fioctl keys tuf updates set-threshold
Set signature threshold for the TUF root or production targets for your Factory
Synopsis
Set signature threshold for the TUF root or production targets for your Factory
For the TUF root the signature threshold is set for both CI and production roles (default 1). For the TUF targets the signature threshold is only set for the production role (default 2). Signature threshold for the CI TUF targets is always set to 1.
Make sure to add enough offline signing keys, and add enough signatures to satisfy the new signature threshold.
fioctl keys tuf updates set-threshold --role=root|targets <num> [flags]
Options
-h, --help help for set-threshold
-k, --keys string Path to <tuf-root-keys.tgz> used to sign TUF root.
-r, --role string TUF role name, supported: Root, Targets.
-s, --sign Sign the new TUF root using the offline root keys.
-x, --txid string TUF root updates transaction ID.
Options inherited from parent commands
-c, --config string config file (default is $HOME/.config/fioctl.yaml)
-f, --factory string Factory to list targets for
-t, --token string API token from https://app.foundries.io/settings/tokens/
-v, --verbose Print verbose logging
SEE ALSO
- fioctl keys tuf updates - Manage updates to the TUF root for your factory (expert mode)