader can write to the bucket
  • only minions are informed of changes to the bucket
  • changes are propagated instantly

The instant propagation may be surprising, but it exists to satisfy the use case where shared data can be chosen by the leader at the very beginning of the install hook.

It is strongly recommended that leader settings are always written as a self-consistent group leader-set one=one two=two three=three.


from charmhelpers.core.hookenv import leader_set

leader_set('cluster-leader-address', "")


leader-set cluster-leader-address=


Import-Module CharmHelpers
Set-LeaderData @{"cluster-leader-address"=""}


network-get discovers important network related information.

By default it lists three pieces of address information:

  • binding address(es)
  • ingress address(es)
  • egress subnets

Flags may be used to request only a specific address value.

See Network primitives for in-depth coverage.


open-port registers a port or range to open on the public-interface. On public clouds the port will only be open while the application is exposed. It accepts a single port or range of ports with an optional protocol, which may be icmp, udp, or tcp, with tcp being the default.

open-port will not have any effect if the application is not exposed, and may have a somewhat delayed effect even if it is. This operation is transactional, so changes will not be made unless the hook exits successfully.


from charmhelpers.core.hookenv import open_port

open_port(80, protocol='TCP')


open-port 80/tcp

open-port 1234/udp

# Open a range of ports
open-port 1000-2000/udp


opened-ports lists all ports or ranges opened by the unit. The opened-ports hook tool lists all the ports currently opened by the running charm. It does not, at the moment, include ports which may be opened by other charms co-hosted on the same machine lp#1427770.

Note: Opening ports is transactional (i.e. will take place on successfully exiting the current hook), and therefore opened-ports will not return any values for pending open-port operations run from within the same hook.


from subprocess import check_output

range = check_output(["opened-ports"])




payload-status-set is used to update the current status of a registered payload. The class and id provided must match a payload that has been previously registered with juju using payload-register. The status must be one of the following:

  • starting
  • started
  • stopping
  • stopped


from charmhelpers.core.hookenv import payload_status_set

payload_status_set('monitor', '0fcgaba', 'stopping')


payload-status-set monitor abcd13asa32c starting


payload-register used while a hook is running to let Juju know that a payload has been started. The information used to start the payload must be provided when "register" is run.

The payload class must correspond to one of the payloads defined in the charm's metadata.yaml.


        type: docker
        type: kvm


from charmhelpers.core.hookenv import payload_register

payload_register('monitoring', 'docker', '0fcgaba')


payload-register monitoring docker 0fcgaba


payload-unregister used while a hook is running to let Juju know that a payload has been manually stopped. The class and id provided must match a payload that has been previously registered with Juju using payload-register.


from charmhelpers.core.hookenv import payload_unregister

payload_unregister('monitoring', '0fcgaba')


payload-unregister monitoring 0fcgaba


relation-get reads the settings of the local unit, or of any remote unit, in a given relation (set with -r, defaulting to the current relation identifier, as in relation-set). The first argument specifies the settings key, and the second the remote unit, which may be omitted if a default is available (that is, when running a relation hook other than -relation-broken).

If the first argument is omitted, a dictionary of all current keys and values will be printed; all values are always plain strings without any interpretation. If you need to specify a remote unit but want to see all settings, use - for the first argument.

The environment variable JUJU_REMOTE_UNIT stores the default remote unit.

You should never depend upon the presence of any given key in relation-get output. Processing that depends on specific values (other than private-address) should be restricted to -relation-changed hooks for the relevant unit, and the absence of a remote unit's value should never be treated as an error in the local unit.

In practice, it is common and encouraged for -relation-changed hooks to exit early, without error, after inspecting relation-get output and determining the data is inadequate; and for all other hooks to be resilient in the face of missing keys, such that -relation-changed hooks will be sufficient to complete all configuration that depends on remote unit settings.

