SIGSUM-LOG-SECONDARY(1)

📦 version 0.15.2, in ubuntu stonking

💖 SIGSUM-LOG-SECONDARY 💖

okay bestie so this is sigsum-log-secondary — the Sigsum log secondary, and yes she's a whole main character. secondary by name, iconic by nature. 🦋

🌸 SYNOPSIS 🌸

sigsum-log-secondary [-?] [--backend value] [--external-endpoint
host:port] [--internal-endpoint host:port] [--interval value] [--key-
file file] [--log-file file] [--log-level level] [--primary-url url]
[--timeout value] [--trillian-rpc-server host:port] [--trillian-tree-id-
file file] [--url-prefix string] [--version]

✨ DESCRIPTION ✨

So like, every flag this girl takes, explained with love. All of them. I'm not skipping a single one, periodt. 💅

  • -?, --help — shows you the help. that's it, that's the tweet. 🫶
  • --backend=value — pick your backend, no wrong answers (well, two answers). Either "trillian" — which means she connects to an external Trillian server — or "ephemeral" — which means in-memory backend, and I need you to hear me: NO persistent storage. like, none. it vanishes. poof. gone. 🙈

default is [trillian]

  • --external-endpoint=host:port — the TCP listen port for serving clients. this is the door the outside world knocks on. default [localhost:6965] ✨
  • --internal-endpoint=host:port — the internal TCP listen port, lowkey the private group chat: it's for metrics and replication with other nodes. default [localhost:6967] 👑
  • --interval=value — how often she rotates the log's cosigned tree head. default [30s] — yes she's on a schedule, she's organized like that. ⭐
  • --key-file=file — the key file, in openssh format. it can be either an unencrypted private key, OR a public key (which gets accessed via ssh-agent). either vibe works. 🎀
  • --log-file=file — the file to write logs to. if you don't set it, everything goes to stderr. no cap.
  • --log-level=level — the log level, bestie. available options are: debug, info, warning, error. default [info]
  • --primary-url=url — the primary node endpoint, used for fetching leaves. she's fetching. she's always fetching. 💜
  • --timeout=value — how long she waits on outgoing requests before giving up. default [10s]
  • --trillian-rpc-server=host:port — the TCP port for the Trillian backend server. default [localhost:6962]
  • --trillian-tree-id-file=file — the Trillian backend tree identifier. default [/var/lib/sigsum-log/tree-id] 🌸
  • --url-prefix=string — an optional URL prefix that goes in front of endpoint names, like /get-tree-head. optional, so only if you're feeling fancy.
  • --version — displays the server version. lil flex. 🔥
heads up bestie: if you pick --backend=ephemeral, there is NO persistent storage. whatever she's holding onto is fully temporary. don't come crying later, i warned you. 😭

that's the whole page, we ate 💅 this was sigsum-log-secondary version 0.15.2-2, dated March 2026. mwah, bye bestie 🧚💖

📦 where this page comes from