Initial confidential CVM CLI rebrand

Author: aamirrasheed

.github/workflows/release.yml

@@ -0,0 +1,23 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+permissions:
+  contents: write
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Create Release
+        uses: softprops/action-gh-release@v2
+        with:
+          files: |
+            cc
+            install.sh
+          generate_release_notes: true

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Lunal
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

README.md

@@ -0,0 +1,96 @@
+# confidential-cvm-cli
+
+TEE verification and management CLI for confidential compute VMs.
+
+This CLI lets you cryptographically confirm that a CVM is running in a genuine TEE and inspect its state. It is derived from the PrivateClaw CLI and currently keeps the same on-VM evidence paths for compatibility with existing cloud-init.
+
+For background on TEEs and remote attestation, see [confidential.ai/docs](https://confidential.ai/docs).
+
+## Install
+
+```bash
+curl -fsSL https://github.com/lunal-dev/confidential-cvm-cli/releases/latest/download/install.sh | bash
+```
+
+This installs two binaries to `/usr/local/bin/`:
+
+- `cc` - the CLI shell script (this repo)
+- `attestation-cli` - pre-built binary from [lunal-dev/attestation-rs](https://github.com/lunal-dev/attestation-rs) that performs the cryptographic SEV-SNP and TPM attestation
+
+## Commands
+
+```bash
+cc vm <command> [flags]
+```
+
+| Command | Description |
+|---|---|
+| `cc vm verify [-v\|--verbose]` | Run the full 5-check TEE verification |
+| `cc vm info` | Print component versions, hostname, gateway IP, install date |
+| `cc vm attest` | Generate attestation evidence (boot-time; run by cloud-init) |
+| `cc vm assign` | Apply user configuration from IMDS (internal; run by systemd) |
+
+The legacy single-level command shape is still accepted when cheap, so `cc verify` currently maps to `cc vm verify`.
+
+### `cc vm verify`
+
+User-facing command. Runs five checks and prints a pass/fail summary:
+
+1. **SEV-SNP Hardware** - requests a fresh AMD SEV-SNP attestation report bound to the current SSH host key hash and validates the full cert chain via `attestation-cli`.
+2. **TPM Attestation** - validates the vTPM quote and AK cert chain.
+3. **Host Key Binding** - confirms the live SSH host key matches the key baked into the attestation evidence.
+4. **Inference Provider** - shows the configured confidential inference endpoint.
+5. **External Access Lockout** - audits `authorized_keys`, firewall rules, and cloud-provider access paths to confirm no operator backdoor.
+
+Add `-v` / `--verbose` for full cert-chain, VCEK, and endpoint diagnostics.
+
+### `cc vm info`
+
+Prints a compact status block useful for bug reports and quick sanity checks:
+
+```text
+cc:                v1.5.8
+attestation-cli:   v0.4.1
+openclaw:          <version>
+Hostname:          <fqdn>
+Gateway IP:        <gateway>
+Installed:         <date>
+```
+
+### `cc vm attest`
+
+Boot-time command invoked by cloud-init. Generates SEV-SNP + TPM attestation evidence binding the SSH host key to the TEE hardware and writes it to `/etc/privateclaw/evidence.json` for current compatibility.
+
+### `cc vm assign`
+
+Internal command invoked by a systemd timer. Polls Azure IMDS for user configuration and applies it to the CVM.
+
+## Independent Verification
+
+You can verify a CVM's attestation evidence from any machine. You do not need to trust this CLI:
+
+```bash
+# Copy evidence off the CVM
+scp user@cvm:/etc/privateclaw/evidence.json .
+
+# Verify locally with attestation-cli
+attestation-cli verify -e evidence.json --expected-report-data <host_key_hash_hex>
+```
+
+## Cloud-Init Follow-Up
+
+Confidential Agents cloud-init has not been changed yet. Once this repo has a published release, update cloud-init to download:
+
+```text
+https://github.com/lunal-dev/confidential-cvm-cli/releases/latest/download/install.sh
+```
+
+Then update boot/runtime invocations from `privateclaw attest`, `privateclaw assign`, and `privateclaw verify` to `cc vm attest`, `cc vm assign`, and `cc vm verify`.
+
+## Auditing
+
+Everything that runs on your CVM lives in this repo. `cc` is a single bash script. The only binary dependency is [`attestation-cli`](https://github.com/lunal-dev/attestation-rs), which is also open source.
+
+## License
+
+[MIT](./LICENSE)