TEE Command

Manage TEE deployments on elizaOS

The tee command provides access to Trusted Execution Environment (TEE) deployment and management capabilities through integrated vendor CLIs.

Overview

TEE (Trusted Execution Environment) enables secure and verifiable agent operations on blockchain. The tee command currently supports Phala Cloud as a TEE provider, with the potential for additional vendors in the future.

Installation

bun install -g @elizaos/cli

Command Structure

elizaos tee <vendor> [vendor-specific-commands]

Available Vendors

Phala Cloud

The phala subcommand provides a wrapper for the official Phala Cloud CLI, allowing you to manage TEE deployments on Phala Cloud directly through elizaOS.

elizaos tee phala [phala-cli-commands]

The Phala CLI will be automatically downloaded via bunx if not already installed.

Usage Examples

Get Phala CLI Help

# Display Phala CLI help
elizaos tee phala help

# Get help for a specific Phala command
elizaos tee phala cvms help

Authentication

# Login to Phala Cloud with your API key
elizaos tee phala auth login <api-key>

# Check authentication status
elizaos tee phala auth status

Managing CVMs (Confidential Virtual Machines)

# List all CVMs
elizaos tee phala cvms list

# Create a new CVM
elizaos tee phala cvms create --name my-agent-app --compose ./docker-compose.yml

# Get CVM details
elizaos tee phala cvms get <cvm-id>

# Update a CVM
elizaos tee phala cvms update <cvm-id> --compose ./docker-compose.yml

# Delete a CVM
elizaos tee phala cvms delete <cvm-id>

Additional Phala Commands

The Phala CLI also provides these additional commands:

# Docker Registry Management
elizaos tee phala docker login       # Login to Docker Hub
elizaos tee phala docker logout      # Logout from Docker Hub

# TEE Simulator (for local testing)
elizaos tee phala simulator start    # Start local TEE simulator
elizaos tee phala simulator stop     # Stop local TEE simulator
elizaos tee phala simulator status   # Check simulator status

# Demo Deployment
elizaos tee phala demo deploy        # Deploy a demo application to Phala Cloud
elizaos tee phala demo list          # List deployed demos
elizaos tee phala demo delete <id>   # Delete a demo deployment

# Account Management
elizaos tee phala join               # Join Phala Cloud and get a free account
elizaos tee phala free               # Alias for join - get free CVM credits

# Node Management
elizaos tee phala nodes list         # List available TEE nodes
elizaos tee phala nodes get <id>     # Get details about a specific node

TEE Agent Deployment

For deploying elizaOS agents to TEE environments:

1. First, create a TEE-compatible project:

   elizaos create my-tee-agent --type tee
   

2. Configure your agent and prepare deployment files

3. Deploy to Phala Cloud:

   elizaos tee phala cvms create --name my-tee-agent --compose ./docker-compose.yml
   

Configuration

Prerequisites

• Bun installed (required for automatic Phala CLI installation)
• Phala Cloud account and API key (for deployment operations)
• Docker compose file for CVM deployments

Environment Variables

When deploying TEE agents, ensure your environment variables are properly configured:

# Set up your Phala API key
export PHALA_API_KEY="your-api-key"

# Or add to your .env file
echo "PHALA_API_KEY=your-api-key" >> .env

Advanced Usage

Direct Phala CLI Access

All Phala CLI commands and options are available through the wrapper:

# Any Phala CLI command can be used
elizaos tee phala [any-phala-command] [options]

For the complete list of Phala CLI commands and options, run:

elizaos tee phala help

Or visit the official Phala CLI documentation:

bunx phala help

Troubleshooting

Common Issues

1. bunx not found: Install Bun from bun.sh:

   curl -fsSL https://bun.sh/install | bash
   

2. Authentication failures: Ensure your API key is valid and you’re logged in:

   elizaos tee phala auth login <api-key>
   

3. Deployment errors: Check your docker-compose.yml file is valid and all required services are defined

Debug Mode

For detailed output when troubleshooting:

# Run with verbose logging
LOG_LEVEL=debug elizaos tee phala cvms list

Integration with elizaOS

TEE deployments enable:

• Secure key management: Private keys never leave the TEE
• Verifiable computation: Cryptographic proof of agent behavior
• Blockchain integration: Direct onchain operations with attestation
• Privacy preservation: Sensitive data processing in secure enclaves

Related Documentation

• Creating TEE Projects
• Phala Cloud Documentation

Security Considerations

When deploying agents to TEE:

1. Never commit private keys or sensitive configuration
2. Use environment variables for secrets
3. Verify attestation reports for production deployments
4. Follow Phala Cloud security best practices