Rename CLI binary to ccvm

Author: aamirrasheed

.github/workflows/release.yml

@@ -18,6 +18,6 @@ jobs:
         uses: softprops/action-gh-release@v2
         with:
           files: |
-            cc
+            ccvm
             install.sh
           generate_release_notes: true

README.md

@@ -14,25 +14,23 @@ curl -fsSL https://github.com/lunal-dev/confidential-cvm-cli/releases/latest/dow
 
 This installs two binaries to `/usr/local/bin/`:
 
-- `cc` - the CLI shell script (this repo)
+- `ccvm` - the CLI shell script (this repo)
 - `attestation-cli` - pre-built binary from [lunal-dev/attestation-rs](https://github.com/lunal-dev/attestation-rs) that performs the cryptographic SEV-SNP and TPM attestation
 
 ## Commands
 
 ```bash
-cc vm <command> [flags]
+ccvm <command> [flags]
 ```
 
 | Command | Description |
 |---|---|
-| `cc vm verify [-v\|--verbose]` | Run the full 5-check TEE verification |
-| `cc vm info` | Print component versions, hostname, gateway IP, install date |
-| `cc vm attest` | Generate attestation evidence (boot-time; run by cloud-init) |
-| `cc vm assign` | Apply user configuration from IMDS (internal; run by systemd) |
+| `ccvm verify [-v\|--verbose]` | Run the full 5-check TEE verification |
+| `ccvm info` | Print component versions, hostname, gateway IP, install date |
+| `ccvm attest` | Generate attestation evidence (boot-time; run by cloud-init) |
+| `ccvm assign` | Apply user configuration from IMDS (internal; run by systemd) |
 
-The legacy single-level command shape is still accepted when cheap, so `cc verify` currently maps to `cc vm verify`.
-
-### `cc vm verify`
+### `ccvm verify`
 
 User-facing command. Runs five checks and prints a pass/fail summary:
 
@@ -44,24 +42,24 @@ User-facing command. Runs five checks and prints a pass/fail summary:
 
 Add `-v` / `--verbose` for full cert-chain, VCEK, and endpoint diagnostics.
 
-### `cc vm info`
+### `ccvm info`
 
 Prints a compact status block useful for bug reports and quick sanity checks:
 
 ```text
-cc:                v1.5.8
+ccvm:              v1.5.8
 attestation-cli:   v0.4.1
 openclaw:          <version>
 Hostname:          <fqdn>
 Gateway IP:        <gateway>
 Installed:         <date>
 ```
 
-### `cc vm attest`
+### `ccvm attest`
 
 Boot-time command invoked by cloud-init. Generates SEV-SNP + TPM attestation evidence binding the SSH host key to the TEE hardware and writes it to `/etc/privateclaw/evidence.json` for current compatibility.
 
-### `cc vm assign`
+### `ccvm assign`
 
 Internal command invoked by a systemd timer. Polls Azure IMDS for user configuration and applies it to the CVM.
 
