mirror of https://github.com/kata-containers/kata-containers.git synced 2026-07-04 16:35:54 +00:00

Files

Cameron Baird 730307f32c factory: Default to normal sandbox boot path when factory init not done

The behavior we had before was that, for a starting k8s pod,
it sees enable_template=true and therefore:

1. Tries NewFactory with fetchOnly=true
2. When that fails (because template.Fetch fails to find the artifacts,
	we retry with fetchOnly=false. This creates a direct factory
	which creates the template from scratch
	(hence we pay a full pod sandbox boot time here)
	and then restores from that. Hence the boot times
	are strictly worse on this path.

Now, even when enable_template=true, we don't try to force a direct factory.
Instead we just revert to the standard sandbox boot path.

Signed-off-by: Cameron Baird <cameronbaird@microsoft.com>

2026-06-19 18:00:02 +00:00

containerd-shim-v2

runtime: Fix concurrent map read/write panic in Wait()

2026-04-13 21:14:28 +02:00

device

runtime: Propagate block-mode device read-only flag to the VMM

2026-06-15 23:18:36 +02:00

direct-volume

runtime: Support trusted ephemeral data storage

2026-03-09 14:52:17 -05:00

govmm

Merge pull request #12436 from mythi/tdx-updates-2026-3