Download this file
| 1 | package host |
| 2 | |
| 3 | import ( |
| 4 | "log" |
| 5 | "os" |
| 6 | ) |
| 7 | |
| 8 | func RunSystemClaims(args []string) { |
| 9 | if err := runSystemClaims(args, os.Stdout); err != nil { |
| 10 | log.Fatal(err) |
| 11 | } |
| 12 | } |
| 13 | |
| 14 | const activationClaimsUsage = `usage: carlos system claims <command> [flags] |
| 15 | |
| 16 | inspect --bucket B --aws-region R --public-key K |
| 17 | run --plan FILE --signing-key FILE --public-key K --aws-region R [--out FILE] |
| 18 | evidence-key --roster FILE --expect-revision N --bucket B --box BOX --enrollment E --public-key K |
| 19 | fence-credentials --source FILE --bucket B --aws-region R --role ARN |
| 20 | console-config --roster FILE --expect-revision N --bucket B --console-id ID --public-key K [--enable-console-runtime] |
| 21 | console-report --bucket B --aws-region R --expect-revision N --console-id ID --public-key K |
| 22 | install-console --identity FILE --source FILE --bucket B --aws-region R --public-key K [--upgrade --from SHA256] |
| 23 | install-control |
| 24 | |
| 25 | For commands that write, add --dry-run to validate and print the planned operation without writing. |
| 26 | Run signing phases on the trusted operator host. Run box installers as root. |
| 27 | The sign-policy and publish-identity phases write their file to --out, a new path. Pass it to guard-arm as it is. |
| 28 | ` |
| 29 | |
amadan