@@ -85,11 +83,11 @@ Confidential Agents cloud-init has not been changed yet. Once this repo has a pu
 https://github.com/lunal-dev/confidential-cvm-cli/releases/latest/download/install.sh
 ```
 
-Then update boot/runtime invocations from `privateclaw attest`, `privateclaw assign`, and `privateclaw verify` to `cc vm attest`, `cc vm assign`, and `cc vm verify`.
+Then update boot/runtime invocations from `privateclaw attest`, `privateclaw assign`, and `privateclaw verify` to `ccvm attest`, `ccvm assign`, and `ccvm verify`.
 
 ## Auditing
 
-Everything that runs on your CVM lives in this repo. `cc` is a single bash script. The only binary dependency is [`attestation-cli`](https://github.com/lunal-dev/attestation-rs), which is also open source.
+Everything that runs on your CVM lives in this repo. `ccvm` is a single bash script. The only binary dependency is [`attestation-cli`](https://github.com/lunal-dev/attestation-rs), which is also open source.
 
 ## License
 

cc ccvmcc renamed to ccvm

@@ -31,7 +31,7 @@ fi
 HCL_REPORT_NV="0x01400001"
 
 # ---------------------------------------------------------------------------
-# cc vm attest
+# ccvm attest
 #   Called at boot by cloud-init. Generates attestation evidence binding the
 #   SSH host key to the TEE.
 #
@@ -98,7 +98,7 @@ EOFEVIDENCE
 }
 
 # ---------------------------------------------------------------------------
-# cc vm verify
+# ccvm verify
 #   User-facing command. Verifies TEE attestation, inference provider, and
 #   SSH access lockout. Handles everything automatically — no manual steps.
 #
@@ -759,7 +759,7 @@ PYEOF
 }
 
 # ---------------------------------------------------------------------------
-# cc vm assign
+# ccvm assign
 #   Called by systemd timer. Polls IMDS userData and applies user-specific
 #   configuration (SSH key, OpenClaw, MOTD, Caddy TLS).
 # ---------------------------------------------------------------------------
@@ -881,7 +881,7 @@ OCEOF
       |  with end-to-end private inference                       |
       |                                                          |
       |  Verify your TEE:                                        |
-      |    $ cc vm verify                                        |
+      |    $ ccvm verify                                         |
       |                                                          |
       |  Connect a messaging provider:                           |
       |    $ openclaw configure --section channels               |
@@ -921,7 +921,7 @@ MOTDEOF
 }
 
 # ---------------------------------------------------------------------------
-# cc vm info
+# ccvm info
 #   Print environment info for user debugging: component versions, hostname,
 #   gateway IP, and install date.
 # ---------------------------------------------------------------------------
@@ -966,13 +966,13 @@ cmd_info() {
 
   # Install date
   local installed="not found"
-  if [ -f /usr/local/bin/cc ]; then
-    installed=$(stat -c %y /usr/local/bin/cc 2>/dev/null | cut -d' ' -f1)
+  if [ -f /usr/local/bin/ccvm ]; then
+    installed=$(stat -c %y /usr/local/bin/ccvm 2>/dev/null | cut -d' ' -f1)
     [ -z "$installed" ] && installed="not found"
   fi
 
   # Aligned output (labels padded to 18 chars)
-  printf '%-18s %s\n' "cc:"              "$VERSION"
+  printf '%-18s %s\n' "ccvm:"            "$VERSION"
   printf '%-18s %s\n' "attestation-cli:" "$att_version"
   printf '%-18s %s\n' "openclaw:"        "$openclaw_version"
   printf '%-18s %s\n' "Hostname:"        "$host"
@@ -984,17 +984,22 @@ cmd_info() {
 # Main dispatch
 # ---------------------------------------------------------------------------
 print_usage() {
-  echo "Usage: cc vm <command> [flags]"
+  echo "Usage: ccvm <command> [flags]"
   echo ""
   echo "Commands:"
-  echo "  vm verify [-v|--verbose]   Verify SEV-SNP hardware, TPM, host key, inference, and access lockout"
-  echo "                             -v/--verbose shows full cert chain and diagnostic details"
-  echo "  vm attest                  Generate attestation evidence (run at boot)"
