Commit Graph

  • 67e38e0f92 tests: Do not enable NFD on cbl-mariner Fabiano Fidêncio 2025-10-30 14:04:10 +01:00
  • 1bc873397b tests: Use NFD as part of the tests Fabiano Fidêncio 2025-10-29 12:22:21 +01:00
  • ebe15d154e kata-deploy: Add NFD as a dependency Fabiano Fidêncio 2025-10-29 11:19:15 +01:00
  • be05e1370c kata-deploy: Allow setting the default runtime class name Fabiano Fidêncio 2025-10-28 20:36:12 +01:00
  • 820e6d6351 kata-deploy: Add more per-arch options Fabiano Fidêncio 2025-10-28 20:27:48 +01:00
  • 94abe4fc00 osbuilder: nvrc: Consume NVRC release instead of building it Zvonko Kaiser 2025-10-14 20:30:36 +00:00
  • 69c76971f3 gpu: Handle VFIO and IOMMUFD Zvonko Kaiser 2025-10-24 17:50:22 +00:00
  • 26396881cf webhook: allow privileged containers Saul Paredes 2025-10-24 16:50:11 -07:00
  • e30e2b5f45 tests: k8s: Remove tests running on GitHub provided runner Fabiano Fidêncio 2025-10-29 14:58:15 +01:00
  • fa521220a9 Merge pull request #11816 from jiuyi123/rs-vm-template-kata-ctl-merge Alex Lyn 2025-10-30 18:21:12 +08:00
  • 551caad4b1 docs: add guide on VM templating usage in runtime-rs - Explained the concept and benefits of VM templating - Provided step-by-step instructions for enabling VM templating - Detailed the setup for using snapshotter in place of VirtioFS for template-based VM creation - Added performance test results comparing template-based and direct VM creation ssc 2025-10-29 18:32:26 +08:00
  • 5a586e13a1 kata-ctl: add factory subcommands for VM template management - init: initialize the VM template factory - status: check the current factory status - destroy: clean up and remove factory resources These commands provide basic lifecycle management for VM templates. ssc 2025-09-17 18:14:06 +08:00
  • 8878c46e8f Merge pull request #11867 from spectator333/update-rust-vmm-deps RuoqingHe 2025-10-30 00:17:29 +08:00
  • dd444d23b3 dragonball: Bump kvm-ioctls to fix security issue Siyu Tao 2025-10-24 09:39:33 +00:00
  • 0e19a2bf91 Merge pull request #11993 from zvonkok/vectorAdd Steve Horsman 2025-10-29 13:42:34 +00:00
  • 555926ea1a libs: Fix formatting issue stevenhorsman 2025-10-29 08:50:12 +00:00
  • dbdd1009af Merge pull request #11933 from kata-containers/topic/kata-deploy-nfd-dependency-part-I Steve Horsman 2025-10-29 09:50:38 +00:00
  • 103f80c7f5 readme: install: Drop outdated documentation Fabiano Fidêncio 2025-10-28 13:17:42 +01:00
  • 5ff218823c gpu: Remove unneeded libraries Zvonko Kaiser 2025-10-28 23:22:48 +00:00
  • 6d9b4059f5 gpu: Add libs for CC Zvonko Kaiser 2025-10-28 23:22:00 +00:00
  • 55d181beb1 Merge pull request #11828 from jiuyi123/rs-vm-template-runtime-rs Xuewei Niu 2025-10-29 14:03:46 +08:00
  • 8aca32dfa9 Merge pull request #11862 from StevenFryto/rootless_clh Xuewei Niu 2025-10-29 13:31:53 +08:00