Key value pairs for remote units that have departed remain accessible for the lifetime of the relation.


from charmhelpers.core.hookenv import relation_get

# Since we define the relation id on every call to relation_get, both bash
# examples look like the line below

# To get a specific setting from the remote unit in the specified relation
relation_get(rel_id, 'username')


# Getting the settings of the default unit in the default relation is done with:
  username: jim
  password: "12345"

# To get a specific setting from the default remote unit in the default relation
  relation-get username

# To get all settings from a particular remote unit in a particular relation you
   relation-get -r database:7 - mongodb/5
    username: bob
    password: 2db673e81ffa264c


relation-ids outputs a list of the related applications with a relation name. Accepts a single argument (relation-name) which, in a relation hook, defaults to the name of the current relation. The output is useful as input to the relation-list, relation-get, and relation-set commands to read or write other relation values.


from charmhelpers.core.hookenv import relation_ids



relation-ids database


Import-Module CharmHelpers
Get-JujuRelationIds -RelType "database"


relation-list outputs a list of all the related units for a relation identifier. If not running in a relation hook context, -r needs to be specified with a relation identifier similar to therelation-get and relation-set commands.


from charmhelpers.core.hookenv import relation_list
from charmhelpers.core.hookenv import relation_id

# List the units on a relation for the given relation id.
related_units = relation_list(relation_id())


relation-list 9


Import-Module CharmHelpers
Get-JujuRelatedUnits -RelId (Get-JujuRelationId)


relation-set writes the local unit's settings for some relation. If it's not running in a relation hook, -r needs to be specified. The value part of an argument is not inspected, and is stored directly as a string. Setting an empty string causes the setting to be removed.

relation-set is the tool for communicating information between units of related applications. By convention the charm that provides an interface is likely to set values, and a charm that requires that interface will read values; but there is nothing enforcing this. Whatever information you need to propagate for the remote charm to work must be propagated via relation-set, with the single exception of the private-address key, which is always set before the unit joins.

For some charms you may wish to overwrite the private-address setting, for example if you're writing a charm that serves as a proxy for some external application. It is rarely a good idea to remove that key though, as most charms expect that value to exist unconditionally and may fail if it is not present.

All values are set in a transaction at the point when the hook terminates successfully (i.e. the hook exit code is 0). At that point all changed values will be communicated to the rest of the system, causing -changed hooks to run in all related units.

There is no way to write settings for any unit other than the local unit. However, any hook on the local unit can write settings for any relation which the local unit is participating in.


from charmhelpers.core.hookenv import relation_set

relation_set({'port': 80, 'tuning': 'default'})


relation-set port=80 tuning=default

relation-set -r server:3 username=jim password=12345


resource-get fetches a resource from the Juju controller or the Juju Charm store. The command returns a local path to the file for a named resource.

If resource-get has not been run for the named resource previously, then the resource is downloaded from the controller at the revision associated with the unit's application. That file is stored in the unit's local cache. If resource-get has been run before then each subsequent run synchronizes the resource with the controller. This ensures that the revision of the unit-local copy of the resource matches the revision of the resource associated with the unit's application.

The path provided by resource-get references the up-to-date file for the resource. Note that the resource may get updated on the controller for the application at any time, meaning the cached copy may be out of date at any time after resource-get is called. Consequently, the command should be run at every point where it is critical for the resource be up to date.

# resource-get software


status-get allows charms to query what is recorded in Juju as the current workload status. Without arguments, it just prints the workload status value e.g. 'maintenance'. With --include-data specified, it prints YAML which contains the status value plus any data associated with the status.


from charmhelpers.core.hookenv import status_get

charm_status = status_get()



status-get --include-data

Use --application to get the overall status for the application, as set by the leader:

status-get --application


status-set allows charms to describe their current status. This places the responsibility on the charm to know its status, and set it accordingly using the status-set hook tool.

