Skip to main content
Containers can request fresh attestation through /tinfoil/attestation.sock, including containers without networking. Requires cvm-version 0.14.11 or later.

​
Request attestation

Set NONCE to the verifier’s fresh, random 32-byte challenge, encoded as 64 hexadecimal characters:
The socket serves only attestation GET requests. Requests return 503 until attestation is ready. To authenticate application output, you can also use an endorsed key to sign output.