Kata Containers Runtime Versions Save

Kata Containers version 1.x runtime (for version 2.x see https://github.com/kata-containers/kata-containers).

1.10.6

3 years ago

Release 1.10.6

agent Changes

Shortlog

b44f652 release: Kata Containers 1.10.6

proxy Changes

Shortlog

1636e85 release: Kata Containers 1.10.6

runtime Changes

Shortlog

7ed7551d release: Kata Containers 1.10.6

shim Changes

Shortlog

a90a0f0 release: Kata Containers 1.10.6

Compatibility with Docker

Kata Containers 1.10.6 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.10.6 is compatible with CRI-O v1.16.0

Compatibility with cri-containerd

Kata Containers 1.10.6 is compatible with cri-contaienrd 3a4acfbc99aa976849f51a8edd4af20ead51d8d7

OCI Runtime Specification

Kata Containers 1.10.6 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 1.10.6 is compatible with Kubernetes 1.16.2-00

Kata Linux Containers image

Agent version: 1.10.6

Default Image Guest OS:

description: | Root filesystem disk image used to boot the guest virtual machine. url: "https://github.com/kata-containers/osbuilder" architecture: aarch64: name: "fedora" version: "latest" ppc64le: name: "centos" version: "latest" s390x: name: "ubuntu" version: "latest" x86_64: name: "clearlinux" version: "latest" meta: image-type: "clearlinux"

Default Initrd Guest OS:

description: | Root filesystem initrd used to boot the guest virtual machine. url: "https://github.com/kata-containers/osbuilder" architecture: aarch64: name: "alpine" version: "3.7" ppc64le: name: "alpine" version: "3.7" s390x: name: "alpine" version: "3.7" x86_64: name: "alpine" version: "3.7"

Kata Linux Containers Kernel

Kata Containers 1.10.6 suggest to use the Linux kernel v4.19.86 See the kernel suggested Guest Kernel patches See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions.

Issues & limitations

More information Limitations

1.11.2

3 years ago

Release 1.11.2

agent Changes

Shortlog

69a9ae6 release: Kata Containers 1.11.2

proxy Changes

Shortlog

9c7651e release: Kata Containers 1.11.2

runtime Changes

Shortlog

fe20bb47 release: Kata Containers 1.11.2 476eb467 virtcontainers: print a warning when the device to append is not supported 74a42583 virtcontainer/cgroup: create cgroup manager after creating the network c2c3b871 virtcontainers/network: Change signature of Enpoint Attach method 8a9a3ce5 drivers: change BindDevicetoVFIO signature 39b3c3e3 device: support vfio cold plug f2eab504 device: add ColdPlug flag a254da64 virtcontainers: Check the correct error variable for sandbox creation 857d1387 virtcontainers: drop deferred func for GetAndSetSandboxBlockIndex ad537103 shimv2: check correct error variable for deferred func in service#StartShim f85a2d5a qemu: Report all errors on virtiofsd execution 44887a25 katatestutils: Use the configured virtiofs daemon path 3eee00ec qemu: Remove hard-coding of Qemu machine options for ppc64le cecd7f7f cli: Fix kata-env output on Power 2c3b3440 qemu: Fix Qemu binary path for Power across distros 5d80f69c virtcontainers: Fix structured logging in cgroups package dbc914ad shimv2: Use BUILDTAGS when building shimv2

shim Changes

Shortlog

048028a release: Kata Containers 1.11.2

Compatibility with Docker

Kata Containers 1.11.2 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.11.2 is compatible with CRI-O 0eec454168e381e460b3d6de07bf50bfd9b0d082

Compatibility with cri-containerd

Kata Containers 1.11.2 is compatible with cri-contaienrd 3a4acfbc99aa976849f51a8edd4af20ead51d8d7

OCI Runtime Specification

Kata Containers 1.11.2 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 1.11.2 is compatible with Kubernetes 1.17.3-00

Kata Linux Containers image

Agent version: 1.11.2

Default Image Guest OS:

description: | Root filesystem disk image used to boot the guest virtual machine. url: "https://github.com/kata-containers/osbuilder" architecture: aarch64: name: "ubuntu" version: "latest" ppc64le: name: "centos" version: "latest" s390x: name: "ubuntu" version: "latest" x86_64: name: "clearlinux" version: "latest" meta: image-type: "clearlinux"

Default Initrd Guest OS:

description: | Root filesystem initrd used to boot the guest virtual machine. url: "https://github.com/kata-containers/osbuilder" architecture: aarch64: name: "alpine" version: "3.7" ppc64le: name: "alpine" version: "3.7" s390x: name: "alpine" version: "3.7" x86_64: name: "alpine" version: "3.7"

Kata Linux Containers Kernel

Kata Containers 1.11.2 suggest to use the Linux kernel v5.4.32 See the kernel suggested Guest Kernel patches See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions.

