bootstrap.sh - Vexa Delivery

Source: kit/bootstrap.sh · audience: customer

When you use this

The first command a new station ever runs: fetch the kit tree from the channel and verify its signature against the channel public key and nothing else. Everything the operator does afterwards comes from a tree whose provenance was checked before it was trusted.

Usage

Emitted from kit/bootstrap.sh --help.

usage: bootstrap.sh --registry <host[:port]> --channel <name> --pubkey <channel.pub> [options]

required
  --registry     channel registry host[:port]
  --channel      channel name, e.g. acme-stable
  --pubkey       cosign public key of the channel; the kit signature is checked
                 against THIS key and nothing else

options
  --version      kit version to fetch, vX.Y.Z (default: the 'latest' tag)
  --dest         where to unpack           (default: ./vexa-kit)
  --insecure     registry TLS is self-signed (test rigs)
  --plain-http   registry is plain HTTP     (test rigs)
  --keep-tarball keep the downloaded tarball next to --dest