OS Manuals

/usr/bin/tuf-server

From sigstore-scaffolding-tuf-server 0.7.41-r0 (enterprise-packages), captured 2026-11-08 by running tuf-server --help (exit 0). permalink

Usage of /usr/bin/tuf-server:
  -file-dir string
    	Directory where all the files that need to be added to TUF root live. File names are used to as targets. (default "/var/run/tuf-secrets")
  -keyssecret string
    	Name of the secret to create for generated keys (keys won't be stored unless this is provided)
  -metadata-targets
    	Serve individual targets with custom Sigstore metadata. This will be deprecated and removed in the future. (default true)
  -mode string
    	Run mode of the TUF server. One of: init, init-and-serve, serve, init-no-overwrite (default "init-and-serve")
  -no-k8s
    	Run in a non-k8s environment
  -rootsecret string
    	Name of the secret to create for the initial root file (default "tuf-root")
  -signing-config
    	Generate and serve signing_config.v0.2.json (default true)
  -target-dir string
    	Directory where TUF repository should be created/served from. Defaults to temporary directory.
  -trusted-root
    	Generate and serve trusted_root.json (default true)
Options (9)
OptionDescriptionSource
-file-dir stringDirectory where all the files that need to be added to TUF root live.help
-keyssecret stringName of the secret to create for generated keys (keys won't be stored unless this is provided)help
-metadata-targetsServe individual targets with custom Sigstore metadata.help
-mode stringRun mode of the TUF server.help
-no-k8sRun in a non-k8s environmenthelp
-rootsecret stringName of the secret to create for the initial root file (default "tuf-root")help
-signing-configGenerate and serve signing_config.v0.2.json (default true)help
-target-dir stringDirectory where TUF repository should be created/served from.help
-trusted-rootGenerate and serve trusted_root.json (default true)help

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.