Run any containerized workload in a secure enclave.
Introducing Tinfoil Containers
Tinfoil Containers lets you deploy your application backend, your training pipeline, or your proprietary model on Tinfoil and build end-to-end verifiably private AI services.
Tinfoil - Private AI
AI that keeps your data private at all times. Fast, powerful, and verifiable, thanks to secure hardware enclaves.
Container Escape Techniques: Breaking Out of the Digital Jail
How Attackers Break Free From Containerized Environments and What Defenders Need to Know
Containers From Scratch • Liz Rice • GOTO 2018
Apple’s Containerization Framework and the Future of Secure Computing
The container revolution transformed how we deploy and manage applications, but it also inherited fundamental security and resource…
Apptainer - Portable, Reproducible Containers
Apptainer is an open source container platform designed to run complex applications on high-performance computing (HPC) clusters in a simple, portable, and reproducible way.
New physical attacks are quickly diluting secure enclave defenses from Nvidia, AMD, and Intel
On-chip TEEs withstand rooted OSes but fall instantly to cheap physical attacks.
The Secure Enclave
Secure Enclave is a dedicated secure subsystem in the latest versions of iPad, iPhone, Mac, Apple TV, Apple Vision Pro, Apple Watch, and HomePod.
How Tinfoil Proves Exactly What Model Is Running
How we cryptographically guarantee that we are serving specific, untampered model weights that clients can verify on each request.
Backend infrastructure - Tinfoil Documentation
This page provides a description of the different components that make up our backend infrastructure. It also describes how Tinfoil guarantees code auditability and data confidentiality using these components.
The Industry-Leading Container Runtime | Docker
Read about our industry-leading Docker container runtimes. Docker Engine allows containerized apps to run consistently on any infrastructure — from anywhere.
container/docs/technical-overview.md at main · apple/container
A tool for creating and running Linux containers using lightweight virtual machines on a Mac. It is written in Swift, and optimized for Apple silicon. - apple/container
Titan in depth: Security in plaintext | Google Cloud Blog
While there are no absolutes in computer security, we design, build and operate Google Cloud Platform (GCP) with the goal to protect customers' code and data. We harden our architecture at multiple layers, with components that include Google-designed hardware, a Google-controlled firmware stack, Google-curated OS images, a Google-hardened hypervisor, as well as data center physical security and services.
Attacking & Auditing Docker Containers Using Open Source tools
Container Use for Locally Sandboxed, Background Agents in Zed
From the Zed Blog: Run AI agents in parallel without interference using containerized environments and Git Worktrees.
