tch-containers

The tch-containers repository contains the Dockerfiles used to build The Capable Hub’s published docker containers for various CHERI tools/projects. Containers are published on the capablehub Dockerhub organisation.

The hub publishes re-usable containers for:

  • seL4 - SDK environment for cheri microkit baremetal riscv64 purecap
  • morello-yocto - Build container with environment setup for building with kas
  • Zephyr - CHERI-Zephyr SDK configured for building Zephyr applications targetting CHERI Alliance 0.9.3 spec or CTSRD ISAv9
  • LLVM - CHERI Alliance 0.9.3 or CTSRD ISAv9 builds of the LLVM toolchain

Project Home: https://github.com/The-Capable-Hub/tch-containers

Downloads & Documentation

Fork VersionTargetReference SpecDownloadDocumentation
cheri-zephyr:v0.2.0-riscv64c-isav9
riscv64cUniversity of Cambridge ISAv9DockerhubDocs
cheri-zephyr:v0.2.0-riscv64c-rvy
riscv64cCHERI RISC-V Draft 0.9.3DockerhubDocs
cheri-ctsrd-llvm:17-riscv64-latest
riscv64cUniversity of Cambridge ISAv9DockerhubDocs
cheri-ca-llvm:17-riscv64-latest
riscv64cCHERI RISC-V Draft 0.9.3DockerhubDocs
cheri-ca-llvm:18-riscv64-latest
riscv64cCHERI RISC-V Draft 0.9.3DockerhubDocs
cheri-ca-llvm:19-riscv64-latest
riscv64cCHERI RISC-V Draft 0.9.3DockerhubDocs

Project Status

The initial goals of the tch-containers repository are:

  • Create Dockerfiles suitable for re-use within CI environments - For time optimising CI usage
  • Assist CHERI projects to create SDKs - To pull together complete sets of tools.

The hope is to be able to host & support a collection of CHERI containers that can be re-used to build other tools. The first steps towards this are in the CHERI-Zephyr containers, where they now re-use the LLVM containers.

Building from Source

Instructions on how to build the containers yourself can be found in each subfolders README.

Get Involved

Development for this project happens in the following places:

Feel free to create an Issue or open a PR with any comments / changes

There are no regular meetings for this project.

Vulnerability Disclosure

Please report security vulnerabilities relating to tch-containers to support@thecapablehub.org.

Something missing, incorrect?

This page was last updated on 29th January 2026. Please let us know of any corrections via support@thecapablehub.org, alternatively raise a GitHub pull request in our repo.