Issues & limitations

More information Limitations

1.12.0-alpha0

3 years ago

Release 1.12.0-alpha0

agent Changes

  • container oom event support
  • static arp neighbors support
  • security fix for CVE-2020-2023

Shortlog

b08eb7e release: Kata Containers 1.12.0-alpha0 c01192e device: Allow to use the predicted 'VmPath' when adding blk devices a88af32 device: Do not allow container access to the nvdimm rootfs 42438f9 network: Add grpc method to add static arp neighbors 756de79 Makefile: do not use LDFLAGS to avoid environment contamination 1eb1abe channel: fix the issue of epoll_wait interrupted by signal 2aa833f agent: add grpc endpoint to retrieve oom events

proxy Changes

Shortlog

c9c4883 release: Kata Containers 1.12.0-alpha0

runtime Changes

  • support OOM event reporting
  • support guest static arp neighbors
  • support vfio device cold plug on QEMU
  • support block device hotplug on cloud-hpyervisor
  • enable dax support on arm64 platform
  • security fixes for CVE-2020-2023, CVE-2020-2024, CVE-2020-2025 and CVE-2020-2026

Shortlog

a3de4520 release: Kata Containers 1.12.0-alpha0 c139a667 versions: update QEMU to 5.0.0 30b40f55 clh: Remove the use of deprecated '--memory file=' parameter e02d5ef7 virtcontainers: print a warning when the device to append is not supported 5fccab74 virtcontainer/cgroup: create cgroup manager after creating the network 3c8c6505 virtcontainers/network: Change signature of Enpoint Attach method 581ff974 drivers: change BindDevicetoVFIO signature 970ef454 device: support vfio cold plug 6532eaa0 device: add ColdPlug flag 26f8c14d vendor: update govmm 53a9d005 virtcontainers: Fix structured logging in cgroups package c51baf8d shimv2: Use BUILDTAGS when building shimv2 651d5ff6 qemu: Fix kernel_irqchip=split option for IOMMU enabled sandbox 364435a6 clh: vsock: Use the updated VsockConfig 17d265af versions: Move to cloud-hypervisor v0.8.0 4ee382cd qemu: Report all errors on virtiofsd execution 5a3b6651 katatestutils: Use the configured virtiofs daemon path 2c342638 virtcontainers: Check the correct error variable for sandbox creation c19daa59 qemu: Fix travis build failure for Power 5d442a28 qemu_arm64: Fix build failure fdcd1f3a qemu: enable iommu on q35 66b54f88 qemu: support appending a vIOMMU device 401ad67c vendor: update govmm to bring iommu support 4645d3e6 virtiofsd: Use cache=auto 9ac39116 cli: Fix kata-env output on Power 6be76fcd kata_agent: Add unit tests 5b96e01f clh: Clear the "PCIAddr" field while blk device hotplug 50c1dce1 kata_agent: Pass "VirtPath" with "PCIAddr" of blk devices to agent aea29b64 kata_agent: Allow to use "VirtPath" as volume source for blk devices e5a3211c clh: Allow add virtiofs args and cache options from config 49ebaa88 virtcontainers: drop deferred func for GetAndSetSandboxBlockIndex 379f19f7 qemu: Fix rtc parameter is not set to qemu 20fe3bb9 shimv2: check correct error variable for deferred func in service#StartShim 54e8fdbc qemu: Fix Qemu binary path for Power across distros e855d8dd github: add auto comment bot a3dec262 vc: make host shared path readonly 1d3e1ea3 qemu: Remove hard-coding of Qemu machine options for ppc64le 67d3e2c5 network: Detect and add static ARP entries 412dcbfd vendor: Update agent to include AddARPNeighbors grpc method 6b32472c qemu: Remove PMU feature for Power (ppc64le) platform e07a932a ci: Do not install virtcontainers with podman clh f76d7391 virtcontainers: GetOOMEvent should have no timeout 5e552720 clh: Set 'virtio-blk' as the default block device driver c5f97b24 clh: Enable disk block device hotplug support 18662e16 qemu: Remove pmu limitation in nested virtualization of amd/ppc64le 41a06d49 build: Add "pmu=off" to default cpu_features option f03c17d1 annotations: add cpu_features 0100af18 qemu: add cpu_features option 0b3a9271 vendor: Update govmm 6c517548 clh: remove slow boot debug flags from kernel cmdline 160e3a7c clh: Remove vsock log port in kernel cmdline e1ee00d1 clh: Improve hypervisor logging 882a8239 virtiofsd: Improve logging 7b269ff7 qemu: Don't leak file descriptors in case of error 6aff0779 virtcontainers: x86: Support microvm machine type c98ef487 vendor: update govmm bec32f61 utils: Fix case version check for stable releases 86f58106 shim: exit out of oom polling if unimplemented b4833a48 virtcontainers: tests fix, nit fix db28dcf2 shim: retrieve oom events after starting sandbox 86686b56 virtcontainers: add support for getOOMEvent agent endpoint to sandbox ef8624bb vendor: update agent 619ada25 clh: vsock: Supply the right VsockConfig to Vmconfig 9dbd9298 versions: Move to cloud-hypervisor v0.7.0 3c4fe035 shm: handle shm mount backed by empty-dir memory volumes 7b5e8f66 clh: memory: remove pmem size argument d4a9282f versions: Move to latest cloud-hypervisor ee985a60 qemu: arm64: Set defaultGICVersion to 3 to limit the max vCPU number 4d4a153a qemu: arm64: Don't detect gic version by /proc/interrupts d0dbd048 virtcontainers: Fix structured logging in device/config package 8d9fa47e virtcontainers: constrain runtime after creating network 017ac55c virtcontainers: update sandbox's device cgroup 1da6f22b virtcontainers: remove all the code related to HasCRIContainerType 389b374e virtcontainers: apply constraints to the sandbox cgroup 6377fc47 pkg/cgroups: update the list of devices for the hypervisor 042e7a20 pkg/cgroups: add methods to add and remove device from the cgroup dc69d6e2 pkg/cgroups: implement functions to get information from a host device eee0b090 device: add GetHostPath() to generic device 23aa94e6 logging: Fix structured logging in store package 868f6871 versions: Remove golangci-lint and gometalinter entries e36389e2 dax: enable dax on arm64 7e470461 vc: Version support check is ineffective in createSandbox c4b5922d versions: Misc changes to descriptions

shim Changes

Shortlog

866e33c release: Kata Containers 1.12.0-alpha0

Compatibility with Docker

Kata Containers 1.12.0-alpha0 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.12.0-alpha0 is compatible with CRI-O 0eec454168e381e460b3d6de07bf50bfd9b0d082

