Documentation Index

Fetch the complete documentation index at: https://docs.phala.com/llms.txt

Use this file to discover all available pages before exploring further.

​

Configuration Reference

​

dstack-cloud Global Configuration

{
  "image_search_paths": ["/path/to/your/images"],
  "gcp": {
    "project": "your-gcp-project-id",
    "zone": "us-central1-a",
    "bucket": "gs://your-bucket-name"
  },
  "nitro": {
    "region": "us-east-1"
  }
}

​

Fields

​

app.json (Project Configuration)

{
  "os_image": "dstack-cloud-0.6.0",
  "key_provider": "local",
  "instance_name": "my-app",
  "platform": "nitro"
}

​

Fields

​

key_provider Values

​

docker-compose.yaml

​

dstack-specific Extensions

• All images must be pullable by the build system (use public registries or pre-pull images)
• Use SHA256 digests for pinned images (recommended for reproducible measurements):
  services:
    web:
      image: nginx:latest@sha256:abc123...
  
• The runtime: nvidia field is supported for GPU workloads on compatible instances
• volumes that reference /var/run/dstack.sock are automatically mounted for Guest Agent access

​

Example: Web Application

services:
  web:
    image: nginx:latest
    ports:
      - "80:80"

​

Example: AI Inference with GPU

services:
  vllm:
    image: vllm/vllm-openai:latest
    runtime: nvidia
    command: --model Qwen/Qwen2.5-7B-Instruct
    ports:
      - "8000:8000"
    volumes:
      - /var/run/dstack.sock:/var/run/dstack.sock

​

Example: KMS Instance

services:
  dstack-kms:
    image: phalanetwork/dstack-kms:latest
    environment:
      - KMS_HTTPS_PORT=12001
      - ETH_RPC_URL=https://sepolia.base.org
      - KMS_CONTRACT_ADDR=0x...
      - APP_CONTRACT_ADDR=0x...
    ports:
      - "12001:12001"

​

.env (Environment Variables)

API_KEY=your-api-key-here
DATABASE_URL=postgres://user:pass@host:5432/db

​

KMS Environment Variables

​

Security of Environment Variables

• Environment variables are encrypted before leaving your machine
• They are decrypted only inside the CVM/TEE
• The cloud provider and host OS cannot read them in plaintext

​

prelaunch.sh (Pre-launch Script)

• Start the VSOCK proxy (Nitro)
• Inject environment variables
• Generate dynamic configuration

#!/bin/bash
# prelaunch.sh — runs before CVM launch

# Start VSOCK proxy (Nitro only)
socat VSOCK-LISTEN:8000,reuseaddr,fork TCP:localhost:8000 &

# Inject environment variables
export KMS_HTTPS_PORT=12001
export ETH_RPC_URL=https://sepolia.base.org

echo "Prelaunch complete"

​

dstack-cloud CLI Commands

​

Next Steps

• API Reference — Guest Agent and KMS APIs
• Glossary — Term definitions