Tutorials¶

Learning-oriented lessons. Each one starts from nothing, uses only the local backend so it needs no cloud account, and ends with something you can check.

• Sign and verify your first release installs sigillum, generates an RSA keypair, produces an OpenPGP detached signature, and verifies it with gpg. About ten minutes.

Which tutorial covers the minisign path?¶

None. The minisign lane (Ed25519 keys, .minisig artefact signatures, and the public keys that cargo-binstall and rtb-update pin) is written as a task-oriented guide rather than a lesson: Sign an artefact for Rust consumers. It assumes you have already been through the tutorial above.

Where to look once the tutorial is done¶

Tutorials teach; they are not the place to look things up.

• How-to guides: one concrete task each, assuming you already know the basics.
• Reference: every command, flag, default and error.
• Explanation: why sigillum is built this way, and what it does not do.