mirror of https://github.com/kata-containers/kata-containers.git synced 2026-07-10 15:56:47 +00:00

Files

stevenhorsman 54f705af69 runtime-rs: bump hyper 0.14.20 → 1.10.1 and migrate to hyper 1.x API

Update hyper to 1.10.1 and hyperlocal to 0.9.1 (required for hyper 1.x
compatibility). Add http-body-util 0.1, hyper-util 0.1 and bytes 1.0 as
workspace dependencies.

API changes applied across shim-interface, runtimes, hypervisor
(firecracker) and resource (nydus_client) crates:

- hyper::Body → http_body_util::Full<Bytes> for outgoing bodies
- hyper::body::Incoming for incoming server request bodies
- hyper::Client → hyper_util::client::legacy::Client
- hyper::Server + make_service_fn → TcpListener loop +
  hyper_util::server::conn::auto::Builder (kata-ctl http_server)
- hyper::server::conn::Http → hyper::server::conn::http1::Builder
  with hyper_util::rt::TokioIo wrapper (runtimes shim_mgmt server)
- hyper::body::to_bytes() → BodyExt::collect().await?.to_bytes()
- Client::unix() now requires explicit body type parameter Full<Bytes>
- Drop removed 'stream' feature flag from hyper dependency declarations

Generated-by: IBM Bob
Signed-off-by: stevenhorsman <steven@uk.ibm.com>

2026-07-01 09:03:21 -07:00

kata-sys-util

deps: update thiserror to 2.0.18

2026-06-29 09:36:34 +01:00

kata-types

runtime-rs: Remove hotplug_vfio_on_root_bus

2026-07-01 04:15:26 +02:00

logging

libs: Fix uninlined_format_args

2025-12-22 19:49:45 +00:00

mem-agent

libs: Update mem-agent to use nix workspace version

2026-06-19 03:49:16 -07:00

pod-resources-rs

runtime-rs: Fix warnings in rust runtime

2026-05-08 14:56:00 +08:00

protocols

protocols: Fix shellcheck issues in update-generated-proto.sh

2026-04-24 08:14:07 +02:00

runtime-spec

libs: Remove unused crates

2026-02-26 09:37:46 +00:00

safe-path

docs: Update libs README with complete library documentation

2026-03-29 19:17:03 +02:00

shim-interface

runtime-rs: bump hyper 0.14.20 → 1.10.1 and migrate to hyper 1.x API

2026-07-01 09:03:21 -07:00

test-utils

lib: Use workspace nix version

2026-06-19 03:49:16 -07:00

.gitignore

libs: Ignore Cargo.lock in libs workspace

2025-07-10 09:31:45 +00:00

Makefile

vendor: Remove make vendor across the repo

2026-05-06 09:49:52 +02:00

README.md

docs: Update libs README with complete library documentation

2026-03-29 19:17:03 +02:00

README.md

Kata Containers Library Crates

The src/libs directory hosts library crates shared by multiple Kata Containers components. These libraries provide common utilities, data types, and protocol definitions to facilitate development and maintain consistency across the project.

Library Crates

Library	Description
kata-types	Constants, data types, and configuration structures shared by Kata Containers components
kata-sys-util	System utilities: CPU, device, filesystem, hooks, K8s, mount, netns, NUMA, PCI, protection, spec validation
protocols	ttrpc protocol definitions for agent, health, remote, CSI, OCI, confidential data hub
runtime-spec	OCI runtime spec data structures and constants
shim-interface	Shim management interface with RESTful API over Unix domain socket
logging	Slog-based logging with JSON output and systemd journal support
safe-path	Safe path resolution to prevent symlink and TOCTOU attacks
mem-agent	Memory management agent: memcg, compact, PSI monitoring
test-utils	Test macros for root/non-root privileges and KVM accessibility

Details

kata-types

Core types and configurations including:

Annotations for CRI-containerd, CRI-O, dockershim
Hypervisor configurations (QEMU, Cloud Hypervisor, Firecracker, Dragonball)
Agent and runtime configurations
Kubernetes-specific utilities

kata-sys-util

System-level utilities:

cpu: CPU information and affinity
device: Device management
fs: Filesystem operations
hooks: Hook execution
k8s: Kubernetes utilities
mount: Mount operations
netns: Network namespace handling
numa: NUMA topology
pcilibs: PCI device access
protection: Hardware protection features
spec: OCI spec loading
validate: Input validation

protocols

Generated ttrpc protocol bindings:

agent: Kata agent API
health: Health check service
remote: Remote hypervisor API
csi: Container storage interface
oci: OCI specifications
confidential_data_hub: Confidential computing support

Features: async for async ttrpc, with-serde for serde support.

runtime-spec

OCI runtime specification types:

ContainerState: Creating, Created, Running, Stopped, Paused
State: Container state with version, id, status, pid, bundle, annotations
Namespace constants: pid, network, mount, ipc, user, uts, cgroup

shim-interface

Shim management service interface:

RESTful API over Unix domain socket (/run/kata/<sid>/shim-monitor.sock)
MgmtClient for HTTP requests to shim management server
Sandbox ID resolution with prefix matching

logging

Slog-based logging framework:

JSON output to file or stdout
systemd journal support
Runtime log level filtering per component/subsystem
Async drain for thread safety

safe-path

Secure filesystem path handling:

scoped_join(): Safely join paths under a root directory
scoped_resolve(): Resolve paths constrained by root
PinnedPathBuf: TOCTOU-safe path reference
ScopedDirBuilder: Safe directory creation

mem-agent

Memory management for containers:

memcg: Memory cgroup configuration and monitoring
compact: Memory compaction control
psi: Pressure stall information monitoring
Async runtime with configurable policies

test-utils

Testing utilities:

skip_if_root!: Skip test if running as root
skip_if_not_root!: Skip test if not running as root
skip_if_kvm_unaccessable!: Skip test if KVM is unavailable
assert_result!: Assert expected vs actual results

License

All crates are licensed under Apache-2.0.