What is tmpfs and when would you use it?

tmpfs is an in-memory filesystem mount — data written there lives only in host RAM and is never persisted to disk, and disappears the moment the container stops. It's used for data that must never touch disk for security reasons (decrypted secrets, signing keys) or for write-heavy scratch space where durability is irrelevant and disk I/O would be a bottleneck.