occlum/occlum

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1532 stars · 249 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Occlum is a memory-safe, multi-process library OS (LibOS) written in Rust for Intel SGX enclaves. It lets legacy applications run inside secure enclaves with little or no source-code modification via simple commands like occlum init, build, and run.

Use cases

• run unmodified linux applications inside intel sgx enclaves
• protect confidential workloads on untrusted cloud infrastructure
• run multiple processes efficiently within a single sgx enclave
• encrypt and integrity-protect application file systems in enclaves
• port existing binaries to trusted execution environments without rewriting code

When to choose

• you need to run legacy apps in SGX with minimal code changes
• you want memory-safe LibOS processes with fast startup and IPC
• you need encrypted or hashed file systems inside enclaves

When to avoid

• your hardware does not support Intel SGX
• you need a general-purpose OS outside enclave computing
• you require per-enclave process isolation rather than shared-enclave multitasking

Facets

library · maturity active

security container-runtime file-system concurrency security cloud-computing operating-systems rust cloud intel-sgx libos trusted-execution-environment enclave confidential-computing linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="occlum/occlum")