oz0 receipt verify
Check that a receipt is the one management signed: the ed25519 signature over the document (every field, in its order), under the audit key it names, and the document's shape.
For: Operators and developers looking up a command.
Check that a receipt is the one management signed: the ed25519 signature over the document (every field, in its order), under the audit key it names, and the document's shape. A FILE (from oz0 receipt show --out) is checked without the cluster and without the network; an ID is fetched first and checked the same way. Pin the audit key with --key: its fingerprint as oz0 audit key prints it, given to you by another channel than the receipt.
Without it the receipt's own key is trusted, and the command says so.
Exit status: 0 when it verifies, 1 when it does not, 2 when it cannot be read.
Usage
oz0 receipt verify FILE|ID [flags]
Flags
| Flag | Type | Default | Description |
|---|---|---|---|
--json | bool | print the result as JSON | |
--key | string | the audit key's fingerprint (or public key) to pin, as oz0 audit key prints it |
Inherited flags
| Flag | Type | Default | Description |
|---|---|---|---|
--context | string | $OZ0_CONTEXT or <config dir>/orchestrator-zero/context.json | CLI context file written by server init |
--log-level | string | info | log level: debug, info, warn or error |
See all oz0 commands and the global flags.