- agent: add cgroup v2 support - runtime: Don't use hard-coded crio config - Generate version file with more information in it. - ci: replace spaces by tabs as indent - fix issues with short life time container/exec processes - action: Add issue to project and move to "In progress" on linked PR - virtiofsd: fix typo in test code - agent: setup DNS for guest - ci: run agent test under root user - docs: update sandbox apis doc for kata 2.0-dev - rustjail: fix the issue of invalid cgroup_parent path - osbuilder: update usage of RUST_AGENT variable - agent: add retry between doing CPU hotplug and make it online. - kernel: update to the latest LTS kernel 5.4.60 - osbuilder: fix rootfs build on ppc64le - kernel: Enabling PTP clock support in kernel - rootfs-builder: fix unbootable dracut-based initramfs on Fedora - [fwport-2.0] osbuilder/image-builder: disable reflink - virtcontainers: Add unit test for utils/compare.go - reimplement error handling: use anyhow - docs: update yaml file link for prometheus deployment - docs: Update the doc for minikube installing kata - trivial: Fix spelling of "privilege" - [port] image-builder: disable reflink - runtime: qemu: reduce boot time and memory footprint - snap for kata 2.0 - runtime: Fix typo in hotplugVFIODevice() - drivers: Correct isPCIeDevice logic - docs: Add documentation for VFIO-AP passthrough - [fwport-2.0] qemu: update build dependencies to support QEMU 5 - kata-deploy: add ACRN runtime to Docker configuration - runtime: Add support for VFIO-AP pass-through - agent: update Cargo files authors - packaging: adjustment for 2.0 branch - Fix epthemeral mount issue - clh: Disable the 'seccomp' option temporarily - Subject: [PATCH] qemu: add annotations for iommu_platform for s390x v… - Foward-port :virtiofs: Update virtiofs docs - Forward-port kata deploy conf - initrd: Increase Alpine Version to 3.12 - [forward port]: osbuilder: Update yq - tools: Add Unix socket support to agentl-ctl - agent: Add target optimize for Makefile - server: Allow address to be specified - rustjail: default permission of device node should be 666 - packaging: Add VFIO-AP fragment for s390x - console: Fix crash if debug console disabled - agent: support guest hooks - virtcontainers: Add to utils unit tests - sandbox: Disconnect from agent after VM shutdown - runtime: Re-vendor GoVMM for hotplugging IBM Adjunct Processor (AP) devices over VFIO - clh: Port cloud-hypervisor related changes from kata-runtime - docs: remove outdated dependencies from agent docs - [forward-port] packaging: s390x kernel config fragments - action: Fix subsystem check - osbuilder : ppc64le support for rust agent based rootfs/initrd image - packaging: add usage instructions for -a (arch_target) option - rustjail: add the "HOME" env for process - rustjail: fix the issue of missing set propagation for bind mount - agent: add unit tests for rustjail/process.rs - ci: Update experimental kernel tag to enable CLH CI - virtcontainers: fix outdated example code in api document - agent: setup the "lo" interface run agent as init - Fix commit-message-check and do some updates about github actions - virtcontainers: cleanup codes, delete not used APIs - Use github action to do Fixes/Length/Subsystem check for commit message - docs: Remove installation of proxy - virtcontainers: Add unit test for types/container.go - shimv2: fix the issue of close IO stream - docs: Update contributions section in limitations document kata 2.0 - Fix fd leakage in execute_hook - Kata 2.0-dev port of #2867 (NoReboot Knob) - qemu: remove multidev in fsdev parameter on arm64 - Makefile: add CLHCMD in arm64-options.mk - runtime: change un-structured log to structured log - virtcontainers: Add function to capabilities test - virtcontainers: Expand unit test coverage for asset615ffb93
agent: Generate version file with more adequate information in it.f13ca94e
agent: Fix setting of versionc823b4cd
agent: Make build remove generated files on clean357d7885
ci: replace spaces by tabs as indent22876b2d
agent: allow multiple wait on the same process295f5100
runtime: Don't use hard-coded crio config6487044f
shimv2: trust cached status when deleting containers325a4f86
shimv2: do not kill a stopped exec processd7c77b69
runtime: write oom file to notify CRI-O tha OOM occurred15065e44
agent: add cgroup v2 support2ce97ec6
virtiofsd: fix typo in test codeb081f26a
action: Add issue to project and move to "In progress" on linked PR6520320f
agent: setup DNS for guest90e0dc88
ci: run agent test under root userc133a456
