gseer-release

Overview ¶

gseer-release — the maintainer-side companion of the v0.1.0 signed update system (docs/UPDATE.md):

gseer-release keygen -pub OUT.pub -priv OUT.key
    generate the Ed25519 release keypair (the PRIVATE key never
    leaves the release machine and never enters the repository).
gseer-release sign -key PRIV -in manifest.json -out signed.json
    sign a manifest (Ed25519 over the canonical core bytes).
gseer-release verify -pub PUB -in signed.json
    pre-release self-check (the same verification the updater runs).

This tool ships in the repository but is NOT part of the `gseer` binary: end-user machines never need signing capability.