kata-containers/docs/how-to/how-to-use-virtio-fs-with-kata.md
Daniel Höxtermann b19b6938a8 docs: Fix relative links in Markdown
Relative links within this repository allow for easier navigation to
the corresponding file / directory in the current commit / for the
selected version.

Link text was slightly changed / fixed in
- docs/Unit-Test-Advice.md
- docs/how-to/how-to-run-docker-with-kata.md

Fixes #3045

Signed-off-by: Daniel Höxtermann <daniel@hxtm.dev>
2022-02-11 13:49:42 +01:00

873 B

Kata Containers with virtio-fs

Introduction

Container deployments utilize explicit or implicit file sharing between host filesystem and containers. From a trust perspective, avoiding a shared file-system between the trusted host and untrusted container is recommended. This is not always feasible. In Kata Containers, block-based volumes are preferred as they allow usage of either device pass through or virtio-blk for access within the virtual machine.

As of the 2.0 release of Kata Containers, virtio-fs is the default filesystem sharing mechanism.

virtio-fs support works out of the box for cloud-hypervisor and qemu, when Kata Containers is deployed using kata-deploy. Learn more about kata-deploy and how to use kata-deploy in Kubernetes here.