Dstack Core Contributors Call #1 | Tue, 9 Sep 2025

TEE - Trusted Execution Environment
1

We’re bringing the Dstack community together for our next builders’ call. A place where contributors, new builders, and curious explorers come together. Sharing ideas, showcasing demos, and helping shape the future of confidential computing.

:date: Date: September 9, 2025
:three_o_clock: Time: 11:30 AM PT / 14:30 ET / 8:30 PM CEST
:stopwatch: Duration: ~90 minutes
:round_pushpin: Where:

:white_check_mark: Why join

  • See live demos of confidential compute infra with dstack.
  • Get clarity on the v1.0 roadmap (audited GPU, monitoring, migration guides).
  • Network with builders pushing the edge of AI x Web3 x TEEs.

:key: What’s on the agenda

  • Intros & use cases: hear from AI infra builders, Web3 developers, deep TEE infra contributors, and new community members.

  • Onboarding refresh: new contributor pathways, first-PR issues, faster tutorials.

  • Core roadmap: zero-trust keying, GPU support, monitoring hooks, migration guides.

  • Architecture deep dive: extending beyond base images into KMS, guest SDKs, and service discovery.

  • Potential Demos:

    • NFT-VPN auth (self-assembling peer list)
    • Wireguard performance (hole punching + throughput)
    • GPU training jobs in Dstack
    • Immutable LLM prompts & bot-mitigation in TEEs

:open_file_folder: Resources

Who should join?

  • AI infra builders working on verifiable compute.
  • Web3 developers building privacy-preserving apps.
  • Deep TEE infra contributors experimenting with VPNs, attestation, and service discovery.
  • New contributors looking for first-PR pathways.
  • Anyone curious about confidential computing use cases (AI, DeFi, secure data).

:backhand_index_pointing_right: Bring your project, your questions, and your curiosity.

1 Like
2

TL;DR — DStack Core Contributors Call #1 (Sep 9, 2025)

  • Tech: VPC via Tailscale/Headscale; enclaves mutually attest and mesh over WireGuard. Lightweight AppID RA “service-mesh” for direct enclave↔enclave RPC.

  • Trust (VPC): Coordinator with AppID allow-list today; near-term redundant coordinator; path to on-chain admission + multi-coordinator shared state.

  • Browser trust: Service-Worker attestation tunnel proposed; bundle in wallet/extension; mobile fallback: local “TEE VPN” shim; push Verify widget + transparency logs.

  • HA/State: Replicate app enclaves; KMS replicates secrets. Data options: Mongo replicaset, TiDB/Spanner-style for strong consistency, encrypted snapshots; encrypted SQLite = minimal, sensible default.

  • Crypto primitive: Verifiable message signing (sig + attestation with pubkey in report) → portable proofs (e.g., TEE CAPTCHA SBT).

  • Ops: Early Ansible orchestration explored.

  • Community: LF onboarding, audit sequencing, monthly calls; bring show-and-tell demos next.

The first public DStack Core Contributors community call was held on September 9, 2025. Focusing on infrastructure stability, VPN/VPC design choices, and community cadence. Hang demoed a Tailscale/Headscale-style VPC that links multiple CVMs via WireGuard with mutual attestation, while Andrew probed trust, availability, and decentralization boundaries. Raymond proposed a service-worker attestation tunnel for browsers; Secret Labs (Alex) introduced verifiable message signing for portable proofs; Lsdan previewed Ansible-based orchestration; Tina steered Linux Foundation onboarding, audit sequencing, conference plans, and rhythm of future community calls.

1 Like