Runtime Kubernetes Files

Initial alpha release for 1.13.0.

agent Changes

Shortlog

d7a57c6 release: Kata Containers 1.13.0-alpha0 09af1d8 github: Add github actions d66fcb8 rootBusPath: create rootBusPath dynamically. 23bd1c7 ci: install docker 19.03 for arm64 to let build image go

proxy Changes

Shortlog

cc28a02 release: Kata Containers 1.13.0-alpha0 969eafa actions: Use actions/checkout@v2 with depth 0 82bedcc actions: Define TRAVIS_BRANCH b8adeef github: Enable github actions

runtime Changes

Shortlog

f8e14062 snap: add GH actions jobs to release the snap package a303554b release: Kata Containers 1.13.0-alpha0 b2956f39 blk-dev: hotplug read only if applicable 8b740662 volumes: cleanup, minimal refactoring cf32518e govmm: revendor to get latest changes 188424a1 vendor: update govmm from intel to kata-containers a91deab4 virtcontainers: Append max_ports to virtio-serial device 7b1d6786 qemu: no state to save if QEMU isn't running 664f1b2b ACPI: enable acpi for arm64 on qemu cafd9671 Gopkg: update govmm to involve pflash in 0fb409db github: Add github actions 11c8c19e versions: Update firecracker to 0.21.3 bcf29ba8 build: Remove default hypervisor message from build 0279c815 shimv2: Add tracing to shimv2 c9637770 cli: check modules and permissions before loading a module f2ff670b cli: don't fail if rate limit is exceeded ba5ca590 versions: Bump the newest-version of OpenShift 27c558ee version: add new docker version entry for agent test on arm c56af73d virtcontainers: Don't set Ctty 559ba415 runtime: sleep 1 second after GetOOMEvent failed e4a68a70 runtime: clh: update cloud-hypervisor 02af5c9a runtime: clh: disable virtiofs DAX when FS cache size is 0 fc6beea0 release: Fix release candidate to major version upgrade check 8fbf9aa3 tests: Ensure semver build metadata is ignored df99debf release: Make error format string consistent 38fc74c9 tests: Update assets test to adapt to recent changes fc412add makefile: Enable hypervisor annotations by default f89fac95 config: Rename 'runtime' to 'runtimeConfig' cf3a7ebb config: Improve comments in configuration file templates 31f0ed5d config: Make configuration file comments consistent 1a7eeb61 annotations: Correct unit tests to validate new protections 2235d5d6 annotations: Split addHypervisorOverrides to reduce complexity 151e6fc4 annotations: Add unit test for checkPathIsInGlobs ad9ce3f4 annotations: Add unit test for regexpContains function 90ff89e4 runtime: Fix firecracker config 612fb2ce makefile: Add missing generated vars to USER_VARS 979e630d makefile: Improve names of config entries for annotation checks d412a7f7 annotations: Give better names to local variabes in search functions 58de2c53 annotations: Rename checkPathIsInGlobList with checkPathIsInGlobs 849f17c2 config: Add better comments in the template files bce25288 config: Whitelist hypervisor annotations by name 2417d0b6 config: Use glob instead of regexp to match paths in annotations 1e036c84 annotations: Fix typo in comment 5ee9b20b config: Add makefile variables for path lists ed56c9d6 config: Protect file_mem_backend against annotation attacks 2f0360bb config: Protect vhost_user_store_path against annotation attacks fba4619e config: Add security warning on configuration examples 92065d8b config: Protect ctlpath from annotation attack 0d5273a2 config: Protect jailer_path annotation b588faf8 config: Add examples for path_list configuration b2d64b6b annotations: Simplify negative logic d823b3d3 config: Add hypervisor path override through annotations e2a4015c config: Fix typo in function name 22e89f60 config: Protect virtio_fs_daemon annotation 11e737d5 config: Add 'List' alternates for hypervisor configuration paths b44b1ba0 runtime: Add s.newStore.Destroy before defer fac58a79 clh: let clh config build for arm64 77399058 runtime: mount shared mountpoint readonly 509eb6f8 runtime: readonly mounts should be readonly bindmount on the host 4ce09fb9 hypervisor: Remove unused methods 6a5eb0de annotations: Improve asset annotation handling 7d9860d5 annotations: Add missing hypervisor control annotation f53406f6 asset: Formatting, grammar and whitespace 2696323b runtime: mount shared mountpoint readonly 750419c0 runtime: readonly mounts should be readonly bindmount on the host bc1d8833 versions: Update cloud-hypervisor to release v0.11.0 120e616e runtime: Ignore ENOENT in kill/delete ec26e48e clh: Consolidate the code path for device unplug 0ffaeeb5 network: Fix error reporting in listRoutes() b86e904c network: Correct error reporting in listInterfaces() 5069ea43 gitignore: Ignore cli/containerd-shim-kata-v2/config-generated.go 3596058c vhost-user-blk: Use PciPath type for vhost user devices 64751f37 block: Use PciPath type through block code 3e589713 network: Use PciPath type through network handling bfbfab37 network: Allow convertToInterface to fail 185b3ab0 device: Introduce PciSlot and PciPath types 1c0dccb0 vendor: Update vendored agent code 141de5c9 arm64: correct bridge type for QEMUVIRT machine

shim Changes

Shortlog

c80f776 release: Kata Containers 1.13.0-alpha0 59eebf3 github: Enable github actions

Compatibility with Docker

Kata Containers 1.13.0-alpha0 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.13.0-alpha0 is compatible with CRI-O [0eec45]

Compatibility with cri-containerd

Kata Containers 1.13.0-alpha0 is compatible with cri-contaienrd [3a4acf]

OCI Runtime Specification

Kata Containers 1.13.0-alpha0 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 1.13.0-alpha0 is compatible with Kubernetes 1.17.3-00

Kata Linux Containers image

Agent version: 1.13.0-alpha0

Default Image Guest OS:

description: | Root filesystem disk image used to boot the guest virtual machine. url: "https://github.com/kata-containers/osbuilder" architecture: aarch64: name: "ubuntu" version: "latest" ppc64le: name: "centos" version: "latest" s390x: name: "ubuntu" version: "latest" x86_64: name: "clearlinux" version: "latest" meta: image-type: "clearlinux"

Default Initrd Guest OS:

description: | Root filesystem initrd used to boot the guest virtual machine. url: "https://github.com/kata-containers/osbuilder" architecture: aarch64: name: "alpine" version: "3.12" ppc64le: name: "alpine" version: "3.12" s390x: name: "alpine" version: "3.12" x86_64: name: "alpine" version: "3.12"

Kata Linux Containers Kernel

Kata Containers 1.13.0-alpha0 suggest to use the Linux kernel v5.4.60 See the kernel suggested Guest Kernel patches See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions.

Issues & limitations

More information Limitations