  • 16e8cf1a09 runtime-rs: boot vm from template Add build_vm_from_template() that flips boot_from_template flag, wires factory.template_path/{memory,state} into the hypervisor config, and returns ready-to-use hypervisor & agent instances. When factory.template is enabled, VirtContainer bypasses normal creation and directly boots the VM by restoring the template through incoming migration, completing the "create → save → clone" loop. ssc 2025-10-27 17:04:56 +08:00
  • 550615285c runtime-rs: add factory, template and vm modules for VM template lifecycle Introduced factory::FactoryConfig with init/destroy/status commands to manage template pools. Added template::Template to fetch, create and persist base VMs. Introduced vm::{VM, VMConfig} exposing create, pause, save, resume, stop, disconnect and migration helpers for sandbox integration. Extended QemuInner to executes QMP incoming migration, pause/resume and status tracking. ssc 2025-10-27 16:15:34 +08:00
  • 135c84b6cb kata-types: add VM template and factory configuration Added new fields in Hypervisor struct to support VM template creation, template boot, memory and device state paths, shared path, and store paths. Introduced a Factory struct in config to manage template path, cache endpoint, cache number, and template enable flag. Integrated Factory into TomlConfig for runtime configuration parsing. ssc 2025-10-27 15:33:40 +08:00
  • 2ceadc5fa3 runtime-rs: supporting the CLH VMM process running in non-root mode stevenfryto 2025-10-27 23:34:39 +00:00
  • 2ddbae3aa6 runtime-rs: pass the tuntap fds down to Cloud Hypervisor stevenfryto 2025-10-27 23:25:55 +00:00
  • 59883a2d99 actions: Remove unused USING_NFD Fabiano Fidêncio 2025-10-22 20:38:35 +02:00
  • f9825b4e6e kata-deploy: Automatically deploy NodeFeatureRules for TEEs Fabiano Fidêncio 2025-10-14 11:11:00 +02:00
  • 8dc78057d6 ci: Refactor NVIDIA NIM test Manuel Huber 2025-10-03 20:45:45 +00:00
  • be32b77baf ci: Add NVIDIA CUDA vectoradd test Manuel Huber 2025-10-02 22:10:27 +00:00
  • a164693e1a release: Bump version to 3.22.0 3.22.0 Fabiano Fidêncio 2025-10-28 14:08:31 +01:00
  • 1b46cf43c4 Merge pull request #11989 from Amulyam24/actionpz-ppc64le Steve Horsman 2025-10-28 12:09:03 +00:00
  • c603094584 revert: Enable new ibm runners for ppc64le Amulyam24 2025-10-28 17:09:26 +05:30
  • 7d2fe5e187 revert: Enable new ibm runners for s390x Hyounggyu Choi 2025-10-28 11:02:49 +01:00
  • 754e832cfa kata-deploy: Allow passing shims / defaultShim per arch Fabiano Fidêncio 2025-10-26 19:31:10 +01:00
  • ffdc80733a Merge pull request #11966 from zvonkok/gpu-cc-fix Greg Kurz 2025-10-27 10:18:13 +01:00
  • 418d5f724e Merge pull request #11971 from lifupan/fupan_blk_ratelimit Alex Lyn 2025-10-27 17:12:47 +08:00
  • f86ac595a8 Merge pull request #11973 from Apokleos/enhance-oci-spec Alex Lyn 2025-10-27 16:15:00 +08:00
  • 690dad5528 runtime-rs: Ensure complete cleanup of stale Device Cgroups Alex Lyn 2025-10-24 15:51:31 +08:00
  • 25ab615da5 Merge pull request #11913 from Apokleos/dedicated-error-rs Alex Lyn 2025-10-27 10:47:07 +08:00
  • 39848e0983 gpu: rootfs fixes Zvonko Kaiser 2025-10-23 20:57:21 +00:00
