> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tinfoil.sh/llms.txt
> Use this file to discover all available pages before exploring further.

# Attestation from containers

> Request fresh enclave attestation from inside a container.

Containers can request fresh attestation through `/tinfoil/attestation.sock`, including containers without networking. Requires `cvm-version` 0.14.11 or later.

## Request attestation

Set `NONCE` to the verifier's fresh, random 32-byte challenge, encoded as 64 hexadecimal characters:

```bash theme={"dark"}
curl --unix-socket /tinfoil/attestation.sock \
  "http://localhost/.well-known/tinfoil-attestation?nonce=${NONCE}"
```

The socket serves only attestation `GET` requests. Requests return `503` until attestation is ready.

To authenticate application output, you can also use an [endorsed key](/containers/attested-keys#verify-the-public-key) to sign output.