Kata Containers: Getting Involved with the Kata Community - Anne Bertucio & Samuel Ortiz
summary
Kata Containers delivers lightweight VMs per container that combine hardware-backed isolation with OCI/CRI compatibility so Docker and Kubernetes treat each VM like a normal container. It merges Hyper.sh runV and Intel Clear Containers, runs mainly on KVM/QEMU with an agent based on libcontainer, optional host proxy or vsock, and supports VT-d device assignment, virtio/block or 9p for volumes, and page deduplication to lower memory overhead for large workloads. Roadmap targets 1.0 (May 22); contribution needs include code, tests, docs and signed-off patches.
AI-written summary · about
chapters (7)
- 0:00Start
- 2:00Speed vs Security
- 3:16Technical Vision
- 10:26Multi-tenant Kubernetes
- 11:51Kata Components
- 19:24You can contribute • Contributor Guide
- 20:07Contribution Areas
related talks
22mKata Containers: Security and Containers Without Compromise
06mKeynote: Introducing Kata Containers
36mKata Containers: Hypervisor-Based Container Runtime
39mMore Than Secure: Containerd + KataContainers as Kubernetes Runtime
14mA kernel? In a Container? Explain Yourself!
32mLotsa security - confining the extra security layer
20mKata * TEE = A Lego-like Two-way Sandbox for Seamless Security and Privacy
25mSecuring Untrusted Workloads with Kata Containers on Kubernetes - David Angot & Alex Price