> ## Documentation Index
> Fetch the complete documentation index at: https://delivery.vexa.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# bootstrap.sh

> Fetch and signature-verify the kit tree from the channel.

Source: `kit/bootstrap.sh` · audience: customer

## When you use this

The first command a new station ever runs: fetch the kit tree from the channel and verify its signature against the channel public key and nothing else. Everything the operator does afterwards comes from a tree whose provenance was checked before it was trusted.

## Usage

Emitted from `kit/bootstrap.sh --help`.

```text theme={null}
usage: bootstrap.sh --registry <host[:port]> --channel <name> --pubkey <channel.pub> [options]

required
  --registry     channel registry host[:port]
  --channel      channel name, e.g. acme-stable
  --pubkey       cosign public key of the channel; the kit signature is checked
                 against THIS key and nothing else

options
  --version      kit version to fetch, vX.Y.Z (default: the 'latest' tag)
  --dest         where to unpack           (default: ./vexa-kit)
  --insecure     registry TLS is self-signed (test rigs)
  --plain-http   registry is plain HTTP     (test rigs)
  --keep-tarball keep the downloaded tarball next to --dest
```