- agent: add cgroup v2 support - runtime: Don't use hard-coded crio config - Generate version file with more information in it. - ci: replace spaces by tabs as indent - fix issues with short life time container/exec processes - action: Add issue to project and move to "In progress" on linked PR - virtiofsd: fix typo in test code - agent: setup DNS for guest - ci: run agent test under root user - docs: update sandbox apis doc for kata 2.0-dev - rustjail: fix the issue of invalid cgroup_parent path - osbuilder: update usage of RUST_AGENT variable - agent: add retry between doing CPU hotplug and make it online. - kernel: update to the latest LTS kernel 5.4.60 - osbuilder: fix rootfs build on ppc64le - kernel: Enabling PTP clock support in kernel - rootfs-builder: fix unbootable dracut-based initramfs on Fedora - [fwport-2.0] osbuilder/image-builder: disable reflink - virtcontainers: Add unit test for utils/compare.go - reimplement error handling: use anyhow - docs: update yaml file link for prometheus deployment - docs: Update the doc for minikube installing kata - trivial: Fix spelling of "privilege" - [port] image-builder: disable reflink - runtime: qemu: reduce boot time and memory footprint - snap for kata 2.0 - runtime: Fix typo in hotplugVFIODevice() - drivers: Correct isPCIeDevice logic - docs: Add documentation for VFIO-AP passthrough - [fwport-2.0] qemu: update build dependencies to support QEMU 5 - kata-deploy: add ACRN runtime to Docker configuration - runtime: Add support for VFIO-AP pass-through - agent: update Cargo files authors - packaging: adjustment for 2.0 branch - Fix epthemeral mount issue - clh: Disable the 'seccomp' option temporarily - Subject: [PATCH] qemu: add annotations for iommu_platform for s390x v… - Foward-port :virtiofs: Update virtiofs docs - Forward-port kata deploy conf - initrd: Increase Alpine Version to 3.12 - [forward port]: osbuilder: Update yq - tools: Add Unix socket support to agentl-ctl - agent: Add target optimize for Makefile - server: Allow address to be specified - rustjail: default permission of device node should be 666 - packaging: Add VFIO-AP fragment for s390x - console: Fix crash if debug console disabled - agent: support guest hooks - virtcontainers: Add to utils unit tests - sandbox: Disconnect from agent after VM shutdown - runtime: Re-vendor GoVMM for hotplugging IBM Adjunct Processor (AP) devices over VFIO - clh: Port cloud-hypervisor related changes from kata-runtime - docs: remove outdated dependencies from agent docs - [forward-port] packaging: s390x kernel config fragments - action: Fix subsystem check - osbuilder : ppc64le support for rust agent based rootfs/initrd image - packaging: add usage instructions for -a (arch_target) option - rustjail: add the "HOME" env for process - rustjail: fix the issue of missing set propagation for bind mount - agent: add unit tests for rustjail/process.rs - ci: Update experimental kernel tag to enable CLH CI - virtcontainers: fix outdated example code in api document - agent: setup the "lo" interface run agent as init - Fix commit-message-check and do some updates about github actions - virtcontainers: cleanup codes, delete not used APIs - Use github action to do Fixes/Length/Subsystem check for commit message - docs: Remove installation of proxy - virtcontainers: Add unit test for types/container.go - shimv2: fix the issue of close IO stream - docs: Update contributions section in limitations document kata 2.0 - Fix fd leakage in execute_hook - Kata 2.0-dev port of #2867 (NoReboot Knob) - qemu: remove multidev in fsdev parameter on arm64 - Makefile: add CLHCMD in arm64-options.mk - runtime: change un-structured log to structured log - virtcontainers: Add function to capabilities test - virtcontainers: Expand unit test coverage for asset615ffb93agent: Generate version file with more adequate information in it.f13ca94eagent: Fix setting of versionc823b4cdagent: Make build remove generated files on clean357d7885ci: replace spaces by tabs as indent22876b2dagent: allow multiple wait on the same process295f5100runtime: Don't use hard-coded crio config6487044fshimv2: trust cached status when deleting containers325a4f86shimv2: do not kill a stopped exec processd7c77b69runtime: write oom file to notify CRI-O tha OOM occurred15065e44agent: add cgroup v2 support2ce97ec6virtiofsd: fix typo in test codeb081f26aaction: Add issue to project and move to "In progress" on linked PR6520320fagent: setup DNS for guest90e0dc88ci: run agent