You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+6-6Lines changed: 6 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -65,7 +65,7 @@ dstack is community driven. Open sourced and built by [Kevin Wang](https://githu
65
65
66
66
</div>
67
67
68
-
-**`dstack-vmm`**: A service running in bare TDX host to manage CVMs
68
+
-**`dstack-vmm`**: A service running in a bare TDX host to manage CVMs
69
69
-**`dstack-gateway`**: A reverse proxy to forward TLS connections to CVMs
70
70
-**`dstack-kms`**: A KMS server to generate keys for CVMs
71
71
-**`dstack-guest-agent`**: A service running in CVM to serve containers' key derivation and attestation requests
@@ -86,7 +86,7 @@ dstack is community driven. Open sourced and built by [Kevin Wang](https://githu
86
86
>
87
87
> Check the [Hardware Requirements](https://docs.phala.network/dstack/hardware-requirements) for more information on buying a bare metal server or renting a server from cloud providers.
88
88
>
89
-
> If you are looking for a cloudmanaged dstack, go to the docs to learn how to [sign-up for a Phala Cloud Account](https://docs.phala.network/phala-cloud/getting-started/sign-up-for-cloud-account) and [deploy your first CVM on dstack](https://docs.phala.network/phala-cloud/getting-started/start-from-cloud-ui).
89
+
> If you are looking for a cloud-managed dstack, go to the docs to learn how to [signup for a Phala Cloud Account](https://docs.phala.network/phala-cloud/getting-started/sign-up-for-cloud-account) and [deploy your first CVM on dstack](https://docs.phala.network/phala-cloud/getting-started/start-from-cloud-ui).
90
90
91
91
### Install Dependencies
92
92
@@ -178,10 +178,10 @@ Open the dstack-vmm webpage [http://localhost:9080](http://localhost:9080) (chan
178
178
179
179
</div>
180
180
181
-
After the container deployed, it should need some time to start the CVM and the containers. Time would be vary depending on your workload.
181
+
After the container is deployed, it should take some time to start the CVM and the containers. Time would be vary depending on your workload.
182
182
183
183
-**[Logs]**: Click the button to see the logs of the CVM, you can see if the container is finished starting there
184
-
-**[Dashboard]**: Once the container is running, you can click the button to see some information of the container. The logs of the containers can be seen in the Dashboard page
184
+
-**[Dashboard]**: Once the container is running, you can click the button to see some information about the container. The logs of the containers can be seen in the Dashboard page
185
185
186
186
<divalign="center">
187
187
@@ -297,9 +297,9 @@ Got to the dstack-vmm webpage, click the **[Upgrade]** button, select or paste t
297
297
298
298
### Zero Trust HTTPS
299
299
300
-
In the tutorial above, we used a TLS certificate with a private key external to the TEE. To establish trust, we need to generate and maintain the certificate's private key within the TEE and provide evidence that all TLS certificates for the domain were originate solely from dstack-gateway CVM.
300
+
In the tutorial above, we used a TLS certificate with a private key external to the TEE. To establish trust, we need to generate and maintain the certificate's private key within the TEE and provide evidence that all TLS certificates for the domain originated solely from dstack-gateway CVM.
301
301
302
-
By combining Certificate Transparency Logs and CAA DNS records, we can make best effort to minimize security risks. Here's our approach:
302
+
By combining Certificate Transparency Logs and CAA DNS records, we can make the best effort to minimize security risks. Here's our approach:
303
303
304
304
- Set CAA records to allow only the account created in dstack-gateway CVM to request Certificates
305
305
- Launch a program to monitor Certificate Transparency Log and give alarm once any certificate issued to a pubkey that isn't generated by dstack-gateway CVM
0 commit comments