mirror of
https://github.com/kata-containers/kata-containers.git
synced 2026-07-25 14:18:54 +00:00
bc5ae6437d
Document operational requirements for using the EROFS snapshotter with Kata Containers. Call out that EROFS layer conversion can happen during CreateContainer, not only during image pull, so kubelet runtimeRequestTimeout may need to be increased for large images. Also document the kernel modules needed for EROFS and dm-verity, the erofs-utils version required by the configured mkfs options, and the distinction between host-side fs-verity and guest-visible dm-verity. Signed-off-by: Manuel Huber <manuelh@nvidia.com> Assisted-by: OpenAI <support@openai.com>
Howto Guides
Kubernetes Integration
- Run Kata containers with
crictl - How to use Kata Containers and Containerd
- How to use Kata Containers and containerd with Kubernetes
- How to use Kata Containers and CRI-O with Kubernetes
- Kata Containers and service mesh for Kubernetes
- How to import Kata Containers logs into Fluentd
Hypervisors Integration
Currently supported hypervisors with Kata Containers include:
-
qemu -
cloud-hypervisor -
firecrackerIn the case of
firecrackerthe use of a block devicesnapshotteris needed for the VM rootfs. Refer to the following guide for additional configuration steps:
Confidential Containers Policy
Advanced Topics
- How to use Kata Containers with virtio-fs
- Setting Sysctls with Kata
- What Is VMCache and How To Enable It
- What Is VM Templating and How To Enable It
- How to Use Template in runtime-rs
- Privileged Kata Containers
- How to load kernel modules in Kata Containers
- How to use Kata Containers with
virtio-mem - How to set sandbox Kata Containers configurations with pod annotations
- How to monitor Kata Containers in K8s
- How to use hotplug memory on arm64 in Kata Containers
- How to setup swap devices in guest kernel
- How to run rootless vmm
- How to run Docker with Kata Containers
- How to run Kata Containers with
nydus - How to run Kata Containers with AMD SEV-SNP
- How to run Kata Containers with IBM Secure Execution
- How to use EROFS to build rootfs in Kata Containers
- How to run Kata Containers with kinds of Block Volumes
- How to use the Kata Agent Policy
- How to pull images in the guest
- How to use mem-agent to decrease the memory usage of Kata container
- How to use seccomp with runtime-rs
- How to use passthroughfd-IO with runtime-rs and Dragonball
- How to size sandbox overhead in runtime-rs
- How to use EROFS snapshotter with Kata Containers
- How to use NUMA with Kata Containers