personaseal

Overview ¶

Command personaseal seals Celeste's persona profiles into celeste-cli and opens them for local work (W5). It never prints the key.

go run ./scripts/personaseal seal  -in <dir> -core <sha> -container <sha>
go run ./scripts/personaseal open  -out <existing dir outside the repo>
go run ./scripts/personaseal check -in <dir>

-in holds a container build's celeste_<profile>.json files. The key comes from CELESTE_PERSONA_KEY, else the file CELESTE_PERSONA_KEY_FILE, else ~/.celeste/persona.key, which group and others must not be able to read.