test under root userc133a456rustjail: fix the issue of invalid cgroup_parent path20a084aedocs: update sandbox apis doc for kata 2.0-devd86e7467agent: add retry between doing CPU hotplug and make it online.ebd3f316osbuilder: fix rootfs build on ppc64le2dfb8bc5rootfs-builder: fix unbootable dracut-based initramfs on Fedora2019f00edocs: update yaml file link for prometheus deployment0be02a8fruntime: qemu: reduce boot time and memory footprint8b07bc2cagent: fix unit tests - remove rustjail::errors6c96d666agent: update Cargo toml and lock46d7b9b8agent/rustjail: remove rustjail::errorsfbb79739agent: Use anyhow for error handling33759af5agent: Add anyhow dependencyc192446aagent/rustjail: Use anyhow for error handling2e3e2ce1agent/rustjail/capabilities: Use anyhow for error handling6a4c9b14agent/rustjail/cgroups: Use anyhow for error handling359286a8agent/rustjail: Add anyhow dependencydd60e56ftrivial: Fix spelling of "privilege"cb999375runtime: Fix typo in hotplugVFIODevice()0d198f93virtcontainers: Add unit test for utils/compare.go1de9bc0fsnap: reimplement snapcraft.yaml to support kata 2.085642c32snap: move snapcraft.yaml to the right place92dfa463drivers: Correct isPCIeDevice logicb4748280kernel: Remove arm patches for ptp82efd2f2kernel: Enabling PTP clock support in kernel8666e01eqemu/default-configs: update default-config for QEMU 52d12da8eqemu: update default-configscf3ac9f7docs: Add documentation for VFIO-AP passthrough11e8a494docs: update the docs for minikube installing kata517dda02kernel: update to the latest LTS kernel 5.4.60ae98ea45obs-packaging: fix wait for obsf5b71d34qemu: update build dependencies to support QEMU 5fcd29a28osbuilder/image-builder: disable reflinkdae6c7d9osbuilder: update usage of RUST_AGENT variable1236e224runtime: Add support for VFIO-AP pass-through65970d38osbuilder: install-yq should not print on successc624fa74osbuilder: install musl for aarch64b24f2cb9gitignore: ignore vscode directorycf1b72d6osbuilder: install rust before sourcing cargo env7b5ab586packaging: fix kata-deploy yaml path76c18aa3osbuilder: fix alpine agent build5216815dpackaging: make build-kernel.sh work for 2.0aa3fb4dbpackaging: make kata-deploy work for 2.086a6e0b3packaging: fix build image scriptsceebd06brelease: add 2.0 release actionsdadab1feosbuilder: build rust agent by default1bd58259packaging: tag releases on kata-containers repof56f68bfobs-packaging: adjust for building on kata-containers repo60245a83agent: update Cargo files authors544219d9mount: fix the issue of epthemeral storage handlerfd8f3ee9mount: add much more error info using chain_err10b1deb2tools: Add Unix socket support to agentl-ctlf5598a1bSubject: [PATCH] qemu: add annotations for iommu_platformf879acd6scripts: Foward port osbuilder scripts to update yq7be95b15tools: Simplify error handling in agent-ctl5b0e6f37kata-deploy: add ACRN runtime to Docker configurationadf9ecc5initrd: Increase Alpine Version to 3.1232b86a8dagent: Add target optimize for Makefile26506d83virtiofs: Update virtiofs docsbee17d1ckata-deploy: Add containerd configuration to support kata annotations.219f93ffkata-deploy: Add default privileged_without_host_devices4b62fc16clh: Disable the 'seccomp' option temporarilyf7ff6d32image-builder: disable reflink0a9b8e0arustjail: default permission of device node should be 66681644003server: Allow address to be specifiedbb30759eagent: add guest hooks UT095ebb8cagent: fix OCI hook handling03a4d107agent: support guest hookse7bfeb41agent: construct container bundle in tmpfs location2ee40027packaging: Add VFIO-AP fragment for s390x4c30b255runtime: Re-vendor GoVMM for VFIO-AP support282bff9fsandbox: Disconnect from agent after VM shutdown9f1a3d15kernel: add s390x fragmentf1350616kernel: config CONFIG_GENERIC_MSI_IRQ_DOMAINb67325c3kernel: add missing configs454dd854kernel: config CONFIG_ PARAVIRT62b45064kernel: config CONFIG_NO_HZ_FULL6dca74bakernel: moved acpi hotplug config7c85decckernel: config CONFIG_PCI_MSI_IRQ_DOMAINefe51b29kernel: fragment for pmem08d046d9kernel: config CONFIG_HAVE_NET_DSA7b49fa12kernel: fragments not supported on s390xccfb73cbagent/agent-ctl: update Cargo.lockfd13c93cvirtcontainers: Add msg to existing utils unit testsc3fc09b9virtcontainers: Add to utils unit tests96582556docs: remove outdated dependencies from agent docsd12f920bconsole: Fix crash if debug console disabled572de288sandbox: Remove unnecessary threadd5fbba3bmain: Remove commented out and redundant code1b2fe4a5agent: Refactor main functionbac79eeemain: Display