{"id":154661,"date":"2026-04-23T05:34:17","date_gmt":"2026-04-23T05:34:17","guid":{"rendered":"https:\/\/mycryptomania.com\/?p=154661"},"modified":"2026-04-23T05:34:17","modified_gmt":"2026-04-23T05:34:17","slug":"how-to-enhance-your-app-with-oasis-rofl-a-quickstart-tutorial","status":"publish","type":"post","link":"https:\/\/mycryptomania.com\/?p=154661","title":{"rendered":"How To Enhance Your App With Oasis ROFL: A QuickStart Tutorial"},"content":{"rendered":"

I have mentioned the Oasis ROFL (runtime off-chain logic) framework on several occasions. For most people, this explainer video<\/a> would be enough. But for developers and dApp builders, who want to try things out themselves, a deeper dive is worth it. In this guide, I will give a quick introduction to ROFL and then share a QuickStart tutorial to help build a ROFL-powered app.<\/p>\n

ROFL in a\u00a0nutshell<\/h3>\n

The ROFL architecture consists of these distinct components: the hardware, the application, the remote attestation, the blockchain layers, and user interaction.<\/p>\n

Further, this 5-part process lays out how ROFL\u00a0works.<\/p>\n

From a developer\u2019s perspective, ROFL-powered apps run on Oasis nodes inside a Trusted Execution Environment (TEE), managed through the protocol\u2019s unique production-ready EVM runtime\u200a\u2014\u200aSapphire.<\/p>\n

When you use ROFL, you get the following support:<\/p>\n

Docker-like containers<\/strong> or single executable apps<\/strong>, based on what Trusted Compute Base (TCB) you are using, and what your threat model\u00a0isIntel SGX\/TDX ensures privacy and integrity<\/strong>, and also provides a full update history and auditabilityYour app is registered, managed, and deployed on a permissionless pool of ROFL nodes, which means it is not censorable<\/strong>There is a built-in Key Management Service<\/strong> (KMS) that stores your app\u2019s secrets as well as secures key derivation inside the\u00a0TEEVerifiable ROFL transactions originating from integration with Oasis Sapphire<\/strong> that enable EVM-compatible confidential smart contracts<\/p>\n

Moreover, you don\u2019t need to build from scratch\u200a\u2014\u200ayou can just wrap your existing app into a ROFL-powered app. Let\u2019s see\u00a0how.<\/p>\n

QuickStart<\/h3>\n

There are 5 steps to enhance an app with ROFL\u00a0power:<\/p>\n

Initialize<\/strong> the ROFL\u00a0manifestCreate<\/strong> a new app on blockchainBuild<\/strong> a ROFL\u00a0bundleEncrypt secrets<\/strong> and store them\u00a0on-chainDeploy<\/strong> your app on a ROFL\u00a0node<\/p>\n

Prerequisites<\/h3>\n

Containerized App<\/strong>
First thing you need is a containerized app with a downloadable Docker-like image. Any public Open Container Initiative (OCI) repository works; however, you might like to choose from Docker<\/a> or GitHub container registry<\/a>.<\/p>\n

If your app is not already running inside a container and you don\u2019t know how, follow this step-by-step mini tutorial<\/a>.<\/p>\n

Oasis CLI<\/strong>
Next, you need the latest version of the Oasis Command Line Interface (CLI). Install it from\u00a0here<\/a>.<\/p>\n

Tokens<\/strong>
Lastly, you will need about 150 tokens<\/strong> to cover ROFL registration, renting a machine, and paying for the gas\u00a0fees.<\/p>\n

Now, you can either create a new account or import an existing one. Let\u2019s check out both processes.<\/p>\n

oasis wallet create my_account –file.algorithm secp256k1-bip44<\/p>\n

Later, you can choose to import this account to Metamask or other Ethereum-compatible tooling, e.g.,\u00a0Hardhat.<\/p>\n

Import an existing account<\/strong> ->
You need to export the secp256k1<\/strong> private key or mnemonic from your existing wallet before running this\u00a0command:<\/p>\n

oasis wallet import my_account<\/p>\n

Note<\/strong>: If you are working in a test environment, you can get free testnet tokens from the official faucet<\/a>.
If you are building on the mainnet, you will need to buy ROSE<\/a>\u00a0tokens.<\/p>\n

Initialize<\/h3>\n

This is the first step. You start by running oasis rofl init<\/strong><\/a> using compose.yaml<\/strong> inside your app folder. This will generate the ROFL manifest in the form of rofl.yaml<\/strong>.<\/p>\n

oasis rofl init<\/p>\n

Now, based on your requirement, you can change the memory<\/strong>, specify the number of cpus<\/strong>, and the root filesystem storage<\/strong> section that comes under resources<\/strong>.<\/p>\n

