Skip to content

Instantly share code, notes, and snippets.

@v0lkan
Created January 2, 2026 08:33
Show Gist options
  • Select an option

  • Save v0lkan/9e3d4d59f6013197e5a61c9d72889e83 to your computer and use it in GitHub Desktop.

Select an option

Save v0lkan/9e3d4d59f6013197e5a61c9d72889e83 to your computer and use it in GitHub Desktop.
spike
> make start
./hack/bare-metal/startup/start.sh
DNS resolution for spire.spike.ist:
spire.spike.ist. 579395 IN A 127.0.0.1
Domain check passed. Continuing with the script...
Data cleared successfully
Building SPIKE binaries...
!!! The symbols have been stripped from binaries for security.
!!! Use 'readelf --symbols #binary_name#' to verify.
Built SPIKE binaries.
SPIKE binaries built successfully
Started ./hack/bare-metal/startup/spire-server-start.sh with PID 2308022, logging to ./logs/spire-server-start.sh.log
Waiting for SPIRE server to start...
Generating agent token...
Token successfully generated and saved to .data/.spire-agent-join-token
Agent token retrieved successfully
Registering SPIRE entries...
Entry ID : 5c20ffaa-a95c-45a8-adbd-e0faed7c4eff
SPIFFE ID : spiffe://spike.ist/spike/keeper
Parent ID : spiffe://spike.ist/spire-agent
Revision : 0
X509-SVID TTL : default
JWT-SVID TTL : default
Selector : unix:path:/home/volkan/WORKSPACE/spike/bin/keeper
Selector : unix:sha256:3264ce48bb638dbdf155f9540e648c1620836640eed09ad0ec1bac7f51754b01
Selector : unix:uid:1000
Entry ID : c1d69586-7cdf-4ecd-89f4-5fce305db66c
SPIFFE ID : spiffe://spike.ist/spike/nexus
Parent ID : spiffe://spike.ist/spire-agent
Revision : 0
X509-SVID TTL : default
JWT-SVID TTL : default
Selector : unix:path:/home/volkan/WORKSPACE/spike/bin/nexus
Selector : unix:sha256:d88cdf6b98ebcdd3ed850ec2270ee50363bfde9917ef597291289231ddb9abd6
Selector : unix:uid:1000
Waiting for entries to be updated...
Everything is awesome!
SPIRE entries registered successfully
Registering SU...
Entry ID : c284cc21-08f5-4280-9c59-80ea4930b936
SPIFFE ID : spiffe://spike.ist/spike/pilot/role/superuser
Parent ID : spiffe://spike.ist/spire-agent
Revision : 0
X509-SVID TTL : default
JWT-SVID TTL : default
Selector : unix:path:/home/volkan/WORKSPACE/spike/bin/spike
Selector : unix:sha256:97dc00789a5fd90b5d9bc2f26721a312044a57b34e4cc8ff2f4e4ffdb86935c0
Selector : unix:uid:1000
Entry ID : 08b098b7-0700-43e9-8661-cf338df51e78
SPIFFE ID : spiffe://spike.ist/spike/bootstrap
Parent ID : spiffe://spike.ist/spire-agent
Revision : 0
X509-SVID TTL : default
JWT-SVID TTL : default
Selector : unix:path:/home/volkan/WORKSPACE/spike/bin/bootstrap
Selector : unix:sha256:7d0e809619d454c1fa2317c1b8d5d4f756885a9a2daa914175234de304539917
Selector : unix:uid:1000
Waiting for entries to be updated...
Everything is awesome!
SU registered successfully
Waiting before starting SPIRE Agent
Started ./hack/bare-metal/startup/spire-agent-start.sh with PID 2328440, logging to ./logs/spire-agent-start.sh.log
Waiting before SPIKE Keeper 1...
Started ./hack/bare-metal/startup/start-keeper-1.sh with PID 2333544, logging to ./logs/start-keeper-1.sh.log
Waiting before SPIKE Keeper 2...
Started ./hack/bare-metal/startup/start-keeper-2.sh with PID 2338695, logging to ./logs/start-keeper-2.sh.log
Waiting before SPIKE Keeper 3...
Started ./hack/bare-metal/startup/start-keeper-3.sh with PID 2343822, logging to ./logs/start-keeper-3.sh.log
Waiting before SPIKE Nexus...
Started ./hack/bare-metal/startup/start-nexus.sh with PID 2348914, logging to ./logs/start-nexus.sh.log
Waiting before SPIKE Bootstrap...
Started ./hack/bare-metal/startup/bootstrap.sh with PID 2354082, logging to ./logs/bootstrap.sh.log
Registering entries for the demo workload...
Entry ID : b786c2af-fd0b-4923-a439-c6dfdcfb4da9
SPIFFE ID : spiffe://spike.ist/workload/demo
Parent ID : spiffe://spike.ist/spire-agent
Revision : 0
X509-SVID TTL : default
JWT-SVID TTL : default
Selector : unix:path:/home/volkan/WORKSPACE/spike/bin/demo
Selector : unix:sha256:326fa543d6cca0e4f0ec8515192a79ea407bb8c553cb58c6c76396e999b735ff
Selector : unix:uid:1000
Waiting a bit more for the entries to marinate...
Creating policies for the demo workload...
Policy created successfully.
Policy created successfully.
Running demo workload to verify setup...
Demo workload verification passed.
Verifying policies...
WARNING: Missing read permission
WARNING: Missing write permission
==========================================
POLICY VALIDATION FAILED (debug mode - continuing anyway)
Full policy output:
POLICIES
========
ID NAME
db93fbbd-2715-4f1b-9e8f-6d889d1d9885 workload-can-read
d3f69a81-4a61-4aa9-82ae-580f986779ee workload-can-write
==========================================
Verifying cipher (streaming mode - stdin/stdout)...
Cipher streaming mode verification passed.
Verifying cipher (file mode)...
Cipher file mode verification passed.
Done. Will sleep a bit...
<<
>
> Everything is set up.
> You can now experiment with SPIKE.
>
<<
> >> To begin, run './spike' on a separate terminal window.
<<
>
> When you are done with your experiments, you can press 'Ctrl+C'
> on this terminal to exit and cleanup all background processes.
>
<<
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment