--debug | Enable debug logging |
--disk-size <value> | Disk size with unit (e.g., 50G, default: 40GB) |
--fs <value> | Filesystem type (ext4 or zfs, default: zfs) |
--image <value> | OS image version (auto-selected if omitted) |
--node-id <value> | Node ID (auto-selected if omitted) |
--custom-app-id <value> | Custom App ID (requires —nonce for PHALA KMS) |
--nonce <value> | Nonce for deterministic app_id (requires —custom-app-id, PHALA KMS only) |
--pre-launch-script <value> | Path to pre-launch script |
--private-key <value> | Private key for signing on-chain transactions (or set PRIVATE_KEY env var) |
--rpc-url <value> | RPC URL for on-chain KMS transactions (or set ETH_RPC_URL env var) |
--prepare-only | Prepare the update and generate a commit token. Skips all on-chain operations. Intended for multisig workflows. |
--commit | Commit a previously prepared update using a commit token. Requires —token; —compose-hash and —transaction-hash are read from the token when omitted. |
--token <value> | Commit token from a prepare-only update. |
--compose-hash <value> | Compose hash from a prepare-only update. Optional in —commit mode when the token can provide it. |
--transaction-hash <value> | Transaction hash proving on-chain compose hash registration. Pass already-registered to skip the proof and rely on state-only verification. |
