Report keychain signature status

This commit is contained in:
Eric Wendland 2026-05-19 16:05:57 +02:00
commit 788522404d
7 changed files with 20 additions and 4 deletions

View file

@ -31,8 +31,9 @@ Most non-daemon commands talk to the daemon through a local Unix socket at
the keychain initialization/admin-key operations and signs their canonical
payloads through `ssh-keygen -Y sign` using the
`geth.keychain.v1@geth.local` namespace. This is the bootstrap path for
admin/YubiKey-rooted trust; signature verification for replicated keychain ops is
still future work.
admin/YubiKey-rooted trust. `geth keychain status` reports the number of stored
keychain signatures; signature verification for replicated keychain ops is still
future work.
The daemon can also install itself as a user service: