mirror of
https://github.com/kata-containers/kata-containers.git
synced 2025-09-16 22:39:01 +00:00
8873ddab9e
- kata-monitor: add index page - clh: Refine the usage of guest console and kernel parameters with Cloud Hypervisor - agent: exec should inherit container process capabilities - GitHubActions: fix invalid format of require-pr-porting-labels.yaml - agent: flush root span before process finish - Extend PCI submodules to represent non-zero functions and addresses - packaging/kernel: Add CONFIG_PCI_MMCONFIG to x86 guest kernel configuration - runtime: don't start shim management server in tests - qemu: use GitLab repos instead of qemu.org - runtime: optimize code for managing temp users for rootless mode - Agent configuration file and API restriction - Delete file virtcontainers-setup.sh - vendor: Update containerd to v1.5.7 - runtime: Optimize func noNeedForOutput and add test cases - runtime: Fix !x86 static checks - #2676: fixing centos gpg key url for ppc64le - Pass the host route IP family to the guest - cmd: get return value for setCPUtype - packaging: Configure QEMU with --enable-pie - clh: Enable guest userland output - cmd: Fix mismatched types in testModuleData - runtime: update .gitignore to ignore monitor_address file - runtime: fix the make check-go-static command error - virtcontainers: clean up useless code - Remove forced PCI rescans from agent - kernel: Enable SGX in experimental kernel. - runtime: fix nil reference in cleanup rootless user - qemu: prepare to upgrade qemu version to 6.1.0 for arm - kata-monitor (minor) improvements - virtcontainers: Fix incorrect scripts path - runtime: clear virtcontainers cgroup duplicated function - Kata monitor: cache improvements - virtiofs: fix error report in TestVirtiofsdStart when go test running176dee6fagent: exec should inherit container process capabilities7b2bfd4evirtcontainers: clh: Use 'quiet' as the default kernel parameter3e24e46cvirtcontainers: clh: Turn-off serial and virtio-console by default2d7b65e8agent: flush root span before process finish5c77cc2cruntime: don't start shim management server in tests72044180agent/device: Return PCI address from wait_for_pci_device()e50b05d9agent/pci: Add type to represent PCI addresses8528157bagent/pci: Extend Slot type to represent PCI function as wellbf8f582cruntime: optimize code for managing temp users for rootless modea9c2a4baGitHubActions: fix invalid format of require-pr-porting-labels.yamlc4236cb2packaging/kernel: Add CONFIG_PCI_MMCONFIG to x86 guest kernel configuration08360c98agent: Add an agent configutation file example8a4e69d2agent: rpc: Return UNIMPLEMENTED for not allowed endpoints0ea2e3afagent: config: Allow for building the configuration from a file63539dc9agent: config: Add allowed endpointsa953fea3agent: config: Simplify configuration creationb888edc2agent: config: Implement Default7eac2ec7protection: add confidential compute frame for arm8acfc154check: fix typecheck failure in qemu_arm64_test.go5b02d54evirtcontainers: fix lint failure on ppc64leff9728f0virtcontainers: nolint guestProtection5c138c8fruntime: Fix field alignment on s390x191d0016vendor: Update containerd to v1.5.7f7f6bd01kata-monitor: add index pagea44cde7eagent: netlink: Use the grpc IP family field when updating the route71ce6cferuntime: Pass the route IP family to the agent99450bd1agent: protos: Add a Family field to the Route payloadf85fe702runtime: vendor: Bump the netlink package dependencye439cec7cmd: fix field alignment on ppc64lee5159ea7cmd: get return value for setCPUtype2ce8d426clh: Suppress hypervisor output to make guest output visiblecd1064b1packaging: Configure QEMU with --enable-pie762922a5runtime: delete func ConstraintsToVCPUs4f485430runtime: delete virtcontainers-setup.sh80f6b977osbuilder: fixing centos gpg key url for ppc64lebb99bfb4runtime: fix the make check-go-static command error870771d7runtime: update .gitignore to ignore monitor_address file18bff584runtime: Optimize func noNeedForOutput and add test casese5fe53f0runtime: fix nil reference in cleanup rootless user2304a596runtime: set the sandbox storage path static315295e0runtime: rename GetSanboxesStoragePath() --> GetSandboxesStoragePath()13e65f2ecmd: Fix mismatched types in testModuleDatada42cbc0actions: Build experimental kernel on kata-deploy push actiondffc5092kernel: Enable SGX in experimental kernel.ff6a677dkernel-build: Enable multiple config types.90046964experimental-kernel: bump 5.13.101fbb7304build: kata-deploy kernel experimental907459c1agent/device: Don't force PCI rescans75f426ddagent: Simplify do_add_swap()aad1a873runtime/device: Give the agent information about VFIO devicesebd7b618runtime: Don't repeat GetDeviceByID between appendDevices() and append*()ad45c52fruntime/device: Record guest PCI path for VFIO devices5c2af3e3runtime/device: Refactor hotplugVFIODevice() to have common exit path8bc71105agent/device: Add device type for VFIO devicesf7a27075agent: Move driver type constants into device.rs5b1eb08bagent/uevent: Improve logging of wait_for_uevent()cf36fd87runtime: Fix some leftover go fmt errors6d94957akernel: reduce alignment size of memory hotplug to 128M48090f62qemu: disable plug on arm64 when pie is added57e3712dvirtiofs: fix error report in TestVirtiofsdStart when go test running8b0bc1f4kata-monitor: bump version to 0.2.0bfb556d5kata-monitor: refresh kata sandbox list on fs events0e854f3bkata-monitor: improve detection of kata workloads80463b44qemu: use GitLab repos instead of qemu.org3b0c4bf9runtime: clear virtcontainers cgroup duplicated functionafad910dkata-monitor: add getSandboxFS()e38686f7runtime: add GetSandboxesStoragePath()245a12bbkata-monitor: improve sandbox cachingfc067d61kata-monitor: warn when unable to retrive the lower level runtime53ec4df9kata-monitor: minor fixes47516988virtcontainers: Fix incorrect scripts path814cea96virtcontainers: clean up useless code Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
Kata Containers
Welcome to Kata Containers!
This repository is the home of the Kata Containers code for the 2.0 and newer releases.
If you want to learn about Kata Containers, visit the main Kata Containers website.
Introduction
Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel and perform like containers, but provide the workload isolation and security advantages of VMs.
Getting started
See the installation documentation.
Documentation
See the official documentation (including installation guides, the developer guide, design documents and more).
Community
To learn more about the project, its community and governance, see the community repository. This is the first place to go if you wish to contribute to the project.
Getting help
See the community section for ways to contact us.
Raising issues
Please raise an issue in this repository.
Note: If you are reporting a security issue, please follow the vulnerability reporting process
Developers
Components
Main components
The table below lists the core parts of the project:
| Component | Type | Description |
|---|---|---|
| runtime | core | Main component run by a container manager and providing a containerd shimv2 runtime implementation. |
| agent | core | Management process running inside the virtual machine / POD that sets up the container environment. |
| documentation | documentation | Documentation common to all components (such as design and install documentation). |
| tests | tests | Excludes unit tests which live with the main code. |
Additional components
The table below lists the remaining parts of the project:
| Component | Type | Description |
|---|---|---|
| packaging | infrastructure | Scripts and metadata for producing packaged binaries (components, hypervisors, kernel and rootfs). |
| kernel | kernel | Linux kernel used by the hypervisor to boot the guest image. Patches are stored here. |
| osbuilder | infrastructure | Tool to create "mini O/S" rootfs and initrd images and kernel for the hypervisor. |
agent-ctl |
utility | Tool that provides low-level access for testing the agent. |
trace-forwarder |
utility | Agent tracing helper. |
ci |
CI | Continuous Integration configuration files and scripts. |
katacontainers.io |
Source for the katacontainers.io site. |
Packaging and releases
Kata Containers is now available natively for most distributions. However, packaging scripts and metadata are still used to generate snap and GitHub releases. See the components section for further details.