Compatibility with cri-containerd

Kata Containers 1.12.0-alpha0 is compatible with cri-contaienrd 3a4acfbc99aa976849f51a8edd4af20ead51d8d7

OCI Runtime Specification

Kata Containers 1.12.0-alpha0 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 1.12.0-alpha0 is compatible with Kubernetes 1.17.3-00

Kata Linux Containers image

Agent version: 1.12.0-alpha0

Default Image Guest OS:

description: | Root filesystem disk image used to boot the guest virtual machine. url: "https://github.com/kata-containers/osbuilder" architecture: aarch64: name: "ubuntu" version: "latest" ppc64le: name: "centos" version: "latest" s390x: name: "ubuntu" version: "latest" x86_64: name: "clearlinux" version: "latest" meta: image-type: "clearlinux"

Default Initrd Guest OS:

description: | Root filesystem initrd used to boot the guest virtual machine. url: "https://github.com/kata-containers/osbuilder" architecture: aarch64: name: "alpine" version: "3.7" ppc64le: name: "alpine" version: "3.7" s390x: name: "alpine" version: "3.7" x86_64: name: "alpine" version: "3.7"

Kata Linux Containers Kernel

Kata Containers 1.12.0-alpha0 suggest to use the Linux kernel v5.4.32 See the kernel suggested Guest Kernel patches See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions.

Issues & limitations

More information Limitations

1.10.5

3 years ago

Please note that this release includes security fixes for CVE-2020-2023 and CVE-2020-2026. Users are strongly encouraged to move to this new release.

agent Changes

Shortlog

6fef0af release: Kata Containers 1.10.5 faec7c3 device: Do not allow container access to the nvdimm rootfs

proxy Changes

Shortlog

c908a9f release: Kata Containers 1.10.5

runtime Changes

Shortlog

eb8bf663 clh: Fix shared directory path for virtiofsd f48f40f4 release: Kata Containers 1.10.5 e70898a2 vc: make host shared path readonly de15a382 unit-test: refine related unit tests 95bb74ed mount: modify func bindMount 483dccaf vc: validate container path when cleaning up bac553df vc: do not follow symlink when umounting contanier host path 346f71b4 logging: Fix structured logging in store package cee6322d shm: handle shm mount backed by empty-dir memory volumes

shim Changes

Shortlog

ed0f2e5 release: Kata Containers 1.10.5

Compatibility with Docker

Kata Containers 1.10.5 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.10.5 is compatible with CRI-O v1.16.0

Compatibility with cri-containerd

Kata Containers 1.10.5 is compatible with cri-contaienrd 3a4acfbc99aa976849f51a8edd4af20ead51d8d7

OCI Runtime Specification

Kata Containers 1.10.5 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 1.10.5 is compatible with Kubernetes 1.16.2-00

Kata Linux Containers image

Agent version: 1.10.5

Default Image Guest OS:

description: | Root filesystem disk image used to boot the guest virtual machine. url: https://github.com/kata-containers/osbuilder architecture: aarch64: name: fedora version: latest ppc64le: name: centos version: latest s390x: name: ubuntu version: latest x86_64: name: clearlinux version: latest meta: image-type: clearlinux

Default Initrd Guest OS:

description: | Root filesystem initrd used to boot the guest virtual machine. url: https://github.com/kata-containers/osbuilder architecture: aarch64: name: alpine version: "3.7" ppc64le: name: alpine version: "3.7" s390x: name: alpine version: "3.7" x86_64: name: alpine version: "3.7"

Kata Linux Containers Kernel

Kata Containers 1.10.5 suggest to use the Linux kernel v4.19.86 See the kernel suggested Guest Kernel patches See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions.

Issues & limitations

More information Limitations

1.11.1

3 years ago

Please note that this release includes security fixes for CVE-2020-2023 and CVE-2020-2026. Users are strongly encouraged to move to this new release.

agent Changes

Shortlog

f26bd42 release: Kata Containers 1.11.1 b863695 device: Do not allow container access to the nvdimm rootfs

proxy Changes

Shortlog

28a7423 release: Kata Containers 1.11.1

runtime Changes

Shortlog

bdf91fc3 release: Kata Containers 1.11.1 a74e194d shm: handle shm mount backed by empty-dir memory volumes 673b471e virtcontainers: Fix structured logging in device/config package 13887bf8 logging: Fix structured logging in store package 0042823f vc: make host shared path readonly

shim Changes

Shortlog

488f6da release: Kata Containers 1.11.1

Compatibility with Docker

Kata Containers 1.11.1 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.11.1 is compatible with CRI-O 0eec454168e381e460b3d6de07bf50bfd9b0d082

Compatibility with cri-containerd

Kata Containers 1.11.1 is compatible with cri-contaienrd 3a4acfbc99aa976849f51a8edd4af20ead51d8d7

OCI Runtime Specification

Kata Containers 1.11.1 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 1.11.1 is compatible with Kubernetes 1.17.3-00

Kata Linux Containers image

Agent version: 1.11.1

Default Image Guest OS:

description: | Root filesystem disk image used to boot the guest virtual machine. url: https://github.com/kata-containers/osbuilder architecture: aarch64: name: ubuntu version: latest ppc64le: name: centos version: latest s390x: name: ubuntu version: latest x86_64: name: clearlinux version: latest meta: image-type: clearlinux

Default Initrd Guest OS:

description: | Root filesystem initrd used to boot the guest virtual machine. url: https://github.com/kata-containers/osbuilder architecture: aarch64: name: alpine version: "3.7" ppc64le: name: alpine version: "3.7" s390x: name: alpine version: "3.7" x86_64: name: alpine version: "3.7"

Kata Linux Containers Kernel

Kata Containers 1.11.1 suggest to use the Linux kernel v5.4.32 See the kernel suggested Guest Kernel patches See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions.

