CVM with Docker Compose

Create and manage Confidential Virtual Machines (CVMs) on Phala Cloud.

Prerequisites

• Phala Cloud account
• Basic understanding of Docker Compose syntax
• A valid docker-compose.yml for your application

Deploy in Advanced Mode

Phala Cloud supports standard Docker Compose syntax in a secure TEE environment.

1. Go to the deployment section in the dashboard.
2. Switch to the Advanced tab.
3. Edit and validate your Docker Compose content in the built-in editor.

What You Can Configure

With Docker Compose deployment, you can:

• Specify Docker image names and versions
• Configure port mappings for public services
• Define environment variables
• Configure volume mounts for persistence
• Deploy multiple services in one CVM

Multi-Service Deployments

All services in one compose file run inside the same CVM, enabling secure service-to-service communication within the trusted environment.

Private Container Registry

For proprietary or restricted images, Phala Cloud supports private registries including Docker Hub, GHCR, and AWS ECR.

➡️ Learn more about private registry deployment

Example Interface

The built-in editor provides syntax highlighting to help you review configuration before deployment.

Next Steps

• Set secure environment variables
• Use a private container registry
• Expose your service over HTTPS