Owner

Dstack-TEE

7 indexed repositories · View on GitHub

dstack
Open framework for confidential AI

Rust · 544 stars
private-ai-gateway
Private AI Gateway for Attested Confidential Inference

Rust · 32 stars
dstack-examples
examples and utilities of dstack applications

Python · 27 stars
dstack-replicatoor

Python · 3 stars
service-mesh
Attested service mesh for dstack CVMs

Go · 1 star
vllm-proxy

Python · 0 stars
dstack-sysbox-installer

Shell · 0 stars

Open All

84 open issues indexed

Middleware plumbing: per-request upstream auth so a middleware can forward caller credentials (BYOK) Open

Dstack-TEE/private-ai-gateway#11 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Decide whether single-forward should also flush the verifier cache on a caller-supplied binding mismatch Open

Dstack-TEE/private-ai-gateway#18 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Downstream consumers inherit 4 RUSTSEC advisories: bump dcap-qvl 0.3→0.5 and feature-gate the prometheus/metrics stack Open

Dstack-TEE/private-ai-gateway#77 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Allow callers to control prefix-cache partitioning Open

Dstack-TEE/private-ai-gateway#83 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Declare upstream API surfaces for native passthrough vs conversion Open

Dstack-TEE/private-ai-gateway#109 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Bind Privatemode's active manifest to each inference receipt Open

Dstack-TEE/private-ai-gateway#111 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Better UX for pinning an accepted compose Open

Dstack-TEE/private-ai-gateway#113 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Attestation doesn't bind login material: the serving CVM runs a dev image (is_dev: true) and provisions root authorized_keys from unmeasured user_config Open

Dstack-TEE/private-ai-gateway#119 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Support Codex namespace tools in the Responses API Open

Dstack-TEE/private-ai-gateway#172 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
The `dstack-kms-*` E2EE and receipt keys are identical on all three observed gateway replicas — request to document key scope, and what binds a request or a receipt to one replica Open

Dstack-TEE/private-ai-gateway#184 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
expose docker caching from host to the VM Open

enhancement

Dstack-TEE/dstack#88 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
TODO List Open

Dstack-TEE/dstack#96 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
SegFault when running almalinux:8 based docker images Open

Dstack-TEE/dstack#109 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Alternative to RATLS Open

security security: roadmap

Dstack-TEE/dstack#113 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Onchain logs for KMS replication Open

security security: roadmap

Dstack-TEE/dstack#114 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Censorship resistance in the KMS Open

security security: roadmap

Dstack-TEE/dstack#115 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Requirements for Deploying dstack OS on GCP Open

Dstack-TEE/dstack#125 · 8 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Question: Do we have an option to use the dstack using the simulator Open

enhancement

Dstack-TEE/dstack#136 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Discussion: Branding Open

Dstack-TEE/dstack#141 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Migrate hardhat scripts to foundry Open

good first issue help wanted

Dstack-TEE/dstack#237 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Use proper types instead of raw String in Rust SDK Open

Dstack-TEE/dstack#267 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Add a specification document for app-compose.json Open

Dstack-TEE/dstack#279 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Add dstack to TEE related awesome repos Open

Dstack-TEE/dstack#300 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Add a tool to config NVIDIA PPCIE/CC mode manually and automatcially Open

Dstack-TEE/dstack#325 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Oak integration Open

Dstack-TEE/dstack#328 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
DIP: Self-Describing Hash Format for Intel DCAP reportdata Open

proposal

Dstack-TEE/dstack#330 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
CVM keeps exiting and booting when started from the Dstack dashboard Open

Dstack-TEE/dstack#334 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Support for Nvidia AGX Thor Open

Dstack-TEE/dstack#352 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Support PROXY protocol for source IP preservation in dstack-gateway Open

Dstack-TEE/dstack#353 · 2 comments · 2 reactions · 0 assignees · Indexed Sep 15, 2026
Adopt RFC 8785 (JCS) for canonical compose hash calculation Open

security security: roadmap

Dstack-TEE/dstack#411 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Simplify deployment: unify dstack and meta-dstack workflows Open

Dstack-TEE/dstack#422 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
`bootstrap_keys()` auto-bootstrap path does not write `bootstrap-info.json` Open

Dstack-TEE/dstack#539 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Static HKDF salt "RATLS" with no key versioning Open

security security: report security: roadmap

Dstack-TEE/dstack#552 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Disk encryption key and WireGuard key visible in /proc/PID/cmdline Open

security security: hardening security: report

Dstack-TEE/dstack#556 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Security: App keys and decrypted env vars written with world-readable permissions Open

security security: hardening security: report

Dstack-TEE/dstack#606 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Onboarding audit: cut 'time to first dstack app' from ~22 steps to a single script Open

Dstack-TEE/dstack#699 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
vmm-cli update --compose with --env-file silently drops compose changes when allowed_envs differs Open

Dstack-TEE/dstack#707 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
AMD SEV-SNP support (tracking) Open

documentation

Dstack-TEE/dstack#713 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
gateway: custom-domain app lookup does an uncached DNS query on every connection, adding ~0.8–3s to the TLS handshake Open

Dstack-TEE/dstack#736 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
secure_time: true can never sync — guest chrony is built without NTS Open

bug security

Dstack-TEE/dstack#745 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
GPU TEE attestation: verify GPU confidential mode and bind it to the CVM (currently unverified) Open

Dstack-TEE/dstack#751 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Tracking: AWS EC2 NitroTPM attestation platform support Open

enhancement

Dstack-TEE/dstack#758 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Harden VMM lifecycle consistency across update, reload, and removal Open

bug

Dstack-TEE/dstack#767 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
GPU attestation gate follow-ups: commit to RTMR, enforce CC mode, cache OCSP, SNP Open

Dstack-TEE/dstack#778 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
vmm-cli: encrypted env vars fail in three ways that all surface as "variable is required" Open

Dstack-TEE/dstack#832 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Audit remaining network tar extraction sites (vmm OCI layers, dstackup) after #881 Open

Dstack-TEE/dstack#991 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
vmm: one-shot mode allocates CIDs outside the IdPool and is invisible to the VMM Open

Dstack-TEE/dstack#997 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
gateway: concurrent ACME rotation is only best-effort serialized Open

Dstack-TEE/dstack#1008 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
gateway: ACME rotation does not deactivate the old account at the CA Open

Dstack-TEE/dstack#1009 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
gateway: no automatic CAA reconciliation loop Open

Dstack-TEE/dstack#1010 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026

Dstack-TEE

Get new issues in your inbox