Issues & limitations

More information Limitations

1.9.6

4 years ago

agent Changes

Shortlog

65bbbe3 release: Kata Containers 1.9.6

proxy Changes

Shortlog

b2ac7a4 release: Kata Containers 1.9.6

runtime Changes

Shortlog

a1da8ac0 release: Kata Containers 1.9.6

shim Changes

Shortlog

e02ca66 release: Kata Containers 1.9.6

Compatibility with Docker

Kata Containers 1.9.6 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.9.6 is compatible with CRI-O 0eec454168e381e460b3d6de07bf50bfd9b0d082

Compatibility with cri-containerd

Kata Containers 1.9.6 is compatible with cri-contaienrd 1.2.7

OCI Runtime Specification

Kata Containers 1.9.6 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 1.9.6 is compatible with Kubernetes 1.15.3-00

Kata Linux Containers image

Agent version: 1.9.6

Default Image Guest OS:

description: | Root filesystem disk image used to boot the guest virtual machine. url: "https://github.com/kata-containers/osbuilder" architecture: aarch64: name: "fedora" version: "latest" ppc64le: name: "centos" version: "latest" s390x: name: "ubuntu" version: "latest" x86_64: name: "clearlinux" version: "latest" meta: image-type: "clearlinux"

Default Initrd Guest OS:

description: | Root filesystem initrd used to boot the guest virtual machine. url: "https://github.com/kata-containers/osbuilder" architecture: aarch64: name: "alpine" version: "3.7" ppc64le: name: "alpine" version: "3.7" s390x: name: "alpine" version: "3.7" x86_64: name: "alpine" version: "3.7"

Kata Linux Containers Kernel

Kata Containers 1.9.6 suggest to use the Linux kernel v4.19.75 See the kernel suggested Guest Kernel patches See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions.

Issues & limitations

More information Limitations

1.11.0

4 years ago

Announcing Kata Containers 1.11.0.

This is a new stable branch for Kata. For this release Kata includes improvements.

Please note that this release includes security fixes for CVE-2020-2024 and CVE-2020-2025. Users are strongly encouraged to move to this new release.

Qemu:

  • update qemu to 4.1.1
  • qemu: Support PCIe device hotplug for q35
  • qemu: Add virtio-mem support (experimental)
  • Support pmem/nvdimm hotplug

Firecraker:

  • Update Firecracker to v0.20.0

Cloud Hypervisor:

  • Update to cloud-hypervisor 0.7.0
  • Device assignment using VFIO (Virtual Function I/O) was implemented.
  • Memory and CPU hotplug was enabled for Kata and Cloud Hypervisor.
  • Boot guest OS using virtualized persistent memory was enabled (virtio-pmem).

Network:

  • ipv6: Add support for ipv6

Internals:

  • persist: move "newstore" out of experimental:The "newstore" feature has had been a "experimental" feature for long time.

cgroups and namespaces:

  • rootless: Fix rootless for case net=none
  • Support device cgroup in the host when sandbox_cgroup_only is true, the hypervisor has access only to the devices that the sandbox and its containers need

agent Changes

Shortlog

a04eb27 release: Kata Containers 1.11.0 27490d4 release: Kata Containers 1.11.0-rc0 305c6f9 protocols: fix client unit tests for go 1.13 6cbeed5 mount: Use "virtiofs" instead of "virtio_fs" cfc96dd build: Add support to strip the agent golang binary 7c0a967 agent: signal from keyboard must not be fatal 8325ad8 agent: fix epoll fd left in the kata-agent when exec process 97f6fa7 release: Kata Containers 1.11.0-alpha1 05b557a agent: add configurable container pipe size cmdline option 8ede869 agent: add kernel cmdline parameter to enable or disable cgroups v2 ddd9188 agent: parse kernel command line as soon as possible 2a5442a agent: support pmem/nvdimm hotplug 3f0d98e agent: Remove dev from pciDeviceMap when device is unplugged e4c2037 agent: don't receive signals from stdin 8f57eda protocols: client: Add timeout for hybrid vsock handshake 8929a02 release: Kata Containers 1.11.0-alpha0 f6472bd build: Update CentOS version for the Dockerfile accab34 agent-client: include log in agent client a44d555 FC: Add new vsock connection handshake c66b927 ipv6: Add flag IFA_F_NODAD for ipv6 address. 93a901c ipv6: Add support for ipv6 8d8d3f8 test: change import path for NetworkInterface e6cbfc1 vendor: Update vendoring for libcontainer. 660e61f Revert: client.go: HybridVSockDialer: Change Read EOT to recv peek 6cfb75d Revert: client.go: HybridVSockDialer: Check return size n of unix.Recvfrom 54eb918 Revert: client.go: HybridVSockDialer: Close dup fd after receive packet 2f49115 agent: Fix mem-hotplug on x86 when ARCH_MEMORY_PROBE is set 44608b2 vendor: update golang/sys 33f3208 client.go: HybridVSockDialer: Close dup fd after receive packet