-  echo "  vm assign                  Apply user configuration from IMDS (run by systemd)"
-  echo "  vm info                    Print component versions, hostname, gateway IP, and install date"
+  echo "  verify [-v|--verbose]   Verify SEV-SNP hardware, TPM, host key, inference, and access lockout"
+  echo "                          -v/--verbose shows full cert chain and diagnostic details"
+  echo "  attest                  Generate attestation evidence (run at boot)"
+  echo "  assign                  Apply user configuration from IMDS (run by systemd)"
+  echo "  info                    Print component versions, hostname, gateway IP, and install date"
 }
 
 case "${1:-}" in
+  attest)  shift; cmd_attest "$@" ;;
+  verify)  shift; cmd_verify "$@" ;;
+  assign)  shift; cmd_assign "$@" ;;
+  info)    shift; cmd_info "$@" ;;
+  # Cheap compatibility for the prior two-level command shape.
   vm)
     shift
     case "${1:-}" in
@@ -1005,11 +1010,6 @@ case "${1:-}" in
       *)       print_usage ;;
     esac
     ;;
-  # Cheap compatibility for the original single-level command shape.
-  attest)  shift; cmd_attest "$@" ;;
-  verify)  shift; cmd_verify "$@" ;;
-  assign)  shift; cmd_assign "$@" ;;
-  info)    shift; cmd_info "$@" ;;
   *)
     print_usage
     ;;

install.sh

@@ -2,21 +2,21 @@
 set -e
 
 # Confidential CVM CLI installer
-# Downloads cc CLI and attestation-cli to /usr/local/bin/
+# Downloads ccvm CLI and attestation-cli to /usr/local/bin/
 
-VERSION="${CC_VERSION:-${CONFIDENTIAL_CVM_CLI_VERSION:-v1.5.8}}"
+VERSION="${CCVM_VERSION:-${CC_VERSION:-${CONFIDENTIAL_CVM_CLI_VERSION:-v1.5.8}}}"
 ATTEST_VERSION="${ATTESTATION_CLI_VERSION:-v0.4.1}"
 
 echo "Installing Confidential CVM CLI ${VERSION}..."
 
-curl -fsSL "https://github.com/lunal-dev/confidential-cvm-cli/releases/download/${VERSION}/cc" \
-  -o /usr/local/bin/cc
+curl -fsSL "https://github.com/lunal-dev/confidential-cvm-cli/releases/download/${VERSION}/ccvm" \
+  -o /usr/local/bin/ccvm
 
 curl -fsSL "https://github.com/lunal-dev/attestation-rs/releases/download/${ATTEST_VERSION}/attestation-cli" \
   -o /usr/local/bin/attestation-cli
 
-chmod +x /usr/local/bin/cc /usr/local/bin/attestation-cli
+chmod +x /usr/local/bin/ccvm /usr/local/bin/attestation-cli
 
 echo "Installed:"
-echo "  /usr/local/bin/cc (${VERSION})"
+echo "  /usr/local/bin/ccvm (${VERSION})"
 echo "  /usr/local/bin/attestation-cli (${ATTEST_VERSION})"

tests/smoke.sh

@@ -2,31 +2,36 @@
 set -euo pipefail
 
 repo_root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
-cli="$repo_root/cc"
+cli="$repo_root/ccvm"
 
 bash -n "$cli"
+bash -n "$repo_root/install.sh"
 
 usage_output="$("$cli")"
-if ! grep -q "Usage: cc vm <command> \[flags\]" <<<"$usage_output"; then
-  echo "Expected default usage to advertise cc vm command shape" >&2
+if ! grep -q "Usage: ccvm <command> \[flags\]" <<<"$usage_output"; then
+  echo "Expected default usage to advertise ccvm command shape" >&2
+  exit 1
+fi
+if grep -q "cc vm" <<<"$usage_output"; then
+  echo "Expected default usage not to advertise cc vm command shape" >&2
   exit 1
 fi
 
-vm_usage_output="$("$cli" vm)"
-if ! grep -q "vm verify \[-v|--verbose\]" <<<"$vm_usage_output"; then
-  echo "Expected cc vm usage to include vm verify" >&2
+compat_usage_output="$("$cli" vm)"
+if ! grep -q "verify \[-v|--verbose\]" <<<"$compat_usage_output"; then
+  echo "Expected compat vm usage to include verify" >&2
   exit 1
 fi
 
-info_output="$("$cli" vm info)"
-if ! grep -q "^cc:" <<<"$info_output"; then
-  echo "Expected cc vm info to print cc version label" >&2
+info_output="$("$cli" info)"
+if ! grep -q "^ccvm:" <<<"$info_output"; then
+  echo "Expected ccvm info to print ccvm version label" >&2
   exit 1
 fi
 
-compat_info_output="$("$cli" info)"
-if ! grep -q "^cc:" <<<"$compat_info_output"; then
-  echo "Expected legacy single-level info command to remain available" >&2
+compat_info_output="$("$cli" vm info)"
+if ! grep -q "^ccvm:" <<<"$compat_info_output"; then
+  echo "Expected legacy vm info command to remain available" >&2
   exit 1
 fi