This hook tool takes 2 arguments. The first is the status to report, which can be one of the following:

  • maintenance (the unit is not currently providing a service, but expects to be soon, e.g. when first installing)
  • blocked (the unit cannot continue without user input)
  • waiting (the unit itself is not in error and requires no intervention, but it is not currently in service as it depends on some external factor, e.g. an application to which it is related is not running)
  • active (This unit believes it is correctly offering all the services it is primarily installed to provide)

For more extensive explanations of these statuses, and other possible status values which may be set by Juju itself, please see the status reference page.

The second argument is a user-facing message, which will be displayed to any users viewing the status, and will also be visible in the status history. This can contain any useful information.

This status message provides valuable feedback to the user about what is happening. Changes in the status message are not broadcast to peers and counterpart units - they are for the benefit of humans only, so tools representing Juju applications (e.g. the Juju GUI) should check occasionally and be told the current status message.

Spamming the status with many changes per second is therefore rather redundant (and might be throttled by the controller). Nevertheless, a thoughtful charm will provide appropriate and timely feedback for human users, with estimated times of completion of long-running status changes.

In the case of a blocked status though the status message should tell the user explicitly how to unblock the unit insofar as possible, as this is primary way of indicating any action to be taken (and may be surfaced by other tools using Juju, e.g. the Juju GUI).

A unit in the active state with should not generally expect anyone to look at its status message, and often it is better not to set one at all. In the event of a degradation of service, this is a good place to surface an explanation for the degradation (load, hardware failure or other issue).

A unit in error state will have a message that is set by Juju and not the charm because the error state represents a crash in a charm hook - an unmanaged and uninterpretable situation. Juju will set the message to be a reflection of the hook which crashed. For example “Crashed installing the software” for an install hook crash, or “Crash establishing database link” for a crash in a relationship hook.


from charmhelpers.core.hookenv import status_set

status_set('blocked', 'Unable to continue until related to a database')


status-set maintenance "installing software"
status-set maintenance "formatting storage space, time left: 120s"
status-set waiting "waiting for database"
status-set active
status-set active "Storage 95% full"
status-set blocked "Need a database relation"
status-set blocked "Storage full"

The unit which is the leader is responsible for setting the overall status of the application by using the --application option. It should aggregate the status of other units for the application.

status-set maintenance "Upgrading software"
status-set --application maintenance "Down until one unit has completed the upgrade."

Non-leader units which attempt to use --application will receive an error

status-set --application maintenance "I'm not the leader."
error: this unit is not the leader


storage-add may be used to add storage to the unit. The tool takes the name of the storage (as defined in the charm metadata), and optionally the number of storage instances to add; by default it will add a single storage instance of the name.


from subprocess import check_call

check_call(["storage-add", "database-storage=1"])


storage-add database-storage=1


storage-get may be used to obtain information about storage being attached to, or detaching from, the unit. If the executing hook is a storage hook, information about the storage related to the hook will be reported; this may be overridden by specifying the name of the storage as reported by storage-list, and must be specified for non-storage hooks.

storage-get should be used to identify the storage location during storage-attached and storage-detaching hooks. The exception to this is when the charm specifies a static location for singleton stores.


from subprocess import check_call

check_call(["storage-get", "21127934-8986-11e5-af63-feff819cdc9f"])


storage-get 21127934-8986-11e5-af63-feff819cdc9f

storage-get -s data/0


storage-list may be used to list storage instances that are attached to the unit. The storage instance identifiers returned from storage-list may be passed through to the storage-get command using the -s flag.


from subprocess import check_output

storage = check_output(["storage-list"])




unit-get returns information about the local unit. It accepts a single argument, which must be private-address or public-address. It is not affected by context.

Note that if a unit has been deployed with --bind space then the address returned from unit-get private-address will get the address from this space, not the 'default' space.

Warning: The call of unit-get in a networking context is deprecated and should no longer be used. It is replaced by the network-get hook tool. See Network primitives for details.


from charmhelpers.core.hookenv import unit_get

address = unit_get('public-address')


unit-get public-address


Import-Module CharmHelpers
Get-JujuUnit -Attr "public-address"