proxy Changes

Shortlog

de96227 release: Kata Containers 1.11.0 9412389 release: Kata Containers 1.11.0-rc0 32085dd travis: specify golang version 1f23aa4 build: Add support to strip the proxy golang binary a7e5f51 release: Kata Containers 1.11.0-alpha1 d70f905 release: Kata Containers 1.11.0-alpha0 46750d9 Makefile: overwrite PREFIX from environment

runtime Changes

Shortlog

c7fa5dcc utils: Fix case version check for stable releases c2b69787 release: Kata Containers 1.11.0 2d251652 clh: vsock: Supply the right VsockConfig to Vmconfig fcc9e93b versions: Move to cloud-hypervisor v0.7.0 34be9e0c clh: memory: remove pmem size argument 9798e8a5 versions: Move to latest cloud-hypervisor 93b1b833 virtcontainers: constrain runtime after creating network fc9be990 virtcontainers: update sandbox's device cgroup 5cfae217 virtcontainers: remove all the code related to HasCRIContainerType cff5392a virtcontainers: apply constraints to the sandbox cgroup ce6edc5a pkg/cgroups: update the list of devices for the hypervisor 3fceece3 pkg/cgroups: add methods to add and remove device from the cgroup b3458550 pkg/cgroups: implement functions to get information from a host device 0d3b6975 device: add GetHostPath() to generic device 21711eea release: Kata Containers 1.11.0-rc0 d78ffd65 makefile: Make SELinux support configurable 7aa31685 clh: Boot from persistent memory device e8fc25a7 version: Update clh to master 8c850d9e config: Add scsi_mod.scan=none for virtio-scsi bf9758bf katautils: Use config paths set during the build 07d0a4f0 version: Update kernel to lts 5.4.32 432f9bea clh: virtiofs: Add no_posix_lock option ab8050c5 kata_agent: Don't use dax if virtio_fs_cache is 0 6218b2a5 kata_agent: Remove sharedDirVirtioFSOptions 95ccc0f7 agent: Use "virtiofs" instead of "virtio_fs" 4c1cacd3 versions: Switch to virtio-fs-dev branch for kernel 8e0f891e v2: Open log fifo with RDWR instead of WRONLY afbd03cf qemu-ppc64le: Switch off large decrementer capability 0294fcb9 versions: Update go to 1.13.9 5eec8bdf qemu_ppc64le: EXpose fs support explicitly fd625b3f qemu: Don't crash if virtiofsd path is non existent e4eb553d virtcontainers: Add SELinux support for running VM Confinement 39e354f6 clh: Implement capabilities 0a1ffc1d types: Make FS sharing disable by default 4d034b1e versions: update go to v1.14 7997218c Makefile: Allow change default hypervisor via env var 669b6e32 clh: Report warning when requested vCPUs exceeds maxVCPU allowed aab82f67 clh: Add memory hotplug 2f948738 clh: Use MemUnit to create VM b6a7d8d6 utils: Add memory unit abstraction 5e7d2538 clh: add vmInfo method ebb8fd57 versions: Update clh to latest master 3b53114a virtcontainers: improve algorithm to check Large bar devices 7aff5466 virtcontainers: check PCI resource format before using it 2c310fec virtcontainers: handle persistent memory volumes 434b3025 virtcontainers: hotplug block drives that are pmem devices as nvdimm 84e0ee13 virtcontainers: reimplement createBlockDevices abbdf078 virtcontainers: add Pmem attribute to BlockDrive ee941e5c virtcontainers: Implement function to get the pmem DeviceInfo 9ff44dba virtcontainers: implement function to get the backing file 0a4e2edc virtcontainers: move GetDevicePathAndFsType to utils_linux 2c7f27ec vendor: update govmm e62a8aa9 versions: Update containerd commit 4d2574a7 virtcontainers: Don't create vfio devices in the guest d0a730c6 shimv2: move container rootfs mounted flag to container level d60902a9 FC: change minimum supported version of Firecracker to v0.21.1 aadf8c4a AArch64: enable firecracker v0.21.1 on AArch64 44e23493 FC: Fix error of overlong firecracker API unix socket c3bafd57 FC: Change default API socket path 2945bcd7 FC: Removed redundant --seccomp-level jailer parameter d2cae59e FC: Removed redundant RescanBlockDevice action 37b91b33 FC: Remove logger.options f61eca89 clh: Add comments around clh api 6a4e667f virtiofsd: Check if PID is valid 3251beaa version: Update clh to master c5184641 clh: Add vfio support 00da1270 unit-test: refine related unit tests 13390df0 Jailer: re-mount jailerRoot with exec 9d3022a8 mount: modify func bindMount 126fa157 agent: append and handle vhost-user-blk device cf066b75 devices: hotplug vhost-user-blk device to qemu 36963184 devices: filter vhost-user-blk/scsi device 54b24dad devices: add vhost-user storage configuration 17a92aed release: Kata Containers 1.11.0-alpha1 94298dd1 clh: Remove dead-code on maxClhVcpus 2cd0c885 README: logging: add shimv2 information 4c287173 vc: add agent.container_pipe_size annotation 4ce44ab0 clh: set rootfstype eee4d701 katutils: logging: default log level to Warn 913d1530 cli: logging: Default to Warn level ed431175 vc: Remove container share dir when stopping 17b9de14 clh: enable CPU hotplug 63c7ac5b clh: add 'APIsocket' to persist HypervisorState e9a46580 vc: Use BlockIndexMap instead of BlockIndex 7427fea8 dnm: vendor: update agent client 0da10105 version-update: version update for cri-o and k8s 376c4252 cli: add virtioFsDaemon to kata-env. 171eb705 qemu: use govmm vhost user device types directly 46392945 qemu: pass guest image file readonly 63fdf532 vendor: update govmm dependency c6cc8b93 virtcontainers: support lazy attach devices 33459779 clh: update minimal supported version to check. 20332298 clh: Fix version check ea82922a virtcontainers/pkg/cgroups: implement cgroup manager 03cdf6c4 virtcontainers: add new package for cgroups 5f9a77cc vc: validate container path when cleaning up 5bf32312 vc: do not follow symlink when umounting contanier host path 12d10eb2 clh: Update clh driver to use the latest openAPI knobs de8fe25d clh: Update CLH to stable/v0.5.x 32196ff7 clh: Do not find vsock context ID c2462e7e release: Kata Containers 1.11.0-alpha0 db5cfebd makefile: Fix missing LDFLAGS references b74cda02 makefile: do not use LDFLAGS for extra kata flags. 