A novel container runtime, aka confidential container, for cloud-native confidential computing and enclave runtime ecosystem.