config in announcee2952b53main: Simplify version handlingcfa35a90action: Fix subsystem check39b53f44clh: enable build using Podman04b156f6qemu-virtiofs: Update to qemu 5.0 + virtiofs + dax3ec05a9fclh: Add support to unplug block devices45e32e1bclh: Set 'Id' explicitly while hotplugging block device895959d0clh: Provide cpu topology to API31594387clh: opeanapi: update api for cloud hypervisor89836cd3versions: cloud-hypervisor 0.9.08d5a60acversions: Update qemu-virtiofs to 5.076a64667clh: Remove the use of deprecated '--memory file=' parameterbfd78104packaging: add usage instructions for -a (arch_target) optionecaa1f9eclh: Enable versions and kernel tag to enable CLH CI for kata 2.064b06944ppc64le: Support for rust agent based rootfs2511cabbvirtcontainers: fix outdated example code in api document5c7f0016rustjail: add the "HOME" env for process58dfd503rustjail: fix the issue of missing set propagation for bind mounte79c5727agent: setup the "lo" interface run agent as initd0a45637agent: add unit tests for rustjail/process.rs2889af77actions: Run subject-line-length check even if the previous checks failed9f0fef5aactions: Add commit-body-missing checkd81af48aactions: Do not limit the length of single word in commit body8c46a41bactions: Fix subsystem checking in github-action2466ac73actions: Fix 'Fixes checking' problem by update dependent actione7d3ba12virtcontainers: cleanup codes, delete not used APIs998a6343docs: Remove installation of proxyc305911dactions: Use github action to do Fixes/Length/Subsystem checkbd78ccafshimv2: fix the issue of close IO stream06834931agent: Fix fd leaks in execute_hookb03cd1bfdocs: Update contributions section in limitations document kata 2.0c15ef219qemu: Set govmmQemu NoReboot config Knob57269262qemu: Add test for qemuConfig Knobs5010e3a3vendor: update govmm61d133f9runtime: change un-structured log to structured logf24ad25dvirtcontainers: Add unit test for types/container.go1637e9d3qemu: remove multidev in qemu/fsdev parameter on arm64b61c9ca2Makefile: add CLHCMD in arm64-options.mke1a79e69virtcontainers: Add function to capabilities testd1d5c69bvirtcontainers: Expand unit test coverage for asset Signed-off-by: Peng Tao <bergwolf@hyper.sh>
Kata Containers
Welcome to Kata Containers!
The purpose of this repository is to act as a "top level" site for the project. Specifically it is used:
-
To provide a list of the various other Kata Containers repositories, along with a brief explanation of their purpose.
-
To provide a general area for Raising Issues.
Raising issues
This repository is used for raising issues:
-
That might affect multiple code repositories.
-
Where the raiser is unsure which repositories are affected.
Note:
- If an issue affects only a single component, it should be raised in that components repository.
Kata Containers repositories
CI
The CI repository stores the Continuous Integration (CI) system configuration information.
Community
The Community repository is the first place to go if you want to use or contribute to the project.
Code Repositories
Kata Containers-developed components
Agent
The kata-agent runs inside the
virtual machine and sets up the container environment.
KSM throttler
The kata-ksm-throttler
is an optional utility that monitors containers and deduplicates memory to
maximize container density on a host.
Runtime
The kata-runtime is usually
invoked by a container manager and provides high-level verbs to manage
containers.
Trace forwarder
The kata-trace-forwarder is a component only used
when tracing the agent process.
Additional
Hypervisor
The qemu hypervisor is used to
create virtual machines for hosting the containers.
Kernel
The hypervisor uses a Linux* kernel to boot the guest image.
Documentation
The docs directory holds documentation common to all code components.
Packaging
We use the packaging to create packages for the system components including rootfs and kernel images.
Test code
The tests repository hosts all test code except the unit testing code (which is kept in the same repository as the component it tests).
Utilities
OS builder
The osbuilder tool can create a rootfs and a "mini O/S" image. This image is used by the hypervisor to setup the environment before switching to the workload.
kata-agent-ctl
kata-agent-ctl is a low-level test tool for
interacting with the agent.
Web content
The www.katacontainers.io repository contains all sources for the https://www.katacontainers.io site.
Credits
Kata Containers uses packagecloud for package hosting.