Inclavare Containers review
A focused choice for enclave-isolated container workloads, not unit-test authoring.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Inclavare Containers is an open-source container runtime stack for protected workloads inside hardware-assisted trusted execution environments. It is aimed at teams testing or running confidential container workloads, especially those working with Linux, self-hosted infrastructure, Kubernetes, and enclave technologies. The stack includes rune, an OCI-compliant runtime for launching enclave containers, and shim-rune, a containerd shim for Kubernetes deployments. It is not a unit-testing framework for authoring or running conventional software unit tests; its value sits in the confidential-computing layer around containerized workloads.
Its strongest fit is an environment that already depends on container tooling. Inclavare Containers integrates with Docker, containerd, and Pouch, supports Kubernetes RuntimeClass deployment, and documents deployment support for Occlum and WebAssembly Micro Runtime. The published specifications include OCI image format support, Kubernetes CRI support, a containerd runtime interface, and image building. Enclave cache-pool management through EPM adds an operational component for managing enclave resources. These integrations make the project relevant when confidential execution must fit into an existing container ecosystem rather than stand alone.
Security-focused capabilities are the other central consideration. Inclavare Containers provides hardware-assisted enclave isolation, remote attestation through Enclave Attestation Architecture, enclave signing and management, trusted communication components, and Intel SGX integration. Those features give security-conscious container teams a defined runtime and attestation stack to evaluate. Choose it when enclave-backed container execution, Kubernetes deployment, and open-source infrastructure are the priority. Teams seeking a conventional unit-testing framework, a general-purpose application test runner, or a managed hosted service should choose a more narrowly aligned alternative.
Inclavare Containers pros and cons
- Where it wins
- Hardware-assisted enclave isolation for confidential workloads
- Kubernetes deployment through RuntimeClass and containerd shim v2
- Remote attestation, enclave signing, and OCI runtime support
- Where it doesn't
- Linux and self-hosted deployment narrows hosting choices
- Focused on confidential runtimes rather than unit-test workflows
- Best suited to teams already using container platforms
Inclavare Containers fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update