{"id":47677006,"url":"https://github.com/lunal-dev/privateclaw-cli","last_synced_at":"2026-04-07T01:01:52.758Z","repository":{"id":346856725,"uuid":"1191290722","full_name":"lunal-dev/privateclaw-cli","owner":"lunal-dev","description":"PrivateClaw CLI — TEE verification and management for PrivateClaw CVMs","archived":false,"fork":false,"pushed_at":"2026-03-28T04:25:35.000Z","size":30,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-04-03T01:40:35.842Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/lunal-dev.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2026-03-25T05:11:03.000Z","updated_at":"2026-03-28T04:25:38.000Z","dependencies_parsed_at":"2026-03-26T19:00:09.266Z","dependency_job_id":null,"html_url":"https://github.com/lunal-dev/privateclaw-cli","commit_stats":null,"previous_names":["lunal-dev/privateclaw-cli"],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/lunal-dev/privateclaw-cli","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lunal-dev%2Fprivateclaw-cli","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lunal-dev%2Fprivateclaw-cli/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lunal-dev%2Fprivateclaw-cli/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lunal-dev%2Fprivateclaw-cli/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/lunal-dev","download_url":"https://codeload.github.com/lunal-dev/privateclaw-cli/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lunal-dev%2Fprivateclaw-cli/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":31495466,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-06T17:22:55.647Z","status":"ssl_error","status_checked_at":"2026-04-06T17:22:54.741Z","response_time":112,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2026-04-02T13:36:01.221Z","updated_at":"2026-04-07T01:01:52.743Z","avatar_url":"https://github.com/lunal-dev.png","language":"Shell","readme":"# privateclaw-cli\n\nTEE verification and management CLI for [PrivateClaw](https://privateclaw.dev) CVMs.\n\n## Install\n\n```bash\ncurl -fsSL https://github.com/lunal-dev/privateclaw-cli/releases/download/v1.0.0/install.sh | bash\n```\n\nThis installs two binaries to `/usr/local/bin/`:\n- `privateclaw` — shell script CLI with `verify`, `attest`, and `assign` subcommands\n- `attestation-cli` — pre-built binary from [attestation-rs](https://github.com/lunal-dev/attestation-rs) for cryptographic TEE attestation\n\n## Commands\n\n### `privateclaw verify`\n\nUser-facing command. Cryptographically verifies your CVM is running in a genuine TEE:\n\n1. **TEE Attestation** — validates AMD SEV-SNP attestation evidence via `attestation-cli`, confirms SSH host key is bound to the TEE\n2. **Inference Provider** — shows configured Lunal inference endpoint\n3. **External Access Lockout** — audits SSH authorized keys and firewall\n\n### `privateclaw attest`\n\nBoot-time command (called by cloud-init). Generates attestation evidence binding the SSH host key to the TEE hardware.\n\n### `privateclaw assign`\n\nInternal command (called by systemd timer). Polls Azure IMDS for user configuration and applies it.\n\n## Independent Verification\n\nYou can verify a CVM's attestation evidence from any machine:\n\n```bash\n# Copy evidence from CVM\nscp user@cvm:/etc/privateclaw/evidence.json .\n\n# Verify locally (install attestation-cli first)\nattestation-cli verify -e evidence.json --expected-report-data \u003chost_key_hash_hex\u003e\n```\n\n## Auditing\n\nThis repo contains everything that runs on your CVM. The `privateclaw` script is a single shell file — read it directly to see exactly what it does.\n\nThe only binary dependency is [`attestation-cli`](https://github.com/lunal-dev/attestation-rs), which is also open source.\n","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flunal-dev%2Fprivateclaw-cli","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Flunal-dev%2Fprivateclaw-cli","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flunal-dev%2Fprivateclaw-cli/lists"}