1c1e7cc1 unit-test: refine unit tests 1ad927d4 kata-check: use "--strict" to perform version consistency check a4b3c65c kata-env: import new struct VersionInfo 0f720e6f virtcontainers: fix typo in sandbox 78bb6c0f virtcontainers/persist: fix typo in fs a8dcff5b AArch64: change image rootfs from fedora to ubuntu 2c3b4657 build: Add support to strip the binary de7383b2 kernel: Update kernel to latest stable 5.4.15 055f3171 selinux: Disable selinux a45cf62e virtcontainers/pkg/rootless: fix comment on exported var c36c667b cli: implement --rootless option 11bd456a virtcontainers: support new persist API 9585bc92 virtcontainers/hypervisors: support new persist API 00307a70 virtcontainers/sandbox: support new persist API 4b9ab557 virtcontainers/factory: support new persist API 71f48a33 virtcontainers/persist: update GetDriver to support rootless fs dd2762fd virtcontainers/persist: introduce mock fs driver ea8fb96c virtcontainers/persist: introduce rootless fs driver 768db1bd virtcontainers/persist: update API and interface 6be74811 virtcontainers: remove getVMPath method from agent 658f7797 rootless: move pkg/rootless to virtcontainers 83561c4c ci: Do not setup virtcontainers while using podman 22c486aa CI: update yq to 3.1.0 5c3bcd88 dep: Fix dep check 836e3c21 clh: update to v0.5.0 b602e62a docs: README: Minor grammatical updates 7498978c Vendor: update agent client 27d9e433 FC: update Firecracker to v0.20.0 bb41b724 qemu: Support PCIe device hotplug for q35 fa7d00ec vendor: update github.com/intel/govmm b2fb86f3 virtcontainers: clh: Set the serial to NULL instead of OFF 35948550 s390x: fix refactoring 96a49a89 AArch64: arm ci failed on stale Gopkg.lock. 9bf4b859 AArch64: fix golint error on ARM CI. 2560e65e versions: bump conmon version to v2.0.5 693ad238 virtcontainers: Fix error message in mockHypervisor 4a77b0f8 rootless: use libcontainer API to detect rootless c5d79eb2 ipv6: Add support for ipv6 for netmon as well. b169476b ipv6: Add support for ipv6 c26ce186 vendor: update agent client 01a12b00 qemu: Add virtio-mem support b3374289 vendor: Update github.com/intel/govmm c3cf98ac virtcontainers: constrain docker container when sandbox_cgroup_only=true 54482f18 virtcontainers: remove json cgroups struct tag 316b5f2b virtcontainers: Fix typo in logger message 1f957e1b vc: Detach device when unable to store sandbox device 7186c01d unit-test: delete what ioutil.TempFile creates 0244d95e unit-test: delete what ioutil.TempDir() creates aa62781a unit-test: reconstuct TestMain d042d5c0 virtcontainers: fix unit tests 776da087 virtcontainers/hook: fix HookState f372b858 virtcontainers: reimplement setupSandboxCgroup 9949daf4 virtcontainers: move validCgroupPath ce2795e9 virtcontainers: remove systemd paramenter from constraintGRPCSpec 8c63c180 virtcontainers: add function to create a new cgroup manager 8057cd72 virtcontainers: add function to identify systemd cgroup path 4126968b virtcontainers: save CgroupPaths and Cgroups in sandbox a170d00b vendor: update agent 112f90b7 vendor: update golang/x/sys 4a1dc1ee vendor: update libcontainer 908a42a4 vendor: update logrus 290339da compatibility: keep oldstore for compatibility 4a298cb9 persist: address comments d33b154d persist: add interface for global read/write ed4a1954 persist: remove unused struct 8e88859e persist: remove all usage of VCStore 01b4a64b persist: remove VCStore from sandbox/apis b63e517f persist: replace sandbox lock with newstore.Lock 508101bc persist: fix vmtemplate storage leak 29b55ab8 persist: remove VCStore from container 633748aa persist: remove VCStore from hypervisor 687f2dbe persist: move "newstore" out of experimental 0af48197 versions: update qemu to 4.1.1 09198eed FC: jailer failed when importing new flag "--config-file" 3ed472dc store: UT tmp path should be random 56171206 nsenter: skip ut on non-root e5b04a5b ut: fs test should set RunStoragePath 9bf0d67f ut: direct factory needs to set VCStorePrefix 4c35d091 vc: set store RunVMStoragePath for ut 3deb24e5 cli: flush coverage report in defer function f56d70cc vc: UT should set VCStorePrefix 7c7a4a3b annotations: add disable_image_nvdimm 652bb76d cli: syscall return value check is wrong a8717286 qemu: add disalbe_image_nvdimm option dd5b4469 qemu: refactor appendImage a2d3f9f3 vitiofsd: Add virtiofsd interaface 2a085ee6 clh: virtiofsd: check path is not empty af5c9c23 clh: hypervisor: Do not set 9p values for virtiofs 6a10cd96 clh: test: add unit test 8a439eab clh: add Client Interface and bootVM test 661956f5 versions: Update cloud hypervisor url b96c7e5a rootless: fix rootless for case net=none a215f87e vendor: Update github.com/kata-containers/agent to handle hvsock issue 1c11fe20 shimv2: support runtime config path via annotation 6eae033f shimv2: cleanup container if not found 743309cd vc: stop container should change container state at last 6cd9b3b0 vendor: Update golang.org/x/sys 9c3151e5 clh: remove not requried values e9a852dd clh: update api calls for latest master 1a7539c1 clh: update client 55323788 versions: update clh to v0.4.0 837a0ee0 cache-factory: set bridge info when creating vm 3d8ffe41 cache-factory: fix nil pointer runtime panic 8f6d0ab1 FC: introduce --config-file to replace API configure request f2d8d715 FC: func checkVersion should be more independent 9ce21135 FC: remove API Ready state efb611aa clh: client: update acording to versions.yaml 9a154570 vc: Check error return from storeState ab2088f7 makefile: honor virtiofs config for default config cc25216b virtiofs: add default value for virtioFsCache type.

