- container: on cleanup, rm container directory for mounts path - backport: bindmount fixes - [backport] runtime: increase dial timeout - kata-deploy: Use the correct image for 2.0.2 release - [backport] shimv2: return the hypervisor's pid as the container pid - runtime: clh-config: add runtime hooks to the clh toml - runtime: cpuset: when creating container, don't pass cpuset details - [backport] runtime: Fix missing 'name' field on containerd-shim-v2 logs - [backport] Fixup systemd cgroup handling - Backports stable 2.0 - [backport] Fix Snap CIac9f838
container: on cleanup, rm container directory for mounts path2c1b957
runtime: remove unused functionsdfe5ef3
tools: fix missing SPDX license header50aa89f
runtime: fix virtiofsd RO volume sharing57aa746
runtime: mount shared mountpoint readonlyce2798b
runtime: readonly mounts should be readonly bindmount on the hostb7208b3
runtime: increase dial timeouta649d33
kata-deploy: Use the correct imaged87076e
runtime: return hypervisor Pid in TaskExit event2dd859b
shimv2: return the hypervisor's pid as the container pidc7db337
versions: Use release-1.18 (commit ee9128444bec10)72af86f
runtime: Fix missing 'name' field on containerd-shim-v2 logs95b2cad
clh: Use vanilla kernel.506f4f2
cgroups: Add systemd detection when creating cgroup managera3e35e7
cgroups: remove unused SystemdCgroup variable and accessor/mutatorsfdf69ab
kernel: ACPI: Always build evged for stable kernel56b94e2
agent: set edition = "2018" in .rustfmt.toml to fix rustfmt about async fn0533bee
packaging: add missing SPDX headers2114576
docs: fix fluentbit logfmt parser linkbcd8fd5
versions: Update cloud-hypervisor to release v0.12.06fe3f33
ci: default branch has renamed to main3f3a253
agent: Agent invokes OCI hooks with wrong PIDfc72d39
release: Rename runtime-release-notes to release-notesef4ebfb
release: We're not compatible with Docker.336b806
rustjail: fix blkio conversiondd3c5fc
kata-deploy: Ensure CRI-O uses the VM runtime type93bd2e4
kata-deploy: Move the containerd workarounds to their own functions7eb882a
kata-deploy: Update README to reflect the current distributed artifactsa60cf37
snap: fix kernel setupca64387
Agent: OCI hooks return malformed json32feb10
runtime: cpuset: when creating container, don't pass cpuset details3c618a6
agent: Remove bogus check from list_interfaces() unit test7c888b3
osbuilder: Fix USE_DOCKER on s390xcf81d40
ci: snap: run snap CI on every pull request79ed33a
snap: fix kernel setupf1cea9a
ci: snap: build targets that not need sudo first4f802cc
ci: snap: define proxy variablesdda4279
kernel: Don't fail if "experimental" dir doesn't exist5888971
packaging: Fix vmlinux kernel install on s390xca28ca4
qemu: Add security fixes for CVE-2020-3551750ad323
agent: Build for glibc on s390xf8314be
docs: add katacontainers end-to-end arch image99d9a24
kata-monitor: set buildmode to exe to avoid build failing0091b89
osbuilder: Enforcing LIBC=gnu to rootfs build for ppc64le9da2707
kernel: Updates to kernel config for ppc64le2a0ff0b
osbuilder: Add "Agent init" on terms glossaryfa581d3
agent: add secure_join to prevent softlink escapea3967e9
osbuilder: Fix urls to repositories272d39b
osbuilder: Use Fedora and CentOS registries7a86c2e
shimv2: log a warning and continue on post-start hook failure5096bd6
shimv2: log a warning and continue on post-stop hook failure3fe59a9
snap: Don't release Kata Alpha/RC in snap store61fa4a3
rustjail: fix the issue of missing destroy contaienr cgroups856af1a
runtime: cpuset: when creating container, don't pass cpuset details74b5874
runtime: clh-config: add runtime hooks to the clh toml Signed-off-by: Peng Tao <bergwolf@hyper.sh>

Kata Containers
Welcome to Kata Containers!
The purpose of this repository is to act as a "top level" site for the project. Specifically it is used:
-
To provide a list of the various other Kata Containers repositories, along with a brief explanation of their purpose.
-
To provide a general area for Raising Issues.
Raising issues
This repository is used for raising issues:
-
That might affect multiple code repositories.
-
Where the raiser is unsure which repositories are affected.
Note:
- If an issue affects only a single component, it should be raised in that components repository.
Kata Containers repositories
CI
The CI repository stores the Continuous Integration (CI) system configuration information.
Community
The Community repository is the first place to go if you want to use or contribute to the project.
Code Repositories
Kata Containers-developed components
Agent
The kata-agent
runs inside the
virtual machine and sets up the container environment.
KSM throttler
The kata-ksm-throttler
is an optional utility that monitors containers and deduplicates memory to
maximize container density on a host.
Runtime
The kata-runtime
is usually
invoked by a container manager and provides high-level verbs to manage
containers.
Trace forwarder
The kata-trace-forwarder
is a component only used
when tracing the agent process.
Additional
Kernel
The hypervisor uses a Linux* kernel to boot the guest image.
Documentation
The docs directory holds documentation common to all code components.
Packaging
We use the packaging to create packages for the system components including rootfs and kernel images.
Test code
The tests repository hosts all test code except the unit testing code (which is kept in the same repository as the component it tests).
Utilities
OS builder
The osbuilder tool can create a rootfs and a "mini O/S" image. This image is used by the hypervisor to setup the environment before switching to the workload.
kata-agent-ctl
kata-agent-ctl
is a low-level test tool for
interacting with the agent.
Web content
The www.katacontainers.io repository contains all sources for the https://www.katacontainers.io site.
Credits
Kata Containers uses packagecloud for package hosting.