stackkit verify

Run post-deployment verification checks. Run read-only post-deployment checks from the host where the StackKit is deployed. The verifier checks the stack spec, deployment state, Docker daemon, StackKit containers, Docker health status, and optionally HTTP routes from the generated access summary. --host and its SSH flags (--user, --key, --port, --remote-dir, --legacy-remote-transport) drive the retired raw-SSH verifier that only an exact v0.6 build still runs; --strict applies to that verifier and the v0.6 local checks. On current releases, run verify on the deployed host.

stackkit verify [flags]

Flag	Type	Default	Description
`--artifact-manifest`	string	—	Architecture v2 generation manifest (default: <outputRoot>/.stackkit/generation-manifest.json)
`--generation-receipt`	string	—	Architecture v2 generation receipt (default: <outputRoot>/.stackkit/generation-receipt.json)
`--host`	string	—	Remote host to verify over SSH
`--http`	bool	—	Verify generated service URLs with HTTP requests
`--inventory`	string	—	Architecture v2 observed Inventory (otherwise one conventional inventory file is selected)
`--json`	bool	—	Emit machine-readable JSON
`--key`	string	—	SSH private key path for remote verification
`--legacy-remote-transport`	bool	—	Explicitly allow the deprecated raw-SSH verifier for a StackSpec v1 target
`--notify`	bool	—	Also send a delivery check to every declared owner notification channel and record its receipt
`--offline`	bool	—	Verify cached release receipts and attestations without network access
`--port`	int	`22`	SSH port for remote verification
`--remote-dir`	string	`/opt/stackkit`	Remote StackKit working directory
`--resolved-plan`	string	—	Architecture v2 canonical ResolvedPlan (default: <outputRoot>/.stackkit/resolved-plan.json)
`--strict`	bool	—	Treat warnings as verification failure
`--user`	string	—	SSH username for remote verification

Examples

# Verify the applied deployment on this host
stackkit verify

# Also request the generated service URLs over HTTP
stackkit verify --http

# Emit the verification report as JSON
stackkit verify --json

# Check recorded Apply evidence and cached release receipts without live probes or network access
stackkit verify --offline

Subcommands: stackkit verify client-trust

stackkit verify client-trust

Verify public Owner-CA and scoped DNS custody for a client. Verify the signed public CA and LAN resolver handoff on this installed host. With --export, prepare the Linux OS trust adapter. This does not verify the application runtime, approve client trust, issue device credentials or establish a service session.

stackkit verify client-trust [flags]

Flag	Type	Default	Description
`--export`	bool	—	Export .stackkit/client-trust/enroll-linux.sh from authenticated public custody
`--json`	bool	—	Emit the prepared public trust handoff as JSON

Get started

Get help

Guides

Reference

stackkit verify

stackkit verify client-trust

​stackkit verify client-trust

stackkit verify client-trust