Reference/Commands
saphan sign-spool
Signs the closed model-transcript spool of a finished walled run on a remote machine with that machine's own key, from outside the run's jail.
Signs the closed model-transcript spool of a finished walled run on a remote machine with that machine's own key, from outside the run's jail. It signs only a spool that holds a sealed segment and is not signed yet, prints one line when there is something to say, and always exits 0, so a signing failure never changes the run's own status. It runs on the remote machine after the run has ended.
| flag | type | default | what it does |
|---|---|---|---|
--dir | string | The closed spool directory, as an absolute path on this host. | |
--ended | string | When the run ended (RFC 3339); defaults to now. | |
--run-id | string | The run id recorded on the spool. | |
--started | string | When the run began (RFC 3339). | |
--stream | string | The stream recorded in every segment. |
Global options apply to every command — see Every command.