rustjail: fix the issue of invalid cgroup_parent path20a084ae
docs: update sandbox apis doc for kata 2.0-devd86e7467
agent: add retry between doing CPU hotplug and make it online.ebd3f316
osbuilder: fix rootfs build on ppc64le2dfb8bc5
rootfs-builder: fix unbootable dracut-based initramfs on Fedora2019f00e
docs: update yaml file link for prometheus deployment0be02a8f
runtime: qemu: reduce boot time and memory footprint8b07bc2c
agent: fix unit tests - remove rustjail::errors6c96d666
agent: update Cargo toml and lock46d7b9b8
agent/rustjail: remove rustjail::errorsfbb79739
agent: Use anyhow for error handling33759af5
agent: Add anyhow dependencyc192446a
agent/rustjail: Use anyhow for error handling2e3e2ce1
agent/rustjail/capabilities: Use anyhow for error handling6a4c9b14
agent/rustjail/cgroups: Use anyhow for error handling359286a8
agent/rustjail: Add anyhow dependencydd60e56f
trivial: Fix spelling of "privilege"cb999375
runtime: Fix typo in hotplugVFIODevice()0d198f93
virtcontainers: Add unit test for utils/compare.go1de9bc0f
snap: reimplement snapcraft.yaml to support kata 2.085642c32
snap: move snapcraft.yaml to the right place92dfa463
drivers: Correct isPCIeDevice logicb4748280
kernel: Remove arm patches for ptp82efd2f2
kernel: Enabling PTP clock support in kernel8666e01e
qemu/default-configs: update default-config for QEMU 52d12da8e
qemu: update default-configscf3ac9f7
docs: Add documentation for VFIO-AP passthrough11e8a494
docs: update the docs for minikube installing kata517dda02
kernel: update to the latest LTS kernel 5.4.60ae98ea45
obs-packaging: fix wait for obsf5b71d34
qemu: update build dependencies to support QEMU 5fcd29a28
osbuilder/image-builder: disable reflinkdae6c7d9
osbuilder: update usage of RUST_AGENT variable1236e224
runtime: Add support for VFIO-AP pass-through65970d38
osbuilder: install-yq should not print on successc624fa74
osbuilder: install musl for aarch64b24f2cb9
gitignore: ignore vscode directorycf1b72d6
osbuilder: install rust before sourcing cargo env7b5ab586
packaging: fix kata-deploy yaml path76c18aa3
osbuilder: fix alpine agent build5216815d
packaging: make build-kernel.sh work for 2.0aa3fb4db
packaging: make kata-deploy work for 2.086a6e0b3
packaging: fix build image scriptsceebd06b
release: add 2.0 release actionsdadab1fe
osbuilder: build rust agent by default1bd58259
packaging: tag releases on kata-containers repof56f68bf
obs-packaging: adjust for building on kata-containers repo60245a83
agent: update Cargo files authors544219d9
mount: fix the issue of epthemeral storage handlerfd8f3ee9
mount: add much more error info using chain_err10b1deb2
tools: Add Unix socket support to agentl-ctlf5598a1b
Subject: [PATCH] qemu: add annotations for iommu_platformf879acd6
scripts: Foward port osbuilder scripts to update yq7be95b15
tools: Simplify error handling in agent-ctl5b0e6f37
kata-deploy: add ACRN runtime to Docker configurationadf9ecc5
initrd: Increase Alpine Version to 3.1232b86a8d
agent: Add target optimize for Makefile26506d83
virtiofs: Update virtiofs docsbee17d1c
kata-deploy: Add containerd configuration to support kata annotations.219f93ff
kata-deploy: Add default privileged_without_host_devices4b62fc16
clh: Disable the 'seccomp' option temporarilyf7ff6d32
image-builder: disable reflink0a9b8e0a
rustjail: default permission of device node should be 66681644003
server: Allow address to be specifiedbb30759e
agent: add guest hooks UT095ebb8c
agent: fix OCI hook handling03a4d107
agent: support guest hookse7bfeb41
agent: construct container bundle in tmpfs location2ee40027
packaging: Add VFIO-AP fragment for s390x4c30b255
runtime: Re-vendor GoVMM for VFIO-AP support282bff9f
sandbox: Disconnect from agent after VM shutdown9f1a3d15
kernel: add s390x fragmentf1350616
kernel: config CONFIG_GENERIC_MSI_IRQ_DOMAINb67325c3
kernel: add missing configs454dd854
kernel: config CONFIG_ PARAVIRT62b45064
kernel: config CONFIG_NO_HZ_FULL6dca74ba
kernel: moved acpi hotplug config7c85decc
kernel: config CONFIG_PCI_MSI_IRQ_DOMAINefe51b29
kernel: fragment for pmem08d046d9
kernel: config CONFIG_HAVE_NET_DSA7b49fa12
kernel: fragments not supported on s390xccfb73cb
agent/agent-ctl: update Cargo.lockfd13c93c
virtcontainers: Add msg to existing utils unit testsc3fc09b9
virtcontainers: Add to utils unit tests96582556
docs: remove outdated dependencies from agent docsd12f920b
console: Fix crash if debug console disabled572de288
sandbox: Remove unnecessary threadd5fbba3b
main: Remove commented out and redundant code1b2fe4a5
agent: Refactor main functionbac79eee
