Kata Containers Files

Survey

Please take the Kata Containers survey:

• https://openinfrafoundation.formstack.com/forms/kata_containers_user_survey

This will help the Kata Containers community understand:

• how you use Kata Containers
• what features and improvements you would like to see in Kata Containers

Libseccomp Notices

The kata-agent binaries inside the Kata Containers images provided with this release are statically linked with the following GNU LGPL-2.1 licensed libseccomp library.

• libseccomp

The kata-agent uses the libseccomp v2.5.5 which is not modified from the upstream version. However, in order to comply with the LGPL-2.1 (§6(a)), we attach the complete source code for the library.

Kata Containers builder images

• agent (on all its different flavours): quay.io/kata-containers/builders:agent-5f68b343b-7420194ea-1.85.1-x86_64
• Kernel (on all its different flavours): quay.io/kata-containers/builders:kernel-a0ae1b660-x86_64
• OVMF (on all its different flavours): quay.io/kata-containers/builders:ovmf-aadad0c9b-x86_64
• QEMU (on all its different flavurs): quay.io/kata-containers/builders:qemu-4c006c707-x86_64
• shim-v2: quay.io/kata-containers/builders:shim-v2-go-1.23.12-rust-1.85.1-7e9e9263d-x86_64
• tools: quay.io/kata-containers/builders:tools-a03dc3129-014ab2fce-30aff429d-75ac09bab-x86_64
• virtiofsd: quay.io/kata-containers/builders:virtiofsd-1.85.1-musl-1cf1a332a-x86_64

Installation

Follow the Kata installation instructions.

