kata-containers Changes

This is the ONLY version of Kata Containers 3.1.x that should be used in production. Previous versions had an issue with the guest image that's only been fixed as part of this release.

Shortlog

100e9c4dd gha: release: Use a specific release of hub 956368e16 kata-deploy: Change how we get the Ubuntu k8s key 447f36801 kata-deploy: Improve shim backup / restore 46bc1f76a kata-deploy: Use apt-key.gpg from k8s.io 984addfea kata-deploy: Do not ship the kata tarball d39aeff8a kata-deploy: Ensure node is ready after CRI Engine restart 56de5b679 kata-deploy: fix install failing to chmod runtime-rs/bin/* 9de3cf405 kata-deploy: Switch to using an ubuntu image 3c02758c2 release: Kata Containers 3.1.3 a43f10beb release: Adapt kata-deploy for 3.1.3 993ecec93 virtiofsd: Convert legacy -o sub-options to their -- replacement 2e9125c32 virtiofsd: Drop -o no_posix_lock 407727e1f virtiofsd: Stop using deprecated -f option 6668ddb8b versions: Use ubuntu as the default distro for the rootfs-image 075a31128 runtime: sending SIGKILL to qemu

Compatibility with CRI-O

Kata Containers 3.1.3 is compatible with CRI-O

Compatibility with containerd

Kata Containers 3.1.3 is compatible with contaienrd v1.6.8

OCI Runtime Specification

Kata Containers 3.1.3 support the OCI Runtime Specification v1.0.2

Compatibility with Kubernetes

Kata Containers 3.1.3 is compatible with Kubernetes 1.23.1-00

Libseccomp Notices

The kata-agent binaries inside the Kata Containers images provided with this release are statically linked with the following GNU LGPL-2.1 licensed libseccomp library.

• libseccomp

The kata-agent uses the libseccomp v2.5.4 which is not modified from the upstream version. However, in order to comply with the LGPL-2.1 (§6(a)), we attach the complete source code for the library.

If you want to use the kata-agent which is not statically linked with the library, you can build a custom kata-agent that does not use the library from sources. For the details, please check the developer guide.

Kata Linux Containers image

Agent version: 3.1.3

Default Image Guest OS:

description: | Root filesystem disk image used to boot the guest virtual machine. url: "https://github.com/kata-containers/kata-containers/tools/osbuilder" architecture: aarch64: name: "ubuntu" version: "latest" ppc64le: name: "ubuntu" version: "latest" s390x: name: "ubuntu" version: "latest" x86_64: name: "ubuntu" version: "latest" meta: image-type: "ubuntu"

Default Initrd Guest OS:

description: | Root filesystem initrd used to boot the guest virtual machine. url: "https://github.com/kata-containers/kata-containers/tools/osbuilder" architecture: aarch64: name: "alpine" version: "3.15"

Do not use Alpine on ppc64le & s390x, the agent cannot use musl because

there is no such Rust target

ppc64le: name: "ubuntu" version: "20.04" s390x: name: "ubuntu" version: "20.04" x86_64: name: "alpine" version: "3.15"

Kata Linux Containers Kernel

Kata Containers 3.1.3 suggest to use the Linux kernel v5.19.2 See the kernel suggested Guest Kernel patches See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions.

Issues & limitations

More information Limitations