  • aec0ceb860 gatekeeper: Update mariner tests name stevenhorsman 2025-10-24 15:53:07 +01:00
  • e2dbe87a99 tests: Fix cca test failure on arm64 and other architectures Kevin Zhao 2025-10-24 18:02:22 +08:00
  • 99ae3607dc build(deps): bump astral-tokio-tar in /src/tools/agent-ctl dependabot[bot] 2025-10-24 15:21:56 +00:00
  • 61ee4d7f8b Merge pull request #11951 from burgerdev/watchable Dan Mihai 2025-10-24 08:38:55 -07:00
  • ac601ecd45 Merge pull request #11964 from Amulyam24/k8s-ppc64le Steve Horsman 2025-10-24 15:55:59 +01:00
  • ac3ea973ee Merge pull request #11958 from microsoft/danmihai1/policy-tests-upstream5 Dan Mihai 2025-10-24 07:18:00 -07:00
  • 9876cbffd6 github: migrate k8s job to a different runner on ppc64le Amulyam24 2025-10-23 18:40:35 +05:30
  • 5713072385 Merge pull request #11974 from fidencio/topic/payload-after-build-upload-latest-charts Steve Horsman 2025-10-24 13:13:02 +01:00
  • e539432a91 CI: Add dedicated expected error message for runtime-rs Alex Lyn 2025-10-10 14:36:47 +08:00
  • 60022c9556 Merge pull request #11972 from microsoft/danmihai1/no-mariner-policy Steve Horsman 2025-10-24 12:03:52 +01:00
  • ebc1d64096 actions: Push a 0.0.0-dev chart package to the registries Fabiano Fidêncio 2025-10-24 11:16:38 +02:00
  • 91db25ef02 runtime-rs: Reset capabilities for exec processes Alex Lyn 2025-10-14 16:53:48 +08:00
  • 2de6fa520d runtime-rs: Reset ApparmorProfile with Non value Alex Lyn 2025-10-09 09:38:49 +08:00
  • b8c1215d99 gha: no policy for cbl-mariner during ci Dan Mihai 2025-10-24 04:00:36 +00:00
  • 9fda9905a7 runtime-rs: Support disk rate limiter for dragonball Fupan Li 2025-10-24 10:39:53 +08:00
  • acc7974602 genpolicy: allow non-watchable ConfigMaps Markus Rudy 2024-11-21 19:54:09 +01:00
  • 94adc58342 tests: Ensure helm secret for kata-deploy installation is cleaned up Fabiano Fidêncio 2025-10-23 10:22:36 +02:00
  • 12a515826d tools: Install Golang from a reliable mirror (follow-up) Fabiano Fidêncio 2025-10-23 08:59:13 +02:00
  • 560425f31f build: kernel: Bump version to trigger signed builds for arm64 GPU Fabiano Fidêncio 2025-10-22 22:14:48 +02:00
  • 0b11190fcf gpu: Add Arm64 kernel signing Zvonko Kaiser 2025-10-11 21:33:44 +00:00
  • 1beda258b8 qemu: nvidia: tdx: add quote-generation-socket for attestation to work Mikko Ylinen 2025-10-13 15:17:24 +03:00
  • 2c805900a4 Merge pull request #11891 from stevenhorsman/signature-tests-with-initdata Hyounggyu Choi 2025-10-22 20:27:26 +02:00
  • ba912e6a84 kata-deploy: Adapt nydus installation to MULTI_INSTALL_SUFFIX Fabiano Fidêncio 2025-10-15 12:02:14 +02:00
  • 5615c9af84 Merge pull request #11722 from RuoqingHe/2025-08-25-move-mem-agent-to-libs Fupan Li 2025-10-22 11:23:33 +02:00
  • ded336405f kata-deploy: All qemu variants use .hypervisors.qemu.* Fabiano Fidêncio 2025-10-21 14:04:08 +02:00
  • 000f707205 libs: mem-agent: Add missing #[cfg(test)] Ruoqing He 2025-09-12 03:18:55 +00:00
  • 831f3ab616 libs: mem-agent: Skip tests require root Ruoqing He 2025-09-12 02:57:45 +00:00
