Docs Blog Forgejo Keycloak Postgres OpenFGA Pi-hole Pricing

Getting Started

1. Install the CLI 2. Login 3. Build and Push 4. Boot on GCP 5. Boot on Bare Metal

Guides

Authentication Pushing and Pulling Images Configuring Images Working with Hosts Working with GCP Working with Bare Metal latitude.sh OVHcloud Working with AWS Sealed Images Backups Tips and Tricks

CLI Reference

kheeper auth kheeper authorizations kheeper bots kheeper clouds kheeper contexts kheeper hosts kheeper images kheeper orgs kheeper push kheeper releases kheeper secureboot kheeper status

kheeper releases

Manage host releases

Flags

Flag Description Default
--context Config context to use default

Commands

kheeper releases create

Create a release for a host from a configurable image

kheeper releases create <org>/<host>:<tag> --image <image> --config-file <config.json>

Flags:

Flag Description Default
--image Image to use
--config-file Path to JSON data used for template rendering
--debug Print rendered template contents to stderr before encryption
--activate Activate the release after uploading
--seal Sign a UKI that commits to the release's composefs digest, for hosts with Secure Boot. Needs podman.
--secureboot-key The org's db private key that signs a sealed release (default: the one kheeper secureboot init made)

Arguments:

  • name

kheeper releases list

List releases for a host

kheeper releases list <org>/<host>

Flags:

Flag Description Default
--json Output in JSON format

Arguments:

  • host

kheeper releases unpack

Render templates for a release to a local tmp directory for editing

kheeper releases unpack <org>/<host>:<tag> --image <image> --config-file <config.json>

Flags:

Flag Description Default
--image Image to use
--config-file Path to JSON data used for template rendering

Arguments:

  • name

kheeper releases pack

Build, encrypt, and upload a release layer from an unpacked directory

kheeper releases pack <dir>

Arguments:

  • dir

kheeper releases start

Write a starter config from a configurable image's starter.json or schema.json

kheeper releases start <output-file> --image <image>

Flags:

Flag Description Default
--image Image to use

Arguments:

  • output

kheeper releases activate

Set the active tag for a host

kheeper hosts activate <org>/<name>:<tag>

Flags:

Flag Description Default
--json Output in JSON format

Arguments:

  • name

kheeper releases wait

Wait for a host to boot a release

kheeper releases wait <org>/<host>:<tag>

Flags:

Flag Description Default
--timeout Give up after this long 30m0s

Arguments:

  • name