shim Changes

FIXME - message this section by hand to produce a summary please

Shortlog

a6e93df release: Kata Containers 1.11.0 157eb5a release: Kata Containers 1.11.0-rc0 3d4166a vendor: Update kata agent to 5bf8d4cc461 6153de8 vendor: Update logrus to v1.4.2 21a5451 travis: specify golang version. 298a4d8 make: Add support to strip the binary 488bbaf release: Kata Containers 1.11.0-alpha1 5723a04 release: Kata Containers 1.11.0-alpha0 f299e2c Makefile: overwrite PREFIX from environment

Compatibility with Docker

Kata Containers 1.11.0 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.11.0 is compatible with CRI-O 0eec454168e381e460b3d6de07bf50bfd9b0d082

Compatibility with cri-containerd

Kata Containers 1.11.0 is compatible with cri-contaienrd 3a4acfbc99aa976849f51a8edd4af20ead51d8d7

OCI Runtime Specification

Kata Containers 1.11.0 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 1.11.0 is compatible with Kubernetes 1.17.3-00

Kata Linux Containers image

Agent version: 1.11.0

Default Image Guest OS:

description: | Root filesystem disk image used to boot the guest virtual machine. url: "https://github.com/kata-containers/osbuilder" architecture: aarch64: name: "ubuntu" version: "latest" ppc64le: name: "centos" version: "latest" s390x: name: "ubuntu" version: "latest" x86_64: name: "clearlinux" version: "latest" meta: image-type: "clearlinux"

Default Initrd Guest OS:

description: | Root filesystem initrd used to boot the guest virtual machine. url: "https://github.com/kata-containers/osbuilder" architecture: aarch64: name: "alpine" version: "3.7" ppc64le: name: "alpine" version: "3.7" s390x: name: "alpine" version: "3.7" x86_64: name: "alpine" version: "3.7"

Kata Linux Containers Kernel

Kata Containers 1.11.0 suggest to use the Linux kernel v5.4.32 See the kernel suggested Guest Kernel patches See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions.

Issues & limitations

More information Limitations

1.10.4

4 years ago

agent Changes

Shortlog

443860e release: Kata Containers 1.10.4

proxy Changes

Shortlog

e6c5c6a release: Kata Containers 1.10.4

runtime Changes

Shortlog

7693e93b release: Kata Containers 1.10.4

shim Changes

Shortlog

9c47855 release: Kata Containers 1.10.4

Compatibility with Docker

Kata Containers 1.10.4 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.10.4 is compatible with CRI-O 0eec454168e381e460b3d6de07bf50bfd9b0d082

Compatibility with cri-containerd

Kata Containers 1.10.4 is compatible with cri-contaienrd 3a4acfbc99aa976849f51a8edd4af20ead51d8d7

OCI Runtime Specification

Kata Containers 1.10.4 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 1.10.4 is compatible with Kubernetes 1.16.2-00

Kata Linux Containers image

Agent version: 1.10.4

Default Image Guest OS:

description: | Root filesystem disk image used to boot the guest virtual machine. url: "https://github.com/kata-containers/osbuilder" architecture: aarch64: name: "fedora" version: "latest" ppc64le: name: "centos" version: "latest" s390x: name: "ubuntu" version: "latest" x86_64: name: "clearlinux" version: "latest" meta: image-type: "clearlinux"

Default Initrd Guest OS:

description: | Root filesystem initrd used to boot the guest virtual machine. url: "https://github.com/kata-containers/osbuilder" architecture: aarch64: name: "alpine" version: "3.7" ppc64le: name: "alpine" version: "3.7" s390x: name: "alpine" version: "3.7" x86_64: name: "alpine" version: "3.7"

Kata Linux Containers Kernel

Kata Containers 1.10.4 suggest to use the Linux kernel v4.19.86 See the kernel suggested Guest Kernel patches See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions.

