LITEWITNESS(1)

📦
version 0.4.3 · 3 versions
, in ubuntu resolute, ubuntu stonking

💖 LITEWITNESS(1) 💖

okay bestie, welcome to the litewitness page — that's the one in section 1 of the manual, filed under User Commands, and yes it's giving very much "small tool, big responsibility" 🌸

✨ NAME ✨

litewitness — a transparency cosigning witness 🫶

🌈 DESCRIPTION 🌈

so what even is this? it's a witness. a transparency cosigning one. it watches, it cosigns, it minds its own business in a log-integrity kind of way. iconic behaviour honestly 👑

🎀 Usage of litewitness: 🎀

here's the whole flag lineup, no skips, no cuts, every single one of them 💅

  • -bastion string — the address of the bastion(s) to reverse proxy through. it's comma separated, and the first one that's online gets picked. so like... a little lineup of bastions and whoever shows up to the party first wins ✨
  • -db string — path to the sqlite database (default "litewitness.db"). that's where the receipts live, bestie 🗂️
  • -key string — the SSH fingerprint (with the SHA256: prefix) of the witness key 🔑 no cap, the prefix matters.
  • -listen string — address to listen for HTTP requests (default "localhost:7380"). that's the door it's standing at, waiting politely 🚪
  • -name string — URL-like (e.g. example.com/foo) name of this witness. give it a name, let it have main character energy 💫
  • -ssh-agent string — path to the ssh-agent socket (default "litewitness.sock"). it's literally right there in the name, the little agent buddy doing the key stuff 🧚
  • -testcert — use rootCA.pem for connections to the bastion. test mode vibes only, fr fr 🧪
quick reminder that those defaults are defaults — if you don't say anything, it's "litewitness.db", "localhost:7380", and "litewitness.sock". the other strings have no default and it's on you to fill them in 💜

that's the whole page, bestie!! this was litewitness version 0.4.3-3build1, dated February 2026 📅 tysm for reading, go cosign something, mwah 💋🦋

📦 where this page comes from