tebako-pkg info <package> [--full] [--slot N] [--json] [--verify] [--depth 0|1|2]
tebako-pkg validate <package>REFERENCE · 04
Package surgery, verb by verb.
The tebako-pkg command-line interface (CLI) operates on three-part packages at the byte level: it reads and verifies trailers, bundles and unbundles, adds and removes image slots, replaces bootstraps, and signs artifacts. The press drives it, and the operator reaches for it when package surgery is needed.
Read and verify: info, validate.
info dumps the three-part trailer (or an archive summary); --full prints the container report, --slot N prints one payload, and --json prints the machine document. validate is the strict check, with exit 0 for a clean package and 65 (manifest), 70 (sha256), 71 (signature), 72 (trust), or 77 (contract era) otherwise.
Assemble and decompose: bundle, unbundle, reassemble.
tebako-pkg bundle <dir> -o <package> [--sign[=<keyid>]] [--package-manifest <file.yaml>]
tebako-pkg unbundle <package> -o <dir>
tebako-pkg reassemble <dir> -o <package>Bundling assembles bootstrap + images + trailer; --package-manifest embeds the package manifest block, and the contract declaration travels with it. Rewrite operations preserve the input’s signing state and extension blocks.
Slot surgery: insert-image, remove-image, set-runtime.
tebako-pkg insert-image <package> <image.tfs> [--mount <point>]
tebako-pkg remove-image <package> --slot N
tebako-pkg set-runtime <package> <bootstrap>These verbs edit a package in place. The default mountpoint for image slot 0 is the app root; slot N mounts under its declared point.
Signing: sign, verify.
tebako-pkg sign <artifact>...
tebako-pkg verify <artifact>...Signing is opt-in: packages are unsigned unless the publisher asks. sign writes a detached .asc per artifact plus a signed SHA256SUMS; --sign uses the press-local key, generated on first use, and --sign=<keyid> selects a secret key from the keys directory of the store. Verification of signed packages at run time is always strict.
See also: tfs CLI · Exit codes · Verify integrity