mirror of
https://github.com/kata-containers/kata-containers.git
synced 2026-05-16 20:37:15 +00:00
68b80c998f
Document the kernel_modules_images feature: building modules volumes, TOML and Helm chart configuration, agent behavior, and security considerations for both confidential and non-confidential deployments. Prominently warns that custom modules will not work with official Kata kernel releases because the KBUILD_SIGN_PIN used to sign modules is not public, requiring users to rebuild the kernel with their own signing key. Signed-off-by: Fabiano Fidêncio <ffidencio@nvidia.com>
Howto Guides
Kubernetes Integration
- Run Kata containers with
crictl - How to use Kata Containers and Containerd
- How to use Kata Containers and containerd with Kubernetes
- How to use Kata Containers and CRI-O with Kubernetes
- Kata Containers and service mesh for Kubernetes
- How to import Kata Containers logs into Fluentd
Hypervisors Integration
Currently supported hypervisors with Kata Containers include:
-
qemu -
cloud-hypervisor -
firecrackerIn the case of
firecrackerthe use of a block devicesnapshotteris needed for the VM rootfs. Refer to the following guide for additional configuration steps:
Confidential Containers Policy
Advanced Topics
- How to use Kata Containers with virtio-fs
- Setting Sysctls with Kata
- What Is VMCache and How To Enable It
- What Is VM Templating and How To Enable It
- How to Use Template in runtime-rs
- Privileged Kata Containers
- How to load kernel modules in Kata Containers
- How to use Kata Containers with
virtio-mem - How to set sandbox Kata Containers configurations with pod annotations
- How to monitor Kata Containers in K8s
- How to use hotplug memory on arm64 in Kata Containers
- How to setup swap devices in guest kernel
- How to run rootless vmm
- How to run Docker with Kata Containers
- How to run Kata Containers with
nydus - How to run Kata Containers with AMD SEV-SNP
- How to run Kata Containers with IBM Secure Execution
- How to use EROFS to build rootfs in Kata Containers
- How to run Kata Containers with kinds of Block Volumes
- How to use the Kata Agent Policy
- How to pull images in the guest
- How to use mem-agent to decrease the memory usage of Kata container
- How to use seccomp with runtime-rs
- How to use passthroughfd-IO with runtime-rs and Dragonball
- How to use EROFS snapshotter with Kata Containers