hull keyring remove

Synopsis

hull keyring remove (alias hull keyring rm) deletes a key from ~/.config/hull/keyring/, revoking trust in its signer. After removal, packages signed by that key fail --verify. You identify the key by its full fingerprint or by its file name.

When to use it

  • To revoke a signer after a key compromise, an offboarding, or a rotation where you have already added the replacement key.

The removal is local to this machine. It does not invalidate the key globally or notify any keyserver.

What happens

  1. Reads ~/.config/hull/keyring/.
  2. Matches your argument against each installed key — its file name, or its full fingerprint (both case-insensitive). Partial fingerprints do not match.
  3. Deletes the matching file and prints Removed key <filename> (matched by name) or Removed key <filename> (<fingerprint>) (matched by fingerprint).
  4. If nothing matches, errors with no key matching "<arg>" in keyring.

Usage 

hull keyring remove <fingerprint-or-filename> [flags]

Flags

Inherits the global flags.

Worked example

INPUT — a keyring holding one key (from an earlier keyring add):

hull keyring list

FINGERPRINT                                  FILE
3AA5C34371567BD2                             jane.pub

Remove it by file name:

hull keyring remove jane.pub

OUTPUT — hull confirms the deletion:

Removed key jane.pub

The full fingerprint works too, and reports it back:

hull keyring remove 3AA5C34371567BD2

Removed key jane.pub (3AA5C34371567BD2)

Either way the key is gone — hull keyring list now prints No keys installed., and packages signed by it no longer pass --verify.

See also