chio key

Create the operator identity your kernel signs with, then print its DID, its kernel key fingerprint, and where the key is held.

On this page

All command families · Global flags

chio key

Create and show the operator identity key.

Command synopsistext

chio key [OPTIONS] <COMMAND>

chio key init Create the operator identity key if it is absent, then print the operator DID, the kernel key fingerprint, and where the key is stored.
chio key show Print the public key, DID, and custody description for a key reference.

Example

Run once per operator. The key stays on this machine.

Terminalbash

chio key init

Output

operator   did:chio:z6Mkf3…Qp9
kernel     4f1c…a2e9
stored     ~/.chio/keys, mode 600

chio key init

Create the operator identity key if it is absent, then print the operator DID, the kernel key fingerprint, and where the key is stored.

Command synopsistext

chio key init [OPTIONS]

--key <KEY> Key reference: a file path, keychain:<service>/<account>, secret-service:<name>, or credential:<name>. Without it, the key is a file under ~/.chio/keys.

Additional behavior

A file key is written with mode 600. A keychain: or secret-service: reference creates the key in OS custody. A credential: reference is read-only; create it with systemd-creds encrypt and load it with LoadCredentialEncrypted=.

chio key show

Print the public key, DID, and custody description for a key reference.

Command synopsistext

chio key show [OPTIONS]

--key <KEY> Key reference: a file path, keychain:<service>/<account>, secret-service:<name>, or credential:<name>. Without it, the key is a file under ~/.chio/keys.