sev-attestation
⚠Review·Scanned 2/19/2026
This skill performs AMD SEV-SNP remote attestation with scripts to detect SEV-SNP, generate report.bin, fetch AMD certs, and verify signatures. It includes executable shell scripts that access /dev/sev-guest, invoke openssl, curl, snpguest, and call https://kdsintf.amd.com.
from clawhub.ai·v8eeee5b·54.1 KB·0 installs
Scanned from 1.0.2 at 8eeee5b · Transparency log ↗
$ vett add clawhub.ai/xinyuwang/sev-attestationReview findings below
SEV-SNP 远程证明工具
AMD SEV-SNP 远程证明，用于验证虚拟机身份和完整性。
快速开始
# 检测 SEV-SNP 是否可用
./scripts/detect-sev-snp.sh
# 运行完整证明流程
./scripts/full-attestation.sh ./output
脚本说明
| 脚本 | 功能 |
|---|---|
detect-sev-snp.sh | 检测 SEV-SNP 可用性 |
generate-report.sh | 生成证明报告 |
fetch-certificates.sh | 从 AMD 获取证书 |
verify-chain.sh | 验证证书链 |
verify-report.sh | 验证报告签名 |
full-attestation.sh | 完整证明流程 |
依赖
- snpguest (
cargo install snpguest) - openssl
- curl
- root 权限
参考文档
references/report-fields.md- 报告字段说明references/error-codes.md- 错误排查references/manual-verification.md- 手动验证方法