GeezerVison is showing dstack.org — dstack — Open-Source Runtime for Confidential AI dstack Own your confidential cloud.Run Confidential AI and private inference in confidential VMs. dstack verifies the machine before it releases keys, so users can check what code is running. cloud GCP TDX + TPM AWS Nitro NSM accelerators NVIDIA Hopper / Blackwell CC Runtime proof Verify before key release.dstack binds the compose file, OS image, hardware report, and KMS policy to one app identity. accepted: TDX / SEV-SNP / TPM / NSM / NVIDIA CC Runtime path Architecture guaranteesdstack turns TEE hardware and cloud attestation evidence into a verifiable runtime path before peers, keys, or traffic are trusted. External users HTTPS traffic enters through the gateway boundary. Gateway CVM dstack-gateway terminates public access and routes over WireGuard. VMM dstack-vmm creates and manages application CVMs on the host. Application CVM Guest Agent exposes the dstack API to workloads. KMS CVM dstack-kms verifies attestation before releasing secrets. Blockchain policy DstackKms and DstackApp contracts define authorization state. Trust path RA-TLS, compose hash, and key requests bind runtime state to access. Why Dstackdstack packages the parts teams usually wire by hand: VM launch, attestation, key release, and gateway access. GPU support and upgrade policy use the same path. Compose file Bring the compose file as-is.dstack runs the app in a confidential VM, so teams can keep services and sidecars without rewriting around enclave SDKs. Confidential computing for AIHardware-backed TEEs with cryptographic verification InstanceTypeTEEStatus prod-inference-01H100 80GBVerifiedrunning ml-training-04H200 141GBVerifiedrunning data-pipeline-xIntel TDX 32vCPUVerifiedrunning ai-agent-m2AMD SEV-SNP 16vCPUHost supportrunning gcp-api-09GCP TDX + TPMVerifiedidle Trust Center Inspectable proof graph.Evidence objects connect the workload, source, image, event logs, hardware quote, KMS path, and gateway endpoint. selected proof Gateway attestation status verified report intel_quote receipt gateway_app_id Gateway tls_endpoint linked Attestation One identity for the workload.The runtime checks the hardware report before it treats a VM as the same app, whether the host is bare metal, GCP, or AWS Nitro. View Trust CenterOperations Keys follow the measurement.Per-app keys are released only after attestation passes. Governance rules keep operators from swapping code or extracting secrets out of band. Policy lifecycle Effective policy is enforced.GPU MarketplaceReserve confidential GPUs and keep the proof path intact. H100H200B200Available now memory80GBregionus-east TEE ready memory141GBregionus-east verified memory180GBregionus-east Blackwell CC CPU and GPU Use the same proof path for models.Run services on CPU TEEs, then move private inference workloads onto Hopper or Blackwell confidential GPUs without changing how the app proves itself. Open source Open code, visible audit trail.dstack keeps the audit surface public: source, image state, KMS behavior, gateway paths, and policy state are available for review. audit surface dstack security review review packet Public artifacts, not a black box.Source, design docs, image state, KMS behavior, gateway paths, and policy state stay inspectable around the running workload. full audit reportsource Dstack-TEE/dstack public runtime reproducible image state pinned kms attestation-gated key release reviewed gateway RA-TLS endpoint proof bound policy authorization state tracked Comparison Hardware is only the starting point.Cloud providers expose the Confidential Computing primitive. dstack adds the OS image, attestation flow, app keys, TLS, and upgrade policy around it. dstack Repo, runtime, and policy Direct AWS Nitro Hardware primitive Direct Azure CVMs Cloud platform primitive Direct GCP Confidential VMs Cloud platform primitive Approach Container native GPU TEE Key management Attestation tooling Open source dstack Repo, runtime, and policy
Direct AWS Nitro Hardware primitive
manual manual
Direct Azure CVMs Cloud platform primitive
preview manual manual
Direct GCP Confidential VMs Cloud platform primitive
manual manual
No vendor lock-in Bring Compose apps Verify before trust Start building Build a confidential cloud you can inspect.Clone the OSS repo to self-host. Use Phala Cloud for one-click deployment. Keep GitHub, DeepWiki, and docs one click away. |