rofl.yaml<\/strong><\/p>\n

name: my-app
version: 0.1.0
tee: tdx
kind: container
resources:
memory: 512 # in megabytes
cpus: 1
storage:
kind: disk-persistent
size: 512 # in megabytes
artifacts:
firmware: https:\/\/github.com\/oasisprotocol\/oasis-boot\/releases\/download\/v0.6.2\/ovmf.tdx.fd#db47100a7d6a0c1f6983be224137c3f8d7cb09b63bb1c7a5ee7829d8e994a42f
kernel: https:\/\/github.com\/oasisprotocol\/oasis-boot\/releases\/download\/v0.6.2\/stage1.bin#e5d4d654ca1fa2c388bf64b23fc6e67815893fc7cb8b7cfee253d87963f54973
stage2: https:\/\/github.com\/oasisprotocol\/oasis-boot\/releases\/download\/v0.6.2\/stage2-podman.tar.bz2#b2ea2a0ca769b6b2d64e3f0c577ee9c08f0bb81a6e33ed5b15b2a7e50ef9a09f
container:
runtime: https:\/\/github.com\/oasisprotocol\/oasis-sdk\/releases\/download\/rofl-containers%2Fv0.8.0\/rofl-containers#08eb5bbe5df26af276d9a72e9fd7353b3a90b7d27e1cf33e276a82dfd551eec6
compose: compose.yaml<\/p>\n

Create<\/h3>\n

The next step is to create a new app on-chain. You can use the oasis rofl create<\/strong><\/a> command for this.
Please note that any newly created app in this process is registered by default on the Sapphire mainnet. If you are using a test environment, you will need to change the setting. So, you will be required to pass\u200a\u2014\u200anetwork testnet<\/strong> parameter.<\/p>\n

oasis rofl create –network testnet<\/p>\n

The check whether this transaction was successful is to find your app on the Oasis Explorer<\/a>.<\/p>\n

Build<\/h3>\n

In this step, we will build the ROFL\u00a0bundle.<\/p>\n

oasis rofl build<\/p>\n

This command results in the generation of a new\u00a0.orc file inside your project\u00a0folder.<\/p>\n

Secrets<\/h3>\n

This is the step where privacy is enforced. So, if there are environment variables that your app is using, you can store them on-chain privately using the oasis rofl secret<\/strong><\/a> command. It would look like\u00a0this:<\/p>\n

echo -n “my-secret-token” | oasis rofl secret set TOKEN –<\/p>\n

This command populates the TOKEN<\/strong> secret. You can now use it in your compose file like this:
compose.yaml<\/strong><\/p>\n

services:
python-telegram-bot:
build: .
image: “ghcr.io\/oasisprotocol\/demo-rofl-tgbot:ollama”
platform: linux\/amd64
environment:
– TOKEN=${TOKEN}<\/p>\n

If you want to submit the secrets and the ROFL bundle information on-chain, you can do so with the oasis rofl update<\/strong><\/a>\u00a0command.<\/p>\n

oasis rofl update<\/p>\n

Deploy<\/h3>\n

This is the final step of the process. Here, you use the oasis rofl deploy<\/strong><\/a> command so that your app gets deployed to a ROFL provider.<\/p>\n

oasis rofl deploy<\/p>\n

The command triggers the bootstrapping of a new machine that fits the required resources provided by Oasis. You can check the status of the machine using the oasis rofl machine show<\/strong><\/a>\u00a0command.<\/p>\n

Oasis rofl machine show<\/p>\n

You can now also check your application logs to verify how everything works. You will need the oasis rofl machine logs<\/strong><\/a> command for\u00a0this.<\/p>\n

oasis rofl machine logs<\/p>\n

Parting words<\/strong><\/p>\n

If you are a developer who likes the hands-on approach, I hope you had a good time trying out this tutorial and successfully deploying your first ROFL-powered app.
You will note that in this guide, I have provided several links to the Oasis documentation instead of elaborating on\u00a0them.<\/p>\n

containerize your\u00a0applatest Oasis CLI\u00a0releaseoasis rofl\u00a0initoasis rofl\u00a0createoasis rofl\u00a0secretoasis rofl\u00a0updateoasis rofl\u00a0deployoasis rofl machine\u00a0showoasis rofl machine\u00a0logs<\/p>\n

That\u2019s because I wanted to focus on the topic here without going into details on these commands, which require separate attention, and I will prepare other tutorials explaining them later\u00a0on.<\/p>\n

For a quick chat with the Oasis engineering team for help with specific issues, you can drop your comments in the dev-central channel<\/strong> in the official\u00a0Discord<\/a>.<\/p>\n

Originally published at <\/em>https:\/\/dev.to<\/em><\/a> on April 22,\u00a02026.<\/em><\/p>\n

How To Enhance Your App With Oasis ROFL: A QuickStart Tutorial<\/a> was originally published in Coinmonks<\/a> on Medium, where people are continuing the conversation by highlighting and responding to this story.<\/p>","protected":false},"excerpt":{"rendered":"

I have mentioned the Oasis ROFL (runtime off-chain logic) framework on several occasions. For most people, this explainer video would be enough. But for developers and dApp builders, who want to try things out themselves, a deeper dive is worth it. In this guide, I will give a quick introduction to ROFL and then share […]<\/p>\n","protected":false},"author":0,"featured_media":154662,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"class_list":["post-154661","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-interesting"],"_links":{"self":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts\/154661"}],"collection":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=154661"}],"version-history":[{"count":0,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts\/154661\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/media\/154662"}],"wp:attachment":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=154661"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=154661"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=154661"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}