Struct LaunchIdentity 

pub struct LaunchIdentity { /* private fields */ }

One launch’s identity material, generated by LaunchIdentity::generate.

Holds both secret halves, so it lives exactly as long as the launch needs it: the payload fields are read out of it before the call, and LaunchIdentity::keep converts it into the durable TunnelIdentity — which keeps the host secret and the public VM pin, and drops the VM secret on the floor where it belongs.

Implementations

impl LaunchIdentity

pub fn generate() -> Result<Self, Error>

Fresh material from the OS random pool.

The all-zero retry is not reachable from a working pool; it exists because the protocol crate refuses a zero seed (a shared identity proves nothing), and this constructor must never hand out material the daemon would reject at bootstrap.

pub fn seed_field(&self) -> String

The payload value under protocol::identity::SEED_KEY: the VM seed, base64.

pub fn host_public_field(&self) -> String

The payload value under protocol::identity::HOST_PUBLIC_KEY_KEY: the host public key, base64. The public half — the secret never appears in any payload.

pub fn keep(self) -> TunnelIdentity

Converts into what outlives the launch: the host secret and the VM’s public pin.

The VM’s secret half ends here. After this call the host can verify its VM forever and impersonate it never, which is the least-privilege shape for a record that will sit in a ledger file: a stolen record lets an attacker check a VM’s identity, not forge one.

Trait Implementations

impl Debug for LaunchIdentity

Prints nothing but the fact that material exists. Both fields are private keys, and a derived Debug would put them into any log line that formats a launch request.

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.