# spin trust

**Spinbox is experimental: APIs change and data may be lost.** What is built and what proves it is on [Status](https://spin-stack.github.io/website/reference/status.md); what Spinbox does not do is on [Limitations](https://spin-stack.github.io/website/overview/limitations.md).

> spin trust: What this machine trusts of an installation.

<!-- Generated by tools/refgen from spin:cmd/cli. Edit the source, not this file. -->

```
What this machine trusts of an installation

Usage:
  spin trust [flags]
  spin trust [command]

Available Commands:
  egress-root Pin the installation's egress root this machine names in a workspace's word

Flags:
  -h, --help   help for trust

Global Flags:
      --config string    config file (default is $HOME/.spin/config.yaml)
  -o, --output string    text for a person, or json: one document of what the API answered, and no prose (default "text")
      --profile string   named profile to use; SPIN_PROFILE names it when this flag does not (default "default")

Use "spin trust [command] --help" for more information about a command.
```

### spin trust egress-root

```
A workspace's guest trusts its host's egress proxy only by the root its owner's word names,
and this machine names only the root it pinned for the installation: the first one the control
plane offered. Pin another - the installation's root was changed - by the SHA-256 that
'spin-controlplane egress-root' prints on the control plane's machine. Colons and capitals, as
openssl prints a fingerprint, are taken.

A workspace's word names the new root once signed again: 'spin workspace approve-egress-root'.

Usage:
  spin trust egress-root <sha256> [flags]

Flags:
  -h, --help   help for egress-root

Global Flags:
      --config string    config file (default is $HOME/.spin/config.yaml)
  -o, --output string    text for a person, or json: one document of what the API answered, and no prose (default "text")
      --profile string   named profile to use; SPIN_PROFILE names it when this flag does not (default "default")
```