What's Changed

• runtime-rs: Support hotplugging host block devices within qemu-rs by @Apokleos in https://github.com/kata-containers/kata-containers/pull/11579
• runtime-rs: support block device driver virtio-scsi within qemu-rs by @Apokleos in https://github.com/kata-containers/kata-containers/pull/11547
• build(deps): bump the openssl group across 4 directories with 1 update by @dependabot[bot] in https://github.com/kata-containers/kata-containers/pull/11372
• runtime-rs: Some extra work to enhance copyfile with sharedfs disabled by @Apokleos in https://github.com/kata-containers/kata-containers/pull/11621
• runtime-rs: Add full cgroups support on host by @justxuewei in https://github.com/kata-containers/kata-containers/pull/11598
• versions: Upgrade to Cloud Hypervisor v47.0 by @RuoqingHe in https://github.com/kata-containers/kata-containers/pull/11626
• dragonball: Fix warnings in default build by @RuoqingHe in https://github.com/kata-containers/kata-containers/pull/11618
• mem-agent: Ignore Cargo.lock by @RuoqingHe in https://github.com/kata-containers/kata-containers/pull/11613
• ci: Try passing api token into githubh api call by @stevenhorsman in https://github.com/kata-containers/kata-containers/pull/11619
• ci/gatekeeper: make run-k8s-tests-coco-nontee job required by @wainersm in https://github.com/kata-containers/kata-containers/pull/11385
• genpolicy: reduce complexity by @danmihai1 in https://github.com/kata-containers/kata-containers/pull/11553
• Updated Firecracker Version to 1.12.1 by @itsmohitnarayan in https://github.com/kata-containers/kata-containers/pull/11627
• gpu: AMD64 NVIDIA GPU CI/CD by @zvonkok in https://github.com/kata-containers/kata-containers/pull/11236
• build: nvidia: Fix KBUILD_SIGN_PIN breakage by @fidencio in https://github.com/kata-containers/kata-containers/pull/11645
• gpu: guest components by @zvonkok in https://github.com/kata-containers/kata-containers/pull/11639
• runtime: reproducible generation of Golang proto bindings by @burgerdev in https://github.com/kata-containers/kata-containers/pull/11632
• gha: Remove unnecessary install-azure-cli step by @sprt in https://github.com/kata-containers/kata-containers/pull/11637
• ci: static-checks: Auto-detect repo by default by @sprt in https://github.com/kata-containers/kata-containers/pull/11646
• tests: k8s-sandbox-vcpus-allocation debug info by @danmihai1 in https://github.com/kata-containers/kata-containers/pull/11651
• qemu: Respect the JSON schema for hot plug by @c3d in https://github.com/kata-containers/kata-containers/pull/11667
• runtime: virtio-fs: Support "metadata" cache mode by @sprt in https://github.com/kata-containers/kata-containers/pull/11060
• runtime-rs: make vcpu allocation more accurate by @pmores in https://github.com/kata-containers/kata-containers/pull/10580
• Align initdata annoation with kata-runtime by @Apokleos in https://github.com/kata-containers/kata-containers/pull/11653
• ci: cri-containerd: add 5s timeout for creating sanbox with crictl by @kevinzs2048 in https://github.com/kata-containers/kata-containers/pull/11669
• version: Bump QEMU to v10.0.0 by @fidencio in https://github.com/kata-containers/kata-containers/pull/11219
• ci: Remove stable by @zvonkok in https://github.com/kata-containers/kata-containers/pull/11660
• ci: static-checks: add SECURITY.md to exclude list by @sprt in https://github.com/kata-containers/kata-containers/pull/11666
• runtime-rs: Label system journal log with kata by @Apokleos in https://github.com/kata-containers/kata-containers/pull/11641
• agent-ctl: Add option "--vm" to boot pod VM for testing. by @Sumynwa in https://github.com/kata-containers/kata-containers/pull/11565
• versions: Bump golang to 1.23.12 by @stevenhorsman in https://github.com/kata-containers/kata-containers/pull/11676
• runtime: make SNP guest policy configurable by @katexochen in https://github.com/kata-containers/kata-containers/pull/11675
• genpolicy: support AddARPNeighbors by @burgerdev in https://github.com/kata-containers/kata-containers/pull/11663
• runtime-rs: add seccomp support for cloud hypervisor and firecracker by @was-saw in https://github.com/kata-containers/kata-containers/pull/11536
• CI: change the directory for Arm64 firmware by @kevinzs2048 in https://github.com/kata-containers/kata-containers/pull/11670
• runtime-rs: add seccomp support for qemu by @was-saw in https://github.com/kata-containers/kata-containers/pull/11525
• gpu: AMD64 NVIDIA GPU CI/CD Part 2 by @zvonkok in https://github.com/kata-containers/kata-containers/pull/11658
• ci: static-checks: Don't hardcode default repo branch by @sprt in https://github.com/kata-containers/kata-containers/pull/11683
• Feat | Implement initdata for bare-metal/qemu for s390x by @rafsal-rahim in https://github.com/kata-containers/kata-containers/pull/11640
• gatekeeper: GPU test required by @zvonkok in https://github.com/kata-containers/kata-containers/pull/11684
• versions: sync go.mod with versions.yaml for go 1.23.12 by @alextibbles in https://github.com/kata-containers/kata-containers/pull/11701
• runtime-rs: Add only static ARP entries with handle_neighours by @Apokleos in https://github.com/kata-containers/kata-containers/pull/11698
• versions: update to latest LTS kernel 6.12.42 by @alextibbles in https://github.com/kata-containers/kata-containers/pull/11691
• kata-types: remove default setting of guest_hook_path by @Apokleos in https://github.com/kata-containers/kata-containers/pull/11705
• CI: Introduce CI for libs to Improve code quality and reduce noises by @Apokleos in https://github.com/kata-containers/kata-containers/pull/11514
• versions: update kernel-confidential to Linux v6.16.1 by @mythi in https://github.com/kata-containers/kata-containers/pull/11634
• runtime-rs: Fix issues for initdata by @BbolroC in https://github.com/kata-containers/kata-containers/pull/11693
• Optimize sealed secret scanning to avoid full file reads by @Park-Jiyeonn in https://github.com/kata-containers/kata-containers/pull/11647
• release: Bump version to 3.20.0 by @zvonkok in https://github.com/kata-containers/kata-containers/pull/11706

New Contributors

• @itsmohitnarayan made their first contribution in https://github.com/kata-containers/kata-containers/pull/11627
• @was-saw made their first contribution in https://github.com/kata-containers/kata-containers/pull/11536
• @rafsal-rahim made their first contribution in https://github.com/kata-containers/kata-containers/pull/11640
• @alextibbles made their first contribution in https://github.com/kata-containers/kata-containers/pull/11701
• @Park-Jiyeonn made their first contribution in https://github.com/kata-containers/kata-containers/pull/11647

Full Changelog: https://github.com/kata-containers/kata-containers/compare/3.19.1...3.20.0