  • ac539baeaa libs: Ignore clippy precedence and identity_op Ruoqing He 2025-10-21 09:05:29 +00:00
  • 4dec1a32eb libs: Allow clippy type_complexity Ruoqing He 2025-08-29 02:19:02 +00:00
  • 241e6db237 libs: Fix clippy absurd_extreme_comparisons Ruoqing He 2025-08-29 02:02:11 +00:00
  • 495e012160 libs: Fix clippy redundant_field_names Ruoqing He 2025-08-29 01:54:45 +00:00
  • 96c1175580 libs: Fix clippy manual_strip Ruoqing He 2025-08-29 01:53:02 +00:00
  • 2dc0b14512 libs: Fix clippy field_reassign_with_default Ruoqing He 2025-08-28 09:26:09 +00:00
  • b399ac7f6d libs: Fix clippy derivable_impls Ruoqing He 2025-08-28 09:14:40 +00:00
  • 55bafa257d libs: Fix clippy redundant_pattern_matching Ruoqing He 2025-08-28 09:06:47 +00:00
  • a9f415ade5 libs: Fix clippy needless_bool Ruoqing He 2025-08-28 09:03:47 +00:00
  • 6959bc1b3c libs: Fix clippy for_kv_map Ruoqing He 2025-08-28 08:58:30 +00:00
  • 702665ee8b libs: Fix clippy manual_map Ruoqing He 2025-08-28 08:56:41 +00:00
  • b47a382d00 libs: Fix clippy into_iter_on_ref Ruoqing He 2025-08-27 02:23:11 +00:00
  • 2986eb3a78 libs: Fix clippy legacy_numeric_constants Ruoqing He 2025-08-27 02:09:55 +00:00
  • 3d146a525c libs: Fix clippy single_component_path_imports Ruoqing He 2025-08-27 02:00:14 +00:00
  • b84a03e434 libs: Fix clippy from_str_radix_10 Ruoqing He 2025-08-27 01:56:21 +00:00
  • ded6f2d116 libs: Fix clippy needless_borrow Ruoqing He 2025-08-27 01:44:14 +00:00
  • 541436c82c libs: Fix clippy ptr_arg Ruoqing He 2025-08-26 08:36:29 +00:00
  • cdd94060f1 libs: Fix clippy crate_in_macro_def Ruoqing He 2025-08-26 08:29:18 +00:00
  • 150aee088d libs: Fix clippy len_zero Ruoqing He 2025-08-26 08:25:38 +00:00
  • 1a0935d35c libs: Fix clippy bool_assert_comparison Ruoqing He 2025-08-26 08:20:55 +00:00
  • 75171b0cb7 libs: Fix clippy collapsible_else_if Ruoqing He 2025-08-25 15:15:46 +00:00
  • f605097daa libs: Make mem-agent a member of libs workspace Ruoqing He 2025-08-25 14:30:37 +00:00
  • 7bb28d8da7 libs: Move mem-agent into src/libs Ruoqing He 2025-08-25 14:27:17 +00:00
  • f0e223c535 mem-agent: Rename mem-agent-lib to mem-agent Ruoqing He 2025-08-25 13:41:31 +00:00
  • d7176ffcc8 tests: k8s-sandbox-vcpus-allocation generated policy Dan Mihai 2025-10-17 20:46:12 +00:00
  • 25299bc2a9 tests: k8s-block-volume.bats generated policy Dan Mihai 2025-10-17 18:12:36 +00:00
  • 02a8ec0f63 tests: k8s-measured-rootfs auto generated policy Dan Mihai 2025-09-29 22:31:36 +00:00
  • 1ff8b066c6 Merge pull request #11941 from fidencio/topic/kata-deploy-add-missing-helm-docs Zvonko Kaiser 2025-10-21 16:04:55 -04:00
  • ebaecbd3d6 Merge pull request #11949 from microsoft/danmihai1/optional-secret-volume Dan Mihai 2025-10-21 12:27:13 -07:00
  • d01fa478ad Merge pull request #11948 from kata-containers/sprt/fix-go-download Aurélien Bombo 2025-10-21 14:00:09 -05:00
  • 89e976e413 Merge pull request #11955 from kata-containers/sprt/refresh-oidc-before-delete Aurélien Bombo 2025-10-21 13:52:24 -05:00