MAQPNADocs

maqpna airgap bundle

Build an air-gap install bundle from a source checkout

Operate-o json | yaml

Synopsis#

maqpna airgap bundle [--repo DIR] [--tag T] [--registry R] [--out DIR] [--key REF | --keyless] [--pull]

Description#

From the help of maqpna airgap:

bundle runs hack/airgap-bundle.sh from a MAQPNA source checkout (--repo, default the current directory). verify exits 3 when a checksum, the signature (with --require-signature) or one of the 11 images fails. push copies every image of images.txt to REG with skopeo, crane or docker; then install with the bundle's hack/airgap-install.sh (SKIP_PUSH=1) or maqpna install.

Flags#

FlagTypeDescriptionDefault
--agent-sandbox-versionstringupstream agent-sandbox release (env AGENT_SANDBOX_VERSION)none
--keystringcosign key reference for a key-based signature: SHA256SUMS.sig with cosign 2, SHA256SUMS.key.bundle with cosign 3 (env COSIGN_KEY)none
--keylessswitchsign SHA256SUMS keyless (SHA256SUMS.cosign.bundle)none
--outstringoutput directory (env OUT_DIR; default dist)none
--pullswitchdocker pull every image firstnone
--registrystringsource registry of the MAQPNA images (env REGISTRY; default <release-registry>)none
--repostringMAQPNA source checkout (default: the current directory or a parent)none
--tagstringimage tag to bundle (env TAG; default: this CLI's version)none

The global flags (--context, -o, --no-color, ...) work with every command.

Examples#

maqpna airgap bundle --tag v1.4.0 --out bundle/

What happens when you run it#

  • Prints a table by default; -o json or -o yaml print the data, and --jq EXPR filters the JSON.

Exit codes#

CodeMeaning
0success
1error (the message says what failed, with a hint when there is one)
2usage error: unknown flag, missing argument or bad value; the synopsis is printed
3a check failed, a change is blocked, or a result did not match (tamper, policy mismatch) (not used by this command)

Terminal demo#

maqpna airgap bundle --help.cast

This command downloads signatures, images or charts from the network, so the recording shows its help.