oz0 index verify

Usage and flags for oz0 index verify.

For: Operators and developers looking up a command.

Check a signed index.json as a server does before it takes a copy: a signature by an online key that the root key (--root-key, base64, or a key file) certified for this index, a certificate and an index that have not expired, and a payload that matches the schema. --print writes the payload.

With --detail-dir, every version's detail document must be in the folder, with the SHA-256 and size the index pins, and read as a listing whose compact form is the version's generated part, as an index's site checks.

Usage

oz0 index verify <index.json> [flags]

Flags

FlagTypeDefaultDescription
--detail-dirstringalso check the versions' detail documents in this folder, as index sign wrote them
--printboolprint the verified payload
--root-keystringthe root key: base64, or the root's key file; several separated by commas

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

On this page
Copyright © 2026