Encrypted project environment commands
pinset env init
Create one empty encrypted profile, a device age X25519 identity, and normally a separate recovery identity.
View source on GitHub ↗| Field | Description |
|---|---|
| Purpose | Create one empty encrypted profile, a device age X25519 identity, and normally a separate recovery identity. |
| Syntax and arguments | `pinset env init --profile <name> [--auto] (--recovery <path> |
| Modifies state | Yes. Creates pinset.env/<profile>.age, updates schema 4 pinset.toml, stores the device identity, and may create a recovery file. --auto sets this profile as auto-profile. |
| Example | pinset env init --profile ci --recovery ~/pinset-ci-recovery.age |
| JSON | No. |
| Key errors | Project is not schema 4, profile/file already exists, invalid profile name, unavailable keyring, unsafe path, existing recovery output, or encryption/write failure. A final configuration-write failure removes the new ciphertext; an identity or recovery file created earlier in the operation may remain and should be reviewed. |
Use --no-recovery only when another tested identity-backup procedure exists. On Linux/SSH systems without a usable keyring, use --identity-file <path> and set PINSET_IDENTITY_FILE to that protected file for later interactive commands.
/en/docs/commands/env-initPinset 2.1