Ooh, shiny!
Usage: bootstrap [OPTIONS] TAGS
TAGS: Tags to set for a new authkey, as a string of tags separated by spaces
Options:
--print TEXT Print bakery commands and run them
-A, --tailscale-api-command TEXT
-a, --tailscale-api-key TEXT
--bootstrap / --dont-bootstrap Run yadm bootstrap
-c, --current-user-primary-user
-e, --ephemeral Set the ephemeral property for a new
tailscale authkey
-g, --gpg-key-id TEXT
--impermanent / --not-impermanent
Root wiped on boot
-i, --initialize-primary-submodules TEXT
-I, --initialize-yadm-submodules TEXT
-J, --tailscale-interface TEXT
-o, --operating-system TEXT
-p, --primary-user TEXT
-P, --private-gpg-key TEXT Path to private gpg key NOTE: This option is
mutually exclusive with options scp-gpg-key,
import-yubikey. NOTE: This option must be
used if options private-gpg-key, scp-gpg-
key, import-yubikey are not.
-R, --preauthorized Set the pre-authorized property for a new
tailscale authkey
-r, --reusable Set the reusable property for a new
tailscale authkey
-s, --scp-gpg-key <TEXT INTEGER TEXT>...
SCP the private gpg key from here; takes
three arguments: user@address:path-to-
private-gpg-key, the ssh port on the remote
end, and the path to store the private gpg
key at locally. NOTE: This option is
mutually exclusive with options private-gpg-
key, import-yubikey. NOTE: This option must
be used if options private-gpg-key, scp-gpg-
key, import-yubikey are not.
--shared-primary-repo / --individual-primary-repos
-T, --tailscale-domain TEXT
--use-tailscale / --dont-use-tailscale
-u, --user-repo TEXT
--import-yubikey / --dont-import-yubikey
NOTE: This option is mutually exclusive with
options private-gpg-key, scp-gpg-key. NOTE:
This option must be used if options private-
gpg-key, scp-gpg-key, import-yubikey are
not.
-y, --yadm-clone
--zfs-root / --non-zfs-root
--help Show this message and exit.