Issues & limitations

More information Limitations

1.11.0-rc0

4 years ago

Highlights for this rc0 release include:

  • Add SELinux support for running VM Confinement
  • Make SELinux support configurable
  • cloud-hypervisor: Boot from persistent memory device
  • Different virtiofs fixes
  • Kernel updated to LTS 5.4.32

agent Changes

Shortlog

27490d4 release: Kata Containers 1.11.0-rc0 305c6f9 protocols: fix client unit tests for go 1.13 6cbeed5 mount: Use "virtiofs" instead of "virtio_fs" cfc96dd build: Add support to strip the agent golang binary 7c0a967 agent: signal from keyboard must not be fatal 8325ad8 agent: fix epoll fd left in the kata-agent when exec process

proxy Changes

Shortlog

9412389 release: Kata Containers 1.11.0-rc0 32085dd travis: specify golang version

runtime Changes

Shortlog

21711eea release: Kata Containers 1.11.0-rc0 d78ffd65 makefile: Make SELinux support configurable 7aa31685 clh: Boot from persistent memory device e8fc25a7 version: Update clh to master 8c850d9e config: Add scsi_mod.scan=none for virtio-scsi bf9758bf katautils: Use config paths set during the build 07d0a4f0 version: Update kernel to lts 5.4.32 432f9bea clh: virtiofs: Add no_posix_lock option ab8050c5 kata_agent: Don't use dax if virtio_fs_cache is 0 6218b2a5 kata_agent: Remove sharedDirVirtioFSOptions 95ccc0f7 agent: Use "virtiofs" instead of "virtio_fs" 4c1cacd3 versions: Switch to virtio-fs-dev branch for kernel 8e0f891e v2: Open log fifo with RDWR instead of WRONLY afbd03cf qemu-ppc64le: Switch off large decrementer capability 0294fcb9 versions: Update go to 1.13.9 5eec8bdf qemu_ppc64le: EXpose fs support explicitly fd625b3f qemu: Don't crash if virtiofsd path is non existent e4eb553d virtcontainers: Add SELinux support for running VM Confinement 39e354f6 clh: Implement capabilities 0a1ffc1d types: Make FS sharing disable by default 4d034b1e versions: update go to v1.14 7997218c Makefile: Allow change default hypervisor via env var 669b6e32 clh: Report warning when requested vCPUs exceeds maxVCPU allowed aab82f67 clh: Add memory hotplug 2f948738 clh: Use MemUnit to create VM b6a7d8d6 utils: Add memory unit abstraction 5e7d2538 clh: add vmInfo method ebb8fd57 versions: Update clh to latest master 3b53114a virtcontainers: improve algorithm to check Large bar devices 7aff5466 virtcontainers: check PCI resource format before using it 2c310fec virtcontainers: handle persistent memory volumes 434b3025 virtcontainers: hotplug block drives that are pmem devices as nvdimm 84e0ee13 virtcontainers: reimplement createBlockDevices abbdf078 virtcontainers: add Pmem attribute to BlockDrive ee941e5c virtcontainers: Implement function to get the pmem DeviceInfo 9ff44dba virtcontainers: implement function to get the backing file 0a4e2edc virtcontainers: move GetDevicePathAndFsType to utils_linux 2c7f27ec vendor: update govmm e62a8aa9 versions: Update containerd commit 4d2574a7 virtcontainers: Don't create vfio devices in the guest d0a730c6 shimv2: move container rootfs mounted flag to container level d60902a9 FC: change minimum supported version of Firecracker to v0.21.1 aadf8c4a AArch64: enable firecracker v0.21.1 on AArch64 44e23493 FC: Fix error of overlong firecracker API unix socket c3bafd57 FC: Change default API socket path 2945bcd7 FC: Removed redundant --seccomp-level jailer parameter d2cae59e FC: Removed redundant RescanBlockDevice action 37b91b33 FC: Remove logger.options f61eca89 clh: Add comments around clh api 6a4e667f virtiofsd: Check if PID is valid 3251beaa version: Update clh to master c5184641 clh: Add vfio support

shim Changes

Shortlog

157eb5a release: Kata Containers 1.11.0-rc0 3d4166a vendor: Update kata agent to 5bf8d4cc461 6153de8 vendor: Update logrus to v1.4.2 21a5451 travis: specify golang version.

Compatibility with Docker

Kata Containers 1.11.0-rc0 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.11.0-rc0 is compatible with CRI-O 0eec454168e381e460b3d6de07bf50bfd9b0d082

Compatibility with cri-containerd

Kata Containers 1.11.0-rc0 is compatible with cri-contaienrd 3a4acfbc99aa976849f51a8edd4af20ead51d8d7

OCI Runtime Specification

Kata Containers 1.11.0-rc0 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 1.11.0-rc0 is compatible with Kubernetes 1.17.3-00

Kata Linux Containers image

Agent version: 1.11.0-rc0

Default Image Guest OS:

description: | Root filesystem disk image used to boot the guest virtual machine. url: "https://github.com/kata-containers/osbuilder" architecture: aarch64: name: "ubuntu" version: "latest" ppc64le: name: "centos" version: "latest" s390x: name: "ubuntu" version: "latest" x86_64: name: &default-image-name "clearlinux" version: "latest" meta: image-type: *default-image-name

Default Initrd Guest OS:

description: | Root filesystem initrd used to boot the guest virtual machine. url: "https://github.com/kata-containers/osbuilder" architecture: aarch64: name: &default-initrd-name "alpine" version: &default-initrd-version "3.7" ppc64le: name: *default-initrd-name version: *default-initrd-version s390x: name: *default-initrd-name version: *default-initrd-version x86_64: name: *default-initrd-name version: *default-initrd-version

Kata Linux Containers Kernel

Kata Containers 1.11.0-rc0 suggest to use the Linux kernel v5.4.32 See the kernel suggested Guest Kernel patches See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions.

Issues & limitations

More information Limitations

1.10.3

4 years ago