main: Display config in announcee2952b53
main: Simplify version handlingcfa35a90
action: Fix subsystem check39b53f44
clh: enable build using Podman04b156f6
qemu-virtiofs: Update to qemu 5.0 + virtiofs + dax3ec05a9f
clh: Add support to unplug block devices45e32e1b
clh: Set 'Id' explicitly while hotplugging block device895959d0
clh: Provide cpu topology to API31594387
clh: opeanapi: update api for cloud hypervisor89836cd3
versions: cloud-hypervisor 0.9.08d5a60ac
versions: Update qemu-virtiofs to 5.076a64667
clh: Remove the use of deprecated '--memory file=' parameterbfd78104
packaging: add usage instructions for -a (arch_target) optionecaa1f9e
clh: Enable versions and kernel tag to enable CLH CI for kata 2.064b06944
ppc64le: Support for rust agent based rootfs2511cabb
virtcontainers: fix outdated example code in api document5c7f0016
rustjail: add the "HOME" env for process58dfd503
rustjail: fix the issue of missing set propagation for bind mounte79c5727
agent: setup the "lo" interface run agent as initd0a45637
agent: add unit tests for rustjail/process.rs2889af77
actions: Run subject-line-length check even if the previous checks failed9f0fef5a
actions: Add commit-body-missing checkd81af48a
actions: Do not limit the length of single word in commit body8c46a41b
actions: Fix subsystem checking in github-action2466ac73
actions: Fix 'Fixes checking' problem by update dependent actione7d3ba12
virtcontainers: cleanup codes, delete not used APIs998a6343
docs: Remove installation of proxyc305911d
actions: Use github action to do Fixes/Length/Subsystem checkbd78ccaf
shimv2: fix the issue of close IO stream06834931
agent: Fix fd leaks in execute_hookb03cd1bf
docs: Update contributions section in limitations document kata 2.0c15ef219
qemu: Set govmmQemu NoReboot config Knob57269262
qemu: Add test for qemuConfig Knobs5010e3a3
vendor: update govmm61d133f9
runtime: change un-structured log to structured logf24ad25d
virtcontainers: Add unit test for types/container.go1637e9d3
qemu: remove multidev in qemu/fsdev parameter on arm64b61c9ca2
Makefile: add CLHCMD in arm64-options.mke1a79e69
virtcontainers: Add function to capabilities testd1d5c69b
virtcontainers: Expand unit test coverage for asset Signed-off-by: Peng Tao <bergwolf@hyper.sh>

Kata Containers
Welcome to Kata Containers!
The purpose of this repository is to act as a "top level" site for the project. Specifically it is used:
-
To provide a list of the various other Kata Containers repositories, along with a brief explanation of their purpose.
-
To provide a general area for Raising Issues.
Raising issues
This repository is used for raising issues:
-
That might affect multiple code repositories.
-
Where the raiser is unsure which repositories are affected.
Note:
- If an issue affects only a single component, it should be raised in that components repository.
Kata Containers repositories
CI
The CI repository stores the Continuous Integration (CI) system configuration information.
Community
The Community repository is the first place to go if you want to use or contribute to the project.
Code Repositories
Kata Containers-developed components
Agent
The kata-agent
runs inside the
virtual machine and sets up the container environment.
KSM throttler
The kata-ksm-throttler
is an optional utility that monitors containers and deduplicates memory to
maximize container density on a host.
Runtime
The kata-runtime
is usually
invoked by a container manager and provides high-level verbs to manage
containers.
Trace forwarder
The kata-trace-forwarder
is a component only used
when tracing the agent process.
Additional
Hypervisor
The qemu
hypervisor is used to
create virtual machines for hosting the containers.
Kernel
The hypervisor uses a Linux* kernel to boot the guest image.
Documentation
The docs directory holds documentation common to all code components.
Packaging
We use the packaging to create packages for the system components including rootfs and kernel images.
Test code
The tests repository hosts all test code except the unit testing code (which is kept in the same repository as the component it tests).
Utilities
OS builder
The osbuilder tool can create a rootfs and a "mini O/S" image. This image is used by the hypervisor to setup the environment before switching to the workload.
kata-agent-ctl
kata-agent-ctl
is a low-level test tool for
interacting with the agent.
Web content
The www.katacontainers.io repository contains all sources for the https://www.katacontainers.io site.
Credits
Kata Containers uses packagecloud for package hosting.