Command line signing for packbeam archives.
nh-avm sign --key fwup-key.priv --in app.avm --out app-signed.avm nh-avm verify --key fwup-key.pub --in app-signed.avm nh-avm keygen --priv my.priv --pub my.pub
Deliberately. An fwup private key is 64 bytes: a 32 byte Ed25519 seed
followed by its public key, which is libsodium's layout. The seed is what
signs, and the trailing half is byte for byte the .pub file — so an
organization signs packbeams with the key it already uses for fwup, and
NervesHub verifies against the organization key it already stores. Signing
AtomVM firmware adds no key management at all.
keygen writes the same format for anyone not already using fwup, and
fwup -g produces files this accepts.
| main/1 |
main(Args::[string()]) -> no_return()
Generated by EDoc