Files
git.stella-ops.org/docs/modules/cli/guides/commands/export.md
StellaOps Bot 6bee1fdcf5
Some checks failed
AOC Guard CI / aoc-guard (push) Has been cancelled
AOC Guard CI / aoc-verify (push) Has been cancelled
Concelier Attestation Tests / attestation-tests (push) Has been cancelled
Docs CI / lint-and-preview (push) Has been cancelled
work
2025-11-25 08:01:23 +02:00

1.2 KiB

stella export — Command Guide

Commands

  • stella export mirror --bundle <path> --profile <name> [--offline]
  • stella export verify --bundle <path> --trust-roots <file>
  • stella export plan --output json (preview bundle contents)

Flags (common)

  • --offline: enforce no network; fail with exit code 5 if registry/object-store calls would occur.
  • --profile: named export profile (schema/manifest version); defaults to latest supported.
  • --trust-roots: PEM/TUF/DSSE trust roots for verification.
  • --output: json (default) or table for plan outputs.

Inputs/outputs

  • Inputs: export profiles, mirror configuration, optional cached artefacts.
  • Outputs: deterministic bundle tarball + manifest (checksums, signatures, metadata); verify emits status + detailed reasons.
  • Exit codes follow output-and-exit-codes.md; verification failure uses exit code 3.

Determinism rules

  • Manifest ordering is stable; checksums hex-lowercase; timestamps UTC.
  • No network-dependent mutation; offline bundles must be reproducible.

Offline/air-gap notes

  • --offline must be honored; registry pulls are forbidden unless cached in profile path.
  • Verification uses only local trust roots; no remote key fetch.