autonomy registry

Seed and govern OCI registries for edge / air-gapped deployments

Synopsis

Registry orchestration for edge and disconnected sites.

ADK does not implement registry transport; it governs it. "registry seed"
delegates image replication to skopeo (preserving multi-arch manifest lists),
re-seeds the lock/policy sidecars, verifies the destination with the existing
4-step bundle pipeline (fail-closed), and emits a digest-pinned seed manifest
the operator can carry as an audit artifact.

Options inherited from parent commands

      --require-signed-manifest   Refuse to start if the SHA256SUMS release manifest or its cosign signature is missing/invalid (Tier 2 binary-integrity check; default: build-time compile-in via -ldflags -X, build-hardened artifacts=true, all others=false)

Subcommands

• autonomy registry bootstrap-zot — Generate a Zot edge-registry config + compose to seed into (BYO runtime)

• autonomy registry package — Generate a Zarf package definition from a catalog (single-tarball offline transport)

• autonomy registry publish-index — Publish a seeded catalog as an OCI referrer on a parent index (Referrers-API discoverable)

• autonomy registry seed — Replicate + verify a bundle into a destination registry, emitting a seed manifest

• autonomy registry seed-catalog — Seed many bundles into a destination registry in one pass (air-gapped catalog)

• autonomy registry sync — Re-seed a peer edge registry from this one (edge-to-edge, delta via skopeo)