kata-containers Changes

Shortlog

ea74df1 release: Kata Containers 3.0.1
c712057 release: Adapt kata-deploy for 3.0.1
bc5bbfa versions: update nydusd version
0afcc57 package: add nydus to release artifacts
bd797ed kata-deploy: Fix the pod of kata deploy starts to occur an error
9cf1af8 runtime: clh: Re-generate the client code
4d6ca76 versions: Upgrade to Cloud Hypervisor v28.0
719017d clh: return faster with dead clh process from isClhRunning
569ecdb clh: fast exit from isClhRunning if the process was stopped
fa8a0ad clh: don't try to stop clh multiple times
8fbf862 cloud-hypervisor: Fix GetThreadIDs function
9141acd versions: Update Cloud Hypervisor to b4e39427080
9a0ab92 runtime: clh: Use the new API to boot with TDX firmware (td-shim)
f3eac35 runtime: clh: Re-generate the client code
8a7e0ef versions: Upgrade to Cloud Hypervisor v27.0
9cf1af8 runtime: clh: Re-generate the client code
4d6ca76 versions: Upgrade to Cloud Hypervisor v28.0
719017d clh: return faster with dead clh process from isClhRunning
569ecdb clh: fast exit from isClhRunning if the process was stopped
fa8a0ad clh: don't try to stop clh multiple times
8fbf862 cloud-hypervisor: Fix GetThreadIDs function
9141acd versions: Update Cloud Hypervisor to b4e39427080
9a0ab92 runtime: clh: Use the new API to boot with TDX firmware (td-shim)
f3eac35 runtime: clh: Re-generate the client code
8a7e0ef versions: Upgrade to Cloud Hypervisor v27.0
a152f60 runk: Ignore an error when calling kill cmd with --all option
50bf443 log-parser: Simplify check
74791ed runtime: Fix gofmt issues
778ebb6 golang: Stop using io/ioutils
b5661e9 versions: Update golangci-lint
88c13b6 versions: bump containerd version
b8ce291 build: update golang version to 1.19.2
f5e5ca4 github: Parallelise static checks
eaa7ab7 snap: Unbreak docker install
8d2fd24 snap: Use metadata for dependencies
ab83ab6 snap: Build virtiofsd using the kata-deploy scripts
1772df5 snap: Create a task for installing docker
2e49586 virtiofsd: Build inside a container

Compatibility with CRI-O

Kata Containers 3.0.1 is compatible with CRI-O

Compatibility with containerd

Kata Containers 3.0.1 is compatible with contaienrd v1.6.8

OCI Runtime Specification

Kata Containers 3.0.1 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 3.0.1 is compatible with Kubernetes 1.23.1-00

Libseccomp Notices

The kata-agent binaries inside the Kata Containers images provided with this release are
statically linked with the following GNU LGPL-2.1 licensed libseccomp library.

• libseccomp

The kata-agent uses the libseccomp v2.5.4 which is not modified from the upstream version.
However, in order to comply with the LGPL-2.1 (§6(a)), we attach the complete source code for the library.

If you want to use the kata-agent which is not statically linked with the library, you can build
a custom kata-agent that does not use the library from sources.
For the details, please check the developer guide.

Kata Linux Containers image

Agent version: 3.0.1

Default Image Guest OS:

description: |
Root filesystem disk image used to boot the guest virtual
machine.
url: "https://github.com/kata-containers/kata-containers/tools/osbuilder"
architecture:
aarch64:
name: "ubuntu"
version: "latest"
ppc64le:
name: "ubuntu"
version: "latest"
s390x:
name: "ubuntu"
version: "latest"
x86_64:
name: "clearlinux"
version: "latest"
meta:
image-type: "clearlinux"

Default Initrd Guest OS:

description: |
Root filesystem initrd used to boot the guest virtual
machine.
url: "https://github.com/kata-containers/kata-containers/tools/osbuilder"
architecture:
aarch64:
name: "alpine"
version: "3.15"

Do not use Alpine on ppc64le & s390x, the agent cannot use musl because

there is no such Rust target

ppc64le:
name: "ubuntu"
version: "20.04"
s390x:
name: "ubuntu"
version: "20.04"
x86_64:
name: "alpine"
version: "3.15"

Kata Linux Containers Kernel

Kata Containers 3.0.1 suggest to use the Linux kernel v5.19.2
See the kernel suggested Guest Kernel patches
See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions.

Issues & limitations

More information Limitations