PKG_SIGN(1) - General Commands Manual # PKG_SIGN(1) - General Commands Manual
NAME # pkg_sign - sign binary packages for distribution
SYNOPSIS # pkg_sign [-Cvi] [-D name[=value]] [-j maxjobs] [-o dir] -s signify2 -s privkey [-S source] [pkg-name …]
DESCRIPTION # The pkg_sign command is used to sign existing collections of binary packages created by pkg_create(1).
It will sign the packages and optionally, produce a SHA256 manifest file in the output directory.
...
SIGNIFY(1) - General Commands Manual # SIGNIFY(1) - General Commands Manual
NAME # signify - cryptographically sign and verify files
SYNOPSIS # signify -C [-q] [-p pubkey] [-t keytype] -x sigfile [file …]
signify -G [-n] [-c comment] -p pubkey -s seckey
signify -S [-enz] [-x sigfile] -s seckey -m message
signify -V [-eqz] [-p pubkey] [-t keytype] [-x sigfile] -m message
DESCRIPTION # The signify utility creates and verifies cryptographic signatures.
...
SYSPATCH(8) - System Manager’s Manual # SYSPATCH(8) - System Manager’s Manual
NAME # syspatch - manage base system binary patches
SYNOPSIS # syspatch [-c | -l | -R | -r]
DESCRIPTION # syspatch is a utility to fetch, verify, install and revert OpenBSD binary patches.
When run without any options, syspatch will apply all missing patches, creating a rollback tarball containing the files it is about to replace, then extracting and installing all files contained in the syspatch tarball.
...
SYSUPGRADE(8) - System Manager’s Manual # SYSUPGRADE(8) - System Manager’s Manual
NAME # sysupgrade - upgrade system to the next release or a new snapshot
SYNOPSIS # sysupgrade [-fkn] [-r | -s] [-b base-directory] [installurl]
DESCRIPTION # sysupgrade is a utility to upgrade OpenBSD to the next release or a new snapshot if available.
sysupgrade downloads the necessary files to /home/_sysupgrade, verifies them with signify(1), and copies bsd.rd to /bsd.
...