docs: de-cloud README, restore dstack open-framework framing#725
Merged
Conversation
The dstack-cloud downstream README was merged back into this repo,
rebranding the whole project as a cloud product ("What is dstack-cloud?",
"Deploy on GCP and AWS", dstack-cloud CLI quick start). Restore the
open-framework framing:
- title/tagline/logo back to dstack (the open framework for confidential AI)
- badge and verifier links back to Dstack-TEE/dstack
- quick start uses docker-compose + meta-dstack images instead of the
dstack-cloud CLI; drop the CLI reference section
- keep Supported Platforms table (bare metal TDX first), FAQ, citation
- license stays Apache 2.0
Contributor
There was a problem hiding this comment.
Pull request overview
This PR restores the repository README framing from the downstream dstack-cloud positioning back to the upstream dstack open framework, including updated branding and a revised “Getting Started” flow.
Changes:
- Rebrand README title/tagline/logo and links back to dstack (upstream framework)
- Replace cloud-CLI-centric quick start with a docker-compose based “Getting Started”
- Update/reshape architecture and documentation sections to match the upstream framing
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Comment on lines
222
to
+224
| Apache 2.0 | ||
| </content> | ||
| </invoke> |
|  | ||
|
|
||
| Your container runs inside a Confidential VM (Intel TDX on GCP, Nitro Enclave on AWS). GPU isolation is optional via NVIDIA Confidential Computing. The CPU TEE protects application logic. The GPU TEE protects model weights and inference data. | ||
| Your container runs inside a Confidential VM (Intel TDX) with optional GPU isolation via NVIDIA Confidential Computing. The CPU TEE protects application logic; the GPU TEE protects model weights and inference data. |
| **Core components:** | ||
|
|
||
| - **Guest Agent**: Runs inside each CVM. Generates attestation quotes so users can verify exactly what's running. Provisions per-app cryptographic keys from KMS. Encrypts local storage. Apps interact via `/var/run/dstack.sock`. | ||
| - **Guest Agent**: Runs inside each CVM. Generates TDX attestation quotes so users can verify exactly what's running. Provisions per-app cryptographic keys from KMS. Encrypts local storage. Apps interact via `/var/run/dstack.sock`. |
| - **Guest Agent**: Runs inside each CVM. Generates TDX attestation quotes so users can verify exactly what's running. Provisions per-app cryptographic keys from KMS. Encrypts local storage. Apps interact via `/var/run/dstack.sock`. | ||
|
|
||
| - **KMS**: Runs in its own TEE. Verifies attestation quotes before releasing keys. Enforces authorization policies that operators cannot bypass. Derives deterministic keys bound to each app's attested identity. | ||
| - **KMS**: Runs in its own TEE. Verifies TDX quotes before releasing keys. Enforces authorization policies defined in on-chain smart contracts — operators cannot bypass these checks. Derives deterministic keys bound to each app's attested identity. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Why
The
dstack-clouddownstream fork was merged back into this repo, and its README modifications came along — rebranding the whole open-source framework repo as a cloud product:![dstack-cloud]dstack-cloudCLIPhala-Network/dstack-cloudThis repo is the upstream dstack framework (vmm / kms / gateway / guest-agent), so the README should present the open framework, not the commercial cloud distribution.
Changes
Dstack-TEE/dstackdstack-cloudCLI; dropped the cloud CLI reference sectionNo doc files were moved; all referenced links resolve.